Security Directory

G

GreyCortex s.r.o.

greycortex.com

71

GreyCortex s.r.o. is a Czech Republic-based cybersecurity company specializing in network detection and response solutions for IT and OT networks. Their flagship product, GREYCORTEX Mendel, leverages AI and machine learning to provide deep network visibility, advanced threat detection, and automated incident response. The company serves a diverse range of sectors including government, energy, banking, healthcare, manufacturing, and education, positioning itself as a trusted provider in the cybersecurity market. The website reflects a professional and mature business with clear branding, comprehensive content, and strong trust indicators such as ISO 27001 certification and customer testimonials. Technically, the website is built on Drupal CMS with modern web technologies including jQuery and Google Tag Manager for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility. Hosting and DNS services are provided by reputable providers including WEDOS Internet and Cloudflare. Security best practices are observed with HTTPS enforced and cookie consent mechanisms implemented, although some security headers could be improved and DNSSEC is not enabled. From a security posture perspective, the website shows no signs of vulnerabilities or exposed sensitive data. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner aligned with GDPR requirements. However, the absence of a terms of service page and explicit incident response contact or vulnerability disclosure policy are minor gaps. Overall, the domain registration data is consistent with the business claims, supporting the legitimacy and trustworthiness of the company. The overall risk assessment is low with no critical issues detected. Strategic recommendations include enabling DNSSEC, adding security headers, publishing terms of service and incident response information to enhance transparency and trust. The website and company demonstrate a solid security culture and digital maturity appropriate for their market position.

Antesto s.r.o. operates the INFINEO platform, a Czech Republic-based SaaS web application designed for financial advisors to create tailored financial analyses and manage client data efficiently. The platform emphasizes independence from financial institutions, offering objective financial planning tools accessible via any internet-connected device. INFINEO targets individual advisors and firms, providing customization options and API integrations to meet diverse client needs. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site features responsive design optimized for mobile devices, ensuring accessibility and usability across platforms. However, some security headers are missing, and privacy compliance elements such as cookie consent and privacy policies are not evident. From a security perspective, the site uses HTTPS with a strong SSL certificate, ensuring encrypted data transmission. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, but the website content and company information appear professional and trustworthy. Strategic improvements include adding privacy and cookie policies, security headers, and incident response information to enhance compliance and security posture.

A

Aktyvių piliečių fondas

apf.lt

39

Aktyvių piliečių fondas (APF) is a Lithuanian non-profit organization focused on strengthening civil society by providing funding and support to civil society organizations and projects. Supported by the EEA and Norway Grants, APF operates as a grant fund with a clear mission to empower vulnerable groups and promote active citizenship in Lithuania. The website is professionally designed using WordPress, featuring multilingual support and comprehensive content about funding opportunities, project results, and training events. The technical infrastructure includes modern web technologies and analytics tools, ensuring good performance and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, APF presents a trustworthy and credible online presence aligned with its non-profit mission.

The domain vilnius.lt is a long-established website likely representing the official city government of Vilnius, Lithuania. However, the provided HTML content is a Cloudflare security challenge page that blocks access to the actual website content, preventing detailed analysis of business, privacy, or security policies. The domain registration data is consistent with a legitimate Lithuanian entity, and the use of Cloudflare indicates a focus on security and performance. Due to the access block, no direct content or contact information is available for review. The security posture cannot be fully assessed beyond the presence of Cloudflare's Turnstile captcha and CDN services.

K

Kauno klinikos

kaunoklinikos.lt

45

Kauno klinikos is a prominent Lithuanian healthcare institution offering a broad spectrum of medical services including surgeries, diagnostics, emergency care, and specialized clinics. The website reflects a well-established enterprise with a large patient base and extensive medical staff. It serves patients, healthcare professionals, and researchers with multilingual support and comprehensive patient resources. The institution is linked to academic and governmental partners, reinforcing its market position as a leading healthcare provider in Lithuania. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, FontAwesome, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized with good navigation and content quality. However, some security best practices like security headers and vulnerability disclosure are missing, indicating room for improvement in security posture. Security-wise, the site uses HTTPS and implements Google reCAPTCHA on forms, demonstrating basic security hygiene. The absence of explicit security policies and security headers suggests moderate security maturity. No WAF or blocking mechanisms were detected, and WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the security and compliance posture further.

VšĮ Respublikinė Panevėžio ligoninė is a well-established public healthcare institution in Lithuania, founded in 2007. It provides a broad range of medical services including consultations, diagnostics, treatment, and rehabilitation, serving patients primarily in the Panevėžys region. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and extensive patient education resources. The institution maintains active communication channels including email, phone, and social media platforms, enhancing accessibility and engagement with its audience. The business model is focused on public healthcare service delivery, supported by government and healthcare partners.

V

VšĮ Vilniaus universiteto ligoninė Santaros klinikos

santa.lt

43

VšĮ Vilniaus universiteto ligoninė Santaros klinikos is a leading university hospital in Lithuania providing comprehensive healthcare services including emergency care, specialist consultations, pediatric and adult treatments, and biomedical research. The institution is well-established with a founding date of 1998 and maintains a strong online presence with professional content and clear patient-oriented information. The website demonstrates a moderate to high level of digital maturity, utilizing modern web technologies such as jQuery, Swiper.js, and Google reCAPTCHA to enhance user experience and security. Privacy and cookie policies are clearly presented and GDPR compliant, reflecting a commitment to data protection. Security posture is good with HTTPS enforced and bot protection in place, though some security headers are missing and no explicit vulnerability disclosure or incident response contacts are published. Overall, the website is trustworthy, professional, and safe for general audiences, supporting the hospital's mission and services effectively.

BIOK laboratorija is the largest cosmetics manufacturer in Lithuania, managing multiple well-known brands such as Margarita, Ecodenta, and Kilig. Founded in 1991, the company produces over 250 different cosmetic and personal care products, emphasizing natural ingredients and innovation. The website reflects a professional and consistent brand image, targeting general consumers interested in cosmetics and personal care products. Technically, the site uses a mix of legacy and modern web technologies including jQuery, Google Analytics, Facebook SDK, and reCAPTCHA for security. The site is mobile-optimized and includes privacy and cookie policies with consent mechanisms, indicating good compliance with GDPR requirements. Security posture is solid with HTTPS and form protections, but lacks some security headers and explicit security policies. WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional but could improve in security and compliance documentation.

The website lrp.lt is currently inaccessible due to a Cloudflare WAF security challenge page that blocks direct content access. The domain is registered to a Lithuanian telecommunications entity since 1999, indicating a legitimate and long-standing registration. However, no business content, contact information, or policies are accessible for detailed analysis. The technical infrastructure relies on Cloudflare services including Turnstile CAPTCHA for bot mitigation. Due to the blocking, the website's content quality, privacy compliance, and business credibility cannot be fully assessed. Security posture is partially observable through the presence of Cloudflare's WAF, but no additional security headers or policies are visible.

The website palanga.lt is currently inaccessible due to a Cloudflare security challenge page that blocks direct access to its content. The domain is registered since 1999 under a Lithuanian state telecommunications registrar, indicating a legitimate and long-standing presence. However, no business, contact, or policy information is accessible from the provided HTML content. The technical infrastructure includes Cloudflare's Turnstile captcha for bot mitigation, but no further technology or CMS details are available. Security posture cannot be fully assessed due to the blocking mechanism, but the use of Cloudflare suggests a baseline security measure. Overall, the site cannot be fully evaluated until the WAF challenge is passed.

V

VšĮ Mediapressa

nestumokalendorius.lt

37

The website nestumokalendorius.lt represents a Lithuanian non-profit organization, VšĮ Mediapressa, focused on providing educational print and digital materials for pregnant women and new parents. The site offers free and purchasable publications, collaborates with healthcare providers, and supports parental education initiatives. The business is well-established with a domain age consistent with its history and partnerships with notable Lithuanian healthcare entities. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and some security headers, but lacks explicit privacy and cookie policies, which are compliance gaps. Overall, the site is trustworthy, professionally maintained, and serves a clear educational mission.

H

HOSTINGER operations, UAB

auginulietuva.lt

42

Auginu Lietuvą is a Lithuanian national educational initiative providing a multimedia learning platform focused on pregnancy, childbirth, and newborn care. The platform offers scientifically based information and expert advice aimed at strengthening parenting skills. It targets parents and families in Lithuania and distributes content via a website and mobile applications on Android and iOS. The project is relatively new, founded in 2022, and hosted by HOSTINGER operations, UAB. Technically, the website uses modern web technologies including Vue.js, Google reCAPTCHA v3, and integrates social media SDKs for Facebook and Apple Sign-In. The platform is mobile-optimized and provides a good user experience with clear navigation and multimedia content. Hosting is stable and the domain registration is consistent with the business timeline. From a security perspective, HTTPS is enforced and bot protection via reCAPTCHA is implemented. However, the site lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected. Contact information is clearly provided, but no formal security or incident response policies are published. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security headers would enhance the platform's security posture and regulatory adherence.

M

Morka Labs

morkalabs.com

52

Morka Labs is a Lithuanian-based small web development agency specializing in creating websites and digital solutions with a focus on programming and unique design. The company has been operating since 2015 and presents a professional online presence with a portfolio showcasing diverse client projects. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and Contact Form 7, and integrates Google Analytics and reCAPTCHA for analytics and security. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service were found. Security practices include HTTPS and CAPTCHA protection, but the absence of DNSSEC and security headers indicates room for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

I

iFuture

ifuture.lt

10

iFuture is a Lithuanian-based company focused on smart investing, operating a website primarily in Lithuanian. The website presents itself as an information and service provider in the investment domain, targeting a general audience interested in financial topics. The business appears to be small-sized and was founded around 2018, consistent with domain registration data. The website uses WordPress CMS with popular plugins for SEO, marketing, and cookie consent management, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and integrations with MailerLite for marketing and Google Analytics and Facebook Pixel for analytics and advertising. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and documented security policies. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is partially addressed through Cookiebot consent mechanisms, but no explicit privacy policy or terms of service pages were found in the analyzed content. Overall, the website is professional and trustworthy with room for improvement in privacy documentation and security hardening.

B

Bókafélagið

bokafelagid.is

10

Bókafélagið operates as a specialized book publishing and retail company based in Iceland, offering a diverse catalog of books including children's books, cookbooks, biographies, poetry, and historical literature. The company leverages the Shopify e-commerce platform to provide a modern, user-friendly online shopping experience. Their market position is that of a progressive and comprehensive book publisher catering primarily to Icelandic readers. Technically, the website is well-structured, mobile-optimized, and integrates standard analytics and marketing tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS enforcement and hCaptcha for form protection, indicating a solid security posture. However, the absence of explicit privacy and cookie policies, as well as direct contact information, suggests areas for compliance and trust improvement. Overall, the website presents a professional and trustworthy front for its business operations.

S

Stafrænt Ísland

island.is

11

Ísland.is is the official digital service portal for public entities in Iceland, providing citizens and businesses with centralized access to a wide range of government services and information. Established in 2002, it serves as the primary gateway for digital public services, offering life event management, user account services, and comprehensive information about various public sectors. The website is well-branded with consistent government identity and targets Icelandic residents and businesses seeking official services online. Technically, the site leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and secure form practices, though some security headers are missing and cookie consent mechanisms are not implemented. Privacy policies are comprehensive and GDPR compliant, and minimal user tracking is performed via privacy-focused analytics. Overall, the domain registration and WHOIS data confirm the site's legitimacy as a government service portal. Strategic improvements include enhancing security headers, adding cookie consent, and publishing incident response contacts to further strengthen trust and compliance.

W

Weleda AG

weleda.de

11

Weleda AG is a well-established company specializing in natural cosmetics and health products, operating a comprehensive e-commerce platform targeting consumers interested in organic and sustainable personal care. The website demonstrates a high level of digital maturity, employing modern frameworks such as Vue.js and Nuxt.js, and integrates industry-standard tools for analytics and cookie consent. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive user experience and brand reputation.

The website wldgr.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. The domain is very recently registered (June 19, 2024) via RegistryGate GmbH and lacks DNSSEC and security headers, indicating a low maturity technical infrastructure. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the site. This severely limits the ability to assess the business or security posture. The lack of HTTPS and security best practices further reduces trust and increases risk. Overall, the site appears to be either under development or intentionally restricted, resulting in a very low AI trust and quality score.

W

Windway OÜ

kodulehetegemine.net

10

Windway OÜ operates the website kodulehetegemine.net, providing website creation, e-commerce development, SEO, and digital marketing services primarily targeting Estonian businesses and individuals. The company has been established since 2013 and maintains a professional online presence with over 100 satisfied clients, as evidenced by testimonials and client logos. The website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a moderate level of digital maturity and technical infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the website uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy or cookie policies are present, representing a compliance gap with GDPR and related regulations. Google Analytics is used for user tracking, but no explicit cookie consent mechanism is implemented. Overall, the website is functional, professional, and trustworthy, but improvements in security hardening and privacy compliance are advised to reduce risk and enhance user trust. The domain registration data aligns well with the business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

MTÜ Eesti Bioanalüütikute Ühing is a well-established non-profit organization founded in 1992, serving bioanalysts and healthcare laboratory professionals in Estonia. The organization provides professional training, certification, and promotes international cooperation, holding memberships in recognized international bodies such as IFBLS and EPBS. The website reflects a professional and focused presence with relevant content and event announcements, targeting healthcare professionals and students in the bioanalysis field. Technically, the website is built using a Sitebuilder CMS with JavaScript and jQuery, hosted by Radicenter OÜ. It uses Google Fonts for typography and has moderate performance and good mobile optimization. However, it lacks advanced technical frameworks and accessibility features, and SEO optimization is basic. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and published security policies. There is no privacy or cookie policy, nor incident response or vulnerability disclosure information, which are compliance gaps. The domain is secured with HTTPS (assumed from base href), but no explicit SSL configuration details were found. The WHOIS data shows a consistent and long-standing domain registration with a reputable registrar, supporting legitimacy. Overall, the website is professional and trustworthy for its niche audience but would benefit from improved privacy compliance, security best practices, and enhanced technical features to strengthen its security posture and user trust.

T

TARTU VEEKESKUS OÜ

aurakeskus.ee

10

Aura Keskus is a well-established water and sauna center located in Tartu, Estonia, founded in 2010. The company offers a variety of leisure and wellness services including saunas, water park attractions, swimming pools, and training sessions for all ages. The website targets families and general audiences seeking recreational water experiences. The business operates regionally with a medium-sized footprint and maintains a consistent brand presence online, including social media engagement and a newsletter subscription option. Technically, the website is built on the Greativ CMS platform and employs modern JavaScript libraries and asynchronous loading techniques to optimize performance and user experience. The site is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms with categorized options, though it lacks explicit security headers and published incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy.

Eesti Operatsiooniõdede Ühing is a voluntary and independent national association dedicated to the development of perioperative nursing in Estonia. The organization focuses on professional development through training days, conferences, and representing perioperative nurses. The website reflects a small-sized non-profit entity with a clear mission and target audience within the healthcare sector in Estonia. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, providing a modern and mobile-optimized experience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

I

IngenCO2.dk

co2neutralwebsite.com

60

CO2 Neutral Website, operated by IngenCO2.dk, offers a specialized service enabling website owners to certify their websites as carbon neutral by offsetting the CO2 emissions generated by their web traffic. The company leverages Gold Standard certified global projects to finance renewable energy and carbon reduction initiatives, enhancing the sustainability profile of its clients. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Next.js and Google Analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and reCAPTCHA integration, although explicit security policies and incident response details are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business credibility remains high due to transparent certifications and audit declarations.

T

Textereien Manuela Reich

textereien.ch

45

Textereien Manuela Reich is a small Swiss-based professional text and content creation service provider specializing in website content, print materials, proofreading, and consulting. The business emphasizes personalized service, creativity, and quality, targeting individuals and businesses needing professional writing support. The website is well-structured, professionally designed, and provides clear contact information and a comprehensive privacy policy, reflecting a mature digital presence. Technically, the site uses standard modern web technologies including HTML5, CSS3, jQuery, and Modernizr, hosted by a reputable Swiss provider. Security posture is moderate with some best practices observed such as CAPTCHA on the contact form and detailed privacy disclosures, but lacks visible security headers and cookie consent mechanisms. No vulnerabilities or suspicious elements were detected. Overall, the site is trustworthy and professional, with room for improvement in security hardening and privacy transparency.

The website dn20.de is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, metadata, or technical details could be extracted from the site. The domain is registered with standard GoDaddy name servers and shows no signs of privacy protection or suspicious WHOIS patterns, but the lack of accessible content limits trust and credibility assessments. Technically, the site lacks visible security headers, privacy policies, or contact information, indicating poor digital maturity and security posture. Overall, the site appears to be either under maintenance, misconfigured, or intentionally restricted, resulting in a very low AI score and inability to perform a comprehensive analysis.

X

xpecto AG

xpecto.de

71

xpecto AG is a German software company specializing in digital solutions for managing real assets and financial products such as bonds, subordinated loans, ELTIFs, AIFs, tokenized securities, and derivatives. Established since 1982, the company positions itself as a leading provider in the niche market of real asset management software, serving over 150 client companies with 40 years of market experience. Their offerings include modules for investor and sales management, controlling, reporting, risk management, asset and portfolio management, and digital portals for investors and sales partners. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence.