Security Directory

S

Scandagra

scandagra.lv

53

Scandagra Latvia operates as a regional agricultural company specializing in the supply of agricultural raw materials and grain procurement services, including conventional and organic grains. The company targets Latvian farmers and agricultural businesses, positioning itself as a knowledgeable and experienced partner with over 15 years in the market. The website reflects a professional digital presence built on WordPress, integrating modern web technologies such as Google Analytics and Tag Manager for performance and marketing insights. The site is well-structured, mobile-optimized, and SEO-friendly, supporting effective user engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy and cookie policies are lacking. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website demonstrates a credible and professional business presence in the Latvian agricultural sector.

L

Lokalise Inc.

lokalise.co

65

Lokalise Inc. operates a SaaS localization and translation management platform designed to integrate seamlessly into software development workflows, enabling faster delivery of localized products. The company is positioned as a user-friendly solution targeting developers, product teams, and localization managers. Founded in 2016 and based in the USA, Lokalise maintains a medium-sized business profile with a consistent brand presence and good content quality on its website. Technically, the website leverages modern JavaScript technologies, including Google Tag Manager, Visual Website Optimizer, and OneTrust for cookie consent management. Hosting is provided via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site demonstrates good mobile optimization and basic accessibility features, with SEO best practices implemented through meta tags and structured data. From a security perspective, the website employs HTTPS and domain transfer protection, but lacks DNSSEC and explicit security headers. No published security policies or incident response contacts were found, indicating room for improvement in transparency and security governance. Privacy compliance is partially addressed through cookie consent mechanisms, but the absence of a visible privacy policy and terms of service reduces compliance confidence. Overall, Lokalise presents a credible and professional online presence with moderate security posture and technical maturity. Strategic enhancements in privacy documentation, security policy publication, and DNS security would strengthen trust and compliance.

S

SIA Graphic.lv

graphic.lv

46

Graphic.lv is a Latvian advertising agency specializing in visual advertising materials for both print and digital use. Their services include graphic design, photography, video production, website creation, and digital marketing activities. The company targets businesses and individuals seeking professional advertising and creative services. The website is built on WordPress using the Elementor framework, featuring modern design and good mobile optimization. Social media integration and structured data enhance their digital presence. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy page found. Overall, the site reflects a legitimate small business with a professional online presence.

B

BANKEX

bankex.com

55

BANKEX operates as a digital asset banking platform aiming to unlock liquidity for asset holders by providing banking and securitization services tailored to digital assets. The platform targets investors and financial institutions seeking to leverage their digital assets for cash access. The website is professionally designed using modern web technologies such as Webflow and Lottie animations, offering a good user experience with mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is adequate with HTTPS enabled but lacks comprehensive security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the platform shows promise but requires improvements in transparency, security disclosures, and compliance documentation to enhance trust and credibility.

T

Task Analytics

taskanalytics.com

66

Task Analytics is a technology company specializing in user task-focused analytics to help businesses understand why users visit their websites, whether they succeed in their tasks, and reasons for failure. Their SaaS platform offers customized on-site surveys and detailed task completion analytics, targeting organizations seeking to improve digital customer experience. The website is professionally designed, mobile-optimized, and uses modern technologies such as Gatsby, React, and Bootstrap. It integrates multiple analytics and marketing tools including Google Analytics, Hotjar, Zoho CRM, and Intercom, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is strong with GDPR adherence and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy, though the professional web presence and GDPR compliance mitigate some risk. Overall, the website scores well on content quality and technical implementation but has room for improvement in business credibility and security transparency.

U

Unlimit

cardpay.com

74

Unlimit is a fintech company providing global payment solutions including payment processing, payouts, business accounts, banking as a service (BaaS), and crypto-related services such as NFTs and GameFi. The company targets businesses seeking borderless payment methods and operates across multiple regions including LATAM, APAC, Africa, Europe/UK, and India. Their digital presence is supported by a WordPress-based website with modern technologies such as Google Tag Manager and CookieYes for cookie consent management. The website is well-structured, multilingual, and integrates various analytics and advertising tracking services, indicating a mature digital marketing strategy. From a security perspective, the website enforces HTTPS and uses Cloudflare Bot Management, but lacks explicit security headers and published security policies. The cookie consent mechanism is comprehensive, supporting GDPR compliance, but no privacy policy or terms of service were detected in the provided content. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding appear professional and consistent with a legitimate fintech business. Overall, the website demonstrates good technical implementation and business credibility but would benefit from enhanced transparency in privacy and security policies, as well as verified domain registration information. Strategic improvements in security headers, incident response disclosures, and contact information would strengthen trust and compliance.

B

Belam

belam.lv

56

Belam-Rīga is a well-established Latvian company specializing in high technology solutions primarily for the transportation sector, with a strong focus on railway systems and infrastructure projects. With over 30 years of experience and more than 1000 completed projects, the company offers comprehensive services from planning and consulting to implementation and ongoing support. Their market position is solid within Latvia and extends internationally through subsidiaries and partnerships. Technically, the website is built on WordPress with modern plugins and demonstrates good SEO, mobile optimization, and user experience. Security posture is strong with HTTPS, cookie consent, and ISO certifications, though some security headers could be improved. The absence of WHOIS domain registration data is a notable concern that should be addressed to ensure full legitimacy. Overall, the company presents a professional and trustworthy digital presence aligned with its business operations.

Resursu Kontroles Grupa is a Latvian energy consulting company specializing in electricity procurement, energy efficiency solutions, ISO 50001 implementation, smart metering, and energy consulting services. The company targets businesses and organizations in Latvia seeking to optimize their energy consumption and procurement strategies. Their website presents a professional image with clear navigation and relevant content tailored to their sector. Technically, the site is built on WordPress using the Avia Framework and employs modern web technologies such as jQuery and CSS. The site is accessible, mobile-optimized, and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which impacts compliance and trust. No WHOIS data was retrievable due to query limits, limiting domain legitimacy verification. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

F

Froli Baltic

froli.lv

44

Froli Baltic is a Latvian manufacturing company specializing in high-quality polyurethane foam products and textile sewing services, primarily serving the German and Scandinavian markets. As a subsidiary of the German Froli GmbH & Co. KG, it leverages over 15 years of industry experience and operates from a strategically located facility in Ventspils Freeport to optimize logistics and raw material supply. The company offers tailored manufacturing solutions for medical, rehabilitation, furniture, automotive, and camping industries, supported by a qualified multilingual workforce and ISO 9001 certification. Technically, the website is built on WordPress with modern optimization techniques such as lazy loading and Autoptimize for performance. It integrates Google Analytics and Tag Manager for visitor insights while implementing a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and presents a professional, user-friendly experience with clear navigation and comprehensive business information. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. However, the absence of WHOIS data limits full domain legitimacy verification. Overall, Froli Baltic demonstrates a solid business and digital presence with good security and privacy practices. Strategic improvements in security headers, incident response transparency, and WHOIS data availability would further enhance trust and compliance.

E

Edurio

edurio.com

57

Edurio is a UK-based education technology company specializing in providing unlimited school surveys and stakeholder feedback tools to schools and multi-academy trusts. Their platform enables educational institutions to gather insights from pupils, parents, and staff, supported by robust national benchmarking data. The company is well-positioned in the UK education sector, trusted by over 150 trusts and 2,000 schools, offering a comprehensive suite of survey templates, national reports, webinars, and resources to support school improvement and wellbeing. Technically, the website is built on WordPress with extensive integration of HubSpot marketing and analytics tools, including forms, messaging, and tracking. The site uses modern JavaScript libraries such as Swiper.js for UI components and is optimized for performance and mobile responsiveness. SEO and accessibility practices are well implemented, with structured data and Open Graph metadata enhancing search engine visibility and social sharing. From a security perspective, the site enforces HTTPS and uses secure HubSpot forms, with a cookie consent mechanism in place. However, there is a lack of explicit security policies, incident response information, and vulnerability disclosure details. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data for the subdomain is unavailable, which is typical, but the main domain's legitimacy is supported by the professional web presence and trust indicators. Overall, Edurio presents a professional, secure, and user-friendly digital presence aligned with its business goals in the education sector. Strategic improvements include publishing comprehensive privacy and security policies and enhancing transparency around data protection and incident response.

The website www.vmsplay.com represents a Chinese company specializing in packaging testing instruments and equipment, founded in 2002. The company offers a range of products including oxygen permeability testers, water vapor transmission testers, and biodegradation testing devices. It holds certifications such as ISO9001:2008 and CNAS accreditation, positioning itself as a significant player in the packaging manufacturing and testing sector in China. The website content is primarily in Chinese and targets packaging industry professionals and research institutions. Technically, the website uses legacy technologies like jQuery 1.4.2 and loads multiple external scripts, some over insecure HTTP connections, which poses security risks. The site lacks modern security headers and does not provide privacy or cookie policies, indicating poor privacy compliance. Contact information is present but no company email addresses are found. The domain WHOIS data is missing, which raises concerns about domain legitimacy and registration status. From a security perspective, the site has moderate security posture but suffers from mixed content issues and lacks essential security headers. No WAF or blocking mechanisms are detected, allowing full content access. The absence of privacy policies and unclear domain registration status are notable vulnerabilities. Overall, the site is functional but requires significant improvements in security and compliance to enhance trustworthiness. Strategically, the company should prioritize securing its domain registration, implementing HTTPS fully, adding privacy and cookie policies, and updating its technology stack to modern standards. These steps will improve both user trust and regulatory compliance.

The website africanarray.co.za is currently a placeholder page reserved for the domain with minimal content and no active business information. The domain is registered to Antonia Hoddinott in South Africa since 2009, indicating a long-standing registration but no visible operational website presence. The site uses a simple JavaScript library (Trianglify.js) to generate a dynamic background pattern but lacks any metadata, business descriptions, or user engagement features. Technically, the site is hosted by xneelo (Pty) Ltd with HTTPS enabled, but no security headers or DNSSEC are configured, which limits its security posture. There are no privacy, cookie, or terms of service policies, nor any contact information or forms, which negatively impacts compliance and user trust. Overall, the site is low in content quality and business credibility, with a moderate technical implementation but poor privacy and security practices.

I

Interact Medical Ltd

interactmedical.co.uk

49

Interact Medical Ltd operates as a specialized medical recruitment agency in the UK, focusing on locum doctors, agency nurses, Allied Health Professionals, and Health Science Services. The company holds awarded supplier status on all national frameworks, positioning itself as a trusted and market-leading provider in healthcare staffing. Their services emphasize compliance, candidate screening, and revalidation support, catering to both NHS and private sector clients. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS and modern analytics tools such as Google Analytics and Facebook Pixel. Security measures include HTTPS and Google reCAPTCHA integration, though some security headers are not explicitly detected. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. WHOIS data is unavailable due to query errors, which slightly impacts trust but is mitigated by the company's visible certifications and framework awards. Overall, the website demonstrates a strong business credibility and technical maturity suitable for its healthcare recruitment niche.

R

REMPRO

rem.lv

54

REMPRO is a well-established company specializing in architecture, engineering, and construction management services, primarily operating in Latvia with international presence. The company emphasizes full-cycle design, construction management, and engineering infrastructure services, supported by a portfolio of over 1000 projects and multiple industry awards. Their website reflects a professional and modern digital presence with multilingual support and clear business information. Technically, the site is built on WordPress with modern analytics and tracking tools integrated, including Google Tag Manager, Google Analytics, Yandex Metrika, and Facebook Pixel. Security posture is generally strong with HTTPS enforced and use of reCAPTCHA on forms, though there is room for improvement in security headers and published security policies. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website and business appear credible and professionally managed, though WHOIS data is unavailable due to query limits, limiting domain registration insights.

L

Latviesi.com

latviesi.com

55

Latviesi.com is an internet media platform aimed at Latvians living outside Latvia, providing useful information and a community communication platform to strengthen Latvian identity globally. The website targets the Latvian diaspora and offers content relevant to daily life, work, study, and travel abroad. The site uses modern web technologies including React and integrates tracking tools such as Google Analytics and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and stability. The website lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts trust and compliance. Security posture is moderate with HTTPS usage but no visible security headers or incident response information.

D

Dailes teātris

dailesteatris.lv

53

Dailes teātris is a prominent Latvian theatre institution providing a rich cultural experience through theatrical performances, artist showcases, and event calendars. The website serves as a comprehensive portal for visitors to explore upcoming shows, purchase tickets, and stay informed about theatre news. The target audience primarily consists of Latvian-speaking theatre enthusiasts and cultural event attendees. The business model revolves around cultural event hosting, ticket sales, subscriptions, and venue rental services. The website reflects a well-established market position within Latvia's cultural sector. From a technical perspective, the website employs a modern technology stack including jQuery, Swiper, LightGallery, and Google reCAPTCHA, ensuring a responsive and interactive user experience. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and use of reCAPTCHA to protect forms. The site includes a cookie consent mechanism aligned with GDPR requirements, and privacy policies are comprehensive and accessible. However, the absence of security headers and a published security or incident response policy indicates areas for improvement. No WHOIS data was available due to query limits, limiting domain legitimacy verification, but the website content and branding strongly suggest a legitimate and trustworthy cultural institution. Overall, the website is professional, user-friendly, and secure, with minor gaps in security policy transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

C

CALAY LTD

fbsb.com

47

The website represents CALAY LTD, formerly known as FBSB PLC and trading as FBS Banking™, specializing in offshore bank account opening services since 1997. The business underwent a trademark acquisition by Tradestone Limited in 2021, with a clear rebranding effort directing former clients to calay.com. The site targets individuals and businesses seeking offshore banking solutions, positioning itself as a niche service provider in the finance sector. The content is basic but communicates the essential business transition and service focus. Technically, the website is built on WordPress using the Divi theme, with common plugins such as Contact Form 7 and a cookie notice plugin. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Google Analytics is installed but not configured, indicating incomplete analytics setup. The site uses HTTPS but lacks visible security headers and DNSSEC, which are areas for improvement. From a security perspective, the domain is well-established with a consistent WHOIS record and no privacy protection, supporting legitimacy. However, the absence of published privacy policies, terms of service, and incident response information reduces compliance and trustworthiness. The cookie consent mechanism is present and functional, but overall privacy compliance is limited. No direct contact information or social media links are provided, which may hinder user trust and engagement. Overall, the website is functional and moderately credible but requires enhancements in privacy compliance, security posture, and content richness to improve user trust and regulatory adherence. Strategic improvements in security headers, policy publication, and analytics configuration are recommended to strengthen the site's digital maturity and risk management.

P

Promega Corporation

promega.com

62

Promega Corporation operates the fi.promega.com subdomain as part of its global online presence, focusing on providing high-value biochemical and molecular biology products for life sciences research. The website targets researchers and professionals in biotechnology and molecular biology, offering a broad range of products including reagents, assay kits, lab equipment, and custom manufacturing services. The company positions itself as a worldwide leader in its sector with a strong emphasis on responsiveness and innovation. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Google reCAPTCHA, and is hosted on Azure CDN, ensuring moderate to good performance and mobile optimization. The site uses Sitecore CMS, indicating a mature content management infrastructure. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, uses CAPTCHA to protect forms, and implements account lockout policies to mitigate brute force attacks. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident in the HTML source, suggesting room for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and aligned with the business goals of Promega Corporation. The lack of WHOIS data for the subdomain is expected and does not detract from legitimacy. Strategic recommendations include enhancing security headers, improving accessibility compliance, and publishing explicit security and incident response policies to further strengthen trust and compliance.

L

La Brosse & Dupont

lbd.fr

42

La Brosse & Dupont is a well-established French company founded in 1998, specializing in the conception, manufacturing, and distribution of daily consumer products sold primarily through large and medium retail outlets. The company holds a strong market position in the retail and manufacturing sectors, emphasizing innovation and sustainability, as evidenced by its PME+ certification and commitment to corporate social responsibility (RSE). Their key services include product design, logistics, and in-store sales force support, targeting retail partners and end consumers. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Matomo Analytics, and cookie consent management via Axeptio. The site is hosted by OVH, a reputable provider, and demonstrates good mobile optimization, accessibility, and SEO practices. Embedded multimedia content and social media integrations enhance user engagement. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection, alongside cookie consent mechanisms. However, it lacks explicit security headers and a published security policy or incident response contacts, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy digital presence with strong business credibility and compliance with privacy regulations. Strategic enhancements in security policy transparency and technical security headers would further strengthen its posture.

L

Latvijas Radio

latvijasradio.lv

58

Latvijas Radio is a well-established public service media broadcaster in Latvia, operating since 1925. It offers multiple radio channels and a broad range of cultural, news, and entertainment content targeting Latvian-speaking audiences. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. The technical infrastructure includes modern web technologies and analytics tools, ensuring a good user experience. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with cookie consent and comprehensive privacy policies. Overall, the site demonstrates high trustworthiness and professionalism consistent with a national public broadcaster.

A

Alphinox

alphinox.com

52

Alphinox appears to be a business entity with an online presence hosted on a WordPress platform, utilizing modern web technologies such as jQuery, Chart.js, and Google Tag Manager. The website includes a cookie consent mechanism powered by Cookiebot, indicating awareness of privacy regulations. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. The website's content is professionally structured with good SEO metadata and mobile optimization, but lacks visible privacy policy, terms of service, and contact information, which are critical for trust and compliance. Security posture is moderate with HTTPS enabled but missing key security headers and explicit security policies.

G

GC Europe N.V.

gceurope.com

79

GC Europe N.V. is a prominent oral health company specializing in supplying high-quality dental products and materials to professionals across Europe. Their product portfolio includes glass ionomer cements, impression and filling materials, modelling gypsum, investments, and advanced light-curing composite and ceramic materials. The company targets dental professionals and operates primarily in the healthcare sector with a B2B business model. The website reflects a professional and consistent brand image, supporting their market position as a leading supplier in the European dental industry. Technically, the website is built on Drupal CMS, leveraging modern tools such as Google Tag Manager and CookiePro for analytics and consent management. The site is mobile-optimized and accessible, with good SEO practices in place. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though explicit privacy policies and terms of service are not found in the analyzed content, indicating room for improvement in compliance transparency. No blocking or WAF challenges were detected, and the WHOIS data is privacy-protected, which is typical for corporate domains. Overall, the website demonstrates a solid digital presence with moderate to good security and privacy posture but would benefit from enhanced policy disclosures and contact transparency.

The website gradient.lv currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The visible page is minimal, showing a redirect countdown and a browser integrity check script, with no accessible business or contact information. The site references very outdated CMS versions (Joomla 1.5 and WordPress 2.5), which raises concerns about the underlying platform's security and maintenance. The only external link is to BitNinja.IO, a security service provider, suggesting some level of security monitoring is in place. WHOIS data could not be retrieved due to query limits, preventing verification of domain registration details and reducing trustworthiness. Overall, the site lacks visible privacy, cookie, or terms of service policies, and no contact information is provided, limiting transparency and compliance visibility.

E

Efectio

efectio.com

60

Efectio is a technology company founded in 2017 that offers an AI-powered SaaS platform designed to enhance employee engagement, motivation, and HR management. The platform targets CEOs and strategic HR leaders, providing tools such as gamification, employee surveys, data analytics, and onboarding VR to improve workplace culture and productivity. The website demonstrates a professional digital presence with consistent branding, customer testimonials, and partnerships with notable companies like SEB and Accenture. Technically, the site is built on WordPress with modern tracking and analytics tools integrated, hosted likely on AWS infrastructure. Security posture is adequate with HTTPS enabled and domain registration protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is credible and functional but would benefit from enhanced privacy disclosures and security hardening.

M

McCann Riga

mccann.lv

63

McCann Riga operates as a creative or advertising agency based in Latvia, as indicated by the website title and domain. The website is built on WordPress and employs common plugins such as Yoast SEO and MonsterInsights for SEO and analytics, reflecting a moderate level of digital maturity. The site is accessible without any WAF or security blocking, and HTTPS is properly enforced, ensuring secure communications. However, the absence of explicit privacy policy and terms of service pages, as well as missing contact information, limits the overall compliance and trustworthiness of the site. The cookie consent mechanism is implemented, indicating some level of GDPR awareness. Security best practices such as security headers are not observed, and no incident response or vulnerability disclosure information is provided, suggesting room for improvement in security posture. Overall, the website presents a professional appearance with consistent branding but lacks some critical compliance and security elements.

G

Goldman Sachs Asset Management

nnip.com

72

Goldman Sachs Asset Management operates a professional website targeting financial intermediaries and advisors, offering asset and investment management services. The site is branded consistently with Goldman Sachs and positions itself as a leading global asset manager. The technical infrastructure leverages modern web technologies including React and Next.js, hosted likely via Akamai, with performance monitoring implemented through Akamai mPulse. The website is well-optimized for mobile and accessibility, with good SEO practices evident. Security posture is strong with HTTPS enforced and modern TLS usage, though explicit security headers and vulnerability disclosure mechanisms are absent. The WHOIS data is unavailable for the subdomain, consistent with it being a subdomain under the main gs.com domain, which is owned by Goldman Sachs. Overall, the site is legitimate, professional, and secure, but could improve privacy compliance disclosures and incident response transparency.

E

Elva DMS SIA

elvadms.com

66

Elva DMS SIA operates a professional website offering an automotive ERP solution integrated with Microsoft Dynamics 365, targeting automotive dealerships and related businesses. The company provides comprehensive dealer management software covering vehicle sales, used car sales, vehicle services, fleet maintenance, and spare part sales management. The website is well-structured, with good content quality and branding consistency, reflecting a niche market position in the transportation sector primarily in Latvia. Technically, the site is built on WordPress and leverages modern libraries and plugins such as jQuery, Bootstrap, and Cookiebot for cookie consent management. Google Analytics is used for visitor tracking, indicating moderate user tracking levels. Security posture is good with HTTPS enforced and several security headers present, although there is room for improvement in CSP implementation and incident response transparency. The absence of WHOIS registration data is a notable concern, suggesting either privacy protection or a domain registration issue, which impacts the trustworthiness score. Overall, the site demonstrates a solid digital presence but should address privacy policy publication and domain registration transparency to enhance credibility and compliance.

H

HortusDigital

hortusdigital.com

63

HortusDigital is a Latvian technology company specializing in providing ready and replicable business management and IT infrastructure solutions aimed at facilitating digital transformation for businesses. The company positions itself as a niche provider offering professional support and consulting services to help clients modernize their operations with digital tools. The website reflects a professional and consistent brand image with a focus on technology and digital services. Technically, the website is built on WordPress using Elementor and integrates modern SEO and consent management tools such as Yoast SEO and Cookiebot. The infrastructure includes Azure DNS and domain registration via GoDaddy, with HTTPS enforced and cookie consent mechanisms in place. Security posture is moderate with good SSL configuration and consent management but lacks advanced security headers and published security policies. Privacy compliance is partially met with cookie consent but no visible privacy policy or terms of service. Business credibility is supported by consistent branding and social media presence but lacks explicit contact details on the homepage. Overall, the website is functional, professional, and moderately secure but would benefit from enhanced privacy documentation and security practices.

Ocean Multimedia Studio is a specialized technology service provider based in Latvia, focusing on the creation of immersive VR, AR, and 360° content including aerial panoramas, virtual tours, 3D modeling, and virtual museums. Their market position is that of a niche player offering professional multimedia visualization services primarily targeting businesses and organizations seeking advanced digital content solutions. The website showcases a well-structured portfolio and clear service offerings, indicating a focused business model centered on immersive media production. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder, Slider Revolution, and WPML for multilingual support. The site uses HTTPS and includes Google Analytics for visitor tracking. Performance and mobile optimization are moderate to good, though accessibility features are basic. The technical infrastructure reflects a standard small business digital presence with room for improvement in security headers and privacy compliance. From a security perspective, the site benefits from HTTPS and some form protections on forms, but lacks explicit security headers and published security or incident response policies. No privacy or cookie policies were found, and GDPR compliance indicators are minimal. The WHOIS data is unavailable due to query limits, which limits domain trust assessment. Overall, the security posture is moderate but could be enhanced with better policy transparency and technical controls. The overall risk assessment suggests a legitimate and professional business with moderate digital maturity. Strategic recommendations include implementing privacy and cookie policies, adding security headers, publishing vulnerability disclosure information, and improving accessibility and compliance measures to enhance trust and security posture.

G

Graphdo

graphdo.net

61

Graphdo is a small Latvian company specializing in software solutions for Anti-Money Laundering (AML) compliance, focusing on transaction analytics to enhance Enhanced Due Diligence (EDD) and Know Your Customer (KYC) processes. Their software aims to detect suspicious payment patterns and automate AML reporting, targeting financial institutions and compliance professionals. The website is built on the Wix platform, indicating a moderate level of digital maturity with basic SEO and mobile optimization. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and operational status. Security posture is basic with HTTPS enabled but lacking advanced security headers and policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site presents a basic professional front but lacks critical trust and compliance indicators.

S

SIA Arčers

arcers.lv

46

SIA Arčers is a Latvian construction company specializing in building projects with a focus on quality, smart building technologies, and social responsibility. The company positions itself as a significant player in the Latvian construction sector, supported by a large workforce and substantial annual turnover. The website reflects a professional corporate presence with clear branding and multilingual support, targeting local clients and partners in the construction and real estate markets. The parent company is the holding company UGN, indicating a structured corporate group. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and jQuery libraries. The site is mobile optimized and uses HTTPS with a valid SSL certificate, ensuring secure communications. Performance is moderate with good SEO practices implemented, including structured data and Open Graph tags. Accessibility is basic but functional. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, no advanced security headers were detected, and no explicit incident response or security policies are published. The WHOIS data could not be retrieved due to query limits, but no suspicious indicators were found in the website content or domain usage. Privacy and cookie policies are present and appear comprehensive and GDPR compliant. Overall, the website demonstrates a solid business and technical foundation with good security hygiene but could improve by adding security headers and incident response information. The risk level is low, and the site is trustworthy for its intended audience.

S

SIA All Media Latvia

lnt.lv

65

TV3 Life is a Latvian television channel operated by SIA All Media Latvia, focusing on leisure, entertainment, and lifestyle programming. The website provides detailed program schedules, news, and multimedia content targeting Latvian-speaking audiences interested in TV series, movies, and reality shows. The company appears to be a significant player in the Latvian media market with consistent branding and a professional online presence. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Bootstrap, Google Tag Manager, and various advertising and analytics platforms such as Gemius and InMobi. The site is mobile-optimized with lazy loading and responsive design elements, ensuring good performance and user experience across devices. From a security perspective, the site enforces HTTPS, employs Cloudflare Turnstile captcha for bot mitigation, and integrates a consent management platform to comply with GDPR regulations. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance transparency. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting its role as a reputable media outlet. The absence of WHOIS data limits domain registration trust verification, but the site content and branding strongly indicate legitimacy.

S

Technology for live poker events.

sharehand.com

56

ShareHand is a technology company specializing in live video production and technology solutions for live poker events. Their services include live video production, post-production, set design, audiovisual equipment, real-time graphics, and advanced gameplay tracking using RFID technology. The company serves major poker markets globally and has been involved in prestigious events such as the Triton Poker Series and WSOP. The website is built on Squarespace, featuring embedded Vimeo videos and custom fonts, providing a professional and visually appealing user experience. However, the absence of WHOIS data raises questions about the domain registration status, which could impact trustworthiness. Security posture is generally good with HTTPS enabled, but lacks advanced security headers and privacy compliance documentation. Overall, the site presents a credible business offering specialized services in the poker event technology niche but would benefit from enhanced transparency and security practices.

LSEZ AS „Liepājas ostas LM” is a leading port operator in Liepāja, Latvia, handling over 25% of the port's total cargo throughput. The company offers a range of port-related services including stevedoring, cargo storage, freight forwarding, and ship agency services. Their business model focuses on providing comprehensive and cost-effective cargo transport solutions leveraging well-developed terminal infrastructure and diversified transport services. The website content supports their market position as a significant player in the regional transportation sector. Technically, the website is built on WordPress 6.2.6 and uses an outdated version of jQuery (1.4.2), which poses security risks. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No structured data or modern frameworks are detected. The website design and content quality are basic, with clear navigation but limited professional polish. From a security perspective, HTTPS is enabled, but no security headers are detected, and the use of an outdated JavaScript library increases vulnerability exposure. There are no visible privacy or cookie policies, and no contact emails or phone numbers are provided, which limits transparency and user trust. External links include a suspicious unrelated domain, which could pose reputational risks. Overall, the website presents a functional but basic digital presence with moderate business credibility. Security posture and privacy compliance require significant improvement to meet modern standards. Strategic recommendations include updating technical components, implementing security headers, publishing privacy and cookie policies, and enhancing contact transparency to improve trust and compliance.

E

E-Synergy

esynergy.lv

50

E-Synergy is a Latvian technology business presenting itself primarily as a gateway to two specialized IT service lines: IT talent outsourcing via bodylease.dev and full-service IT solutions via csolutions.lv. The website content is minimal, serving mainly as a landing page with links to these partner domains. The technical infrastructure is basic, utilizing standard HTML and CSS with Google Fonts, and shows moderate mobile optimization. However, the site lacks critical security features such as HTTPS enforcement and security headers, and no privacy or cookie policies are present, indicating low maturity in security and compliance. The absence of contact information and WHOIS data limits the ability to fully verify business legitimacy and trustworthiness. Overall, the site functions as a simple redirect hub rather than a comprehensive business portal.

T

Topcon Healthcare

topcon-medical.co.uk

68

Topcon Healthcare operates as a healthcare technology provider, focusing on medical and optical healthcare solutions primarily targeting European markets. The website presents a professional design with consistent branding and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Pardot. The technical infrastructure includes Angular-based frontend assets and uses Cookiebot for GDPR-compliant cookie consent management. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though security headers could be improved and explicit security policies are absent. Privacy compliance is partially met with cookie consent but lacks a clearly accessible privacy policy or terms of service. Overall, the website is functional and professional but could enhance transparency and compliance disclosures.

C

CodeCraft

codecraft.lv

50

CodeCraft is a Latvian digital solutions agency specializing in website development, e-commerce platforms, custom CMS/CRM systems, and API integrations. The company positions itself as a client-first agency with a unique market approach in Latvia, boasting 4 years of experience and over 35 satisfied partners. Their website is professionally designed, mobile-optimized, and rich in relevant content targeting Latvian businesses seeking digital transformation services. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, ensuring good SEO and user experience. Security-wise, the site enforces HTTPS and includes a comprehensive cookie consent mechanism, but lacks visible HTTP security headers and published security policies. Overall, the website demonstrates a solid security posture with room for improvement in formal security documentation and headers. The WHOIS data was unavailable due to query limits, limiting domain registration trust verification. However, the website content and contact information suggest a legitimate and professional business. Strategic recommendations include implementing security headers, publishing incident response and security policies, and enhancing accessibility compliance.

D

Dingo&Schwarz

dingoschwarz.com

57

Dingo&Schwarz is a creatively effective full-service advertising agency based in Riga, Latvia, operating under the parent company mixd.group. The company specializes in blending sharp strategies with creative excellence to deliver impactful advertising campaigns across traditional and digital channels. Their portfolio includes diverse projects for notable clients, showcasing their expertise in creative direction, strategy, and production. The website reflects a professional and modern digital presence with rich multimedia content and clear navigation. Technically, the site uses modern JavaScript libraries, integrates social media and analytics tools, and is optimized for mobile devices. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and business information. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around incident response. Overall, the website and business demonstrate a mature digital footprint with room for security and compliance improvements.

B

BlueBridge Technologies

bluebridgetechnologies.com

64

BlueBridge Technologies is a well-established digital health technology company specializing in medical device software development and regulatory compliance services. Founded in 2006 and operating primarily in the healthcare technology sector, the company serves major global med-tech and pharmaceutical clients, offering services that include software development, validation, cybersecurity, and regulatory consulting. Their market position is strengthened by recognized certifications such as ISO 14971, ISO 13485, and ISO 62304, and partnerships with leading industry players like Novartis and Medtronic. Technically, the website is built on a modern WordPress CMS platform with a professional design, good mobile optimization, and SEO best practices. The infrastructure is hosted by Blacknight Internet Solutions Ltd., an Irish registrar consistent with the company's geographic presence. The site uses common analytics and marketing tools with a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS, employs security headers, and demonstrates compliance with medical device industry standards. No critical vulnerabilities or exposed sensitive data were detected. However, improvements such as enabling DNSSEC and publishing a security.txt file could enhance security posture further. Overall, BlueBridge Technologies presents a credible, professional, and secure online presence aligned with its business focus. Strategic recommendations include enhancing incident response transparency, improving accessibility, and formalizing vulnerability disclosure processes to maintain trust and compliance in a regulated industry.

N

Narvesen

narvesen.lv

50

Narvesen.lv is a Latvian retail convenience store website providing information and e-commerce services to local consumers. The site is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible technical infrastructure. The website demonstrates good digital maturity with responsive design, cookie consent mechanisms compliant with GDPR, and integration of analytics tools such as Google Analytics. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although security headers could be improved. The absence of WHOIS data limits domain trust verification, but the professional presentation and compliance features suggest legitimacy. Overall, the site is well-positioned for its retail market segment in Latvia.

M

makit.lv

makit.lv

55

The website www.makit.lv currently presents minimal accessible content, primarily a Lottie animation on a blank page with no visible metadata, contact information, or business details. The site is built using modern frontend technologies such as React, Gatsby, and TailwindCSS, indicating a contemporary technical infrastructure, but lacks substantive content or user engagement features. Security posture is limited due to absence of visible security headers and no SSL configuration data provided, though HTTPS is presumed given the URL scheme. Privacy and compliance policies are not found, which is a concern for GDPR and general data protection compliance. The lack of WHOIS data due to query limits restricts domain legitimacy verification, reducing overall trustworthiness. Strategic recommendations include enhancing website content, implementing comprehensive privacy and security policies, and improving transparency through accessible contact and business information.

The domain mpdm.com.br is currently mapped to the Squarespace platform but has not been claimed or configured by the domain owner. The website content is a default placeholder page provided by Squarespace indicating that no active website exists at this domain. Consequently, there is no business information, contact details, or user-facing content available. The domain uses Locaweb name servers, a reputable Brazilian hosting provider, but no SSL enforcement or security headers are evident in the provided data. This results in a very low digital maturity and security posture. The absence of privacy policies, cookie consent mechanisms, and terms of service further indicates the site is not operational. Overall, the domain appears inactive and not ready for public or business use.

A

Alex Stewart Agriculture Ltd

alexstewartagriculture.com

51

Alex Stewart Agriculture Ltd is a UK-based, UKAS accredited company specializing in independent inspection and agricultural laboratory services. The company offers a broad range of services including food testing, cargo surveys, and laboratory analysis, supporting international trade in agricultural commodities. With over 40 years of experience and accreditations from GAFTA, FOSFA, DEFRA, and TIC, the company holds a strong market position in the agriculture sector. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with Elementor and Yoast SEO, employing modern web technologies and analytics tools. Security posture is solid with HTTPS enabled and no exposed sensitive data, though some security headers and policies are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

A

Austrenis Capital SA

frigate.ch

61

Austrenis Capital SA is a Swiss-based investment business service provider specializing in asset management, investment advice, financial intermediary services, and documentary maintenance of financial and investment operations. The company targets investors seeking secure investment opportunities and operates a multipurpose investment platform. The website presents a professional and consistent brand image with clear navigation and relevant content, positioning Austrenis as a niche player in the finance sector in Geneva, Switzerland. Technically, the website uses modern web technologies including jQuery, AjaxForm, and Cloudflare Zaraz for script management and analytics. The site is hosted behind Cloudflare, providing good SSL configuration and moderate performance. Mobile optimization and accessibility are adequate but could be improved. SEO practices are basic with minimal meta descriptions and no structured data. From a security perspective, the site enforces HTTPS and uses secure form submission. However, it lacks explicit security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. The contact form posts data to an external domain (frigate.ch), which may raise data protection concerns. No incident response or vulnerability disclosure information is available, indicating room for improvement in security maturity. Overall, the website scores moderately well in business credibility and technical implementation but falls short in privacy compliance and security best practices. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, clarifying data handling for forms, and enhancing GDPR compliance to improve trust and reduce risk.

P

Premium Medical

premiummedical.lv

36

Premium Medical is a premium-class medical clinic based in Riga, Latvia, offering a wide range of healthcare services including consultations, diagnostics, physiotherapy, aesthetic medicine, dental care, and specialized health programs. The clinic positions itself as the first premium medical institution in Latvia with over 100 specialists across 35 medical fields, targeting adults and children seeking high-quality healthcare. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site employs modern analytics and tracking tools such as Google Analytics, Yandex Metrika, Microsoft Clarity, and Facebook Pixel, indicating a strong marketing and user behavior analysis capability. Security-wise, the site enforces HTTPS and uses secure forms but lacks some recommended security headers and explicit published security policies, which could be improved to enhance trust and compliance. The absence of WHOIS data due to query limits limits domain trust verification, but the overall business presentation and contact transparency support legitimacy. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and maintaining regular audits of third-party scripts to strengthen security posture and compliance.

M

MEDENA AG

medena.ch

48

MEDENA AG is a Swiss-based company specializing in the manufacturing and development of cosmetics, medical devices, and food supplements. With over 50 years of experience, the company offers a broad range of services including contract manufacturing, quality management, regulatory consulting, product development, and research. Their market position is that of an established, certified manufacturer serving international clients with a focus on compliance and quality standards such as ISO 13485, ISO 22716, and ISO 9001. The website reflects a professional B2B business model targeting companies seeking manufacturing and regulatory support in the healthcare and cosmetics sectors. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO and accessibility basics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with a cookie consent mechanism and GDPR-aligned policies. Overall, the site is trustworthy and professionally maintained, supporting the company's credibility in its sector.