Security Directory

W

WERMO AS

wermo.ee

40

WERMO AS is an established Estonian furniture manufacturer with over 75 years of experience in crafting high-quality furniture for living rooms, home offices, and dining rooms. The company leverages traditional craftsmanship combined with modern production technologies to meet discerning customer expectations. Their website reflects a medium-sized manufacturing business targeting consumers and businesses seeking premium furniture products. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Contact Form 7, with multilingual support via WPML. The site is hosted likely by Zone Media OÜ, an Estonian registrar and hosting provider. Security-wise, the site uses HTTPS with good SSL configuration and integrates Google reCAPTCHA to protect forms. However, it lacks explicit privacy, cookie, and security policies, as well as vulnerability disclosure mechanisms, which are important for compliance and trust. Overall, the website is professional and functional but could improve its privacy and security transparency.

S

SinuLab

sinulab.ee

53

SinuLab is a technology company specializing in software solutions for strategic performance management and people development, primarily targeting small and medium-sized enterprises. Their SaaS offerings include modules for people data management, performance tracking, employee development, and talent management, complemented by e-learning courses. The company has a consistent brand presence and a professional website that clearly communicates its services and target audience. Technically, the website is built on WordPress with modern plugins and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. Security posture is good with HTTPS enforced and domain transfer protections in place, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. Overall, the website and business present a trustworthy and professional image with room for enhanced security and compliance maturity.

C

Cadeler

seajacks.com

58

Cadeler is a specialized service provider in the offshore wind energy sector, focusing on construction, maintenance, and decommissioning of offshore wind farms. The company positions itself as a global leader with a professional and modern web presence, targeting industry stakeholders and investors. The website demonstrates a solid technical infrastructure using modern JavaScript libraries and analytics tools, with a clear cookie consent mechanism ensuring GDPR compliance. Security posture is generally strong with HTTPS and CSRF protections, though explicit security headers and incident response contacts are not evident. The absence of WHOIS data introduces a minor trust concern but does not detract significantly from the overall legitimacy given the professional content and social media presence. Strategic recommendations include enhancing security headers, publishing incident response information, and improving contact transparency.

SDF Group is a globally recognized manufacturer and distributor of tractors, diesel engines, and agricultural machinery, operating under multiple well-known brands. The company targets farmers and contractors seeking advanced farming technology and precision agriculture solutions. The website demonstrates a mature digital presence with a modern tech stack based on Nuxt.js and Vue.js, incorporating analytics and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like security headers and explicit incident response policies could be improved. The absence of WHOIS data reduces domain registration trust but is offset by professional branding and comprehensive content. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, supporting a strong business credibility profile.

A

Advokaadibüroo Nordx Legal OÜ

nordxlegal.com

62

Advokaadibüroo Nordx Legal OÜ is a specialized law firm founded in 2014, focusing on technology-driven and digital businesses. Their core services include corporate transactions, data protection, privacy, cybersecurity, technology law, and intellectual property. The firm targets startups and multinational corporations within the technology sector, positioning itself as a niche legal service provider with a strong emphasis on emerging technologies. The website reflects a professional and consistent brand image with clear service offerings and active social media engagement. Technically, the website is built on WordPress using modern frameworks such as Foundation and libraries like jQuery and Slick Carousel. SEO is enhanced via the Yoast SEO plugin. The site demonstrates good mobile optimization and moderate performance. Security is well addressed through strict Content-Security-Policy headers and HTTPS enforcement, although DNSSEC is not enabled. No cookie consent mechanism or explicit security policies are published, which are areas for improvement. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of incident response contact details and vulnerability disclosure policies indicates room for maturity. The domain registration is consistent and legitimate, supporting the business credibility. Overall, the website scores well in professionalism, technical implementation, and security, but privacy compliance could be enhanced. Strategic recommendations include implementing a cookie consent mechanism, publishing comprehensive security and incident response policies, enabling DNSSEC, and adding terms of service to improve legal completeness and user trust.

A

Artis

artisllc.com

55

Artis is a specialized technology company focused on developing advanced real-time system solutions that address complex challenges requiring extremely fast distributed sensing, parallel processing, and actuation. Their offerings include active protection systems that neutralize threats and safety systems designed for rapid response beyond human reaction times. The company targets clients in sectors where microsecond-level performance is critical, such as defense and safety industries. The website presents a professional and consistent brand image with clear messaging about their expertise and services. Technically, the site is built on WordPress with the Avada theme, leveraging modern web technologies and Google Analytics for tracking. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

C

Change Ventures

changeventures.com

55

Change Ventures is a seed stage venture capital fund focused on backing ambitious Baltic founders globally. The company provides pre-seed investments ranging from €100k to €500k, along with hands-on support to help startups reach product-market fit and access to a network of later stage investors and partners. Their portfolio includes innovative technology companies across sectors such as energy, fintech, and software. The website presents a professional and consistent brand image with detailed team profiles and portfolio highlights, targeting founders and investors interested in the Baltic startup ecosystem. Technically, the website is built on Webflow and uses modern web technologies including Google Analytics and Tag Manager for tracking, with content delivered via a CDN. The site is mobile optimized and features good SEO practices. However, some accessibility features could be improved. Security posture is generally good with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency. Despite this, the website content and business information appear legitimate and professional. There are no privacy or cookie policies found, indicating compliance gaps with GDPR and other privacy regulations. Contact information includes a verified company email and physical address in Estonia, but no phone numbers are explicitly provided. Overall, the website is well designed and informative, supporting a credible business presence. However, improvements in privacy compliance, security policy transparency, and domain registration clarity are recommended to enhance trust and reduce risk.

The website at axxisgeo.com/lander is a minimal landing page with no substantive business content, contact information, or policies. The domain is registered since 2015 with GoDaddy.com, LLC and shows standard domain protections but lacks DNSSEC. The site uses React and JavaScript technologies and loads Google Adsense scripts, indicating some advertising activity. However, the absence of privacy, cookie, or terms of service policies and lack of contact details reduce trust and compliance posture. Security headers are missing, and DNSSEC is not enabled, representing minor security gaps. Overall, the site appears to be a placeholder or parked domain rather than a fully operational business website.

Z

Zone Media OÜ

rahinge.ee

47

Rahinge.ee is a small Estonian website focused on promoting and providing information about Rahinge Wakepark, a water sports and relaxation destination near Tartu, Estonia. The site offers content about wakeboarding, SUP boards, canoe and kayak rentals, and leisure facilities such as beaches and ball courts. The business model centers on regional water sports enthusiasts and visitors seeking recreational activities. The website is built on WordPress with popular plugins and themes, showing moderate performance and good mobile optimization. SEO practices are adequately implemented with proper meta tags and structured data. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers, and no cookie consent mechanism is present. Contact information is limited to a contact form without explicit emails or phone numbers. The domain is newly registered in 2025 by Zone Media OÜ, a known Estonian registrar and hosting provider, consistent with the website's launch timeframe. Overall, the site is functional and professionally designed but could improve in privacy compliance and security best practices.

D

Destia

destia.fi

64

Destia is a Finnish infrastructure company specializing in the planning, construction, and maintenance of critical infrastructure throughout its lifecycle. As a part of the Colas Group, Destia holds a strong market position in the transportation and energy sectors within Finland. The website reflects a mature digital presence with professional design, clear branding, and comprehensive cookie consent mechanisms, indicating a commitment to privacy compliance. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager and Cookiebot, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. Overall, Destia's website demonstrates a high level of professionalism and trustworthiness, supporting its business credibility in the infrastructure sector.

D

Digitalist

ixonos.com

60

Digitalist Finland is a reputable digital transformation consultancy and technology solutions provider focused on integrating customer experience, design, and technology to future-proof businesses. Their market position is strong within the Nordic region, supported by a medium-sized expert team and a 100% client retention rate. The company offers a broad range of services including AI integration, data-driven development, e-commerce, and digital product development. Technically, the website is built on Webflow with modern analytics and consent management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not published. Overall, the site reflects a professional and trustworthy business with strong digital maturity.

P

Powerfleet (formerly Fleet Complete)

fleetcomplete.com

66

Powerfleet (formerly Fleet Complete) is a leading provider of connected fleet management and asset tracking solutions, targeting businesses ranging from small-medium enterprises to large Fortune 500 companies. The company offers a comprehensive suite of products including fleet management software, AI dash cameras, asset trackers, and telematics integrations, positioning itself as a key player in the transportation and logistics sector. The website reflects a mature digital presence with consistent branding and a focus on data intelligence to optimize fleet operations. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, LinkedIn Insight, and 6sense. The site is mobile-optimized, SEO-friendly, and includes privacy and cookie consent mechanisms, indicating a good level of digital maturity and compliance with privacy regulations like GDPR. From a security perspective, the site enforces HTTPS and includes basic security headers, but lacks some advanced headers and a public security or incident response policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data transparency slightly reduces trust but does not outweigh the professional and active nature of the website. Overall, the risk profile is moderate to low with recommendations to enhance security headers, publish explicit security policies, and consider vulnerability disclosure mechanisms to further strengthen trust and compliance.

L

Leibur

leibur.ee

60

Leibur is a well-established Estonian bakery company with a rich history dating back to 1762. The company operates primarily in the retail sector, offering a variety of bread and bakery products. The website reflects a medium-sized business with a consistent brand presence and a focus on product promotion, company history, and sustainability. The parent company is Lantmännen, indicating a solid corporate backing. Technically, the website uses modern frameworks such as Bootstrap and integrates multiple marketing and analytics tools including Google Tag Manager, Matomo, HubSpot, and Microsoft Application Insights. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks some recommended security headers and explicit security policies. Privacy compliance is basic, with a cookie banner present but no clear privacy policy or terms of service pages detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is functional and professional but could improve in privacy transparency and security best practices.

M

Metsä Group

metsagroup.com

76

Metsä Group is a large enterprise specializing in the production of renewable products derived from northern forests, focusing on sustainable manufacturing that replaces fossil raw materials. The company operates multiple business areas including wood supply, wood products, pulp, paperboard, and tissue products, positioning itself as a key player in the manufacturing and energy sectors in Finland. The website reflects a professional and consistent brand image with clear segmentation of business areas and a focus on sustainability. Technically, the site is built on the Episerver CMS platform and integrates modern analytics and marketing tools such as Microsoft Application Insights, Adobe DTM, Hotjar, and Zaius, all managed with a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which contrasts with the professional presentation and content quality of the site. Contact information is limited to a contact form without direct emails or phone numbers, and no explicit terms of service or security policy pages are present. Overall, Metsä Group's digital presence is mature and secure, but domain registration transparency and enhanced contact details could improve trust and compliance.

B

Brightspark

brightspark.ee

38

Brightspark OÜ is an Estonian software development company founded in 2011, specializing in developing modern web-based information systems primarily for the trade sector. The company has evolved from providing software development services across multiple countries to focusing on its own product development, including cloud-based platforms like Lexi.Market, rehabilitation software (Reha), and digital document management services (Infore). The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. Overall, Brightspark presents as a credible small technology company with a focused business model and established market presence.

T

TJO Konsultatsioonid

tjo.ee

52

TJO Konsultatsioonid is a leading Estonian consulting firm specializing in management systems development, strategic management, and production efficiency enhancement. The company offers a range of consulting services and training programs targeted at businesses seeking to improve operational effectiveness and comply with international standards. Their market position is strong within Estonia, supported by multiple ISO certifications and a robust client base. The website infrastructure is built on WordPress, utilizing modern plugins such as Yoast SEO and Ninja Forms, integrated with Google Analytics and Google Tag Manager for performance and user behavior tracking. The site is mobile-optimized and demonstrates good SEO practices, contributing to a positive digital maturity profile. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA on forms, and indications of security plugins like Wordfence. However, some security headers are not explicitly confirmed and could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website and business present a trustworthy and professional image with no critical security issues detected. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a formal incident response policy to further strengthen security and compliance.

B

Barrington Group

smartek.com

74

Smartek, operated by Barrington Group, is a mature Australian-based technology company specializing in workforce compliance and contractor management solutions. Their SaaS platform offers modules for compliance management, inductions, visitor management, asset management, and permit to work, supported by a team of compliance experts. The company serves a broad range of industries including healthcare, government, and construction, with a strong market presence evidenced by a large user base and notable clients such as Qantas and City of Melbourne. The website reflects a professional and consistent brand with comprehensive service descriptions and client testimonials. Technically, the website is built on WordPress with modern plugins and tracking technologies including Google Analytics, Facebook Pixel, LinkedIn Insight, and HubSpot. Hosting is managed via Azure DNS, and the site uses HTTPS with a good SSL configuration. However, DNSSEC is not enabled, and some recommended security headers are not explicitly detected. The site lacks a cookie consent mechanism, which may impact GDPR compliance. Forms use reCAPTCHA v3 to mitigate spam. From a security perspective, the domain is well-established with a long registration history and protective domain status flags. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. The absence of a published security policy or incident response contact is a gap. Overall, the site demonstrates a solid security posture with room for improvement in DNS security and privacy compliance. Strategically, Smartek is positioned as a reliable compliance management solution with strong business credibility and digital maturity. Recommendations include enabling DNSSEC, implementing security headers, publishing security and incident response policies, and adding a cookie consent mechanism to enhance privacy compliance and user trust.

S

Spliethoff

spliethoff.com

76

Spliethoff is a well-established Dutch shipping company specializing in worldwide dry cargo ocean transport. With a fleet of over 50 modern vessels and a history dating back to 1921, the company positions itself as a reliable and high-quality partner in the maritime transport sector. Their website reflects a professional and comprehensive digital presence, targeting businesses requiring specialized cargo shipping services across various market segments including bulk cargo, containers, metals, and project cargo. Technically, the website employs modern frontend technologies such as Tailwind CSS, Alpine.js, and Swiper JS, alongside Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile responsive, well-structured, and optimized for SEO, providing a good user experience. Privacy compliance is evident through a cookie consent banner and a detailed privacy policy, indicating adherence to GDPR standards. From a security perspective, the site uses HTTPS and implements secure forms with anti-forgery tokens. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which could enhance protection. The absence of WHOIS data transparency reduces domain trust slightly, though the website content and business information strongly support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and WHOIS transparency would further enhance trust and security posture.

I

interUX Usability Engineering Studio OÜ

interux.com

47

interUX Usability Engineering Studio OÜ is a small, Estonia-based consultancy specializing in user experience and usability engineering services across Estonia, Latvia, and Russia. With over 20 years of professional expertise, the company offers a comprehensive suite of UX services including user interface design, expert evaluations, field studies, usability testing, and eye tracking. Their client base spans multiple industries such as retail, insurance, travel, and telecommunications, positioning them as a trusted usability partner in the region. Technically, the website employs a basic but functional technology stack consisting of HTML, CSS, JavaScript, and Google Analytics for visitor tracking. The site is moderately optimized for performance and SEO, with basic mobile responsiveness and accessibility features. However, there is no evidence of a CMS or advanced frameworks, indicating a relatively simple infrastructure. From a security perspective, the domain is well-established with a consistent WHOIS record and domain status protections. However, the website lacks critical security headers, DNSSEC is not enabled, and there is no visible HTTPS enforcement or privacy compliance mechanisms such as privacy or cookie policies. Google Analytics is used without a cookie consent banner, which may raise GDPR compliance concerns. Overall, the website presents a professional and credible business front but requires improvements in privacy compliance and security best practices to reduce risk and enhance trust. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, enforcing HTTPS, and providing incident response information.

A

Agrello

agrello.io

67

Agrello is a technology company specializing in secure e-signature and contract management solutions tailored primarily for small and medium-sized enterprises (SMEs). The platform offers a comprehensive suite of services including document automation, bulk contract creation, and legally binding electronic signatures compliant with EU and UK regulations. Positioned as a time-saving and efficient alternative to manual contract workflows, Agrello emphasizes ease of use, security, and compliance. The company operates from Estonia and provides multilingual support, reflecting a focus on European markets. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, and integrates analytics and marketing tools such as Microsoft Clarity and Google Tag Manager. The platform supports integrations via Zapier and offers API access, indicating a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO, with clear navigation and professional design. From a security perspective, Agrello enforces HTTPS, uses reCAPTCHA for form protection, and implements cookie consent mechanisms. While explicit security headers are not fully documented in the HTML, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data is privacy protected, which is typical for SaaS providers, and the domain appears actively maintained. Overall, Agrello presents a trustworthy, professional, and technically sound online presence suitable for its target market. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing vulnerability disclosure information to further build trust.

E

Elkdata OÜ

keeleagentuur.ee

41

Keeleagentuur is a small Estonian language agency founded in 2022, specializing in language education and translation services primarily for Estonian and Russian languages. The company offers goal-oriented language courses for adults, including exam preparation and thematic courses. The website is built on WordPress using the Astra theme, Elementor page builder, and WooCommerce for e-commerce capabilities. It employs modern web technologies and integrates Google Analytics for visitor tracking. The website is well-structured, mobile-optimized, and SEO-friendly, but lacks explicit privacy and terms of service policies. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Overall, the business appears legitimate and consistent with its domain registration data.

T

TTK - Leak Detection System

ttkuk.com

70

TTK Leak Detection is a specialized manufacturer of liquid leak detection systems, focusing on water, acids, and oil leak detection for commercial and industrial applications. The company positions itself as a global leader with a strong presence in multiple international markets, offering products made in France with a notable 10-year warranty. Their target audience includes data centers, industrial facilities, airports, and other critical infrastructure sectors requiring reliable leak detection solutions. The website reflects a mature digital presence with comprehensive product information, case studies, and certifications that reinforce their market credibility. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Matomo, and Google Tag Manager for analytics and marketing. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although some advanced security headers are not detected. From a security perspective, the site demonstrates good practices but lacks explicit security policies or incident response information. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness from a domain registration standpoint. Despite this, the professional website, certifications, and client references suggest a legitimate and established business. Overall, the risk assessment is moderate with recommendations to enhance domain registration transparency, implement additional security headers, and publish vulnerability disclosure policies to improve trust and compliance.

Z

Z6·尊龙凯时集团有限公司

edge-asia.com

52

Z6·尊龙凯时集团有限公司 is a large, established Chinese conglomerate with diversified interests in retail, hospitality, real estate, and investment sectors. Founded in 1999 and headquartered in Nantong, Jiangsu, the company operates numerous subsidiaries and has a significant employee base and asset portfolio. The website presents detailed business information and sector descriptions, targeting business partners and customers primarily in China. Technically, the website uses modern JavaScript libraries and CSS frameworks, is mobile optimized, and includes a contact form with captcha for user interaction. However, the absence of WHOIS registration data and lack of privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with HTTPS usage but lacks explicit security headers and has an external iframe to an IP address that may pose risks. Overall, the site is professional but would benefit from enhanced security and compliance measures.

D

Diivaniparadiis

paradiis.ee

41

Diivaniparadiis is a well-established Estonian furniture retailer operating since 1998, offering a wide range of home and office furniture through both online and physical stores. The website reflects a mature e-commerce platform with clear navigation, product listings, and customer account management features. The business targets Estonian consumers seeking quality furniture and home decor products. The domain age and WHOIS data align with the company's market presence, reinforcing its legitimacy. Technically, the website employs modern JavaScript libraries such as Swiper.js for sliders, Fancybox for image galleries, and integrates marketing tools like Google Tag Manager and Facebook Pixel for analytics and advertising. The presence of CSRF tokens and HTTPS indicates a reasonable security posture, although some security headers could be improved. Mobile optimization and SEO practices are adequately implemented, providing a good user experience across devices. Security-wise, the site uses HTTPS with a good SSL configuration and includes CSRF protection in forms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security transparency and compliance. Privacy compliance is basic but includes a cookie consent banner and a privacy policy page in Estonian. Overall, Diivaniparadiis presents a trustworthy and professional online presence with solid business credibility and technical implementation. Strategic enhancements in security policies, accessibility, and legal documentation would further strengthen its compliance and user trust.

A

Agrello

agrello.id

67

Agrello is a technology company based in Estonia specializing in secure e-signature and contract management solutions tailored primarily for small and medium-sized enterprises. Their platform enables users to create, sign, and manage legally binding agreements efficiently, reducing contract signing time by up to 60%. The company offers a SaaS subscription model with tiered plans, including a free trial and custom enterprise options, positioning itself as a niche player in the legaltech space with compliance to EU and UK regulations such as eIDAS. Technically, Agrello's website is built on modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, and integrates with popular tools like Zapier and Microsoft Word templates. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement, use of reCAPTCHA, and cookie consent mechanisms, although explicit security headers and a dedicated security policy page are not publicly evident. From a security posture perspective, the platform demonstrates strong adherence to best practices with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. However, the absence of a public incident response or vulnerability disclosure page suggests room for improvement in transparency and security readiness. Overall, Agrello presents a trustworthy and professional online presence with a clear value proposition for SMEs seeking to streamline contract workflows. The domain WHOIS data is privacy protected, which is typical for SaaS providers, and does not raise immediate concerns. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response information, and providing DPO contact details to further strengthen compliance and trust.

R

ROI

roi.ee

53

ROI is an established Estonian company specializing in corporate gifts, promotional items, and branded apparel, serving businesses seeking quality branded products since 1992. The website is built on a modern Angular framework, incorporating standard web fonts and styles, and integrates Google Tag Manager and CookieHub for analytics and cookie consent management. The technical infrastructure is solid with HTTPS enforced and a cookie consent mechanism that supports GDPR compliance. However, explicit contact information and detailed security policies are not present on the site, which could be improved to enhance trust and compliance. The domain registration data is consistent and indicates a legitimate and stable business presence. Overall, the website demonstrates good digital maturity and a moderate security posture, with room for enhancements in security headers and incident response transparency.

N

NEVERHACK

expert-line.com

62

NEVERHACK is a well-established cybersecurity company founded in 2016, providing a broad range of services including risk assessment, identity and access management, managed security services, compliance consulting, and incident response. The company targets businesses seeking to strengthen their cybersecurity posture and comply with regulations such as GDPR and NIS2. The website demonstrates a mature digital presence with modern technologies and a comprehensive content strategy highlighting use cases and expert testimonials. Technically, the site is well implemented with a performant stack and good mobile optimization. Security posture is strong, leveraging HTTPS, domain protections, and offering managed SOC services, although some improvements like DNSSEC and explicit vulnerability disclosure could enhance trust. Privacy compliance is generally good, with a clear privacy policy, but lacks a cookie consent mechanism. Business credibility is high, supported by certifications and detailed service descriptions. Overall, NEVERHACK presents as a credible and professional cybersecurity partner with room for minor enhancements in transparency and privacy controls.

H

High Mobility

high-mobility.com

65

High Mobility is a technology company specializing in connected car data solutions, providing a unified API to access live, vehicle-specific data from multiple automotive brands. Their platform supports over 500 car models and integrates data from more than 22 OEMs, including Volkswagen Group brands. The business model focuses on ease of integration with a free registration and pay-when-live pricing, targeting developers and fleet operators in the automotive and transportation sectors. Technically, the website is built on Webflow with Matomo analytics, offering moderate performance and good mobile optimization. Security practices include HTTPS and encrypted data streams, but lack visible security headers and formal privacy or cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting trustworthiness. Overall, the site is professional and functional but would benefit from enhanced transparency and security disclosures.

A

AS Eesti Loto

eestiloto.ee

51

AS Eesti Loto operates as the official national lottery provider in Estonia, offering a variety of lottery games such as Eurojackpot, Vikinglotto, Bingo loto, Keno, Jokker, and e-kiirloterii. The website serves as a platform for ticket sales, results checking, and account management, targeting Estonian residents interested in legal lottery gaming. The company holds a strong market position as a government-licensed entity with a medium-sized operational scale. The website's content is well-structured, professionally designed, and provides comprehensive information about games, responsible gaming, and user support.

E

eHost OÜ

aksohaus.ee

40

Investor.ee is a small Estonian educational website focused on providing practical advice and information about investing, portfolio management, risk management, and financial knowledge. The site targets individuals and organizations interested in growing their capital through various investment strategies. The business operates primarily as a content and informational platform, with a niche focus on the Estonian-speaking investment community. The domain is registered to eHost OÜ since 2019, consistent with the website's scope and scale. Technically, the website is built on WordPress using a modern theme and standard libraries such as Bootstrap, jQuery, and FontAwesome. It integrates Google Tag Manager for analytics and Google reCAPTCHA v3 for spam protection on forms. The site is hosted behind Cloudflare DNS and uses HTTPS, ensuring secure communication. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or security policy information is available. External links are configured to open in new windows with noopener for security. Overall, the website is functional, professionally designed, and provides relevant content for its audience. The main risks relate to privacy compliance gaps and missing security headers. Strategic improvements in these areas would enhance trust and regulatory adherence.

M

Manimal OÜ

manimaldesign.com

46

Manimal OÜ is a small Estonian digital media and design studio specializing in web design, SEO, and social media services. Founded in 2016, the company targets local businesses and individuals seeking creative digital solutions. The website reflects a professional and consistent brand image with a clear portfolio and client references. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, and includes tracking via Google Analytics and Facebook Pixel. Security measures include HTTPS and Google reCAPTCHA on the contact form, but lack advanced security headers and explicit privacy or cookie policies. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security hardening.

T

The Catholic University of Eastern Africa

cuea.edu

57

The Catholic University of Eastern Africa (CUEA) is a well-established private international university based in Kenya, offering a wide range of academic programs including certificates, diplomas, undergraduate, postgraduate, and professional certifications. The institution positions itself as a premier university focused on producing morally upright and transformative leaders for the Church and society. The website reflects a mature digital presence with comprehensive academic and administrative content targeting prospective and current students, alumni, and researchers. Technically, the website is built on a modern WordPress platform utilizing popular plugins such as LearnPress for LMS functionality, Elementor for page building, and LayerSlider for rich content presentation. The site uses HTTPS with good SSL configuration and integrates Google Analytics for visitor tracking. The design is responsive and user-friendly, with clear navigation and structured data enhancing SEO. From a security perspective, the site employs HTTPS and some security best practices but lacks explicit security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the institution's claims. Overall, the website is professional and credible but should enhance privacy compliance and security headers to improve trust and regulatory adherence.

T

Tallinna Tehnikakõrgkool

tktk.ee

49

Tallinna Tehnikakõrgkool is a reputable higher education institution in Estonia specializing in technical and engineering education. The website serves multiple audiences including prospective and current students, continuing education learners, and business partners. It offers comprehensive information on study programs, admissions, continuing education, and institutional news. The institution maintains a solid market position as a key technical education provider in Estonia. Technically, the website is built on WordPress using the Elementor page builder, enhanced with Yoast SEO and Usercentrics for GDPR-compliant cookie management. It integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and a chat widget, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit security headers like Content-Security-Policy and does not publicly disclose security policies or incident response procedures. No vulnerability disclosure or security.txt file is present, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and well-maintained, with moderate to good scores in content quality, technical implementation, and security posture. Strategic improvements in security headers, privacy policy publication, and incident response transparency are recommended to further strengthen compliance and security maturity.

M

Morek Group

morek.eu

45

Morek Group is a medium-sized Estonian company specializing in manufacturing and distributing high-quality electrical components and electric vehicle charging solutions. With 20 years of industry experience, Morek positions itself as a trusted partner in the energy and transportation sectors, focusing on infrastructure development for electricity and electric cars. The company targets electrical industry professionals and infrastructure developers across Europe, supported by multilingual website content and a clear product catalog. Technically, the website is built on WordPress with modern JavaScript integrations, including Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good performance, mobile optimization, and SEO practices, with a consent management system for cookies ensuring privacy compliance. The technical infrastructure reflects a mature digital presence suitable for a medium-sized enterprise. From a security perspective, the site enforces HTTPS and uses consent mechanisms but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Security headers could be improved to enhance protection. Overall, the security posture is solid but could benefit from formalized policies and additional headers. The domain WHOIS data is consistent with the business claims, showing no privacy protection and a domain age appropriate for the company's 20-year history. Contact information is clearly presented, including emails, phone numbers, and physical address, enhancing business credibility. Social media presence on LinkedIn and Facebook supports trust and engagement. Recommendations include publishing security and incident response policies, adding security headers, and considering a vulnerability disclosure program to strengthen security culture and compliance.

A

Ambient Sound Investments

asi.ee

46

Ambient Sound Investments (ASI) is a private asset management firm established in 2003 by four founding engineers of Skype. The company operates as a family office with a focus on investments across venture capital, private equity, listed equity, and real assets, with assets geographically located in Europe, the US, and Asia. The website presents a professional image with clear navigation and relevant business content, targeting investors and professionals interested in diversified asset management. The business model is niche and specialized, leveraging the founders' technology and finance backgrounds. Technically, the website is built on the Voog CMS platform, utilizing standard web technologies such as JavaScript, CSS, and HTML5. The site is mobile optimized and performs moderately well, though accessibility features are basic. The hosting and domain registration are consistent with the business location in Estonia, with no signs of privacy protection or suspicious WHOIS data. External scripts are limited and primarily related to the CMS platform. From a security perspective, the website benefits from HTTPS with a valid SSL certificate, but lacks important security headers and visible security policies. There are no privacy or cookie policies, nor contact information for security incidents or data protection officers. No vulnerabilities or exposed sensitive data were detected, but the absence of key compliance documents and security headers represents a moderate risk. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and regulatory adherence.

W

Walless

derling.ee

64

Walless is a modern Baltic law firm established in 2008, offering innovative and bespoke legal solutions primarily targeting businesses in the Baltic region. The firm emphasizes client trust, openness, and innovation, positioning itself as a growing and reputable player in the regional legal market. Their key services include legal advisory, arbitration, and dispute resolution. The website reflects a professional and consistent brand image with multi-language support and clear navigation. Technically, the site is built on WordPress, leveraging modern tools such as Google Analytics, MailerLite for marketing, and Google reCAPTCHA for form security. Hosting and DNS services are provided by reputable providers including Cloudflare and Tucows Domains Inc. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or suspicious domain registration patterns.

S

Softwerk

softwerk.ee

43

Softwerk OÜ is an Estonian technology company specializing in custom business software solutions including business intelligence (BI), ERP implementations (notably Microsoft Dynamics 365), and web development using modern frameworks such as .NET and React. Established in 2012, Softwerk has positioned itself as a trusted partner for businesses in Estonia and Europe, offering tailored solutions that improve operational efficiency and data-driven decision making. The company emphasizes long-term client relationships and quality service delivery, supported by positive client testimonials and recognized partnerships such as Microsoft. Technically, the website is built on WordPress with WPBakery Page Builder, leveraging common web technologies like jQuery and FontAwesome, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and secure form handling, but lacks advanced security headers and explicit security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, Softwerk demonstrates a mature digital presence with room for improvement in privacy and security transparency.

B

Boomerang

boomerang.ee

47

Boomerang is a well-established third-party logistics provider specializing in eCommerce fulfillment and returns management, primarily serving the Nordic region and global markets. The company positions itself as the largest return handling operator in the Nordics, offering tailored and flexible logistics solutions to online webshops. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with Elementor, leveraging modern technologies such as Usercentrics for cookie consent and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security-wise, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies, which are areas for improvement. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

O

Oy Lunden Ab Jalostaja

jalostaja.fi

64

Oy Lunden Ab Jalostaja is a well-established Finnish food manufacturing and retail company specializing in ready meals, soups, salads, and vegan products. The company emphasizes convenience for everyday consumers and sustainability in packaging. Their website reflects a strong brand presence with consistent messaging and active engagement in para-sports sponsorship, enhancing their community involvement and brand image. Technically, the website is built on WordPress with modern SEO and tracking tools such as Yoast SEO and Google Tag Manager, ensuring good digital maturity and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, user-friendly, and compliant with GDPR requirements, supporting a high trust level for visitors and customers.

The website www.sotsiaalkindlustusamet.ee is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to the actual content. As a result, no business information, contact details, or policy documents are available for review. The site is protected by Cloudflare's WAF, indicating a focus on security but preventing external analysis. Without access to the real content, it is not possible to assess the company's market position, services, or compliance posture. The technical infrastructure relies on Cloudflare services, but performance and SEO cannot be evaluated. Security posture cannot be fully assessed beyond the presence of Cloudflare protection. Overall, the site appears to be a government-related entity from Estonia, but detailed insights are unavailable due to access restrictions.

I

Inission

inission.com

66

Inission is a Swedish-based full service electronics and mechanics manufacturer specializing in providing end-to-end solutions across the complete product lifecycle. The company targets businesses and engineers requiring development, prototyping, industrialization, manufacturing, and product maintenance services. Their market position is that of a quality-focused and sustainable partner with a strong emphasis on customer satisfaction and innovation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager, hosted on DigitalOcean infrastructure, and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are absent. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by professional content and investor relations transparency. Overall, the site demonstrates a mature digital presence suitable for a medium-sized manufacturing business.

Swissôtel Hotels & Resorts operates a luxury hospitality brand with a global footprint, offering premium hotel accommodations, event hosting, and loyalty programs. The website reflects a mature digital presence with multilingual support, rich content, and integrated marketing and analytics tools. Technically, the site uses ASP.NET Web Forms, modern JavaScript libraries, and robust cookie consent mechanisms, ensuring a good user experience across devices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data is a notable anomaly but does not detract from the apparent legitimacy of the site given its branding and parent company association. Overall, the site is professional, secure, and compliant with privacy regulations, serving a large luxury hospitality market segment.

B

Big Penny

trumansbeer.co.uk

53

Big Penny is a hospitality operator based in Walthamstow, London, managing large community venues that offer food, drink, and live events. The company emphasizes inclusivity and community connection, operating flagship venues such as Big Penny Social and Flukes. The website is professionally designed using Webflow CMS and integrates modern technologies including Google Analytics and cookie consent mechanisms. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and formal security policies. Privacy compliance is basic with a privacy policy and cookie banner present but no GDPR explicit statements or data retention policies. Business credibility is strong with clear contact information and consistent branding. Overall, the website is functional and trustworthy for its hospitality business purpose.

L

Latitude59

latitude59.ee

53

Latitude59 is a well-established flagship startup and technology event based in Estonia, with a history dating back to 2012. It serves as a key platform for startups, investors, partners, and media to connect and showcase innovation. The website reflects a mature event organization with a strong international presence, offering pitch competitions, investor days, and satellite events worldwide. The business model centers on event management and ecosystem development within the technology sector. Technically, the website is built on WordPress using Elementor and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and PixelYourSite. The site is optimized for SEO and mobile devices, with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is good, with a comprehensive privacy and cookie policy and GDPR adherence. However, the site lacks explicit security policies, incident response contacts, and terms of service pages, which could enhance trust and compliance. Overall, Latitude59's website demonstrates a professional, secure, and privacy-conscious digital presence aligned with its business objectives.

E

Evocon

evocon.com

61

Evocon is a Denmark-based company specializing in user-friendly OEE (Overall Equipment Effectiveness) software designed to help manufacturing companies automate data collection from machines and provide real-time production performance insights. The company targets manufacturers seeking to improve productivity, reduce waste, and enhance operational efficiency. Their market position is supported by a global client base and trusted brand presence, including notable manufacturing partners. Technically, the website is built on WordPress with modern integrations such as HubSpot, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections in place, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website reflects a professional and credible business with room for improvement in privacy and security transparency.

S

Sviiter Studio

sviiter.ee

56

Sviiter Studio is a small, independent full-service design-oriented studio based in Estonia, specializing in branding, digital, and print design services. The company positions itself as innovative and client-focused, targeting businesses and organizations seeking comprehensive design solutions. The website is professionally designed using the Squarespace platform, featuring clear navigation, responsive design, and integration with social media channels such as Instagram, Facebook, and Behance. Technical infrastructure leverages modern web technologies and content delivery networks to ensure moderate performance and good user experience across devices. Security posture is strong with HTTPS enforced, HSTS enabled, and a cookie consent mechanism in place, although explicit privacy policies and incident response information are absent. Overall, the website reflects a trustworthy and credible business presence with room for improvement in privacy compliance and security transparency.

ID Production is an event marketing and production company that specializes in creating event identities. Their Facebook business page serves as their primary online presence, showcasing their services and engaging with a moderate follower base of approximately 1.1K followers. The company targets event organizers and marketers seeking professional event marketing and production services. The business model is service-oriented, focusing on event marketing and production within a niche market segment. Technically, the page is hosted on the Facebook platform, leveraging Facebook's infrastructure, React framework, and secure HTTPS environment. The page is well-optimized for mobile devices and provides a good user experience with clear navigation and relevant content. The technical implementation benefits from Facebook's robust hosting and security features, ensuring fast performance and accessibility. From a security perspective, the page benefits from Facebook's platform security, including HTTPS enforcement and secure login forms. No direct security vulnerabilities or exposed sensitive data were detected. However, the page lacks explicit privacy, cookie, or terms of service policies specific to the business, relying instead on Facebook's overarching policies. Contact information is limited to an email address, with no phone numbers or physical addresses provided. Overall, the risk profile of the page is low given its hosting on a reputable platform and absence of suspicious indicators. Strategic recommendations include enhancing privacy compliance disclosures, providing additional contact channels, and maintaining strong administrative security practices. The business should also consider linking to a dedicated website for more comprehensive corporate information and policies.

F

FM Capital Consulting Ltd.

capital-consulting.com

48

FM Capital Consulting Ltd. is a well-established Estonian finance consulting firm specializing in worldwide company registration, bookkeeping, compliance, legal support, and tax planning services. The company targets businesses and entrepreneurs, including startups and fintech companies, offering tailored corporate and tax advantage solutions. Their market position is that of a niche consulting provider with expertise in cross-border transactions and fintech licensing. The website is professionally designed with good content quality and clear navigation, supporting their business credibility. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It uses modern tracking and analytics tools including Google Analytics and LinkedIn Insight Tag. Performance and mobile optimization are good, though accessibility is basic. The hosting provider is not explicitly identified but the domain is registered with GoDaddy and uses DNS servers from zone.eu and zone.ee. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. No privacy or cookie policies are present, which is a compliance gap especially given the use of tracking technologies. Contact information is clearly provided, enhancing trust. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the website presents a moderate risk profile with strengths in business credibility and technical implementation but weaknesses in privacy compliance and security best practices. Strategic improvements in privacy policy implementation, cookie consent, and security headers would enhance their security posture and compliance standing.