Security Directory

R

random forest

randomforest.ee

50

Random Forest is a small Estonian IT consultancy and AI development agency founded in 2019, specializing in providing CTO-for-hire services, software development from UI/UX design to scalable backend systems, and AI/ML solutions. Their market position is that of a niche technology partner focused on solving real-life business problems with optimal technology stacks including React, Flutter, Node.js, and Python. The company emphasizes deep business understanding and scalable solutions. Technically, the website is built on Webflow, uses modern fonts and libraries, and is hosted with Cloudflare DNS and Webflow hosting. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided with multiple channels and social media presence. Overall, the website is professional and trustworthy but can improve privacy and security transparency.

K

Kiviõli Keemiatööstus

keemiatoostus.ee

44

Kiviõli Keemiatööstus is an established Estonian company operating in the energy and chemical manufacturing sector. The website presents the company as a regional player focused on traditional energy and chemical production, targeting Estonian-speaking audiences with multilingual support for Russian and English. The business model centers on industrial manufacturing with a clear emphasis on energy and chemical products. The website content is professionally presented with good design quality and clear navigation, supporting a positive user experience. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WPML for multilingual capabilities. It uses jQuery and Google Fonts, and the site is mobile optimized with moderate performance. SEO practices are well implemented, and accessibility is basic but present. The site is served over HTTPS with no detected blocking or WAF mechanisms, indicating a secure and accessible infrastructure. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not provide explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's business claims, supporting domain legitimacy. Overall, the website demonstrates a solid digital presence with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency would enhance trust and resilience. The site is suitable for its business purpose but could benefit from further security and compliance enhancements.

E

Estonian Entrepreneurship University of Applied Sciences

euas.eu

62

The Estonian Entrepreneurship University of Applied Sciences (EUAS) is a prominent private higher education institution in Estonia, specializing in entrepreneurship and applied sciences. It serves a diverse international student body and is strategically located in Ülemiste City, a major business hub. The university offers a range of academic programs including bachelor’s, master’s, open university courses, and micro-credentials, supported by national accreditation and partnerships with reputable organizations. The website reflects a professional and user-friendly digital presence with multilingual support and clear navigation.

S

Stagnation Lab

stagnationlab.com

44

Stagnation Lab is a medium-sized Estonian technology company founded in 2013, specializing in designing and building cross-device and platform digital experiences. Their portfolio includes notable projects such as Smart-ID, Telia TV, and Klarvinduer, indicating a strong market presence in the Baltic region and ambitions for wider European adoption. The company offers a broad range of services including design, web and mobile applications, e-commerce, TV and VR apps, as well as IoT and robotics hardware prototyping. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, and integrates Google Tag Manager for analytics. The site is mobile optimized with good SEO practices and clear navigation, reflecting a mature digital infrastructure. Hosting and domain registration are managed through reputable providers, with domain age consistent with the company's founding date. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and security headers which are recommended for enhanced security. There is no visible privacy or cookie policy, which is a compliance gap especially under GDPR. No incident response or security policy information is provided, limiting transparency on security governance. Overall, the website is professional and trustworthy with moderate security posture and some compliance shortcomings. Strategic improvements in privacy documentation, security headers, and DNS security would enhance trust and reduce risk.

P

Proud Engineers

proudengineers.com

48

Proud Engineers is a specialized consulting firm focused on digital innovation, strategy, and governance. The company offers expertise in policy-making, law, architecture, and technology advisory, targeting organizations seeking complex digital transformation solutions. The website positions Proud Engineers as a trusted global partner with strong client testimonials and a professional online presence. Technically, the site is built on WordPress with Elementor, employing modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and formal privacy or cookie policies. Overall, the website reflects a credible and professional business but would benefit from enhanced privacy compliance and security disclosures.

H

Harbour Enterprise Group | Latvija, Lietuva, Igaunija

harbour.lv

53

The website www.harbour.lv is a small business site hosted on the Wix platform, targeting a Latvian audience. The site uses standard Wix technologies and integrates Google Analytics for visitor tracking. However, the site lacks comprehensive business information, privacy policies, and contact details, which limits its credibility and user trust. Technically, the site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. Overall, the site presents a minimal digital footprint with room for significant improvements in privacy compliance, security, and business transparency.

E

EveryPay

every-pay.com

54

EveryPay operates as a payment gateway service provider offering a merchant portal and risk management tools to facilitate real-time transaction tracking, refunds, and fraud prevention. The website targets merchants and e-commerce businesses primarily in Estonia and the Baltic region, supporting multiple languages including English, Estonian, Latvian, and Lithuanian. The company positions itself as a reliable regional payment service provider with a focus on merchant support and integration ease. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It uses Uikit for styling and includes Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms with nonce tokens. However, it lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data for the subdomain is unavailable, which is typical and not suspicious. Contact information is clearly provided, enhancing trust. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in privacy compliance and security headers would enhance trust and compliance. The site is suitable for its target audience but could benefit from enhanced transparency and security best practices.

Harju Elekter is a well-established Estonian company specializing in electrical distribution solutions with over 55 years of experience. The company serves the energy sector and related industries, offering products such as prefabricated substations and electrical infrastructure services. The website reflects a mature business with a strong market presence, including public stock exchange listing and sustainability recognitions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and security tools such as Google Analytics and reCAPTCHA. The security posture is solid with HTTPS enforced and cookie consent implemented, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and business operations.

The website bpe.ee is currently a parked domain page managed by Zone Media OÜ, an Estonian company specializing in domain registration and web hosting services. The site informs visitors that the domain is registered but not linked to any hosting service and promotes Zone Media's hosting packages in multiple languages (Estonian, Russian, Finnish, and English). The business model focuses on providing domain registration and hosting services primarily in the Baltic region. The website content is basic and serves as a placeholder rather than a fully developed business site. Technically, the site uses standard HTML5, CSS3, SVG graphics, and JavaScript without any detected CMS or advanced frameworks. The hosting provider is Zone Media OÜ, consistent with the WHOIS data. The site is mobile-optimized and loads quickly but lacks advanced SEO and accessibility features. Security headers are minimal, with a Content-Security-Policy header present but weakened by the use of 'unsafe-inline'. HTTPS is implied but not explicitly confirmed in the HTML content. From a security perspective, the site shows basic security hygiene but lacks comprehensive security headers and policies. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. No contact information or incident response channels are provided, limiting transparency and user trust. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is low risk but also low in business credibility and privacy compliance. It functions primarily as a domain parking page with promotional content for hosting services. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and providing clear contact information to improve trust and compliance.

E

Eesti Kaubandus-Tööstuskoda

koda.ee

40

Eesti Kaubandus-Tööstuskoda is a well-established Estonian chamber of commerce and industry organization dedicated to supporting and representing the interests of Estonian businesses. The website reflects a mature digital presence with comprehensive content, including detailed information about services, membership, events, and news. The organization targets Estonian entrepreneurs and companies, offering services such as export development, partner search, tender monitoring, legal advice, and arbitration. The site is built on Drupal 10 with modern analytics and marketing integrations, demonstrating a good level of digital maturity and user experience. Security posture is strong with HTTPS enforced, privacy compliance evident through cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the organization's legitimacy, showing consistent registration details and no privacy protection. Overall, the website is professional, trustworthy, and well-optimized for its audience.

E

Edurus AB

edurus.se

51

Edurus AB operates a professional website focused on providing personalized gravestone design services in Sweden. The company positions itself as a family-owned business offering a simple three-step process to design custom gravestones, targeting individuals seeking memorial solutions. The website demonstrates a moderate level of digital maturity, utilizing WordPress CMS, Gravity Forms for data collection, and integrating marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Bing Ads. Cookie consent is implemented via Cookiebot, indicating awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks explicit security headers and visible incident response contacts. The absence of WHOIS data for the domain www.edurus.se raises concerns about domain registration legitimacy, although the website content and branding appear consistent and professional. Overall, the site scores moderately on content quality, technical implementation, security, privacy compliance, and business credibility.

The survease.io domain currently serves only a 404 Not Found error page with no accessible website content. This prevents any meaningful analysis of the company's business operations, services, or compliance posture. The domain is registered through a privacy protection service based in Iceland and hosted with Cloudflare DNS, indicating some level of infrastructure maturity but no direct evidence of active business presence. The lack of privacy policies, contact information, or security disclosures suggests the website is either inactive or under development. From a security perspective, the site uses HTTPS but lacks security headers and DNSSEC, which are recommended for improved protection. Overall, the site presents a low trust profile due to missing content and transparency.

HugeDomains operates a professional domain marketplace specializing in premium domain sales with flexible payment plans. The website is well-structured, providing clear pricing, purchase options, and customer support channels. The technical infrastructure includes modern JavaScript libraries, Google Analytics for tracking, and Google reCAPTCHA Enterprise for bot mitigation, indicating a mature digital presence. Security posture is strong with HTTPS enforced and SSL encryption, though additional security headers and explicit security policies are absent. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data for the domain www.hugedomains.com suggests privacy protection or unregistered status, which is typical for domain marketplaces. Overall, the site presents a trustworthy and professional front for domain sales.

O

OpenNode LLC

opennodecloud.com

49

OpenNode LLC is a small technology company specializing in open-source infrastructure management software and cloud system implementations. Their product portfolio includes Waldur, an open-source multi-cloud marketplace; Kubernetes ON, a managed Kubernetes service; and the G-Cloud Platform, targeting government cloud solutions. The company targets enterprises and public sector organizations seeking cloud infrastructure management and governance solutions. The website is professionally designed, consistent in branding, and provides clear information about products and services, though it lacks comprehensive privacy and security policy disclosures. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Leaflet.js for mapping, and Google Analytics for user tracking. Hosting appears to be on AWS infrastructure, inferred from DNS nameservers. The site is mobile-optimized with good navigation and user experience, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and published security policies such as privacy, cookie, incident response, or vulnerability disclosure statements. DNSSEC is not enabled, which is a recommended improvement. The WHOIS data shows a consistent and legitimate domain registration dating back to 2010, supporting the company's credibility. Overall, the website presents a moderate security posture and good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

W

WME

wmeentertainment.com

73

WME is a globally recognized talent agency specializing in representing extraordinary artists and creators across multiple entertainment sectors including acting, music, sports, fashion, and more. The website reflects a strong market position with a comprehensive showcase of expertise areas and a clear focus on cultural impact and advocacy. The digital infrastructure is built on WordPress with modern technologies such as lazy loading, CDN delivery via Cloudfront, and advanced SEO optimizations using Yoast. The site is mobile optimized and provides a rich multimedia experience with video content and animations. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response information. The absence of WHOIS registration data is a notable concern for domain legitimacy, but the professional presentation and comprehensive policies support business credibility. Overall, the site is well-constructed, user-friendly, and compliant with privacy regulations, positioning WME as a trusted leader in the talent agency industry.

D

DELUNA4D

seguru.io

51

DELUNA4D operates as an online Toto Macau 4D lottery betting platform targeting Indonesian players who prefer low minimum bets. The website is built on Squarespace, leveraging its CMS and hosting infrastructure, with proper HTTPS and HSTS security configurations. However, the site lacks critical privacy and security disclosures, including privacy policies, cookie consent mechanisms, and incident response contacts, which limits its compliance posture and trustworthiness. The domain registration is stable and consistent with the business age, but the absence of registrant details and minimal contact information reduces transparency. Overall, the platform appears functional but requires significant improvements in privacy, security, and business credibility to enhance user trust and regulatory compliance.

R

Rocksoft

rocksoft.ee

40

Rocksoft is a small Estonian technology company specializing in Oracle E-Business Suite, Oracle NetSuite, and MONITOR ERP solutions. The website is professionally designed using WordPress with modern technologies such as Google Tag Manager and Brizy page builder. The company appears to target businesses seeking ERP and Oracle software implementations. The domain is mature, registered since 2010, and hosted by a known Estonian registrar, indicating legitimacy. However, the website lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled and anonymized Google Analytics, but no security headers or vulnerability disclosures are present. Contact information is not explicitly found on the main page, which may affect user trust and business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.

S

Seto Kongressi Tugiühing MTÜ

seto.ee

40

Seto Kongressi Tugiühing MTÜ operates as the highest representative body for the Seto people, focusing on cultural preservation, language recognition, and community representation. The organization maintains a website that serves as a hub for news, events, and information about the Seto Congress and its elected representatives. The website targets the Seto community and those interested in Seto culture, providing updates and resources primarily in the Seto language. Technically, the site is built on WordPress with modern plugins such as WPBakery and Slider Revolution, hosted likely by Zone Media OÜ, an Estonian registrar and hosting provider. The site demonstrates moderate performance and good mobile optimization, with a clean and consistent design that supports user engagement and navigation. Security-wise, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages, indicating room for improvement in regulatory adherence. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the organization. Strategic recommendations include implementing comprehensive privacy and security policies, enabling DNSSEC, and adding security headers to strengthen the site's security posture and compliance.

S

Sportland

sportland.com

70

Sportland is a well-established retail company specializing in sporting goods and apparel, operating primarily in the Baltic states and Finland with a strong e-commerce presence offering worldwide delivery. The company has a significant market position as the largest sporting goods retailer in the Baltics, supported by over 50 physical stores and a modern online platform. The website leverages modern technologies including React-based PWA and Magento PWA Studio, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements can be made in DNSSEC and security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a professional and trustworthy business with good technical infrastructure.

E

eAgronom

eagronom.com

60

eAgronom is a technology company focused on enabling businesses to achieve sustainability goals while supporting farmers through improved revenue generation, soil quality, and financing access. The website presents a modern, well-designed interface built with Framer and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The site lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts its privacy compliance and business credibility scores. Security posture is weak due to missing security headers and unclear SSL configuration. Overall, the website is functional and professional in design but requires improvements in security, compliance, and transparency to enhance trust and legitimacy.

J

JOT Automation Ltd.

jotautomation.com

67

JOT Automation Ltd. is a specialized provider of advanced automation solutions focused on manufacturing industries including automotive, consumer electronics, renewable energy, telecom, and EV battery sectors. The company offers a broad portfolio of services such as assembly, testing, battery assembly and testing, custom automation, and material handling solutions. Their market position is strong, supported by over 30 years of experience and large-scale turnkey projects, serving a global manufacturing audience. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to B2B customers. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and marketing tools such as Google Tag Manager, Cookiebot, and social media pixels. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness despite the professional website content. No direct company contact emails or phone numbers are publicly listed, with contact primarily via web forms. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website presents a credible and professional business front with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and clarifying domain registration to improve trust.

K

Kingspan

kingspan.com

67

Kingspan operates as a global leader in manufacturing high-performance insulation and building envelope solutions. The website analyzed serves primarily as a country selector landing page, directing users to localized product sites or the corporate site for investor and corporate information. The digital infrastructure leverages Adobe Experience Manager and Adobe Launch, indicating a mature and modern web platform. The presence of a cookie consent banner and integration with Civic Cookie Control demonstrates attention to privacy compliance, particularly GDPR. However, the absence of visible contact information, security policies, and vulnerability disclosures limits transparency. The WHOIS data is notably missing or unresolvable, which raises concerns about domain registration legitimacy despite the professional website presentation. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

The website laanekv.ee is currently non-functional due to a critical PHP fatal error in the Redux Framework WordPress plugin. This error causes the site to crash and exposes internal file paths, which is a significant security concern. The domain is registered through Zone Media OÜ, an Estonian hosting and registrar provider, with a creation date in 2016, indicating a small business presence. However, the website lacks any accessible content, metadata, or business information, making it impossible to assess the company's services or market position from the site itself. Technically, the site uses WordPress with the Redux Framework plugin but suffers from poor performance and no visible SEO or accessibility features. Security posture is weak due to exposed errors and missing security headers. No privacy, cookie, or terms of service policies are present, and no contact information is available on the site. Overall, the site appears neglected or under maintenance, severely limiting trust and usability.

S

Smartecon

smartecon.ee

58

Smartecon is an established Estonian company specializing in solar park construction and renewable energy solutions, boasting over 10 years of industry experience. The company targets business clients seeking sustainable and cost-effective solar energy installations. Their market position is strong within Estonia, recognized as builders of some of the largest solar power plants in the country. The website reflects a professional and consistent brand image, with multilingual support and clear service offerings focused on solar energy projects and consulting. Technically, the website is built on WordPress using Elementor and Jet Engine plugins, hosted behind Cloudflare DNS. It employs modern web technologies including Matomo analytics, Google Tag Manager, and Facebook Pixel, all integrated with cookie consent mechanisms. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and DNSSEC. From a security perspective, the site uses HTTPS with a good SSL configuration and implements reCAPTCHA v3 to protect forms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website presents a trustworthy and professional digital presence with solid business credibility. To enhance security posture and compliance, it is recommended to publish privacy and security policies, implement additional security headers, enable DNSSEC, and provide incident response contacts. These steps will improve user trust and regulatory compliance.

OÜ TMB Element is a well-established Estonian manufacturing company specializing in the production of concrete building elements, serving primarily the Baltic region. Founded in 1961, it holds a strong market position as one of the largest producers in its sector. The website reflects a professional and consistent brand image, offering multilingual support and detailed product and company information. The technical infrastructure is based on WordPress with modern web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers and policies could be improved. Privacy compliance is well addressed with comprehensive cookie and privacy policies and consent mechanisms. Overall, the site demonstrates high trustworthiness and business credibility.

S

Synerall AS

synerall.com

58

Synerall AS is a software company specializing in customer service and invoicing solutions tailored for small and medium-sized energy companies. Established in 2009, the company positions itself as a market leader in its niche, offering automated processes to improve operational efficiency for energy sector clients. The website reflects a professional and modern digital presence built on WordPress with Elementor, integrating various analytics and marketing tools to support business growth. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements in security headers and explicit privacy policies are recommended. Overall, the domain registration data supports the legitimacy and longevity of the business, with consistent WHOIS information and no privacy protection masking ownership.

R

Reiven Solutions

reiven.eu

47

Reiven Solutions is a small Estonian technology service provider specializing in web-based software, custom IT solutions, hosting, and marketing services. The company targets businesses and organizations seeking tailored web development and IT support. Their website presents a professional and consistent brand image with a focus on quality solutions and client engagement through portfolio showcases and service descriptions. Technically, the site is built on WordPress using the Salient theme and WPBakery page builder, incorporating modern web technologies and responsive design. The use of Matomo analytics and Cookiebot indicates a moderate level of digital maturity with attention to user privacy preferences. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

The website jpcordial.com is currently under construction and does not provide any active business content or services. The domain is registered since 2008 with a reputable registrar, indicating a legitimate domain ownership, but the lack of content suggests the site is either inactive or in redevelopment. The technical infrastructure includes Bootstrap 3.3.7 and jQuery 3.1.1, with Google Adsense integrated for advertising. Mobile optimization and accessibility are basic to poor, and SEO is minimal due to the lack of content and meta tags. Security posture is limited; while HTTPS is enabled, no DNSSEC or security headers are present, and no forms or inputs exist to secure. Privacy and cookie policies are absent, and no contact or business information is provided, which negatively impacts trust and compliance. Overall, the site has a low maturity level and requires significant improvements in content, security, and compliance to be considered a professional and trustworthy business website.

C

Communications Test Design, Inc.

ctdi.com

55

Communications Test Design, Inc. (CTDI) is a well-established company founded in 1975, specializing in global engineering, repair, and logistics services primarily for the telecommunications sector. The company offers a broad range of services including STB/CPE, mobile and consumer electronics, mobility product solutions, network services, product supply, and hyperscale AI data center and cloud services. CTDI targets telecom carriers, cable companies, and OEMs worldwide, operating over 100 global locations with a strong emphasis on innovation and service excellence. Technically, the website is built on a modern WordPress CMS platform using Elementor for design and layout, supported by SEO and performance optimization plugins such as Yoast SEO and WP Rocket. The site demonstrates good mobile optimization and moderate performance, with standard analytics and marketing tools including Google Tag Manager and Facebook Pixel. However, some accessibility features are basic, and security headers are not visibly implemented. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. Nonetheless, the absence of security headers and lack of visible privacy and cookie policies indicate areas for improvement. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not contradict the legitimacy suggested by the website content and branding. Overall, CTDI presents a professional and credible online presence with a solid business model and global footprint. Strategic recommendations include enhancing privacy compliance by publishing clear policies and cookie consent mechanisms, implementing security headers, and providing incident response and vulnerability disclosure information to strengthen trust and security posture.

P

Printon AS

printon.ee

46

Printon AS is a well-established printing company based in Tallinn, Estonia, specializing in a wide range of printing services including books, magazines, catalogs, calendars, and advertising materials. The company positions itself as a comprehensive printing partner offering consultation, repro, printing, binding, post-processing, and logistics services all under one roof. Their market presence is supported by ISO 9001 and ISO 14001 certifications, indicating a commitment to quality and environmental management. The website is professionally designed, multilingual, and provides clear contact information and service descriptions, targeting both business and individual customers in the region. Technically, the website is built on WordPress using the Avada theme and integrates modern web technologies such as Google Analytics, Google reCAPTCHA v3, and Slider Revolution. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Security posture is strong with HTTPS enforced, security headers present, and secure form handling, but lacks a formal security policy or incident response information. Overall, the site is trustworthy and professional with no signs of malicious activity or suspicious behavior. However, improvements in cookie consent mechanisms and formal security disclosures would enhance compliance and user trust. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing accessibility.

О

ОККО

okko.ua

57

ОККО is a large Ukrainian energy and transportation company operating a network of over 400 gas stations across Ukraine. The website is professionally designed, localized primarily in Ukrainian with English alternatives, and targets drivers and vehicle owners. The business model focuses on retail fuel sales and convenience services, positioning ОККО as a major player in the national fuel retail market. Technically, the website uses modern JavaScript frameworks such as Vue.js, integrates Google Tag Manager for analytics, and employs CookieYes for cookie consent management. The site is mobile optimized and SEO friendly with structured data and Open Graph tags implemented. Security posture is good with HTTPS enabled and basic security best practices observed, though explicit security headers and policies are not published. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

A

Advokaadibüroo GLIMSTEDT

glimstedt.ee

41

Advokaadibüroo GLIMSTEDT is a well-established full-service law firm with a strong focus on business law, serving clients primarily in the Baltics and Scandinavia. Founded in 1935, the firm offers a broad range of legal services including data protection, M&A, energy, real estate, tax, banking, and dispute resolution. The website reflects a professional and consistent brand image with clear navigation and regularly updated content, supporting its market position as a reputable legal services provider. Technically, the site is built on WordPress with modern libraries and integrates key analytics and marketing tools, ensuring a good digital maturity level. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit security policies are missing. Overall, the site is trustworthy and well-maintained, with room for improvement in privacy policy transparency and incident response readiness.

B

Büroomaailm

byroomaailm.ee

67

Büroomaailm is an established Estonian e-commerce retailer specializing in office supplies, office technology, furniture, and school and art supplies. The website targets both retail and wholesale customers within Estonia, offering a broad product range and a professional online shopping experience. The platform is built on Magento 2 with various extensions enhancing functionality, including wishlist management and advanced search features. The site employs modern JavaScript libraries and tracking tools such as Hotjar, Microsoft Clarity, and Google Tag Manager to monitor user behavior and optimize marketing efforts. Security-wise, the site enforces HTTPS with a good SSL configuration but lacks visible security headers and published security policies. Privacy compliance is weak, with no explicit privacy or cookie policies detected, which could pose regulatory risks. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

Asper Biogene is a specialized genetic testing company offering a broad range of DNA testing services including next-generation sequencing panels, whole exome sequencing, and whole genome sequencing. The company targets healthcare professionals, geneticists, and patients seeking advanced genetic diagnostics. Their market position is supported by multiple certifications such as ISO 15189:2012 and ISO 9001:2015, and a Health Board license, indicating compliance with healthcare standards. The website content is professionally presented with detailed service descriptions and a multilingual interface. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Google Analytics integrations. The site is mobile optimized and SEO friendly with structured data implemented. Performance is moderate with room for improvement in accessibility features. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and cookie consent mechanisms. The WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy. However, the website's professional content and certifications mitigate some trust issues. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance security transparency. Overall, Asper Biogene presents a credible and professional online presence for a healthcare genetic testing provider, but should address WHOIS transparency, cookie consent, and security header implementation to strengthen trust and compliance.

Nevercode Ltd. operates Codemagic, a specialized SaaS platform providing continuous integration and delivery (CI/CD) services tailored for mobile app development across multiple frameworks including Flutter, React Native, native Android/iOS, Unity, Ionic, and MAUI. The platform targets mobile development teams seeking to automate build, test, and release workflows to accelerate app delivery. With over 150,000 developers trusting the service, Codemagic holds a strong market position as a focused mobile CI/CD solution with enterprise-grade features and integrations. Technically, the website demonstrates a modern and performant infrastructure hosted on AWS, utilizing JavaScript, CSS, and HTML5 with integrations for Google Tag Manager and Plausible Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. The platform itself offers cloud-based, fully maintained infrastructure with support for multiple hardware/software configurations, emphasizing ease of use and automation. From a security perspective, Codemagic maintains a robust posture with HTTPS enforced, SOC 2 type 2 and ISO 27001 certifications, and compliance with GDPR and CCPA. The website includes privacy and security statements and cookie consent mechanisms. However, there is no public incident response contact or security.txt file, which could enhance transparency and vulnerability management. No critical vulnerabilities or exposed sensitive data were detected. Overall, Codemagic presents a trustworthy, professional, and technically sound offering with strong compliance and security practices. The domain registration is privacy protected but consistent with the company profile and age. Strategic recommendations include publishing a security.txt file, adding explicit incident response contacts, and enhancing security headers to further strengthen security posture and trust.

E

Ester Digital OÜ

ester.co

53

Ester Digital OÜ is a full-service digital agency established in 2015, providing a broad range of services including web design, branding, UI/UX software design, CMS and software development, mobile development, and IT consulting. The company targets businesses primarily in the USA, UK, Canada, and Europe, positioning itself as a trusted partner for meaningful digital growth. Their client portfolio includes notable brands such as IQVIA, T-Mobile, and NHS, indicating a strong market presence and credibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google reCAPTCHA, Gravity Forms, and SEO tools like Yoast. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Analytics tools such as Google Analytics, Google Tag Manager, and Ahrefs are employed for user tracking and marketing insights. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks some security headers and explicit security or incident response policies. WHOIS data shows privacy protection consistent with a legitimate business, and the domain age aligns with the company's history. Privacy and cookie policies are present, though a cookie consent mechanism is missing, which is a minor compliance gap. Overall, Ester Digital presents a professional, trustworthy digital agency with solid technical infrastructure and good security hygiene, though improvements in security headers and privacy compliance mechanisms are recommended to enhance their security posture and regulatory adherence.

R

Ragn-Sells AS

ragnsells.no

68

Ragn-Sells AS operates as a waste management and container rental service provider primarily serving private individuals, housing cooperatives, and businesses in Norway. The company positions itself as a reliable partner offering predictable pricing and professional waste handling solutions. The website is built on a modern technical stack including Episerver CMS and hosted on Microsoft Azure, leveraging advanced analytics tools such as Matomo, Piwik Pro, Microsoft Application Insights, and New Relic for performance and user behavior monitoring. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism in place, although some security best practices like security headers and incident response policies are not explicitly published. The absence of WHOIS data due to privacy protection limits full domain trust verification but does not contradict the legitimacy of the business presence. Overall, the website demonstrates a mature digital infrastructure with room for improvement in transparency and security policy disclosures.

R

Ringtail Studios

ringtail-studios.com

73

Ringtail Studios is a well-established EU-based art development studio specializing in 3D content production and co-development services for the gaming and digital entertainment industries. Founded in 2006 and part of the Magic Media group, the company serves a global clientele including AAA game titles and mobile games. Their key services include game art production, animation, VFX, and cybersecurity, supported by a workforce of over 1000 professionals across 15 worldwide locations. The website reflects a professional and consistent brand image with a focus on showcasing their portfolio and partnerships.

V

Voxmate

voxmate.com

64

Voxmate is a technology company focused on delivering an all-in-one Android app designed specifically for blind and visually impaired users. Their product offers a gesture-based interface to access news, audiobooks, games, and communication tools, positioning them as an innovative player in the accessibility technology market. The company operates a subscription-based business model with free limited access and discounted early access paid plans. Their market position is that of an emerging, specialized provider with a clear target audience and strategic partnerships, notably with Sight and Sound Technology in the UK. Technically, the website is built using modern web technologies including Angular 13, FontAwesome, and integrates third-party services such as YouTube, Wistia, Facebook Pixel, and Google Tag Manager. Hosting and domain registration are managed via Amazon Registrar, indicating a reliable infrastructure. The site is mobile-optimized and accessible, with good SEO practices and a professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks published security policies, incident response contacts, and security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but lacking comprehensive GDPR details. The absence of explicit contact information and security disclosures suggests areas for improvement. Overall, Voxmate presents a trustworthy and professional online presence with a solid business foundation and technical implementation. Strategic enhancements in security transparency, privacy compliance, and contact availability would strengthen their risk posture and user trust.

R

Roksnet Solutions OÜ

roksnet.com

53

Roksnet Solutions OÜ is a technology company specializing in secure data exchange platforms based on the X-Road protocol, which is widely used in Estonia, Finland, and other countries. The company offers platform-as-a-service solutions and consultancy to governments and organizations aiming to build interoperable digital societies. Their market position is strengthened by their extensive experience and EU Horizon 2020 funding, positioning them as a credible player in the digital interoperability space. Technically, the website is built on a modern stack including Laravel, Bootstrap, and jQuery, hosted on DigitalOcean, with good mobile optimization and moderate performance. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though lacking explicit security policies and security headers. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the website is professional, trustworthy, and well-aligned with the business claims.

E

Elkdata OÜ

opera.ee

59

Rahvusooper Estonia is a well-established national opera house in Estonia, offering a wide range of cultural performances including operas, ballets, musicals, and concerts. The website reflects a professional cultural institution with a medium-sized operation, targeting the general public interested in performing arts. The business model centers on live event performances and ticket sales, supported by a consistent brand presence and official social media channels. Technically, the website uses modern JavaScript frameworks such as React, integrates Google reCAPTCHA for form security, and employs Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and error monitoring via Sentry, but lacks some security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the trustworthiness of the site.

A

AS Ekspress Grupp

egrupp.ee

44

AS Ekspress Grupp is a leading media conglomerate in the Baltic region, specializing in digital and traditional media publishing including web media, newspapers, magazines, and books. The company has a strong market position supported by a large portfolio of subsidiaries across Estonia, Latvia, and Lithuania. Their business model focuses on digital media solutions and services, targeting a broad audience in the Baltic states. The website reflects a mature digital presence with multilingual support and investor relations transparency. Technically, the site is built on WordPress with common plugins for analytics, multilingual content, and cookie compliance. Security posture is solid with HTTPS and reCAPTCHA integration, though some improvements in security headers and library versions are recommended. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy. Overall, the site demonstrates high business credibility and professional presentation.

K

Kaubamaja

kaubamaja.ee

62

Kaubamaja is a large Estonian retail company operating a professional e-commerce platform offering a wide range of products including beauty, fashion, home, children's goods, and gourmet items. The website is well-branded and targets consumers looking for convenient and safe online shopping experiences. The technical infrastructure leverages modern frontend technologies such as Vue.js and integrates third-party services like Klevu for search and Cookiebot for cookie consent management, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and enhancing security headers. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy and terms of service. Overall, the website is trustworthy and professionally maintained, serving a large retail market in Estonia.

A

Ahola Transport

aholatransport.com

56

Ahola Transport is a well-established Finnish logistics and transport company with over 70 years of experience, operating primarily in the Nordic and Central/Eastern European markets. The company offers a range of services including road transports, green kilometers initiatives, and custom logistics solutions, emphasizing eco-efficiency and digital innovation. The website reflects a professional and modern digital presence with multilingual support and comprehensive service information. Technically, the site is built on WordPress with modern plugins and integrations such as Gravity Forms, Google reCAPTCHA, and Google Tag Manager, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and anti-bot measures on forms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and certifications like AEO-status. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

P

Palmako AS

palmako.ee

53

Palmako AS is a well-established Estonian manufacturer specializing in high-quality wooden garden products, including playgrounds, garden houses, furniture, and saunas. As part of the Lemeks Group, it benefits from a strong supply chain and international presence with branches in multiple countries and exports to over 30 countries worldwide. The website reflects a mature digital presence with comprehensive product information, multilingual support, and clear contact channels. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

N

Noxtton | IT & Consulting Services

noxtton.com

64

Noxtton is an international technology and consulting company and venture studio founded in 2016. They provide a broad range of services including software development, design, digital marketing, big data and AI solutions, security assessments, and consulting. The company targets businesses and brands globally, positioning itself as a multi-dimensional technology partner with a strong portfolio of ventures and partnerships. Their website reflects a professional and modern digital presence with clear service offerings and a focus on innovation. Technically, the website is built using modern frameworks such as Next.js and React, hosted and registered via Cloudflare, ensuring reliable performance and security. Google Tag Manager is used for analytics and marketing tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and explicit security policies or vulnerability disclosures. No contact information for incident response or data protection officers is provided. Privacy and cookie policies are missing, which impacts compliance with GDPR and other regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security policies, and clearer contact information to improve user trust and regulatory adherence.