Security Directory

I

Interactive Brokers LLC

interactivebrokers.com

67

Interactive Brokers LLC operates a leading global online brokerage platform providing direct access to stocks, options, futures, currencies, bonds, and funds. The company targets a broad audience including individual traders, investors, advisors, and institutional clients. It holds a strong market position supported by a Nasdaq listing, substantial equity capital, and multiple industry awards. The website reflects a mature digital presence with comprehensive product information, multilingual support, and advanced trading technologies. Technically, the site uses modern frameworks like Bootstrap and jQuery, is well optimized for performance and mobile devices, and implements strong security headers and HTTPS encryption. Privacy compliance is evident through cookie consent mechanisms and a detailed privacy policy. However, the absence of publicly available WHOIS data and explicit security policy or incident response contacts slightly reduce trustworthiness. Overall, the site demonstrates a high level of professionalism, security, and user experience suitable for a major financial services provider.

J

Jobbatical OÜ

jobbatical.com

75

Jobbatical OÜ is a specialized provider of visa, immigration, and employee relocation services targeting businesses worldwide. Founded in 2014 and headquartered in London, UK, the company offers a technology-enabled platform combined with expert support to simplify global mobility and ensure compliance. Their services include visa and immigration support, global mobility solutions, and settle-in services, catering primarily to corporate clients seeking to relocate employees internationally. The website is professionally designed, multilingual, and provides comprehensive business and contact information, reflecting a mature digital presence. Technically, the site is built on Webflow with integrations such as Weglot for translations and Google Tag Manager for analytics, indicating a modern web infrastructure. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though explicit security headers are not detected and no incident response or vulnerability disclosure information is published. The WHOIS data is notably missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced security disclosures and WHOIS transparency to improve credibility further.

O

Orbis Oy

orbis.fi

63

Orbis Oy is a Finnish company specializing in advanced data transfer solutions for various sectors including smart cities, real estate, data centers, manufacturing, defense, and telecommunications. With over 75 years of experience, Orbis positions itself as a reliable partner for developing future-proof data transfer infrastructure. The website reflects a professional and consistent brand image, targeting industrial and governmental clients with tailored solutions. Technically, the site is built on WordPress with modern plugins for SEO and analytics, and it employs a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though additional security headers could enhance protection. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

U

United Angels VC

unitedangels.vc

54

United Angels VC is an early-stage venture capital fund based in Estonia, with a portfolio of notable startups such as Bolt and Starship. The fund's investment period for United Angels Fund I has ended, and current investments are made under the Specialist VC Fund II brand. The website reflects a professional and consistent brand presence, with clear business information and legal disclosures. Technically, the site is built on the Voog CMS platform, utilizing modern web technologies and is mobile optimized. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and privacy compliance is limited due to absence of privacy and cookie policies. Contact information is limited but includes a verified company email and physical address. Overall, the site is trustworthy and credible but could improve privacy and security transparency.

The website at https://forpeeps.eu/lander is a minimal placeholder or parking page with no substantive business content, contact information, or policies. It appears to be hosted via GoDaddy.com, LLC and uses a proprietary landing system labeled 'PW' with JavaScript and Google Adsense for advertising. The lack of privacy, cookie, or terms of service policies and absence of contact details indicate a very low level of digital maturity and business presence. Security posture is weak due to missing HTTPS confirmation and absence of security headers. Overall, the site does not provide sufficient information to assess business legitimacy or compliance, resulting in a low trust and security score.

The website kkfashion.eu is an early-stage or under-construction online presence for a fashion e-commerce business, as indicated by the linked shop subdomain. The site is built on WordPress 6.8.1 and hosted under the registrar Zone Media OÜ in Estonia, consistent with the domain's country. The content is minimal, with no privacy, cookie, or terms of service policies present, and no contact or security information provided. Technically, the site uses standard WordPress assets and scripts but lacks advanced SEO, accessibility, and security headers. No analytics or advertising technologies are detected, indicating a low digital maturity level. Security posture is basic with no visible vulnerabilities but also no advanced protections or policies. Overall, the site is low in trustworthiness and professionalism due to its incomplete state and lack of compliance documentation.

I

Integratsiooni Sihtasutus

meis.ee

49

Integratsiooni Sihtasutus is a government-affiliated non-profit organization in Estonia dedicated to supporting integration through language education, cultural programs, and community services. The website serves as a comprehensive portal for immigrants, returnees, employers, and cultural organizations, offering resources, events, and guidance. The organization holds a strong market position as a key national integration service provider, supported by government and European Social Fund funding. Technically, the website is built on Drupal 9 with modern front-end technologies, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and anonymized analytics, though improvements are recommended in security headers and incident response transparency. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, reflecting the organization's mission and credibility.

I

Intership Navigation Co. Ltd

intership-cyprus.com

49

Intership Navigation Co. Ltd operates as a specialized provider in the maritime transportation sector, focusing on ship and crew management services. Their offerings include technical management, crewing and training, commercial management, accounting, insurance, travel, catering, and sustainable management. The company positions itself as a leader with a commitment to safety, quality, and ESG principles, targeting shipowners and maritime stakeholders. The website reflects a medium-sized enterprise with consistent branding and trust signals such as certifications and active social media presence. Technically, the website is built on TYPO3 CMS, leveraging modern web standards including HTML5, CSS3, and JavaScript. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no blocking or WAF detected, indicating reliable hosting and infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not publish explicit security or incident response policies. No cookie consent mechanism is present, which impacts privacy compliance. The WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy, although the website content and certifications suggest a legitimate business. Overall, the website is professional and functional with room for improvement in privacy compliance, security best practices, and domain registration transparency. Strategic enhancements in these areas would strengthen trust and security posture.

S

Saksa Automaatika OÜ

saksa-automaatika.ee

44

Saksa Automaatika OÜ is a specialized industrial automation company based in Estonia, officially recognized as a Siemens AG Solution Partner. The company offers engineering, maintenance, and consulting services across multiple industrial sectors including energy, chemical, mining, water treatment, food production, and wood and paper industries. Their website reflects a professional and consistent brand presence with clear contact information and trust indicators such as certifications and partner logos. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security measures include HTTPS, reCAPTCHA, and email obfuscation, though additional HTTP security headers and published security policies would enhance their posture. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is credible and trustworthy, supporting the company's business claims and market position.

F

Feks

feks.me

49

Feks is a small design portfolio website focused on providing branding and web design solutions. The site showcases various projects and serves as a digital portfolio for the business. The business model is centered around design services with a target audience of clients seeking creative design solutions. The website is built on WordPress using common plugins and libraries, indicating a moderate level of technical maturity. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and privacy policies. No explicit contact emails or phone numbers are provided, relying on contact forms and social media links. Overall, the site is functional and professional but could improve in compliance and security aspects.

Enefit Green is a leading renewable energy producer in the Baltic Sea region, specializing in wind and solar energy production across Estonia, Latvia, Lithuania, Poland, and Finland. The company operates a significant portfolio of wind parks, solar power plants, and other renewable assets, with a production capacity exceeding 1100 megawatts. Positioned as the largest wind energy producer in the Baltics, Enefit Green targets environmentally conscious energy consumers and investors seeking sustainable energy solutions. The business model focuses on clean energy generation and regional energy independence, supported by substantial recent investments and a growing asset base. Technically, the website is built on modern frameworks such as React and Next.js, hosted with Cloudflare DNS and CDN services, and incorporates Cookiebot for privacy compliance. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, providing a fast and user-friendly experience. The presence of structured data and comprehensive metadata further enhances its digital maturity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers and incident response policies are not publicly detailed. No vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the security posture is strong but could be improved by adding formal security policies and DNSSEC. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing transparency around security and incident response to further strengthen trust and compliance.

K

Keila Kool

keilakool.ee

41

Keila Kool is a well-established educational institution in Estonia with a history spanning over 300 years. The website serves as an information portal for students, parents, and staff, offering details about school operations, educational programs, news, and contact information. The institution positions itself as a key local school with a medium-sized presence and a focus on comprehensive education including adult learning and extracurricular activities. Technically, the website is built on WordPress with a modern tech stack including jQuery and FontAwesome, and it is hosted by Elkdata OÜ, an Estonian provider. The site is accessible, mobile-optimized, and uses HTTPS, ensuring secure connections. However, there are gaps in privacy compliance, notably the absence of privacy and cookie policies, which could pose regulatory risks. Security posture is generally good with no visible vulnerabilities, but the lack of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, serving its educational mission effectively.

S

Shokkin Group International

shokkin.org

45

Shokkin Group International is a European network of youth organizations focused on supporting innovative development in youth work and education. Established in 2015 and registered in Estonia, it serves as a collaborative platform for small to medium NGOs to foster personal and civic growth among young people. The website is built on WordPress and employs common plugins such as Yoast SEO and Jetpack, hosted on HostGator servers. It features good SEO practices and a cookie consent mechanism compliant with EU regulations. Security posture is adequate with HTTPS enabled and domain protection measures, though lacks advanced security headers and published security policies. Contact information is limited to email addresses, with no phone or physical address provided. WHOIS data shows privacy protection consistent with the organization's profile and domain age aligns with business history. Overall, the site is professional and functional but could improve in privacy compliance and security transparency.

Kiili Vallavalitsus operates as the official local government authority for the Kiili municipality in Estonia, providing a broad range of public services including social welfare, education, environmental management, urban planning, and cultural activities. The website serves as a comprehensive portal for residents and businesses, offering information, e-services, and updates on local governance. The site is well-structured with clear navigation and content relevant to its target audience, primarily local residents and stakeholders. Technically, the website is built on the Liferay CMS platform and utilizes common web technologies such as jQuery, Bootstrap, and Font Awesome. It integrates Google Analytics and Google Tag Manager for analytics and tracking purposes. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, the use of an outdated jQuery version introduces potential security vulnerabilities that should be addressed. From a security perspective, the website demonstrates basic best practices including HTTPS enforcement and cookie consent mechanisms. There is no evidence of advanced security headers or explicit incident response policies published on the site. The absence of vulnerability disclosure and terms of service pages indicates areas for improvement in transparency and compliance. Overall, the security posture is moderate but could be enhanced by updating libraries and implementing additional security controls. The domain registration details align well with the website's government identity, showing consistency and legitimacy. Contact information is clearly provided, including official email, phone number, and physical address, reinforcing trustworthiness. Social media presence is primarily on Facebook, supporting community engagement. Strategic recommendations include updating outdated libraries, implementing comprehensive security headers, publishing security and incident response policies, and enhancing privacy compliance disclosures to strengthen user trust and regulatory adherence.

B

Balti Logistika

baltilogistika.com

44

Balti Logistika is a well-established logistics company founded in 2005, providing freight forwarding and supply chain management services primarily in the Baltic countries of Estonia, Latvia, and Lithuania. The company offers a comprehensive range of services including air, ocean, rail, and road freight, as well as special services, VMI, and warehousing. Their market position is regional with a focus on serving businesses requiring logistics solutions in the Baltic region. The website supports multiple languages, indicating a broad target audience within these countries. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates several third-party analytics and advertising tools such as Google Analytics, Facebook Pixel, and Adform. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and domain protection statuses set, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is weak due to the absence of privacy and cookie policies, and no direct contact emails or phone numbers are visible, relying solely on contact forms. Overall, the website is professional and credible but would benefit from enhanced security and privacy transparency.

Texas Instruments is a global semiconductor company specializing in the design, manufacture, testing, and sale of analog and embedded processing chips. The company maintains a comprehensive and professionally designed website that targets engineers, designers, and enterprises in the semiconductor industry. The site offers extensive product catalogs, design resources, and support forums, reflecting a mature and well-established business model with a strong market position. Technically, the website employs modern web technologies including JavaScript, CSS3, and custom CMS infrastructure, with integrated analytics and consent management tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is strong with HTTPS enforced and privacy compliance evident, though some security headers and explicit incident response contacts could be improved. The WHOIS data for the domain is not publicly available, which is unusual for a large enterprise but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the website demonstrates a high level of digital maturity and business credibility, with minor recommendations for enhancing security transparency and incident response visibility.

S

SA Kutsekoda

kutsekoda.ee

45

SA Kutsekoda operates as an impartial cooperation platform in Estonia, focusing on identifying current and future skill and occupational needs. It coordinates the development of vocational standards, organizes vocational examinations, and analyzes labor market and skill requirements. The organization serves as a central body in Estonia's vocational education and labor market ecosystem, targeting employers, employees, and educational institutions. The website is professionally designed, multilingual, and integrates modern web technologies including WordPress, Yoast SEO, and Smart Slider 3, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, use of security plugins, and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is good with visible cookie consent and privacy policy in Estonian. Overall, the site demonstrates high trustworthiness and professionalism appropriate for a government-related entity.

C

CyberSift | Cybersecurity Solutions for Your Business

cybersift.io

66

The website www.cybersift.com appears to be a Wix-hosted site with minimal accessible content and no visible WHOIS registration data, indicating the domain may not be registered or WHOIS data is privacy protected. The site includes tracking scripts such as Hotjar and Apollo.io, suggesting user behavior analytics are in place. However, there is a lack of essential business information, contact details, and compliance policies such as privacy or cookie policies. Technically, the site uses Wix's standard platform and scripts, with basic mobile optimization and moderate performance. Security posture is weak due to missing security headers and lack of HTTPS enforcement details. Overall, the site presents a low trust profile with significant gaps in transparency and compliance.

U

Unicorn Solutions AS

unicorn-solutions.com

43

Unicorn Solutions AS is a Norway-based software product company specializing in credit management solutions, including modular business applications such as Unicorn Box, Workflow, and Communication platforms. The company targets collection agencies and businesses requiring integrated credit management and workflow automation. Their market position is supported by a long-established domain since 2009 and Microsoft Silver Partner certification, indicating a credible and specialized niche player. Technically, the website employs a traditional tech stack including jQuery 1.11.1, Bootstrap, Font Awesome, and Google Analytics/Tag Manager for tracking. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Performance is moderate with no critical technical flaws detected. However, the use of an outdated jQuery version and absence of security headers are notable technical risks. From a security perspective, the site uses HTTPS (assumed from URL), but no security headers were detected in the provided data. There is no visible privacy or cookie policy, nor any incident response or vulnerability disclosure information, which are gaps in compliance and security transparency. The domain WHOIS data is consistent and supports legitimacy, with no privacy protection masking registrant details. Overall, the website is professional and functional but requires improvements in privacy compliance and security best practices to enhance trust and reduce risk. Strategic recommendations include implementing GDPR-compliant privacy and cookie policies, adding security headers, updating libraries, and publishing incident response information.

M

Meeskonnakoolitus ja Arendus OÜ

meeskonnakoolitus.ee

37

Meeskonnakoolitus ja Arendus OÜ is an Estonian company specializing in team training and organizational development services. Their offerings include multi-day team training, experiential learning, consulting, mentoring, and coaching aimed at improving cooperation, leadership, and communication within organizations. The company targets Estonian businesses seeking to enhance team dynamics and leadership skills. The website is built on Joomla CMS with Bootstrap and jQuery, featuring a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and CSRF tokens in forms, but the use of outdated JavaScript libraries and lack of security headers present moderate risks. Privacy and cookie policies are not found, indicating compliance gaps. Contact information and social media presence are clearly provided, supporting business credibility.

T

Thermoarena OÜ

thermoarena.com

51

Thermoarena OÜ is a medium-sized Estonian manufacturing company specializing in high-quality thermally modified wood products such as decking, cladding, and lumber. The company emphasizes sustainability and eco-friendliness, positioning itself as a leader in the Estonian wood industry with multiple recognitions and a strong creditworthiness rating. Their target audience includes architects, designers, and environmentally conscious consumers seeking durable and natural wood alternatives. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using modern libraries such as jQuery, Bootstrap, and Slick Slider. It employs HTTPS with a good SSL configuration and uses CAPTCHA to secure its contact form. However, the site lacks DNSSEC and important security headers, which are recommended for enhanced security. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates a reasonable posture with HTTPS enforcement and domain transfer protection. However, the absence of privacy and cookie policies, security headers, and incident response information indicates compliance gaps and areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Thermoarena's website is credible and professional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

C

Convertal OÜ

convertal.ee

46

Convertal OÜ is a well-established Estonian digital marketing agency specializing in a broad spectrum of services including SEO, social media marketing, digital advertising, analytics, and marketing training. The company positions itself as a strategic partner for businesses aiming to enhance their online visibility and achieve measurable business outcomes. Their market position is strong within Estonia and the Baltic region, supported by client testimonials and Google Partner certification. Technically, the website is built on WordPress with modern marketing and analytics integrations such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements in security headers and formal security policies are recommended. Overall, the website demonstrates professionalism, good user experience, and trustworthy business credibility.

N

Nordkalk

nordkalk.com

56

Nordkalk is a leading limestone supplier in Northern Europe, providing essential raw materials and solutions for industries such as agriculture, environmental care, steel, pulp and paper, and construction. The company emphasizes sustainability and circular economy principles, aiming to reduce carbon footprint and maximize resource utilization. Owned by UK-based SigmaRoc PLC, Nordkalk operates multiple localized domains serving different European markets. The website is built on WordPress with modern technologies and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain www.nordkalk.com raises concerns about domain registration legitimacy, though the website content and branding appear professional and trustworthy. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site reflects a mature business with a strong sustainability focus but would benefit from enhanced transparency in domain registration and security policies.

M

Messente Communications Ltd

messente.com

72

Messente Communications Ltd operates a global business messaging platform specializing in SMS API services, enabling businesses to send text messages and notifications across 197 markets. The company is positioned as a reliable and worry-free messaging provider targeting businesses requiring scalable communication solutions. Founded in 2010 and based in Estonia, Messente has established a medium-sized presence in the telecommunications technology sector. The website reflects a mature digital infrastructure leveraging HubSpot CMS and marketing tools, with good mobile optimization and professional design. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit security policies could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the website and domain registration data indicate a trustworthy and credible business with a strong market position.

A

Amstelhoorn Notariaat

amstelhoorn.nl

38

Amstelhoorn Notariaat is a specialized notarial service provider focusing on leasehold (erfpacht) matters in Amsterdam. The company positions itself as an expert with comprehensive process control, efficient service, and client communication. The website reflects a small-sized, niche business with a clear market focus on Amsterdam residents and entities requiring leasehold notarial services. Technically, the website is built on WordPress with standard SEO and analytics tools, including Google Analytics, Facebook Pixel, and Bing UET, indicating a moderate level of digital maturity. The site is mobile optimized and professionally designed, providing a good user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is basic, with no visible cookie consent mechanism or detailed privacy policy. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

Interlogistics is a small logistics and transportation company operating primarily in Estonia and Belgium, as indicated by the contact phone numbers and email domain. The website is built on Joomla! CMS and uses common web technologies such as jQuery and Bootstrap. The technical infrastructure appears basic but functional, hosted by Radicenter OÜ, which also acts as the domain registrar, indicating consistent ownership and control. The website content is minimal, focusing mainly on contact information and a login form, with no visible privacy, cookie, or terms of service policies. Security posture is moderate; HTTPS is implied but no advanced security headers or protections are evident. The login form lacks visible CSRF tokens or other modern security controls. Overall, the site is functional but lacks comprehensive security and privacy compliance features.

A

Associazione Joint

associazionejoint.org

48

Associazione Joint is a well-established Italian non-profit organization based in Milan, specializing in international youth mobility, volunteering, and cultural exchange programs. Founded in 2003, it has a strong market position as a leader in its sector, offering a variety of services including European Voluntary Service, international work camps, language courses, and support for other non-profit organizations. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at young people seeking international experiences. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Tag Manager, and various marketing and privacy plugins. The hosting is provided by Hosting Concepts B.V., with Cloudflare DNS but DNSSEC is not enabled. Security posture is good with HTTPS and domain transfer protections, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service on the main site. Overall, the site is trustworthy and professionally maintained but could improve transparency on privacy and security policies.

AP Hogeschool Antwerpen is a well-established higher education institution based in Antwerp, Belgium, offering a wide range of educational programs including bachelor degrees, teacher training, and arts education. The website reflects a professional and comprehensive educational service provider targeting students, professionals, and society at large. Technically, the site is built on Drupal 10, uses modern web technologies, and implements cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The lack of explicit privacy policy and contact information for security or incident response are areas for improvement. Overall, the domain appears legitimate despite WHOIS data restrictions imposed by DNS Belgium, which is common for .be domains. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, and providing direct contact channels for compliance and incident reporting.

E

E-riigi Akadeemia

ega.ee

38

The e-Governance Academy (eGA) is a well-established Estonian organization specializing in digital transformation and e-governance advisory services. With over 20 years of experience and engagement in 145 countries, eGA positions itself as a center of excellence for governments and public administrations seeking to enhance prosperity and openness through digital means. The website reflects a professional and comprehensive digital presence, featuring rich content including conferences, podcasts, and insights relevant to its target audience. Technically, the site is built on WordPress with modern performance optimizations and uses Google Tag Manager and CookieYes for analytics and consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security best practices like DNSSEC and security headers could be improved. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service pages detected. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

D

Datafruit

datafruit.ee

57

Datafruit is a small Estonian technology company specializing in accelerating business data evolution through analytics and optimization services. Their website reflects a professional B2B service provider targeting businesses interested in supply chain and cost dynamics analysis. The company has been established since 2014, with a consistent domain registration and hosting setup. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR-compliant cookie management. Security posture is good with HTTPS enabled and bot protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed through detailed cookie consent mechanisms and a linked cookie policy. However, explicit contact information and security policies are not present, which could be enhanced to improve trust and compliance. Overall, the website is functional, moderately performant, and professionally presented, with room for improvement in accessibility and security transparency.

M

Mistra-Autex AS

mistra.ee

62

Mistra-Autex AS is a well-established Estonian manufacturing company specializing in high-quality non-woven and tufted carpet products primarily for the automotive industry, with additional markets in furniture and footwear. The company has a strong market position supported by multiple industry certifications and awards, a medium-sized workforce, and a turnover of approximately 27 million Euros. Their website reflects a professional digital presence built on WordPress with Elementor, optimized for performance and mobile use. Security posture is solid with HTTPS, security headers, and reCAPTCHA on forms, though explicit security policies and cookie consent mechanisms are absent. Overall, the website and domain registration data indicate a legitimate and credible business with room for improvement in privacy compliance and security transparency.

S

ScanMarine Estonia OÜ

scanmarine.ee

46

ScanMarine Estonia OÜ is a small Estonian company specializing in the sale and rental of sea containers along with comprehensive transport and logistics services including maritime, air, road, and rail transport. Established in 2012, the company targets both business and consumer markets within Estonia and the broader EU region. Their website reflects a professional and consistent brand presence with multilingual support and e-commerce capabilities. Technically, the site is built on WordPress with WooCommerce and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and PixelYourSite, all managed with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Overall, the website demonstrates good digital maturity, compliance, and trustworthiness.

W

White Mammoth

whitemammoth.com

48

White Mammoth is a specialized visualization company focusing on architectural 3D images, animations, drone photography, and virtual reality content. Their website showcases a portfolio of exterior and interior projects, targeting architects, real estate developers, and design professionals. The company positions itself as a niche service provider in the real estate visualization market, leveraging modern web technologies such as Bootstrap and jQuery to deliver a responsive and visually appealing user experience. Technically, the website employs standard frontend libraries and Google Analytics for tracking. While the site is mobile-optimized and well-structured, it lacks advanced security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency, although the active social media presence partially offsets this risk. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but improvements are needed in implementing security headers and formalizing privacy compliance. The overall risk is moderate, with recommendations focusing on enhancing security posture, adding privacy documentation, and clarifying domain registration details to improve trustworthiness. Strategically, White Mammoth should prioritize compliance and transparency to strengthen its market position and reassure clients about data protection and business legitimacy.

T

Tavrida Electric

tavrida.com

46

Tavrida Electric is a globally recognized manufacturer specializing in medium voltage electrical equipment, including vacuum circuit breakers and automatic circuit reclosers. The company operates in over 22 countries with nearly 3000 employees, positioning itself among the top three suppliers worldwide in its industry. Their website reflects a professional and well-structured digital presence, targeting utility companies and industrial clients requiring reliable power system components. Technically, the site leverages Bitrix CMS, jQuery, and Google Tag Manager, indicating a mature but somewhat traditional technology stack. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks comprehensive security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of public WHOIS data slightly reduces trust but is not uncommon for large international companies employing privacy protection. Overall, the website is functional, professional, and credible, with moderate room for enhancement in privacy compliance and security posture.

1

1Home

1home.eu

41

1Home is a regional student housing provider focusing on accommodation for international students and interns in Baltic states and Poland. The company offers freshly renovated shared apartments with services such as weekly housekeeping, fixed utilities, and high-speed Wi-Fi. The website is built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. It integrates common analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, but lacks comprehensive security headers and explicit GDPR cookie consent mechanisms. Overall, the website presents a professional and trustworthy image but could improve privacy compliance and security best practices.

M

Motieka & Audzevičius

tark.legal

50

Advokaadibüroo TARK OÜ is a well-established full-service law firm based in Estonia, operating since 1991. The firm offers a broad range of legal services including corporate law, mergers and acquisitions, banking and finance, competition regulation, dispute resolution, energy, real estate, IT, labor, and tax law. Positioned as a leader in the Baltic legal market, TARK has received multiple industry recognitions and maintains a strong client testimonial presence. Their target audience primarily consists of businesses and professionals requiring comprehensive legal support in Estonia and the Baltic region. Technically, the website is built on WordPress using modern plugins such as Yoast SEO Premium and WPBakery Page Builder. It integrates multiple tracking and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good SEO practices, though performance is moderate. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, but lack advanced security headers and explicit security policies. The security posture is solid but could be improved by implementing additional HTTP security headers and publishing incident response and security policies. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, though terms of service and vulnerability disclosure information are absent. WHOIS data confirms domain legitimacy and consistency with the business location and history. Overall, the website reflects a professional and credible legal services provider with a mature digital presence. Strategic improvements in security policies and technical hardening would enhance trust and compliance further.

R

Reliex

reliex.com

64

Reliex is a technology company specializing in Jira plugins designed to enhance project management workflows through resource planning, duplicate issue detection, and notification management. The company has established a strong market presence with over 5,000 teams globally, including Fortune 500 clients, and offers its products primarily via the Atlassian Marketplace. Their website reflects a mature SaaS business model focused on productivity tools for Jira users. Technically, the site is built on Webflow and integrates modern analytics and tracking tools such as Google Analytics, Segment, and Hotjar, alongside robust bot protection via Cloudflare and Google reCAPTCHA. Security posture is strong, supported by SOC 2 Type II and ISO 27001:2022 certifications, participation in bug bounty programs, and a comprehensive cookie consent mechanism. However, the absence of explicit privacy policy and terms of service pages, as well as direct contact information, represents areas for improvement. Overall, the website is professional, secure, and trustworthy, with minor gaps in privacy compliance documentation.

E

eHost OÜ

royal.ee

40

Aktiva.ee is an Estonian business information portal focused on supporting entrepreneurs at various stages, including startups, operating companies, and those expanding internationally. The site offers practical guidance, resources, and educational content related to business planning, management, marketing, accounting, legal frameworks, and international trade. The portal positions itself as a comprehensive guide for business success in Estonia and beyond. Technically, the website is built on WordPress, leveraging common plugins such as Google Analytics and Google reCAPTCHA for security and tracking. Hosting and DNS services are provided by eHost OÜ and Cloudflare respectively, ensuring reliable infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit HTTP security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is a well-structured, content-rich portal with moderate technical maturity and security posture. To enhance trust and compliance, it should implement comprehensive privacy and cookie policies, improve security headers, and provide clear contact and incident response information.

S

SIGA

siga.swiss

70

SIGA is a Swiss-based company specializing in providing high-quality vapour control layers, tapes, adhesives, and sealants aimed at enabling architects, builders, and installers to construct energy-efficient and airtight buildings. The company positions itself as a trusted supplier in the building materials sector with a focus on sustainable and durable building envelope solutions. Their website is well-structured, multilingual, and rich in technical content including product catalogs and guides, targeting professional audiences in the construction industry. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, integrating modern analytics and tracking tools such as Google Tag Manager and Hotjar. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is basic with cookie consent implemented but no explicit privacy policy page found. Overall, the website reflects a professional and credible business presence with good digital maturity.

O

ONLINE ONLY OÜ

onlineonly.com

62

ONLINE ONLY OÜ is a small, Estonia-based digital marketing and online business management company operating a fully remote team of about 30 people. The company focuses on managing and investing in profitable online businesses including SaaS, eCommerce, and publishing sectors. Their key services include conversion optimization, Google Ads, SEO, design, and development. The company presents a professional and consistent brand image with a clear portfolio of owned businesses, indicating a stable market position in their niche. Technically, the website is built on a modern React and Gatsby framework, delivering good performance and mobile optimization. However, the site lacks critical privacy and cookie policies, and no security headers were detected, which are areas for improvement. The domain is well maintained with a long history and consistent WHOIS data, supporting the legitimacy of the business. Overall, the security posture is moderate with room for enhancements in policy transparency and technical security measures.

H

Hookah

hekkpipe.com

56

Hekkpipe.com appears to be a WordPress-based website branded as 'Hookah' with minimal content and limited business information. The domain is well-established since 2013 and uses Cloudflare DNS services, indicating a moderate level of technical infrastructure. The website employs standard web technologies including Bootstrap and jQuery, but lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled and domain-level protections, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the site shows basic digital maturity but requires enhancements in privacy compliance, security best practices, and business transparency to improve trustworthiness and professional standing.

S

SDDNL

sdd.nl

69

SDDNL is a specialized distributor of high-quality print finishing machinery and materials based in the Netherlands. The company offers a range of products including binders, laminators, cutters, creasers, and folders, targeting professional print finishing businesses. Their website reflects a strong market position with partnerships with well-known brands and a focus on quality and technical innovation. The digital infrastructure is built on WordPress with WooCommerce, enhanced by performance and GDPR compliance plugins, indicating a mature and professional online presence. Security posture is solid with HTTPS, security headers, and spam protection, though there is room for improvement in publishing dedicated security policies and incident response information. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, supporting the company’s credibility and trustworthiness in its niche market.

G

gotoAndPlay

gotoandplay.ee

57

gotoAndPlay is a small, agile web development team based in Estonia, founded in 2013. They specialize in creating web applications, websites, and MVPs using modern technologies such as React, Laravel, and WordPress. The company emphasizes close collaboration with clients to deliver result-driven digital solutions. Their market position is that of a niche, high-quality service provider focused on innovation and client partnership. Technically, the website is built on a modern stack with good performance, mobile optimization, and SEO best practices. Security posture is strong with HTTPS, security headers, and privacy compliance including cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site reflects a professional and trustworthy business with a clear focus on privacy and user experience.

C

Crowdly

crowdly.com

66

Crowdly operates a mature customer engagement platform focused on activating brand advocates for market research, user-generated content, and word-of-mouth marketing. The company targets brands seeking to deepen customer loyalty and engagement through a SaaS model with managed service options. The website presents a professional and consistent brand image supported by client logos, case studies, and testimonials, indicating a strong market position. Technically, the website uses modern frameworks such as Bootstrap 5, integrates Google Analytics, Google Tag Manager, and Intercom for marketing and customer support. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and CSRF protections in forms. However, DNSSEC is not enabled and security headers are not detected, representing areas for improvement. Privacy compliance is partial; a privacy policy is present and GDPR compliance is indicated, but no cookie consent mechanism is implemented. No explicit security policy or incident response contacts are published. Overall, Crowdly's website is trustworthy and professional with a good security baseline. Strategic improvements in privacy compliance and security hardening would enhance trust and reduce risk.

G

Error

gaiaschool.in

49

The website gaiaschool.in currently serves an error page hosted by Wix indicating that the domain is not connected to any active website. There is no business content, contact information, or policies available, which severely limits the ability to assess the business or its market position. The site uses AngularJS and jQuery libraries and is hosted on the Wix platform. The technical infrastructure is basic and typical of a placeholder or error page. Security posture is minimal with no visible security headers or SSL information, and no privacy or cookie policies are present. Overall, the site is inaccessible for normal users and does not provide any meaningful content or business credibility. The risk level is high due to lack of content and security measures.

O

Omnes Capital

omnescapital.com

69

Omnes Capital is a prominent European private equity firm specializing in the energy transition sector. The company supports visionary entrepreneurs and manages significant assets across renewable energy, sustainable cities, deeptech venture capital, and co-investment opportunities. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on their business mission and services. Technically, the site employs modern JavaScript libraries, integrates Cookiebot for GDPR-compliant cookie management, and uses Google Analytics and Bugsnag for analytics and performance monitoring. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and a published security policy suggests room for improvement. The lack of WHOIS data is a notable concern for domain legitimacy, but the overall professional presentation and compliance mechanisms mitigate some risk. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust.

V

Virumaa Muuseumid

svm.ee

41

Virumaa Muuseumid is a regional museum network based in Estonia, focusing on cultural heritage, history, and educational services related to the Virumaa region. The website serves as a portal to various museums including Rakvere linnus, Palmse mõis, and others, targeting visitors interested in history and culture. The business operates primarily as a government or non-profit entity with a small organizational size and a recent establishment date in 2022. Technically, the website is built on WordPress, leveraging common plugins for SEO, analytics, and cookie management, hosted by Zone Media OÜ. The site is well-structured with multilingual support and good accessibility features. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, though DNSSEC is not enabled and security headers are not explicitly confirmed. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policy. Overall, the site is professional, trustworthy, and serves its cultural mission effectively.

W

Wallester AS

wallester.eu

72

Wallester AS is a European leader in card issuing and expense management solutions, providing white-label and business expense card platforms. The company targets businesses seeking embedded finance and streamlined corporate spending solutions. Their market position is strong within the European fintech sector, supported by a modern, well-structured website and a clear business model focused on B2B SaaS offerings. Technically, the website uses modern JavaScript frameworks like React, integrates Google Tag Manager and Bing Ads for marketing and analytics, and is hosted with Cloudflare DNS services. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and domain transfer protections in place, but could be improved with DNSSEC and additional security headers. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.