Security Directory

E

Eesti Üliõpilaskondade Liit

eyl.ee

39

Eesti Üliõpilaskondade Liit (EÜL) is a well-established Estonian non-profit umbrella organization representing student unions nationally. It advocates for student rights, participates in policy development, and supports student representatives. The website is professionally designed using WordPress with modern plugins and provides clear contact information and social media presence. The organization also serves as the official representative for the ISIC student card in Estonia, indicating a key partnership. Technically, the site uses a modern CMS and includes SEO optimizations, but some performance and security header improvements are possible. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and security policies are absent. Analytics tools like Facebook Pixel and Hotjar are used, with Google Analytics plugin present but not configured. Overall, the site demonstrates a good security posture but could enhance security headers and incident response transparency.

A

Amandus Communication

amanduscommunication.com

61

Amandus Communication is a specialized online corporate communications agency focusing on corporate websites and related services, primarily serving publicly traded companies and organizations. Their offerings include website advisory, design, production, IPO and transaction support, integrated connections for investor relations and recruitment, concept and design services, and financial reporting. The company leverages platforms such as WordPress and Optimizely and promotes a Website as a Service (WaaS) model through their partner domain amanduswp.com. Technically, the website uses modern web technologies with JavaScript and CSS, is mobile optimized, and served over HTTPS, but lacks advanced security headers and privacy compliance mechanisms. Security posture is moderate with room for improvement in DNS security and policy disclosures. Overall, the site presents a professional and trustworthy image with clear contact information and consistent branding.

E

Exove

exove.com

67

Exove is a technology company specializing in creating future-friendly digital solutions aimed at helping businesses grow. Their website presents a professional and modern digital presence, leveraging WordPress CMS and integrating multiple third-party marketing and analytics tools such as Google Analytics, HubSpot, and Leadfeeder. The company demonstrates compliance with GDPR through a comprehensive cookie consent mechanism and detailed cookie policy. Technically, the site is hosted behind Cloudflare, ensuring good SSL configuration and performance. Security headers are partially inferred but could be improved with explicit implementation. No blocking or WAF challenges were detected, indicating open accessibility. However, the absence of WHOIS data for the domain www.exove.com raises concerns about domain registration transparency, which impacts trustworthiness despite the professional website content.

M

Miterassa

miterassa.ee

56

Miterassa operates a professional e-commerce platform specializing in consumer electronics, including audio, video, and smart devices, targeting customers primarily in Estonia. The website presents a well-structured catalog with clear navigation and a consistent brand presence. The business model focuses on retail sales supported by extended warranty and installation services, positioning Miterassa as a reputable regional player in the electronics retail market. Technically, the website is built on Magento 2, leveraging modern JavaScript frameworks such as RequireJS and jQuery, and integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for consent management. The site is mobile-optimized and employs HTTPS with appropriate security headers, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as enforcing HTTPS, implementing cookie consent, and using security headers. However, it lacks publicly available security policies and incident response contacts, which are recommended for enhanced transparency and compliance. No critical vulnerabilities or suspicious indicators were detected. Overall, the website is professional, secure, and compliant with privacy regulations, reflecting a trustworthy business. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility features, and maintaining regular audits of third-party scripts to sustain security posture.

F

FOB Solutions OÜ

fob-solutions.com

50

FOB Solutions OÜ is a technology service provider specializing in software development, quality assurance, digitized business operations, and Elastic consulting services. The company targets businesses seeking expert technology solutions and positions itself as a niche provider with a focus on Elastic technologies and digitized operations. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern SEO and analytics tools integrated. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good privacy compliance. Security posture is strong with HTTPS enforced and no exposed sensitive data, though additional security headers and policies could enhance protection. The absence of WHOIS data is a concern for domain legitimacy but is offset by the professional website and active social media presence. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security documentation.

ج

جيديا للتقنية

geidea.net

62

جيديا للتقنية هي شركة رائدة في مجال حلول الدفع الإلكتروني ونقاط البيع في المملكة العربية السعودية، تقدم خدمات متكاملة تشمل أجهزة نقاط البيع، المدفوعات عبر الإنترنت، وحلول نقاط البيع للمطاعم. تتمتع الشركة بحصة سوقية كبيرة في السعودية وتقدم خدماتها لأكثر من 150,000 تاجر مع أكثر من 5 ملايين عملية مالية يومياً. الموقع الإلكتروني يعكس تركيز الشركة على السوق السعودي ويقدم محتوى غني ومتنوع باللغة العربية مع دعم للغة الإنجليزية. من الناحية التقنية، يستخدم الموقع تقنيات حديثة مثل Bootstrap وjQuery مع تكامل أدوات تتبع وتحليل مثل Google Tag Manager وFacebook Pixel. من حيث الأمن، الموقع يستخدم HTTPS بشكل كامل ويطبق ممارسات أمان أساسية، لكنه يفتقر إلى بعض السياسات الأمنية المنشورة مثل سياسة الأمان أو سياسة الحوادث. لا توجد سياسات خصوصية أو ملفات تعريف ارتباط واضحة، مما يشير إلى فجوات في الامتثال للخصوصية. من ناحية أخرى، وجود شهادات معتمدة وترخيص من البنك المركزي السعودي يعزز من مصداقية الشركة. التقييم العام للموقع جيد مع نقاط قوة في المحتوى والموثوقية، لكن هناك مجال لتحسين الامتثال للخصوصية وتعزيز ممارسات الأمان التقنية. التوصيات الاستراتيجية تشمل نشر سياسات الخصوصية والكوكيز، تحسين رؤوس الأمان، وتوفير قنوات اتصال للحوادث الأمنية.

H

Hoob OÜ

hoob.ee

43

Hoob OÜ is an Estonian company specializing in factory automation and machine building, serving industries such as automotive, electronics, telecom, and medical sectors. Established in 2015, it offers turnkey automation solutions and subcontracting services including engineering and manufacturing. The company maintains a strong market position with reputable clients like ABB and Ericsson, supported by ISO certifications and European funding. Technically, the website is built on WordPress with modern libraries and plugins, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and anti-spam measures, though lacking some advanced security headers and explicit privacy policies. Overall, the site is professional and trustworthy, but could improve privacy compliance and security transparency.

A

Access Partnership

accesspartnership.com

60

Access Partnership is a well-established public policy consultancy specializing in technology and innovation sectors, founded in 1999. The company provides comprehensive advisory services including policy analysis, regulatory strategy, compliance, advocacy campaigns, and government advisory. Their market position is strong as a leading global consultancy with a focus on helping businesses and governments navigate complex regulatory environments. Technically, the website is built on WordPress with modern plugins and integrations such as HubSpot forms, Google Tag Manager, and Cloudflare DNS, delivering fast performance and excellent mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is currently basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, the website demonstrates high professionalism and business credibility, supported by trust signals such as awards and active social media presence.

G

Go Wombat OU

gowombat.team

71

Go Wombat OU is a custom software development company founded in 2015, specializing in personalized digital solutions including web and mobile applications, cybersecurity consulting, AI and machine learning services, and business process automation. The company positions itself as a passionate team of world-class developers focused on transparency, loyalty, and performance, targeting businesses seeking tailored software solutions. The website is professionally designed with clear navigation and modern technologies such as Next.js, React, Python frameworks, and is hosted on DigitalOcean. However, the site lacks explicit privacy, cookie, and terms of service policies, as well as visible contact information, which impacts privacy compliance and user trust. Security posture is moderate with HTTPS enabled and domain locking, but missing DNSSEC and security headers.

A

AS Arstikeskus Confido

ortopeediaarstid.ee

43

Ortopeediaarstid, now part of AS Arstikeskus Confido since April 2024, is a well-established orthopedic healthcare provider in Estonia offering a comprehensive range of modern orthopedic treatments including arthroscopy, endoprosthetics, physiotherapy, and sports medicine. The website targets patients seeking specialized orthopedic care and provides detailed service descriptions, appointment booking options, and patient information in multiple languages. The business is positioned as a reputable healthcare provider with a medium-sized operation and a clear focus on quality patient care. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and reCAPTCHA v3 for form security. The site is mobile-optimized, SEO-friendly, and uses structured data for enhanced search engine visibility. Hosting is managed by Zone Media OÜ, a known Estonian hosting provider. Performance is moderate with good accessibility and navigation. From a security perspective, the site enforces HTTPS, integrates reCAPTCHA to protect forms, and uses Wordfence security plugin scripts. However, it lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and a clear cookie consent mechanism. Contact information is comprehensive and professionally presented. Overall, the website demonstrates a solid security posture and business credibility with room for improvement in security policy transparency and accessibility. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance.

P

Platvorm

platvorm.ee

47

Platvorm is a specialized data visualisation studio based in Tallinn, Estonia, focusing on integrating physical and digital spaces through innovative digital platforms. Their services include data visualisation, exhibitions, smart city solutions, mapping, installations, web development, VR/AR, and 3D printing. The company targets clients who require advanced digital storytelling and interactive media solutions. The website reflects a niche market position with a professional and consistent brand presence. Technically, the website is built using modern technologies such as React and Next.js, with a focus on performance and mobile optimization. The use of Plausible Analytics indicates a privacy-conscious approach to user tracking. However, there is room for improvement in accessibility and security headers to enhance the overall technical maturity. From a security perspective, the site benefits from HTTPS and deferred script loading but lacks important security headers and formal privacy and cookie policies, which are critical for GDPR compliance. No forms or sensitive data exposure were detected, reducing immediate risk. The WHOIS data aligns well with the website's claims, supporting legitimacy. Overall, the website is professional and functional but should address privacy compliance and security best practices to reduce risk and improve trustworthiness.

L

Laenud

emara.ee

50

The website emara.ee operates as an online loan comparison and referral platform targeting the Estonian market, primarily offering information and access to various loan products such as quick loans, small loans, mortgage loans, and business loans. The site is built on a modern WordPress CMS with Elementor page builder and uses Cloudflare DNS services. It demonstrates good SEO practices with Rank Math plugin and structured data markup. However, the domain is very recently registered in early 2025 by a registrar company rather than the business itself, which raises questions about the maturity and legitimacy of the operation. No privacy, cookie, or terms of service policies are present, and no direct company contact emails or phone numbers are provided, limiting transparency. Security posture is moderate with HTTPS enabled but lacking important security headers.

A

APTEK

aptek.ee

41

APTEK is a small hospitality business operating as a cocktail and shot bar located in Pärnu, Estonia. The website presents a well-structured digital presence with event promotions, a cocktail menu, and club membership offerings targeting adults interested in nightlife. The business appears established with a domain age of over 12 years, consistent WHOIS data, and active social media engagement. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Owl Carousel, providing a moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, and the contact form is disabled, which limits user interaction and compliance with data protection regulations. Security headers are not evident, and while HTTPS is used, further security hardening is recommended. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices.

H

Heidi Park Kondiiter

kondiiter.ee

44

Heidi Park Kondiiter is a small Estonian bakery business operating since 2010, specializing in retail and custom cakes including gluten-free options. The website is built on WordPress with WooCommerce, providing an e-commerce platform and rich content including product descriptions and Instagram integration. The business has announced permanent closure effective June 13, 2025. Technically, the site uses modern web technologies and maintains good SSL security, but lacks explicit privacy and security policies. Contact information is clearly presented, enhancing business credibility. Security posture is adequate but could be improved with additional headers and published policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

O

OÜ Teadusteater

teadusteater.ee

41

OÜ Teadusteater is an Estonian small-sized company specializing in personalized scientific performances and workshops for various events such as children's birthdays, corporate parties, schools, and festivals. The company leverages a team of enthusiastic science popularizers with extensive experience in notable Estonian science outreach projects. Their market position is strong within the educational and entertainment niche in Estonia, supported by partnerships with reputable institutions like Tartu University and Teaduskeskus AHHAA. Technically, the website is built on WordPress with a moderate performance profile and good mobile optimization, though it uses outdated software versions that pose security risks. Security posture is adequate with HTTPS enforced but lacks modern security headers and up-to-date software. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but requires improvements in security and compliance to reduce risk and enhance user trust.

V

Vecta Design

vectadesign.com

56

Vecta Design is a specialized interior solutions company focusing on stretch ceilings, lighting, acoustic, and smart air systems. Established in 2009, it positions itself as a market leader offering high-quality products and installation services to residential and commercial clients. The website reflects a professional and modern digital presence built on WordPress with WooCommerce, showcasing products and projects effectively. Technically, the site uses modern plugins and frameworks, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security practices.

C

Compensa Vienna Insurance Group, ADB Eesti filiaal

seesam.ee

36

Seesam.ee is the online presence of Compensa Vienna Insurance Group, ADB Eesti filiaal, a well-established insurance provider in Estonia with over 30 years of market experience. The company offers a broad range of insurance products including motor, casco, travel, home, accident, and life insurance, targeting both private individuals and business clients. The website is professionally designed, mobile-optimized, and provides clear navigation and multiple contact channels, supporting a user-friendly customer experience. The business is part of the Vienna Insurance Group, enhancing its market credibility and trustworthiness. Technically, the website employs modern web technologies including JavaScript, jQuery, and Google Tag Manager, with Cloudflare DNS and likely CDN services ensuring reliable hosting and performance. The site implements GDPR-compliant cookie consent mechanisms and uses Google Analytics for user behavior tracking. Accessibility and SEO optimizations are well addressed, contributing to good overall digital maturity. From a security perspective, the site enforces HTTPS and integrates GDPR-aware analytics scripts. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced transparency and preparedness. No critical vulnerabilities or exposed sensitive data were detected in the content. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, seesam.ee presents a trustworthy, professional, and user-centric insurance service platform with solid technical and security foundations. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture and customer confidence.

S

SkyfrontVR

skyfrontvr.com

57

SkyfrontVR is a niche multiplayer VR FPS game focused on zero-gravity battle arenas, targeting VR gaming enthusiasts. The website serves primarily as a promotional and informational platform with links to Steam for game purchase and social media for community engagement. Technically, the site is built on WordPress with common plugins like Yoast SEO and Elementor, and integrates marketing tools such as Google Analytics and Facebook Pixel. The site is accessible over HTTPS with no visible SSL issues but lacks advanced security headers and privacy compliance features. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts trustworthiness despite the professional presentation and active social media presence. Overall, the site demonstrates moderate digital maturity but requires improvements in privacy, security policies, and domain registration transparency.

S

SSH - Master Planning, Infrastructure, Building Design and Construction Supervision.

sshic.com

43

SSH is a well-established international architecture and engineering consultancy firm with a strong presence across the GCC and Middle East & Africa regions. Founded in 1961, the company offers a comprehensive range of services including building design, construction supervision, infrastructure design, and master planning. The firm is recognized as a top player in its industry, ranked 95 globally by ENR in 2024 and among the top 10 fee-earning architects in the Middle East. Their target audience includes clients seeking high-quality architectural and engineering consultancy services in the MEA region. The website reflects a professional and consistent brand image with good content quality and clear navigation.

L

Leden Group

favor.ee

55

Leden Group Oy is a Finnish manufacturing company specializing in metal-based contract manufacturing, steel service center operations, and cold roll formed steel profiles. The company is positioned as a leading partner in the Baltic region and is part of the HANZA Group, which supports its growth and market presence. The website reflects a professional and modern digital presence built on WordPress and Elementor, with integrated consent management and analytics tools. Security posture is solid with HTTPS, domain locking, and consent mechanisms, though some security policy documentation and incident response contacts are missing. Overall, the website is trustworthy and well-structured, supporting the company's B2B manufacturing business model effectively.

S

SchooLinks

schoolinks.com

68

SchooLinks is a specialized education technology company providing a comprehensive SaaS platform designed to support K-12 schools and districts in college and career readiness planning. The platform offers tools for student planning, compliance reporting, family engagement, and industry partnerships, positioning itself as a modern solution for educational institutions. The website demonstrates a strong market presence with multiple customer testimonials and state-specific resources, indicating a well-established user base. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, HubSpot, Clearbit, and other marketing and analytics tools. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security practices are robust, with HTTPS enforced, security headers present, and published policies including vulnerability disclosure and SOC certification, indicating a commitment to data protection and compliance. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the professional nature of the website and business mitigates immediate trust issues. Overall, SchooLinks presents a credible, professional, and secure online presence suitable for its target market. Continued monitoring of domain registration details and enhancement of incident response contact information would further strengthen trust and security posture.

T

triOS College Business Technology Healthcare Inc.

trios.com

69

triOS College is a well-established private career college in Ontario, Canada, specializing in hands-on education and training across multiple faculties including business, technology, healthcare, law, supply chain, and gaming & design. With over 40,000 graduates since its founding in 1992, triOS College operates multiple campuses and offers online learning options, positioning itself as a leading career-focused educational institution in the region. The website reflects a professional and comprehensive approach to student engagement, including bursaries, career services, and a variety of learning modalities. Technically, the website is built on WordPress and leverages modern web technologies such as Google Tag Manager, Google Analytics, LiveChat, and reCAPTCHA for security and user interaction. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security posture is strong with HTTPS enforced and use of anti-bot measures, though improvements like DNSSEC and explicit security headers could enhance protection further. From a security and compliance perspective, triOS College maintains a comprehensive privacy policy that aligns with GDPR requirements, though it lacks a cookie consent mechanism. Contact information is abundant and clear, but no explicit incident response or vulnerability disclosure policies are published. The domain registration is consistent with the business history, showing long-term stability and legitimacy. Overall, triOS College's digital presence is professional, trustworthy, and well-maintained, supporting its market position as a reputable career college. Strategic recommendations include enhancing DNS security, implementing cookie consent for privacy compliance, publishing vulnerability disclosure information, and strengthening security headers to further improve the security posture.

The website rescue.ee is currently inaccessible due to a Cloudflare Turnstile human verification challenge, which blocks access to the actual content. The domain is registered to Elkdata OÜ, an Estonian company, with a domain age dating back to 2010, indicating a mature and legitimate registration. However, the lack of accessible content prevents detailed analysis of the business operations, services, or compliance posture. The technical infrastructure relies on Cloudflare's security and performance services, including Turnstile captcha and Cloudflare Insights for analytics. Security posture appears to be enforced by Cloudflare, but no direct security headers or policies are visible due to the blocked content. Privacy and cookie policies, terms of service, and contact information are not found on the accessible page, limiting compliance and trust assessments.

T

Telia Eesti AS (Registrar)

kinosoprus.ee

29

Kino Sõprus is a well-established cinema business based in Estonia, offering a diverse range of movie screenings, special events, and venue rental services. The website reflects a professional and consistent brand presence targeting local cinema-goers and cultural audiences. The business operates multiple screening locations in Tallinn and maintains partnerships with cultural and industry organizations, enhancing its market position. Technically, the site is built on Drupal 10, leveraging modern web technologies and standard analytics tools, providing a good user experience with mobile optimization and accessibility features. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

P

Pilvio

astrecdata.com

70

Pilvio is an Estonian cloud platform founded in 2017, offering simplified cloud services such as virtual server hosting and S3-compatible object storage. Positioned as a local alternative to global cloud providers, Pilvio targets Estonian businesses and IT professionals seeking reliable and easy-to-use cloud infrastructure with data residency in Estonia. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is basic, with HTTPS enabled but lacking advanced security headers and explicit privacy or cookie policies. No direct contact information or incident response details are published, which may impact user trust and compliance. Overall, Pilvio presents a professional and consistent brand image with moderate trustworthiness but would benefit from enhanced security and privacy compliance measures.

T

Tommi Mäkinen Racing Oy

tommimakinenracing.fi

50

Tommi Mäkinen Racing Oy operates the website www.tommimakinenracing.fi, offering specialized ice driving experiences featuring the Toyota GR Yaris and expert coaching by 4-time World Rally Champion Tommi Mäkinen. The business targets motorsport enthusiasts and individuals interested in rally driving on ice, leveraging the strong personal brand of Tommi Mäkinen to position itself as a niche leader in this segment. The website content is professionally presented with consistent branding and relevant imagery, emphasizing the adrenaline and precision of the driving experience. Technically, the website is built using the Framer platform, employing modern HTML5, CSS3, and JavaScript technologies. It includes proper meta tags for SEO and social media sharing, and the site is mobile optimized with good performance metrics. Security is well addressed with HTTPS enforced and multiple security headers present, indicating a mature security posture. However, the site lacks explicit privacy and cookie policies, GDPR compliance statements, and incident response contacts, which are important for regulatory compliance and user trust. Overall, the security posture is strong with no detected vulnerabilities or blocking mechanisms, but privacy compliance is weak due to missing policies and consent mechanisms. The business credibility is high given the clear association with Tommi Mäkinen and professional presentation, though contact information is not explicitly provided on the site. Strategic recommendations include adding comprehensive privacy and cookie policies, GDPR compliance disclosures, and clear contact channels for security incidents to enhance trust and compliance.

G

Geenius Meedia

geenius.ee

34

Geenius.ee is a well-established Estonian media platform operated by Geenius Meedia, focusing on delivering fact-based, understandable, and useful content across various domains including technology, automotive, finance, health, and lifestyle. The platform operates multiple niche subdomains and offers services such as news articles, podcasts, e-commerce, and subscription content, positioning itself as a leading media outlet in Estonia. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern advertising and analytics tools such as Google Tag Manager and Facebook Pixel, and is hosted behind Cloudflare DNS for performance and security benefits. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and vulnerability disclosure policies are absent. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website demonstrates good digital maturity, professional content quality, and a trustworthy online presence.

S

SRC Group

src.ee

46

SRC Group is a specialized marine and offshore engineering company focusing on retrofit engineering modifications including steel works, pipe works, mechanical and electrical installations, and interior refits. The company targets clients in the marine and offshore sectors, positioning itself as a niche service provider with solid references. The website reflects a small-sized business founded in 2010, with consistent branding and good content quality. Technically, the website uses modern web technologies and a custom CMS, hosted likely by Elkdata OÜ, an Estonian hosting provider. The site is mobile optimized and performs moderately well, though accessibility could be improved. Security posture is moderate with HTTPS implied but no visible security headers or policies published. Privacy compliance is good with a cookie consent mechanism and a privacy policy page. However, contact information and terms of service are not present in the analyzed content, limiting direct communication channels and legal transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

E

Eesti Asjalikud Mängulehed

eam.ee

54

EAM.ee is a specialized Estonian website providing comprehensive information and reviews about licensed online casinos operating in Estonia. The site targets Estonian players seeking safe, regulated, and trustworthy online gambling platforms. It offers detailed guides on casino selection, game types, bonuses, security, and responsible gaming, positioning itself as a reliable resource in the local online gambling ecosystem. Technically, the site is built on WordPress with modern optimizations including LiteSpeed caching and Cloudflare DNS, ensuring fast performance and excellent mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and privacy-related policies are missing. The site lacks direct contact information and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's Estonian focus, enhancing trustworthiness. Strategic recommendations include adding privacy and cookie policies, security headers, and contact details to improve compliance and user trust.

C

Codelight

codelight.eu

43

Codelight is a small Estonian technology company specializing in custom WordPress websites, WooCommerce stores, and bespoke web applications. Their market position is that of a quality-focused service provider emphasizing client collaboration and tailored digital solutions. The website demonstrates a mature technical infrastructure built on WordPress with modern integrations such as Google reCAPTCHA v3 and Gravity Forms for secure contact form handling. The site is well-designed, mobile-optimized, and accessible, reflecting a high level of digital maturity. Security posture is good with HTTPS enforced and anti-spam measures, but lacks published security policies and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy with clear business information and contact channels.

C

Clínica Dermaline

dermaline.es

48

Clínica Dermaline is a well-established medical aesthetic clinic based in Madrid, Spain, operating since 2008. The website presents a professional and comprehensive overview of their services, including laser treatments, varicose veins care, and facial and body aesthetic procedures. The clinic targets individuals seeking quality medical aesthetic solutions and has built a strong local reputation with over 10,000 patients and media presence. Technically, the site is built on WordPress using common plugins and libraries, with moderate performance and good mobile optimization. Security is generally good with HTTPS enforced and no exposed sensitive data, but there are areas for improvement such as updating outdated JavaScript libraries and implementing stronger security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service policies found. Overall, the site is trustworthy and professional but should address compliance and security best practices to enhance user trust and regulatory adherence.

Prime Partners is a small Australian financial services firm specializing in Chartered Accountants and Financial Planning services with offices in North Sydney and Gladesville, NSW. The website provides basic information about the business, contact details, and links to related partner sites but lacks comprehensive policy disclosures. The technical infrastructure uses modern frontend libraries and Cloudflare DNS but lacks advanced security headers and DNSSEC. The security posture is moderate with room for improvement in policy transparency and technical security controls. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

K

Klick

k-arvutisalong.ee

54

Klick is a prominent Estonian e-commerce retailer specializing in electronics, digital goods, and home appliances. The website offers a broad product range with installment payment options and fast delivery, targeting retail consumers primarily in Estonia. The platform is built on modern web technologies including Vue.js and Vue Storefront, indicating a mature digital infrastructure. The site integrates analytics and tracking tools such as Google Analytics and Hotjar, and employs Cookiebot for cookie consent management. Security posture is solid with HTTPS enforced, but lacks visible security policies or incident response information. Privacy compliance is partial due to the absence of explicit privacy and terms of service pages. Overall, Klick presents as a professional and credible online retailer with room for improvement in transparency and security documentation.

Refit & Maintenance OÜ is a small Estonian company specializing in marine vessel refit and maintenance services, with over 15 years of experience providing interior upgrades and turnkey solutions for vessels worldwide. The website presents basic business information and a clear description of services but lacks comprehensive contact details and formal policies. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and Bootstrap 5, hosted on Radicenter infrastructure. The site is mobile-optimized with moderate performance but limited SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional but basic, with room for improvement in security, privacy, and content completeness.

V

Volvo Trucks

volvotrucks.ee

48

Volvo Trucks is a globally recognized enterprise specializing in manufacturing and selling heavy-duty trucks and related services. The website serves the Estonian market, providing comprehensive information about truck models, financing, fleet management, and other services. The site is built on a robust technical infrastructure leveraging Adobe Experience Manager and Adobe analytics tools, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit privacy and security policies are not found in the provided content. Overall, the website reflects a professional and trustworthy brand with room for improvement in transparency and compliance documentation.

S

SIROWA Group

sirowa.lv

68

SIROWA Group operates as a wholesale distributor specializing in cosmetics and beauty care products, positioning itself as an experienced regional player in this retail sector. The website reflects a medium-sized business with a focus on wholesale distribution of well-known brands in the health and beauty industry. The digital infrastructure is based on WordPress, enhanced with modern tools such as Brizy Builder and FontAwesome, and utilizes Cloudflare for DNS services. The site demonstrates good design quality, mobile responsiveness, and basic SEO optimization, supporting a positive user experience. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no accessible privacy or terms of service pages. Overall, the domain registration data supports legitimacy and transparency, with a long-established domain and no privacy protection masking registrant details.

K

Kiilto Oy

kiiltoclean.fi

76

Kiilto Oy is a well-established Finnish manufacturing company specializing in adhesives, cleaning, and hygiene solutions primarily for professional and industrial customers. With a history dating back to 1919, Kiilto holds a strong market position in the Nordic region and offers a broad portfolio of sustainable and innovative products. The website reflects a professional B2B business model targeting sectors such as construction, healthcare, and food industries. Technically, the site is built on WordPress with integration of modern marketing and analytics tools like HubSpot and Google Tag Manager, ensuring good digital maturity and user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no detected vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website demonstrates high business credibility and compliance with privacy regulations including GDPR.

D

Datel

datel.info

62

Datel is a well-established UK-based Sage business partner specializing in delivering Sage software solutions such as Sage Intacct, Sage 200, and Sage X3, along with private cloud hosting and customer support services. The company positions itself as a leading Sage partner with over 40 years of experience, targeting UK businesses seeking scalable financial and ERP solutions. The website is professionally designed using HubSpot CMS and integrates modern technologies including Google Analytics 4 and Google Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enabled and domain registration protections in place, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is basic, with no explicit privacy or cookie policies found, but consent mechanisms for analytics are present. Overall, the website reflects a credible and professional business presence with room for enhanced transparency and security documentation.

B

Brink's Global Services

brinks.com

69

Brink's Global Services is a well-established enterprise specializing in secure cash management and financial logistics solutions. Founded in 2000, the company offers a broad range of services including armored transportation, risk mitigation, and secure vault services, targeting businesses that require secure handling of valuable assets. The website reflects a professional and consistent brand presence with a focus on security and operational efficiency. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript frameworks such as React and AlloyEditor, hosted on Amazon infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security-wise, the site enforces HTTPS and domain registration protections but lacks advanced security headers and published security policies. Privacy compliance is partially addressed through a OneTrust cookie consent mechanism, but no explicit privacy policy or GDPR compliance statements were found. Overall, the domain is legitimate and stable, with no blocking or WAF interference detected, supporting a high trustworthiness rating.

Raido Tamar is a seasoned SEO specialist operating primarily in the Estonian market, offering consulting, training, and SEO project execution services. The website positions him as a leading expert with over 10 years of experience and more than 300 completed SEO projects, supported by client testimonials from reputable Estonian companies and media appearances. The business model focuses on personalized SEO services and education for businesses, especially e-commerce operators. Technically, the website is built on WordPress using the GeneratePress theme and Yoast SEO plugin, hosted by Zone Media OÜ, with good mobile optimization and SEO best practices implemented. Security posture is solid with HTTPS and hCaptcha integration, though lacks some advanced security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in its niche, but could improve in privacy and security transparency.

T

TM Development

tmd.ee

45

TM Development is a specialized exhibition design and development studio based in Estonia, operating since 2010. The company offers a comprehensive range of services including interactive design, technical planning, production, audiovisual solutions, installation, and maintenance primarily targeting museums, science centers, and production companies. Their portfolio includes over 50 exhibitions and hundreds of interactive exhibits, positioning them as an experienced niche player in the exhibition development market. The website is professionally designed using WordPress with modern plugins and technologies, providing good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and error monitoring via Bugsnag, but lacks explicit security headers and privacy compliance documentation. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website reflects a credible and professional business with room for improvement in privacy and security policy transparency.

S

SOL Group

solgroup.com

72

The SOL Group is a large Italian company specializing in the production, applied research, and marketing of technical and medical gases, home care services, biotechnologies, and renewable energy production. The company targets industrial clients, healthcare facilities, patients at home, and the biotechnology sector, positioning itself as a diversified and established player in the energy and healthcare industries. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on the Plone CMS platform, utilizing modern web technologies including Bootstrap, FontAwesome, and Cookiebot for privacy management. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. From a security perspective, the site enforces HTTPS, implements standard security headers, and provides a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be investigated further. Overall, the SOL Group website demonstrates strong digital maturity and compliance with privacy regulations, but the domain registration inconsistency slightly impacts trustworthiness. Strategic recommendations include publishing explicit security policies, incident response contacts, and a security.txt file to enhance transparency and security posture.

T

Textmagic

textmagic.com

76

Textmagic is a technology company providing a comprehensive SaaS platform for business text messaging and email campaigns. Established since 2001, it serves over 100,000 users with services including mass texting, SMS marketing, two-way chat, email-to-SMS integration, voice calls, and helpdesk ticketing. The platform supports omnichannel communication and offers mobile apps for iOS and Android, reflecting a mature digital infrastructure. The website is built on WordPress with advanced SEO and analytics integrations, demonstrating strong digital maturity. Security posture is solid with HTTPS, bot management, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS domain registration data introduces some legitimacy concerns, but the professional web presence and consistent branding mitigate these. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in business credibility transparency and compliance documentation.

M

MSMedia

msmedia.ee

45

MSMedia is a small Estonian communication consultancy specializing in strategic communication, media relations, crisis communication, marketing, social-political communication, and training services. Founded in 2012, the company offers a communication manager rental service alongside other consulting and content creation offerings. The website reflects a professional and consistent brand presence with clear service descriptions and active social media engagement. Technically, the site is built on WordPress with modern plugins such as Revolution Slider and Yoast SEO, and it employs Google Analytics for visitor tracking. Cookie consent is implemented via CookieYes, supporting GDPR compliance, although no explicit privacy policy or terms of service pages were found. Security posture is good with HTTPS enabled, but security headers are not explicitly detected. WHOIS data confirms domain legitimacy and consistency with the business claims.