Security Directory

D

Digital Storyteller

digitalstoryteller.io

59

Digital Storyteller is a specialized digital marketing agency focused on providing outsourced marketing services to B2B financial services companies. Founded in 2018 and based in the US, the company offers a comprehensive suite of services including organic digital marketing, content creation, SEO, social media management, CRM management, and website design. Their market position is that of a niche provider with compliance awareness and a strong emphasis on measurable results and transparent pricing. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using the Enfold theme and integrates modern marketing and analytics tools such as Google Analytics, HubSpot, Facebook Pixel, and Metricool. The site is mobile optimized and uses structured data for SEO enhancement. Hosting is likely provided by GoDaddy, consistent with the domain registrar information. Performance is moderate with good SEO practices but could benefit from enhanced accessibility features. From a security perspective, the site uses HTTPS and implements reCAPTCHA and cookie consent mechanisms, indicating a baseline security posture. However, the absence of security headers and explicit security policies or incident response information suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The domain registration is privacy protected but consistent with the business type and location, supporting legitimacy. Overall, the website presents a low risk profile with good business credibility and technical implementation. Strategic recommendations include publishing privacy and security policies, enabling DNSSEC, adding security headers, and improving accessibility and compliance disclosures to enhance trust and security posture.

M

MASE FRANCE et INTERNATIONAL

mase-asso.fr

53

MASE FRANCE et INTERNATIONAL operates as a certification network specializing in health, safety, and environmental management systems for industrial and service companies. Established in 2013, it has a medium-sized presence primarily in France with international reach. The organization provides pragmatic SSE certification, training through MASE Académie, and facilitates sharing of best practices to reduce workplace accidents. The website is professionally designed using WordPress with modern plugins and offers multilingual downloadable resources. Social media engagement is active across LinkedIn, Twitter, Instagram, and YouTube. Technically, the site uses HTTPS with good SSL configuration and includes a cookie consent mechanism, but lacks explicit privacy and terms of service policies. Security headers are not detected, and no incident response or vulnerability disclosure policies are published, indicating areas for improvement in security posture and compliance. Overall, the website is trustworthy and credible but would benefit from enhanced transparency and security documentation.

C

COSMETICS NORD

cosmeticsnord.com

61

COSMETICS NORD is a small-sized private label cosmetics manufacturer based in Latvia, offering premium clean beauty products and custom solutions with flexible minimum order quantities and fast lead times. The company claims 19 years of experience and has received media and celebrity recognition. The website is professionally designed using the Squarespace platform, featuring modern technologies such as Google Tag Manager and reCAPTCHA for security and analytics. Security posture is strong with HTTPS and HSTS enabled, though some security headers are missing and no explicit security policy is published. Privacy compliance is partial, with a cookie consent banner present but no privacy policy page found. Contact information is limited to a contact form and LinkedIn profile, with no direct emails or phone numbers visible. WHOIS data for the domain is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the website is functional and professional but would benefit from improved transparency and compliance documentation.

K

Kaamos

kaamos.ee

53

Kaamos is a small Estonian business with an online presence established since 2010. The website is built on WordPress and uses common SEO and analytics tools such as Yoast SEO, Google Analytics, and Facebook Pixel. The company appears to have a basic digital maturity with good mobile optimization and SEO practices. However, explicit privacy and terms of service policies are not found in the analyzed content, which may affect compliance and user trust. The website implements a cookie consent mechanism via Cookiebot, indicating awareness of GDPR requirements. Security posture is solid with HTTPS and reCAPTCHA usage, but lacks visible security headers and formal security policies. Overall, the site is functional and professional but could improve transparency and security documentation.

The Ambit Group is a UK-based company specializing in the supply of bespoke, fully automated industrial bakery equipment, serving the UK bakery and food industries. Established in 2012, the company positions itself as a leading supplier with a strong partner ecosystem and a focus on traditional and specialty baking machinery. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on WordPress using Elementor, leveraging modern web technologies and hosting by Fasthosts Internet Ltd. The site demonstrates moderate performance and good mobile optimization, with SEO and accessibility features implemented at a basic to good level. Analytics are handled via Matomo, indicating some privacy-conscious tracking. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is credible and functional with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

C

Cargo

thecargoagency.com

63

Cargo operates a professional website focused on cargo and logistics agency services, targeting businesses and individuals in need of transportation solutions. The site is built on WordPress and employs a modern technology stack including jQuery, Font Awesome, Google Tag Manager, and various analytics and tracking tools. The website demonstrates good design quality, mobile optimization, and SEO practices, with structured data implemented for enhanced search engine understanding. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security measures such as HTTPS and reCAPTCHA are in place, but the lack of security headers and explicit privacy and cookie policies indicates room for improvement in security posture and compliance. Overall, the site is functional and professional but requires enhancements in privacy compliance and domain registration transparency to strengthen trust and security.

V

Visual Composer

visualcomposer.io

64

Visual Composer is a well-established company offering a free drag and drop WordPress website builder targeting WordPress users and web designers. The company has a strong market position with a medium-sized business profile and a domain age dating back to 2003, indicating maturity and stability. The website is built on WordPress, leveraging modern technologies such as Yoast SEO, Google Analytics, and Cloudflare DNS services, reflecting a solid technical infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, providing a positive user experience. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security policies and advanced security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in privacy and security documentation.

R

Runas Kursi

runaskursi.lv

53

Runas Kursi is a Latvian-based education provider specializing in public speaking and presentation skills training. The company offers group courses, VIP training, individual consultations, and event moderation services. The website demonstrates a professional presence with client testimonials and logos from reputable companies, indicating a solid market position within the education sector. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, Facebook SDK, and marketing tools like Mailchimp and AddThis. The site is HTTPS secured with reCAPTCHA protecting forms, but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. Overall, the security posture is moderate with no visible vulnerabilities, but privacy compliance is weak due to missing policies. The domain WHOIS data is unavailable due to query limits, but the website content suggests legitimacy and consistent operation since 2015. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve trust and compliance.

S

Sabiedrība ar ierobežotu atbildību "Rock Distribution"

rock-distribution.com

57

Rock Distribution is a specialized distribution company operating primarily in the Baltic States, focusing on musical instruments and professional audio, video, and lighting equipment. The company also provides stage machinery integration and installation services, positioning itself as a comprehensive solutions provider in the entertainment technology sector. Their market position is strong within their regional niche, supported by partnerships with numerous reputable brands. The website reflects a medium-sized enterprise with a professional digital presence, leveraging modern web technologies and tracking tools with appropriate privacy mechanisms. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security practices include HTTPS enforcement, cookie consent, and bot protection via reCAPTCHA, though some security headers are missing and no explicit security policies are published. From a security perspective, the site demonstrates a solid baseline with no critical vulnerabilities detected. However, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and ownership transparency. The company provides clear contact information and privacy policies, supporting GDPR compliance. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust. Overall, the website is professional and trustworthy in appearance but would benefit from improved transparency regarding domain registration and enhanced security policy disclosures. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen legitimacy and trust.

C

CatchSmart

catchsmartsolution.com

58

CatchSmart is an IT solutions and system development company established in 2011, offering a range of services including digital IT solutions, system integration, mobile app development, e-commerce solutions, outsourcing, and business process analysis. The company targets businesses seeking to improve productivity and manage expenses through digital transformation and automation. The website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is solid with HTTPS enabled and reCAPTCHA implemented for form security. However, the site lacks explicit privacy and terms of service pages, and no direct contact information is readily available, which could impact user trust and compliance. The domain registration is consistent and stable, supporting the legitimacy of the business.

I

ICBA - International Credit Brokers Alliance

icba.com

50

ICBA - International Credit Brokers Alliance operates as a global network of independent trade credit insurance brokers, boasting a large presence with 900 specialist brokers across 50 countries and additional correspondents. The organization focuses on providing trade credit insurance and related financial services to companies seeking to trade internationally with risk mitigation. Their business model emphasizes collaboration among top brokers to deliver localized expertise with global reach. Technically, the website is built on WordPress with modern libraries and frameworks, offering a good user experience and mobile optimization. However, minor backend issues such as PHP warnings and lack of DNSSEC indicate areas for improvement. Security posture is moderate with HTTPS enabled and reCAPTCHA on forms, but lacks explicit security headers and published security policies. Privacy compliance is limited due to absence of a privacy policy page, though cookie consent is implemented. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

The website cleantechlatvia.com currently serves as a security challenge page powered by BitNinja, requiring visitors to complete a CAPTCHA to proceed. This indicates that the actual website content is blocked or inaccessible, preventing direct analysis of business-related information. The domain is registered since 2012 with GoDaddy.com, LLC, showing longevity but no visible business details on the site. The page uses legacy CMS metadata referencing Joomla 1.5 and WordPress 2.5, suggesting outdated or placeholder content. Technically, the site employs Google Analytics and Google Tag Manager for tracking and reCAPTCHA for bot mitigation, but lacks visible HTTPS enforcement and security headers in the HTML content. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information. Overall, the site is in a blocked state, limiting content and business insights.

T

Tribus

tribus.lv

60

Tribus is a Latvian real estate company specializing in property listings and related services such as valuation, sales, and purchase facilitation. The company targets property buyers, sellers, developers, and non-residents interested in Latvian real estate. Their website is multilingual, supporting Latvian, Russian, and English, indicating a broad target audience. The business appears established since 2018 with a medium-sized market presence in Latvia's real estate sector. Technically, the website is built on WordPress using Bootstrap and jQuery, with integrations for Google Analytics, Google Tag Manager, and reCAPTCHA for form security. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with modern but common web technologies. Security posture is generally good with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and formal privacy or cookie policies. No WHOIS data was available due to query limits, limiting full domain trust assessment. No visible incident response or vulnerability disclosure policies were found. Overall, the website is professional and functional for its business purpose but would benefit from enhanced privacy compliance, security headers, and transparency regarding data protection and incident response.

A

Axxonsoft LLC

axxonsoft.com

67

AxxonSoft is a global leader specializing in intelligent video management systems (VMS), physical security information management (PSIM), and cloud-based video surveillance solutions. The company offers advanced AI-powered analytics, seamless IP camera integration, and comprehensive security management platforms targeting enterprises, security professionals, and integrators worldwide. Their business model centers on software development, licensing, and partner ecosystem expansion, positioning them strongly in the physical security technology market. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript frameworks (Vue.js), advanced analytics tools (Google Analytics, Microsoft Clarity, PostHog), and robust consent management (Cookiebot). The site is mobile-optimized, SEO-friendly, and employs security best practices such as HTTPS and reCAPTCHA for form protection. From a security perspective, the site maintains a solid posture with published vulnerability disclosure policies, GDPR compliance, and secure data collection mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers and a security.txt file could enhance transparency and incident response readiness. Overall, the website reflects a professional, trustworthy, and technically sound digital presence aligned with the company's market leadership. The absence of WHOIS data slightly reduces domain trust but is mitigated by strong business and security indicators. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing clearer data protection officer contact details to further strengthen compliance and trust.

C

Circus Day Nursery

circusdaynursery.co.uk

47

Circus Day Nursery is an independent, family-run early years childcare provider located in Cheltenham, UK. The nursery offers a comprehensive range of childcare services from baby suites to pre-school, including government-funded options and a focus on mindfulness and child development. The business is well-established, recognized with national and local awards, and holds OFSTED certification, positioning it as a trusted provider in the education sector. The website reflects a professional and consistent brand image with detailed service descriptions and policies, targeting parents seeking quality childcare in the region. Technically, the site is built on WordPress with modern plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS, security headers, and CAPTCHA-protected forms, though some compliance gaps exist such as the absence of a cookie consent banner and published security policies. Overall, the site demonstrates a mature digital presence with room for improvement in privacy compliance and accessibility.

Amitours Group operates as a prominent transportation and tour service provider across major European cities and airports, specializing in airport transfers, bus rentals, ski transfers, and tour operations. The company emphasizes quality service with its own fleet and English-speaking drivers, serving a large customer base since 2007. The website reflects a professional and user-friendly digital presence with clear navigation and mobile optimization. Technically, the site leverages modern frameworks such as Yii and Bootstrap, integrates multiple analytics and tracking tools, and enforces HTTPS with CSRF protections and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and professional website content. Security practices are generally good but could be enhanced by adding more comprehensive security headers and explicit security policies. Privacy compliance is addressed with GDPR indicators and cookie consent, though contact information is limited to email only. Overall, the site presents a moderate risk profile with recommendations to improve transparency and security posture.

M

MacLachlan & Donaldson

maclachlan.ie

51

MacLachlan & Donaldson is a well-established intellectual property law firm based in Ireland with over 50 years of experience. The firm offers comprehensive IP services including patents, trade marks, designs, and commercialisation, serving clients across Ireland, the UK, the EU, and globally. Their market position is strong, recognized among the top EU firms for trade mark filings, supported by a professional and content-rich website. Technically, the website is built on WordPress with modern plugins and frameworks, delivering good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the website reflects a credible and trustworthy business with clear contact channels and compliance with privacy regulations.

A

Apifonica

dzinga.com

80

Apifonica is a medium-sized telecommunications and technology company specializing in AI-powered customer communication automation solutions, including voicebots, SMS marketing, phone number masking, and cloud telecom platforms. The company positions itself as an established player with over 10 years in the market, serving a broad client base with scalable and innovative telecom services. Their website demonstrates a mature digital presence with modern technologies and comprehensive content, including client success stories and industry awards. Technically, the site is built on Vue.js and integrates multiple analytics and marketing tools, ensuring good performance and mobile optimization. Security-wise, Apifonica maintains strong practices with HTTPS, ISO 27001 certification, regular penetration testing, and GDPR compliance, though some transparency gaps exist due to missing WHOIS data. Overall, the company presents a professional and trustworthy image with room for improvement in public contact information and domain registration transparency.

O

OpenCraft

opencraft.com

60

OpenCraft is a specialized company focused on Open edX® platform design, development, hosting, and support services. Established in 2011, they have positioned themselves as an official Open edX® Partner with a global client base including prestigious academic institutions and corporations. Their key offerings include fully managed hosting, bespoke learning solutions, and full product design services tailored to online education providers. The website reflects a professional and consistent brand image with high-quality content and clear navigation aimed at learning providers, academic institutions, corporations, and governments. Technically, the site is built on WordPress using Oxygen Builder, with modern JavaScript libraries such as Alpine.js and jQuery, and integrates Matomo analytics and Google reCAPTCHA for security and tracking. Hosting is managed via Gandi SAS, consistent with the domain registration data. Security posture is good with HTTPS and reCAPTCHA usage, but lacks some advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy, professional, and well-positioned in the education technology sector.

E

EMJ Metals

emjmetals.lv

64

EMJ Metals is a leading Latvian metalworking and sheet metal fabrication company, recognized as the largest in the Baltic states. They specialize in laser cutting, metal bending, plasma cutting, and aftertreatment services, serving a diverse client base including civilian and military sectors. Their extensive production facilities and advanced machinery enable them to process large volumes of metal daily, supporting over 1000 clients annually. The company emphasizes long-term partnerships and continuous growth since its founding in 2010. Technically, the website is built on a modern stack including jQuery, Skrollr.js, and integrates advanced analytics tools such as Google Analytics, Google Tag Manager, and Snowplow. The site is hosted on a CDN infrastructure ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved. From a security perspective, the site enforces HTTPS and uses CAPTCHA mechanisms to protect forms. However, it lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to query limits, limiting domain registration trust verification. Overall, EMJ Metals presents a professional and trustworthy online presence aligned with its business stature. Strategic improvements in privacy compliance and security headers would enhance their security posture and regulatory adherence.

C

Clyde Marine Recruitment

clyderecruit.com

55

Clyde Marine Recruitment is a specialized recruitment agency focusing on maritime jobs across Europe, offering job placement services for seafarers and bespoke crew management solutions to clients. The website presents a professional and consistent brand image with good content quality targeted at maritime professionals and clients in the transportation sector. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Hotjar, and Brevo for email marketing, alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though some security headers could be improved. The absence of WHOIS registration data is a notable concern, potentially indicating a recent registration or lookup issue, which impacts domain legitimacy assessment. Overall, the site is functional and professional but lacks explicit privacy and contact information pages, which are important for compliance and trust.

B

Baltijas Datoru Akadēmija

bda.lv

54

Baltijas Datoru Akadēmija (BDA) is the largest adult informal education center in the Baltic region, specializing in IT and professional development courses. The organization offers a wide range of courses including certification programs, e-learning development, and professional training services. Their market position is strong within Latvia and the Baltic states, targeting adult learners and IT professionals seeking skill enhancement and certification. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support (Latvian and English). Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, integrated with modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Tawk.to live chat. Security posture is good with HTTPS enforced and reCAPTCHA implemented on forms, though there is room for improvement in publishing explicit security policies and enhancing HTTP security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website and business demonstrate a credible, professional, and trustworthy presence in the education sector.

O

Ovostar Union

oeproduct.com

48

Ovostar Union operates as a leading manufacturer and exporter of egg products based in Ukraine, positioning itself among the top five egg producers in Europe. The company specializes in liquid eggs, egg powders, and fresh chicken eggs, serving a global market including Europe, Middle East, Asia, and Africa. Their website reflects a professional digital presence with clear product categorization and export information, targeting food industry leaders and importers. Technically, the site employs modern JavaScript libraries and Google analytics tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS and Content-Security-Policy headers, though additional security headers and explicit privacy policies are recommended. Overall, the website demonstrates a credible and trustworthy business with room for improvement in privacy compliance and accessibility.

S

SIA Solidis

solidiswood.com

66

SIA Solidis operates the website solidiswood.com as the largest manufacturer of stretcher bars in the Baltic states, focusing on manufacturing and direct sales of wooden stretcher bars, cross bars, wedges, and complete frames. The company targets artists, galleries, and art supply retailers, positioning itself as a regional leader with FSC certification indicating environmental responsibility. The website is professionally designed with clear navigation and good content quality, supporting a medium-sized manufacturing business based in Latvia. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, Snowplow Analytics, and Mapbox, hosted on a reliable CDN infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS enforced and use of CAPTCHA mechanisms, though explicit security headers and published security policies are lacking. Privacy compliance is basic with a privacy policy and cookie consent banner present but no explicit GDPR compliance statements. WHOIS data is missing or unavailable, which reduces trustworthiness despite the professional presentation and contact information. Overall, the website is functional, secure, and credible but would benefit from improved transparency in domain registration and enhanced security headers.

C

CSC Telecom

csc.lv

53

CSC Telecom is a Latvian telecommunications company specializing in providing a wide range of telecommunication and IT services including IP telephony, cloud PBX, SMS marketing, contact center outsourcing, and IT infrastructure maintenance. The company positions itself as a leader in customer service solutions within the Baltic region, targeting business clients seeking digital communication and telephony solutions. The website content is professionally presented, with clear navigation and multilingual support, indicating a mature digital presence. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager, reCAPTCHA, and SEO optimizations, ensuring good performance and user experience. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, including cookie consent and a comprehensive privacy policy. However, there is room for improvement in security headers and explicit incident response policies. Overall, the website reflects a trustworthy and professional business with moderate risk and good compliance.

D

Disc Soft Limited

disc-soft.com

62

Disc Soft Limited is a medium-sized technology company specializing in software solutions related to virtual disc imaging, gamepad remapping, mobile file transfer, disc burning, and network storage. Established since the early 2000s, the company has a solid market position with a portfolio of about 10 software products including the well-known DAEMON Tools line. The website reflects a professional digital presence with good content quality and consistent branding, targeting users who require advanced software tools for managing virtual drives and related tasks. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for analytics and security. Hosting and domain registration are stable and consistent with the company's history. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS was detected, indicating a custom or static site architecture. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, which is a positive security measure. However, it lacks DNSSEC and explicit security headers, and does not publish detailed security or incident response policies. Privacy compliance is basic, with a privacy policy and cookie banner present but no advanced GDPR indicators. Contact information is limited to a modal form without direct emails or phone numbers, which may impact user trust. Overall, the website is functional and professional but could improve in security posture and privacy compliance. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and enhancing privacy compliance to build greater user trust and meet regulatory standards.

E

European Heat Pump Association

ehpa.org

58

The European Heat Pump Association (EHPA) is a well-established industry association focused on promoting renewable, efficient heating and cooling solutions across Europe, primarily through heat pump technology. The organization provides advocacy, certification programs, market data, and hosts events to engage stakeholders and policymakers. Their website reflects a mature digital presence with comprehensive content, clear navigation, and active engagement through news and events. Technically, the site is built on WordPress with modern plugins and integrates analytics and consent mechanisms, indicating a good level of digital maturity. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy and professional, supporting EHPA's role as a key player in the European renewable energy sector.

F

FlipGive, Inc.

flipgive.com

72

FlipGive, Inc. operates a cashback fundraising platform that enables teams and community groups to raise funds by earning cashback rewards from everyday shopping at over 800 partner brands. The company positions itself as a modern alternative to traditional fundraising methods, leveraging technology to simplify and amplify fundraising efforts. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, although there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the strong business presence and certifications. Overall, FlipGive presents a credible and well-executed online presence with a clear value proposition in the retail and non-profit fundraising sectors.

L

LIDO

lido.lv

63

LIDO is a Latvian hospitality business focused on providing fresh, authentic, and quality food with a democratic approach to choice, price, and taste nuances. The website targets Latvian-speaking consumers and positions itself as a trusted local brand in the food service industry. The digital infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, Cookiebot for cookie consent, Google Tag Manager, Facebook Pixel, and reCAPTCHA for bot protection. The website is served over HTTPS with a valid SSL certificate, ensuring secure communication. However, explicit privacy policy and terms of service pages were not detected in the provided content, which may impact compliance and user trust. The security posture is generally good with HTTPS and consent mechanisms but lacks explicit security headers and detailed contact information for incident response. Overall, the website demonstrates a professional and trustworthy online presence with room for improvement in privacy transparency and security best practices.

V

Võrumaa Arenguagentuur SA

vorumaa.ee

39

Võrumaa Arenguagentuur SA operates the website vorumaa.ee as a regional development center serving Southeast Estonia. The organization provides information, consulting, and training services primarily targeting local businesses, non-profits, and municipalities. The website reflects a government or non-profit entity with a clear regional focus and a mission to support economic and community development. The site is built on WordPress using the Divi theme and incorporates modern SEO practices via Yoast SEO. It uses Google Analytics and Tag Manager for analytics and includes a cookie consent mechanism, indicating some attention to privacy compliance. Security measures include HTTPS and Google reCAPTCHA, but explicit security policies and incident response information are absent. Overall, the website is professionally designed with good content relevance and moderate trustworthiness, though it lacks some compliance documentation such as privacy and terms of service pages.

T

Tartu Ärinõuandla

arinouandla.ee

41

Tartu Ärinõuandla is a non-profit organization based in Estonia, providing expert consultancy and support services to entrepreneurs, NGOs, youth labs, and investors. The organization is recognized within its network as a leading entrepreneurship developer since 2014. The website serves as a portal for information, events, and service registration, targeting local and regional business communities. Technically, the site is built on WordPress, leveraging common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Sendinblue for newsletter management. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some security headers are missing. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and security policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

T

Teeviit

teeviit.ee

56

Teeviit is an Estonian youth information portal affiliated with the Haridus- ja Noorteamet (Education and Youth Board). It provides comprehensive content on education, career, health, relationships, and social topics targeted primarily at young people. The website serves as a central hub for youth-related resources, including news, podcasts, event calendars, and partner portals such as Teeviit Juunior and Infohunt. The platform is well-positioned in the Estonian education and government sector as a trusted information source for youth.

V

Visit Harju

visitharju.ee

50

Visit Harju is the official tourism portal for Harju County, Estonia, providing comprehensive information on the region's natural beauty, cultural heritage, and leisure activities. The website targets tourists and visitors seeking to explore Harju's attractions, travel routes, and experiences. Managed by SA Harju Ettevõtlus- ja Arenduskeskus, it serves as a trusted regional resource with consistent branding and a clear focus on hospitality and cultural tourism. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, ensuring good SEO and user experience. The site is mobile-optimized and accessible, with moderate performance and integration of analytics tools like Google Analytics and Plausible. Security posture is solid with HTTPS, reCAPTCHA on forms, and no exposed sensitive data, though explicit security headers and policies are not fully documented. Privacy compliance is a notable gap, lacking visible privacy and cookie policies or consent mechanisms. Overall, the domain registration is consistent and legitimate, supporting the site's credibility as an official tourism portal.

A

AlikeAudience

alikeaudience.com

62

AlikeAudience operates as a technology company specializing in providing high-performing audience segments for marketers, leveraging global mobile and transaction data to enhance marketing ROI. The company positions itself as a privacy-compliant data provider for major demand-side platforms (DSPs), targeting marketing professionals seeking effective audience segmentation solutions. The website is built on WordPress and integrates common marketing and analytics technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA to support user interaction and data collection. However, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and ownership status, which warrants further verification. Security posture is moderate, with some best practices like reCAPTCHA implemented, but lacking visible security headers and explicit incident response information. Privacy compliance is weak due to missing privacy and cookie policies on the site. Overall, the website presents professional content and good SEO optimization but requires improvements in transparency, security, and compliance to enhance trustworthiness and business credibility.

E

Eastern College

easterncollege.ca

69

Eastern College is a well-established diploma-granting educational institution founded in 2008, serving Atlantic Canada with multiple campus locations and online program offerings. The college specializes in hands-on training across business, technology, healthcare, law, and supply chain sectors, targeting prospective students seeking career-focused education. The website reflects a professional and consistent brand image with comprehensive program information, career services, and support for international students. Technically, the site is built on WordPress with modern web technologies, including Google Analytics, Google Tag Manager, LiveChat, and reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism detected. Overall, the website is trustworthy and credible, with strong business legitimacy supported by domain age and content quality.

V

Virumaa Muuseumid

virumaamuuseumid.ee

41

Virumaa Muuseumid is a regional museum network based in Estonia, focusing on cultural heritage and historical exhibitions in the Virumaa region. The website serves as an informational platform showcasing various museums such as Rakvere linnus and Palmse mõis, targeting visitors interested in history and culture. The organization appears to be a small-sized entity, likely government or non-profit, founded recently in 2022. The site is multilingual, supporting Estonian, English, Russian, and Finnish, enhancing accessibility for diverse audiences. Technically, the website is built on WordPress, utilizing common plugins like All in One SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is hosted by Zone Media OÜ, a known Estonian hosting provider. Performance and mobile optimization are good, with accessibility features implemented, including an accessibility toolbar. SEO practices are solid with proper meta tags and structured data. Security posture is adequate with HTTPS enabled and use of reCAPTCHA for forms. However, some security headers are missing, and DNSSEC is not enabled, which could be improved. Privacy compliance is strong, with a clear privacy policy, cookie consent banner, and GDPR adherence. Contact information is limited to a phone number and contact forms, with no public emails found. Overall, the website is professional, trustworthy, and serves its purpose well. Recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

C

College of Saint Benedict and Saint John’s University

csbsju.edu

74

The College of Saint Benedict and Saint John’s University is a well-established higher education institution in the United States, offering a broad range of undergraduate academic programs and fostering a vibrant campus community. The website reflects a strong market position as a liberal arts college with a shared vision between two campuses, targeting prospective and current students, faculty, and staff. The business model centers on providing quality education and community engagement. Technically, the website is built on WordPress with a custom Skeletor theme, leveraging modern SEO tools like Yoast and analytics platforms such as Google Analytics and Microsoft Clarity. The site is mobile-optimized, accessible, and performs moderately well. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, although explicit security policies and incident response information are not published. The absence of WHOIS data is notable but likely due to .edu domain registration policies, which do not diminish the website's legitimacy. Overall, the site demonstrates professionalism, trustworthiness, and compliance with privacy regulations.

N

Nordic Science Investments Oy

nordscience.fi

46

Nordic Science Investments Oy is a Finnish venture capital firm specializing in transforming scientific research into successful startups, focusing on deeptech, healthtech, and life sciences sectors within the Nordic region. The company acts as an anchor investor and incubator, supporting university spinouts and early-stage innovations. The website reflects a professional and consistent brand image with clear messaging targeting founders and investors in science-based startups. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and includes Google Analytics for tracking. Security posture is good with HTTPS and reCAPTCHA implemented, though additional security headers could enhance protection. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the domain registration data aligns well with the business identity, indicating legitimacy and trustworthiness.

T

Thron

thron.com

52

Thron is an Italian technology company specializing in an integrated platform that combines Digital Asset Management (DAM) and Product Information Management (PIM). Their platform enables businesses to centralize, govern, and distribute digital assets and product data efficiently across multiple communication channels. The company targets medium to large enterprises seeking to optimize digital content workflows and product data management. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern tools such as Google Tag Manager, reCAPTCHA, and Iubenda for privacy compliance, indicating a robust and well-maintained infrastructure. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data suggests privacy protection, which is common for technology companies. Overall, the site demonstrates high professionalism and trustworthiness with moderate user tracking balanced by GDPR-compliant consent mechanisms.

U

UPRENT OÜ

uprent.ee

43

UPRENT OÜ is a well-established equipment rental and sales company founded in 2012, specializing in pumps, pump systems, electric generators, and trench shoring equipment. Operating primarily in Estonia with regional presence in Latvia, Lithuania, and Poland, UPRENT serves industrial and construction clients requiring efficient and reliable pumping solutions. The company is part of the Renta Group Oy, indicating a strong parent company backing and regional market integration. The website reflects a professional and consistent brand image with detailed service offerings and project portfolios, targeting B2B clients in manufacturing, energy, and construction sectors. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging modern web technologies including Google Analytics and reCAPTCHA for user tracking and security. Hosting is supported by Microsoft Online DNS infrastructure, ensuring reliable domain resolution. The site is mobile-optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks explicit security headers and published security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages, representing a compliance gap under GDPR. Overall, UPRENT's digital presence is solid with good business credibility and technical implementation. To enhance trust and compliance, the company should publish comprehensive privacy and security policies and implement additional security headers. The domain WHOIS data is consistent and supports legitimacy, with no suspicious patterns detected.

R

RENTA PUMPS

uprent.lt

46

RENTA PUMPS operates as a leading equipment rental and sales company specializing in pumps and pumping systems across the Baltic region. The company offers a broad range of rental equipment including pumps, electrical generators, trench shoring systems, and related accessories, targeting construction, industrial, and infrastructure sectors. Their market position is strong within Lithuania and neighboring countries, supported by localized contact points and multilingual website presence. Technically, the website is built on WordPress with WooCommerce and WPBakery, integrating modern analytics and bot protection tools such as Google Tag Manager and reCAPTCHA. Security posture is solid with HTTPS enforced and no exposed sensitive data, although improvements in security headers and incident response policies are recommended. Overall, the website is professional, content-rich, and compliant with GDPR cookie and privacy policies, reflecting a mature digital presence for a medium-sized enterprise.

V

Vetonaula

vetonaula.fi

70

Vetonaula is a Finnish IT service provider specializing in offering outsourced IT teams as a subscription-based service. The company targets Finnish businesses seeking to improve their IT solutions by leveraging expert IT teams easily and flexibly. The website presents a professional and modern digital presence, built on WordPress with integration of standard web technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for cookie consent management. Structured data is implemented to enhance SEO and provide clear organization information. Security posture is strong with HTTPS enforced and security headers present, although explicit privacy and terms of service policies are missing, which impacts compliance confidence. Contact information is not directly visible on the homepage, which may affect user trust and engagement.

D

Dieline Awards

dielineawards.com

57

Dieline Awards is a well-established global packaging design competition with a 15-year history, targeting designers, studios, and brands worldwide. The website is professionally designed using Squarespace, featuring multimedia content, clear navigation, and partnerships with industry events and organizations. The technical infrastructure leverages modern web technologies and tracking tools, ensuring a good user experience and moderate performance. Security posture is strong with HTTPS and HSTS, but lacks explicit privacy and cookie policies, which impacts compliance. The absence of WHOIS data raises concerns about domain legitimacy, though the brand's market presence and partnerships provide mitigating trust signals. Overall, the site is functional and credible but would benefit from enhanced transparency and compliance documentation.

P

Proact DE

proact.de

75

Proact Deutschland is a large, established IT service provider specializing in data and information management, cloud services, and data center solutions. Positioned as a leading European specialist, the company targets businesses seeking comprehensive IT strategy consulting, implementation, and operational support. The website reflects a professional digital presence with clear branding and consistent messaging aligned with its market position. Technically, the website is built on WordPress using modern plugins such as Yoast SEO Premium and Elementor, supported by SiteGround hosting inferred from optimization plugins. The site employs HTTPS with strong SSL configuration and integrates Cookiebot for GDPR-compliant cookie consent management. Google Tag Manager and reCAPTCHA are used for analytics and bot protection respectively, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement and consent management. However, it lacks explicit security headers, published security policies, and incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy and professionally maintained, with moderate to good scores in content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements include publishing privacy and security policies, adding security headers, and providing clear contact information for incident response to further strengthen trust and compliance.

A

A Million Ads

amillionads.com

56

A Million Ads (AMA) is a technology-driven company specializing in dynamic creative advertising for audio platforms. They position themselves as a leader in delivering customized, data-driven audio ads across major platforms, serving notable clients such as Target, Starbucks, and American Express. The website reflects a mature digital presence with professional design, strong branding, and extensive client showcases. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, HubSpot, and LinkedIn Insight Tag. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, though some security headers are not explicitly detected and no dedicated security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing or indicates the domain is unregistered or privacy protected, which conflicts with the professional image and client portfolio, raising legitimacy concerns. Overall, the site is functional, professional, and compliant but would benefit from improved transparency on domain registration and security policies.

L

Lastekaitse Liit

kiusamisestvabaks.ee

42

Kiusamisest vabaks is a non-profit educational platform operated by Lastekaitse Liit, focused on bullying prevention in Estonia. The website offers multilingual educational materials and awareness content targeting nurseries, kindergartens, and grade schools. It collaborates with reputable partners including the Estonian Ministry of Education and Research and international child protection organizations. The platform is well-positioned within its niche, serving educators, parents, and children with relevant resources. Technically, the website is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google services for analytics and tag management. It employs multilingual support via WPML and uses SEO best practices including structured data and Open Graph metadata. The site is mobile-optimized and performs moderately well, with a consistent and professional design. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

C

Cloudchipr

cloudchipr.com

66

Cloudchipr is a technology company offering a cloud optimization platform that empowers teams with AI agents to optimize cloud costs, explain anomalies, send reports, and automate workflows. The platform targets FinOps professionals, engineers, and leadership teams, providing real-time observability and management across multiple cloud providers. The website is professionally designed using Webflow CMS and integrates modern analytics and marketing tools such as Google Analytics, HubSpot, Facebook Pixel, and PostHog. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enabled and reCAPTCHA used for forms, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Business credibility is supported by consistent WHOIS data and professional content, but contact information is not explicitly provided. Overall, the website is functional and professional but requires improvements in privacy compliance and security transparency.

O

Olivia Garden

oliviagarden.eu

71

Olivia Garden is a professional hair styling tools brand offering products such as hair brushes, combs, and scissors. The website targets professional hair stylists and consumers interested in hair care innovations. The brand appears established with a consistent and professional online presence. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Google Analytics, Cookiebot for consent management, and reCAPTCHA for bot protection, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website is professional, trustworthy, and well-optimized, with room for improvement in transparency of security policies and contact information.

V

VAKOVAKO | Endowment fund

nf2091.org

62

VAKOVAKO is a Czech Republic-based non-profit endowment fund operating a global donation platform focused on environmental and humanitarian causes. The platform connects donors with carefully vetted nonprofits working in areas such as rainforests, oceans, biodiversity, endangered species, and humanity. The business model emphasizes transparency, with 100% of donations going directly to nonprofits and audited bank accounts. The platform supports donations via a mobile app available on iOS and Android, facilitating easy and fast contributions with no minimum or maximum limits. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Stripe payments, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is well-optimized for mobile devices, fast loading, and includes accessibility features. Security best practices are observed with HTTPS, security headers, and reCAPTCHA integration, though no explicit security policy or incident response information is published. The WHOIS data for the domain is unavailable or malformed, indicating privacy protection which is common and justified for non-profit organizations. Despite this, the website's transparency, presence of official policies, and contact information support its legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly platform for charitable donations. Recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.

P

ProFuturo

profuturo.education

56

ProFuturo is a well-established global digital education program supported by Fundación Telefónica and Fundación la Caixa, focused on reducing educational inequality by providing quality digital education to children and teachers in vulnerable environments. The website reflects a mature digital presence with multilingual support, a proprietary educational platform, and extensive educational content. Technically, the site is built on WordPress with modern tracking and consent tools, showing good performance and mobile optimization. Security posture is solid with HTTPS and bot protection, though improvements in DNS security and security headers are recommended. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its non-profit educational mission.