Security Directory

U

UAB Verslo žinios

infolex.lt

62

INFOLEX.LT is a well-established Lithuanian legal portal operated by UAB Verslo žinios, providing comprehensive legal news, legislation databases, court practice information, legal discussions, and events. The portal targets legal professionals, including lawyers, judges, notaries, and law students, offering subscription-based legal updates and calculators. The website demonstrates a professional and consistent brand presence with good content quality and user experience. Technically, the site uses modern JavaScript libraries such as jQuery, integrates Google Analytics, Microsoft Clarity, and Facebook SDK for analytics and social media engagement. Advertising is managed through Smart AdServer and other networks, with appropriate cookie consent mechanisms in place. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers like CSP are not explicitly detected. WHOIS data is unavailable due to query limits, limiting domain registration trust analysis. Overall, the site is accessible, functional, and trustworthy for its target audience.

U

UAB Skaitmeninė reklama

skreklama.lt

39

UAB Skaitmeninė reklama is a Lithuanian digital marketing agency specializing in a broad range of online advertising services including Google Search Ads, YouTube advertising, Facebook campaigns, remarketing, and SEO. The company positions itself as a professional and experienced partner with a focus on personalized client service and long-term experience since its founding in 2013. The website reflects a mature digital presence with clear service offerings, team presentation, and client testimonials, supported by a Google Premier Partner badge which enhances market credibility. Technically, the site is built on WordPress with modern plugins and integrates analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager, indicating a good level of digital maturity. Security-wise, the site uses HTTPS and reCAPTCHA for forms, but lacks visible advanced security headers and explicit security policies, suggesting room for improvement in security posture. Privacy compliance is partially addressed with a cookie consent banner and GDPR consent checkbox in the contact form, but no dedicated privacy policy page was found in the provided content. Overall, the website is professional and trustworthy, though the absence of WHOIS data limits full verification of domain legitimacy. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving accessibility features to strengthen compliance and trust.

V

VASP

vasp.lt

41

VASP is a Lithuanian-based company specializing in providing tailored business data analytics solutions. Their offerings include consulting, rental of the MATAU analytics system, custom analytics solutions, and educational workshops. The company targets businesses seeking to unlock potential through data-driven insights and process optimization. The website reflects a small-sized, technology-focused service provider with a consistent brand presence and clear contact information. Technically, the site is built on WordPress using popular plugins and themes, with moderate performance and good mobile optimization. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent, though explicit security headers and policies are not evident. The domain registration data aligns well with the business profile, indicating legitimacy and consistency. Overall, the website demonstrates a professional and trustworthy online presence with room for enhanced security practices and formal policies.

B

Business Law & Tax Consulting | ESAS CONSULTING

esasconsulting.eu

47

ESAS CONSULTING is a small, Lithuania-based consulting firm specializing in business law and tax consulting services primarily targeting SMEs and startups. Established around 2016, the company positions itself as a flexible and experienced partner offering integrated legal and tax solutions. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators such as a client logo carousel and LinkedIn presence. Technically, the website is built on WordPress with modern plugins and tracking technologies including Google Analytics, Facebook Pixel, and Hotjar, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced privacy and security transparency to improve trust and compliance.

M

Mano Būstas

manobustas.lt

73

Mano Būstas is a Lithuanian company specializing in comprehensive multi-apartment building maintenance services. The website presents the company as a professional service provider focused on smart solutions, property value growth, and clean environments. The target audience includes apartment owners and property managers in Lithuania. The business model centers on providing maintenance, management, and cleaning services to residential buildings. Technically, the website is built on WordPress with Bootstrap framework, integrating modern analytics and chat support tools such as Google Analytics, Google Tag Manager, and Chatwoot. The site is mobile-optimized and SEO-friendly, with proper metadata and structured data enhancing search visibility. Security-wise, the site enforces HTTPS, includes key security headers, and implements cookie consent mechanisms compliant with GDPR. However, no explicit security policy or incident response information is published, and WHOIS data is unavailable due to query limits, which slightly reduces transparency. Overall, the website is professional and trustworthy, with moderate technical maturity and good privacy compliance.

G

GENERAL FINANCING BANKAS

gf.lt

57

GENERAL FINANCING BANKAS is a Lithuanian financial institution specializing in consumer loans, refinancing, leasing, and deposit services. With nearly two decades of market presence and a team of 150 experts, the bank serves a broad audience of private individuals seeking accessible financial products. The website reflects a professional and user-friendly digital presence, offering online loan applications, calculators, and customer self-service portals. Technically, the site employs modern web technologies including Google Tag Manager, Cloudflare Turnstile CAPTCHA, and Bootstrap framework, hosted on Google Cloud Storage assets. Security posture is strong with HTTPS enforced, CAPTCHA protection on forms, and privacy compliance evident through comprehensive privacy and cookie policies. However, WHOIS data is unavailable due to query limits, limiting domain registration trust verification. Overall, the bank demonstrates a mature digital infrastructure and trustworthy business model suitable for its market segment.

N

Nando.lt

chemcentras.lt

49

Nando.lt is a Lithuanian-based company specializing in agricultural products, raw materials for industry, and research services. The company operates internationally across more than 30 countries, offering biostimulants, microbiological products, adjuvants, and industrial environmental solutions. Their business model focuses on B2B manufacturing and research, targeting agricultural producers, seed and fertilizer manufacturers, and industrial clients. The website reflects a professional and consistent brand with strong trust indicators including ISO certifications and industry awards. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses essential security measures such as HTTPS and Google reCAPTCHA. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. However, WHOIS data is unavailable due to query limits, limiting domain registration trust analysis. Overall, the website demonstrates a mature digital presence with good security posture and business credibility.

The website doublegroup.se serves as an informational platform aggregating various home improvement services such as painting, roofing, carpentry, and renovations primarily targeting Swedish homeowners. The content is comprehensive and well-structured, providing detailed guidance and advice on selecting professionals and undertaking home projects. Technically, the site employs standard web technologies including Bootstrap and jQuery, delivering a moderately optimized and mobile-friendly experience. However, the absence of privacy policies, contact information, and security headers indicates gaps in compliance and security posture. Critically, the WHOIS lookup for the domain www.doublegroup.se failed, suggesting the domain may be unregistered or a subdomain, which raises legitimacy concerns. Overall, while the site offers valuable content, its security and compliance maturity require significant improvement.

L

Litcargo UAB

litcargo.lt

53

Litcargo UAB operates a professional logistics and freight transport service specializing in partial truckload and international logistics across Europe. The company targets businesses requiring frozen food transport and related logistics solutions. The website is built on WordPress using modern tools such as Elementor and Yoast SEO, indicating a moderate level of digital maturity. The presence of structured data and SEO optimizations supports good search engine visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. The absence of explicit privacy policy and contact information limits full compliance and trust. Overall, the website presents a professional image but could improve transparency and security practices.

The domain codemates.co is registered since 2016 with privacy protection via WhoisGuard, Inc. The website content is currently a generic error page indicating the site does not exist on the server. There is no active business information, contact details, or policies published on the site. The domain uses Cloudflare DNS but lacks DNSSEC and security headers, reflecting minimal technical maturity. No analytics, advertising, or tracking technologies are detected, and the site does not provide any user-facing content or services. The overall security posture is basic with no advanced protections or compliance indicators. Given the lack of content and privacy protection, the domain's legitimacy and business credibility are low. Strategic recommendations include deploying actual website content, enabling DNSSEC, adding privacy and cookie policies, and improving security headers to enhance trust and compliance.

L

LATAKKO SIA

latakko.lv

64

Latakko is a well-established wholesale distributor of tires and auto wheels in the Baltic States, boasting 30 years of industry experience and operating as part of the Nordic Tire Group. The company offers a broad assortment of products including passenger car tyres, truck and bus tyres, agro and industrial tyres, motorcycle tyres, and wheels. Their business model emphasizes logistics efficiency and marketing support to partners, positioning them as a market leader in their region. The website reflects a professional and modern digital presence with multilingual support and rich multimedia content. Technically, the site is built on WordPress with WooCommerce and other modern web technologies, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and reCAPTCHA integration, though there is room for improvement in security headers and explicit incident response policies. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the website and business demonstrate high credibility and trustworthiness.

N

NAOS

naos.com

62

NAOS is a French skincare company specializing in ecobiology-based dermatology, aesthetics, and personalized skincare products. The company operates multiple brands including Bioderma, Institut Esthederm, and Etat Pur, targeting consumers seeking tailored skincare solutions. The website supports a global audience with country-specific subdomains and is built on a WordPress CMS with modern front-end libraries and SEO optimization tools. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and explicit privacy policies. The domain is well-established since 1996, reinforcing business credibility. Overall, the website is professional and trustworthy but could improve transparency and security practices.

E

Emergn

returnonintelligence.com

64

Emergn is a consulting and professional services company specializing in building product-centric companies and capabilities. They offer a comprehensive suite of services including digital transformation, product management, experience design, data analytics, software development, cloud and DevOps, intelligent automation, and learning skills development. The company targets mid-sized to large enterprises and global corporations, positioning itself as a trusted partner with a proven track record working with Fortune 500 clients and major global brands. Their business model emphasizes enabling clients to own their transformation through competency development rather than dependency on consultants. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, Google Tag Manager, and Plausible Analytics. The site employs performance optimizations like ShortPixel image compression and uses Lottie animations for enhanced user experience. The website is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. However, explicit security headers and dedicated security or incident response policies are not found, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain reduces transparency but does not negate the professional presentation and trust indicators on the site. Overall, Emergn presents a strong business and technical profile with good security posture and privacy compliance. Strategic recommendations include enhancing security header implementation, publishing explicit security policies, and improving domain registration transparency to further strengthen trust and compliance.

Statistics Canada is the official national statistical agency of Canada, providing comprehensive economic, social, and census data to the public, researchers, and policymakers. The website serves as a key platform for disseminating authoritative statistical information, supporting government and public decision-making. The site is bilingual, reflecting Canada's official languages, and uses the WET-BOEW framework common to Canadian government websites, ensuring accessibility and compliance with government standards. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with responsive design elements to support mobile users. The use of WET-BOEW indicates a mature approach to accessibility and usability. However, the lack of visible security headers and explicit privacy or cookie policies suggests room for improvement in security posture and privacy compliance. Security-wise, the site is served over HTTPS (implied by the domain and typical government practice), but no explicit security headers or incident response information were found in the provided content. The absence of WHOIS data is typical for Canadian government domains managed by CIRA and does not detract from the domain's legitimacy. Overall, the site demonstrates a high level of trustworthiness and professionalism but would benefit from enhanced transparency around privacy and security policies. The overall risk assessment is low given the government affiliation and authoritative content, but strategic recommendations include publishing clear privacy and cookie policies, implementing security headers, and providing incident response contacts to strengthen user trust and compliance.

A

Akvatechnika

akvatechnika.lt

39

The website h2o.lt represents a Lithuanian e-commerce business specializing in water filtration products, drinking water systems, moisture collectors, water testing, massage pools, and outdoor furniture. The company, branded as Akvatechnika, has over 20 years of experience, positioning itself as a trusted local retailer in this niche market. The site is well-structured, with clear navigation and product categorization, targeting consumers and businesses in Lithuania seeking water treatment solutions. Technically, the website is built on the eShoprent CMS platform and leverages modern web technologies including jQuery, Owl Carousel, Facebook Pixel, Google Analytics, and Google Tag Manager. It is mobile optimized and includes accessibility basics, though there is room for improvement in security headers and accessibility compliance. The site employs HTTPS and cookie consent mechanisms, indicating a good level of privacy compliance aligned with GDPR requirements. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities were detected in the visible content. However, the absence of security headers and a vulnerability disclosure policy suggests opportunities to enhance security posture. The lack of WHOIS data limits domain trust verification, but the website content and business presence support legitimacy. Overall, the site demonstrates a solid business and technical foundation with good privacy practices. Strategic improvements in security policies, accessibility, and transparency would further strengthen trust and compliance.

U

UAB Gelsva

gelsva.lt

62

UAB Gelsva is a well-established Lithuanian company operating for over 30 years, specializing in the production and retail of alcoholic beverages, food products, and beverages including bottled water and soft drinks. The company also operates in the hospitality sector through its public catering services. The website reflects a mature business with a clear market position in Lithuania's retail and manufacturing sectors. Technically, the website employs modern tracking and consent management tools such as Google Analytics and Cookiebot, indicating a reasonable level of digital maturity. However, the absence of visible security headers and explicit security policies suggests room for improvement in security posture. Privacy compliance is addressed through a comprehensive cookie consent mechanism and a privacy policy page, supporting GDPR adherence. Overall, the website is professional and trustworthy, but lacks some advanced security and compliance disclosures.

MPOservices is a small business specializing in manufacturing process optimization and automation, offering ERP system implementations and custom software development services. The company positions itself as a niche provider with a strategic partnership with Klaes, a global leader in software solutions for the window, door, and facade industry. The website content is basic but provides a clear overview of their services and partnerships. Technically, the website uses simple HTML and CSS without advanced frameworks or CMS detected. The site lacks HTTPS, security headers, and privacy compliance mechanisms, which are critical for modern web security and trust. No contact information or policies are present, limiting user trust and regulatory compliance. WHOIS data is unavailable, raising concerns about domain legitimacy and transparency. Overall, the website requires significant improvements in security, privacy, and business transparency to enhance credibility and compliance.

B

BARONS GROUP, UAB

barons.lt

42

BARONS GROUP, UAB is a Lithuanian consulting company specializing in European Union funding support, project preparation, administration, and financial management consulting. With over 10 years of market presence, the company positions itself as a trusted partner for businesses seeking to grow through EU investments and professional project management. Their key services include ES investments, project management, and financial consulting, targeting primarily Lithuanian enterprises aiming to expand and secure funding. Technically, the website is built on a modern Bootstrap framework with integration of Google Fonts, FontAwesome, and Google Analytics for tracking. The site is mobile responsive and well-structured, providing a good user experience and clear navigation. However, there is no detected CMS or hosting provider information, and performance is moderate. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. No vulnerability disclosure or incident response information is provided. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is moderate with no critical issues detected. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture significantly.

The website printdone.dk is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is registered since 2017 and appears legitimate based on WHOIS data, with no privacy protection enabled and consistent registration details. The hosting provider is identified as Interneto vizija. Due to the access restriction, no metadata, business information, contact details, or security policies are available for analysis. The lack of HTTPS and security headers further limits the security posture assessment. Overall, the site’s digital maturity and security posture cannot be properly evaluated given the blocked content.

S

S&K Sales

sksales.com

62

S & K Sales Co. is a well-established company founded in 1934, specializing in sales and distribution services primarily targeting the Military Retail Channel and Hawaii & Pacific Island retail markets. The company offers a broad range of services including headquarter, international, contract, and retail services, with a strong focus on custom solutions tailored to their clients' needs. Their market position is strong within their niche, supported by decades of experience and positive client testimonials. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at their target audience. Technically, the website is built on WordPress using Elementor and related plugins, with a modern tech stack including jQuery and Swiper.js. Hosting and DNS services are provided by Cloudflare, ensuring good performance and security. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enabled and domain transfer protections in place, but DNSSEC is not enabled and explicit security policies are absent. From a security and compliance perspective, the site lacks explicit privacy and cookie consent mechanisms, and no incident response or vulnerability disclosure policies are found. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing security and incident response policies, and adding a vulnerability disclosure or security.txt file to enhance trust and compliance.

I

IgniteNet

ignitenet.com

61

IgniteNet is a technology company specializing in providing cost-effective wireless networking solutions including broadband access, Wi-Fi access points, network switches, and cloud-managed WiFi services. The company targets wireless network operators, enterprises, and service providers, positioning itself as a recognized player in the telecommunications hardware and cloud management market. The website reflects a medium-sized business with consistent branding and a professional online presence, supported by a parent company, Edgecore Networks. Technically, the website employs modern web technologies such as Bootstrap, jQuery, AngularJS, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good navigation and content quality, though some legacy code is present. Performance is moderate, and SEO practices are adequately implemented. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or sensitive data exposures were detected in the HTML content. The absence of WHOIS data is a notable concern, potentially indicating privacy protection or domain registration issues, which impacts trustworthiness. Overall, IgniteNet's website demonstrates a solid business and technical foundation with room for improvement in security transparency and compliance. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

M

MO muziejus

mmcentras.lt

48

MO muziejus operates as a prominent Lithuanian cultural institution specializing in modern and contemporary art. The website 'MO muziejaus kolekcija' serves as a digital platform showcasing the museum's art collection, artists, and exhibitions, targeting art enthusiasts and the general public interested in Lithuanian art. The institution offers a variety of services including exhibitions, educational programs, film screenings, and concerts, positioning itself as an important non-profit entity in the media and cultural sector within Lithuania. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Select2, FontAwesome, and lightGallery for enhanced user experience and responsive design. It integrates CookieYes for cookie consent management and Google Tag Manager for analytics, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism with detailed categories. However, no explicit security headers were detected in the provided data, and no security or incident response policies are publicly available. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is unavailable due to query limits, but the website's content and external links suggest legitimacy. Overall, the website presents a professional and trustworthy digital presence for MO muziejus, with room for improvement in security header implementation and public disclosure of security policies. The absence of contact emails and phone numbers on the main page may limit direct communication but aligns with typical cultural institution practices. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features.

P

PrīmX

primekss.com

64

PrīmX is a specialized company offering patented steel fiber reinforced concrete technology solutions aimed at the construction industry. Their product portfolio includes jointless floors, raft foundations, elevated slabs, and outdoor pavements, targeting construction professionals seeking innovative composite concrete solutions. The website presents a professional and consistent brand image with good content quality and clear navigation, although explicit privacy and terms policies are not found. Technically, the site uses a moderate tech stack including jQuery, Google Analytics, Google Tag Manager, Facebook Pixel, and Cookiebot for cookie consent management. The domain is mature, registered since 2004, and uses HTTPS with a clientTransferProhibited status, indicating a stable and legitimate presence. Security posture is adequate but could be improved by adding security headers and explicit security policies. Privacy compliance is basic, with a strong cookie consent mechanism but lacking a visible privacy policy. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

The website advantio.com is currently inaccessible due to a Cloudflare DNS resolution error (Error 1001), indicating that the domain's DNS configuration is not resolving properly. The domain is registered since 2004 with GoDaddy and uses Microsoft Online DNS servers, but DNSSEC is not enabled, which could improve DNS security. Due to the blocked content, no business information, contact details, or policies are available on the site. The technical infrastructure shows use of Cloudflare services for performance and security, but the DNS misconfiguration severely impacts availability and trust. From a security perspective, the lack of DNSSEC and absence of visible security headers or HTTPS information raises concerns. No privacy or cookie policies are present, and no contact or incident response information is found, indicating poor compliance and transparency. The site includes minimal tracking limited to Cloudflare's feedback and performance scripts. Overall, the website's current state represents a critical operational and security risk. The domain registration is legitimate and longstanding, but the DNS issues and lack of accessible content prevent meaningful analysis of business credibility or security posture. Immediate remediation of DNS configuration and enabling DNSSEC are recommended to restore availability and improve security.

The website simplika.com currently serves as a transitional landing page informing visitors that CVO Recruitment and Simplika have merged and rebranded as Grafton Latvia. The site content is minimal, primarily providing a bilingual message and a timed redirect to the new Grafton Latvia website. The business operates in the recruitment sector, targeting job seekers and partners in Latvia, with a history dating back to 2006. The domain is well aged and registered through a reputable registrar, Blacknight Internet Solutions Ltd., with standard domain security measures such as clientTransferProhibited status but lacks DNSSEC. Technically, the site is simple, using basic HTML and CSS without advanced frameworks or CMS, and shows moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and DNSSEC, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional as a redirect but requires enhancements in security, privacy compliance, and richer content to improve trust and user experience.

B

Bitlocus LT, UAB

bitlocus.com

68

Bitlocus LT, UAB is a Lithuania-based company specializing in crypto-as-a-service solutions, offering APIs and platforms that facilitate fiat-to-crypto transactions and crypto exchange services. The company targets businesses and retail clients seeking to integrate crypto functionalities without technical complexities. Bitlocus holds a solid market position as a provider of comprehensive crypto infrastructure, including white-label platforms, payment gateways, and compliance services. Technically, the website is built on modern frameworks such as Next.js, hosted with Cloudflare DNS, and employs Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and domain registration locked, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is adequate with comprehensive privacy and cookie policies, but lacks a cookie consent mechanism. Overall, the website and business demonstrate high professionalism and trustworthiness, supported by consistent WHOIS data and clear legal disclosures.

M

myacelogistics.com

myacelogistics.com

40

The website myacelogistics.com appears to be a newly registered domain with minimal content, primarily serving as a parked domain with advertising placeholders from Google Adsense and Bodis. There is no substantive business description, contact information, or clear indication of active logistics services. The technical infrastructure is basic, relying on Dynadot for DNS and domain registration, with no CMS or advanced frameworks detected. Security posture is weak, lacking HTTPS and security headers, and the domain's WHOIS data shows an anomalous future creation date, which raises legitimacy concerns. Privacy compliance is minimal, with only a basic privacy policy linked but no cookie consent mechanisms or GDPR indicators. Overall, the site lacks professionalism and trust signals, resulting in a low risk and credibility profile.