Security Directory

J

Jumis.co

jumis.co

56

Jumis.co is a Latvian small business specializing in the installation, repair, and reconstruction of wooden roof structures and various roofing materials. The company targets private homeowners and commercial clients seeking quality roofing solutions. The website presents a professional portfolio of completed projects and partnerships, indicating a stable market presence since its founding in 2017. Technically, the website employs common web technologies such as jQuery, Bootstrap, and Google services, hosted behind Cloudflare DNS with GoDaddy as the registrar. While the site is mobile-optimized and well-structured, it lacks explicit privacy and cookie policies, and uses an outdated jQuery version, which poses potential security risks. Security headers are not detected, and DNSSEC is not enabled, suggesting room for security improvements. Overall, the site is accessible and functional with moderate security posture and good business credibility.

P

Primend

primend.com

50

Primend is a reputable IT services company operating primarily in the Baltic region, offering a broad range of services including Microsoft 365 business packages, IT support, cloud services, cybersecurity, and business analytics. The company holds multiple Microsoft Partner of the Year awards and ISO certifications, positioning it as a trusted technology partner in Estonia, Latvia, and Lithuania. Their website reflects a mature digital presence with clear service offerings and customer testimonials, targeting medium-sized businesses seeking reliable IT and cloud solutions. Technically, the site uses modern frameworks like Bootstrap and integrates Google Fonts and jQuery, delivering a responsive and user-friendly experience. Security posture is strong, with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of a Terms of Service page and explicit incident response contacts are minor gaps. Overall, Primend demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its market segment.

M

Mann Lines

mannlines.com

47

Mann Lines is a privately owned shipping and logistics company specializing in liner ro-ro and container vessel services, ships agency, warehousing, forwarding, and distribution primarily in the North Sea and Baltic regions. The website presents a professional image with clear descriptions of their services and subsidiaries, targeting a broad audience involved in transportation and logistics. Technically, the site uses a range of established JavaScript libraries and Google Maps API to enhance user experience, though some libraries are outdated. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is moderate with no HTTPS or security headers information available from the data, and no explicit privacy or cookie policies are present, indicating compliance gaps. The absence of WHOIS data raises concerns about domain legitimacy and ownership transparency. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

Fundación SAFA operates as a non-profit educational foundation in Spain, providing a centralized login portal named Brocal for its community of professors, families, and students. The website serves as a gateway to multiple educational applications and resources, reinforcing its role as a digital facilitator for the foundation's educational services. The foundation maintains an established regional presence with multiple campuses, targeting the Spanish educational sector. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and visually consistent user experience. While the site demonstrates good mobile optimization and a professional design, some accessibility and SEO optimizations are basic and could be improved. The hosting and CMS details are not explicitly disclosed. From a security perspective, the site uses HTTPS and secure form submission but lacks critical HTTP security headers such as Content Security Policy and HSTS. There is no visible cookie consent mechanism, which is a compliance gap under GDPR. No contact information or security policies are published on the login page, limiting transparency. No critical vulnerabilities were detected in the visible content, but improvements in security headers and privacy compliance are recommended. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance measures to strengthen trust and regulatory adherence. Strategic improvements in these areas will support Fundación SAFA's digital maturity and protect its user community effectively.

S

SIA FELZER

felzer.lv

44

Felzer is a Latvian-based manufacturer specializing in HVAC and process cooling equipment, including chillers, heat pumps, and air handling units. The company emphasizes energy efficiency, environmental responsibility, and Scandinavian-inspired precision. Their market presence spans multiple European countries and beyond through direct offices and partner networks. Technically, the website uses a modern but basic tech stack with Bootstrap and jQuery, providing a responsive and navigable user experience. Security posture is adequate with HTTPS and secure forms but lacks advanced security headers and explicit privacy compliance documentation. The absence of WHOIS data limits full domain trust verification. Overall, Felzer presents as a credible medium-sized manufacturing business with room for improvement in privacy and security transparency.

P

Polyroad

polyroad.lv

42

Polyroad is a Latvian civil engineering company specializing in road, street, and parking lot design, with over 20 years of experience delivering complex infrastructure projects. The company targets private and public sector clients requiring professional engineering and project expertise. Their website is built on WordPress using Elementor, providing a good user experience with clear navigation and relevant content. Contact information is transparent, including email, phone, and physical address. However, the site lacks privacy and cookie policies, and no WHOIS data was retrievable, limiting domain trust verification. Security posture is moderate with no detected security headers and no visible vulnerabilities, but improvements are recommended. Overall, the site reflects a legitimate small business with a focused service offering in transportation infrastructure.

Attirance.com is an established e-commerce website specializing in personal care products such as facecare, haircare, oralcare, and odour-control items. The site targets consumers interested in beauty and wellness products, offering a broad catalog of skincare and hygiene products. The business model is retail-focused, with a niche market position in personal care. The domain has been active since 2002, indicating a mature presence in the market. Technically, the website employs common front-end technologies including Bootstrap, Font Awesome, and Swiper.js, providing a responsive and user-friendly interface. The site demonstrates moderate performance and basic SEO and accessibility features. Hosting and domain registration are managed via GoDaddy, a reputable provider. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which are recommended to enhance security posture. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR and other privacy regulations. Contact and incident response information are also absent, which could impact user trust and security incident handling. Overall, the website is functional and professionally designed but would benefit from improved security practices, privacy compliance, and transparency to enhance trustworthiness and regulatory adherence.

株式会社エイコーン is a small Japanese company specializing in the import, sale, and installation of high-quality Italian office and interior furniture products. Their business model includes comprehensive services from import to after-sales support, targeting offices, public facilities, commercial spaces, and residences across Japan. The website reflects a niche market position with a focus on quality and flexibility in customer service. Technically, the website uses a modern JavaScript stack including jQuery, bxSlider, and Google Tag Manager, hosted on a Japanese provider consistent with the company's location. The site is mobile-optimized and well-structured, though accessibility features are basic. Security posture is moderate; while HTTPS is presumed, DNSSEC is not enabled and security headers are absent. Privacy compliance is basic with a cookie consent banner and a privacy policy page, but no GDPR-specific statements or terms of service are present. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.

S

SIA "Lāči"

laci.lv

47

SIA "Lāči" is a Latvian bakery company specializing in bread, cookies, and candy products, with additional services including a cafe and an online store. The company targets consumers interested in bakery goods primarily within Latvia. The website reflects a medium-sized retail and hospitality business with a moderate market position and diversified product offerings. Technically, the website uses modern JavaScript libraries such as jQuery and Slick Carousel, integrates Google Tag Manager for analytics, and employs Cookiebot for cookie consent management. The site is served over HTTPS with good SSL configuration, though lacks some security headers that could enhance protection. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. Contact information is clearly provided, including email, phone numbers, and a physical address, supporting business credibility. Overall, the website is functional with basic content quality and moderate technical implementation, but there is room for improvement in privacy and security practices.

S

SIA "Cido Grupa"

cidogrupa.lv

45

Cido Grupa is a Latvian beverage manufacturing company offering a diverse portfolio including water, juices, soft drinks, beer, energy drinks, and wine. The company positions itself as a trusted business partner focused on providing healthy beverage choices and sustainability initiatives. It operates under the parent company Royal Unibrew, indicating a strong market presence and backing. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at Latvian consumers and business partners. Technically, the website is built on October CMS and leverages modern JavaScript libraries such as jQuery, Swiper.js, and Splide.js for interactive elements. The site is mobile-optimized with good SEO practices and a moderate performance profile. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several recommended security headers and does not provide explicit security or incident response policies, which could be improved to enhance trust and resilience. No WHOIS data was available due to query limits, but the website content and contact information suggest a legitimate and established business. Overall, the website demonstrates a solid digital presence with good content quality and privacy compliance, though security posture can be enhanced. Strategic recommendations include implementing security headers, publishing vulnerability disclosure information, and improving accessibility features to further strengthen the site’s security and compliance stance.

B

BlueBridge Technologies

bluebridgetechnologies.com

64

BlueBridge Technologies is a well-established digital health technology company specializing in medical device software development and regulatory compliance services. Founded in 2006 and operating primarily in the healthcare technology sector, the company serves major global med-tech and pharmaceutical clients, offering services that include software development, validation, cybersecurity, and regulatory consulting. Their market position is strengthened by recognized certifications such as ISO 14971, ISO 13485, and ISO 62304, and partnerships with leading industry players like Novartis and Medtronic. Technically, the website is built on a modern WordPress CMS platform with a professional design, good mobile optimization, and SEO best practices. The infrastructure is hosted by Blacknight Internet Solutions Ltd., an Irish registrar consistent with the company's geographic presence. The site uses common analytics and marketing tools with a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS, employs security headers, and demonstrates compliance with medical device industry standards. No critical vulnerabilities or exposed sensitive data were detected. However, improvements such as enabling DNSSEC and publishing a security.txt file could enhance security posture further. Overall, BlueBridge Technologies presents a credible, professional, and secure online presence aligned with its business focus. Strategic recommendations include enhancing incident response transparency, improving accessibility, and formalizing vulnerability disclosure processes to maintain trust and compliance in a regulated industry.

K

Kronospan

kronospan-worldwide.com

62

Kronospan is a leading manufacturer specializing in wood-based panels including melamine faced boards, particleboard, lacquered panels, worktops, HDF, OSB, flooring, and facades primarily serving the furniture and interior design industries. The company has a strong market position supported by a large-scale manufacturing business model and a broad product portfolio targeting furniture manufacturers, interior designers, and construction professionals. The website reflects a mature digital presence with multi-language support and detailed product and company information. Technically, the site employs modern web technologies such as jQuery, Bootstrap, React components, and Google Maps API, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS enforcement and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Kronospan's website demonstrates a professional, trustworthy, and business-credible online presence with room for improvement in security transparency and accessibility.

RGM Distribution operates an e-commerce website specializing in bathroom vanities, furniture, and related bathroom fixtures. The company targets wholesale buyers and dealers, offering a range of products including vanities, showers, toilets, faucets, storage, and accessories. The website is built on the Volusion platform and integrates various third-party analytics and marketing tools such as Google Analytics, Google Optimize, Dynatrace, and Invodo. While the site provides basic navigation and product information, it lacks comprehensive privacy and cookie policies, which are critical for compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, despite the website's apparent operational status.

R

Rapidrop Global Ltd

rapidrop.com

49

Rapidrop Global Ltd is a UK-based manufacturer and supplier specializing in fire sprinklers and fire suppression equipment. The company targets fire safety professionals and building managers, offering a broad range of products with international and local accreditations. The website reflects a medium-sized manufacturing business with a consistent brand presence and clear UK registration details. Technically, the site uses a mature technology stack including Bootstrap, jQuery, and Umbraco CMS, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and uses an outdated jQuery version. WHOIS data is missing, which slightly impacts trust, but company registration info on the site supports legitimacy. Overall, the site is professional, functional, and compliant with basic privacy regulations.

F

FirstHost

firsthost.lv

59

FirstHost is a Latvia-based technology company specializing in high-performance web hosting, dedicated servers, and cloud VPS solutions primarily targeting European businesses. With over 18 years of experience and a client base exceeding 9,000, the company positions itself as a reliable and scalable IT infrastructure provider. Their services include dedicated servers, cloud hosting, domain registration, SSL certificates, and virtual desktop infrastructure, catering to enterprises seeking robust and flexible hosting solutions. The website reflects a mature digital presence with multilingual support and multiple currency options, indicating a broad regional focus. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and performance. Integration with analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Yandex Metrika demonstrates a data-driven approach to customer engagement. The site is mobile-optimized and exhibits good SEO practices, contributing to its accessibility and reach. From a security standpoint, the site enforces HTTPS and uses reputable third-party services for live chat and analytics. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for improvement. The lack of WHOIS data due to query limits restricts full domain trust verification, though the website content and business indicators suggest legitimacy. Overall, FirstHost presents a solid business and technical profile with room to enhance transparency around security and compliance. Strategic improvements in security documentation and WHOIS data availability would strengthen trust and compliance posture.

ARCO REAL ESTATE is a Latvian real estate agency established in 1992, offering brokerage, property valuation, consulting, and marketing services primarily focused on residential and commercial properties within Latvia. The website presents a professional and content-rich platform targeting property buyers, sellers, renters, and investors in the Latvian market. The company maintains an active social media presence and provides clear contact information, enhancing trust and accessibility. Technically, the website employs modern web technologies including jQuery, Foundation CSS framework, Leaflet.js for maps, and integrates Google Analytics for user tracking. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Security practices include HTTPS usage and a cookie consent mechanism, but explicit security headers and incident response policies are not evident from the HTML content. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response transparency. Privacy compliance is basic with GDPR-related cookie consent and a privacy policy page available. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification, but website content and business information appear consistent with a legitimate real estate business. Overall, the website is professional and trustworthy with room for enhanced security and compliance measures. Strategic recommendations include strengthening security headers, publishing incident response and terms of service documents, and improving accessibility compliance to further solidify the company's digital maturity and trustworthiness.

E

Enlit Europe

enlit-europe.com

73

Enlit Europe is a leading event organizer specializing in sustainable energy, energy transition, and decarbonization sectors. The website promotes the 2025 event in Bilbao, Spain, targeting industry professionals, exhibitors, and visitors interested in energy transition. The platform offers exhibition opportunities, conferences, and multimedia engagement, positioning itself as a premier European event in this sector. Technically, the website uses a modern JavaScript stack with jQuery, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, providing a good user experience. Security-wise, HTTPS is enforced, and cookie consent is implemented, but there is a lack of visible security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain is a concern, as it reduces trust in domain legitimacy despite the professional website presence. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.

The website kaitsealad.ee serves as the official online presence for Matsalu National Park, managed by the Estonian Environmental Board (Keskkonnaamet). It provides comprehensive information about the park's natural features, cultural heritage, and international recognitions, positioning itself as a key governmental resource for environmental conservation and sustainable tourism in Estonia. The site targets nature enthusiasts, researchers, tourists, and local communities, offering detailed visitor information and educational resources. Technically, the site is built on Drupal 10 with modern web technologies, ensuring good mobile optimization, accessibility, and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and well-aligned with its governmental mission.

V

Visit Talsi

visittalsi.com

44

Visit Talsi is a regional tourism information center website dedicated to promoting the Talsi region in Latvia. The site provides comprehensive information about local attractions, events, accommodations, and dining options, targeting tourists and visitors interested in exploring the area. The business operates as a small entity focused on hospitality and regional tourism promotion, with a clear market position as a trusted local information source. The website is multilingual, primarily in Latvian, with options for English, German, Estonian, Lithuanian, and French, enhancing accessibility for international visitors. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Google Maps API, and Google Fonts. It uses common plugins such as MonsterInsights for Google Analytics tracking. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Hosting is via name servers cloudns1.hostnet.lv and cloudns2.hostnet.lv, though the exact hosting provider is not explicitly identified. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protection enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no visible privacy policy, cookie policy, or terms of service, and no consent mechanism for tracking cookies, which poses compliance risks under GDPR. Incident response and security policies are not published, indicating a low maturity in security governance. Overall, the website is professional, trustworthy, and serves its business purpose well but requires improvements in privacy compliance and security best practices to reduce risk and enhance user trust. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response contacts.

The website www.visitsaulkrasti.lv serves as an official regional tourism portal for Saulkrasti municipality in Latvia. It provides comprehensive visitor information including local attractions, events, accommodation options, dining, and useful tips for tourists. The site targets visitors and tourists interested in exploring the Saulkrasti region, positioning itself as a key local tourism information hub. The business model focuses on promoting local tourism services and events, supporting the hospitality and government sectors. The content is well-structured, visually appealing, and consistent with the brand identity of Saulkrasti tourism. Technically, the website is built on WordPress CMS and utilizes modern JavaScript libraries such as jQuery, Swiper.js for sliders, and Magnific Popup for galleries. It integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the website enforces HTTPS with excellent SSL configuration. However, it lacks explicit security headers and does not provide a dedicated security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. Contact information is transparent and professionally presented, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and serves its purpose effectively. Strategic improvements could include implementing additional security headers, publishing a security policy or incident response contact, and adding a security.txt file to facilitate vulnerability disclosures. These steps would further strengthen the site's security posture and trustworthiness.

S

Spordikoolituse ja -Teabe SA

sport.ee

50

Sport.ee is a government-affiliated Estonian sports information portal managed by Spordikoolituse ja -Teabe SA. It serves as a comprehensive platform providing data on sports training, coaching qualifications, sports organizations, events, and statistics. The site targets sports organizations, coaches, athletes, and enthusiasts within Estonia, positioning itself as a key national resource for sports-related information and management. The business model revolves around offering informational services and integration with official sports registers and government bodies. Technically, the website employs a modern tech stack including Bootstrap, jQuery, AngularJS, and various libraries for UI and data visualization, ensuring a responsive and user-friendly experience. Performance is moderate with good mobile optimization and basic accessibility features.

N

NOVOT Agentuur

novot.ee

56

NOVOT Agentuur is a well-established full-service marketing agency based in Estonia, founded in 2006. The company offers a broad range of marketing services including branding, website development, campaign management, social media, and media planning. Their website reflects a professional and consistent brand image, targeting businesses seeking comprehensive marketing solutions. The digital infrastructure is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and CookieYes for privacy compliance. The site is mobile-optimized and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website presents a trustworthy and professional digital presence.

K

Keskkonnaagentuur

loodusveeb.ee

55

Loodusveeb is an official Estonian governmental environmental information portal managed by the Estonian Environment Agency (Keskkonnaagentuur). It provides comprehensive information on Estonia's nature, biodiversity, ecological themes, citizen science projects, and environmental education. The website targets Estonian residents, environmental enthusiasts, researchers, and volunteers, serving as a trusted source for nature-related data and public engagement. Technically, the site is built on Drupal 10 with modern libraries and includes a cookie consent mechanism compliant with EU regulations. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent, but lacks explicit security headers and published security policies. WHOIS data confirms domain legitimacy and consistency with the governmental nature of the site. Overall, the website is professional, trustworthy, and well-positioned as a governmental environmental resource.

The website kaitsealad.ee is an official Estonian government-related portal managed by Keskkonnaamet (Environmental Board) providing comprehensive information about Estonia's protected areas. It serves as an educational and informational resource for the public, nature enthusiasts, landowners, and youth conservation groups. The site offers news, events, maps, and educational content related to nature conservation and sustainable tourism. Technically, the site is built on Drupal 10 CMS with modern frontend libraries and is hosted via Zone Media OÜ. It features a cookie consent mechanism compliant with EU regulations and uses Matomo for analytics. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Contact information is clearly provided, enhancing trust and credibility. However, privacy policy and terms of service pages are not explicitly found, which is a gap in compliance. Overall, the site is professional, accessible, and trustworthy, supporting its government mission effectively.

S

Spordikoolituse ja -Teabe SA

spordiregister.ee

58

Eesti Spordiregister, operated by Spordikoolituse ja -Teabe SA under the Estonian Ministry of Culture, serves as the official national registry and information portal for sports organizations, schools, facilities, and coaches in Estonia. It provides comprehensive data services including statistics, data submission portals, and public access to sports-related information, targeting sports entities and the general public. The platform is well-positioned as a trusted governmental resource in the Estonian sports sector. Technically, the website employs a mature technology stack including jQuery, Bootstrap, Highcharts, Leaflet, and other modern JavaScript libraries, ensuring a responsive and accessible user experience. The site is mobile-optimized and implements basic SEO and accessibility features. The infrastructure appears custom-built without reliance on popular CMS platforms, indicating tailored development for specific governmental needs. From a security perspective, the site enforces HTTPS and uses secure form inputs, but lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or malware were detected, and cookie consent mechanisms are in place, supporting GDPR compliance. The WHOIS data aligns well with the website's governmental nature, reinforcing legitimacy. Overall, the website demonstrates a solid security posture and technical maturity suitable for its governmental role, with room for improvement in security header implementation and transparency around security policies. The business credibility is high given its official status and clear contact information.

E

eHost OÜ

arenduskeskus.ee

40

Investor.ee is a small Estonian educational website focused on providing information and guidance about investing and financial growth. The site targets individuals and organizations interested in learning about investment strategies, risk management, and financial planning. The business operates primarily as an informational resource with content in Estonian, positioning itself as a niche player in the finance education sector. The website is built on WordPress using modern themes and plugins, with a moderate level of technical maturity and good mobile optimization. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security best practices such as security headers and explicit privacy policies are missing. Overall, the site demonstrates a moderate security posture with room for improvement in privacy compliance and security transparency.

E

Eesti Meediaettevõtete Liit

meedialiit.ee

41

Eesti Meediaettevõtete Liit is a well-established Estonian media association founded in 1990, representing a broad spectrum of private media outlets including web portals, TV, radio, newspapers, and magazines. The organization focuses on promoting trustworthy journalism, protecting the interests of its members, and advocating for fair competition in the media market. The website reflects this mission with relevant content, press council decisions, and news updates targeted at media professionals and the Estonian public. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google reCAPTCHA, ensuring a good user experience and basic security measures. The security posture is solid with HTTPS and anti-bot protections, though some advanced security headers could be added. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its audience effectively.

O

Online Solution 360 GmbH

securecommerce.eu

64

SecureCommerce, operated by Online Solution 360 GmbH, is a specialized cybersecurity service provider focused on protecting online stores and e-commerce platforms. The company offers managed firewall, DDoS protection, malware scanning, and monitoring services tailored to popular e-commerce systems such as Magento, WooCommerce, and Shopware. Their market position is that of a niche provider delivering Security-as-a-Service solutions to online merchants primarily in Germany. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. Contact information and cookie consent mechanisms are well implemented, though privacy and terms policies are missing. Technically, the site uses reputable hosting via OVH SAS and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement in security headers and published policies. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

S

Starptautisko izstāžu rīkotājsabiedrība BT 1

balttour.lv

52

Balttour.lv represents the Baltic region's premier international tourism exhibition organized by Starptautisko izstāžu rīkotājsabiedrība BT 1 in partnership with ALTA. The website showcases detailed event information, participant lists, news, and visitor guidance, targeting tourism professionals and general visitors interested in travel opportunities. The business holds a strong market position as a leading event organizer in the hospitality and tourism sector in Latvia. Technically, the website employs a mature technology stack including Bootstrap, jQuery, and various UI libraries, with integration of Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and well-structured, though some older libraries like jQuery 1.11.2 are used, which may pose security risks. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and dedicated security or privacy policy pages. WHOIS data confirms domain legitimacy with consistent registrant information matching the business claims. Overall, the website is professional and trustworthy but could improve compliance and security practices.

A

admin

monetti.ee

55

Monetti.ee operates as a leading personal loan consultancy and comparison platform in Estonia, providing users with access to a wide range of loan products including mortgage loans, refinancing loans, credit cards, and quick loans. The website positions itself as the number one loan consultant in Estonia since 2008, offering services that help consumers make informed financial decisions by comparing various financial products. The platform targets Estonian consumers seeking personal loans and related financial services, leveraging partnerships with multiple loan providers to offer comprehensive options. Technically, the website is built on WordPress CMS, utilizing popular libraries and plugins such as jQuery, Bootstrap, and WPBakery Page Builder, hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with responsive design, SEO optimization, and integration of analytics and trust signals like Trustpilot reviews. Security posture is solid with HTTPS enforced, use of reCAPTCHA, and cookie consent mechanisms, although it lacks explicit security policies and advanced security headers. Overall, Monetti.ee presents a professional and trustworthy online presence with room for improvement in formal security disclosures and terms of service.

G

Gemeinde Stansstad

stansstad.ch

65

Gemeinde Stansstad operates as the official municipal government website for the town of Stansstad in Switzerland. It provides residents and visitors with comprehensive information about local administration, politics, cultural events, and public services. The website targets local citizens and stakeholders, offering online administrative tools such as a citizen account and online service counters. The business model is that of a public sector entity focused on community engagement and service delivery. The site maintains a consistent and professional brand image with clear navigation and relevant content.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

F

FlexiSystems s.r.o.

edituj.cz

33

FlexiSystems s.r.o. operates the website flexisite.cz, specializing in delivering modern, custom web solutions including complex web projects, e-commerce platforms, and visual editing content management systems. The company targets businesses requiring tailored web development services primarily within the Czech Republic. The website demonstrates a professional design with clear navigation and relevant content, supporting its position as a specialized technology provider. Technically, the site employs common JavaScript libraries such as jQuery and Slick Carousel, integrates Google Tag Manager for analytics, and uses a custom CMS with visual editing capabilities. Mobile optimization and SEO practices are adequately addressed, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and documented policies. The absence of WHOIS data limits domain trust verification, but the presence of clear company contact details and client logos supports business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

Č

Česká asociace rozvojových agentur

cara.cz

53

Česká asociace rozvojových agentur (ČARA) is a well-established non-profit association in the Czech Republic that unites regional development agencies to support regional competitiveness and policy implementation. The website reflects a professional and consistent brand presence with clear contact information and comprehensive privacy and cookie policies, indicating a mature approach to compliance. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and various UI libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. The lack of WHOIS data is a notable gap, reducing domain trustworthiness and warranting further verification. Overall, the site is functional, compliant, and serves its target audience effectively.

T

Telema AS

telema.lt

43

Telema AS is a well-established technology company specializing in Electronic Data Interchange (EDI) services, facilitating automated and accurate electronic document exchange between businesses. With over 25 years in the market and a strong presence in Lithuania and the Baltic region, Telema serves thousands of stores and suppliers, positioning itself as a trusted partner in business process automation and ERP integration. The website reflects a mature digital presence with comprehensive service descriptions, client testimonials, and a network of certified software partners. Technically, the site is built on WordPress with modern libraries and tools, including robust analytics and marketing integrations. Security posture is strong, supported by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Privacy compliance is well addressed with Cookiebot consent management and clear privacy policies. Overall, the site projects professionalism, trustworthiness, and technical competence.

I

Itera BI

bi365.ee

42

BCS Itera, operating under the brand Itera BI, is a specialized provider of business intelligence and data analytics solutions primarily leveraging Microsoft technologies such as Power BI, BI4Dynamics, and Azure. Founded in 2019 and based in Estonia, the company offers a comprehensive portfolio of services including BI strategy development, data warehouse architecture, BI implementation, cloud BI solutions, version upgrades, and advanced forecasting models. The website demonstrates a mature digital presence with rich content, client case studies, and educational resources, positioning the company as a trusted expert in the BI domain within its regional market. Technically, the site is built on WordPress with modern plugins and analytics integrations, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and privacy compliance are recommended. Overall, the company presents a credible and professional image with clear contact channels and certifications, though it should enhance its privacy and cookie policies to meet compliance standards.

T

Tallinna 21. Kool

21k.ee

41

Tallinna 21. Kool is a well-established educational institution in Estonia, providing primary and secondary education with a focus on modern, innovative learning approaches. The school has a strong market position supported by a long history since 1903 and multiple recognitions and awards. The website reflects a medium-sized institution targeting students, parents, and educators with comprehensive educational services and extracurricular activities. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and various JavaScript libraries, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and anonymized Google Analytics tracking, though it lacks some advanced security headers and formal security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

S

Startax Finland Oy

startax.net

55

Startax Finland Oy is a well-established Finnish company specializing in the wholesale import and distribution of electrical spare parts for passenger and commercial vehicles. Founded in 2000, it holds a leading market position in Finland and serves automotive wholesalers and repair garages. The website reflects a professional and consistent brand image, offering multilingual support and electronic catalog access for customers. The business model focuses on B2B wholesale distribution with additional services such as garage account registrations. Technically, the website employs a modern yet stable technology stack including Bootstrap 3, jQuery, and Magnific Popup, with Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. Hosting appears to be Finnish-based, aligning with the company's geographic focus. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks DNSSEC and explicit security headers. The login form includes CSRF protection and basic input validation. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and DNSSEC are recommended to enhance protection. Overall, the website and domain registration data indicate a legitimate and credible business with a solid digital presence. The security posture is adequate but could benefit from enhancements. Privacy compliance is basic but present, with a privacy policy and cookie consent implemented. Strategic recommendations include strengthening security headers, enabling DNSSEC, and expanding transparency around security policies and incident response.

T

SEO Optimeerimine | Teie Ettevõte

taddy.ee

35

The website www.taddy.ee is a small Estonian SEO service provider specializing in both internal and external SEO optimization, competitor analysis, and targeted advertising. The business targets companies seeking to improve their search engine visibility and website traffic. The site presents clear service packages with pricing and showcases client examples, indicating a focused and professional approach. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design and good navigation. However, there are gaps in privacy compliance, as no privacy or cookie policies are published, and contact information is limited to a web form without direct emails or phone numbers. Security posture is moderate with HTTPS enabled but lacking explicit security headers and vulnerability disclosures. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices to improve trust and compliance.

T

Technics in Management Transfer (TMT)

tmt-aba.com

52

Technics in Management Transfer (TMT) is a specialized consulting firm established in 1978 in Tokyo, Japan, focusing on labor and human resource consulting for multinational firms. The company offers services including personnel policy, rules of employment, staff reduction, compensation design, union relations, and training seminars. The website presents a professional image with clear service descriptions, founder information, and client testimonials, targeting businesses operating in Japan seeking HR and labor consulting expertise. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern web technologies and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content appears credible. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

E

eHost OÜ

aksohaus.ee

40

Investor.ee is a small Estonian educational website focused on providing practical advice and information about investing, portfolio management, risk management, and financial knowledge. The site targets individuals and organizations interested in growing their capital through various investment strategies. The business operates primarily as a content and informational platform, with a niche focus on the Estonian-speaking investment community. The domain is registered to eHost OÜ since 2019, consistent with the website's scope and scale. Technically, the website is built on WordPress using a modern theme and standard libraries such as Bootstrap, jQuery, and FontAwesome. It integrates Google Tag Manager for analytics and Google reCAPTCHA v3 for spam protection on forms. The site is hosted behind Cloudflare DNS and uses HTTPS, ensuring secure communication. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or security policy information is available. External links are configured to open in new windows with noopener for security. Overall, the website is functional, professionally designed, and provides relevant content for its audience. The main risks relate to privacy compliance gaps and missing security headers. Strategic improvements in these areas would enhance trust and regulatory adherence.

P

Printlanti Oy

printlanti.fi

49

Printlanti Oy is a Finnish print management company specializing in print brokerage and production management services. With over 10 years of experience and a strong network across Finland and the Baltic region, they provide cost-effective print solutions to small and medium-sized enterprises. Their website reflects a professional and consistent brand image, targeting businesses seeking expert print management to optimize resources and reduce costs. Technically, the site is built on WordPress using the Enfold theme, incorporating modern web technologies and marketing tools such as Google Analytics and Survicate. Security posture is solid with HTTPS enabled and standard domain protections, though DNSSEC is not enabled and no explicit security policies or vulnerability disclosures are present. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and well-positioned in its niche, though improvements in privacy and security transparency are recommended.

shineyourcareer.com is a small Italian technology news website founded in 2023, focusing on consumer electronics news and reviews. The site targets Italian-speaking technology enthusiasts and consumers, providing timely articles on smartphones, tablets, and related tech topics. The business model is advertising-supported online media, with a consistent brand presence and good content quality. Technically, the site is built on WordPress using the Morenews theme and child theme Newslight, leveraging common web technologies like jQuery and Bootstrap. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is adequate with a privacy policy and cookie consent banner in Italian, aligned with GDPR requirements. Contact information is clearly provided with a physical address, phone number, and company email. No terms of service or incident response policies are found. Overall, the website is professional and trustworthy but could improve security hardening and transparency on security policies.

V

Veriff

veriff.me

79

Veriff is a leading AI-powered identity verification company providing highly automated solutions for fraud prevention, compliance, and customer trust. Their platform supports a wide range of verification services including document verification, biometric authentication, age validation, and AML screening. The company targets global businesses across multiple industries such as financial services, e-commerce, and human resources. The website demonstrates a mature digital presence with modern technologies, strong branding, and comprehensive content. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance practices. However, the absence of public WHOIS data is notable and warrants further verification. Overall, Veriff presents a professional and trustworthy online presence aligned with its market position.

B

Brightway.ro

brightway.ro

46

Brightway.ro is a Romanian company specializing in professional and personal development training, coaching, consulting, recruitment, and team building services. Established since 2004, it offers a broad portfolio of courses and programs aimed at individuals and organizations seeking to enhance leadership, sales, technical skills, and organizational culture. The company leverages expert trainers and innovative methodologies to deliver value and growth opportunities to its clients. The website reflects a mature digital presence with comprehensive content, client testimonials, and multiple service offerings.

C

CLdN

cldn.com

61

CLdN is a well-established logistics company specializing in integrated maritime and multimodal transport solutions across Europe. Founded in 1929, it operates a large fleet of RoRo ships and maintains a network of terminals and transport units, serving major economic regions including the UK, Ireland, Iberia, and Scandinavia. The company emphasizes sustainability with a low CO2 footprint and employs around 3,000 staff. The website reflects a professional and comprehensive digital presence built on Drupal 10, featuring modern web technologies and good mobile optimization. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. However, the absence of WHOIS registration data for the domain www.cldn.com is a notable anomaly that slightly impacts trust. Security posture is generally good with HTTPS enforced, but lacks visible security headers and explicit incident response or vulnerability disclosure information. Overall, the website is functional, professional, and trustworthy, but could improve transparency and security documentation to enhance confidence further.

Sopro Bauchemie GmbH is a German manufacturer specializing in tile adhesives, grouts, surface fillers, primers, bonding agents, screeds, renders, and waterproofing products. The company targets construction professionals and distributors across multiple European markets, supported by a multilingual website infrastructure. Their market position is that of an established medium-sized manufacturer with a consistent brand presence and professional digital assets. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform (Usercentrics) ensuring GDPR compliance. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and secure form handling, though some HTTP security headers are missing. The absence of WHOIS data for the domain www.sopro.com is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly reduces overall trust. Contact information and privacy policies are clearly presented, supporting compliance and user trust.

S

solemedia GbR Peter und Agathe Rösch

solemedia.de

43

solemedia GbR Peter und Agathe Rösch operates a full-service marketing and communication agency based in Germany, focusing on services such as marketing, design, print, and internet solutions. The website presents a professional design with a clear focus on their service offerings, targeting businesses seeking comprehensive marketing support. Technically, the site uses modern front-end frameworks like Bootstrap and integrates self-hosted Matomo analytics alongside a Usercentrics consent manager, indicating a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS usage and consent management, but lacks visible security headers and published security policies, which are areas for improvement. Overall, the website is accessible and functional but would benefit from enhanced transparency in privacy and security documentation to improve trust and compliance.

F

Feldhaus Klinker

feldhaus.lt

50

Feldhaus Klinker is a Lithuanian-based company specializing in the sale of clinker tiles, bricks, and pavers, representing a historic European brand established since 1857. The website serves as an e-commerce and product catalog platform targeting construction professionals and retail customers primarily in Lithuania and neighboring regions. The business model focuses on providing high-quality building materials with additional tools such as a product configurator and galleries to support customer decision-making. The company maintains a consistent brand presence with active social media channels and a clear contact phone number. Technically, the website is built on the OpenCart platform using the Journal2 theme, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and various UI and gallery plugins. Hosting and DNS are managed via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are critical for GDPR compliance and enhanced security posture. No incident response or security policy information is publicly available, indicating room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and functional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory adherence.

V

Viešoji įstaiga „Šilutės sportas“

silutessportas.lt

39

The website represents Viešoji įstaiga „Šilutės sportas“, a public institution focused on coordinating and promoting sports activities in the Šilutė region of Lithuania. It primarily supports basketball and football teams, youth sports training, and organizes local sports events. The site targets local community members, youth, and sports enthusiasts, positioning itself as a regional sports coordinator with a clear mission to enhance sports accessibility and development. Technically, the website uses a modern but straightforward tech stack including jQuery, Bootstrap, and popular UI libraries. It is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. The site includes a cookie consent mechanism aligned with GDPR requirements and uses Google Analytics for minimal user tracking. From a security perspective, the site lacks visible HTTP security headers and explicit security or incident response policies. The SSL configuration could not be verified from the provided data. The cookie consent implementation is a positive privacy feature, but the absence of vulnerability disclosure and security.txt pages indicates room for improvement in security transparency. Overall, the site is professional and trustworthy in content and design but is hindered by missing WHOIS domain registration data, which raises questions about domain legitimacy. Strategic improvements in security headers, incident response information, and domain registration verification are recommended to enhance trust and compliance.