Security Directory

U

UPRENT Ltd.

uprent.eu

47

UPRENT Ltd. is a regional provider specializing in pump rental, energy solutions, and construction equipment across Latvia, Estonia, Lithuania, and Poland. The company offers a broad range of rental equipment including pumps, excavators, generators, and trench support systems, complemented by specialist project services. Their market position is strong within the Baltic region and Poland, supported by a multilingual website and localized contact points. The business model focuses on equipment rental and sales with value-added specialist solutions for industrial and construction clients. Technically, the website is built on a modern WordPress platform with WooCommerce and WPBakery Page Builder, integrating Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility. Security measures include HTTPS, reCAPTCHA on forms, and nonce tokens, though explicit security headers and policies are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a published privacy policy and security incident response details indicates room for improvement in compliance and transparency. Cookie consent mechanisms are implemented, supporting GDPR compliance to some extent. Overall, UPRENT presents a professional and trustworthy online presence with comprehensive contact information and clear business focus. Strategic enhancements in privacy documentation, security policies, and accessibility would further strengthen their digital maturity and compliance standing.

A

A.J.Boggs & Company

ajboggs.com

73

A.J. Boggs & Company is a technology solutions provider specializing in healthcare, government, and public sector markets. Their offerings include managed hosting, eligibility management engines, search engine technology, and data interface solutions designed to improve operational efficiency and compliance. The company targets organizations requiring HIPAA-compliant and scalable technology services. The website reflects a medium-sized enterprise with a professional online presence and a focus on B2B services. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and HubSpot analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and performs adequately, though there is room for improvement in accessibility and security headers. The presence of a cookie consent mechanism and privacy policy shows awareness of privacy compliance, though GDPR compliance is not explicitly confirmed. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure. However, the lack of explicit security headers and incident response information suggests areas for enhancement. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or recent domain registration, which slightly reduces trustworthiness. Overall, the website and business appear legitimate and professional, but improvements in transparency around security policies and domain registration details are recommended to strengthen trust and compliance.

L

Lindex Group Oyj

stockmanngroup.com

61

Lindex Group Oyj is a Finnish multinational retail company operating primarily in the fashion and department store sectors through its two main divisions: Lindex and Stockmann. Lindex is a leading Nordic fashion brand with a strong presence in 17 countries and online sales in 34 countries, focusing on women's and children's apparel, lingerie, and cosmetics. Stockmann operates quality department stores and e-commerce platforms in Finland and the Baltic countries. The company targets consumers seeking quality fashion and lifestyle products, leveraging a multichannel retail business model combining physical stores and digital commerce. The website reflects a professional corporate presence with comprehensive investor relations and sustainability information. Technically, the website is built on WordPress 6.8.1 with modern web technologies including jQuery and Google Tag Manager. It employs a cookie consent mechanism compliant with GDPR and integrates analytics tools such as Google Analytics and ContentSquare. The site is mobile-optimized and accessible, with good SEO practices. However, no explicit security headers were detected in the HTML source, which could be improved to enhance security posture. Security-wise, the site enforces HTTPS and uses cookie consent for privacy compliance. There is no visible security policy or incident response contact information published, which are areas for improvement. The absence of WHOIS registration data for the domain is a notable anomaly that raises questions about domain legitimacy, despite the professional appearance and content of the website. Overall, the website is well-designed and functional, supporting the company's business objectives effectively. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to strengthen trust and compliance.

T

Timbeco Woodhouse OÜ

timbeco.ee

51

Timbeco Woodhouse OÜ is a well-established Estonian company specializing in the design, manufacturing, and turnkey construction of wooden element and modular buildings. With over 31 years of experience and a team of more than 120 specialists, Timbeco serves private clients, developers, construction companies, and municipalities primarily in Estonia and the Nordic region. The company emphasizes sustainability, quality, and innovation, supported by multiple ISO certifications and industry awards. Their digital presence is built on a modern WordPress platform with SEO and analytics tools, ensuring good user experience and content relevance. Security measures include HTTPS, reCAPTCHA, and standard WordPress security plugins, though some security headers could be improved. Overall, Timbeco demonstrates a strong market position with credible business practices and a professional online presence.

A

Astro Baltics

astrobaltics.eu

47

Astro Baltics is a well-established Nordic IT company founded in 1998, specializing in comprehensive and flexible IT solutions for businesses of all sizes. Their offerings include the NOOM economic software suite, the Cloudics cloud platform tailored for fuel stations, car washes, and retail, as well as custom software development and IT hardware sales with maintenance services. The company maintains a strong market position in Estonia and the surrounding region, supported by ISO 27001 certification and a professional online presence. Technically, the website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security practices are solid, with HTTPS, reCAPTCHA, and privacy consent mechanisms in place, although some security headers could be enhanced. Overall, the site reflects a mature digital infrastructure aligned with business goals.

Z

Zone Media OÜ

artist.ee

49

Artist.ee is a specialized Estonian marketing and media company operating since 2010 under Zone Media OÜ. The company focuses on retail and service environments, offering services such as marketing, media, audio design, studio production, technical audio solutions, and advertising screens. Their market position is strong within Estonia, targeting retail businesses and brands aiming for effective in-store and service environment communication. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern libraries and Google Analytics for tracking. However, it lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is good with HTTPS enabled and no exposed sensitive data, but missing security headers and vulnerability disclosure mechanisms indicate room for improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

A

AS Emor

emor.ee

39

Kantar Emor is a reputable Estonian market research and data analytics company providing comprehensive services such as trend studies, social research, brand and communication analysis, and media research. The company targets businesses and organizations in Estonia seeking reliable data to make informed decisions. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations, demonstrating good technical infrastructure and content management practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in the market research sector.

A

Artis

artisllc.com

55

Artis is a specialized technology company focused on developing advanced real-time system solutions that address complex challenges requiring extremely fast distributed sensing, parallel processing, and actuation. Their offerings include active protection systems that neutralize threats and safety systems designed for rapid response beyond human reaction times. The company targets clients in sectors where microsecond-level performance is critical, such as defense and safety industries. The website presents a professional and consistent brand image with clear messaging about their expertise and services. Technically, the site is built on WordPress with the Avada theme, leveraging modern web technologies and Google Analytics for tracking. The site is mobile-optimized and performs moderately well, though accessibility features could be improved. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. The absence of WHOIS registration data for the domain is a notable concern, impacting trust and legitimacy assessments. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

D

Destia

destia.fi

64

Destia is a Finnish infrastructure company specializing in the planning, construction, and maintenance of critical infrastructure throughout its lifecycle. As a part of the Colas Group, Destia holds a strong market position in the transportation and energy sectors within Finland. The website reflects a mature digital presence with professional design, clear branding, and comprehensive cookie consent mechanisms, indicating a commitment to privacy compliance. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager and Cookiebot, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and incident response information suggests room for improvement. Overall, Destia's website demonstrates a high level of professionalism and trustworthiness, supporting its business credibility in the infrastructure sector.

B

Brightspark

brightspark.ee

38

Brightspark OÜ is an Estonian software development company founded in 2011, specializing in developing modern web-based information systems primarily for the trade sector. The company has evolved from providing software development services across multiple countries to focusing on its own product development, including cloud-based platforms like Lexi.Market, rehabilitation software (Reha), and digital document management services (Infore). The website reflects a professional and consistent brand presence with clear contact information and social media engagement. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. Overall, Brightspark presents as a credible small technology company with a focused business model and established market presence.

T

TBD Pharmatech

biodiscovery.eu

52

TBD Pharmatech is a European-based Contract Development and Manufacturing Organization (CDMO) specializing in Active Pharmaceutical Ingredients, advanced intermediates, and fine chemicals production. Founded in 2021, the company positions itself as a reliable partner for pharmaceutical companies seeking development and manufacturing services. The website reflects a professional and consistent brand image with clear business focus and relevant service offerings. Technically, the site is built on WordPress with modern analytics and tracking tools integrated, including Google Analytics and Google Tag Manager. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and comprehensive security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security practices to align with regulatory requirements and industry best practices.

R

Rescoval

rescoval.ee

42

Rescoval is an Estonian company specializing in advertising installation services, including banner and sticker advertising, seasonal sales areas, and rental of advertising trailers across Estonia. Established in 2010, the company targets retail chains, supermarkets, and shopping centers, offering professional and rapid campaign installations. The website reflects a mature local business with consistent branding and clear service offerings. Technically, the site is built on WordPress with common plugins for SEO, forms, and sliders, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response policies. Overall, the domain registration data aligns well with the business claims, enhancing trustworthiness.

S

Standard

standard.ee

46

Standard is a well-established Estonian company specializing in office and hospitality interior solutions, offering high-quality furniture and comprehensive services including design, manufacturing, and installation. The company targets B2B clients such as businesses, architects, and hotels, with a strong market presence supported by decades of experience and international exports. The website reflects a mature digital infrastructure built on WordPress, leveraging modern technologies and SEO best practices to deliver a professional user experience. Security posture is solid with HTTPS enforcement, cookie consent compliance, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a trustworthy and credible business presence with room for enhanced privacy and security disclosures.

B

BCS Auto - Baltic Car Solutions

bcsauto.ee

48

BCS Auto - Baltic Car Solutions is a well-established Estonian company specializing in long-term car rental, vehicle sales, commission sales, and automotive services since 2007. The company targets both private individuals and businesses seeking flexible and cost-effective vehicle solutions. Their market position is strong within Estonia, supported by recognition from the Transport Authority and positive customer testimonials. The website is built on a modern WordPress platform with WooCommerce and Elementor, integrating SEO and marketing tools such as Yoast SEO, Google Analytics, Microsoft Clarity, and MailerLite. Social media presence on Facebook and Instagram further supports their brand visibility. Security posture is adequate with HTTPS and no exposed sensitive data, though improvements in security headers and explicit security policies are recommended. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is professional, user-friendly, and trustworthy, reflecting a medium-sized transportation business with a solid digital presence.

N

NetGuruIndia

netguruindia.com

52

NetGuruIndia operates the website EntertainmentGuru, positioned as India's leading source for entertainment news and movie reviews. The site offers movie news, reviews, streaming guides, and trailers targeting movie enthusiasts in India. The business model is content publishing monetized primarily through advertising. Technically, the site is built on WordPress with the Astra theme and uses common JavaScript libraries and Google services for analytics and advertising. The site is mobile optimized and uses HTTPS, but lacks explicit privacy and cookie policies, and no contact information is provided. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. WHOIS data is unavailable, raising concerns about domain legitimacy. Overall, the site provides relevant content with good design but has gaps in privacy compliance and domain registration transparency.

T

Tugikeskus JUKS

juks.ee

42

JUKS is a Tallinn-based social and healthcare institution managed by the Tallinn Social and Health Care Department, focusing on supporting working-age individuals with intellectual disabilities. The organization provides a range of specialized care, social and work-related rehabilitation services, and training programs. The website reflects a government-managed entity with a clear mission and consistent branding. Technically, the site is built on WordPress with standard plugins and integrates Google Analytics for visitor tracking. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite analytics usage. Overall, the domain registration data supports the legitimacy and trustworthiness of the site.

P

Progmatic industriële automatisering

progmatic.nl

62

Progmatic industriële automatisering is a well-established Dutch company specializing in industrial automation solutions and services. With over 40 years of expertise, they offer a broad portfolio including software development, artificial intelligence, IPS automation, pre-engineering, energy saving, panel building, and maintenance. Their market reach spans multiple industrial sectors such as food and beverage, mining, recycling, marine, and sustainable energy. The company positions itself as a trusted partner with a strong focus on quality, customer service, and innovation. Technically, the website is built on WordPress with modern JavaScript libraries and tracking tools, hosted by Xynta Hosting B.V. The site is well-optimized for SEO and mobile devices, with comprehensive structured data enhancing search visibility. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and explicit policies could be improved. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a professional, credible business with a strong digital presence.

P

Pelltech

pelltech.eu

47

Pelltech is a specialized company focused on the development, manufacture, and sale of pellet burners and boilers, targeting the renewable energy market primarily in Estonia. The company emphasizes its own design and development capabilities, offering products with online monitoring and software update features. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting their market positioning as a niche energy equipment provider. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the domain registration aligns well with the company’s profile, indicating legitimacy and trustworthiness.

W

WME

wmeentertainment.com

73

WME is a globally recognized talent agency specializing in representing extraordinary artists and creators across multiple entertainment sectors including acting, music, sports, fashion, and more. The website reflects a strong market position with a comprehensive showcase of expertise areas and a clear focus on cultural impact and advocacy. The digital infrastructure is built on WordPress with modern technologies such as lazy loading, CDN delivery via Cloudfront, and advanced SEO optimizations using Yoast. The site is mobile optimized and provides a rich multimedia experience with video content and animations. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response information. The absence of WHOIS registration data is a notable concern for domain legitimacy, but the professional presentation and comprehensive policies support business credibility. Overall, the site is well-constructed, user-friendly, and compliant with privacy regulations, positioning WME as a trusted leader in the talent agency industry.

S

Seto Kongressi Tugiühing MTÜ

seto.ee

40

Seto Kongressi Tugiühing MTÜ operates as the highest representative body for the Seto people, focusing on cultural preservation, language recognition, and community representation. The organization maintains a website that serves as a hub for news, events, and information about the Seto Congress and its elected representatives. The website targets the Seto community and those interested in Seto culture, providing updates and resources primarily in the Seto language. Technically, the site is built on WordPress with modern plugins such as WPBakery and Slider Revolution, hosted likely by Zone Media OÜ, an Estonian registrar and hosting provider. The site demonstrates moderate performance and good mobile optimization, with a clean and consistent design that supports user engagement and navigation. Security-wise, the site uses HTTPS but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages, indicating room for improvement in regulatory adherence. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the organization. Strategic recommendations include implementing comprehensive privacy and security policies, enabling DNSSEC, and adding security headers to strengthen the site's security posture and compliance.

S

Synerall AS

synerall.com

58

Synerall AS is a software company specializing in customer service and invoicing solutions tailored for small and medium-sized energy companies. Established in 2009, the company positions itself as a market leader in its niche, offering automated processes to improve operational efficiency for energy sector clients. The website reflects a professional and modern digital presence built on WordPress with Elementor, integrating various analytics and marketing tools to support business growth. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements in security headers and explicit privacy policies are recommended. Overall, the domain registration data supports the legitimacy and longevity of the business, with consistent WHOIS information and no privacy protection masking ownership.

The website kkfashion.eu is an early-stage or under-construction online presence for a fashion e-commerce business, as indicated by the linked shop subdomain. The site is built on WordPress 6.8.1 and hosted under the registrar Zone Media OÜ in Estonia, consistent with the domain's country. The content is minimal, with no privacy, cookie, or terms of service policies present, and no contact or security information provided. Technically, the site uses standard WordPress assets and scripts but lacks advanced SEO, accessibility, and security headers. No analytics or advertising technologies are detected, indicating a low digital maturity level. Security posture is basic with no visible vulnerabilities but also no advanced protections or policies. Overall, the site is low in trustworthiness and professionalism due to its incomplete state and lack of compliance documentation.

S

SA Kutsekoda

kutsekoda.ee

45

SA Kutsekoda operates as an impartial cooperation platform in Estonia, focusing on identifying current and future skill and occupational needs. It coordinates the development of vocational standards, organizes vocational examinations, and analyzes labor market and skill requirements. The organization serves as a central body in Estonia's vocational education and labor market ecosystem, targeting employers, employees, and educational institutions. The website is professionally designed, multilingual, and integrates modern web technologies including WordPress, Yoast SEO, and Smart Slider 3, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, use of security plugins, and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is good with visible cookie consent and privacy policy in Estonian. Overall, the site demonstrates high trustworthiness and professionalism appropriate for a government-related entity.

E

Eesti Üliõpilaskondade Liit

eyl.ee

39

Eesti Üliõpilaskondade Liit (EÜL) is a well-established Estonian non-profit umbrella organization representing student unions nationally. It advocates for student rights, participates in policy development, and supports student representatives. The website is professionally designed using WordPress with modern plugins and provides clear contact information and social media presence. The organization also serves as the official representative for the ISIC student card in Estonia, indicating a key partnership. Technically, the site uses a modern CMS and includes SEO optimizations, but some performance and security header improvements are possible. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and security policies are absent. Analytics tools like Facebook Pixel and Hotjar are used, with Google Analytics plugin present but not configured. Overall, the site demonstrates a good security posture but could enhance security headers and incident response transparency.

L

Laenud

emara.ee

50

The website emara.ee operates as an online loan comparison and referral platform targeting the Estonian market, primarily offering information and access to various loan products such as quick loans, small loans, mortgage loans, and business loans. The site is built on a modern WordPress CMS with Elementor page builder and uses Cloudflare DNS services. It demonstrates good SEO practices with Rank Math plugin and structured data markup. However, the domain is very recently registered in early 2025 by a registrar company rather than the business itself, which raises questions about the maturity and legitimacy of the operation. No privacy, cookie, or terms of service policies are present, and no direct company contact emails or phone numbers are provided, limiting transparency. Security posture is moderate with HTTPS enabled but lacking important security headers.

P

Progmatic

progmatic.ee

43

Progmatic is an Estonian software development company founded in 2013, specializing in agile pair programming to deliver bespoke software solutions for startups and tech companies. Their market position is strengthened by a versatile approach and a strong client portfolio including major companies like Telia and Kuehne+Nagel. The company focuses on solving unique challenges quickly and efficiently, offering services such as customs integration, digital authentication, and logistics software upgrades. Technically, the website is built on WordPress with modern JavaScript libraries and frameworks, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

O

Opus Online OÜ

opus.ee

43

Opus Online OÜ is an established Estonian software development company specializing in custom IT solutions and e-commerce platforms, primarily serving clients in finance, insurance, and pharmaceutical sectors. With over 14 years of experience and more than 120 successful projects, the company positions itself as a reliable partner for startups and large corporations alike. Their key services include bespoke software development, Magento 2 and BigCommerce e-commerce solutions, UX/UI design, and ongoing maintenance and support. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on WordPress 6.8.1, leveraging modern JavaScript frameworks like React and NodeJS for client projects. The use of Magento 2 and BigCommerce platforms for e-commerce solutions indicates a mature technology stack. The site is mobile-optimized and accessible, with good SEO practices implemented. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and secure form handling, but lacks some advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms, which is a notable compliance gap. Contact information is comprehensive and clearly presented, enhancing business credibility. Overall, the website and business demonstrate a strong market position and technical maturity, but should prioritize privacy compliance and enhance security policies to improve trust and regulatory adherence.

S

Starship Technologies

starship.xyz

73

Starship Technologies is a leading provider of autonomous delivery robots, operating globally with a focus on last-mile delivery solutions for university campuses, grocery retailers, delivery apps, industrial sites, and advertising. The company leverages advanced robotics and AI to deliver groceries, hot food, and industrial supplies efficiently and sustainably. Their market position is strong, supported by partnerships with major brands and a large operational footprint across 150 cities and campuses. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and Leaflet.js, and integrates Google Analytics and Usercentrics for consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs security headers, and uses reCAPTCHA to protect forms. However, it lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a credible and reliable digital presence for Starship Technologies.

L

Le Mark Group

lemark.co.uk

64

Le Mark Group is a UK-based manufacturer and distributor specializing in professional tapes, custom printed labels, dance and stage floors, and crew wear. The company positions itself as a master distributor for Pro Tapes™ in the UK and Europe, targeting professional users in entertainment, stage production, electrical, and packaging sectors. The website reflects a medium-sized business with a consistent brand presence and a focus on quality products and family-run customer service. Technically, the website is built on WordPress 6.8.1 using the Enfold theme and incorporates modern technologies such as Google Tag Manager, Facebook Pixel, and image optimization via Optimole. The site is mobile-optimized with good SEO practices and structured data implementation, indicating a mature digital presence. Performance is moderate, with room for improvement in accessibility. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism with multiple categories, aligning with GDPR requirements. However, no explicit privacy policy or terms of service pages were found, and security headers are not evident in the HTML content. The WHOIS lookup for the domain 'www.lemark.co.uk' failed due to domain registration rules, suggesting the domain is not registered or the site uses a different domain, which raises some legitimacy concerns. Overall, the website is professional and trustworthy in appearance but would benefit from publishing clear privacy and security policies, improving security headers, and resolving domain registration inconsistencies to enhance trust and compliance.

G

GiftTime Rugby

gifttimerugby.com

42

GiftTime Rugby is a niche media website dedicated to rugby-related content including news, podcasts, interviews, and movie reviews. Founded in 2013, it serves rugby enthusiasts with a variety of multimedia content and advertising opportunities. The website is built on WordPress with Elementor, leveraging modern web technologies and Google services for analytics and monetization. The site demonstrates good content quality and user experience with consistent branding and clear navigation. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

R

Riigimetsa Majandamise Keskus

rmk.ee

51

Riigimetsa Majandamise Keskus (RMK) is a government agency responsible for managing Estonia's state-owned forests and natural ecosystems. The organization focuses on sustainable forest growth, conservation of natural values, generating revenue through forest management, facilitating outdoor activities, and providing nature education. RMK holds a strong market position as the largest forest management entity in Estonia, serving a broad audience including general public, specialists, and governmental stakeholders. The website reflects this with comprehensive content, clear navigation, and consistent branding. Technically, the site is built on WordPress with modern technologies such as Google Tag Manager and CookieYes for cookie consent management. It is hosted by Zone Media OÜ, with a domain registered since 2010, indicating a mature and stable online presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with detailed cookie categories and a comprehensive privacy policy. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

E

Europanel

europanel.com

61

Europanel is a collaborative international consumer panel business that integrates multiple leading household purchase panels worldwide to provide deep shopper insights and support brand growth strategies. The website reflects a mature, well-established business with a strong partner ecosystem including Kantar, YouGov, Ipsos, and others. Technically, the site is built on WordPress with modern web technologies and is hosted on Azure DNS infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and reCaptcha protections, but lacks advanced security headers and explicit privacy and cookie policies. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

W

wissensstadt heilbronn

wissensstadt.hn

49

wissensstadt heilbronn is a German educational and community platform focused on fostering lifelong learning, research, and innovation in the Heilbronn region. The website serves as a hub for projects, events, and community engagement, targeting students, researchers, and local institutions. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data presents inconsistencies, showing a prohibited registration status despite the active website, which warrants caution. Overall, the site is professional and content-rich but lacks explicit privacy and terms of service pages, impacting privacy compliance scores.

E

Ebísum

ebisum.com

58

Ebísum is a Spanish-based company founded in 2021 specializing in comprehensive compliance solutions for businesses across various sectors. Their offerings include a document management system, whistleblowing channel, and eLearning platform, all designed to help companies meet regulatory requirements efficiently. The company positions itself as a trusted partner fostering ethical culture and regulatory adherence. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager and reCAPTCHA for security and analytics. The security posture is strong with HTTPS enforced and clientTransferProhibited domain status, although some security headers could be added for enhanced protection. Privacy compliance is robust, featuring clear privacy and cookie policies with user consent mechanisms. Overall, Ebísum presents a professional, trustworthy online presence with good technical and security maturity.

S

Svoboda zvířat

svobodazvirat.cz

46

Svoboda zvířat is a well-established Czech non-profit organization focused on animal rights and welfare advocacy. Founded in 2000, it operates primarily through public awareness campaigns, legislative advocacy, and volunteer engagement. The website reflects a mature digital presence with clear branding, good content quality, and active social media integration. Technically, the site is built on WordPress with modern plugins and libraries, delivering moderate performance and good mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the organization presents a trustworthy and professional image with no critical security or compliance issues detected.

T

Tripan

tripan.be

51

Tripan is a Belgian prefab concrete manufacturer specializing in custom solutions primarily for industrial and utility construction sectors. With over 30 years of market presence and a reputation for quality and flexibility, Tripan serves construction companies and architects, leveraging its own production and transport capabilities. The company is part of the Willy Naessens Group, enhancing its market credibility. The website is professionally designed, mobile-optimized, and provides clear contact information and certifications, supporting its business legitimacy. Technically, the site runs on WordPress with modern plugins and uses HTTPS with Google Analytics configured for IP anonymization. Security posture is solid but could be improved with additional headers and explicit security policies. WHOIS data is restricted, limiting transparency but not detracting significantly from trust due to other positive indicators. Overall, Tripan presents a credible and professional digital presence aligned with its business operations.

T

The Reader

thereader.com

46

The Reader is a well-established local media outlet serving Omaha, Nebraska, and Council Bluffs, Iowa, providing comprehensive coverage of news, arts, entertainment, dining, and local politics. It operates under the parent organization Nebraska Public Media, reflecting a credible and stable market position within the regional media landscape. The website leverages a modern WordPress CMS infrastructure with SEO and social sharing plugins, ensuring good content delivery and user engagement. Technical infrastructure is solid with HTTPS and reputable hosting, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms and terms of service. Overall, the site demonstrates a good security posture with room for improvement in privacy and security best practices.

W

WDET 101.9

wdet.org

55

WDET 101.9 FM is a well-established public radio station serving the Detroit area, affiliated with NPR and focused on music and current affairs programming. The website reflects a professional media entity with a clear target audience of local listeners and NPR supporters. The business model relies on public radio broadcasting supported by listener donations and sponsorships. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and domain protections in place, though there is room for improvement in DNS security and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, and no visible contact information reduces transparency. Overall, the site is credible and trustworthy but would benefit from enhanced privacy and security disclosures.

P

Planet Detroit

planetdetroit.org

58

Planet Detroit is an independent nonprofit newsroom dedicated to producing news about local climate, environment, and public health issues in Detroit and Michigan. The organization targets residents and stakeholders interested in environmental accountability and community empowerment. Their business model focuses on nonprofit journalism with a strong emphasis on community engagement and transparency. The website demonstrates a solid market position as a regional media outlet specializing in environmental reporting. Technically, the website is built on WordPress using the Newspack theme and plugins, integrating modern technologies such as Google Analytics, Google AdSense, OneSignal push notifications, and Broadstreet Ads. The site is hosted by Bluehost and uses AWS DNS services. The technical infrastructure is modern and well-optimized for SEO, mobile responsiveness, and accessibility, though performance is moderate. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, it lacks DNSSEC, security headers, and published security or incident response policies. Privacy compliance is partial, with no explicit privacy or cookie policies found, though consent mode scripts are implemented to restrict tracking in EU regions. No vulnerability disclosure or security.txt files are present. Overall, Planet Detroit presents a trustworthy and professional online presence with excellent content quality and business credibility. Security and privacy practices can be improved by adding explicit policies, security headers, and incident response information to enhance user trust and compliance.

S

Shoptet Pay

shoptetpay.com

54

Shoptet Pay is a payment gateway service tailored for e-commerce shops using the Shoptet platform, primarily targeting the Czech market. The website presents a professional and consistent brand image, with clear messaging about enabling payment acceptance within 24 hours. The technical infrastructure is based on WordPress CMS, enhanced with modern SEO plugins, analytics tools like Google Analytics and Hotjar, and a comprehensive cookie consent mechanism powered by Cookiebot. Security measures include HTTPS enforcement and reCAPTCHA integration, although explicit security headers and policies are not evident. The absence of WHOIS domain registration data raises concerns about domain legitimacy, but the website's operational maturity and integration with trusted third-party services suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in transparency and security documentation.

K

KB SmartPay

payphone.cz

55

KB SmartPay operates the PayPhone service, a mobile payment terminal application that transforms smartphones into card payment terminals, targeting merchants and businesses primarily in the Czech Republic. The website presents a professional and consistent brand image, emphasizing ease of use and a free one-year offer to attract users. The business model centers on providing mobile payment solutions leveraging smartphone technology, positioning itself in the finance sector with a focus on digital payment innovation. Technically, the website is built on WordPress 6.8.1 and integrates multiple modern technologies including Google Analytics, Google Tag Manager, Cookiebot for cookie consent management, and advertising/tracking services such as Adform and Facebook Pixel. The site is mobile-optimized and uses structured data (JSON-LD) to enhance SEO and provide clear business information. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, demonstrating awareness of privacy regulations. However, the absence of visible security headers and lack of explicit privacy policy or incident response information are notable gaps. The WHOIS data is unavailable, which reduces domain trustworthiness and raises questions about domain registration transparency. Overall, the website is functional, professional, and compliant with basic privacy requirements but would benefit from enhanced transparency in privacy policies, improved security headers, and clearer contact information to strengthen trust and compliance posture.

R

Recreatieschap Drenthe

recreatieschapdrenthe.nl

43

Recreatieschap Drenthe is a governmental organization focused on supporting municipalities in the Drenthe region of the Netherlands with the development and growth of the leisure and tourism sector. The organization provides project support, knowledge sharing, and infrastructure development to enhance recreational opportunities. The website is professionally designed using WordPress and Elementor, with good SEO and accessibility features. It serves a regional audience including local governments and tourism stakeholders. Technically, the site is well-optimized with modern technologies and performance enhancements, including caching and lazy loading. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and explicit policies are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and credible, reflecting a legitimate public sector entity.

S

Stichting Weet Waar Je Koopt

weetwaarjekoopt.nl

54

Stichting Weet Waar Je Koopt operates a Dutch non-profit platform dedicated to educating consumers on safe and official ticket purchasing for various events including concerts, festivals, and sports. The website serves as an authoritative source listing official ticket sellers and providing guidance to avoid fraudulent secondary ticket markets. Supported by major event organizations and ticketing companies, it holds a trusted position in the Dutch event industry. Technically, the website is built on WordPress with common plugins and libraries, hosted by Greenhost, and employs HTTPS with DNSSEC for domain security. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. The site uses multiple third-party analytics and tracking pixels without an explicit consent mechanism, indicating privacy compliance gaps. Overall, the site is professionally designed, content-rich, and trustworthy but would benefit from enhanced privacy and security practices.

Vytauto Brigada operates as a Lithuanian transportation and vehicle rental service provider, focusing on cargo delivery and car rentals. The website positions the company as a reliable and affordable service in Lithuania, targeting local customers needing transport and moving solutions. The business appears to be small and newly founded, with a clear service offering but limited publicly available corporate information. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Cloudflare for DNS and CDN services, indicating a moderate level of digital maturity. SEO is enhanced via the Yoast plugin, and the site is mobile responsive with good user experience. Security posture is adequate with HTTPS enabled and Cloudflare usage, but lacks important security headers and visible security policies. No privacy or cookie policies are present, and no contact information is provided, which impacts trust and compliance. The WHOIS data shows an anomalous future domain creation date, which raises questions about domain legitimacy. Overall, the site is functional and professional but requires improvements in compliance, security transparency, and business credibility to enhance trust and reduce risk.

P

Picture Ideas

pictureideas.lt

51

Picture Ideas is a Lithuanian digital services company specializing in creating internet websites, e-commerce solutions, and web-based systems. Established in 2013, the company targets businesses seeking effective digital solutions to enhance their market presence and operational efficiency. Their portfolio includes collaborations with strong industrial and governmental clients, indicating a solid market position in the technology sector. Technically, the website is built on WordPress with modern plugins and analytics tools, hosted behind Cloudflare, ensuring good performance and security. However, the absence of explicit privacy and cookie policies, as well as contact details, indicates gaps in privacy compliance and user trust facilitation. Security posture is generally good with HTTPS and Cloudflare protection, but could be improved with additional security headers and published policies. Overall, the website is professional and functional but should address compliance and transparency to enhance trust and legal adherence.

I

Inter Tech

intertech-agro.pl

60

INTERTECH Sp. z o.o. is a Polish manufacturer specializing in agricultural and municipal machinery, including front loaders, tillage machines, forage equipment, and municipal machines. Established in 2012, the company has developed a strong market presence with an international dealer network, targeting farmers and municipal service providers. The website reflects a professional and comprehensive digital presence, featuring detailed product lines, news updates, and dealer locator services. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a mature digital infrastructure and marketing strategy, with room for enhanced security transparency and incident response readiness.

B

BABEL

babel-tya.com

47

BABEL is a European large-scale cultural cooperation project focused on Theatre for Young Audiences, promoting cultural citizenship, intercultural dialogue, and mutual understanding. It involves 14 partners across 11 European countries and is coordinated by Teatercentrum in Denmark. The project organizes festivals, residencies, workshops, and research activities to engage young audiences and artists. The website serves as an information hub for the project activities, partners, and resources, with a clear focus on cultural and educational content. Technically, the website is built on WordPress using the Salient theme and WPBakery Page Builder, hosted with Amazon Registrar and AWS DNS services. It uses modern web technologies and is optimized for mobile devices, though performance is moderate. The site lacks advanced SEO and accessibility features but maintains a professional design and clear navigation. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which is a compliance risk. Overall, the website is a credible and professional platform for a non-profit cultural project but should improve privacy compliance and security practices to enhance trust and regulatory adherence.

D

Darstellende Künste & Junges Publikum

jungespublikum.de

68

The website jungespublikum.de serves as a professional and comprehensive platform for the cultural sector focused on performing arts for young audiences in Germany. It represents organizations such as ASSITEJ and KJTZ, providing event information, funding opportunities, publications, and advocacy resources. The site targets theater professionals, cultural institutions, and young audiences, positioning itself as a key network and information hub in this niche cultural domain. The business model is non-profit, emphasizing cultural participation and support rather than commercial activities. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Borlabs Cookie for privacy compliance. It uses Matomo for privacy-conscious analytics and Cloudflare for DNS and likely CDN services, ensuring good performance and security. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were found. However, security headers could be improved, and the site lacks a published security policy or incident response information. Privacy compliance is strong, with clear privacy and cookie policies. Overall, the website demonstrates a mature digital presence with strong content quality, technical implementation, and privacy compliance. The risk profile is low, with no signs of malicious activity or blocking. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

S

Suknelių nuoma Kaune

ingridossalonas.lt

52

Suknelių nuoma Kaune is a small retail business specializing in wedding dress rentals located in Kaunas, Lithuania. The website serves as a digital storefront showcasing their offerings and providing contact channels for potential customers. The business targets individuals seeking wedding dress rental services locally. The website is built on WordPress using Elementor and Slider Revolution plugins, hosted by HOSTINGER operations, UAB. The technical infrastructure is modern and supports good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy and cookie banner present. Overall, the website presents a professional and trustworthy image suitable for a small local business.

F

Flexspace

flexspace.ai

61

Flexspace is a technology company specializing in providing ecommerce revenue platforms and AI-driven dynamic pricing solutions for coworking spaces. Their platform enables coworking operators to optimize workspace and meeting room bookings, leveraging AI marketing agents and personalized service. The company positions itself as a thought leader in the future of work, targeting coworking operators and companies seeking flexible workspace solutions. Technically, the website is built on WordPress with modern SEO and analytics integrations, including Google Analytics, HubSpot, Hotjar, and Crazy Egg, indicating a mature digital marketing approach. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced DNSSEC and security headers. Privacy compliance is minimal with no visible privacy or cookie policies, which is a gap for GDPR compliance. Overall, the site is professional and trustworthy but could improve transparency and security practices.