Security Directory

I

International Labour Organisation and International Federation of Journalists

migrantnarratives.org

48

Migrant Narratives is a collaborative project by the International Labour Organisation (ILO) and the International Federation of Journalists (IFJ) aimed at promoting ethical journalism on labour migration. The website serves as a resource hub offering tools, best practices, forums, and showcases of exemplary media coverage to support journalists worldwide. It targets media professionals, labor representatives, and policymakers interested in fair and balanced reporting on migrant workers. The platform operates as a non-profit initiative with a clear focus on education and advocacy within the media sector. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Slick Carousel, and Google Analytics for tracking. The site is hosted under a GoDaddy registrar with privacy-protected WHOIS data, reflecting a standard setup for non-profit international projects. The website demonstrates good mobile optimization, clear navigation, and a professional design consistent with its mission. From a security perspective, the site employs HTTPS with a strong SSL configuration but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with accessible privacy and cookie policies and a consent mechanism, though GDPR compliance is not explicitly stated. Contact information is limited to email addresses affiliated with IFJ, with no phone numbers or physical addresses provided. Overall, Migrant Narratives presents a trustworthy, well-maintained platform with a clear business purpose and solid technical foundation. Strategic improvements in security headers, explicit security policies, and enhanced privacy compliance could further strengthen its posture and user trust.

F

FICSA

ficsa.org

49

FICSA is a well-established federation representing international civil servants, advocating for their rights and working conditions within interagency bodies and legislative organs of the common system. The organization operates primarily as a non-profit entity based in Switzerland, with a global membership and over 70 years of history. Their key services include advocacy, training, webinars, publications, and organizing meetings and councils. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at international civil servants and related stakeholders. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery, Slick Carousel, and Select2. It uses Google Fonts and integrates social media SDKs for Facebook and Twitter, alongside AddThis for sharing. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility compliance. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and there is no visible security policy or incident response information. The site includes a cookie consent mechanism and privacy policy, indicating basic GDPR compliance. No critical vulnerabilities or suspicious domains were found. WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the organization's profile. Overall, the website presents a trustworthy and credible digital presence with good content quality and technical implementation. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and enhancing accessibility features to improve compliance and user experience.

I

International Federation of Journalists

ifj.org

63

The International Federation of Journalists (IFJ) is a well-established global non-profit organization founded in 1926, representing over 600,000 media professionals worldwide. It serves as the global voice for journalists, advocating for press freedom, journalists' rights, and safety. The organization operates through various regional offices and campaigns, providing insurance schemes, safety funds, and resources to journalists, especially in conflict zones and challenging environments. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting journalists, media unions, and advocacy groups globally. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries and analytics tools such as Google Analytics and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. Security posture is strong with HTTPS enforced and secure form validation, though some security headers are not explicitly detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is not publicly available due to privacy protection, which is common and justified for non-profit international organizations. No suspicious or malicious indicators were found. The website maintains a high level of trustworthiness and professionalism, supported by extensive social media presence and transparent contact information. Overall, IFJ's website demonstrates a robust digital infrastructure supporting its mission, with good security and privacy practices. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and compliance.

T

Ziemas riepas, vasaras riepas, TavasRiepas.lv

tavasriepas.lv

42

TavasRiepas.lv is an e-commerce and service platform specializing in the sale and servicing of tires and wheels, primarily targeting vehicle owners in the Baltic region. The website offers a comprehensive catalog of tires and wheels, including detailed search and filtering options, and promotes services such as tire replacement and delivery across the Baltics. The business positions itself as a trusted partner with guarantees and customer-friendly policies like a 14-day return period. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and various UI enhancement libraries. The site is well-structured with good SEO metadata and mobile optimization, providing a positive user experience. However, there is no detected CMS or hosting provider information, and performance is moderate. From a security perspective, the site uses HTTPS and includes Google-managed analytics with consent set to denied by default, indicating some privacy awareness. However, it lacks visible security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of WHOIS data due to query limits restricts the ability to fully assess domain legitimacy and registration consistency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparent contact and incident response information to improve trust and regulatory adherence.

A

Affordable Housing Initiative European Partnership

shape-affordablehousing.eu

47

The Affordable Housing Initiative European Partnership is a medium-sized, EU co-funded accelerator program focused on social and affordable housing renovation and energy transition across Europe. Led by Housing Europe and partnered with key organizations, it provides tailored guidance, financial advice, mentorship, and capacity-building to local authorities and housing actors. The website is professionally designed, content-rich, and well-structured, targeting stakeholders involved in housing and energy efficiency. Technically, the site runs on WordPress with modern plugins and integrates Google services for analytics and maps. Security posture is strong with HTTPS and reCAPTCHA, though cookie consent and explicit security policies are missing. WHOIS data confirms domain legitimacy and consistency with the project's timeline and location. Overall, the site demonstrates a high level of business credibility and technical maturity with minor areas for privacy and security policy improvement.

W

Web Bay

webbaysolutions.com

48

Web Bay is a specialized digital agency founded in 2012, focusing on providing web design, branding, digital transformation, and communication support services primarily to associations, non-profit organizations, and EU-funded projects. The company positions itself as a niche expert with a strong portfolio and client testimonials that emphasize reliability, remote collaboration, and continuous support. Their market presence is centered in Brussels and Belgrade, serving international clients with a tailored approach to digital challenges in the EU projects and NGO sectors. Technically, the website is built on TYPO3 CMS with a modern tech stack including jQuery and various UI libraries, delivering a professional and responsive user experience. Security posture is solid with HTTPS and domain protection statuses, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a cookie consent mechanism present but lacking a formal privacy policy or terms of service. Overall, the website reflects a credible and professional digital agency with room for enhanced security and compliance documentation.

T

Thomson Furniture

thomsonfurniture.lv

55

Thomson Furniture is a leading Latvian office furniture provider offering a comprehensive range of high-quality office furniture products and services, including design, project implementation, and long-term furniture rental. The company targets business clients, public institutions, and private customers, positioning itself as a trusted partner with a strong market presence. Technically, the website is built on WordPress with WooCommerce, integrating modern libraries and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and could improve in this area. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional and trustworthy, but the absence of WHOIS data limits full domain legitimacy verification.

Gen Re operates as a global reinsurer specializing in Life & Health and Property & Casualty insurance sectors. The website presents a professional and comprehensive overview of their services, including risk transfer solutions, consulting, underwriting, claims management, and educational resources. The company targets insurance professionals and companies seeking reinsurance expertise. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries and includes cookie consent mechanisms compliant with GDPR. Security posture is generally good with HTTPS and consented third-party scripts, though explicit security headers and incident response contacts are absent. The lack of WHOIS registration data for the domain is a notable concern, suggesting a need for further verification of domain legitimacy. Overall, the website is well-structured, content-rich, and trustworthy from a user perspective but requires improvements in transparency and security disclosures.

B

Biznesa parks "Forums"

forum.lv

44

Biznesa parks “Forums” operates as a commercial real estate provider based in Riga, Latvia, offering a variety of rental spaces including offices, warehouses, production areas, and virtual offices. The website is professionally designed, targeting businesses and entrepreneurs seeking commercial spaces in the Riga area. The business model centers on leasing and related services such as legal address rental and co-working spaces, positioning itself as a local player in the real estate sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap 4, Google Analytics, and various UI libraries to provide a responsive and user-friendly experience. The site is mobile optimized and includes standard SEO and accessibility features, though some improvements could be made in accessibility and security headers. Performance is moderate, with a good balance of content and interactive elements. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is well addressed with clear cookie and privacy policies, including GDPR consent mechanisms. Contact information is transparent and consistent, enhancing business credibility. Overall, the website presents a moderate risk profile with no critical security issues detected. The absence of WHOIS data limits full domain legitimacy assessment, but the professional presentation and clear contact details support trustworthiness. Strategic recommendations include enhancing security headers, formalizing security policies, and improving accessibility compliance to strengthen the security posture and user trust.

G

GRENARDI LATVIA, SIA

grenardi.lv

57

Grenardi.lv is a well-established premium jewelry retailer operating primarily in the Baltic region with a strong online presence and physical stores. The company emphasizes trust and quality with over 20 years in business, offering a wide range of exclusive jewelry brands and collections. Their website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and multiple language options. The business model focuses on retail e-commerce complemented by customer support and European-wide delivery services. Technically, the site employs modern JavaScript libraries and analytics tools, including Cloudflare Turnstile for bot protection, Hotjar, Microsoft Clarity, and Piwik PRO for user behavior tracking, and integrates marketing automation via Klaviyo and Brevo.

B

Baltijas Biroju Tehnoloģijas

bbt.lv

59

Baltijas Biroju Tehnoloģijas (BBT) is a Latvian company specializing in audiovisual, interactive, and videoconferencing solutions primarily targeting schools, offices, and educational institutions. With over 25 years of industry experience, BBT offers a comprehensive range of services including equipment sales, rentals, installation, maintenance, and training. Their product portfolio includes professional displays, projectors, 3D printers, LEGO educational kits, and related accessories. The company maintains a professional online presence with a well-structured WordPress-based website featuring e-commerce capabilities via WooCommerce. Technically, the website leverages modern web technologies such as WP Rocket for performance optimization, Yoast SEO for search engine optimization, and CookieYes for cookie consent management. The site is mobile-optimized and includes accessibility features, although some improvements could be made. Security posture is solid with HTTPS enforced, use of security headers, and no visible vulnerabilities. However, explicit privacy policy and terms of service pages were not detected in the provided content, which is a compliance gap. The absence of WHOIS data due to query limits limits domain trust verification, but the website's consistent branding, social media presence, and professional content support legitimacy. Tracking technologies include Google Analytics and Facebook Pixel, with a moderate level of user tracking balanced by a detailed cookie consent mechanism. Overall, BBT demonstrates a mature digital infrastructure and a strong market position in Latvia's technology and education sectors. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility, and establishing formal vulnerability disclosure channels to further strengthen trust and compliance.

A

AttēlsR

attelsr.lv

56

AttēlsR is a Latvian-based company specializing in the retail and supply of furniture boards, fittings, woodworking tools, and related materials for interior design and furniture production. The company targets furniture manufacturers, interior designers, and woodworking professionals primarily within Latvia, offering both online ordering and production services. Their market position is that of a medium-sized regional player with a focus on quality and comprehensive product offerings. Technically, the website is built on a Ruby on Rails framework with integrations including Google Analytics, Google Tag Manager, Cookiebot for cookie consent, and Zopim for live chat support. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses CSRF tokens in forms, but lacks explicit advanced security headers, which could be improved. Privacy compliance is well addressed with a detailed cookie consent mechanism and a privacy policy accessible via the company information page. However, WHOIS data was unavailable due to query limits, limiting domain trust verification. Overall, the website demonstrates a solid digital presence with room for security enhancements and more explicit business contact details.

M

Man Group

man.com

77

Man Group is a well-established, enterprise-level investment management firm with a heritage dating back to 1783. The company specializes in technology-empowered active investment management, offering diversified strategies including quantitative and discretionary approaches, as well as private market investments. Their target audience primarily consists of institutional investors seeking tailored portfolio solutions. The website reflects a strong market position with consistent branding and comprehensive content focused on their investment capabilities and corporate responsibility. Technically, the website is built on Drupal CMS and employs modern web technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. However, some security headers are missing, and no explicit incident response or vulnerability disclosure information is provided, indicating areas for security posture improvement. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, reflecting good privacy compliance aligned with GDPR. The absence of WHOIS data limits domain registration trust analysis, but the website content and external references strongly support legitimacy. Overall, the site demonstrates a mature digital presence with room for enhanced security transparency. Strategically, Man Group should focus on publishing vulnerability disclosure policies, enhancing security headers, and providing clear incident response contacts to strengthen trust and compliance. These steps will improve their security posture and align with best practices for enterprise financial services websites.

Fundación SAFA operates as a non-profit educational foundation in Spain, providing a centralized login portal named Brocal for its community of professors, families, and students. The website serves as a gateway to multiple educational applications and resources, reinforcing its role as a digital facilitator for the foundation's educational services. The foundation maintains an established regional presence with multiple campuses, targeting the Spanish educational sector. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and visually consistent user experience. While the site demonstrates good mobile optimization and a professional design, some accessibility and SEO optimizations are basic and could be improved. The hosting and CMS details are not explicitly disclosed. From a security perspective, the site uses HTTPS and secure form submission but lacks critical HTTP security headers such as Content Security Policy and HSTS. There is no visible cookie consent mechanism, which is a compliance gap under GDPR. No contact information or security policies are published on the login page, limiting transparency. No critical vulnerabilities were detected in the visible content, but improvements in security headers and privacy compliance are recommended. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance measures to strengthen trust and regulatory adherence. Strategic improvements in these areas will support Fundación SAFA's digital maturity and protect its user community effectively.

E

Elva DMS SIA

elvadms.com

66

Elva DMS SIA operates a professional website offering an automotive ERP solution integrated with Microsoft Dynamics 365, targeting automotive dealerships and related businesses. The company provides comprehensive dealer management software covering vehicle sales, used car sales, vehicle services, fleet maintenance, and spare part sales management. The website is well-structured, with good content quality and branding consistency, reflecting a niche market position in the transportation sector primarily in Latvia. Technically, the site is built on WordPress and leverages modern libraries and plugins such as jQuery, Bootstrap, and Cookiebot for cookie consent management. Google Analytics is used for visitor tracking, indicating moderate user tracking levels. Security posture is good with HTTPS enforced and several security headers present, although there is room for improvement in CSP implementation and incident response transparency. The absence of WHOIS registration data is a notable concern, suggesting either privacy protection or a domain registration issue, which impacts the trustworthiness score. Overall, the site demonstrates a solid digital presence but should address privacy policy publication and domain registration transparency to enhance credibility and compliance.

B

BlueBridge Technologies

bluebridgetechnologies.com

64

BlueBridge Technologies is a well-established digital health technology company specializing in medical device software development and regulatory compliance services. Founded in 2006 and operating primarily in the healthcare technology sector, the company serves major global med-tech and pharmaceutical clients, offering services that include software development, validation, cybersecurity, and regulatory consulting. Their market position is strengthened by recognized certifications such as ISO 14971, ISO 13485, and ISO 62304, and partnerships with leading industry players like Novartis and Medtronic. Technically, the website is built on a modern WordPress CMS platform with a professional design, good mobile optimization, and SEO best practices. The infrastructure is hosted by Blacknight Internet Solutions Ltd., an Irish registrar consistent with the company's geographic presence. The site uses common analytics and marketing tools with a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS, employs security headers, and demonstrates compliance with medical device industry standards. No critical vulnerabilities or exposed sensitive data were detected. However, improvements such as enabling DNSSEC and publishing a security.txt file could enhance security posture further. Overall, BlueBridge Technologies presents a credible, professional, and secure online presence aligned with its business focus. Strategic recommendations include enhancing incident response transparency, improving accessibility, and formalizing vulnerability disclosure processes to maintain trust and compliance in a regulated industry.

T

Tribus

tribus.lv

60

Tribus is a Latvian real estate company specializing in property listings and related services such as valuation, sales, and purchase facilitation. The company targets property buyers, sellers, developers, and non-residents interested in Latvian real estate. Their website is multilingual, supporting Latvian, Russian, and English, indicating a broad target audience. The business appears established since 2018 with a medium-sized market presence in Latvia's real estate sector. Technically, the website is built on WordPress using Bootstrap and jQuery, with integrations for Google Analytics, Google Tag Manager, and reCAPTCHA for form security. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate, with modern but common web technologies. Security posture is generally good with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and formal privacy or cookie policies. No WHOIS data was available due to query limits, limiting full domain trust assessment. No visible incident response or vulnerability disclosure policies were found. Overall, the website is professional and functional for its business purpose but would benefit from enhanced privacy compliance, security headers, and transparency regarding data protection and incident response.

A

Axxonsoft LLC

axxonsoft.com

67

AxxonSoft is a global leader specializing in intelligent video management systems (VMS), physical security information management (PSIM), and cloud-based video surveillance solutions. The company offers advanced AI-powered analytics, seamless IP camera integration, and comprehensive security management platforms targeting enterprises, security professionals, and integrators worldwide. Their business model centers on software development, licensing, and partner ecosystem expansion, positioning them strongly in the physical security technology market. Technically, the website demonstrates a mature digital infrastructure utilizing modern JavaScript frameworks (Vue.js), advanced analytics tools (Google Analytics, Microsoft Clarity, PostHog), and robust consent management (Cookiebot). The site is mobile-optimized, SEO-friendly, and employs security best practices such as HTTPS and reCAPTCHA for form protection. From a security perspective, the site maintains a solid posture with published vulnerability disclosure policies, GDPR compliance, and secure data collection mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers and a security.txt file could enhance transparency and incident response readiness. Overall, the website reflects a professional, trustworthy, and technically sound digital presence aligned with the company's market leadership. The absence of WHOIS data slightly reduces domain trust but is mitigated by strong business and security indicators. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing clearer data protection officer contact details to further strengthen compliance and trust.

AS Ķekava Foods is a Latvian poultry and meat product manufacturer formed in 2024 by merging several local poultry companies. It operates as part of the AB Akola group, the largest agricultural and food production conglomerate in the Baltics. The company targets both B2B clients and consumers with a focus on high-quality poultry products. The website is built on WordPress, leveraging modern JavaScript libraries and SEO plugins, indicating a moderate level of digital maturity. Privacy and cookie policies are present, reflecting compliance with GDPR requirements. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit incident response information. Overall, the website presents a professional and trustworthy image consistent with a large manufacturing business in Latvia.

V

Voka SIA

voka.lv

60

Voka SIA is a Latvian manufacturing company specializing in grain pre-processing complexes, metal constructions, and agricultural machinery sales. The company positions itself as a leader in its sector, targeting agricultural and industrial clients primarily within Latvia. Their website reflects a professional business with a clear portfolio of projects and services, supported by active social media channels and transparent contact information. Technically, the website is built on WordPress with WooCommerce, integrating modern tracking and marketing tools such as Google Analytics and Facebook Pixel, while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, though some security headers and policies are missing. Overall, the site is well-structured, user-friendly, and trustworthy, though WHOIS data was unavailable due to query limits, limiting domain registration verification.

V

VOLBURG Ltd.

volburg.lv

58

VOLBURG Ltd. is a well-established Electronics Manufacturing Services (EMS) provider based in Latvia, specializing in PCB assembly and modules since 1996. The company targets industrial, automotive, and energy-saving sectors, exporting primarily to demanding European markets such as Germany, UK, and Scandinavia. Their service portfolio includes prototyping, development, production, supply chain management, and advanced traceability solutions. The website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Google Maps API, and various analytics and marketing tools such as Google Analytics, Hotjar, and Google Tag Manager. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security measures include HTTPS, reCAPTCHA on forms, and a cookie consent banner, but lack explicit security headers and published security policies. The security posture is moderate with no critical vulnerabilities detected in the visible content. However, the absence of a privacy policy, terms of service, and incident response information represents compliance and transparency gaps. WHOIS data could not be retrieved due to query limits, limiting domain registration trust verification. Overall, the website and business appear credible and professional, but improvements in privacy and security transparency are recommended.

Grigeo is a Lithuanian manufacturing group specializing in paper and wood industry products, including hygienic paper, packaging materials, corrugated cardboard, and wood fiberboards. The company holds a Nasdaq Baltic listing, indicating a significant market presence and investor interest. Their website reflects a professional corporate identity with consistent branding and a focus on sustainability, evidenced by international certifications such as 'Preferred by Nature'. The target audience includes investors, business partners, and customers within the manufacturing sector. Technically, the website employs modern JavaScript libraries and tracking tools, ensuring a functional and moderately performant user experience with good mobile optimization. Security posture is strong with HTTPS enforcement and use of Google reCAPTCHA Enterprise, though the absence of explicit security headers suggests room for improvement. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR requirements. However, the lack of publicly available WHOIS data reduces transparency, though the website content and Nasdaq listing support its legitimacy. Overall, the site scores well in content quality, technical implementation, security, and privacy compliance, with minor penalties for missing WHOIS data and security headers.

O

Ober Haus

ober-haus.lv

42

Ober Haus is a Latvian real estate agency specializing in residential and commercial property sales, rentals, market analysis, and property valuation. The company targets individuals and businesses seeking real estate services within Latvia, maintaining a strong market presence with multiple offices and a comprehensive service portfolio. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital infrastructure. Technically, the site is built on WordPress with modern libraries such as jQuery, Select2, and Slick Carousel. It integrates Google Tag Manager and Google reCAPTCHA for analytics and security. The website employs HTTPS with good SSL configuration and security headers, although some advanced security policies like a published security.txt or incident response contacts are absent. Security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Contact information is comprehensive and consistent with WHOIS data, enhancing business credibility. Overall, the site presents a trustworthy and professional image with minor areas for improvement in security policy transparency and accessibility enhancements.

R

Rent In Riga

rentinriga.com

54

RentInRiga.lv is an established Latvian real estate platform founded in 2005, specializing in property rentals, sales, and investment opportunities primarily in Riga and surrounding regions. The website offers a comprehensive database of over 1250 active property listings including apartments, houses, offices, warehouses, and commercial spaces. The platform targets individuals and businesses seeking real estate solutions in Latvia, positioning itself as a key local player with a medium-sized market presence. Technically, the website employs a modern tech stack including jQuery, Select2, Flickity, and integrates multiple third-party services such as Google Analytics, Facebook Pixel, Hotjar, and mapping APIs from Google and Bing. Hosting and DNS services are managed via Cloudflare, enhancing performance and security. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks explicit security headers and published security policies. There are no visible privacy or cookie policies, which presents compliance risks under GDPR. Contact information is clearly provided, but incident response and vulnerability disclosure mechanisms are absent. The domain WHOIS data is consistent and trustworthy, reflecting a legitimate and stable business. Overall, RentInRiga.lv is a professionally presented real estate platform with solid business credibility and technical implementation. However, it should address privacy compliance gaps and enhance security best practices to improve trust and regulatory adherence.

KRASO Sia is a well-established Latvian company specializing in the sale and finishing services of construction and industrial paints. With over 24 years of experience, it holds a strong market position in Latvia and neighboring countries, serving both professional and retail customers. The company offers a broad range of products including paints for various surfaces, finishing tools, and training services, supported by a multilingual e-commerce website built on WordPress and WooCommerce. The technical infrastructure is modern and incorporates popular analytics and marketing tools such as Google Tag Manager and Facebook Pixel, ensuring effective digital marketing and user tracking. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie consent mechanisms and a comprehensive privacy policy. However, the absence of WHOIS registration data for the domain www.kraso.com raises concerns about domain legitimacy and registration transparency, which should be investigated further. Overall, the website is professional, user-friendly, and trustworthy from a business and technical perspective, but domain registration inconsistencies slightly reduce the overall trust score.

C

Callcoin

callcoinbot.com

56

Callcoin operates a specialized telecommunications service that enables users to make international calls via the Telegram messaging platform, with payments processed in Bitcoin. The service differentiates itself by offering callback telephony instead of traditional VoIP, providing higher call quality and unique features such as instant issuance of top-up codes. The business targets Telegram users who seek affordable international calling options and prefer cryptocurrency payments. The company has been operational since 2016, with a consistent domain registration and a small but focused market presence. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Select2, and intl-tel-input for international phone number handling. It integrates Google Analytics for user tracking but lacks visible cookie consent mechanisms. The site is mobile-optimized and provides a clear user experience with structured navigation and relevant content. Hosting details are limited, but the domain registrar is reputable. From a security perspective, the website uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and published security or incident response policies. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. The absence of incident response contacts and vulnerability disclosure mechanisms further limits the security maturity. Overall, Callcoin presents a niche, functional service with moderate technical maturity and business credibility. The main risks relate to privacy compliance and security best practices. Strategic improvements in these areas would enhance trust and regulatory adherence.

H

Hexaware Technologies Pvt Ltd

hexaware.com

83

Hexaware Technologies Pvt Ltd is a well-established global IT consulting and services company founded in 1996, with a strong market presence and $1.4 billion in annual revenue. The company offers a broad portfolio of technology services including digital software solutions, cloud services, data analytics, AI-driven automation, and business process outsourcing, targeting enterprise clients across multiple industries. Their website reflects a mature digital infrastructure with modern technologies, responsive design, and comprehensive content showcasing their expertise and client success stories. Security posture is robust with HTTPS, clientTransferProhibited domain status, CAPTCHA-protected forms, and reputable analytics tools, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Hexaware demonstrates high business credibility and professionalism, supported by consistent branding and trust indicators.

S

Sehner Unternehmensberatung

sehner.international

57

Sehner Unternehmensberatung is a small German consulting firm specializing in investment, deal advisory, and market analysis services. The company positions itself as a niche player targeting investors and business clients seeking expert consulting. The website is built on WordPress using the Avada theme and incorporates modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance respectively. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is partial due to the absence of a dedicated privacy policy and terms of service pages. Overall, the website presents a professional image with consistent branding and SEO optimization, but could improve transparency and security documentation to enhance trust and compliance.

N

Nekustamo īpašumu aģentūra Latio

latio.lv

53

Nekustamo īpašumu aģentūra Latio is a leading real estate agency in Latvia, established in 1991, offering comprehensive property transaction services including sales, rentals, valuation, legal support, and market analysis. The company operates with over 150 employees across 12 offices, positioning itself as a market leader in the Latvian real estate sector. The website reflects a professional and well-structured digital presence with multilingual support and extensive service information targeting both private and corporate clients. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Maps API, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and incorporates cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics, though some improvements in security headers and accessibility could be made. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. However, the absence of certain security headers and lack of published security policies or incident response contacts indicate room for enhancement. The WHOIS data could not be retrieved due to query limits, limiting domain registration transparency and trust verification. Overall, Latio's website demonstrates a solid business and technical foundation with good privacy compliance and marketing integration. Strategic improvements in security policies, WHOIS transparency, and accessibility would further strengthen its digital trust and compliance posture.

ARCO REAL ESTATE is a Latvian real estate agency established in 1992, offering brokerage, property valuation, consulting, and marketing services primarily focused on residential and commercial properties within Latvia. The website presents a professional and content-rich platform targeting property buyers, sellers, renters, and investors in the Latvian market. The company maintains an active social media presence and provides clear contact information, enhancing trust and accessibility. Technically, the website employs modern web technologies including jQuery, Foundation CSS framework, Leaflet.js for maps, and integrates Google Analytics for user tracking. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Security practices include HTTPS usage and a cookie consent mechanism, but explicit security headers and incident response policies are not evident from the HTML content. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response transparency. Privacy compliance is basic with GDPR-related cookie consent and a privacy policy page available. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification, but website content and business information appear consistent with a legitimate real estate business. Overall, the website is professional and trustworthy with room for enhanced security and compliance measures. Strategic recommendations include strengthening security headers, publishing incident response and terms of service documents, and improving accessibility compliance to further solidify the company's digital maturity and trustworthiness.

J

Jelgavas Tipogrāfija

jt.lv

43

Jelgavas Tipogrāfija is a well-established Latvian book printing and binding company, offering a full production cycle from offset and digital printing to post-processing and delivery across Europe. The company positions itself as one of the oldest and largest in the Baltic region, targeting publishers, governmental bodies, NGOs, and authors. Their website reflects a professional and modern digital presence, leveraging WordPress and multiple contemporary web technologies to deliver a responsive and SEO-optimized experience. Security-wise, the site enforces HTTPS and provides a comprehensive cookie consent mechanism, aligning with GDPR requirements. However, explicit security headers and incident response information are not evident, suggesting room for improvement in security posture documentation. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable due to query limits, limiting domain registration insights.

E

European Chess Union

europechess.org

49

The European Chess Union (ECU) operates as the continental governing body for chess in Europe, organizing championships, supporting member federations, and promoting chess education. The website serves as an information hub for news, events, commissions, and official communications. The organization targets chess players, federations, and enthusiasts across Europe, positioning itself as a key non-profit sports federation in the chess domain. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for event management and media embedding. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, with room for improvement in SEO and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and a public vulnerability disclosure policy. The absence of a privacy policy and WHOIS data reduces compliance and trust scores. No blocking or WAF mechanisms were detected, indicating full content accessibility. Overall, the site is professional and trustworthy from a content and business perspective but would benefit from enhanced privacy disclosures, security headers, and transparent domain registration information to improve compliance and trustworthiness.

A

American Beauty Summer Meet

americanbeauty.ee

40

American Beauty Summer Meet is a niche event organizer focused on American car enthusiast gatherings in Estonia, with the upcoming event scheduled for July 2025. The website serves as an informational and ticketing platform for this event, targeting automotive fans in the region. The business operates on a small scale with a clear focus on event hosting and entertainment services. Technically, the website is built on WordPress using common plugins such as Yoast SEO and WPML, ensuring multilingual support and SEO optimization. The site is moderately performant and mobile-optimized, with a consistent branding approach and good user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration aligns well with the business profile, indicating legitimacy.

K

Keep.eu

keep.eu

48

Keep.eu is a specialized platform providing aggregated information on Interreg and IPA-IPA cross-border projects, partners, and programmes. It serves governmental and non-profit organizations involved in cross-border cooperation by consolidating operational and financial data in one accessible location. The website leverages a WordPress CMS with modern JavaScript libraries and integrates Google services such as Maps and Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks comprehensive privacy and security policies, which are critical for compliance and trust. Overall, the platform is functional and professionally presented but would benefit from enhanced transparency and security documentation.

S

SYNLAB Eesti

synlab.ee

66

SYNLAB Eesti is the largest medical laboratory in Estonia, operating since 1995 and part of the global SYNLAB Group. The company provides a wide range of medical laboratory testing services targeting medical professionals, private clients, and employers. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations. It offers multilingual support and integrates GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance trust. Contact is primarily via a contact form, with no exposed direct emails or phone numbers. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

E

Eesti Jalgpalli Liit

jalgpall.ee

44

Eesti Jalgpalli Liit is the official governing body for football in Estonia, managing national teams, leagues, and grassroots football development. The website serves as a comprehensive portal for football news, events, and organizational information targeted at players, fans, and stakeholders within Estonia's football community. The site integrates multimedia content including live scores, videos, and social media feeds, reflecting a mature digital presence. Technically, the website employs a custom CMS with modern JavaScript libraries and asynchronous loading of third-party SDKs such as Facebook and Google Analytics, ensuring moderate performance and good mobile optimization. Security posture is strong with enforced HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is basic but includes cookie consent and a privacy policy in Estonian. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the organization.

S

Spordikoolituse ja -Teabe SA

sport.ee

50

Sport.ee is a government-affiliated Estonian sports information portal managed by Spordikoolituse ja -Teabe SA. It serves as a comprehensive platform providing data on sports training, coaching qualifications, sports organizations, events, and statistics. The site targets sports organizations, coaches, athletes, and enthusiasts within Estonia, positioning itself as a key national resource for sports-related information and management. The business model revolves around offering informational services and integration with official sports registers and government bodies. Technically, the website employs a modern tech stack including Bootstrap, jQuery, AngularJS, and various libraries for UI and data visualization, ensuring a responsive and user-friendly experience. Performance is moderate with good mobile optimization and basic accessibility features.

S

Sillamäe Muuseum - SASIMU

sasimu.ee

43

Sillamäe Muuseum SASIMU is a recently established cultural institution in Estonia, focusing on the rich and complex history of Sillamäe through permanent exhibitions, educational programs, and innovative virtual reality experiences. The museum targets tourists, local visitors, and educational groups, offering a blend of historical insight and interactive technology to enhance visitor engagement. The website is built on WordPress and integrates common marketing and analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy and cookie policies, indicating room for compliance improvement. Overall, the site presents a professional and trustworthy image aligned with its business goals.

The website 'Maardu 45' serves as a dedicated platform for celebrating the 45th anniversary of Maardu city in Estonia. It provides residents and visitors with information about the city's history, culture, events, and local government contacts. The site is positioned as a local government information portal aimed at community engagement and city promotion. Technically, the site leverages a modern tech stack including Alpine.js, jQuery, Leaflet for maps, and multiple analytics tools such as Google Analytics and Matomo, hosted likely by Telia Eesti AS. The website is mobile optimized and offers a good user experience with clear navigation and consistent branding. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks some security headers and formal policies such as privacy and cookie policies, which are important for GDPR compliance. The domain is very recently registered, which is somewhat unusual for a city site but may reflect a new dedicated event domain. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

H

Harjumaa Omavalitsuste Liit

hol.ee

51

Harjumaa Omavalitsuste Liit is a regional non-profit organization established in 2010 to foster cooperation and joint project development among local governments in Harjumaa, Estonia. The website serves as an information hub for governance, education, culture, health, safety, and regional development initiatives. It targets local government representatives, educational and cultural institutions, and the general public within the Harjumaa region. The organization positions itself as a key regional cooperation leader with a focus on community well-being and development. Technically, the website is built on a modern stack including Laravel Livewire, jQuery, and various JavaScript libraries for UI enhancements. It employs Google reCAPTCHA v3 for form security and implements cookie consent mechanisms, reflecting a moderate level of digital maturity. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and includes CSRF tokens and reCAPTCHA to protect user inputs. However, some security headers are not explicitly detected, and there is no public incident response or vulnerability disclosure policy. No critical vulnerabilities were found in the analysis. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a regional government entity. Recommendations include enhancing security headers, publishing incident response information, and considering a vulnerability disclosure policy to further strengthen security posture and transparency.

S

Spordikoolituse ja -Teabe SA

spordiregister.ee

58

Eesti Spordiregister, operated by Spordikoolituse ja -Teabe SA under the Estonian Ministry of Culture, serves as the official national registry and information portal for sports organizations, schools, facilities, and coaches in Estonia. It provides comprehensive data services including statistics, data submission portals, and public access to sports-related information, targeting sports entities and the general public. The platform is well-positioned as a trusted governmental resource in the Estonian sports sector. Technically, the website employs a mature technology stack including jQuery, Bootstrap, Highcharts, Leaflet, and other modern JavaScript libraries, ensuring a responsive and accessible user experience. The site is mobile-optimized and implements basic SEO and accessibility features. The infrastructure appears custom-built without reliance on popular CMS platforms, indicating tailored development for specific governmental needs. From a security perspective, the site enforces HTTPS and uses secure form inputs, but lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or malware were detected, and cookie consent mechanisms are in place, supporting GDPR compliance. The WHOIS data aligns well with the website's governmental nature, reinforcing legitimacy. Overall, the website demonstrates a solid security posture and technical maturity suitable for its governmental role, with room for improvement in security header implementation and transparency around security policies. The business credibility is high given its official status and clear contact information.

V

Virumaa Koostöökogu

viko.ee

40

Virumaa Koostöökogu is a small Estonian non-profit organization focused on regional cooperation and rural development in the Virumaa area. Founded in 2006, it serves local municipalities and communities by managing projects, organizing events, and facilitating cooperation among stakeholders. The website reflects this mission with relevant content, event announcements, and organizational information. Technically, the site is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, with integration of Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and SEO-friendly but lacks some accessibility features. Security posture is moderate with HTTPS enforced and use of reCAPTCHA, but missing important security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms despite tracking scripts. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

V

Verband der Zoologischen Gärten (VdZ) e.V.

zoosciencelibrary.org

51

The Zoo Science Library is a specialized online platform documenting peer-reviewed scientific publications involving modern zoological gardens and aquaria. It serves as a knowledge transfer and networking tool for the zoological research community, supported by reputable organizations such as the Verband der Zoologischen Gärten (VdZ) e.V. and the European Association of Zoos and Aquaria (EAZA). The website is professionally designed, bilingual (German and English), and provides a searchable database of over 1400 publications from 2018 to 2022. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, and it uses Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforced and cookie consent implemented, though some HTTP security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable due to malformed query responses, which slightly reduces domain trust but is mitigated by the site's affiliations and content quality. Overall, the site is a credible, niche scientific resource with good technical and security standards.

Parkimine.ee is an Estonian online platform operated by AS Ühisteenused, providing parking information and electronic parking permit services primarily for Tallinn and other Estonian cities. The website integrates Google Maps API for location services and offers a user-friendly interface for searching parking spots and purchasing permits. The business targets residents and visitors needing parking solutions, positioning itself as a key service provider in the transportation sector within Estonia. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Select2, ensuring good SEO and usability. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, the site enforces HTTPS, uses standard security headers, and validates form inputs, reflecting a good security posture. However, it lacks dedicated security and incident response policies publicly available. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for enhancements in security transparency and analytics configuration.

K

KiVa / Tenz

kivaschool.be

48

The website www.kivaschool.be represents the KiVa anti-bullying program operated by Tenz in Belgium, supported by recognized educational institutions. It provides comprehensive information about the program, resources for schools, parents, and educators, and includes a webshop and training offerings. The site is well-structured with consistent branding and clear navigation, targeting educational stakeholders in Flanders. Technically, the site uses a custom CMS (Ambacht CMS) with common web technologies such as jQuery, Bootstrap 3, and Select2, and integrates Google Analytics and ReadSpeaker for accessibility. Security posture is moderate with no visible security headers and unknown SSL configuration, but it implements a detailed cookie consent mechanism. WHOIS data is unavailable due to registry restrictions, which reduces transparency but the site content and contact details support legitimacy. Overall, the site is professional and functional with room for improvement in security and privacy policy disclosures.

K

KiVa

kivaschool.nl

51

KiVa is an established educational program focused on promoting social safety and positive group dynamics in schools, primarily in the Netherlands. The website presents a comprehensive and scientifically backed anti-bullying program, supported by certified trainers and a large network of schools and teachers. The digital infrastructure leverages modern web technologies including jQuery, Bootstrap, Google Maps API, and tracking tools such as Google Analytics and Facebook Pixel, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-positioned in the education sector.

S

SA Kiusamisvaba Kool

kiusamisvaba.ee

40

SA Kiusamisvaba Kool is a well-established Estonian non-profit organization dedicated to preventing bullying in schools through the implementation of the KiVa anti-bullying program developed in Finland. The organization provides training, resources, and support to schools, parents, and communities, positioning itself as the official representative of the KiVa program in Estonia. The website reflects a professional and consistent brand presence with comprehensive content targeting educators, parents, and socially responsible entities. Technically, the site is built on WordPress with modern plugins and integrations, including WooCommerce for e-commerce and Edwiser Bridge for LMS functionalities. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site demonstrates good digital maturity and trustworthiness.

FoodDocs is a specialized SaaS provider offering intuitive food safety management software tailored for hospitality, healthcare, and retail sectors. The company positions itself as a market leader with top-rated software solutions that streamline compliance, monitoring, and traceability processes. Their platform is designed for ease of use, enabling businesses to set up food safety systems quickly and efficiently. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and marketing tools to deliver a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security and incident response policies are not publicly detailed. Privacy compliance is well addressed with GDPR-compliant cookie consent and privacy policies. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency, which slightly impacts overall trustworthiness. Strategic recommendations include publishing detailed security policies, incident response plans, and improving domain registration transparency to enhance credibility.

T

Telia Eesti AS

kaustik.ee

58

Kaustik.ee is an Estonian information system platform primarily serving the education sector, offering document register services and secure user authentication including Estonian electronic ID methods. The platform is operated under the domain registered by Telia Eesti AS, a reputable telecom provider in Estonia, indicating a legitimate and regionally focused service. The website content is basic but functional, with a focus on user login and document access. Technically, the site uses a proprietary WebDesktop system with modern JavaScript libraries such as jQuery and Bootstrap, providing a moderate level of digital maturity. However, SEO and accessibility features are minimal, and no advanced analytics or marketing tools are detected. Security posture is adequate with HTTPS and secure login options but lacks important security headers and privacy policies, which are critical for GDPR compliance and user trust. Overall, the site is moderately trustworthy but would benefit from enhanced security and privacy measures.

C

CreditOn.lv

crediton.lv

55

CreditOn.lv is a Latvian-based online lending platform established in 2007, offering short-term loans and credit lines to consumers aged 20 to 75. The company operates transparently with clear terms and a strong focus on customer trust and data security. It has a significant market presence in Latvia and several international subsidiaries, indicating a mature and expanding business model. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript libraries and analytics tools, though it appears to be custom-built without a common CMS. Security posture is good with HTTPS enforced and secure login forms, but could be improved by adding explicit security headers and publishing security policies. Privacy compliance is well addressed with a visible cookie consent mechanism and a comprehensive privacy policy. Overall, the site demonstrates high business credibility and trustworthiness.