Security Directory

Eesti Paralümpiakomitee is the official Estonian Paralympic Committee, a non-profit organization dedicated to supporting Paralympic athletes and promoting Paralympic sports within Estonia. The website serves as a hub for news, event calendars, athlete information, and organizational details, targeting athletes, supporters, and the general public interested in Paralympic sports. The organization maintains a clear national presence with sponsorships and social media engagement. Technically, the website employs a modern JavaScript stack including jQuery, Google reCAPTCHA, Axios, and sliders for dynamic content presentation. It uses HTTPS with a valid SSL configuration and integrates Google Analytics for visitor tracking. The site is moderately optimized for mobile and accessibility, with room for improvement in SEO and accessibility features. From a security perspective, the site benefits from HTTPS and CSRF token usage in forms, but lacks explicit security headers and detailed security or incident response policies. No privacy or cookie policies are present, which is a compliance gap. Contact information is clearly provided, enhancing trust and user engagement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

A

AS Kihnu Veeteed

veeteed.com

56

AS Kihnu Veeteed operates as a regional ferry transportation service provider in Estonia, specializing in ferry routes connecting several islands including Kihnu, Vormsi, Hiiumaa, Saaremaa, and others. The company offers online ticket sales through a modern React-based single-page application, targeting residents and visitors requiring reliable ferry transport. The website is professionally designed with consistent branding and provides essential information such as schedules, routes, and news updates. Technical infrastructure leverages modern web technologies including React, Material-UI, service workers for offline capabilities, and Google Analytics for user behavior tracking. Hosting and DNS services are managed via Google Cloud infrastructure, ensuring reliable uptime and performance. Security posture is adequate with HTTPS enforced and domain transfer protection enabled; however, DNSSEC is not enabled and security headers are not explicitly present, indicating room for improvement. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and security policies are absent. Overall, the website demonstrates a moderate to good level of digital maturity and business credibility, with recommendations to enhance security headers, DNSSEC, and incident response disclosures to strengthen trust and compliance.

The EAZA Reproductive Management Group is a small non-profit organization dedicated to providing knowledge and guidelines on animal contraception within European zoos and aquariums. Their website serves as an educational resource offering guidelines, protocols, and a free course registration link, targeting professionals involved in animal reproductive management. The affiliation with Chester Zoo adds credibility and trust to their operations. Technically, the website uses a somewhat dated technology stack including AngularJS and jQuery, with basic mobile optimization and moderate performance. Security posture is basic with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy linked but no cookie consent mechanism or terms of service found. Overall, the website is functional and trustworthy but could benefit from modernizing its technical stack and improving security and privacy practices.

P

Pinest AS

pinest.ee

45

Pinest AS is an Estonian manufacturing company founded in 2005 specializing in finger-jointed and laminated wood components. The company emphasizes flexibility in raw materials and production to serve large and medium-sized industrial clients, primarily using domestic pine wood. Their production facility is located in Himmaste village, Põlvamaa. The website reflects a professional and consistent brand presence with clear business and contact information, supported by recognized certifications such as FSC and PEFC. Technically, the site is built on WordPress with modern libraries and tools, including Google Analytics and Tag Manager for tracking, and uses SEO best practices via Yoast. Security posture is generally good with HTTPS enabled and secure forms, though some improvements are needed in script handling and security headers. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and well-positioned in its market segment.

G

Glimstedt

glimstedt.lv

38

Glimstedt is a well-established full-service sworn law firm specializing in business law, with a history dating back to 1935. The firm serves a diverse clientele including large foreign capital companies, medium and small enterprises, and private individuals. With 14 offices in Sweden and 3 in the Baltic states, Glimstedt operates an international team of 250 professionals, emphasizing collaboration and excellence. The website reflects this professional positioning with clear branding and relevant business content. Technically, the website is built on WordPress and uses modern JavaScript libraries such as jQuery and Modernizr. The site is mobile-optimized and performs moderately well, with proper SEO meta tags and Open Graph data. However, accessibility features are basic and could be improved. The site uses HTTPS with a good SSL configuration but lacks explicit security headers and visible privacy or cookie policies. From a security perspective, the site shows a good baseline with HTTPS and no exposed sensitive data. However, the absence of security headers, privacy policies, cookie consent mechanisms, and vulnerability disclosure information indicates room for improvement in compliance and security posture. No critical vulnerabilities or WAF blocking were detected, suggesting a stable but improvable security environment. Overall, the website is professional and trustworthy, reflecting the firm's reputable market position. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing incident response and vulnerability disclosure information, and enhancing accessibility and compliance features to strengthen trust and security posture.

P

premium.pl Sp. z o.o.

time.pl

61

premium.pl Sp. z o.o. operates a well-established Polish domain marketplace platform, offering domain registration, transfer, auctions, leasing, and SSL certificates. The website time.pl is a premium domain listing within this marketplace. The company has a strong market position in Poland with a focus on domain-related services for businesses and individuals. The platform is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and consent management for privacy compliance. Hosting is provided by home.pl, a known Polish hosting provider. Security posture is solid with HTTPS enforced and secure forms, though there is room for improvement in security headers and published policies. WHOIS data confirms the legitimacy and long-standing registration of the domain, matching the business entity. Overall, the website is trustworthy and professionally maintained.

J

Jülich Aachen Research Alliance

jara.org

46

JARA (Jülich Aachen Research Alliance) is a collaborative research initiative between RWTH Aachen University and Forschungszentrum Jülich, focusing on five key research areas including brain science, simulation and data sciences, energy, future information technology, and soft matter. The alliance aims to pool expertise to tackle grand societal challenges through joint research projects, training, and infrastructure sharing. The website reflects a mature and professional digital presence with clear navigation, multilingual support, and integration of partner logos and resources. Technically, the site uses modern JavaScript libraries and a CMS (Contao), with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers are not explicitly detected. The absence of WHOIS data limits domain trust verification, but the strong institutional affiliations and content quality support legitimacy. No direct contact emails or phone numbers are publicly visible, which may impact user engagement. Overall, the site is well-positioned as a reputable research alliance with room for improvement in transparency and security disclosures.

H

Hendrix Genetics BV

hendrix-genetics.com

69

Hendrix Genetics BV is a leading multi-species animal breeding, genetics, and technology company specializing in sustainable and innovative breeding programs for various animal species including poultry, swine, and aquatic animals. The company positions itself as a key player in the animal protein value chain, emphasizing sustainability, animal welfare, and productivity. Their website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design that supports their market leadership claims. Technically, the site leverages modern JavaScript libraries, Google Tag Manager for analytics, and is hosted on Amazon CloudFront CDN, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though the absence of explicit security headers and a public security policy are areas for improvement. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the overall professional web presence and active content suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration status to improve trust and compliance.

Strantum OÜ is a small Estonian company providing essential municipal services such as water supply, heating energy, and maintenance for the Harku vald community. The company operates with a clear local focus, serving residents and property owners with utility and infrastructure services. The website reflects this local service orientation with content in Estonian and clear contact information. Technically, the site uses legacy JavaScript libraries and Cloudflare DNS/CDN services, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but outdated libraries and lack of explicit security policies present moderate risks. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy business presence.

E

Eesti Olümpiakomitee

eok.ee

35

Eesti Olümpiakomitee is the official umbrella organization for sports and Olympic activities in Estonia, providing support to athletes, organizing events, and promoting sports culture nationally. The website reflects a well-established non-profit entity with strong partnerships and sponsorships, targeting the Estonian sports community and general public interested in Olympic sports. Technically, the site uses a modern stack including Bootstrap, jQuery, and Voog CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some improvements in security headers and library updates are recommended. Privacy compliance is moderate with a clear cookie consent mechanism but lacking explicit privacy policy and terms of service pages. Overall, the site is professional, trustworthy, and functional with room for technical and compliance enhancements.

Run Japan is an online platform dedicated to providing international runners with comprehensive information and registration services for marathons and running events across Japan. The website positions itself as a gateway to Japan's best running events, offering race listings, travel planning assistance, and event registration. The target audience primarily consists of international and domestic runners interested in participating in Japanese marathons. The business operates in the niche sports and events sector, with a small company size and a recent founding date in 2024. Technically, the website employs a modern JavaScript stack including jQuery, Modernizr, and Slick Carousel, hosted on Amazon AWS infrastructure. It uses Google Tag Manager for analytics and tracking. The site is mobile optimized with good SEO practices and a consistent branding approach. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible privacy policy or cookie consent mechanism, which impacts privacy compliance. No vulnerability disclosure or incident response information is provided. The WHOIS data shows privacy protection but is consistent with the business location in Japan, and the domain age aligns with the business launch. Overall, Run Japan presents a professional and functional platform with moderate security and privacy compliance. Strategic improvements in privacy disclosures, security headers, and user data protection would enhance trust and compliance, supporting its growth in the international running community.

S

SPWeb s.r.o.

firmsys.cz

50

Firmsys.cz is a Czech Republic based technology company specializing in providing compliance and business systems focused on whistleblowing and cookie law adherence. The company, operated by SPWeb s.r.o., offers SaaS solutions tailored for firms, schools, public authorities, and other entities required to comply with EU directives such as EU Directive 2019/1937 and ePrivacy regulations. With over 800 clients and more than a decade of IT service experience, Firmsys positions itself as a reliable partner for legal and compliance system needs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in Czech language. Contact and legal information are transparently presented, enhancing trustworthiness. Technically, the site employs modern frameworks like Bootstrap and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Seznam Retargeting. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, although some HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a detailed cookie consent mechanism and GDPR policy. Overall, the site demonstrates a mature digital presence with good security posture and compliance awareness.

L

LMB - Gruppe

lmb-gruppe.de

45

LMB-Gruppe is a German manufacturing company specializing in welding, cutting, marking, and machine building services. Their website presents a professional image with clear navigation and relevant content targeting industrial clients. The company offers a range of services including manual welding, laser cutting, and special machinery construction, positioning themselves as a regional service provider in the manufacturing sector. The website is built on TYPO3 CMS and uses modern web technologies such as jQuery and Bootstrap, indicating a moderate level of digital maturity. While the site is mobile-optimized and accessible, there is room for improvement in accessibility and SEO. Security posture is moderate with no visible security headers or explicit security policies, and the site lacks a cookie consent mechanism despite GDPR compliance indications. Overall, the website is functional and credible but would benefit from enhanced security and privacy features.

Kantar Worldpanel operates as a leading global provider of consumer panel research and consumer behavior insights, offering services such as retail surveys and shopper research. The website content reflects a professional and consistent brand presence targeting businesses seeking market research data. Technically, the site employs modern JavaScript libraries like MooTools and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance, though no major CMS or hosting provider is explicitly identified. Security posture is moderate, with HTTPS implied but no explicit security headers detected, and privacy compliance is partial with a cookie consent mechanism but no visible privacy policy page. Overall, the domain WHOIS data is unavailable, which reduces trust but the website content aligns with the known Kantar brand. Strategic recommendations include enhancing privacy disclosures, improving security headers, and publishing clear contact and incident response information.

Carlsberg Ukraine is a large manufacturing company operating as part of the global Carlsberg Group. It produces and distributes beer and beverages in Ukraine with a strong market position and a portfolio of well-known brands. The website provides comprehensive corporate information, news, and sustainability goals, targeting consumers and stakeholders in Ukraine. Technically, the site uses a mix of modern and legacy JavaScript libraries, is mobile optimized, and employs HTTPS with some security best practices, though there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's business credibility and digital presence.

Carlsberg Srbija d.o.o. is a large manufacturing company operating as part of the global Carlsberg Group, specializing in beer production and distribution within Serbia. The website reflects a mature digital presence with good content quality, clear navigation, and localized Serbian language content. The technical infrastructure employs a mix of modern JavaScript libraries and CSS frameworks, with Umbraco CMS inferred as the platform. The site is mobile optimized and includes compliance mechanisms for privacy and cookie policies, indicating a good level of digital maturity. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Rentokil is a professional pest control service provider targeting residential and business customers in Estonia. The website presents localized content in Estonian, emphasizing expertise and comprehensive pest control solutions. The technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and Google Tag Manager, hosted primarily on Rentokil's CDN. While the website design and content quality are good, there is a lack of visible privacy, cookie, and security policies, which impacts compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the security posture is moderate but could be improved by implementing security headers and explicit compliance documentation.

O

OÜ Keskkonnaprojekt

keskkonnaprojekt.ee

51

OÜ Keskkonnaprojekt is an Estonian engineering and consulting company specializing in comprehensive design and project management services for buildings, infrastructure, and environmental facilities. The company serves primarily public sector clients and private enterprises within Estonia, offering integrated solutions from initial concept through technical execution. Their website reflects a professional and consistent brand presence with clear service offerings and client references. Technically, the website is built on WordPress with common plugins such as WPML for multilingual support and uses standard JavaScript libraries like jQuery and Flexslider. The site is HTTPS secured and moderately optimized for performance and mobile devices, though accessibility and SEO could be improved. Analytics are implemented via Google Analytics and WP Statistics, but no cookie consent or privacy policies are evident. From a security perspective, the site benefits from HTTPS and lacks visible vulnerabilities or exposed sensitive data. However, it lacks security headers and formal security policies such as incident response or vulnerability disclosure mechanisms. The WHOIS data aligns well with the business identity, supporting legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

E

Estonian Private Equity And Venture Capital Association

estvca.ee

54

EstVCA (Estonian Private Equity And Venture Capital Association) is a professional association representing the private equity and venture capital industry in Estonia and the Baltic region. The website serves as an information hub providing news, reports, events, and educational resources targeted at investors, fund managers, startups, and other stakeholders in the PE/VC ecosystem. The association is well-established since 2010 and maintains a consistent brand presence online. Technically, the website is built on the Voog CMS platform, utilizing JavaScript libraries such as jQuery and Modernizr, and is hosted on servers managed by Edicy OÜ. The site is mobile-optimized with responsive images and basic accessibility features. Performance is moderate, with no major technical issues detected. SEO is basic but present through meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks important security headers and uses an outdated jQuery version, which could pose risks. There are no visible privacy or cookie policies, nor contact information for security incidents or data protection officers, indicating gaps in compliance and transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, updated libraries, and clearer contact information to strengthen trust and security posture.

T

SEO Optimeerimine | Teie Ettevõte

taddy.ee

35

The website www.taddy.ee is a small Estonian SEO service provider specializing in both internal and external SEO optimization, competitor analysis, and targeted advertising. The business targets companies seeking to improve their search engine visibility and website traffic. The site presents clear service packages with pricing and showcases client examples, indicating a focused and professional approach. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design and good navigation. However, there are gaps in privacy compliance, as no privacy or cookie policies are published, and contact information is limited to a web form without direct emails or phone numbers. Security posture is moderate with HTTPS enabled but lacking explicit security headers and vulnerability disclosures. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices to improve trust and compliance.

C

COMBICON OÜ

combicon.ee

50

COMBICON OÜ is a small Estonian company specializing in the design, construction, and development of production, warehouse, and commercial buildings, including additions and real estate acquisition assistance. The company targets local businesses and individuals seeking construction and real estate services, positioning itself as a professional local player with a clear focus on project-based services. The website is professionally designed, mobile-optimized, and uses modern web technologies including Voog CMS, Google Analytics, and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy but could improve transparency and compliance.

W

Wine Library

winelibrary.com

63

Wine Library is a well-established online retailer specializing in wines, spirits, beer, and gourmet products. Founded in 1997, it has built a strong market presence in the United States with a medium-sized operation focused on e-commerce. The website offers a rich user experience with curated wine selections, expert ratings, wine clubs, and educational content, targeting wine enthusiasts and consumers seeking quality alcoholic beverages online. The business model centers on direct online sales complemented by subscription wine clubs and marketing via email and social media channels. Technically, the website leverages a modern technology stack including Ruby on Rails, Google Analytics, Facebook Pixel, and Cloudflare DNS/CDN services. The site is mobile-optimized with good SEO practices and uses several third-party marketing and analytics tools. Performance is moderate, with room for improvement in accessibility and some technical SEO aspects. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and implements secure forms. However, it lacks DNSSEC, explicit security headers, and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, Wine Library presents a credible, professional, and secure online retail platform with minor gaps in privacy compliance and security transparency. Strategic improvements in cookie consent, security headers, and incident response disclosure would enhance trust and compliance.

P

PR Strategies OÜ

prstrategies.ee

49

PR Strategies OÜ is a small Estonian public relations and communication agency, officially representing the global Hill+Knowlton Strategies network in Estonia. The company provides a broad range of communication services including internal and external communication, crisis communication, media relations, event organization, and strategic consultancy. The website is professionally designed, mobile-optimized, and presents clear navigation and relevant content primarily in Estonian. The technical infrastructure leverages modern web technologies such as jQuery, Bootstrap, Google Fonts, and Google Maps API, hosted likely by Zone Media OÜ, consistent with the domain registration data. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided with a company email and physical address, but no phone numbers or social media links are present. Overall, the website is trustworthy and credible, with strong business legitimacy and partner affiliations.

R

R Haldus OÜ

rhaldus.ee

45

R Haldus OÜ is a small Estonian company specializing in property management services for commercial and residential real estate. Their website presents a focused business model offering competent and quality property maintenance and management services. The site is primarily in Estonian with options for English and Russian, targeting property owners seeking professional management solutions. Technically, the website is built on the Voog CMS platform and uses common JavaScript libraries such as jQuery and Modernizr, along with Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security-wise, the website uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. There is no visible incident response or vulnerability disclosure information, which limits transparency in security matters. Overall, the website is functional but basic, with room for improvement in privacy, security, and content depth.

Hydroscand AS operates as a leading Norwegian supplier specializing in hoses, couplings, and related hydraulic and industrial components. The company boasts a broad product range and a nationwide network of branches and dealers, positioning itself strongly within the manufacturing sector. Their website reflects a professional and consistent brand presence, targeting industrial and commercial customers requiring specialized hose solutions and services such as machine service and central lubrication systems. Technically, the website leverages modern tools including Litium CMS, Google Tag Manager, Matomo Analytics, and a comprehensive cookie consent mechanism, demonstrating a mature digital infrastructure with good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data, although explicit security policies and incident response contacts are not publicly available. Overall, the site is trustworthy and compliant with GDPR through detailed cookie management and privacy policy linkage to a reputable third-party provider. Strategic recommendations include enhancing transparency by publishing terms of service, security policies, and clear contact information for security incidents to further strengthen trust and compliance.

U

Unicorn Solutions AS

unicorn-solutions.com

43

Unicorn Solutions AS is a Norway-based software product company specializing in credit management solutions, including modular business applications such as Unicorn Box, Workflow, and Communication platforms. The company targets collection agencies and businesses requiring integrated credit management and workflow automation. Their market position is supported by a long-established domain since 2009 and Microsoft Silver Partner certification, indicating a credible and specialized niche player. Technically, the website employs a traditional tech stack including jQuery 1.11.1, Bootstrap, Font Awesome, and Google Analytics/Tag Manager for tracking. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Performance is moderate with no critical technical flaws detected. However, the use of an outdated jQuery version and absence of security headers are notable technical risks. From a security perspective, the site uses HTTPS (assumed from URL), but no security headers were detected in the provided data. There is no visible privacy or cookie policy, nor any incident response or vulnerability disclosure information, which are gaps in compliance and security transparency. The domain WHOIS data is consistent and supports legitimacy, with no privacy protection masking registrant details. Overall, the website is professional and functional but requires improvements in privacy compliance and security best practices to enhance trust and reduce risk. Strategic recommendations include implementing GDPR-compliant privacy and cookie policies, adding security headers, updating libraries, and publishing incident response information.

P

Positium

positium.com

60

Positium is a specialized data analytics company focused on transforming anonymised mobile positioning data into actionable statistical insights primarily for mobility, tourism, and population sectors. Established in 2003 and based in Estonia, Positium serves government and private sector clients with data-driven solutions that support sustainable decision-making. The company holds a strong market position as a leader in mobile phone data analytics, supported by partnerships with notable organizations such as Eurostat and the International Telecommunication Union. Technically, the website is built on the Voog CMS platform and integrates modern analytics and marketing tools including Google Analytics, Hotjar, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in security headers and DNSSEC implementation are recommended. The hosting appears stable with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, there is no explicit security policy or incident response contact information published, which could be enhanced to improve trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Positium's website reflects a professional and trustworthy digital presence with solid privacy compliance and business credibility. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen security posture and stakeholder confidence.

Invent Baltics OÜ is a specialized consulting firm based in Estonia, focusing on assisting SMEs and innovative companies in securing European funding through the EIC Accelerator and Horizon 2020 programs. The company has a strong market position supported by numerous success stories and a clear focus on technology and innovation sectors. Their website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses established technologies such as Bootstrap and jQuery, hosted under a reputable Estonian registrar, Zone Media OÜ. Security posture is moderate with HTTPS usage but lacks advanced security headers and visible privacy compliance mechanisms. Contact information is clearly presented, enhancing business credibility. However, the absence of privacy and cookie policies represents a compliance gap that should be addressed.

K

Kiirlugemiskool OÜ

kiirlugemine.ee

39

Kiirlugemiskool OÜ is an Estonian education company specializing in speed reading, memory training, concentration, and self-management courses. Established since 2000, it offers both public and in-house training services targeting individuals and organizations seeking cognitive and personal development. The website presents a professional and user-friendly interface with clear navigation and relevant content about their services and trainers. Technically, the site uses legacy JavaScript libraries and standard web technologies but lacks modern security headers and privacy policies, indicating room for improvement in security and compliance. Contact information is clearly provided, including phone numbers, email, and physical address, enhancing business credibility. Overall, the site is functional and trustworthy but would benefit from updated security practices and privacy compliance enhancements.

Saku Õlletehas is a well-established Estonian brewery founded in 1820, operating as a subsidiary of the Carlsberg Group. The company specializes in manufacturing and retailing a wide range of beverages including beers, ciders, energy drinks, and soft drinks, serving both local and international markets. The website reflects a mature digital presence with comprehensive product listings, clear navigation, and consistent branding aligned with its parent company. Technically, the site uses a mix of legacy and modern JavaScript libraries, is mobile-optimized, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and compliance scripts in place, though some security headers could be more explicitly defined. No blocking or WAF mechanisms interfere with content accessibility. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

1

101domain GRS Limited

acino-pharma.com

47

The website acino-pharma.com is currently a parked domain managed by 101domain GRS Limited, a domain registrar and service provider established in 1999. The site does not host any active business content related to Acino Pharma but instead displays a placeholder page offering domain management and upsell services such as Google Workspace, web hosting, and corporate brand services. The target audience appears to be individuals or businesses interested in acquiring or managing domain names. The business model is that of a domain registrar and related service provider with a moderate market presence. Technically, the site uses standard HTML5, CSS3, and JavaScript technologies including jQuery and Modernizr. It is hosted on infrastructure associated with 101datacenter.net. The site is moderately optimized for mobile devices and has basic accessibility and SEO features. However, it lacks HTTPS, security headers, and advanced technical frameworks or CMS platforms. From a security perspective, the site has several weaknesses including the absence of HTTPS, no DNSSEC enabled, and no visible security policies or incident response contacts. The domain is locked against transfer but is not actively used for business purposes. No privacy or cookie policies are present, and no contact information is provided, limiting compliance with GDPR and other regulations. Overall, the security posture is weak, and the site is primarily a parked domain with minimal risk but also minimal trust signals. The overall risk assessment is low due to the lack of active business operations on the domain. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing DNSSEC, and providing clear contact and security information to improve trust and compliance if the domain is to be used actively in the future.

P

PARENT PROJECT, z.s.

parentproject.cz

60

Parent Project Czech Republic is a specialized non-profit organization dedicated to supporting patients and families affected by Duchenne and Becker muscular dystrophy. The organization focuses on advocacy, improving patient care, education, community building, and promoting research. Their website is professionally designed, content-rich, and targets patients, families, and healthcare professionals primarily in the Czech Republic. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and a custom CMS platform (Solidpixels). It is served over HTTPS with no visible security warnings and includes a cookie consent mechanism, indicating a basic level of privacy compliance. However, no explicit privacy policy or terms of service pages were found, which is a gap in compliance and transparency. The absence of WHOIS data for the domain is a notable concern, reducing domain transparency and trustworthiness. Overall, the website presents a good security posture with secure forms and no obvious vulnerabilities, but could improve by adding security headers, a security policy, and vulnerability disclosure information.

O

Overalia

overalia.com

49

Overalia is a specialized digital marketing agency based in Spain, with a strong focus on online marketing strategies, web development, traffic acquisition, and analytics. The company positions itself as a Google Analytics Certified Partner and Google Partner, serving a diverse client base with over 1,200 projects completed. Their website demonstrates a professional and modern digital presence, utilizing contemporary web technologies and providing comprehensive content including case studies and detailed service descriptions. The technical infrastructure is solid, with HTTPS enforced and integration of security features like Google reCAPTCHA. Privacy and cookie policies are well implemented, reflecting good compliance with GDPR standards. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy, although the website content and certifications strongly support the business's credibility.

A

Architektenkammer Berlin

ak-berlin.de

45

Architektenkammer Berlin is a professional self-governing chamber representing architects, urban planners, landscape architects, and interior architects in Berlin. The organization provides membership services, continuing education, legal advice, event management, and publishes relevant industry content. It holds a key position as the official chamber for architectural professions in Berlin, targeting professionals and stakeholders in the built environment sector. The website reflects a medium-sized government-related entity with a clear focus on professional development and community engagement. Technically, the website is built on TYPO3 CMS and leverages modern frontend technologies including jQuery, Bootstrap, Flexslider, and Leaflet.js for interactive maps. The site is mobile-optimized, accessible, and SEO-friendly with proper meta tags and structured navigation. Analytics are handled via Matomo with user consent, reflecting a privacy-conscious approach. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the site lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-maintained, supporting the organization's mission effectively. Strategic improvements in security transparency and formal policies would further strengthen its posture.

N

National Car Rental

emeraldaisle.com

57

The website emeraldaisle.com serves as a branded promotional platform for National Car Rental's Emerald Club loyalty program, emphasizing speed, choice, and convenience in vehicle rental. It targets business travelers and frequent renters primarily in the U.S. and Canada, offering various vehicle options and membership benefits. The site is professionally designed with multimedia content and clear navigation, reflecting a mature digital presence. Technically, it employs modern JavaScript libraries and tracking tools such as jQuery, Adobe Launch, and Google Tag Manager, with cookie consent managed by OneTrust, indicating compliance with privacy regulations. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks explicit security headers and a published security policy, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly; however, the website's branding and external links strongly associate it with the legitimate National Car Rental brand. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, with recommendations to enhance security posture and transparency.

U

UAB "Interneto vizija"

donato.lt

35

Donato.lt is a Lithuanian small business specializing in internet page creation, maintenance, individual programming, and online advertising services. The company targets local Lithuanian businesses and individuals seeking web development and digital marketing solutions. The website presents a clear service offering with a focus on custom design, SEO, and social media integration. Technically, the site uses standard JavaScript libraries including Facebook SDK and Google APIs, with Google Analytics for user tracking. The site is accessible, uses HTTPS, but lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. Contact information is limited to an obfuscated email address, with no phone or physical address provided. WHOIS data confirms the domain is registered to a Lithuanian company consistent with the website's claims, indicating legitimacy. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

F

Feldhaus Klinker

feldhaus.lt

50

Feldhaus Klinker is a Lithuanian-based company specializing in the sale of clinker tiles, bricks, and pavers, representing a historic European brand established since 1857. The website serves as an e-commerce and product catalog platform targeting construction professionals and retail customers primarily in Lithuania and neighboring regions. The business model focuses on providing high-quality building materials with additional tools such as a product configurator and galleries to support customer decision-making. The company maintains a consistent brand presence with active social media channels and a clear contact phone number. Technically, the website is built on the OpenCart platform using the Journal2 theme, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and various UI and gallery plugins. Hosting and DNS are managed via Cloudflare, ensuring good SSL configuration and moderate performance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are critical for GDPR compliance and enhanced security posture. No incident response or security policy information is publicly available, indicating room for improvement in transparency and readiness. Overall, the website is professional, trustworthy, and functional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust. Strategic improvements in these areas will strengthen the company's digital maturity and regulatory adherence.

K

Killick Agencies and Marketing Ltd.

kaml.in

54

Killick Agencies and Marketing Ltd. (KAML) is a specialized marketing company focused on marine equipment including propulsion systems, marine engines, ship lighting, navigation systems, and related marine technologies. Positioned as a leader in the marine equipment marketing sector in India, KAML targets marine industry professionals and shipbuilders. Their business model centers on marketing and providing pre-sales and after-sales services for specialized marine equipment. The website content reflects a focused business offering with clear descriptions of products and services, though it lacks comprehensive privacy and security policy disclosures. Technically, the website uses a traditional tech stack including Bootstrap, jQuery, and various JavaScript plugins for UI effects and slideshows. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident. The absence of analytics or tracking scripts suggests minimal user tracking. From a security perspective, the website does not demonstrate strong security posture. There is no visible enforcement of HTTPS in the HTML content, no security headers detected, and no published security or incident response policies. This exposes the site to potential risks and compliance gaps, especially regarding GDPR and data protection regulations. Contact information is clearly provided, but no privacy or cookie policies are present. Overall, the website is functional and professional in design but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and reduce risk. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and establishing incident response contacts.

Alfa Crewing Bureau JSC is a Lithuanian licensed maritime crewing agency founded in 2011 by a Danish owner. The company specializes in coordinating employment of qualified seamen and experienced workers for various types of vessels and shipyards, serving clients primarily in the Baltic region. Their services include crewing, posting, and facilitating contacts between shipyards and ship owners. The website presents a professional and consistent brand image with clear contact information and certifications, positioning the company as a trustworthy small business in the transportation sector. Technically, the website uses a modern JavaScript stack including jQuery, Fancybox, Swiper, and Plupload, with HTTPS enforced and Google reCAPTCHA integrated for form security. The site is mobile optimized and provides a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are evident, and security headers are not detected, indicating room for improvement in security hardening. From a security perspective, the site demonstrates good baseline practices such as HTTPS and spam protection on forms but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data due to query limits restricts domain registration verification, but the visible business indicators and certifications support legitimacy. Overall, the security posture is moderate with recommendations to enhance header security and transparency. The overall risk assessment is low to moderate, with no critical vulnerabilities detected. Strategic recommendations include implementing security headers, publishing security and incident response policies, improving accessibility, and adding vulnerability disclosure information to strengthen trust and compliance.

Amber Tours is a well-established Destination Management Company operating primarily in the Baltic States and neighboring countries. The company offers a range of travel services including tours, MICE, and luxury travel, targeting professional travel planners and organizations. The website reflects a medium-sized business with a good market position as one of the top incoming tour operators in Lithuania. Technically, the website uses a modern JavaScript stack with libraries such as jQuery, Swiper, and Fancybox, and employs HTTPS with Google reCAPTCHA for form security. Privacy and cookie policies are implemented with user consent mechanisms, indicating a reasonable level of privacy compliance. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details. Overall, the website is professional, user-friendly, and secure with minor areas for improvement in security headers and explicit security policies.

V

Vilniaus teatras „LĖLĖ“

teatraslele.lt

52

Vilniaus teatras „Lėlė“ is a Lithuanian puppet theatre institution providing theatrical performances, educational programs, and cultural events primarily targeting families, children, youth, and adults interested in puppetry arts. The website reflects a well-established cultural entity with a history of over 67 seasons, offering ticket sales, venue rental, and gift vouchers. The site is professionally designed with clear navigation and bilingual support (Lithuanian and English). Technically, the website uses a modern JavaScript stack including jQuery, Swiper, Fancybox, and other libraries, with a custom CMS implied. The site is mobile-optimized, accessible, and includes SEO best practices. Performance is moderate, with no major technical issues detected. Cookie consent and privacy policies are implemented, indicating GDPR compliance. From a security perspective, HTTPS is enforced, forms use Google ReCaptcha to prevent spam, and cookie consent mechanisms are in place. However, no explicit security policy or incident response information is published, and no advanced HTTP security headers were detected in the provided data. WHOIS data is unavailable due to query limits, limiting domain trust analysis. Overall, the website presents a trustworthy and professional cultural institution with good digital maturity. Strategic improvements include publishing security policies, incident response contacts, and enhancing HTTP security headers to strengthen security posture and compliance.

TONACIJA operates as a distributor and retailer of Rubio Monocoat branded wood care and protection products in Lithuania. The company offers a range of products including wood oils, parquet adhesives, and maintenance solutions targeting both consumers and professionals interested in high-quality, environmentally friendly wood protection. The website demonstrates a mature digital presence with detailed product information, project showcases, and active social media engagement. Technically, the site employs modern JavaScript libraries such as jQuery, Swiper.js, and Fancybox, and integrates Google ReCaptcha for form security. The site is mobile optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and spam protection, though security headers could be improved. WHOIS data is unavailable due to query limits, but the website content and contact details support legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy standards.

Foodlevel is a Lithuanian-based company specializing in the supply and distribution of frozen, fresh, smoked, canned, culinary, and grocery food products primarily targeting the horeca and retail sectors within Lithuania. The company offers logistics and delivery services nationwide, positioning itself as a regional supplier with a focus on quality and customer service. The website content is professionally presented in Lithuanian with an English language option, indicating a focus on local and possibly international business clients. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, Fancybox, and other libraries to provide a responsive and interactive user experience. The site is mobile-optimized and includes SEO best practices such as meta tags and Open Graph data. Cookie consent and privacy policies are implemented in compliance with GDPR, and Google Analytics is used for traffic analysis. However, no explicit CMS or hosting provider information is discernible. From a security perspective, the site uses HTTPS and includes Google ReCaptcha on forms to mitigate spam. Cookie consent mechanisms are in place, but security headers are not explicitly detected, and no public security or incident response policies are found. The WHOIS data is not publicly available due to EURid privacy restrictions, but the website's professional presentation and contact details support its legitimacy. No critical vulnerabilities or exposed sensitive data were identified. Overall, Foodlevel presents a credible and professional online presence suitable for its business model. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance standing.

AVL Baltic is a Lithuania-based company specializing in professional audio, video, and lighting equipment and solutions for business and professional markets. Their offerings include a wide range of AV products such as audio streaming devices, professional speakers, video projectors, and lighting systems tailored for commercial, educational, and entertainment environments. The company targets AV integrators, businesses, and event organizers seeking high-quality AV solutions. The website demonstrates a moderate level of digital maturity with a modern tech stack and responsive design, facilitating a good user experience. Security posture is adequate with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. WHOIS data is privacy protected as per EURid policy, which is typical for .eu domains, but this reduces transparency. Overall, the website is professional and trustworthy with clear contact information and privacy compliance.

B

Brigoto

brigoto.lt

48

Brigoto is a Lithuanian e-commerce retailer specializing in modern, high-quality lighting fixtures including LED lamps, torches, and table lamps. The website targets consumers and businesses in Lithuania seeking stylish and functional lighting solutions. The business operates primarily online with a clear product catalog and active social media presence on Facebook and Instagram. The company emphasizes quality products sourced from reliable European manufacturers and offers free shipping over a certain order value and a 14-day return guarantee. Technically, the website employs a modern JavaScript stack including jQuery, Swiper, Fancybox, and integrates Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized with good navigation and SEO practices. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented with GDPR compliance in mind. However, no explicit security policy or incident response contacts are published, and WHOIS data is unavailable due to privacy protection and query limits, which slightly limits trust assessment. Overall, the site presents a professional and trustworthy front for a small retail business in Lithuania.

Procolore is a Lithuanian manufacturing company specializing in paints, wood impregnations, fillers, decorative plasters, adhesives, varnishes, and sealants for home renovation. With over 30 years of experience and a production volume exceeding 1500 tons annually, the company holds a strong position in the Lithuanian market. Their product range targets homeowners and construction professionals, supported by an e-commerce platform for direct sales. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options. Technically, the site uses modern JavaScript libraries and enforces HTTPS with Google reCAPTCHA for form security. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy page. However, WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Security headers are not evident, and no explicit security or incident response policies are published, indicating room for improvement in security posture. Overall, the site is trustworthy and functional but would benefit from enhanced security transparency and WHOIS data availability.

K

Koyo Bearings Europe

koyo.eu

40

Koyo Bearings Europe, a brand under the JTEKT Group, specializes in the engineering and manufacturing of bearings ranging from miniature to super large sizes. The company targets industrial sectors including aerospace, automotive, agriculture, construction, electrical, and wind turbine manufacturing. Their business model focuses on manufacturing high-quality bearings and distributing them through a European network and e-commerce platforms. The website reflects a mature digital presence with a professional design, structured navigation, and extensive content including a rich news archive dating back over a decade. Technically, the site uses Joomla CMS with modern JavaScript libraries and Google Analytics for user tracking. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the domain registration and website content are consistent and indicate a legitimate and established business.

T

TIPSA

tip-sa.com

65

TIPSA is a well-established logistics and urgent parcel delivery company operating primarily in Spain and Portugal, offering a wide range of services including express deliveries, healthcare logistics, eCommerce specialized shipping, and international transport. The website is professionally designed using Drupal CMS, with modern technologies and good mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place. However, the WHOIS data is missing or inconsistent, which raises concerns about domain registration legitimacy. Overall, the website presents a trustworthy and professional front but requires verification of domain registration details to fully confirm legitimacy.

Fizinių ir technologijos mokslų centras (FTMC) is the largest scientific research institute in Lithuania, specializing in physics, chemistry, and technology research and development. The organization focuses on advanced scientific research in laser technologies, optoelectronics, nuclear physics, organic chemistry, bio- and nanotechnologies, electrochemical materials science, functional materials, and electronics. FTMC also provides doctoral studies and innovation services to businesses and society. The website is professionally designed, content-rich, and well-structured, targeting researchers, students, and industry partners. Technically, the site uses modern JavaScript libraries and Google services for analytics and security, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA, but lacks explicit security policies and security headers. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, FTMC presents a credible and authoritative presence in its sector.

C

Capital PRO

capitalpro.lt

39

Capital PRO is a Lithuanian real estate brokerage company specializing in residential and commercial property sales and rentals. The company positions itself as a responsible and professional broker with a strong local presence in Vilnius, supported by a team of experienced brokers. The website is well-designed, content-rich, and provides clear contact information and client testimonials, enhancing trust and credibility. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Google Maps API, but lacks visible security headers and privacy policies, which are critical for compliance and security. The WHOIS data is unavailable due to query limits, which limits domain legitimacy verification. Overall, the site demonstrates good business professionalism but requires improvements in privacy compliance and security posture.