Security Directory

E

Eduten Ltd.

eduten.com

65

Eduten Ltd. operates a leading digital math learning platform originating from Finland, combining Finnish educational excellence with gamification and AI technologies. The platform targets K-12 students, teachers, school leaders, and parents worldwide, offering a comprehensive content library and AI-driven learning analytics. It holds a strong market position supported by over 15 years of university research and international awards such as the UNESCO ICT for education prize and UNICEF special edtech award. Technically, the website employs modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly digital education platform.

B

BOX Exchange LLC

boxexchange.com

56

BOX Exchange LLC operates as a national securities exchange registered with the SEC, focusing on equity options trading through its BOX Options Market facility. The company positions itself as a regulated, transparent, and efficient market operator serving financial market participants. The website content reflects a professional and consistent brand image aligned with its regulatory role. Technically, the site is built on WordPress with modern libraries like jQuery and uses Cloudflare DNS services, indicating a standard but solid infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Contact information is not explicitly provided, which may impact user trust and compliance. Overall, the site is credible and functional but could benefit from enhanced security and privacy features.

MIQ Logistics is a multinational freight forwarding and logistics company recently acquired by Noatum Logistics. The website content is minimal and primarily serves as a redirect and informational portal linking to official documents and the parent company's website. The business operates in the transportation sector with a large enterprise profile and a history dating back to 1999. Technically, the website uses basic web technologies such as jQuery and Bootstrap but lacks modern CMS or advanced SEO and accessibility features. Security posture is weak with no DNSSEC, no security headers, and no visible HTTPS enforcement details. Privacy compliance is poor with no privacy or cookie policies found. Contact information is limited to a single email and a whistleblowing portal link, with no phone numbers or physical addresses provided. Overall, the website appears functional but minimal, reflecting a transitional state post-acquisition.

The Options Clearing Corporation (OCC) operates as a central counterparty clearing house based in Chicago, specializing in equity derivatives clearing and settlement services for the U.S. listed-options markets. It holds a unique market position as the sole entity clearing and settling every listed-options trade in the country, serving 16 exchanges. The website reflects a mature, large-scale financial institution with a focus on secure market operations, risk management, and member services. Technically, the website employs a modern technology stack including jQuery, Axios, Chart.js, Moment.js, Google Analytics, Google Tag Manager, and Microsoft Application Insights for telemetry. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure analytics scripts, but lacks explicit published security policies, incident response contacts, and vulnerability disclosure mechanisms. No security headers were explicitly detected in the provided data, suggesting room for improvement. Privacy compliance is good with clear privacy and cookie policies, though no active cookie consent mechanism was found. Overall, the website presents a professional and trustworthy front for a critical financial market infrastructure entity. The absence of WHOIS data is a minor concern but likely due to query limitations or privacy services. Strategic recommendations include publishing formal security and incident response policies, implementing cookie consent mechanisms, and enhancing security headers to strengthen the security posture and compliance.

K

Kingdom Technologies Ltd.

kingdom.garden

57

Kingdom Technologies Ltd. is a UK-based technology company specializing in the design and manufacture of robotic lawn mowers tailored for large commercial terrains. Their product leverages advanced sensor fusion technology to enable mowing in challenging environments such as shaded areas, and offers remote operation capabilities via a dedicated app. The company positions itself competitively in the commercial robotic lawn mower market, emphasizing cost efficiency and enhanced safety features. The website infrastructure is built on Webflow, utilizing modern web technologies including Google Fonts and jQuery, and is hosted likely via Webflow's platform with Cloudflare CDN integration. The site demonstrates good performance, mobile optimization, and basic accessibility features. Security measures include HTTPS enforcement and the use of Cloudflare Turnstile captcha on forms, indicating awareness of bot mitigation and form abuse prevention. From a security perspective, while HTTPS is properly implemented, the site lacks explicit security headers and published privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data for the domain is a notable concern, reducing transparency and trustworthiness. No incident response or vulnerability disclosure information is provided, which could be improved to enhance security posture. Overall, Kingdom Technologies Ltd. presents a professional and focused digital presence with solid technical foundations but would benefit from enhanced transparency, security policies, and WHOIS data availability to improve trust and compliance.

K

Kimbi.lv mājas lapa ir slēgta.

kimbi.lv

51

Kimbi.lv is a Latvian financial services website that is currently closed, as indicated by the website content. The site serves primarily as a notice redirecting customers to Vivus.lv for customer service inquiries, suggesting a business consolidation or closure. The website is built on the Webflow platform and hosted on AWS infrastructure, using standard web technologies such as jQuery and Google Fonts. The digital presence is minimal, with no interactive forms or detailed business information available. Security posture is basic with no advanced security headers or policies visible, and privacy compliance is lacking due to absence of privacy or cookie policies. Overall, the site functions as a placeholder with limited content and minimal user engagement features.

V

Venn Apps Ltd.

vennapps.com

66

Venn Apps Ltd. is a UK-based company specializing in converting Shopify stores into custom-branded iOS and Android mobile applications. Their service model includes end-to-end design, development, and ongoing app management, targeting Shopify store owners who want a unique mobile presence. The company positions itself as a niche provider with a strong focus on customization, integrations, and global market readiness. The website is professionally designed, mobile-optimized, and rich in content, including testimonials and case studies that enhance trust. Technically, the website leverages modern web technologies including Webflow CMS, HubSpot for forms and analytics, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Intercom for customer engagement. The site is hosted on Webflow's CDN, ensuring fast performance and good accessibility. SEO and mobile responsiveness are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and employs standard marketing and analytics scripts securely. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no public security policy or incident response information is available. The absence of WHOIS registration data is a notable concern, as it reduces domain trustworthiness despite the professional web presence. Overall, Venn Apps presents a credible and professional front for its e-commerce mobile app services, but should address domain registration transparency and enhance security disclosures to improve trust and compliance.

I

Icebreaker.vc

icebreaker.vc

62

Icebreaker.vc is a Nordic early-stage venture capital firm focused on supporting over 100 startup teams from idea to seed stage and beyond, primarily in Estonia, Finland, and Sweden. Founded in 2017, the firm invests up to 1.5 million euros in initial funding rounds, positioning itself as a key player in the regional startup ecosystem. The website reflects a professional and consistent brand image, targeting startup founders and investors with clear calls to action such as applying for funding and investing with the firm. Technically, the website is built on the Webflow platform, utilizing modern web technologies including GSAP for animations and jQuery for DOM manipulation. Hosting is via Amazon Cloudfront CDN, ensuring fast load times and good mobile responsiveness. SEO and accessibility are adequately addressed, though accessibility could be improved further. Analytics are implemented using Umami, a privacy-focused analytics tool, indicating a moderate approach to user tracking. From a security perspective, the site enforces HTTPS with excellent SSL configuration and does not expose sensitive data or use vulnerable libraries. However, it lacks several security headers that could enhance protection against common web attacks. There is no visible cookie consent mechanism, which is a compliance gap given the EU funding and GDPR applicability. Incident response contact details and a vulnerability disclosure policy are also absent, limiting transparency in security management. Overall, Icebreaker.vc presents a trustworthy and credible online presence with a solid technical foundation and good business clarity. To further strengthen its security posture and compliance, the firm should implement security headers, add cookie consent, and publish clear incident response and vulnerability disclosure information.

Cinderella Wine operates as a specialized e-commerce retailer focusing on limited-time wine deals, typically offering deeply discounted wines for 24 hours only. It is part of the Wine Library network, a recognized wine retail brand in the United States. The website targets wine consumers seeking value deals and uses a flash sale business model to create urgency and exclusivity. The company leverages social media and email subscriptions to engage customers and alert them to new offers. Technically, the site is built on WordPress with common web technologies such as jQuery and integrates Google Analytics and Google reCAPTCHA for tracking and spam prevention. Hosting and DNS services are provided via Cloudflare, enhancing performance and security. Security posture is moderate, with HTTPS enforced and domain registrar locks enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the site presents a professional and trustworthy retail experience but could improve in security and privacy transparency.

A

Auto & Service OÜ

auto-service.ee

42

Auto & Service OÜ is a small automotive service company based in Haapsalu, Estonia, operating since 2003. The company offers a range of automotive services including car repair, tire services, used car sales, and hand car wash. Since 2023, it has been the official Toyota service center in the region, providing factory-trained technicians and original Toyota parts, enhancing its market position and trustworthiness. The website is built on WordPress and uses common plugins and Google Analytics for tracking. It is mobile optimized and provides a basic GDPR-compliant cookie consent mechanism and privacy policy. However, no explicit contact emails or phone numbers are found on the main page, which could be improved for better customer engagement.

V

Vana-Võidu Autokeskus OÜ

vvautokeskus.ee

40

Vana-Võidu Autokeskus OÜ is a small Estonian automotive service company established in 1996, specializing in car repair, maintenance, tire services, and trailer repair and sales. The company operates locally near Viljandi and targets vehicle owners requiring these services. The website is built on the Voog CMS platform, leveraging modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized with good design and navigation, providing clear business and contact information. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in privacy and security transparency.

W

WhosOn

whoson.com

41

WhosOn is a UK-based technology company specializing in advanced live chat and AI-driven chatbot solutions tailored for enterprise businesses. Established in 2003, the company offers a comprehensive suite of services including live chat software, AI chatbots, help desk integration, analytics, and flexible deployment options such as on-premises and cloud hosting. Their market position is strong within the UK, supported by long-term operation and recognized certifications. The website reflects a professional and consistent brand image targeting large-scale, regulated industries requiring secure and scalable communication tools. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Blazor WebAssembly, and FontAwesome, hosted on AWS infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and cookie consent mechanisms. Analytics are implemented via Statcounter and Google Tag Manager, indicating moderate user tracking. From a security perspective, the company demonstrates a solid posture with HTTPS enforcement, encryption, intrusion prevention, and data masking. Certifications such as Cyber Essentials and FSQS further reinforce trust. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for enhancement. Incident response contact details and vulnerability disclosure policies are not publicly visible, which could be improved to strengthen transparency and readiness. Overall, WhosOn presents a credible, secure, and professional online presence with minor gaps in privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, implementing a visible cookie consent mechanism, publishing incident response contacts, and enhancing security headers to elevate trust and compliance.

A

AS Latvijas Maiznieks

maiznieks.com

63

AS Latvijas Maiznieks is a well-established Latvian bakery company founded in 2003, specializing in a wide range of bakery and confectionery products including breads, cakes, frozen bakery goods, and snacks. The company targets retail consumers as well as institutional clients such as schools and kindergartens. Their website reflects a mature digital presence with detailed product catalogs, news updates, and social media integration, supporting their market position as a leading bakery brand in Latvia. Technically, the website uses standard web technologies including jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and basic security headers, though improvements such as DNSSEC and advanced security headers are recommended. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, indicating awareness of GDPR requirements. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

L

Luthor, Inc.

luthor.ai

65

Luthor, Inc. is a fintech company providing AI-powered fractional Chief Compliance Officer (CCO) services tailored for Registered Investment Advisors (RIAs) and broker-dealers. Their platform combines human expertise with automated workflows to help financial firms meet SEC and FINRA compliance obligations efficiently. Positioned as a modern RegTech solution, Luthor is backed by Y Combinator and trusted by firms managing over $6.8 billion in assets under management. Key services include compliance calendar management, automated filings, marketing compliance monitoring, and mock SEC exam preparation. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as Google Fonts, jQuery, and multiple third-party integrations for analytics and scheduling (Google Analytics, Apollo.io, SavvyCal, Cal.com, Koala). The site is well-optimized for performance, mobile responsiveness, and accessibility, with fast loading times and clear navigation. From a security perspective, the site enforces HTTPS with excellent SSL configuration and integrates several security best practices. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, and there is no visible cookie consent mechanism, which impacts privacy compliance. The company is undergoing SOC 2 Type II certification, indicating a commitment to security and data protection. Overall, Luthor presents a professional, trustworthy online presence with strong business credibility and technical maturity. The lack of public WHOIS data is mitigated by other trust signals. Recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and publishing incident response contact information to further strengthen security posture and regulatory compliance.

D

Dili

dili.ai

68

Dili.ai is a specialized technology company offering a SaaS platform and full-service solutions for prevailing wage and apprenticeship compliance, primarily targeting energy projects. The company positions itself as a leading compliance solution, supported by reputable investors such as Allianz and Y Combinator. Their platform integrates real-time wage validation, automated tracking, and audit-ready reporting to simplify compliance and reduce penalties. The website is professionally designed using modern Webflow technology, with good mobile optimization and clear navigation. However, direct contact information is limited to a contact form, and no phone numbers or emails are publicly listed. Privacy and terms of service pages exist, but cookie consent mechanisms and explicit security policies are absent.

E

EyeVi Technologies

eyevi.tech

64

EyeVi Technologies is a small Estonian company founded in 2020 specializing in AI-powered geospatial data production for road infrastructure management. Their innovative platform combines car-mounted hardware, automated AI data processing, and a web application for data verification and integration, targeting road survey agencies, infrastructure operators, and consultants. The website is professionally designed, mobile-optimized, and provides clear contact information and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site leverages modern frameworks like Webflow, Google Tag Manager, and Facebook Pixel, ensuring good performance and SEO. Security posture is strong with HTTPS and consent-based tracking, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

Rotary Club Prague International

rotarypragueinternational.org

66

Rotary Club Prague International is a well-established non-profit organization serving the English-speaking community in Prague with a focus on charitable activities, community service, and cultural exchange. The club maintains a professional and content-rich website that highlights its events, membership information, and community projects. The site leverages modern web technologies and is hosted on a reputable platform with Azure DNS services. Privacy and cookie policies are clearly presented with an active consent mechanism, reflecting good compliance with GDPR standards. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, although improvements in security headers and DNSSEC could enhance protection. Overall, the website presents a trustworthy and professional image suitable for its non-profit mission.

X

xMoney

utrust.com

72

xMoney is a financial technology company offering a comprehensive payment ecosystem that empowers businesses to accept global payments, manage finances, and issue branded cards. The platform targets merchants and enterprises across Europe and beyond, providing services such as payments, recurring billing, marketplaces, invoicing, and crypto payment acceptance. The company positions itself as a licensed and compliant entity with certifications including PCI DSS Level 1 and MiCA compliance, regulated by the Bank of Romania. The website reflects a mature digital presence with professional design, clear navigation, and extensive product information. Technically, xMoney leverages modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, and Bing Ads for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security practices are strong, with HTTPS enforced, advanced fraud prevention powered by AI, and compliance with payment security standards. However, explicit security headers and incident response disclosures could be improved. The security posture is robust but slightly diminished by the absence of WHOIS registration data, which raises questions about domain legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, xMoney presents a trustworthy and professional payment platform with strong technical and security foundations. Strategic recommendations include enhancing visible security headers, publishing vulnerability disclosure and incident response information, and clarifying domain registration details to improve trust and compliance transparency.

M

MM Grupp

upi.ee

50

MM Grupp is an Estonian capital-based investment company focusing on broad cross-sector investments aimed at societal development. Established in 2010, it manages a portfolio of over 130 companies and reports significant turnover and employee numbers, positioning itself as a large player in the Estonian investment landscape. The website reflects a professional and consistent brand image with good content quality and clear business messaging. Technically, the site uses the Voog CMS platform, includes modern technologies like jQuery and Google Tag Manager, and is hosted by a reputable Estonian provider. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve transparency and security practices.

K

Kipwise Inc.

kipwise.com

66

Kipwise Inc. operates a SaaS platform focused on internal company wikis, knowledge management, and team enablement with AI-powered features such as knowledge suggestions and Slack auto-answering bots. The company targets a broad audience including remote teams, customer support, sales, marketing, HR, and product teams, positioning itself as a trusted solution with enterprise-grade support and integrations. Technically, the website is built on Webflow CMS, leveraging modern analytics and tracking tools like Segment, Google Analytics, Mixpanel, Amplitude, and FullStory, hosted via Cloudflare and AWS Cloudfront, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and domain protections in place, though improvements are recommended such as enabling DNSSEC and publishing formal security policies. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, content-rich, and trustworthy, with minor gaps in privacy and security transparency.

F

Finesta

finesta.ee

62

Finesta is a well-established European staffing and workforce solutions provider specializing in cross-border staffing across multiple industries including manufacturing, IT, logistics, hospitality, and cleaning. The company offers a comprehensive range of services such as workforce rental, recruitment, remote work facilitation, relocation, and advisory services. Their market position is strong, supported by over 15 years of experience and a client base including major corporations like ABB and Ericsson. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and rich content tailored to their target audience. Technically, the site is built on Webflow with modern analytics and marketing integrations, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response details are not evident. The absence of WHOIS data for the domain is a notable concern, suggesting either privacy protection or registration issues, which slightly impacts trustworthiness. Overall, Finesta presents a credible and professional business front with room for improvement in transparency around security policies and domain registration clarity.

A

ARTIFY OÜ

artify.ee

51

Artify OÜ is an Estonian software design and development studio founded in 2009, specializing in creating digital products for a diverse client base including logistics, finance, travel, and legal sectors. The company positions itself as a hands-on, agile partner delivering end-to-end solutions from investigation and design to build and improvement. Their website reflects a mature digital presence with professional design, clear navigation, and detailed service offerings. Technically, the site leverages modern technologies such as Webflow CMS, jQuery, and Google Tag Manager, hosted on a reliable CDN infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and published security policies indicates room for improvement. Privacy compliance is lacking due to missing privacy and cookie policies, which is a critical gap for GDPR adherence. Overall, the website demonstrates high business credibility and trustworthiness but should address compliance and security best practices to enhance its risk profile.

L

LÜNK arhitektid

lynk.ee

52

LÜNK arhitektid is an Estonian architectural firm showcasing a professional portfolio of architectural projects. The website serves primarily as a portfolio and informational site targeting clients interested in architectural design services. The technical infrastructure is based on the Webflow platform, utilizing modern web fonts and standard JavaScript libraries such as jQuery. The site is moderately optimized for performance and mobile devices, with a clean and consistent design. However, there is a lack of explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is basic, with no detected security headers or incident response information, and no HTTPS verification from the provided data. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

R

Rödl & Partner

roedl.pl

65

Rödl & Partner is a large international professional services firm operating in Poland and globally, offering audit, legal, tax, consulting, and technology advisory services. The company has a strong market presence with offices in 50 countries and approximately 6000 employees. The website is built on Microsoft SharePoint and uses modern web technologies including jQuery and Matomo analytics. It provides comprehensive content, clear navigation, and multilingual support. Security posture is good with HTTPS enforced and privacy compliance evident through cookie consent and privacy policies. However, the absence of WHOIS data reduces domain registration trustworthiness, though the brand and content strongly indicate legitimacy. No WAF or blocking mechanisms were detected, allowing full content access.

X

xChange AS

changeinvest.com

72

Change Invest operates as a fintech investment platform offering a unified app for investing in cryptocurrencies, trading stocks, indices, commodities, and CFDs with leverage. The company targets retail investors primarily within the European Economic Area, emphasizing low fees, fast deposits, and regulatory compliance under Estonian and Dutch authorities. The platform boasts over 125,000 verified users and a broad asset offering, positioning itself as a competitive player in the EU fintech market. Technically, the website is built on Webflow CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Segment Analytics, and Adjust SDK. The site is mobile-optimized, fast-loading, and well-structured, providing an excellent user experience. However, some security best practices like explicit security headers are missing, and no incident response or vulnerability disclosure information is publicly available. From a security perspective, the platform enforces HTTPS, uses cold wallets for crypto custody, and provides public proof of reserves, indicating a mature security posture. Cookie consent mechanisms are implemented with opt-in features, supporting GDPR compliance. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly reduces trustworthiness. Overall, Change Invest presents a professional, secure, and compliant fintech service with strong market positioning in the EU. Strategic improvements in transparency around security policies and WHOIS data would enhance trust and compliance further.

S

Silberauto AS

silberauto.ee

53

Silberauto AS is an established Estonian parent company operating in the automotive and transportation sectors, with a focus on autonomous vehicle technology, vehicle construction, and automotive sales software. The company has a history dating back to 1993 and manages several subsidiaries specializing in various automotive-related fields. The website reflects a medium-sized enterprise with a clear business model centered on innovation in automotive technology and related services. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Weglot for multilingual support. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks some security headers and formal security policies. Privacy compliance is limited, with no privacy policy or cookie consent mechanism explicitly implemented. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

D

Digitalist

ixonos.com

60

Digitalist Finland is a reputable digital transformation consultancy and technology solutions provider focused on integrating customer experience, design, and technology to future-proof businesses. Their market position is strong within the Nordic region, supported by a medium-sized expert team and a 100% client retention rate. The company offers a broad range of services including AI integration, data-driven development, e-commerce, and digital product development. Technically, the website is built on Webflow with modern analytics and consent management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not published. Overall, the site reflects a professional and trustworthy business with strong digital maturity.

B

Big Penny

trumansbeer.co.uk

53

Big Penny is a hospitality operator based in Walthamstow, London, managing large community venues that offer food, drink, and live events. The company emphasizes inclusivity and community connection, operating flagship venues such as Big Penny Social and Flukes. The website is professionally designed using Webflow CMS and integrates modern technologies including Google Analytics and cookie consent mechanisms. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and formal security policies. Privacy compliance is basic with a privacy policy and cookie banner present but no GDPR explicit statements or data retention policies. Business credibility is strong with clear contact information and consistent branding. Overall, the website is functional and trustworthy for its hospitality business purpose.

N

Nordkalk

nordkalk.com

56

Nordkalk is a leading limestone supplier in Northern Europe, providing essential raw materials and solutions for industries such as agriculture, environmental care, steel, pulp and paper, and construction. The company emphasizes sustainability and circular economy principles, aiming to reduce carbon footprint and maximize resource utilization. Owned by UK-based SigmaRoc PLC, Nordkalk operates multiple localized domains serving different European markets. The website is built on WordPress with modern technologies and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data for the domain www.nordkalk.com raises concerns about domain registration legitimacy, though the website content and branding appear professional and trustworthy. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site reflects a mature business with a strong sustainability focus but would benefit from enhanced transparency in domain registration and security policies.

W

White Mammoth

whitemammoth.com

48

White Mammoth is a specialized visualization company focusing on architectural 3D images, animations, drone photography, and virtual reality content. Their website showcases a portfolio of exterior and interior projects, targeting architects, real estate developers, and design professionals. The company positions itself as a niche service provider in the real estate visualization market, leveraging modern web technologies such as Bootstrap and jQuery to deliver a responsive and visually appealing user experience. Technically, the website employs standard frontend libraries and Google Analytics for tracking. While the site is mobile-optimized and well-structured, it lacks advanced security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency, although the active social media presence partially offsets this risk. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but improvements are needed in implementing security headers and formalizing privacy compliance. The overall risk is moderate, with recommendations focusing on enhancing security posture, adding privacy documentation, and clarifying domain registration details to improve trustworthiness. Strategically, White Mammoth should prioritize compliance and transparency to strengthen its market position and reassure clients about data protection and business legitimacy.

I

Innokas

innokasmedical.fi

65

Innokas is a Nordic-based company specializing in contract manufacturing, product design and development, software services, and quality assurance and regulatory affairs primarily for smart electromechanical devices and software solutions in the healthcare and high-tech sectors. The company positions itself as a trusted partner with over 30 years of experience, serving a diverse client base from startups to established technology firms. Their business model focuses on providing end-to-end technology services throughout the product lifecycle, emphasizing sustainability and innovation. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google Tag Manager, and Typekit fonts. The site is mobile-optimized with good SEO practices and moderate performance. Integration with HubSpot forms indicates a mature approach to lead capture and marketing automation. However, some accessibility features are basic, and security headers are not explicitly detected. From a security perspective, the site employs HTTPS with a strong SSL configuration and does not expose sensitive data in its HTML content. The presence of ISO 13485 certification and EcoVadis sustainability rating enhances trustworthiness. Nonetheless, the absence of explicit security policies, incident response information, and cookie consent mechanisms suggests areas for improvement in compliance and transparency. Overall, the website reflects a professional and credible business with a solid market position in the Nordic healthcare technology sector. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, publishing security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

P

Platformance

platformance.io

64

Platformance is a technology-driven advertising platform specializing in programmatic media, affiliate marketing, and creator-led content to help brands reach and acquire high-quality customers. The company positions itself as a partner for advertisers seeking measurable business outcomes through outcome-based pricing models and a curated network of trusted suppliers and publishers. The website demonstrates a professional and consistent brand presence with a focus on digital marketing solutions tailored for various business goals including online sales growth, engagement, and app installs. Technically, the site is built on Webflow CMS with modern JavaScript libraries and tracking tools such as Google Tag Manager and LinkedIn Insight, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though improvements could be made by adding security headers and cookie consent mechanisms. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility in the Ad-Tech sector.

N

Nadační fond Czechitas Báry Bühnové

nadacnifondczechitas.cz

51

Nadační fond Czechitas Báry Bühnové is a Czech non-profit foundation dedicated to supporting women and disadvantaged groups in accessing IT education and career opportunities. The foundation provides scholarships and funding to help overcome barriers in the IT sector, aiming for systemic change in IT education across all ages. The website is professionally designed, targeting Czech-speaking audiences, and presents a clear mission with calls to action for donors and applicants. The foundation collaborates with reputable partners and uses established donation platforms to facilitate contributions. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts and jQuery. It is hosted on Webflow's infrastructure, ensuring reliable performance and mobile responsiveness. The site includes a cookie consent mechanism compliant with GDPR, although explicit privacy and terms of service pages are limited or linked externally. No blocking or WAF mechanisms were detected, and SSL is properly configured, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks some security headers and formal security policies. The absence of WHOIS data for the domain is a concern for transparency and trust, although the website content and partner references support legitimacy. No critical vulnerabilities or exposed sensitive data were found. Overall, the site presents a moderate to good security posture with room for improvement in policy disclosures and technical headers. The overall risk assessment is moderate with recommendations to improve domain registration transparency, add security headers, and publish formal security and privacy policies. These steps will enhance trustworthiness and compliance, supporting the foundation's mission and stakeholder confidence.

E

Euroapskaita, UAB

euroapskaita.com

41

Euroapskaita, UAB is a Lithuanian small business specializing in cloud-based accounting services using the B1.lt software platform. The company offers bookkeeping, tax declaration, and integration services for e-commerce and POS systems, targeting small and medium-sized enterprises. Their website is professionally designed using WordPress and the OnePress theme, with modern technologies such as Google Analytics and Bootstrap. Hosting is inferred to be on Amazon servers, aligning with their stated use of cloud infrastructure. Security posture is generally good with HTTPS and SSL in place, but lacks published privacy and cookie policies, which impacts compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content is rich and accessible. Overall, the business appears credible but would benefit from improved transparency and compliance documentation.

T

TA Digital Group

tadigitalgroup.com

60

TA Digital Group is a specialized digital infrastructure company focused on delivering scalable data center solutions for hyperscale and enterprise clients. As an affiliate of TA Realty, it leverages over 40 years of real estate expertise to provide tailored services including build-to-suit, turnkey, powered shell, and fee development. The company targets high-growth sectors such as hyperscalers, HPC, enterprise businesses, and emerging technology companies, positioning itself as a key player in the digital real estate market. Technically, the website is built on modern platforms like Webflow, utilizing Google reCAPTCHA and Cloudflare Turnstile for bot mitigation, and employs responsive design with good SEO and accessibility practices. The site is hosted on a reliable CDN infrastructure, ensuring fast performance and mobile optimization. From a security perspective, the site enforces HTTPS and uses CAPTCHA mechanisms to protect forms. However, it lacks explicit HTTP security headers and does not provide public incident response or vulnerability disclosure information. The absence of WHOIS domain registration data is a notable gap that impacts trust assessment. Overall, the website presents a professional and trustworthy front with strong business credibility and technical maturity. Strategic improvements in security headers, incident response transparency, and domain registration visibility would enhance its security posture and trustworthiness.

Wortelboer is a well-established family business specializing in the manufacturing and supply of anchors, anchor chains, and connecting parts for the maritime industry, including commercial shipping, yachting, and offshore sectors. With over 70 years of experience and a strong presence in Rotterdam, the company offers worldwide delivery and maintains a significant stock to ensure fast and reliable service. The website reflects a professional and consistent brand image, supported by ISO certifications and class certificates from major classification societies, reinforcing its market credibility. Technically, the website employs modern web technologies such as JWPlayer for multimedia, Google Tag Manager and Analytics for tracking, and reCAPTCHA for form security. The site is mobile-optimized with good navigation and SEO practices, although accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms, but lacks explicit security headers and public security policies or incident response information. No vulnerabilities or suspicious content were detected. Privacy compliance is addressed with a cookie consent banner and privacy policy, though GDPR compliance indicators could be more explicit. Overall, Wortelboer presents a trustworthy and professional online presence with a solid business foundation. Strategic improvements in security policies, accessibility, and transparency would further enhance its risk posture and user trust.

U

Ulmatec

ulmatec.no

68

Ulmatec is a Norwegian maritime solutions company specializing in the design and manufacture of handling equipment and systems for maritime operations. Their product portfolio includes walk-to-work gangways, launch and recovery systems (LARS), boat handling solutions, cruise vessel boarding docks, and various specialized equipment such as electrical winches and watertight doors. The company emphasizes safety, quality, sustainability, and integration capabilities, supported by a 24/7 worldwide service offering. The website reflects a professional and modern digital presence, leveraging Webflow CMS and advanced web technologies for a responsive and engaging user experience. Analytics and marketing tools such as Google Tag Manager and Microsoft Clarity are employed to monitor and optimize site performance and user engagement. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, although explicit security headers and incident response information are absent. The lack of WHOIS data limits domain legitimacy verification, but the website content and business information appear consistent and trustworthy. Overall, Ulmatec demonstrates a solid market position within the maritime transportation sector with a medium-sized business profile and a focus on specialized handling solutions.

P

Poetic

poetic.io

66

Poetic is a specialized digital agency focused on empowering property professionals through tailored website development, personalized digital marketing, and compelling branding services. The company positions itself as a niche provider within the real estate sector, offering a cohesive suite of services that support property success stories from branding to technology integration. The website reflects a professional, modern, and visually appealing digital presence that aligns with its business focus. Technically, the website is built on Webflow CMS and leverages modern JavaScript libraries such as jQuery and GSAP for animations and user experience enhancements. Hosting and security are supported by Cloudflare, including the use of Turnstile captcha for form protection, indicating a mature approach to bot mitigation and user interaction security. The site is mobile-optimized and performs well with good accessibility and SEO practices. From a security perspective, the site uses HTTPS and includes form protection mechanisms but lacks explicit security headers and published privacy or cookie policies. No vulnerability disclosure or security.txt pages are present, which could be improved to enhance transparency and trust. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this business type. Overall, Poetic demonstrates a strong digital maturity and business credibility with minor gaps in privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and implementing a vulnerability disclosure mechanism to further strengthen trust and compliance.

G

Getspace

getspace.lt

43

Getspace is a Lithuanian-based technology company specializing in cloud hosting services including SSD Hosting, WordPress Hosting, VPS, and file cloud storage. The company positions itself as a fast, reliable, and secure hosting provider with features such as 21x faster cloud servers, 100% server uptime, DDoS protection, and free SSL certificates. Their business model is subscription-based targeting businesses and individuals requiring high-performance hosting solutions. The website is professionally designed, multilingual, and integrates CRM tools for customer engagement. Technically, the website is built on WordPress using Elementor and LiteSpeed Cache, ensuring good performance and mobile optimization. Integration with Bitrix24 CRM indicates a mature digital infrastructure for customer relationship management. The site uses HTTPS with a valid SSL certificate and includes some security best practices, although security headers could be improved. From a security perspective, the site enforces HTTPS and advertises DDoS protection, but lacks visible security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is limited as no explicit privacy or cookie policies were found, which could be improved to meet GDPR standards. Overall, Getspace presents a credible and professional hosting service with a solid technical foundation and moderate security posture. Enhancements in privacy compliance and security transparency would strengthen trust and regulatory adherence.

R

Registry Services, LLC

just.tv

40

Just.tv is a Lithuanian media production company specializing in creating original and licensed television content, with a strong market position as a leader in the Lithuanian TV production sector. The website reflects a professional digital presence built on WordPress, utilizing popular plugins such as Yoast SEO and Revolution Slider, and demonstrates good design and user experience. However, the site lacks critical privacy and cookie policies, which impacts GDPR compliance and overall privacy posture. Security practices are moderate, with HTTPS enabled and domain transfer protections in place, but missing DNSSEC and security headers reduce the security maturity. Analytics tools are present but not fully configured, indicating room for improvement in data collection and user tracking transparency. Overall, the site is functional and professional but requires enhancements in privacy compliance and security hardening to meet modern standards.

U

UAB „Vilniaus BDT“

bdt.lt

47

UAB „Vilniaus BDT“ is a Lithuanian company specializing in building demolition, dismantling, drilling, cutting, earthworks, road and site construction, and construction material recycling. With over 20 years of experience, it holds a leading position in the Lithuanian demolition sector, serving clients requiring complex construction and infrastructure services. The website reflects a professional digital presence built on WordPress with modern technologies such as Bootstrap, jQuery, and Google Analytics integration, indicating a moderate to good level of digital maturity. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some security headers and policies are absent. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the company presents a credible and trustworthy business profile with clear contact information and partner affiliations.

U

UAB LS Consult

lsconsult.lt

40

UAB LS Consult is a Lithuanian consulting company specializing in life sciences, pharmaceutical manufacturing, and quality assurance services. Their offerings include audits, validation and qualification, design, consulting, and supply of technological and laboratory equipment, as well as packing materials. The company targets businesses requiring GMP compliance and manufacturing support, positioning itself as a niche provider with a professional online presence. The website is built on WordPress with modern plugins and supports multilingual content in English and Lithuanian. Technical infrastructure is adequate with HTTPS and reCAPTCHA integration, though some security best practices like security headers and incident response information are missing. The absence of WHOIS data limits full trust assessment but the site appears legitimate and professionally maintained. Privacy and cookie policies are not present, indicating a compliance gap.

R

Rödl & Partner

roedl.com

62

Rödl & Partner is a large international professional services firm headquartered in Germany, specializing in legal advisory, tax consulting, audit services, and management and IT consulting. With 116 offices across 50 countries and approximately 6,000 employees, the firm targets Mittelstand shaped world market leaders, offering integrated interdisciplinary services. The website is built on Microsoft SharePoint, featuring a professional design and good navigation, with a focus on content relevant to their global clientele. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Security posture is strong with HTTPS and secure analytics implementation, though explicit security policies and incident response information are not publicly detailed. WHOIS data is unavailable or protected, which slightly reduces trust but the website's professionalism and global presence support legitimacy.

S

Stuart Energy

stuart.energy

60

Stuart Energy is a Lithuania-based company specializing in EV charging management solutions, targeting charge point operators, charging station integrators, and commercial fleet managers. Their offerings include a cloud-based EV charging management platform, hardware such as the STUART Car Charger, and a mobile app for drivers. The company positions itself as innovative, future-proof, and economical, with a focus on scalability and interoperability. Their website reflects a professional and consistent brand image supported by partnerships with notable industry players. Technically, the website is built on Webflow CMS, leveraging modern web fonts, Google Tag Manager, Facebook Pixel, and Weglot for multilingual support. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security-wise, the site uses HTTPS and secure forms but lacks some security headers and published policies, which are recommended for compliance and trust. The WHOIS data is unavailable due to privacy protection and malformed WHOIS responses, which slightly reduces trust but is common for tech companies. No critical security vulnerabilities or suspicious patterns were detected. Overall, the website and business appear legitimate and professionally managed, though improvements in privacy compliance and security transparency are advised.

A

Albrecht JUNG GmbH & Co. KG

jung.lt

67

Albrecht JUNG GmbH & Co. KG operates a professionally designed website focused on electrical switches and smart home systems, targeting Lithuanian customers. The site leverages modern e-commerce technology (Shopware 6) and includes essential digital marketing and performance monitoring tools. Security posture is good with HTTPS and Content Security Policy implemented, though additional security headers could enhance protection. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy detected in the provided content. WHOIS data is unavailable, which slightly impacts trust but the website's professional presentation and alignment with a known brand mitigate concerns. Overall, the site is functional, secure, and credible with room for improvement in privacy transparency and security headers.

G

GAMINTOJŲ IR IMPORTUOTOJŲ ASOCIACIJA „GAMTOS ATEITIS“

gamtosateitis.lt

43

Gamtos Ateitis is a licensed packaging waste management organization based in Lithuania, coordinating packaging waste handling for Lithuanian producers and importers. The organization emphasizes transparency, environmental responsibility, and public education to increase awareness and accountability regarding packaging waste and recycling. The website reflects a professional and modern digital presence built on WordPress, featuring multimedia content and clear navigation. Privacy and cookie compliance are well implemented with a comprehensive policy and consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and formal security policies could enhance protection. WHOIS data is unavailable due to query limits, limiting domain registration verification, but the website content and business information appear consistent and trustworthy.

U

UAB IO projects

ioprojects.lt

61

UAB IO projects is a Lithuanian ICT consulting company specializing in digital transformation and IT project management primarily for government and public sector clients. Their website demonstrates a professional presence with a portfolio of impactful projects such as parliamentary system modernization and legal aid information systems. The company emphasizes quality assurance, IT audits, and process engineering using international standards. Technically, the website is built on Webflow with modern fonts and Google Maps integration, offering a responsive and user-friendly experience. Security posture is moderate with HTTPS in use but lacks some security headers and has a disabled reCAPTCHA on the contact form, which could expose it to spam. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is unavailable due to query limits, suggesting privacy protection, which is reasonable for this business type. Overall, the website is credible and functional but would benefit from improved security and privacy compliance.

W

WISDOM

wisdom.events

58

WISDOM is a professional event and business meetings organizer specializing in high-level summits, conferences, and exhibitions primarily in the energy, maritime, agro, and technology sectors. The company targets top executives, government officials, and industry experts, providing both physical and virtual participation options to maximize accessibility. The website demonstrates a mature digital presence with a modern tech stack based on Webflow, jQuery, and Swiper JS, delivering a visually appealing and content-rich experience. Security posture is generally good with HTTPS enforced and anti-spam measures in place, though improvements are needed in security headers and cookie consent mechanisms. The absence of WHOIS data transparency slightly reduces trust but is mitigated by strong partner endorsements and professional content. Overall, the site is well-positioned to serve its niche audience with reliable event organization services.

N

Nacionalinis muziejus Lietuvos Didžiosios Kunigaikštystės valdovų rūmai

valdovurumai.lt

51

The website represents the official online presence of the National Museum of the Grand Duchy of Lithuania's Palace, a government cultural institution located in Vilnius, Lithuania. It offers rich content including detailed information about exhibitions, events, educational programs, and virtual tours, targeting museum visitors, tourists, families, and educational institutions. The site is well-structured, professionally designed, and provides multilingual support, enhancing accessibility and user experience. Technically, the website employs modern web technologies such as jQuery, CandyCSS framework, and integrates analytics tools like Google Analytics, Google Tag Manager, and Facebook Pixel. The site is served over HTTPS with good SSL configuration, asynchronous script loading, and demonstrates good mobile optimization and accessibility features. However, there is no explicit cookie consent mechanism, which may impact full GDPR compliance. From a security perspective, the site follows best practices with HTTPS and no visible sensitive data exposure. Security headers are not explicitly detected in the HTML content, suggesting room for improvement. No vulnerability disclosure or incident response information is found, indicating a potential gap in security transparency. Overall, the website is a credible and professional digital asset for a government cultural institution, with strong content quality and business credibility. The absence of WHOIS data limits domain legitimacy verification, but the site’s content and structure strongly indicate authenticity. Strategic improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

Teva Lithuania operates as a regional branch of the global pharmaceutical company Teva Pharmaceutical Industries, providing a wide range of generic and specialty medicines. The website serves as a corporate and informational platform targeting patients, healthcare professionals, and caregivers in Lithuania. It emphasizes patient safety, social responsibility, and product quality. The digital infrastructure employs modern JavaScript libraries and analytics tools such as Microsoft Clarity and Application Insights, alongside a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. The domain WHOIS data is unavailable due to query limits, but the website's branding and external links strongly indicate legitimacy. Overall, the site is professional, well-structured, and compliant with privacy regulations, supporting Teva's market position in healthcare.