Security Directory

S

S.F.P. Group OÜ

sfp.ee

46

S.F.P. Group OÜ is an Estonian company specializing in the sale and consulting of ventilation, heating, and cooling equipment for industrial, residential, and apartment buildings. The company collaborates with leading manufacturers to provide energy-efficient and technologically advanced HVAC solutions. Their website reflects a professional presence with a focus on local market needs and showcases references to notable projects. Technically, the website is built on WordPress using modern tools like Elementor and Astra theme, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking some advanced security headers and explicit privacy policies. Overall, the domain registration data supports the legitimacy and maturity of the business.

L

LCC PRODUKT OÜ

lccprodukt.ee

41

LCC PRODUKT OÜ is an Estonian company specializing in energy-efficient and modern ventilation solutions, including calculation, analysis, and distribution of ventilation equipment. Founded in 2012, the company positions itself as a professional partner to architects, designers, builders, and developers in Estonia, offering innovative European ventilation products and high-tech energy solutions. The website is built on WordPress with WooCommerce, featuring a modern and responsive design, integrated project search functionality, and active social media presence. Security posture is solid with HTTPS enabled and no exposed sensitive data, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site reflects a trustworthy and professional business with room for improvement in security and privacy transparency.

E

E-varamu

e-varamu.ee

55

E-varamu is a key Estonian cultural heritage digital platform that aggregates materials from multiple datasets and integrates with the Europeana digital library. It serves researchers and the general public interested in Estonian culture, operating as a non-profit government-related entity. The website is built on WordPress with modern plugins and technologies, offering good SEO, accessibility, and mobile optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not published. The domain registration data aligns well with the website's purpose, indicating legitimacy. Overall, the platform is professional, trustworthy, and technically sound.

T

Tallinna Vesi

tallinnavesi.ee

42

Tallinna Vesi is a well-established water utility company based in Estonia, primarily serving the Tallinn region with water supply and wastewater treatment services. The company demonstrates a strong market position supported by comprehensive service offerings including water purification, meter installation, and customer self-service portals. Their website reflects a professional digital presence with multilingual support and investor relations, indicating a mature business model focused on transparency and customer engagement. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and SEO optimization. Security posture is robust with HTTPS enforcement and ISO certifications, although improvements can be made in security headers and incident response transparency. Privacy compliance is mostly adequate but lacks a visible cookie consent mechanism, which should be addressed to fully comply with GDPR requirements. Overall, the website and domain data indicate a trustworthy and credible organization with a solid digital infrastructure.

Eesti Ehitusinseneride Liit (EEL) is a non-profit voluntary association representing construction engineers in Estonia. Founded in 1991, it serves approximately 500 individual members and several collective members, providing professional membership services, certification, training, and information resources. The website positions EEL as a reputable and established professional body within the Estonian construction sector. Technically, the site is built on WordPress with common plugins and libraries, featuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are absent and privacy compliance is minimal due to lack of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission, but could improve in privacy and security policy transparency.

V

Veeühing (GWP Estonia)

veeyhing.ee

43

Veeühing (GWP Estonia) is a voluntary association based in Estonia focused on water management and related environmental issues. It operates as part of the Global Water Partnership network, aiming to improve water management and protection globally. The organization hosts events such as seminars and conferences to engage stakeholders and disseminate knowledge. The website is professionally designed using WordPress and is actively maintained with regular event updates. The technical infrastructure is modern, leveraging standard WordPress plugins and libraries, and the site is served over HTTPS with no detected blocking or WAF interference. However, the site lacks explicit privacy and cookie policies, which impacts GDPR compliance and privacy posture. Contact information such as emails or phone numbers is not explicitly provided, which may affect user trust and communication. Overall, the website demonstrates a good level of professionalism and technical maturity but would benefit from enhanced privacy compliance and clearer contact channels.

M

MTÜ Maakondlikud Arenduskeskused

arenduskeskused.ee

45

MTÜ Maakondlikud Arenduskeskused operates as the largest nationwide network in Estonia providing consulting and training services to startups, active businesses, non-profits, and local governments. Their business model is based on publicly funded, free services aimed at fostering entrepreneurship and community development across all 15 Estonian counties. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations, supporting a good user experience and mobile responsiveness. Security posture is solid with HTTPS and standard best practices, though explicit security policies and headers could be improved. Privacy compliance is evident with a GDPR-aligned privacy policy and cookie consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and partner network links.

I

Itero – Digitālā marketinga aģentūra

itero.lv

24

The website www.itero.lv appears to be a small business site hosted on WordPress with minimal content and limited digital maturity. The site lacks essential legal documents such as privacy policy, cookie policy, and terms of service, which are critical for compliance and user trust. Contact information and social media presence are not evident, reducing accessibility and credibility. Technically, the site uses standard web technologies but lacks advanced security headers and optimization features. The security posture is basic with no visible incident response or vulnerability disclosure mechanisms. Overall, the site presents a low-risk profile but requires significant improvements in compliance, security, and content quality to enhance trust and professionalism.

S

SA Jõgevamaa Arendus- ja Ettevõtluskeskus

kultuuritee.ee

44

Kultuuritee.ee is a regional cultural tourism website managed by SA Jõgevamaa Arendus- ja Ettevõtluskeskus, promoting the cultural heritage and tourism opportunities in the Jõgevamaa region of Estonia. The site provides information about cultural routes, events, maps, and local attractions, targeting tourists and cultural visitors interested in exploring Estonian history and culture. The business model is non-profit and focused on regional development and cultural promotion. Technically, the website is built on WordPress with common plugins like Yoast SEO and uses Google Analytics and Tag Manager for visitor tracking. The hosting is provided by Zone Media OÜ, and the domain is registered since 2019, consistent with the site's purpose. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional, well-branded, and provides relevant content but could improve in privacy and security practices.

S

SportAccord

aimsisf.org

43

The Alliance of Independent Recognized Members of Sports (AIMS) operates as a non-profit international sports alliance representing various independent sports federations. The organization is positioned as a key stakeholder in the global sports governance ecosystem, partnering with major entities such as the International Olympic Committee (IOC), SportAccord, WADA, and ITA. The website serves as a communication platform providing news, member federation information, and partnership details to its target audience of sports professionals and federations worldwide. Technically, the website is built on WordPress using the Elementor page builder, hosted on StableServer infrastructure. The site demonstrates good mobile optimization, clear navigation, and a professional design, although some accessibility features could be improved. Performance is moderate, with no major technical issues detected in the HTML content. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but DNSSEC is not enabled and some security headers are not explicitly detected, suggesting room for improvement. From a security and compliance perspective, the website lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. No incident response or vulnerability disclosure information is available, and no direct contact emails or phone numbers are provided, limiting transparency in communication channels. The WHOIS data is consistent and transparent, confirming the legitimacy of the domain ownership and alignment with the organization's identity. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance measures, improved security header implementation, and clearer contact information to strengthen user trust and regulatory adherence.

S

SportAccord

sportaccord.com

60

SportAccord is a globally recognized organization dedicated to connecting International Sport Federations, cities, right holders, and businesses to shape the future of sport. The website reflects a professional and well-established entity with a strong market position in the sports event and federation engagement sector. Key services include organizing major events such as the SportAccord Convention and the International Federation Forum, alongside providing platforms for sustainability and membership applications. The technical infrastructure is built on WordPress with modern plugins and analytics tools, ensuring a robust digital presence. Security posture is strong with HTTPS enforcement, security headers, and monitoring tools like New Relic, although explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high professionalism, good privacy compliance, and trustworthy business credibility.

S

SportAccord

gaisf.sport

60

SportAccord is a globally recognized organization dedicated to connecting International Sport Federations, cities, right holders, and businesses to shape the future of sport. The website reflects a professional and well-structured platform offering information about major events such as the SportAccord Convention and the International Federation Forum. The organization positions itself as a key player in the sports event and federation engagement sector, supported by the International Olympic Committee and a broad network of partners. The digital infrastructure is built on WordPress with modern plugins and analytics tools, ensuring a good user experience and performance. Security posture is strong with HTTPS enforcement and privacy compliance mechanisms like Usercentrics CMP. However, WHOIS data is privacy protected, limiting transparency on domain ownership, though this is common and justified for such entities. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and business credibility.

ENGSO is a well-established European non-profit organization dedicated to grassroots sport, acting as an umbrella for National Olympic Committees and National Sports Confederations across 33 European countries. The website clearly communicates ENGSO's mission to promote stronger communities through voluntary-based sport, supported by a professional and consistent digital presence. The organization leverages modern WordPress technologies with Elementor for content management and presentation, ensuring good mobile optimization and user experience. Security posture is adequate with HTTPS enabled, but could be enhanced by implementing additional security headers and explicit privacy compliance mechanisms such as cookie consent. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the domain registration and WHOIS data align with the organization's legitimacy and history, supporting a high trustworthiness rating.

S

Spordimeditsiini SA

sportmed.ee

38

Spordimeditsiini SA is an established Estonian sports medicine foundation providing specialized health examinations, treatments, and consultations for amateur, youth, and professional athletes. With over 25 years of experience, it holds a strong market position in Estonia's healthcare sector, focusing on sports-related medical services including physiotherapy, cardiology diagnostics, nutrition counseling, and advanced physiotherapy procedures. The website is well-structured, multilingual, and professionally designed, reflecting the organization's credibility and service quality. Technically, it is built on WordPress with modern plugins and SEO optimizations, though some performance and security enhancements are advisable. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit security headers and incident response policies. Privacy compliance is partially met with privacy and cookie policies present, but missing active consent mechanisms. Overall, the site demonstrates a mature digital presence with room for improvements in security and privacy transparency.

A

A. Le Coq

alecoq.ee

47

A. Le Coq is Estonia's oldest and largest beverage producer, offering a wide range of alcoholic and non-alcoholic drinks including beer, cider, juices, water, and energy drinks. The company operates a professional and well-structured website built on WordPress with WooCommerce, targeting both consumers and distributors in Estonia and export markets. The website demonstrates good digital maturity with modern technologies, SEO optimization, and mobile responsiveness. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit privacy and security policies are not published. Overall, the site reflects a credible and established business with a focus on compliance and user experience.

P

Pilt Ruudus OÜ

piltruudus.ee

41

Pilt Ruudus OÜ operates as a creative agency based in Estonia, offering a comprehensive suite of digital marketing, SEO, web development, video, and photography services. The company targets Estonian businesses seeking to enhance their online presence and marketing effectiveness. The website reflects a professional and consistent brand image, with clear service descriptions and a user-friendly contact form facilitating client engagement. The business appears well-established with a domain age consistent with its operational history.

Lääneranna vald is a local government entity in Estonia formed in 2017 by merging several municipalities. The website currently serves as a maintenance page with basic information about the municipality's geography, administrative structure, and protected natural areas. The site is built on WordPress and uses common web technologies such as jQuery. The technical infrastructure is moderate with HTTPS enabled and hosted likely by Zone Media OÜ, an Estonian registrar and hosting provider. However, the site lacks advanced security headers and policies, and no privacy or cookie policies are published, which limits compliance with GDPR and other regulations. The login form is present but lacks visible security enhancements such as CAPTCHA or multi-factor authentication. Overall, the website is functional but minimal, reflecting a work-in-progress status.

R

Rapla vald

rapla.ee

45

Rapla vald operates as a local government entity serving the Rapla region in Estonia, providing a broad range of municipal services including social support, education, cultural activities, infrastructure management, and community engagement. The website serves as an official portal for residents and visitors, offering news, event information, and access to various public services. The organization maintains a clear and consistent brand presence with a well-structured website in Estonian, targeting local community members and stakeholders. Technically, the website is built on WordPress CMS, leveraging modern plugins and frontend technologies such as jQuery, FontAwesome, and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting and domain registration are managed by a reputable Estonian registrar, Telia Eesti AS, with domain age consistent with the organization's history. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers, published security policies, and incident response contact information. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security maturity. Overall, the website presents a trustworthy and professional digital presence for a government entity, with moderate technical and security posture. Strategic enhancements in security headers, incident response readiness, and vulnerability disclosure would strengthen its security and compliance stance.

M

MTÜ Kodukant Läänemaa

kklm.ee

39

MTÜ Kodukant Läänemaa is a small Estonian non-profit organization dedicated to promoting and supporting village life and rural community development in the Läänemaa region. The organization provides project support, facilitates funding opportunities, and organizes community events to strengthen local engagement. The website is built on WordPress using the Virtue theme and several plugins such as MailPoet for newsletters and Google Calendar Events for event management. The technical infrastructure is modern and moderately performant with good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks important security headers and formal privacy or cookie policies. Contact information is clearly provided with a physical address and company email, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security practices.

R

Rohelise Jõemaa Koostöökogu

joemaa.ee

39

Rohelise Jõemaa Koostöökogu is a small regional cooperative organization based in Estonia, focused on sustainable rural economic development, cultural heritage preservation, and tourism promotion. The website serves as an informational and promotional platform highlighting the organization's mission, events, and regional identity. The technical infrastructure is based on WordPress with common plugins such as Yoast SEO and Contact Form 7, supported by standard web technologies like jQuery and Bootstrap. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but requires improvements in privacy, security, and compliance to enhance trust and user protection.

P

Pärnu Lahe Partnerluskogu

plp.ee

39

Pärnu Lahe Partnerluskogu is a regional non-profit partnership organization based in Estonia, focused on supporting local development projects, cooperation, and dissemination of information in the Pärnu Bay area. The website serves as an information hub for local government entities, community organizations, and residents, providing updates on meetings, funding opportunities, and collaborative projects. The organization appears well-established with a domain age since 2010 and consistent regional focus. Technically, the website is built on WordPress using the Sydney theme and common plugins such as Yoast SEO and Elementor. It employs HTTPS and basic SEO optimizations, with moderate performance and good mobile responsiveness. However, accessibility features are basic, and some security best practices like DNSSEC and security headers are missing. From a security perspective, the site has a good SSL configuration but lacks advanced security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure mechanisms are evident. The absence of contact emails and phone numbers in the HTML limits direct communication channels, though physical addresses linked to local municipalities are present. Overall, the website is functional and professional for its purpose but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen trust and regulatory adherence.

Soomaa.com is a small hospitality and tourism business focused on providing wilderness experiences in Estonia, particularly in Soomaa National Park. The website offers detailed information and booking options for various outdoor activities such as canoe trips, kick-bike trips, bogwalking, mushrooming, and snowshoeing. The company targets nature enthusiasts and tourists seeking authentic outdoor adventures in Estonia. The business appears established, with a domain registered since 1999, and maintains a consistent brand presence including social media channels on Facebook, YouTube, and Instagram. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, integrating third-party booking services via FareHarbor. The site is well-structured with good SEO practices, mobile optimization, and a cookie consent mechanism compliant with GDPR principles. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The cookie consent banner and detailed preferences indicate a commitment to privacy compliance, although no explicit privacy policy or terms of service were found in the analyzed content. Overall, Soomaa.com presents a credible and professional online presence for a niche tourism business. Strategic improvements in security headers, explicit privacy and security policies, and enhanced accessibility would strengthen its security posture and compliance. The domain registration data supports legitimacy and trustworthiness.

A

Allikukivi Veinimõis

allikukivi.ee

40

Allikukivi Veinimõis is a small family-owned Estonian business specializing in handcrafted berry and fruit wines produced on-site in their manor's wine cellar. They complement their wine production with hospitality services including wine tastings, tours, and glamping accommodations in a historic manor park. The website is built on WordPress with WooCommerce, featuring a professional design and moderate performance. The site includes cookie consent mechanisms and integrates third-party booking services. Security posture is good with HTTPS and no exposed sensitive data, but lacks some security headers and formal privacy and terms policies. Overall, the business presents a trustworthy local niche hospitality and wine production service with room for improvement in privacy compliance and security documentation.

V

Valgeranna Seikluspark

valgerannaseikluspark.ee

44

Valgeranna Seikluspark is an Estonian adventure park offering active outdoor recreational activities primarily targeting families, children, and groups near Pärnu. The website presents a professional and consistent brand image with clear descriptions of services such as adventure trails, group bookings, and special events. Technically, the site is built on WordPress with Elementor and Yoast SEO, integrating Google Analytics and Tag Manager for tracking. Cookie consent is implemented with detailed user controls, reflecting a basic level of privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security and incident response policies are absent. Overall, the site is functional, trustworthy, and well-positioned regionally, but could improve transparency by publishing privacy and terms policies and enhancing contact information visibility.

E

Elkdata OÜ (registrar)

veetee.ee

46

VeeTee.ee is a small Estonian business specializing in outdoor recreational services including ski and snowboard rentals, canoe and rubber boat trips, and accommodation rental at Annemäe Puhkemaja. The company targets tourists and local outdoor enthusiasts seeking guided water and winter sports experiences. The website is built on WordPress with modern plugins and provides clear contact information and service descriptions. Technically, the site uses HTTPS and common WordPress technologies but lacks some security headers and explicit privacy consent mechanisms. Security posture is moderate with no critical vulnerabilities detected but room for improvement in policy transparency and compliance. Overall, the business appears legitimate with consistent domain registration data and a professional web presence.

R

Romantiline Rannatee

rannatee.ee

38

Romantiline Rannatee is a well-established regional tourism promotion website focused on the Pärnumaa coastal area in Estonia. The site offers rich content including destination guides, events, accommodations, and virtual tours, targeting tourists interested in nature, culture, and leisure activities. The business operates primarily as a tourism marketing platform, leveraging partnerships with local organizations and maintaining a consistent brand presence. Technically, the website is built on WordPress using the Avada theme and Yoast SEO plugin, with Google Tag Manager integrated for analytics. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, with no blocking or WAF detected, supporting a moderate to good trust level for visitors.

S

Siseturvalisus

siseturvalisus.ee

44

Siseturvalisus.ee is a government-affiliated career portal dedicated to internal security in Estonia, providing job opportunities and career information across seven key security agencies. The website serves as a centralized platform for recruitment and career development in the Estonian internal security sector, targeting job seekers interested in contributing to national security. Technically, the site is built on WordPress with modern frontend libraries such as jQuery, Fancybox, and Splide.js, delivering a responsive and well-structured user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and explicit incident response contacts. Privacy compliance is adequate with privacy and cookie policies present, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its government sector mission.

V

Virupärane

laaneviru.ee

44

The website laaneviru.ee serves as an official regional portal for Lääne-Viru County in Estonia, focusing on tourism, living, and entrepreneurship. It provides comprehensive information about local attractions, events, accommodation, business support, and municipal resources. The site targets tourists, residents, and entrepreneurs interested in the region. The business model is informational and promotional, likely operated by a government or regional development entity. The domain is newly registered in 2024, consistent with the website's launch and content. Technically, the site is built on WordPress with modern performance and image optimization plugins. It uses Google Tag Manager and Facebook Pixel for analytics and marketing, with a cookie consent mechanism implemented via CookieYes. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. From a security perspective, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and no published security or incident response policies were found. Privacy compliance is basic, with no visible privacy policy or terms of service pages, which should be addressed to improve compliance and user trust. Overall, the website is professional and trustworthy, with a solid technical foundation and clear business purpose. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and adding vulnerability disclosure information to strengthen security posture and compliance.

S

SYNLAB Eesti

synlab.ee

66

SYNLAB Eesti is the largest medical laboratory in Estonia, operating since 1995 and part of the global SYNLAB Group. The company provides a wide range of medical laboratory testing services targeting medical professionals, private clients, and employers. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations. It offers multilingual support and integrates GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance trust. Contact is primarily via a contact form, with no exposed direct emails or phone numbers. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

A

AS Medisoft

medisoft.ee

43

AS Medisoft is an Estonian technology company with a domain registered since 2010, indicating a stable business presence. The website is built on WordPress using the Divi theme, reflecting a standard and professional digital infrastructure. The site appears to target a local or regional audience, though explicit business descriptions and contact details are not readily found in the provided content. The technical setup is moderate in performance and mobile optimization, but lacks advanced SEO and accessibility features. Security posture is average, with no detected security headers or explicit SSL/TLS configuration details, and no privacy or cookie policies are present, which may impact compliance and user trust. Overall, the website is functional and professional but would benefit from enhanced security and privacy compliance measures.

J

Jäneda Mõis OÜ

janedaturism.ee

46

Jäneda Mõis OÜ operates a tourism and hospitality center in Estonia offering conference facilities, restaurant services, accommodation, theater performances, and seasonal markets. The company targets tourists and event organizers, positioning itself as a regional hospitality provider with a medium-sized operation founded in 2010. The website is built on WordPress with WooCommerce and uses modern plugins and themes, providing a good user experience with multilingual support and clear navigation. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site reflects a professional and trustworthy business with good digital maturity.

E

Eesti Kergejõustikuliit

ekjl.ee

42

Eesti Kergejõustikuliit is the national athletics federation of Estonia, providing organizational support, event management, and athlete services within the Estonian athletics community. The website serves as a comprehensive portal for news, competition calendars, results, rankings, and educational materials targeting athletes, coaches, clubs, and fans. It holds a strong market position as the official governing body for athletics in Estonia. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, and uses Bootstrap for responsive design. The site demonstrates good digital maturity with structured data, SEO optimization, and mobile responsiveness, although some accessibility features could be improved. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and uses standard libraries without visible vulnerabilities. However, it lacks some security headers and does not provide explicit security or incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in privacy compliance, security policy transparency, and accessibility would enhance its security posture and user trust.

E

Eesti Võrkpalli Liit

volley.ee

40

Eesti Võrkpalli Liit operates as the official Estonian Volleyball Federation, providing comprehensive information on volleyball teams, competitions, and related activities in Estonia. The website serves as a central hub for volleyball enthusiasts, players, coaches, and fans, offering news, schedules, and organizational details. The site is well-structured and professionally designed, reflecting its role as a national sports governing body. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Analytics, and Facebook Pixel. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements some best practices like opening external links in new windows with noopener. However, it lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. Overall, the domain is legitimate, well-established since 2010, and consistent with the organization's profile. Strategic improvements in privacy compliance and security headers would enhance the site's trustworthiness and regulatory adherence.

L

Lääne-Virumaa Kossuliiga

virukorvpall.ee

39

Lääne-Virumaa Kossuliiga operates a regional basketball league website serving the Lääne-Virumaa community in Estonia. The site provides schedules, results, team information, and news updates related to basketball events. The business model focuses on sports event promotion and community engagement within the regional sports sector. The website is built on WordPress with SportsPress Pro plugin, indicating a moderate level of digital maturity and technical infrastructure. Hosting is provided by Zone Media OÜ, a known Estonian hosting provider. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and privacy policies indicates room for improvement. The site uses common analytics and marketing tools such as Google Analytics and AddThis, but lacks explicit privacy compliance mechanisms. Overall, the website is functional and professional but would benefit from enhanced privacy and security practices to improve trust and compliance.

P

Peipsimaa turism

visitpeipsi.com

47

Visitpeipsi.com is a regional tourism promotion website dedicated to Peipsimaa, Estonia, highlighting the area's natural beauty, cultural heritage, local cuisine, and events. The site targets tourists interested in authentic regional experiences, offering information, event promotion, and an e-commerce shop for local products. The business operates as a small-sized entity focused on hospitality and non-profit tourism promotion, founded in 2011. The website branding is consistent and content quality is good, supporting its market position as a key regional tourism promoter. Technically, the site is built on WordPress with WooCommerce and Yoast SEO plugins, leveraging jQuery and Google Analytics for functionality and tracking. The site is mobile-optimized with good navigation and SEO practices, though performance is moderate. Hosting details are not explicit but DNS and registrar data suggest a stable setup. No WAF or blocking mechanisms are detected, and the site uses HTTPS with a clientTransferProhibited domain status, indicating basic security measures. Security posture is moderate; while HTTPS is enforced, no DNSSEC or security headers are detected, and no explicit security or incident response policies are published. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. The domain WHOIS data aligns well with the website content, showing consistent registration and legitimacy. Overall, the site is functional and professional but could improve security and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to enhance trust and compliance.

V

Via Hanseatica

viahanseatica.info

42

Via Hanseatica is a regional tourism initiative promoting an international travel route through Latvia, Estonia, and Russia, focusing on cultural heritage, nature, and culinary experiences. The website serves as an informational and promotional platform supported by multiple regional tourism organizations and partners. The digital infrastructure is based on WordPress with standard SEO and analytics tools, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to missing policies and consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but does not negate the legitimacy indicated by the website content and partnerships.

L

Lõuna-Eesti

visitsouthestonia.com

59

Lõuna-Eesti is a regional tourism promotion website dedicated to showcasing the cultural, natural, and hospitality offerings of South Estonia. The site targets tourists, families, pet owners, and tourism professionals, providing rich content about local attractions, events, and accommodations. The business operates as a regional destination marketing organization with a focus on enhancing visitor experience and promoting local culture and nature. Technically, the website is built on WordPress, leveraging modern tools such as Gravity Forms, Rank Math SEO, Hotjar, and Google Analytics. The site is hosted on a provider associated with the domain's nameservers and employs HTTPS with a good SSL configuration. Security posture is solid with cookie consent mechanisms and no visible critical vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a detailed cookie consent banner but no explicit privacy policy or terms of service found. Overall, the website is professional, well-branded, and trustworthy, with room for improvement in privacy and security documentation.

S

SA Harju Ettevõtlus- ja Arenduskeskus

heak.ee

43

SA Harju Ettevõtlus- ja Arenduskeskus (HEAK) is a regional non-profit foundation based in Estonia focused on supporting local development through consulting, training, and partnership initiatives. The organization targets entrepreneurs, civic associations, and tourism sector participants, offering free advisory services and organizing events to foster regional growth. The website reflects a stable and professional presence with clear business objectives and a consistent brand identity. Technically, the site is built on WordPress with common plugins for event management, multilingual support, and analytics integration, demonstrating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though improvements could be made by adding security headers and formal incident response contacts. Overall, the website is trustworthy and well-maintained, supporting the organization's mission effectively.

E

Eesti Veevarustuse ja Kanalisatsiooni Inseneride Selts

evkis.ee

39

Eesti Veevarustuse ja Kanalisatsiooni Inseneride Selts (EVKIS) is a professional association for water supply and sanitation engineering specialists in Estonia. Established in 2010, it serves as a voluntary union providing membership services, training, news, and an online store to its members and the wider industry community. The website is well-structured and targets professionals in the environmental engineering sector, particularly those focused on water and sanitation technologies. The organization maintains partnerships with relevant industry bodies, enhancing its credibility and reach. Technically, the website is built on WordPress using popular plugins such as WooCommerce for e-commerce, Yoast SEO for search optimization, and Events Manager for event handling. The site is hosted by Zone Media OÜ, a known Estonian registrar and hosting provider. The infrastructure supports HTTPS with valid SSL certificates, ensuring secure communications. The site is moderately performant and mobile-optimized, though accessibility features are basic. From a security perspective, the site employs Google reCAPTCHA v3 to protect forms from spam and abuse. However, it lacks several important security headers such as Content-Security-Policy and HSTS, which are recommended to enhance security posture. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present, indicating room for improvement in security governance and transparency. Overall, EVKIS presents a trustworthy and professional online presence consistent with its role as an industry association. The main risks relate to privacy compliance gaps, notably the absence of privacy and cookie policies, and the lack of advanced security headers. Addressing these areas would strengthen the site's compliance and security posture, thereby enhancing trust among members and visitors.

N

NOVOT Agentuur

novot.ee

56

NOVOT Agentuur is a well-established full-service marketing agency based in Estonia, founded in 2006. The company offers a broad range of marketing services including branding, website development, campaign management, social media, and media planning. Their website reflects a professional and consistent brand image, targeting businesses seeking comprehensive marketing solutions. The digital infrastructure is built on WordPress with modern plugins and tools such as Yoast SEO, Google Tag Manager, and CookieYes for privacy compliance. The site is mobile-optimized and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website presents a trustworthy and professional digital presence.

E

Eesti Noorteühenduste Liit

enl.ee

47

Eesti Noorteühenduste Liit (ENL) is a well-established non-profit umbrella organization founded in 2010 that unites youth associations and participation bodies across Estonia. The organization focuses on advocacy, youth participation, training, and international cooperation, positioning itself as a leading entity in the Estonian youth sector. The website reflects a professional and comprehensive digital presence with clear content, strong branding, and multilingual support. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS, cookie consent, and error reporting, though some security headers and formal policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media engagement.

I

Infohunt

infohunt.ee

41

Infohunt.ee is a government-backed Estonian youth information portal providing localized event and activity information for young people. The platform aggregates data on youth events, hobby education, and projects, supporting youth engagement and participation. It is operated under the auspices of the Estonian Ministry of Education and Research (Haridus- ja Teadusministeerium) and hosted by EENet, reflecting a strong institutional foundation. The website uses WordPress with modern SEO and accessibility features, ensuring good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and explicit policies could enhance trust. Privacy compliance is partial, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, Infohunt.ee is a credible, well-maintained portal serving the Estonian youth sector effectively.

E

Erasmus+ ja Euroopa Solidaarsuskorpuse agentuur

euroopanoored.eu

46

The website represents the Erasmus+ and European Solidarity Corps national agency in Estonia, providing comprehensive information, resources, and support for youth, youth workers, and organizations involved in European youth programs. It serves as a government-funded platform facilitating access to program opportunities, project guidance, and community engagement. The site is well-positioned as the authoritative national agency for these programs, targeting youth and professionals in the youth sector. Technically, the website is built on WordPress with modern performance and SEO optimizations, including WP Rocket and The SEO Framework. It employs Google Site Kit for analytics and consent management, ensuring GDPR compliance with a robust cookie consent mechanism. The site is mobile-optimized, accessible, and fast-loading, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs consent mode to restrict tracking and personalization. While explicit security headers and incident response policies are not evident, no vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the agency's Estonian identity, registered through a reputable local registrar without privacy protection, appropriate for a government entity. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy and professional platform for its audience.

Eesti Avatud Noortekeskuste Ühendus (Eesti ANK) is a national non-profit umbrella organization in Estonia that connects youth centers across the country. Founded in 2001, it currently represents 95 members with 152 youth centers. The website is currently in maintenance mode, limiting content availability and user engagement. The technical infrastructure is based on WordPress with a maintenance plugin, utilizing HTTPS and jQuery libraries. However, the site lacks advanced SEO, accessibility, and security headers, indicating room for technical maturity improvements. Security posture is moderate with HTTPS enabled but missing key security headers and policies. No privacy or cookie policies are present, which impacts compliance and user trust. Overall, the website reflects a legitimate and established non-profit entity but requires enhancements in content availability, security, and compliance to improve user trust and operational maturity.

H

Hannomal OÜ

veebispetsid.com

50

Hannomal OÜ operates a professional web development and e-commerce service business based in Estonia, with a strong market presence since 2011. The company offers a comprehensive suite of services including website creation, e-shop development, graphic design, programming, and content writing, primarily leveraging the WordPress platform. Their website reflects a mature digital presence with good SEO and user experience design. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the business demonstrates transparency and credibility with clear contact information and consistent branding.

E

Ettevõtlik kool

evkool.ee

44

Ettevõtlik Kool is a non-profit educational network in Estonia focused on promoting entrepreneurial learning and providing a quality mark for modern education. The website serves as a portal for schools and kindergartens to access training, tools, and certification processes. It targets educational institutions and professionals within Estonia, supporting over 221 schools and more than 41,000 students. The business model revolves around educational services and network collaboration rather than commercial sales. Technically, the website is built on WordPress with modern enhancements such as lazy loading, Google Tag Manager, and reCAPTCHA for security. The site is mobile-optimized and includes accessibility features, reflecting a mature digital presence. SEO and metadata are well implemented, supporting discoverability and user engagement. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contacts, which could be improved. Privacy and cookie policies are present and appear GDPR compliant, enhancing user trust. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. The domain registration data aligns with the business claims, supporting legitimacy. Strategic improvements in security policy transparency and additional compliance documentation would further strengthen the site's posture.

I

Ida-Viru Ettevõtluskeskus

ivek.ee

46

Ida-Viru Ettevõtluskeskus is a regional development center focused on providing free consulting services to individuals, non-profit organizations, and entrepreneurs in Ida-Viru County, Estonia. Established in 2010, it acts as a regional development engine offering training, funding opportunities, and support services. The website is multilingual, targeting Estonian, English, and Russian speakers, reflecting the regional demographic. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Maps and various plugins for SEO, multilingual support, and user interaction. Security posture is solid with HTTPS and cookie consent mechanisms, though additional HTTP security headers and published policies would enhance compliance and trust. Overall, the site presents a professional and trustworthy digital presence aligned with its business mission.

T

Targalt Internetis

targaltinternetis.ee

43

Targalt Internetis is a reputable non-profit educational initiative based in Estonia, dedicated to promoting safe and responsible internet use among children, youth, parents, and educators. The website offers a rich array of resources including workshops, seminars, articles, and events focused on digital safety, cyberbullying, misinformation, and digital wellbeing. It serves as a trusted platform with strong partnerships and a clear focus on community education and awareness. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Complianz GDPR, ensuring good SEO and privacy compliance. The site is mobile-optimized and accessible, with a moderate performance profile. Security-wise, the website enforces HTTPS, implements strong security headers, and provides a comprehensive cookie consent mechanism, although it lacks explicit incident response or vulnerability disclosure information. Overall, the site demonstrates a strong security posture and compliance with GDPR, supporting its credibility and trustworthiness in the education sector.

S

Spin TEK AS

spin.ee

53

Spin TEK AS is an established Estonian IT company specializing in software and hardware development with over 30 years of experience. The company serves both private and public sector clients, focusing on developing functional, user-friendly, and flexible information systems tailored to client needs. Their website reflects a professional digital presence built on WordPress with Elementor and Astra theme, indicating a moderate level of digital maturity. While the site is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and trust. Security posture is adequate with HTTPS enabled but could be improved by implementing security headers and formal incident response channels. Overall, the website demonstrates moderate trustworthiness and business credibility but would benefit from enhanced privacy compliance and security transparency.

E

Eesti Vee-ettevõtete Liit

evel.ee

42

Eesti Vee-ettevõtete Liit (EVEL) is a well-established voluntary association representing water companies and related entities in Estonia. Founded in 1995, it serves over 90% of the country's public water and sewerage service consumers through its 42 member water companies and 31 related companies. The organization provides coordination, information dissemination, training, and project participation services to its members, positioning itself as a key player in Estonia's water sector. The website reflects this focus with relevant content, partner links, and organizational information primarily in Estonian, targeting industry stakeholders and members.