Security Directory

E

Easy Web Soutions

easyweb.ee

49

EasyWeb is a small Estonian technology service provider specializing in WordPress website creation, management, SEO, marketing, UX, and design services targeted primarily at small businesses. The company presents a professional and user-friendly website with clear service offerings and client testimonials, positioning itself as a reliable local partner for digital presence needs. Technically, the website is built on WordPress with modern tools such as GSAP for animations, Facebook Pixel for tracking, and Google Analytics for analytics, hosted likely by Elkdata OÜ as indicated by the WHOIS and nameserver data. The site is mobile-optimized and performs well with fast loading times and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and a published security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration and hosting details align well with the business claims, supporting legitimacy and trustworthiness.

A

Autoosta

autoosta.lv

55

Autoosta.lv is a Latvian transportation information website focused on providing bus schedules, news, and related information to the public. The site targets local travelers and residents seeking timely and accurate public transport data. The business operates as a small-scale information service platform with a niche focus on Latvian transportation. Technically, the website is built on WordPress using the Divi theme and leverages Jetpack for additional functionality and analytics. The infrastructure is modern and uses HTTPS with appropriate security headers, ensuring a secure browsing experience. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is solid with no detected vulnerabilities or blocking mechanisms, but incident response and vulnerability disclosure information are absent. Overall, the website is functional, moderately optimized for mobile, and provides relevant content for its audience, but could improve in privacy compliance and contact transparency.

U

UAB Eltechnika

eltechnika.lt

54

UAB Eltechnika is a Lithuanian-based company specializing in the distribution and sales of advanced manufacturing machinery, including CO2, UV, Fiber laser cutting and engraving machines, as well as CNC milling equipment. Established in 2015, the company serves the Baltic region as an official distributor for AEON and LightBurn, targeting industrial and manufacturing businesses seeking high-precision equipment. Their website reflects a professional and consistent brand image with multilingual support, clear product categorization, and active social media engagement. Technically, the site is built on WordPress with modern plugins and themes, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure forms, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the business demonstrates credibility and a solid market position, but should improve privacy and security transparency to enhance trust and compliance.

H

Helsingin Osuuskauppa Elanto

hok-elanto.fi

51

HOK-Elanto is Finland's largest regional cooperative within the S-ryhmä group, operating a broad network of over 400 retail outlets, restaurants, and service stations across the Helsinki metropolitan area and surrounding municipalities. The company serves over 700,000 customer-owners and employs nearly 7,000 people, positioning itself as a significant regional employer and retail service provider. The website reflects a mature digital presence with clear branding, comprehensive service information, and active engagement channels including social media and customer service portals. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, supported by third-party services like Google Tag Manager for analytics and Usercentrics for consent management, indicating a commitment to privacy compliance and user experience. Hosting appears to be managed via a specialized Finnish cloud provider, ensuring regional performance and reliability. The site is mobile-optimized and SEO-friendly, with structured data and meta tags enhancing discoverability. From a security perspective, the site enforces HTTPS and integrates consent mechanisms, though it lacks explicit security headers which could be improved. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the domain's legitimacy, showing consistent registration details aligned with the business identity and a long operational history. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, HOK-Elanto's website demonstrates a solid digital infrastructure and trustworthy business representation. Strategic improvements in security headers and accessibility could further enhance the site's robustness and user inclusivity.

J

John Lothian News

johnlothiannews.com

58

John Lothian News is a specialized media outlet focused on delivering financial markets news and analysis. Established in 2011, it serves a niche audience of financial professionals and market participants. The website employs a WordPress CMS with the Divi theme and WooCommerce plugin, indicating a modern and flexible technical infrastructure. Hosting is provided by SiteGround, and the site uses Google Analytics and Tag Manager for user tracking. Security posture is solid with HTTPS enabled and use of Google reCAPTCHA, though there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

N

Noranet

noranet.io

45

Noranet is a small Estonian-based company specializing in Internet of Things (IoT) solutions for both enterprises and private individuals. Their offerings range from smart monitoring and consumption management in residential buildings to digitalization and automation of industrial processes. The company appears to be recently founded in 2023 and operates under the parent company Startup Solutions OÜ. The website is professionally designed using WordPress with the Kadence theme and includes modern web technologies such as Google Tag Manager for analytics and marketing. Technically, the website demonstrates moderate performance and good mobile optimization, with proper SEO meta tags and structured data. However, there is room for improvement in accessibility and security best practices, as no advanced security headers or DNSSEC are implemented. The domain registration data aligns well with the business claims, showing consistency and legitimacy. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Analytics usage is moderate, relying on Google Tag Manager, which may track user behavior without explicit user consent. Overall, Noranet presents a credible and professional business presence with a solid technical foundation but requires enhancements in privacy compliance and security transparency to strengthen trust and regulatory adherence.

M

Maria Mägi Advokaadibüroo

mmab.ee

42

Maria Mägi Advokaadibüroo is a professional law firm based in Estonia, providing legal services across major legal domains including business law, real estate law, contract law, tax law, intellectual property, bankruptcy, family law, and environmental law. The firm positions itself as a modern legal service provider with a team of partners and specialized lawyers, targeting clients seeking comprehensive legal assistance in Estonia. The website is well-structured, multilingual, and professionally designed, reflecting the firm's commitment to quality and client service. Technically, the website is built on WordPress using the Avia Framework, with integrations such as Yoast SEO and Google Analytics for performance and marketing insights. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent with opt-in/out options, demonstrating good privacy compliance. However, explicit security headers are missing, and there is no dedicated security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website presents a trustworthy and professional digital presence for the law firm, with a solid foundation in security and privacy compliance. Strategic improvements in security headers, accessibility, and explicit security policies would enhance the firm's digital maturity and client trust.

O

Online Solution 360 GmbH

saveality.net

59

Saveality, operated by Online Solution 360 GmbH, is a specialized provider of cyber security and privacy solutions based in Germany. Founded in 2018, the company offers a range of services including secure remote desktop environments, multi-encryption data storage, end-to-end encrypted email and communication services, TOR/Onion web services, bulletproof hosting, penetration testing, secure mobile phone solutions, IoT protection, and cryptocurrency cold storage. The business targets clients requiring high confidentiality and privacy protection, positioning itself as a niche player in the cyber security market. The parent company is Online Solution Int Ltd. based in the UK. Technically, the website is built on WordPress and uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager. Hosting and DNS services are managed via Cloudflare. The site implements HTTPS with a good SSL configuration but lacks DNSSEC and advanced security headers. Performance is moderate with good mobile optimization. Privacy compliance is basic with a cookie consent banner and a privacy policy hosted externally on adsafety.net. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, publishing a security policy, and providing a vulnerability disclosure mechanism. No critical vulnerabilities or exposed sensitive data were detected. Contact information is clearly presented, including phone numbers, emails, and physical addresses, enhancing business credibility. Overall, Saveality presents a professional and trustworthy front with room for improvement in security best practices and privacy transparency. Strategic recommendations include enhancing domain security, publishing detailed security and incident response policies, and improving privacy compliance disclosures.

E

Eesti Meediaettevõtete Liit

meedialiit.ee

41

Eesti Meediaettevõtete Liit is a well-established Estonian media association founded in 1990, representing a broad spectrum of private media outlets including web portals, TV, radio, newspapers, and magazines. The organization focuses on promoting trustworthy journalism, protecting the interests of its members, and advocating for fair competition in the media market. The website reflects this mission with relevant content, press council decisions, and news updates targeted at media professionals and the Estonian public. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google reCAPTCHA, ensuring a good user experience and basic security measures. The security posture is solid with HTTPS and anti-bot protections, though some advanced security headers could be added. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its audience effectively.

C

Cargo Handling AS

ch.ee

43

Cargo Handling AS is an Estonian-based small transportation and logistics company specializing in cargo handling and storage services for international air and road carriers, freight forwarders, and companies engaged in international trade. The company also offers customs warehouse and excise warehouse services. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a focus on clear presentation and multilingual support (Estonian and English). Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and functional but could improve in privacy and security transparency to enhance trust and compliance.

F

FinanceEstonia

financeestonia.eu

45

FinanceEstonia is a well-established umbrella organization representing the Estonian financial sector, with over 90 members from both private and public sectors. The organization focuses on advocacy, fostering innovation, and supporting the growth of fintech and capital markets in Estonia. The website reflects a mature digital presence built on WordPress, with good SEO and mobile optimization. Security posture is solid with HTTPS and secure forms, though it lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, supporting FinanceEstonia's role as a key industry player.

S

Suomi (fi)

kivakoulu.fi

54

KiVa Koulu is an anti-bullying program developed by the University of Turku, widely adopted in Finnish primary schools and internationally in over 20 countries. The website serves as an educational and informational platform targeting schools, teachers, students, and parents, providing resources, research, and program participation information. The business model is non-profit and education-focused, with strong institutional backing and a reputable market position in the education sector. Technically, the website is built on WordPress with modern frontend technologies including jQuery and DustPress JS. It demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent is managed via Cookiebot, indicating GDPR compliance. Performance is moderate with no blocking or WAF detected, and HTTPS is enforced. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and incident response contact information. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. Overall, the website is trustworthy, professional, and well-maintained, with minor recommendations to enhance security headers and incident response transparency to further strengthen its security and compliance posture.

A

ACE Logistics Latvia SIA

ace.lv

44

ACE Logistics Latvia SIA is a medium-sized logistics and freight transportation company based in Latvia, operating as part of the ACE Logistics Group with subsidiaries in Estonia, Lithuania, and Ukraine. The company offers a broad range of transportation services including road, air, sea, and rail freight, complemented by customs documentation, warehousing, and cargo insurance. Their market position is that of an established regional player with international reach, supported by ISO 9001 and ISO 14001 certifications that demonstrate commitment to quality and environmental standards. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service information. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site performs moderately well with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers could be enhanced and legacy jQuery usage updated to reduce risk. No explicit incident response or vulnerability disclosure mechanisms are present, which could be improved to enhance security transparency. Contact information is clearly provided, including phone numbers, email, and physical address, supporting business credibility. Overall, the site reflects a trustworthy and professional logistics provider with room for security and compliance enhancements. Strategic recommendations include implementing stronger security headers, updating legacy scripts, publishing incident response contacts and vulnerability disclosure policies, and continuing to enhance privacy compliance and user trust through transparent communication.

E

Eesti Väike- ja Keskmiste Ettevõtjate Assotsiatsioon

evea.ee

46

EVEA (Eesti Väike- ja Keskmiste Ettevõtjate Assotsiatsioon) is a well-established non-profit business association founded in 1988, representing the interests of small and medium-sized enterprises in Estonia. The organization provides a broad range of services including legal advice, financial consulting, and networking opportunities, positioning itself as the largest SME advocacy group in Estonia. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience of Estonian SMEs. Technically, the website is built on WordPress with WooCommerce and uses modern frameworks such as UIkit and analytics tools like Google Analytics via MonsterInsights. The site is hosted by Elkdata OÜ, an Estonian hosting provider, and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for forms, but lacks explicit security headers and documented security policies or incident response plans. Privacy and cookie policies are present and GDPR compliant, indicating a basic level of privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy and credible digital presence for EVEA, with a solid foundation in business credibility and technical implementation. Strategic improvements in security headers, accessibility, and formal security policies would enhance the security posture and compliance maturity.

O

Online Solution (supported by SAVEALITY)

ano-phone.de

59

ANO-PHONE is a German-based small technology business specializing in secure, encrypted Android smartphones with integrated private VPN services. The company targets privacy-conscious consumers seeking enhanced mobile security and anonymity. Their product offers hardware encryption, secure communication channels, and control without backdoors or remote access. The website is built on WordPress with WooCommerce, featuring good content quality and a professional design. Technical infrastructure includes Cloudflare DNS and common analytics and advertising tools. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are lacking. Privacy compliance is partial, with cookie consent implemented but no dedicated privacy policy page found. Contact information is limited to an email address, with no phone or physical address provided. Overall, the domain and website appear legitimate and consistent with the business claims.

O

Online Solution 360 GmbH

ano-phone.com

55

ANO-PHONE is a specialized provider of secure encrypted smartphones integrated with private VPN services, targeting privacy-conscious users and security-focused consumers. The company operates an e-commerce platform selling purified Android-based smartphones with hardware encryption, secure communication tools, and cryptocurrency wallet support. The business is positioned as a niche player in the technology sector, emphasizing privacy and security. The website is professionally designed, mobile-optimized, and includes essential business and contact information, although phone numbers and physical addresses are not explicitly listed. Technically, the site uses WordPress with WooCommerce, Google Analytics, and Cloudflare DNS, delivering moderate performance and good SEO optimization. Security posture is solid with HTTPS and client transfer protection on the domain, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is supported by a cookie consent mechanism and a privacy policy indicating GDPR adherence. Overall, the website and domain registration data indicate a legitimate and trustworthy business presence.

O

Online Solution 360 GmbH

cdn-solution.net

51

Online Solution 360 GmbH operates the website cdn-solution.net, providing full service hosting, cyber security, and content delivery network solutions with a focus on eco-friendly data centers. The company targets businesses requiring advanced hosting and CDN services, emphasizing sustainability and innovative technologies such as GeoDNS, load balancing, and AI-driven energy efficiency. The website is professionally designed using WordPress CMS, hosted on Linode infrastructure, and includes a cookie consent mechanism compliant with GDPR. Contact information and company registration details are clearly presented, enhancing business credibility. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

N

Noatum Logistics

noatumlogistics.com

63

Noatum Logistics operates as a global transport and logistics solutions provider, positioned among the top 50 freight forwarders worldwide. Their services encompass air, ocean, road, and rail freight, along with customs brokerage, warehousing, and value supply chain services. The website reflects a professional and consistent brand presence targeting businesses requiring comprehensive logistics solutions. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and infrastructure appear credible. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security best practices.

B

BOX Options

boxoptions.com

63

BOX Options Market LLC operates a fully automated electronic options exchange specializing in trading OCC issued standardized options on equities and ETFs. The company emphasizes technological innovation and transparency to provide a reliable marketplace for options traders. The website reflects a mature business with a domain age of approximately 8 years and a clear market presence in the financial sector. The target audience includes institutional investors, market participants, and potential members interested in options trading technology and services. The business model centers on providing exchange services, membership access, and market data dissemination.

C

Caotica OÜ

caotica.ee

49

Caotica OÜ is a specialized web design and development agency based in Estonia, operating since 2008. The company offers a comprehensive suite of digital services including website design, web development across platforms like WordPress, Webflow, and Wix, e-commerce solutions with WooCommerce and Shopify, as well as ongoing website management and SEO optimization. Their market position is that of a trusted, experienced small business serving both local and international clients, with over 200 projects completed and 80+ clients served. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, supporting their credibility. Technically, the website is built on WordPress using the Avia Framework and Yoast SEO plugin, leveraging modern web technologies such as jQuery and Google Fonts. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Hosting and domain registration are managed by Zone Media OÜ, consistent with the company's Estonian base. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with anonymized IP tracking in Google Analytics and implements a cookie consent mechanism, indicating awareness of privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no formal security or incident response policies are published. There is no vulnerability disclosure or security.txt file, which could be areas for improvement. Overall, Caotica OÜ presents a low-risk profile with a solid business foundation, professional web presence, and basic privacy compliance. Strategic enhancements in security headers, incident response transparency, and accessibility could further strengthen their security posture and trustworthiness.

T

Tervise Arengu Instituut

tubakainfo.ee

43

Tubakainfo.ee is an official Estonian government public health website managed by the Tervise Arengu Instituut (Health Development Institute). It provides comprehensive educational content on the harms of tobacco use, passive smoking, and supports tobacco cessation efforts. The site targets Estonian-speaking tobacco users, their families, and healthcare professionals, offering interactive tools, videos, and guidance. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. It uses HTTPS with good SSL configuration but lacks some security headers. The site does not display a privacy or cookie policy, which is a notable compliance gap, especially given the use of tracking pixels. Contact information is clearly provided, enhancing business credibility. From a security perspective, the site shows good practices like HTTPS and nonce usage for AJAX but could improve by adding security headers and publishing explicit security and incident response policies. No vulnerabilities or suspicious patterns were detected. WHOIS data confirms the domain is registered to the official Estonian health institute, supporting legitimacy. Overall, the site is trustworthy and professional but should address privacy compliance and security policy transparency to improve its security posture and regulatory adherence.

T

Tervise Arengu Instituut

toitumine.ee

40

The website toitumine.ee is an official Estonian government health information portal managed by the Tervise Arengu Instituut under the Haridus- ja Teadusministeerium (EENet). It provides comprehensive nutrition guidelines, health advice, and tools such as a BMI calculator targeted at Estonian residents across various life stages and health conditions. The site is well-structured with rich content and expert contributions, positioning it as a trusted national resource for healthy eating information. Technically, the site is built on WordPress with modern libraries like jQuery, Bootstrap, and integrates Google Analytics and Facebook SDK for tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is credible and trustworthy but would benefit from enhanced privacy and security practices.

H

Avaleht - Hiv

hiv.ee

40

The website hiv.ee serves as an informational and support portal focused on HIV awareness, prevention, testing, and living with HIV in Estonia. It targets Estonian-speaking individuals, including those living with HIV and at-risk populations, providing educational content, testing locations, and counseling resources. The site is positioned as a trusted health information source, likely operated or supported by public health entities or non-profit organizations. Technically, the site is built on WordPress, utilizing common libraries such as jQuery and Slick Carousel, and integrates marketing and analytics tools like Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers and explicit privacy policies, which are areas for improvement. Overall, the site is functional, professional, and moderately secure, with room to enhance privacy compliance and security posture.

V

Visionest Institute

invicta.ee

47

Visionest Institute is an Estonian education and training organization formed by the merger of Marketingi Instituut, Invicta, and Director. It offers a wide range of professional development programs, including corporate training, personal development plans, and a digital magazine. The company targets businesses and individual learners, focusing on leadership, marketing, sales, and export sectors. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on WordPress with WooCommerce and integrates advanced marketing and analytics tools such as Google Tag Manager, HubSpot, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the domain registration details align well with the business profile, indicating legitimacy and consistency.

N

Nullist OÜ

nullist.ee

50

Nullist OÜ operates a well-established Estonian online marketing education platform, offering practical training and courses for beginners and advanced learners. The company has a strong market presence with over 3000 business clients and targets entrepreneurs, social media managers, and marketing professionals. Their business model focuses on digital education through webinars, workshops, and masterclasses. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Plausible Analytics, ensuring GDPR compliance and user consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is professional, fast, mobile-optimized, and trustworthy, reflecting a mature digital infrastructure and credible business operations.

P

Pärnumaa infovärav

parnumaa.ee

51

Pärnumaa.ee is a well-established regional information portal serving the Pärnumaa county in Estonia. It provides comprehensive information for residents and visitors including news, job listings, educational resources, real estate offers, and business environment insights. The website is professionally designed using WordPress with Elementor and Yoast SEO plugins, ensuring good content management and search engine optimization. The site is bilingual with Estonian as the primary language and English as an alternate option. Technically, the site employs modern web technologies and integrates analytics and marketing tools such as Google Tag Manager, Hotjar, and Facebook Pixel, while maintaining GDPR compliance through a robust cookie consent mechanism.

Z

Zone Media OÜ

digioskused.ee

47

Digioskused.ee is an Estonian educational platform offering free AI and digital skills training, developed in partnership with Google and Estonian government agencies. The website serves individuals and businesses aiming to enhance their digital competencies through practical, accessible online courses. The platform leverages modern web technologies including WordPress, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers are missing. The domain registration is consistent with the business purpose and geographic location, supporting legitimacy. Overall, the site presents a professional and trustworthy digital presence with good content quality and user experience.

E

Eesti kaevandusmuuseum

kaevandusmuuseum.ee

44

Eesti Kaevandusmuuseum is a specialized museum and adventure tourism business located in Estonia, offering unique underground mining experiences, safaris, educational programs, and event hosting. The website is professionally designed using WordPress with WooCommerce and booking plugins, supporting multiple languages and providing rich content about their services and events. The technical infrastructure is modern and includes integration with Google Tag Manager and Facebook SDK for marketing and analytics, although Google Analytics is not fully configured. Security posture is solid with HTTPS enforced and cookie consent implemented, but could be improved with additional security headers and explicit incident response policies. Overall, the website reflects a credible and trustworthy business with a good digital presence.

Z

Zone Media OÜ

teletorn.ee

43

Tallinna Teletorn is a prominent Estonian tourism and hospitality business operating the highest open viewing platform in Northern Europe. The website presents a professional and engaging digital presence, offering ticket sales, event hosting, educational programs, and restaurant services. The company targets tourists, families, and educational groups, positioning itself as a key cultural landmark in Tallinn. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and social media integration, delivering a good user experience with responsive design and multimedia content. Security posture is solid with HTTPS, cookie consent, and anti-spam measures, though explicit security policies and headers could be improved. Overall, the business demonstrates credibility and digital maturity with room for enhanced privacy compliance and security transparency.

T

Tallinna Loomaaed

tallinnzoo.ee

41

Tallinna Loomaaed operates as a well-established public zoo in Estonia, offering extensive animal collections, educational programs, and conservation efforts. The website reflects a mature digital presence with multilingual support, clear navigation, and comprehensive content targeting families, educators, and conservationists. Technically, the site is built on WordPress with WooCommerce for ticketing, integrating modern analytics and marketing tools while maintaining good performance and accessibility standards. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate organization.

E

Eesti Tervisemuuseum

tervishoiumuuseum.ee

43

Eesti Tervisemuuseum is a small, non-profit educational museum based in Tallinn, Estonia, focused on health and the human body. The museum offers a variety of services including exhibitions, educational programs, workshops, event hosting, and a podcast. It targets a broad audience including children, families, and adults interested in health education. The website is professionally designed with consistent branding and rich content, supporting multiple languages (Estonian, Russian, English). The museum maintains a clear online presence with social media channels and provides accessible contact information. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and SEO best practices. The hosting and domain registration are consistent with the museum's Estonian identity.

S

SA Eesti Meremuuseum

meremuuseum.ee

46

Eesti Meremuuseum is a well-established maritime museum organization in Estonia, operating multiple museum sites and offering a range of cultural, educational, and research services related to maritime heritage. The website reflects a professional and consistent brand presence, targeting museum visitors, educators, researchers, and maritime enthusiasts. The business model is that of a government or non-profit cultural institution with a medium organizational size and a history dating back to at least 2010. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimization tools such as WP Rocket. It integrates Google Analytics and Tag Manager for analytics and tracking, and employs Google reCAPTCHA for form security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with clear contact information provided. Overall, the website is trustworthy, well-structured, and provides a good user experience.

A

Anvol

anvol.ge

55

Anvol is a well-established private company specializing in the distribution and retail of toys and children's products, operating primarily in the Baltic Sea region and Georgia. The company has a professional team and a significant market presence with over 2000 customers and multiple retail chains. The website is built on WordPress with multilingual support, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. Contact information is primarily email-based, with no phone or physical address explicitly provided on the site. Overall, the website presents a professional image but could improve in privacy compliance and security best practices.

A

Anvol

anvol.lv

52

Anvol is a well-established private company specializing in the wholesale and retail distribution of toys and children's products across the Baltic Sea region and selected countries in Eastern Europe and Central Asia. Founded in 1995 and headquartered near Tallinn, Estonia, it operates multiple country-specific websites and retail chains, serving over 2000 clients with a strong portfolio of global toy brands. The website reflects a professional digital presence built on WordPress, with moderate performance and good mobile optimization. However, it lacks critical privacy and cookie policies, which are essential for GDPR compliance. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but missing security headers and incident response information indicate room for improvement. Overall, the site is trustworthy and credible but should enhance privacy compliance and security transparency to reduce risk and build greater user trust.

A

Anvol

anvol.ee

50

Anvol is a well-established Estonian company specializing in the wholesale distribution and retail of toys, games, and trend products across the Baltic and Nordic regions. With over 30 years of experience and a large portfolio of more than 400 brands, Anvol serves a broad client base including retailers and consumers. The company operates both wholesale and retail channels, including a franchise model and online presence. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for marketing insights. The site is mobile-optimized and professionally designed, supporting multiple languages for regional markets. Security posture is solid with HTTPS and Cloudflare DNS, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears credible and trustworthy with consistent WHOIS data and domain registration.

A

Anvol Oy

anvol.fi

53

Anvol Oy is a well-established family-owned company specializing in the distribution and retail of toys and children's products across multiple countries in the Baltic Sea region and beyond. The company operates a large network of retail stores under the XS Lelut brand and maintains strong partnerships with major toy manufacturers. The website reflects a mature business with a professional online presence, leveraging WordPress CMS and Cloudflare DNS services. Security posture is solid with HTTPS enabled and Cloudflare usage, though improvements can be made by implementing security headers and privacy compliance features. The domain registration data is consistent with the company's business claims, enhancing trustworthiness. Overall, Anvol presents a credible and stable business with room for enhanced privacy and security practices.

M

MIXD meediaagentuur

mixd.ee

44

MIXD meediaagentuur is a small Estonian digital marketing agency specializing in digital media solutions, SEO, and conversion rate optimization to help brands grow sales and meet profit goals. The company presents a professional and well-structured website built on WordPress, leveraging modern SEO and analytics tools such as Rank Math and Google Tag Manager. The technical infrastructure is solid with HTTPS enabled and asynchronous loading of scripts, though performance is moderate and accessibility is basic. Security posture is generally good with no exposed sensitive data, but lacks advanced security headers and incident response mechanisms. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security practices.

3

3Cloud

3cloudsolutions.com

65

3Cloud is a specialized technology services company focused exclusively on Microsoft Azure cloud solutions, data analytics, AI, and app innovation for enterprise clients. Established in 2016, the company positions itself as a leading Azure partner and innovator in generative AI services, helping enterprises transform and optimize their business performance through cloud technologies. Their market position is reinforced by strong client testimonials, awards, and Microsoft partner recognitions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and React, hosted behind Cloudflare for performance and security. The site demonstrates excellent design, mobile optimization, and SEO practices. Security posture is strong with HTTPS, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response page is found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

H

häk agency

hak.ee

42

häk agency is a strategic design and digital agency based in Estonia, founded in 2018. The company offers comprehensive services including branding, web environments, and advertising, serving over 500 satisfied clients. Their market position is strong, supported by client testimonials, awards, and certifications that enhance their credibility. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site runs on WordPress with modern tools such as Gravity Forms, Google Tag Manager, and Facebook Pixel, indicating a robust infrastructure. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website and business demonstrate high professionalism and trustworthiness, with minor recommendations to enhance security headers and publish security policies.

M

Milrem Robotics

milrem.com

54

Milrem Robotics is a leading global provider of autonomous unmanned ground vehicles (UGVs) specializing in combat-ready robotic solutions that enhance military operational effectiveness and tactical advantages. Established in 2013 and headquartered in Estonia, the company has expanded its footprint with offices across Europe, the UAE, and the USA, serving 19 customer countries. Their product portfolio includes multi-mission UGVs such as THeMIS, VECTOR, HAVOC, and Type-X, supported by advanced autonomy kits and participation in key EU defense projects. The website reflects a professional and modern digital presence with comprehensive content tailored to defense and military audiences. Technically, the website is built on WordPress with modern SEO and user experience optimizations, including mobile responsiveness and accessibility considerations. It employs standard security measures such as HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms. However, there is room for improvement in security headers and explicit security policy disclosures. Analytics usage is moderate, primarily via Google Analytics through Google Tag Manager, with privacy compliance well addressed. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but lacks dedicated incident response or vulnerability disclosure information. WHOIS data confirms domain legitimacy and consistency with the company's history and operations. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, supporting Milrem Robotics' position as a reputable defense technology provider.

M

Milrem Robotics

milremrobotics.com

54

Milrem Robotics is a leading global provider of autonomous unmanned ground vehicles, specializing in combat-ready robotic solutions that enhance military operational effectiveness and troop safety. Established in 2013 and headquartered in Estonia, the company has expanded its footprint with offices across Europe, the UAE, and the USA. Their product portfolio includes multi-mission UGVs like THeMIS, VECTOR, HAVOC, and Type-X, supported by advanced autonomy integration kits. The company actively participates in European defense projects, reinforcing its market leadership and innovation capabilities. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Fluent Forms, ensuring good SEO, accessibility, and user experience. The site is mobile-optimized and uses Google reCAPTCHA to secure forms. Cookie consent mechanisms and comprehensive privacy policies demonstrate strong privacy compliance. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and use of reCAPTCHA. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting areas for improvement. No incident response or security policy information is publicly available, which could be enhanced to build trust. Overall, Milrem Robotics presents a professional, trustworthy, and technically sound online presence aligned with its business stature. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen their security and compliance posture.

P

Petri Kajander

petrikajander.com

60

Petri Kajander's website serves as a personal and professional platform showcasing his work as a purpose-driven founder, content creator, and mentor. The site features a variety of content including blogs, podcasts, and curated social media feeds, targeting entrepreneurs, business leaders, and individuals interested in personal development and startups. The business model revolves around thought leadership and content dissemination rather than direct product sales. Technically, the website is built on WordPress, leveraging common plugins and modern web technologies such as jQuery and YouTube Embed Plus. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. However, hosting provider details are not explicitly identified. From a security perspective, the site uses HTTPS and implements some best practices like setting rel="noopener noreferrer" on external links. However, it lacks visible security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and branding appear consistent and professional. Overall, the website is functional and professional but would benefit from enhanced transparency in privacy, security policies, and domain registration details to improve trust and compliance.

D

Dirty Rigger™

dirtyrigger.co.uk

45

Dirty Rigger™ is a UK-based company specializing in manufacturing and retailing rugged personal protective equipment (PPE) such as gloves, tool bags, belts, and accessories tailored for professional riggers and tradespeople. Established in 2010 and operating under the parent company The Le Mark Group, the company positions itself as a niche leader in the rigging and trade gear market. Their website reflects a focused e-commerce business model targeting professionals requiring durable and reliable work gear. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable digital infrastructure. The site is hosted likely with SiteGround and uses Ionos SE as the domain registrar. The website demonstrates good SEO practices, mobile optimization, and moderate performance. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and implements a comprehensive cookie consent mechanism with detailed user controls. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which are areas for improvement. Overall, the site is professional, trustworthy, and compliant with basic privacy standards, but could enhance transparency and security posture further.

B

Bizberg Themes

bizbergthemes.com

58

Bizberg Themes is a small technology business specializing in the development and distribution of free and premium WordPress themes tailored for various sectors including education, NGOs, business, and eco-friendly organizations. The company emphasizes fast loading, SEO optimization, and user-friendly design, supported by dedicated customer service. Technically, the website is built on WordPress CMS, hosted behind Cloudflare CDN, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks comprehensive security headers and cookie consent mechanisms, which are areas for improvement. Overall, the website is professional and trustworthy with clear business focus, though privacy compliance could be enhanced.

A

Ahola Group

aholagroup.com

60

Ahola Group is a well-established Finnish logistics and transport company with over 70 years of experience, operating primarily in the Nordic and Central/Eastern European markets. The company offers a broad range of services including road transport, special heavy logistics, and digital logistics solutions through its subsidiaries Ahola Transport, Ahola Special, and Ahola Digital. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and a focus on sustainability and innovation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance. It uses Google Tag Manager for analytics and tracking, and Swiper.js for interactive UI elements. The site is mobile optimized and demonstrates good SEO practices, although accessibility features could be improved. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No security vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS registration data is a concern and should be investigated further to confirm domain legitimacy. Overall, the site presents a secure and trustworthy front for a large logistics business. Strategically, Ahola Group should enhance its security posture by publishing formal security policies and incident response contacts, implementing additional security headers, and considering a vulnerability disclosure program. Improving accessibility and continuing to monitor third-party scripts for vulnerabilities will further strengthen their digital maturity and trustworthiness.

A

AlikeAudience

alikeaudience.com

62

AlikeAudience operates as a technology company specializing in providing high-performing audience segments for marketers, leveraging global mobile and transaction data to enhance marketing ROI. The company positions itself as a privacy-compliant data provider for major demand-side platforms (DSPs), targeting marketing professionals seeking effective audience segmentation solutions. The website is built on WordPress and integrates common marketing and analytics technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA to support user interaction and data collection. However, the absence of WHOIS domain registration data raises concerns about the domain's legitimacy and ownership status, which warrants further verification. Security posture is moderate, with some best practices like reCAPTCHA implemented, but lacking visible security headers and explicit incident response information. Privacy compliance is weak due to missing privacy and cookie policies on the site. Overall, the website presents professional content and good SEO optimization but requires improvements in transparency, security, and compliance to enhance trustworthiness and business credibility.

E

eLMEK Accounting OÜ

elmek.ee

43

eLMEK Accounting OÜ is a small Estonian accounting and payroll service provider established in 2017. The company positions itself as a friendly and expert partner for businesses needing accounting and payroll advice and services. It has received recognition as one of the fastest growing accounting firms in Estonia and awards for female entrepreneurship, indicating a positive market presence and growth trajectory. The website clearly communicates its key services and team members, targeting Estonian businesses seeking professional financial services. Technically, the website is built on WordPress using the Enfold theme, enhanced with Yoast SEO and jQuery-based components like Owl Carousel. It employs Google Tag Manager for analytics and tracking, and the site is hosted by Zone Media OÜ, consistent with the Estonian locale. The site is mobile-optimized and SEO-friendly, with good performance and accessibility basics. From a security perspective, the site uses HTTPS with strong SSL configuration and implements a cookie consent mechanism compliant with GDPR principles. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The site collects user data via a contact form with required fields and uses cookies and session storage for user experience and tracking. Overall, the website presents a professional and trustworthy front for a small accounting firm with good technical implementation and moderate privacy compliance. Strategic improvements include publishing a privacy policy, security policy, and incident response information, enhancing security headers, and improving accessibility features to strengthen compliance and trust.

K

Kysk

kysk.ee

45

SA Kodanikuühiskonna Sihtkapital (KÜSK) operates as a key non-profit organization in Estonia dedicated to supporting civil society, social innovation, and community development. Established in 2010, it provides grant funding and resources to NGOs and community initiatives, positioning itself as a central actor in Estonia's non-profit sector. The website reflects a professional and consistent brand presence with multilingual support and rich media content to engage its audience. Technically, the site is built on WordPress with a modern tech stack including SEO and analytics tools, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and some best practices, though it lacks explicit security policies and vulnerability disclosures. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is trustworthy and credible, with room for improvement in transparency and security documentation.

H

Hestia Hotel Group

hestiahotels.com

50

Hestia Hotel Group is a regional hospitality business operating multiple hotels and apartments across Baltic cities including Tallinn, Riga, Haapsalu, and Pärnu. Their offerings range from comfort and superior hotels to spa and old town accommodations, targeting travelers seeking quality lodging and leisure experiences in these locations. The website is professionally designed using WordPress and WooCommerce, integrating modern web technologies and providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are missing. WHOIS data is unavailable, which slightly reduces transparency but the overall business credibility remains high based on website content and contact information. The site uses analytics and marketing tools responsibly with GDPR compliance. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further improve trust and security maturity.