Security Directory

A

Aitan Eestit MTÜ

aitaneestit.ee

51

Aitan Eestit MTÜ is a small Estonian non-profit organization founded in 2020, focused on charitable activities that connect donors with those in need. The organization primarily engages young people to collect donations and spread their message, aiming to improve social welfare in Estonia. The website reflects this mission with clear calls to action for donations and partnership, supported by a modern WordPress infrastructure using Elementor and GiveWP plugins. The site is multilingual, supporting Estonian, English, and Russian languages, enhancing accessibility for diverse audiences. Technically, the website is built on a robust WordPress platform with SEO optimization via Yoast and integrates Google Analytics for visitor tracking. The site uses HTTPS with a valid SSL certificate, ensuring secure data transmission. However, it lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. The donation forms collect essential contact information such as email and phone numbers, but no explicit privacy or cookie policies are present, indicating a gap in GDPR compliance. From a security perspective, the site demonstrates basic best practices like HTTPS and nonce tokens in forms but misses critical elements like security headers and documented incident response or vulnerability disclosure policies. The WHOIS data is transparent and consistent with the organization's founding date and domain usage, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening. Strategically, the organization should prioritize implementing comprehensive privacy and cookie policies, enable DNSSEC, and add security headers to improve trust and compliance. Enhancing transparency around data protection and incident response will further strengthen their security culture and stakeholder confidence.

N

NORDWOOD

nordwood.ee

39

NORDWOOD is a collaborative brand representing four wood industry companies based in Estonia, focusing on wood sawing, processing, and sales. The website provides basic information about the company, its products, employment opportunities, and certifications. The business targets customers and potential employees interested in the wood manufacturing sector. The domain is well-established since 2013 and registered with a reputable Estonian registrar, supporting the legitimacy of the business. Technically, the website is built on WordPress and uses common technologies such as jQuery and Google Fonts. It employs the Wordfence security plugin and has HTTPS enabled, indicating a baseline security posture. However, the site lacks advanced security headers and proper configuration of analytics tools. The website is moderately optimized for mobile and performance but has room for improvement in SEO and accessibility. From a security perspective, the site shows basic good practices like HTTPS and Wordfence usage but lacks visible privacy and cookie policies, security headers, and incident response information. No forms or contact emails were found, which limits user engagement and transparency. The absence of privacy compliance elements is a notable gap given GDPR requirements. Overall, the website is functional and moderately professional but requires enhancements in privacy compliance, security headers, and user contact options to improve trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, adding security headers, properly configuring analytics, and providing clear contact and incident response information.

P

Pinest AS

pinest.ee

45

Pinest AS is an Estonian manufacturing company founded in 2005 specializing in finger-jointed and laminated wood components. The company emphasizes flexibility in raw materials and production to serve large and medium-sized industrial clients, primarily using domestic pine wood. Their production facility is located in Himmaste village, Põlvamaa. The website reflects a professional and consistent brand presence with clear business and contact information, supported by recognized certifications such as FSC and PEFC. Technically, the site is built on WordPress with modern libraries and tools, including Google Analytics and Tag Manager for tracking, and uses SEO best practices via Yoast. Security posture is generally good with HTTPS enabled and secure forms, though some improvements are needed in script handling and security headers. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and well-positioned in its market segment.

C

CDED

cd-ed.com

59

CDED operates as an online distance education provider specializing in flexible diploma programs across various fields including Medical Administration, Accounting, Graphic Design, Health Information Management, and Office Administration. The website positions itself as a specialized college offering remote learning opportunities, targeting students seeking flexible education options. The business appears established with a domain age dating back to 1999, indicating longevity in the education sector. Technically, the website is built on WordPress using the Astra theme and enhanced with plugins such as Yoast SEO and Ultimate Addons for Gutenberg. It integrates marketing and analytics tools including Google Tag Manager and Trustpilot for customer reviews. The site demonstrates good mobile optimization and SEO practices, though performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections. However, it lacks DNSSEC and security headers, and does not provide explicit privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies with consent mechanisms, and providing clear incident response contacts.

E

Eastern College

easterncollege.ca

69

Eastern College is a well-established diploma-granting educational institution founded in 2008, serving Atlantic Canada with multiple campus locations and online program offerings. The college specializes in hands-on training across business, technology, healthcare, law, and supply chain sectors, targeting prospective students seeking career-focused education. The website reflects a professional and consistent brand image with comprehensive program information, career services, and support for international students. Technically, the site is built on WordPress with modern web technologies, including Google Analytics, Google Tag Manager, LiveChat, and reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism detected. Overall, the website is trustworthy and credible, with strong business legitimacy supported by domain age and content quality.

E

e-Governance Academy

egovconference.ee

47

The e-Governance Conference 2025 website represents a well-established global event organized by the e-Governance Academy and supported by Estonian government entities. It targets digital governance leaders and practitioners worldwide, showcasing Estonia's leadership in digital transformation. The site is content-rich, professionally designed, and features high-profile speakers and partners, reinforcing its market position as a leading digital governance conference. Technically, the site uses WordPress with Elementor, integrates Vimeo for video content, and employs modern web technologies, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and secure content embedding, though it lacks some security headers and formal policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet GDPR requirements. Overall, the site is trustworthy and credible, but improvements in privacy and security transparency are recommended.

S

SDD BV

sddbv.com

65

SDD BV is a specialized manufacturing company focused on providing tailor-made print finishing solutions to businesses. Founded in 2016, the company positions itself as a niche provider in the print finishing industry, offering customized systems that add value to their clients' operations. Their website reflects a professional and consistent brand image, targeting business customers seeking print finishing equipment and services. Technically, the website is built on WordPress using the Divi theme, hosted by Argeweb Hosting, and incorporates modern web technologies including Google Fonts and GDPR compliance plugins. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security-wise, the website uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and advanced security headers, indicating room for improvement in hardening the site against attacks. No explicit privacy policy, terms of service, or incident response information is present, which may impact compliance and trust. Overall, the website is functional and professional but could benefit from enhanced security measures and clearer compliance documentation.

A

AMR Europe

amreurope.com

62

AMR Europe is a specialized distributor of high-end 3D printing systems, serving industrial, educational, and general 3D printing markets primarily in the Netherlands and Europe. The company offers a broad portfolio including 3D printers, scanners, filament, accessories, and parts, supported by a showroom and e-commerce platform. Their market position is that of a trusted niche technology provider with a focus on professional additive manufacturing solutions. Technically, the website is built on a modern WordPress CMS with WooCommerce and Divi theme, integrating common web technologies and optimization tools. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the business credibility is high with transparent contact information and social media presence. No blocking or WAF interference was detected, allowing full content access and analysis.

V

Virumaa Muuseumid

virumaamuuseumid.ee

41

Virumaa Muuseumid is a regional museum network based in Estonia, focusing on cultural heritage and historical exhibitions in the Virumaa region. The website serves as an informational platform showcasing various museums such as Rakvere linnus and Palmse mõis, targeting visitors interested in history and culture. The organization appears to be a small-sized entity, likely government or non-profit, founded recently in 2022. The site is multilingual, supporting Estonian, English, Russian, and Finnish, enhancing accessibility for diverse audiences. Technically, the website is built on WordPress, utilizing common plugins like All in One SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is hosted by Zone Media OÜ, a known Estonian hosting provider. Performance and mobile optimization are good, with accessibility features implemented, including an accessibility toolbar. SEO practices are solid with proper meta tags and structured data. Security posture is adequate with HTTPS enabled and use of reCAPTCHA for forms. However, some security headers are missing, and DNSSEC is not enabled, which could be improved. Privacy compliance is strong, with a clear privacy policy, cookie consent banner, and GDPR adherence. Contact information is limited to a phone number and contact forms, with no public emails found. Overall, the website is professional, trustworthy, and serves its purpose well. Recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and compliance.

E

Eesti Üliõpilaskondade Liit

isic.ee

43

ISIC Eesti is the official Estonian representative of the internationally recognized ISIC student and teacher card brand, operated by Eesti Üliõpilaskondade Liit since 1993. The website provides detailed information about ISIC cards, discounts, and partnerships with educational institutions and businesses. It targets students, teachers, and youth in Estonia, offering card issuance and related services. The site is built on a modern WordPress platform using Elementor and The7 theme, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is limited due to missing privacy and cookie policies. Contact information is clearly presented, including email, phone, and physical address, alongside active social media channels.

A

Amandus Communication AB

amanduswp.com

56

Amandus Communication AB operates AmandusWP, a subscription-based WordPress framework service tailored for corporate websites, especially targeting listed and unlisted companies requiring secure, stable, and investor relations-focused websites. The company positions itself as a niche provider offering a Website as a Service (WaaS) model with setup fees and monthly subscriptions, emphasizing ease of use, security, and expert support. Technically, the website leverages modern technologies including React and WordPress, hosted behind Cloudflare for DNS and DDoS protection, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, penetration testing, and monitoring, though some security headers and DNSSEC are missing. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism is implemented. Overall, the website is professional, trustworthy, and well-aligned with the business model and market positioning.

E

Eesti Füüsika Selts

fyysika.ee

49

FYYSIKA.EE is a specialized Estonian website operated by the Estonian Physical Society, focusing on physics, science, and technology news, seminars, and educational content. The site serves a niche audience of physics students, educators, and researchers primarily in Estonia. Technically, it is built on WordPress with a modern theme and uses standard web technologies such as jQuery and Google Fonts. The site is well-structured with semantic markup and schema.org data, enhancing SEO and accessibility. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the site is professional and trustworthy but could improve in privacy transparency and security best practices.

L

Laen kinnisvara tagatisel

makerlab.ee

51

The website makerlab.ee operates as a small Estonian business focused on providing information and services related to real estate secured loans. It targets individuals and investors interested in financing options secured by property, offering detailed content on loan types, repayment methods, and amortization. The business appears to be recently established in 2022, with domain registration consistent with the website's country and business focus. Technically, the site is built on WordPress using WooCommerce and Elementor, leveraging modern web technologies such as jQuery and Bootstrap. The site is mobile optimized and performs moderately well, with good SEO practices evident through meta tags and structured data. Hosting details are not explicit, but Cloudflare DNS is used, enhancing DNS reliability. From a security perspective, the website uses HTTPS, which is mandatory and well configured. However, it lacks important security headers like Content-Security-Policy and HSTS, which could improve its security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of privacy and cookie policies, and no consent mechanisms are present. Overall, the website presents a moderate risk profile with good business credibility but notable gaps in privacy compliance and security best practices. Strategic improvements in security headers and privacy disclosures are recommended to enhance trust and regulatory compliance.

L

Leden Group

ledengroup.com

55

Leden Group Oy is a Finnish manufacturing company specializing in metal-based contract manufacturing, steel service center operations, and cold roll formed steel profiles. The company is part of the HANZA Group, a larger parent organization, positioning Leden as a significant player in the Baltic manufacturing sector. Their website reflects a professional and modern digital presence, built on WordPress with Elementor, supporting multiple languages and featuring a consent management platform to comply with privacy regulations. The company emphasizes quality and operational excellence, as evidenced by their ISO 9001:2015 certification and detailed service offerings. Technically, the website is well-structured with good SEO and mobile optimization, though some security headers could be improved. Security posture is solid with HTTPS and domain transfer protections, but lacks explicit security policies or incident response information. Overall, the website and business information indicate a credible and established manufacturing partner with room for enhanced transparency in security and privacy policies.

Ellington Printing OÜ is a well-established Estonian full-service printing and production agency with over 30 years of experience and a strong market position as the largest in its sector locally. The company leverages a cloud-based ordering platform to streamline client interactions with production providers, emphasizing sustainability and efficiency. The website reflects a professional digital presence built on WordPress with modern marketing and analytics tools integrated. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Security posture is adequate with HTTPS and domain transfer protections but lacks advanced security headers and DNSSEC. Contact information is clearly presented, supporting business credibility. Overall, the website is functional, user-friendly, and professionally designed but requires improvements in privacy compliance and security hardening.

A

AvaFin Holding LTD

avafin.com

63

AvaFin Holding LTD is a Cyprus-based fintech company specializing in innovative consumer loans across six countries. Founded in 2012, it leverages advanced technology and data science to provide fair, transparent, and accessible financial products. The company has a strong international presence with over 1.6 million clients and a majority ownership by Capitec Bank since 2024. The website reflects a professional fintech brand with clear business focus and consistent branding. Technically, the site is built on WordPress, uses modern tracking and cookie consent tools, and is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS, domain transfer lock, and no visible vulnerabilities, though DNSSEC is not enabled. Privacy compliance is robust with comprehensive privacy and cookie policies and an active consent mechanism. However, no direct contact emails or phone numbers are published, and no terms of service or explicit security policy pages are found. Overall, AvaFin demonstrates a mature fintech business with good digital maturity and security awareness, suitable for its market and regulatory environment.

R

Rara Themes

rarathemes.com

76

Rara Themes is a WordPress theme provider established in 2015, offering both free and premium mobile-friendly WordPress themes. The company targets WordPress users seeking easy-to-use, professional themes and operates a theme club membership model. The website demonstrates a good level of professionalism with clear navigation, consistent branding, and a significant user base indicated by the happy customers count. Technically, the site is built on WordPress with popular plugins such as Easy Digital Downloads and AffiliateWP, and uses modern tracking and marketing tools including Google Analytics, Facebook Pixel, and Microsoft Clarity. Hosting and DNS are managed via NameCheap and Cloudflare respectively, with HTTPS enabled ensuring secure communication. However, DNSSEC is not enabled, representing a minor security gap. The website lacks explicit privacy policy, terms of service, and security policy pages, which impacts privacy compliance and security posture scores. No direct contact emails or phone numbers were found, which may affect user trust and support accessibility. Overall, the site is well-structured and functional but could improve in privacy and security transparency.

A

Adbangs Technologies

adbangs.com

46

Adbangs Technologies is a digital marketing and web development company based in Bangalore, India, founded in 2016. The company offers a broad range of services including responsive web design, dynamic website development, WordPress development, digital marketing services such as PPC advertising and social media marketing, business branding, and e-commerce development across multiple platforms. Positioned as a professional and affordable service provider, Adbangs targets small to medium businesses seeking comprehensive digital solutions. Technically, the website is built on WordPress using WPBakery Page Builder, integrates Google Analytics and Adsense for tracking and monetization, and uses Cloudflare for DNS services. The site is mobile optimized with good SEO practices but lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Overall, the domain registration is consistent and legitimate, supporting business credibility. Recommendations include implementing privacy and cookie policies, enhancing security headers, and enabling DNSSEC to improve trust and compliance.

O

Orpetron

orpetron.com

49

Orpetron is a specialized online platform established in 2020 that honors outstanding web design projects globally. It serves as a source of inspiration for web designers and creative professionals by showcasing award-winning websites. The platform operates on WordPress with a modern tech stack including Elementor, WooCommerce, and various marketing and analytics tools. The website demonstrates good design quality, mobile optimization, and SEO practices, positioning itself as a niche authority in the web design awards space. Security posture is adequate with HTTPS and some security headers, though DNSSEC is not enabled and advanced security policies are not disclosed. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, Orpetron presents a credible and professional business with room for improvement in privacy and security transparency.

B

Blind Android Users Podcast

blindandroidusers.com

35

Blind Android Users Podcast is a niche media platform dedicated to providing podcast content focused on Android accessibility for blind and visually impaired users. The website hosts a podcast player with multiple recent episodes and links to popular podcast platforms such as Spotify, Amazon Music, and Apple Podcasts. The target audience is primarily blind Android users and accessibility advocates. The business model revolves around content creation and community engagement, supported by donations and social media presence. Technically, the website is built on WordPress using modern plugins including Podcast Player, Gutenberg blocks, and performance optimizations via WP Rocket. It employs HTTPS with good SSL configuration and integrates Google Tag Manager for analytics. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. However, no hosting provider or domain registration details are available, raising questions about domain legitimacy. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy, cookie, or terms of service policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is present. The absence of WHOIS data for the domain is a significant concern, suggesting either a very new or unregistered domain, or use of privacy protection that is not reflected in the WHOIS query results. Overall, the website presents professional content and a good user experience but requires improvements in transparency, compliance, and security best practices. The domain legitimacy should be verified to ensure trustworthiness.

L

Liviko

liviko.eu

48

Liviko is a well-established international group specializing in premium alcoholic beverages, with a strong market presence in the Baltic region and distribution across 60 markets. The company offers a range of services including distillery tours, production, export, and brand representation. Their website reflects a mature digital presence built on WordPress with modern SEO and privacy compliance tools. The technical infrastructure is solid, leveraging popular plugins and analytics services, and the site is mobile-optimized with good user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a professional and trustworthy online presence consistent with the company's business stature.

F

Fractory

fractory.com

62

Fractory is a well-established UK-based manufacturing service provider specializing in scalable metal fabrication solutions for engineering businesses. Founded in 2000, the company offers a comprehensive range of services including laser cutting, CNC machining, welding, and prototyping, supported by 1-1 engineering assistance and flexible payment terms. Their market position is strengthened by a professional online platform that facilitates instant quoting and order management, targeting project and series manufacturing clients primarily in the UK and Europe. The website reflects a mature digital presence with multi-language support and integration of modern marketing and analytics tools.

H

Harju Maakonnaraamatukogu

keilaraamatukogu.ee

40

Harju Maakonnaraamatukogu is a regional public library serving Harju County in Estonia, providing a range of library services including book lending, children's services, local history resources, and event hosting. The website targets local residents and library users, offering information and access to library resources and services. The business operates as a public institution with a focus on education and cultural enrichment. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, hosted under a reputable Estonian registrar. The site is mobile-optimized, accessible, and uses HTTPS for secure communication. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

K

Keila Muusikakool

keilamuusikakool.ee

39

Keila Muusikakool is a small local music school based in Keila, Estonia, providing music education services primarily to students and parents in the local community. The website offers detailed information about competitions, study programs, schedules, events, and pricing. The business operates with a clear focus on education and community engagement. Technically, the website is built on WordPress using Elementor, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies such as privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

K

オンラインカジノ日本 ⚡️ 日本のベストカジノオンライン

kajinojapan10.com

56

KajinoJapan10.com is a Japanese language online casino affiliate and informational website targeting Japanese players interested in legal and reputable online casinos. The site provides detailed casino reviews, bonus offers, payment method guides, and legal context about gambling in Japan. The business model is primarily affiliate marketing, promoting various international online casinos accessible to Japanese users, often via VPN. Technically, the site is built on WordPress with common performance and user experience optimizations, including mobile responsiveness and SEO best practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to missing privacy and cookie policies. No direct contact or incident response information is provided, which limits transparency. Overall, the domain registration is consistent and supports legitimacy. Strategic improvements in privacy, security headers, and contact transparency would enhance trust and compliance.

P

Playversity

playversity.co

46

Playversity is an educational platform focused on transforming teaching through game-based learning. The website offers games, resources, learning opportunities, and programs for trainers, targeting educators and learners interested in innovative educational methods. The business is relatively new, founded in 2021, and operates primarily online with a small organizational size. The platform maintains a professional and consistent brand presence with good content quality and clear navigation. Technically, the site is built on WordPress using Elementor and several addons, hosted on HostGator. The infrastructure is modern and supports mobile responsiveness and SEO best practices. Performance is moderate, with room for improvement in accessibility and security headers. The site uses HTTPS and domain registration includes protective EPP locks, but DNSSEC is not enabled. From a security perspective, the site has a good baseline with HTTPS and domain protections but lacks critical security headers and privacy compliance documents such as privacy and cookie policies. No forms or data collection mechanisms were detected on the homepage, reducing immediate data protection concerns. The WHOIS data shows privacy protection for the registrant, which is reasonable for this business type. Overall, the website is functional and professional but should improve privacy compliance and security posture to enhance trust and regulatory adherence.

M

Moneyzen

moneyzen.ee

56

Moneyzen is an Estonian-based online financial platform specializing in providing personal loans and investment opportunities through a transparent and empathetic approach. The platform targets individuals seeking flexible loan options and investment avenues, operating primarily in the Estonian market with multilingual support. The business model centers on connecting borrowers and investors, offering various loan types including personal, renovation, travel, health, auto, education, and refinancing loans. Despite recent challenges leading to the cessation of new loan and investment applications as of June 6, 2025, Moneyzen remains committed to servicing existing contracts and investor accounts. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager, reCAPTCHA, Hotjar, and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, although explicit security policies and incident response information are absent. Overall, Moneyzen presents a professional and trustworthy online presence with clear business information and contact channels. The domain registration aligns well with the business claims, enhancing legitimacy. However, improvements in privacy compliance documentation, security policy transparency, and incident response readiness are recommended to strengthen trust and regulatory adherence.

B

Bondora

bondora.ee

63

Bondora is a well-established Estonian financial services company specializing in personal loans. The website presents a professional, user-friendly platform that facilitates quick loan applications with transparent terms and flexible repayment options. The company has a strong market presence with over 1.5 million applicants and 17 years of experience, positioning it as a trusted lender in the region. Technically, the site leverages WordPress with Bricks Builder, integrates modern web technologies, and employs robust cookie consent mechanisms to ensure GDPR compliance. Security posture is strong with HTTPS, anti-forgery tokens, and Cloudflare protections, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, good privacy practices, and a mature digital infrastructure.

R

Raha.ee

raha.ee

57

Raha.ee is an Estonian financial advice platform established in 2016, offering practical guidance on earning, saving, and investing money. The website serves primarily individuals seeking to improve their personal finances through educational content and loan comparison tools. It holds a leading position in the Estonian market for financial advice websites, leveraging affiliate partnerships with multiple loan providers to monetize its services. Technically, the site is built on WordPress with modern web technologies, including JavaScript libraries and translation services, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and safe external linking practices, though explicit security headers and policies are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

N

Navirec Australia Pty Ltd

navirec.com.au

60

Navirec Australia Pty Ltd operates a professional website offering advanced GPS tracking and fleet management solutions tailored for diverse industries including construction, mining, emergency services, and military sectors. The company provides hardware and software services including real-time vehicle monitoring, eco-driving analysis, and mobile applications, positioning itself as a trusted provider in the transportation technology market. The website demonstrates a mature digital presence with good SEO, structured data, and performance optimizations leveraging WordPress and Cloudflare technologies. Security posture is strong with HTTPS and no visible vulnerabilities, though the absence of security policies and cookie consent mechanisms indicates room for compliance improvements. Overall, the site reflects a credible medium-sized business with consistent branding and trust signals such as testimonials and case studies.

W

Workforce Software

wfsaustralia.com

73

Workforce Software, acquired by ADP, is a leading enterprise SaaS provider specializing in cloud-based workforce management solutions. Their offerings include time and attendance, rostering, absence management, labor forecasting, and employee experience tools, targeting large organizations globally. The website reflects a mature digital presence with professional design, comprehensive content, and strong branding consistency. Technically, the site is built on WordPress with Elementor and integrates multiple marketing and analytics tools, demonstrating a modern and well-maintained infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are not explicitly present. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

H

HUUM

huum.de

48

HUUM is a medium-sized manufacturing company specializing in sauna stoves and innovative sauna control systems, combining traditional Estonian sauna knowledge with modern Nordic design and technology. The company maintains a strong international presence with multiple regional domains targeting different markets including Germany, Estonia, Europe, the US, and Japan. The website is built on WordPress with performance optimizations and includes structured data for SEO enhancement. Privacy compliance is well addressed through Cookiebot, providing a comprehensive cookie consent mechanism and linking to a detailed privacy policy. However, explicit contact information and terms of service are not readily found on the homepage, which could be improved for better user trust and compliance.

K

Kalendersystem | Komplet bookingsystem til udlejning

kalendersystem.dk

43

Kalendersystem.dk is a Danish website offering a complete booking system tailored for rental services, including smart lock integration. The website is built on WordPress using the Divi theme and employs jQuery and Google Fonts for styling and interactivity. The technical infrastructure is standard for small to medium-sized businesses, with moderate performance and good mobile optimization. Security posture is basic, with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from improved security and privacy practices to enhance trust and compliance.

E

Elfag

elfag.no

49

Elfag is a Norwegian electrical service provider targeting both private and business customers. The company offers a range of electrical services including smart home solutions, electrical safety checks, and electric vehicle charging installations. The website positions Elfag as a trusted local electrician chain with a 5-year warranty and partnerships with reputable Norwegian companies such as Lampehuset and Huseiernes landsforbund. Technically, the website is built on WordPress with modern SEO and analytics tools, including Yoast SEO and Google Analytics. The site is well-structured, mobile-optimized, and uses HTTPS with a valid SSL certificate, indicating a good security baseline. However, explicit security headers and detailed security policies are not present. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, though more comprehensive GDPR documentation could improve compliance. Overall, the website demonstrates a professional and trustworthy online presence with moderate technical sophistication and a solid security posture.

W

Webmarked

webmarked.net

52

Webmarked is a small e-commerce application development company specializing in Shopify apps such as Smart Wishlist and Smart RSS Feed. Their offerings target Shopify store owners aiming to increase sales and improve customer engagement. The website is built on WordPress using the OnePress theme and integrates common plugins like Contact Form 7 and Google reCAPTCHA for form security. The technical infrastructure is standard and moderately optimized for performance and mobile use. Security posture is good with HTTPS enforced and spam protection mechanisms in place, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data for the domain is a notable concern, potentially impacting trustworthiness. Overall, the site presents a professional business presence with moderate risk due to incomplete transparency in domain registration and privacy compliance.

CAACI Iberoamérica is a regional international organization specializing in audiovisual and cinematographic matters across Ibero-America. It serves as a collaborative platform for audiovisual authorities and stakeholders in 21 member countries, promoting cooperation, regulatory frameworks, and cultural exchange. The website reflects a professional presence with good content quality and consistent branding, targeting industry professionals and governmental bodies. Technically, the site is built on WordPress with common plugins and frameworks, hosted on SiteGround, and shows moderate performance with good mobile optimization. Security posture is adequate with HTTPS and domain protection, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Contact is available via a web form but lacks direct email or phone contacts. Overall, the site is trustworthy and credible within its niche, though improvements in security and privacy documentation are recommended.

F

Finlandia Cheese

finlandiacheese.com

70

Finlandia Cheese is a well-established brand specializing in the production and retail of high-quality Nordic cheeses and butter. The company emphasizes its Finnish heritage and commitment to natural ingredients, positioning itself as a premium dairy product provider. The website reflects a mature digital presence with professional design, clear navigation, and SEO optimization, targeting consumers interested in Nordic dairy products. Technically, the site is built on WordPress with modern plugins and integrates Google Tag Manager and CookiePro for analytics and consent management. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of explicit security headers and privacy policy pages indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further investigation. Overall, the site demonstrates a solid business and technical foundation but should enhance transparency and security compliance to strengthen trust and regulatory adherence.

M

Maidonjalostajien ja meijeritukkukauppiaiden liitto ry

maidonjalostajat.fi

62

Maidonjalostajien ja meijeritukkukauppiaiden liitto ry (M2L) is a Finnish dairy industry association founded in 2011, dedicated to promoting the business interests of milk producers and the dairy industry. The website serves as an informational platform targeting dairy producers, processors, and wholesale traders, providing industry news, contact information, and organizational details. The association holds a clear market position as a representative body within Finland's dairy sector, offering advocacy and business development support to its members. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Valio custom components, ensuring good SEO, mobile responsiveness, and accessibility. The use of Google Tag Manager and Adobe Typekit fonts indicates a mature digital infrastructure. Performance is moderate with good mobile optimization and clear navigation. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with comprehensive privacy and cookie policies and an active consent mechanism. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with minor recommendations to enhance security transparency and incident readiness.

V

Valio

valio.com

69

Valio is a well-established Finnish dairy company with over 120 years of history, specializing in innovative dairy ingredient solutions for the global food industry. Their product portfolio includes lactose-free, protein-enriched, sugar-reduced, and specialized nutrition products, supported by a strong commitment to sustainability and quality. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation targeting food industry professionals and manufacturers. Technically, the site is built on WordPress with modern plugins and analytics tools, optimized for mobile and SEO. Security posture is good with HTTPS and consent management, though some security headers and explicit policies could be improved. The WHOIS data is unavailable, which slightly reduces trust but is mitigated by strong branding and content. Overall, the site demonstrates a high level of professionalism and business credibility.

O

Oddlygood

oddlygood.com

69

Oddlygood is a plant-based food and beverage brand focused on delivering non-dairy, gluten-free products such as drinks, yogurts, desserts, cheese alternatives, and cooking essentials. The brand positions itself as a taste-revolutionary player in the retail sector, targeting consumers seeking delicious and daring plant-based options. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress and various Valio custom plugins. The technical infrastructure includes Google Tag Manager and Adobe Typekit fonts, hosted likely on Valio's CDN. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. The lack of WHOIS registration data is a notable concern, potentially indicating an unregistered domain or privacy-protected registration, which slightly impacts trustworthiness. Overall, the site is credible, user-friendly, and compliant with privacy regulations, but domain registration verification is recommended.

V

Valio Eesti AS

karjaarvalios.ee

40

Valio Eesti AS operates as a significant player in the Estonian dairy manufacturing sector, providing fresh dairy products and employment opportunities. The website serves as a career portal inviting potential employees to join their team, emphasizing training, fair pay, and a safe work environment. The company is part of the international Valio group, known for its innovative and sustainable food solutions. Technically, the website is built on WordPress with Elementor, offering a modern and responsive user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security policies to meet compliance standards.

S

Scoro

scoro.ee

73

Scoro is a professional services automation software company founded in 2013, targeting agencies, consultancies, and professional services businesses. Their SaaS platform offers comprehensive work management solutions including project, financial, and resource management to improve profitability and operational efficiency. The company maintains a strong market position with positive user reviews and a consistent brand presence. Technically, the website is built on WordPress CMS and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Hotjar, HubSpot, and Visual Website Optimizer. The site is well-optimized for SEO and mobile use, with good content quality and user experience. Security-wise, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security headers and documented security policies. WHOIS data is unavailable, which slightly impacts trust but the overall digital footprint suggests a legitimate and professional business. Strategic recommendations include enhancing security headers, formalizing security and incident response policies, and maintaining transparency in domain registration data.

C

Chudovo

chudovo.de

56

Chudovo is a medium-sized German-based software development company with over 15 years of market presence, specializing in custom software solutions, dedicated development teams, and IT consulting services. The company targets businesses seeking scalable, high-quality software development and maintenance, leveraging modern technologies and AI tools to enhance delivery and performance. Their market position is supported by a professional website, client testimonials, and a presence on reputable platforms like Clutch. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and SEO optimization via Yoast. Hosting and DNS are managed through Cloudflare, providing CDN and security benefits. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Cloudflare for protection but lacks explicit security headers and formal security policies or incident response disclosures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website and business demonstrate a solid risk posture with minor areas for improvement in security policy transparency and accessibility. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Sisustuskoda OÜ

sisuko.ee

42

Sisustuskoda OÜ is a small Estonian company specializing in custom furniture manufacturing, particularly kitchen furniture. Established in 2014, it serves local consumers seeking high-quality, tailor-made interior solutions. The website reflects a niche retail business model with a focus on craftsmanship and design. The company maintains an active online presence with social media integration and a WooCommerce-based e-commerce platform. Technically, the website is built on WordPress using Elementor and Astra theme, leveraging modern web technologies and Google services such as reCAPTCHA and Tag Manager. Security posture is adequate with HTTPS enabled and basic protections, but lacks explicit security headers and formal privacy or cookie policies. Overall, the site is professional and functional, though privacy compliance and security best practices could be enhanced to improve trust and regulatory adherence.

Eesti Arst is a well-established Estonian medical journal operated by Celsius Healthcare OÜ, providing professional healthcare news, research, and clinical guidelines primarily for medical professionals in Estonia. The website is built on WordPress and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is solid with HTTPS and a mature domain, but lacks some compliance elements such as privacy and cookie policies. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the site presents a professional and trustworthy front for its target audience.

Bole is a small manufacturing company specializing in innovative flooring products that follow the natural growth of trees, positioning itself as a sustainable and design-focused brand. The website is built on WordPress and incorporates modern web technologies including jQuery, Select2, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site features a catalog download form with user consent mechanisms, indicating attention to privacy compliance. Security posture is adequate with HTTPS enabled and basic form validation, but lacks explicit security headers and detailed security policies. The domain WHOIS data is privacy protected, which is common for small businesses, and no suspicious indicators were found. Overall, the website presents a professional and trustworthy front for a niche manufacturing business.

N

NEVERHACK

neverhack.ee

68

NEVERHACK Estonia is a leading cybersecurity company providing comprehensive cyber defense solutions to both private and public sector clients primarily in Estonia and nearby markets. Founded recently in 2023, the company offers a broad range of services including cyber operations centers (SOC), offensive security testing, advisory services, and cybersecurity solutions such as managed security infrastructure and cyber insurance. The website reflects a professional and modern digital presence built on WordPress with Bootstrap and integrates multiple analytics and marketing tools. The company holds ISO 27001 and ISO 9001 certifications, enhancing its credibility and trustworthiness. Technically, the website is well-structured with good mobile optimization and SEO practices. It uses Cloudflare DNS and CDN services, ensuring reliable hosting and performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. Overall, NEVERHACK Estonia demonstrates a mature cybersecurity business with a solid market position in Estonia, targeting organizations requiring advanced cyber defense capabilities. The website supports this with clear service descriptions, contact options, and trust signals. There are no critical security issues detected, but recommendations include enhancing security headers and publishing incident response and vulnerability disclosure information to further strengthen security transparency and compliance.

GDF is a newly established company (2024) operating in the transportation and technology sectors, specializing in GPS tracking devices and solutions for vehicles and machinery in Africa. The website presents a professional and consistent brand image with clear contact information, targeting businesses and individuals requiring GPS tracking services. The technical infrastructure is based on WordPress with Elementor and Astra theme, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and credible but requires improvements in privacy and security disclosures to enhance trust and compliance.

E

Euribor.ee

euribor.ee

57

Euribor.ee is a specialized financial information website focused on providing current Euribor interest rates, historical data, and related financial tools such as loan and mortgage calculators. The site targets individuals and businesses primarily in Estonia and the Baltic region who require up-to-date Euribor data for financial decision-making. The website is built on a WordPress platform using modern technologies including Bootstrap for responsive design and Highcharts for interactive data visualization. It leverages Cloudflare DNS services and Google tools for analytics and advertising. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and formal privacy or cookie policies, indicating room for compliance improvement. The domain registration is consistent with the business focus and regional presence, enhancing trustworthiness. Overall, Euribor.ee presents a professional and functional digital presence with moderate risk due to privacy and security policy gaps.

E

eHost OÜ

hoius.ee

37

Hoius.ee is a newly launched Estonian informational website focused on educating visitors about financial deposits and savings products. The site provides content in Estonian language explaining what deposits are, their types, and their benefits. The business model appears to be an informational platform targeting individuals interested in saving money securely. The website is built on WordPress and hosted by eHost OÜ, a known Estonian hosting provider. The technical infrastructure is standard for small informational sites, using PHP 7.4 and common SEO plugins. The site is mobile optimized and has a moderate performance profile. Security posture is basic with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. No contact or incident response information is provided, which limits trust and compliance. Overall, the site is functional and professional but requires improvements in privacy, security, and contact transparency to enhance credibility and compliance.