Security Directory

A

Avera-Trading AS

avera.ee

44

Avera-Trading AS operates a professional e-commerce website focused on retailing cleaning chemicals, equipment, and hygiene products primarily in Estonia. Established in 2010, the company presents a well-structured online catalog with clear pricing and product categorization, targeting businesses and consumers seeking cleaning solutions. The website leverages WordPress and WooCommerce platforms, enhanced with popular plugins such as Yoast SEO and WPBakery Page Builder, indicating a mature digital infrastructure. Integration of Google Analytics and Tag Manager reflects a data-driven approach to marketing and user behavior analysis. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and privacy policies are missing, representing compliance and security improvement opportunities. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit security disclosures.

E

Edhotels OÜ

edreamhotels.com

52

Edhotels OÜ operates a specialized hospitality technology and web design business focused on providing hotel sales and management software (BOUK) and website design services primarily in Estonia and the Baltic region. The company targets hotels, guest apartments, spas, and other accommodation providers, offering integrated booking engines and management tools to streamline operations and increase direct bookings. Their market position is that of a small but established regional player with a decade-plus history, supported by client testimonials and a professional online presence. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Facebook Pixel, Hotjar, and MailerLite for marketing automation. The site is mobile-optimized, SEO-friendly, and uses consent management for GDPR compliance. Performance is moderate with good user experience and navigation clarity. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and lack of explicit security or incident response policies are areas for improvement. The domain WHOIS data is missing, which raises concerns about domain legitimacy and registration consistency, potentially impacting trust. Overall, the website and business demonstrate professionalism and technical maturity, but the domain registration anomaly requires verification. Strategic recommendations include enhancing security headers, publishing security policies, and resolving WHOIS discrepancies to strengthen trust and compliance.

P

PersonaliDisain

personalidisain.ee

44

PersonaliDisain is an Estonian-based small business specializing in strategic human resource consulting and development services. The company offers a range of HR-related services including consulting, system development, surveys, recruitment, training, and coaching. Their market position is that of a niche HR consulting partner serving organizations seeking to optimize their personnel management. The website is professionally designed using WordPress and Bootstrap, with good mobile optimization and clear navigation. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Leadfeeder, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and use of reCAPTCHA on forms, though security headers could be improved. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, though no terms of service or security policy pages were found. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Recommendations include enhancing security headers and reviewing third-party scripts to reduce risk.

F

FinEst-Hall Factory OÜ

pvc-hall.com

47

FinEst-Hall Factory OÜ is a specialized manufacturer and service provider of PVC hangars and awnings, serving primarily B2B clients in Northern Europe. The company offers a full turnkey solution including design, manufacturing, installation, maintenance, and expansion of modular PVC structures, complemented by metal processing services such as plasma cutting and tube laser. Their market position is supported by multiple ISO certifications and a portfolio of completed projects, emphasizing quality, flexibility, and customer satisfaction. Technically, the website is built on WordPress with WooCommerce and employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel. The site is well-optimized for SEO, mobile-friendly, and accessible, with structured data enhancing search engine visibility. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces domain transfer protection. However, it lacks some advanced security headers and does not publish a dedicated security policy or incident response information. Tracking and marketing tools are used responsibly with user consent mechanisms in place. Overall, the website presents a professional, trustworthy, and compliant digital presence for a small manufacturing business. Recommendations include enhancing security headers, enabling DNSSEC, and publishing security and incident response policies to further strengthen trust and compliance.

S

Sparta IT Solutions

sparta-it.eu

47

Sparta IT Solutions operates the website sparta-it.eu, positioning itself as a trusted supplier and distributor of branded IT infrastructure hardware including Supermicro, HP, Lenovo, and Cisco products. The company targets enterprise customers and partners seeking reliable IT hardware solutions, offering a range of products such as networking hardware, servers, and storage solutions. The website is professionally designed using WordPress with the Divi theme and supports multiple languages, indicating a focus on international markets primarily in Europe. Technical infrastructure is modern and stable, with HTTPS enabled and SEO optimizations in place, though some performance and accessibility aspects could be improved. Security posture is adequate with SSL in place but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the website reflects a credible small technology business with room for improvement in privacy and security transparency.

U

Unterwegs Celle

unterwegs-celle.de

48

Unterwegs Celle is a small retail business specializing in outdoor equipment and apparel, targeting customers in the Celle region of Germany. The website serves as an online presence to complement their physical store, showcasing top outdoor brands and providing contact information for customer engagement. The business positions itself as a local specialist in outdoor retail, with a focus on quality brands and customer service. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Smart Slider 3, Contact Form 7, and Cookiebot for cookie consent management. Hosting is provided by Timme Hosting, with multiple name servers indicating a stable infrastructure. The site demonstrates good SEO practices, mobile optimization, and basic accessibility features, though there is room for improvement in security headers and accessibility compliance. From a security perspective, the site enforces HTTPS and uses Cookiebot to manage user consent, including blocking of scripts until consent is given. Google Analytics is implemented with IP anonymization to enhance privacy compliance. However, explicit security policies, incident response contacts, and advanced security headers are not present, indicating a moderate security posture suitable for a small retail business but with opportunities for enhancement. Overall, the website is professional, functional, and compliant with GDPR requirements regarding privacy and cookie management. The risk level is moderate, with no critical vulnerabilities detected. Strategic recommendations include improving security headers, adding explicit security and incident response policies, and maintaining up-to-date software to mitigate potential risks.

T

Technics in Management Transfer (TMT)

tmt-aba.com

52

Technics in Management Transfer (TMT) is a specialized consulting firm established in 1978 in Tokyo, Japan, focusing on labor and human resource consulting for multinational firms. The company offers services including personnel policy, rules of employment, staff reduction, compensation design, union relations, and training seminars. The website presents a professional image with clear service descriptions, founder information, and client testimonials, targeting businesses operating in Japan seeking HR and labor consulting expertise. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern web technologies and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and visible privacy or cookie policies, indicating compliance gaps. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the website content appears credible. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

J

Junior Achievement Eesti

ja.ee

45

Junior Achievement Eesti is a well-established Estonian non-profit foundation focused on promoting entrepreneurship education among youth from grades 1 through 12. Founded in 1992, it provides practical business and financial literacy programs, including the Õpilasfirma® student company initiative, supported by mentors and volunteers. The organization holds a leading position in Estonia's educational sector for entrepreneurship. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, with embedded YouTube videos in privacy-enhanced mode and minimal tracking via plausible.io. Security posture is good with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies. No contact emails or phone numbers are visible on the homepage, and no incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

W

WOW EVENTS

wowevents.eu

43

WOW EVENTS is an established Estonian event management company with over 23 years of experience, specializing in corporate events such as conferences, client events, large-scale festivals, and internal communications. The company positions itself as a trusted and professional partner in the Estonian market, offering comprehensive event planning and production services. Their website reflects a mature digital presence with a professional design, clear navigation, and extensive service descriptions targeting business clients in Estonia. Technically, the website is built on WordPress using the Divi theme and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and MonsterInsights. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced, but explicit security headers are not clearly detected. No critical vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is an area for improvement as no explicit privacy or cookie policies were found, and user tracking is extensive via multiple third-party services. The WHOIS data is not publicly available due to EURid privacy policies, which is common for .eu domains but reduces transparency. Contact information is clearly provided with company domain emails and phone numbers, and social media presence is strong across major platforms. Overall, the website and business appear legitimate and professional, with minor gaps in privacy compliance and WHOIS transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, enhancing security headers, and improving accessibility to strengthen trust and compliance.

D

Digimatch OÜ

digimatch.eu

46

Digimatch OÜ is a specialized international business consultancy founded in 2020, focused on facilitating Estonian digital companies' growth in the German market. Leveraging a vetted network of partners and a mission to accelerate growth through partnerships, Digimatch offers matchmaking, warm lead connections, market research, entry strategy, and funding assistance. The company operates primarily in the technology sector with a small-sized business profile based in Estonia. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers, though explicit security policies and cookie consent mechanisms are absent. Privacy policies are comprehensive and GDPR compliant. Contact information is clearly provided, including email, phone, and physical address, alongside social media presence on LinkedIn and Facebook.

R

Ridge Capital

ridgecap.eu

49

Ridge Capital AS is a small Estonian investment firm founded in 2010, specializing in active investing focused on emerging markets, particularly in Central and Eastern Europe, South Eastern Europe, and the Baltic countries. The company leverages over 25 years of team experience to pursue event driven trading and long-term value investments, maintaining portfolio liquidity through diverse financial instruments. The website reflects a professional and consistent brand presence with clear business descriptions and contact information, targeting investors interested in niche emerging markets. Technically, the website is built on WordPress using Elementor and enhanced with Yoast SEO and Weglot for multilingual support. The site is mobile optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit security or incident response policies. No forms collecting personal data are present on the homepage, reducing immediate data protection concerns. Overall, the website demonstrates a mature digital presence with good privacy compliance and business credibility. Security practices are adequate but could be improved by adding security headers, incident response contacts, and vulnerability disclosure mechanisms. The domain registration is consistent with the business history and shows no suspicious indicators, supporting the legitimacy of the entity. Strategic recommendations include enhancing security headers, publishing a security policy, providing incident response contact details, and considering a vulnerability disclosure program to strengthen trust and compliance.

S

Strands

strands.com

84

Strands is a well-established fintech company specializing in digital banking software solutions that leverage real-time data and AI to enhance customer engagement and financial management. Their platform targets financial institutions, banks, and SMEs, offering modular solutions such as Personal Financial Management, Business Financial Management, AI-driven insights, and Carbon Footprint analytics. The company demonstrates a strong market position with a global client base and a consistent brand presence. Technically, the website is built on WordPress with modern marketing and analytics integrations, including HubSpot, Google reCAPTCHA Enterprise, Matomo, and LinkedIn Insight. The site is well-optimized for SEO, mobile responsiveness, and user experience. Security posture is solid with HTTPS enforcement and bot protection, though DNSSEC is not enabled and explicit security policies are not published. Overall, the domain registration is consistent with the business claims, showing legitimacy and transparency. The website exhibits extensive user tracking balanced with privacy compliance mechanisms such as cookie consent banners and GDPR-aligned policies.

V

Visionest Institute

mi.ee

49

Visionest Institute is an Estonian-based education and training organization formed by the merger of Marketingi Instituut, Invicta, and Director. The company offers a wide range of training courses and development programs targeting both businesses and individual learners, positioning itself as a key player in the Estonian professional education market. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. The technical infrastructure is built on WordPress with integrations including WooCommerce, HubSpot, Google Tag Manager, and Facebook Pixel, indicating a modern marketing and analytics setup. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. The WHOIS data aligns well with the business claims, showing a legitimate and consistent registration. Overall, the website demonstrates good compliance with privacy regulations and provides clear business information, supporting a trustworthy online presence.

S

SPARK Social

sparksocial.ee

43

SPARK Social operates an Estonian-based online social media training platform branded as SPARK PRO koolitus. The website offers a comprehensive social media course targeting individuals ranging from beginners to professionals, including social media specialists, marketers, and small business owners. The business model is centered on paid online education with scheduled live sessions via Google Meet, supplemented by Q&A with industry experts and access to recorded materials. The company leverages known social media strategists and creative professionals as instructors, enhancing credibility and market positioning within the education sector in Estonia. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, WPBakery Page Builder for layout, and Slider Revolution for visual content. It uses modern web technologies including jQuery, Google Fonts, and Font Awesome icons. Hosting and domain registration are managed by Zone Media OÜ, a reputable Estonian registrar. The site demonstrates good mobile optimization and moderate performance, though accessibility and SEO optimizations are basic. From a security perspective, the site enforces HTTPS and uses secure forms via Contact Form 7. However, it lacks visible security headers such as Content-Security-Policy and X-Frame-Options, which are recommended best practices. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of a privacy policy and cookie consent mechanism, which poses a compliance risk under GDPR. Analytics usage includes Google Analytics, indicating moderate user tracking. Overall, the website is professionally designed and credible, with a clear business focus and consistent branding. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance trust and regulatory adherence.

Z

Zephyr Ventilation

zephyronline.com

51

Zephyr Ventilation is a well-established premium kitchen appliance brand specializing in range hoods, wine coolers, and beverage coolers. The company targets homeowners and kitchen designers seeking stylish and innovative kitchen ventilation and refrigeration solutions. Their website reflects a medium-sized retail business with a strong focus on design and customer support, including a dedicated help center and parts store. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and reCAPTCHA v3, but lacks DNSSEC and explicit security headers, and does not publish a security policy or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite extensive tracking. Overall, the domain is legitimate, long-standing, and consistent with the business identity.

H

Huntloc

huntloc.com

57

Huntloc is a technology company specializing in real-time hunting tracking applications and GPS-GSM tracking devices for hunting dogs. Founded in 2013 and based in Estonia, the company targets hunters and hunting dog owners with a niche product offering that enhances hunting efficiency and safety. The website is built on WordPress with WooCommerce, leveraging modern web technologies such as Bootstrap and FontAwesome, and integrates extensive analytics and tracking tools to monitor user engagement. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent mechanisms in place but no visible privacy policy or terms of service. Overall, the site presents a professional and consistent brand image with moderate trustworthiness.

NetMedia is a small Estonian technology-focused website providing educational content and reviews related to web development and hosting services. The site is built on WordPress and hosted by Zone Media OÜ, with a consistent domain registration and hosting provider alignment. The website demonstrates good content quality, SEO optimization, and a professional design with clear navigation. However, it lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and security posture. The site uses HTTPS and modern technologies but could improve accessibility and security best practices.

C

Modebranschens Nyheter: E-handel, Varumärken och Interaktiv Kundupplevelse

consortiofashiongroup.com

60

ConsortioFashionGroup.com is a small-scale WordPress-based blog focused on delivering news and insights related to the fashion industry, specifically targeting e-commerce, brand strategies, and interactive customer experiences. The website content is primarily in Swedish and features articles authored by a consistent author, indicating a focused editorial approach. The business model centers on content publishing to attract fashion professionals and enthusiasts interested in digital marketing and investment trends within the fashion sector. Technically, the website leverages WordPress CMS with common web technologies such as jQuery and Bootstrap Grid for responsive design. Hosting and DNS services are provided via Cloudflare, ensuring reliable DNS resolution and HTTPS encryption. The site uses Matomo analytics for visitor tracking but lacks visible cookie consent mechanisms, which may impact privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy, cookie, or terms of service policies are published, and no contact or incident response information is available, indicating gaps in compliance and transparency. No vulnerabilities or suspicious activities were detected. Overall, the website presents a professional and consistent brand image with good content quality and user experience but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and regulatory adherence.

A

Avitus

avitus.ee

41

Avitus is a small Estonian health portal providing information and practical advice on mental and physical health, nutrition, exercise, vitamins, and supplements. The website targets Estonian-speaking users interested in improving their health and wellbeing through informed lifestyle choices. The business operates primarily as an informational platform without visible e-commerce or direct service offerings. Technically, the site is built on WordPress using the GeneratePress theme, with modern web technologies and good mobile optimization. The hosting and domain registration are consistent with the business location and age. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with only a basic privacy policy present and no cookie consent mechanism. Contact information is limited to a single company email address, with no phone or physical address provided. Overall, the site is professionally designed and trustworthy but could improve in privacy and security practices.

N

Nordic Aviation Group

nordica.ee

44

Nordic Aviation Group is a medium-sized airline group based in Estonia, operating subsidiaries Nordica and Xfly. The company provides air transportation services and aircraft leasing. Recently, the group filed for bankruptcy, ceasing daily operations and initiating bankruptcy proceedings. The website serves as a corporate communication channel, providing press releases and company information. The technical infrastructure is based on WordPress with modern web technologies such as Bootstrap and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are missing. Privacy compliance is basic, with no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

A

Anju Software, Inc.

anjusoftware.com

61

Anju Software, Inc. is a medium-sized, customer-focused software company specializing in life sciences technology solutions. Their offerings include adaptable software suites for clinical research, medical affairs, and data science, targeting biopharmaceutical companies and CROs globally. The company positions itself as a trusted partner to top pharmaceutical firms, providing tools that accelerate clinical trials and enhance patient outcomes. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the website is built on WordPress with modern frameworks like Bootstrap and Elementor, integrating multiple analytics and marketing tools such as Google Analytics, LinkedIn Insight, and VWO. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security measures include HTTPS enforcement and reCAPTCHA on forms, but additional security headers could improve the security posture. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms, though no explicit terms of service or vulnerability disclosure policies were found. The absence of WHOIS data reduces domain trustworthiness, suggesting privacy protection or unregistered status, which should be verified. Overall, Anju Software presents a credible and professional online presence with strong business and technical foundations. Strategic improvements in security headers, accessibility, and transparency policies would further enhance trust and compliance.

N

Nordecon AS

nordecon.com

52

Nordecon AS is a leading construction and real estate development company based in Estonia, with a strong market presence since 1989. The company operates in Estonia and neighboring countries including Finland, Sweden, and Ukraine. It offers comprehensive services including building and facility construction, project management, and real estate development. The company is publicly listed on the Nasdaq Tallinn stock exchange since 2006, reinforcing its market credibility. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and detailed project showcases. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, optimized for mobile and accessibility. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some improvements like DNSSEC and security headers could enhance protection. Overall, the website and domain registration data align well with the company's business claims, indicating high legitimacy and trustworthiness.

S

Saaremaa Golf & Country Club

saaregolf.ee

50

Saaremaa Golf & Country Club is a small hospitality business based in Estonia, specializing in golf tourism and resort services. The company offers a world-class golfing experience with well-maintained courses and resort amenities targeting golf enthusiasts and families. The website is professionally designed using WordPress with the Divi theme and incorporates modern SEO and analytics tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks some advanced security headers and explicit incident response information. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is trustworthy and functional, supporting the business's market position as a regional golf resort.

W

Walless

walless.com

66

Walless is a modern Baltic law firm established in 2008, providing bespoke legal services focused on client trust, openness, and innovation. The firm targets businesses in the Baltic region and offers services including arbitration, dispute resolution, and corporate legal advisory. Their market position is that of a growing regional legal services provider with a professional online presence. Technically, the website is built on WordPress, leveraging modern plugins and technologies such as Google Analytics, reCAPTCHA, and GDPR cookie consent mechanisms. The site is well optimized for performance and mobile devices, with good SEO and accessibility features. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a credible and professional business with a high trustworthiness rating.

N

Norma

norma.ee

41

Norma is a well-established manufacturing company specializing in automotive safety system components, operating as a subsidiary of the global Autoliv group. The company serves major automotive manufacturers worldwide, leveraging over 135 years of experience. The website reflects a professional and consistent brand image, targeting automotive industry stakeholders and potential employees. The technical infrastructure is based on WordPress with modern web technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and sandboxed embedded content, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from improved privacy and security disclosures.

P

Pactum AI, Inc.

pactum.com

73

Pactum AI, Inc. operates a leading agentic AI platform focused on enterprise procurement automation. Their AI agents autonomously negotiate non-strategic supplier contracts at scale, unlocking significant savings and operational efficiencies for Fortune 500 companies and large enterprises. The company positions itself as a market leader with over half a decade of experience and a strong portfolio of negotiation agents tailored to various procurement needs. Technically, the website is built on WordPress, leveraging modern analytics and consent management tools, hosted via Cloudflare with secure HTTPS enforcement. Security posture is strong with appropriate headers and secure domain registration, though DNSSEC is not enabled. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website reflects a mature, professional enterprise SaaS business with high trust and credibility.

E

Eesti Disaini Maja / Estonian Design House

estoniandesignhouse.ee

49

Estonian Design House is a platform dedicated to promoting Estonian design and supporting local designers. The website serves as a showcase for Estonian design products and aims to connect designers with a broader audience interested in unique, locally crafted design. The business operates within a niche market focused on design enthusiasts and customers valuing Estonian cultural products. Technically, the website is built on WordPress with SEO optimization via Yoast and includes social media integration, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS, but lacks advanced security headers and explicit security or privacy policies, which could be improved to enhance trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

T

Tartu Loomemajanduskeskus

lmk.ee

40

Tartu Loomemajanduskeskus (LMK) is a well-established creative industries development center and incubator based in Tartu, Estonia, founded in 2009. It focuses on supporting creative enterprises through incubation programs, mentoring, training, and providing rental spaces. The organization targets creative startups and existing businesses in the South Estonia region, aiming to boost innovation and export potential in sectors such as fashion, contemporary art, film, and performing arts. The website reflects a professional and consistent brand presence with active social media engagement and regularly updated news content. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern JavaScript libraries like Swiper.js and jQuery. It employs Google Analytics and Jetpack for visitor tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting and domain registration are stable and consistent with the business's geographic location. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security or incident response policies. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR requirements. No vulnerability disclosure or security.txt files are present, which could be improved to enhance trust and transparency. Overall, the website is functional, professional, and credible but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

G

Geo S.T.

geo.ee

48

Geo S.T. is an established Estonian company specializing in geodetic measurements, 3D laser scanning, construction geodesy, and cadastral services. Founded in 2010, it serves clients in energy, transportation, and real estate sectors, offering precise surveying and modeling solutions. The company maintains a professional web presence with clear service descriptions and partner affiliations, targeting construction and industrial clients. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, integrating Google Analytics and Google Tag Manager for user tracking. The site is mobile-optimized and moderately performant, though accessibility and SEO could be improved. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy but no consent mechanism or detailed privacy policy. Overall, the domain registration is consistent and trustworthy, supporting the company's legitimacy.

M

Meta Advisory Group OÜ

metaadvisory.ee

43

Meta Advisory Group OÜ is a professional PR and government relations agency based in Estonia, operating as part of the Rud Pedersen Group. The company offers a broad range of communication services including government relations, reputation management, crisis communication, marketing communication, and digital strategies. The website reflects a mature business with a strong market position, evidenced by its recognition as the Aasta Kommunikatsiooniagentuur 2025 and its presence in multiple European cities. The target audience includes clients seeking expert communication and PR services with a strategic approach. Technically, the website is built on WordPress with modern tools such as Google Tag Manager and Facebook Pixel for analytics and marketing. Performance and mobile optimization are good, with SEO best practices implemented via Yoast SEO. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility and business goals.

W

WERMO AS

wermo.ee

40

WERMO AS is an established Estonian furniture manufacturer with over 75 years of experience in crafting high-quality furniture for living rooms, home offices, and dining rooms. The company leverages traditional craftsmanship combined with modern production technologies to meet discerning customer expectations. Their website reflects a medium-sized manufacturing business targeting consumers and businesses seeking premium furniture products. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Contact Form 7, with multilingual support via WPML. The site is hosted likely by Zone Media OÜ, an Estonian registrar and hosting provider. Security-wise, the site uses HTTPS with good SSL configuration and integrates Google reCAPTCHA to protect forms. However, it lacks explicit privacy, cookie, and security policies, as well as vulnerability disclosure mechanisms, which are important for compliance and trust. Overall, the website is professional and functional but could improve its privacy and security transparency.

S

SinuLab

sinulab.ee

53

SinuLab is a technology company specializing in software solutions for strategic performance management and people development, primarily targeting small and medium-sized enterprises. Their SaaS offerings include modules for people data management, performance tracking, employee development, and talent management, complemented by e-learning courses. The company has a consistent brand presence and a professional website that clearly communicates its services and target audience. Technically, the website is built on WordPress with modern plugins and integrates marketing and analytics tools such as HubSpot and Google Tag Manager. Security posture is good with HTTPS enforced and domain transfer protections in place, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy page. Overall, the website and business present a trustworthy and professional image with room for enhanced security and compliance maturity.

Z

Zone Media OÜ

rahinge.ee

47

Rahinge.ee is a small Estonian website focused on promoting and providing information about Rahinge Wakepark, a water sports and relaxation destination near Tartu, Estonia. The site offers content about wakeboarding, SUP boards, canoe and kayak rentals, and leisure facilities such as beaches and ball courts. The business model centers on regional water sports enthusiasts and visitors seeking recreational activities. The website is built on WordPress with popular plugins and themes, showing moderate performance and good mobile optimization. SEO practices are adequately implemented with proper meta tags and structured data. Security posture is basic with HTTPS enabled but lacks DNSSEC and security headers, and no cookie consent mechanism is present. Contact information is limited to a contact form without explicit emails or phone numbers. The domain is newly registered in 2025 by Zone Media OÜ, a known Estonian registrar and hosting provider, consistent with the website's launch timeframe. Overall, the site is functional and professionally designed but could improve in privacy compliance and security best practices.

P

Powerfleet (formerly Fleet Complete)

fleetcomplete.com

66

Powerfleet (formerly Fleet Complete) is a leading provider of connected fleet management and asset tracking solutions, targeting businesses ranging from small-medium enterprises to large Fortune 500 companies. The company offers a comprehensive suite of products including fleet management software, AI dash cameras, asset trackers, and telematics integrations, positioning itself as a key player in the transportation and logistics sector. The website reflects a mature digital presence with consistent branding and a focus on data intelligence to optimize fleet operations. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, LinkedIn Insight, and 6sense. The site is mobile-optimized, SEO-friendly, and includes privacy and cookie consent mechanisms, indicating a good level of digital maturity and compliance with privacy regulations like GDPR. From a security perspective, the site enforces HTTPS and includes basic security headers, but lacks some advanced headers and a public security or incident response policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data transparency slightly reduces trust but does not outweigh the professional and active nature of the website. Overall, the risk profile is moderate to low with recommendations to enhance security headers, publish explicit security policies, and consider vulnerability disclosure mechanisms to further strengthen trust and compliance.

T

TJO Konsultatsioonid

tjo.ee

52

TJO Konsultatsioonid is a leading Estonian consulting firm specializing in management systems development, strategic management, and production efficiency enhancement. The company offers a range of consulting services and training programs targeted at businesses seeking to improve operational effectiveness and comply with international standards. Their market position is strong within Estonia, supported by multiple ISO certifications and a robust client base. The website infrastructure is built on WordPress, utilizing modern plugins such as Yoast SEO and Ninja Forms, integrated with Google Analytics and Google Tag Manager for performance and user behavior tracking. The site is mobile-optimized and demonstrates good SEO practices, contributing to a positive digital maturity profile. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA on forms, and indications of security plugins like Wordfence. However, some security headers are not explicitly confirmed and could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website and business present a trustworthy and professional image with no critical security issues detected. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a formal incident response policy to further strengthen security and compliance.

E

Elkdata OÜ

keeleagentuur.ee

41

Keeleagentuur is a small Estonian language agency founded in 2022, specializing in language education and translation services primarily for Estonian and Russian languages. The company offers goal-oriented language courses for adults, including exam preparation and thematic courses. The website is built on WordPress using the Astra theme, Elementor page builder, and WooCommerce for e-commerce capabilities. It employs modern web technologies and integrates Google Analytics for visitor tracking. The website is well-structured, mobile-optimized, and SEO-friendly, but lacks explicit privacy and terms of service policies. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Overall, the business appears legitimate and consistent with its domain registration data.

T

TTK - Leak Detection System

ttkuk.com

70

TTK Leak Detection is a specialized manufacturer of liquid leak detection systems, focusing on water, acids, and oil leak detection for commercial and industrial applications. The company positions itself as a global leader with a strong presence in multiple international markets, offering products made in France with a notable 10-year warranty. Their target audience includes data centers, industrial facilities, airports, and other critical infrastructure sectors requiring reliable leak detection solutions. The website reflects a mature digital presence with comprehensive product information, case studies, and certifications that reinforce their market credibility. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Matomo, and Google Tag Manager for analytics and marketing. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although some advanced security headers are not detected. From a security perspective, the site demonstrates good practices but lacks explicit security policies or incident response information. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness from a domain registration standpoint. Despite this, the professional website, certifications, and client references suggest a legitimate and established business. Overall, the risk assessment is moderate with recommendations to enhance domain registration transparency, implement additional security headers, and publish vulnerability disclosure policies to improve trust and compliance.

E

eHost OÜ

aksohaus.ee

40

Investor.ee is a small Estonian educational website focused on providing practical advice and information about investing, portfolio management, risk management, and financial knowledge. The site targets individuals and organizations interested in growing their capital through various investment strategies. The business operates primarily as a content and informational platform, with a niche focus on the Estonian-speaking investment community. The domain is registered to eHost OÜ since 2019, consistent with the website's scope and scale. Technically, the website is built on WordPress using a modern theme and standard libraries such as Bootstrap, jQuery, and FontAwesome. It integrates Google Tag Manager for analytics and Google reCAPTCHA v3 for spam protection on forms. The site is hosted behind Cloudflare DNS and uses HTTPS, ensuring secure communication. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or security policy information is available. External links are configured to open in new windows with noopener for security. Overall, the website is functional, professionally designed, and provides relevant content for its audience. The main risks relate to privacy compliance gaps and missing security headers. Strategic improvements in these areas would enhance trust and regulatory adherence.

M

Manimal OÜ

manimaldesign.com

46

Manimal OÜ is a small Estonian digital media and design studio specializing in web design, SEO, and social media services. Founded in 2016, the company targets local businesses and individuals seeking creative digital solutions. The website reflects a professional and consistent brand image with a clear portfolio and client references. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, and includes tracking via Google Analytics and Facebook Pixel. Security measures include HTTPS and Google reCAPTCHA on the contact form, but lack advanced security headers and explicit privacy or cookie policies. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security hardening.

T

Tallinna Tehnikakõrgkool

tktk.ee

49

Tallinna Tehnikakõrgkool is a reputable higher education institution in Estonia specializing in technical and engineering education. The website serves multiple audiences including prospective and current students, continuing education learners, and business partners. It offers comprehensive information on study programs, admissions, continuing education, and institutional news. The institution maintains a solid market position as a key technical education provider in Estonia. Technically, the website is built on WordPress using the Elementor page builder, enhanced with Yoast SEO and Usercentrics for GDPR-compliant cookie management. It integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and a chat widget, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit security headers like Content-Security-Policy and does not publicly disclose security policies or incident response procedures. No vulnerability disclosure or security.txt file is present, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and well-maintained, with moderate to good scores in content quality, technical implementation, and security posture. Strategic improvements in security headers, privacy policy publication, and incident response transparency are recommended to further strengthen compliance and security maturity.

M

Morek Group

morek.eu

45

Morek Group is a medium-sized Estonian company specializing in manufacturing and distributing high-quality electrical components and electric vehicle charging solutions. With 20 years of industry experience, Morek positions itself as a trusted partner in the energy and transportation sectors, focusing on infrastructure development for electricity and electric cars. The company targets electrical industry professionals and infrastructure developers across Europe, supported by multilingual website content and a clear product catalog. Technically, the website is built on WordPress with modern JavaScript integrations, including Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good performance, mobile optimization, and SEO practices, with a consent management system for cookies ensuring privacy compliance. The technical infrastructure reflects a mature digital presence suitable for a medium-sized enterprise. From a security perspective, the site enforces HTTPS and uses consent mechanisms but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Security headers could be improved to enhance protection. Overall, the security posture is solid but could benefit from formalized policies and additional headers. The domain WHOIS data is consistent with the business claims, showing no privacy protection and a domain age appropriate for the company's 20-year history. Contact information is clearly presented, including emails, phone numbers, and physical address, enhancing business credibility. Social media presence on LinkedIn and Facebook supports trust and engagement. Recommendations include publishing security and incident response policies, adding security headers, and considering a vulnerability disclosure program to strengthen security culture and compliance.

S

Softwerk

softwerk.ee

43

Softwerk OÜ is an Estonian technology company specializing in custom business software solutions including business intelligence (BI), ERP implementations (notably Microsoft Dynamics 365), and web development using modern frameworks such as .NET and React. Established in 2012, Softwerk has positioned itself as a trusted partner for businesses in Estonia and Europe, offering tailored solutions that improve operational efficiency and data-driven decision making. The company emphasizes long-term client relationships and quality service delivery, supported by positive client testimonials and recognized partnerships such as Microsoft. Technically, the website is built on WordPress with WPBakery Page Builder, leveraging common web technologies like jQuery and FontAwesome, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and secure form handling, but lacks advanced security headers and explicit security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, Softwerk demonstrates a mature digital presence with room for improvement in privacy and security transparency.

B

Boomerang

boomerang.ee

47

Boomerang is a well-established third-party logistics provider specializing in eCommerce fulfillment and returns management, primarily serving the Nordic region and global markets. The company positions itself as the largest return handling operator in the Nordics, offering tailored and flexible logistics solutions to online webshops. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site is built on WordPress with Elementor, leveraging modern technologies such as Usercentrics for cookie consent and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security-wise, the website enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies, which are areas for improvement. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

O

Oy Lunden Ab Jalostaja

jalostaja.fi

64

Oy Lunden Ab Jalostaja is a well-established Finnish food manufacturing and retail company specializing in ready meals, soups, salads, and vegan products. The company emphasizes convenience for everyday consumers and sustainability in packaging. Their website reflects a strong brand presence with consistent messaging and active engagement in para-sports sponsorship, enhancing their community involvement and brand image. Technically, the website is built on WordPress with modern SEO and tracking tools such as Yoast SEO and Google Tag Manager, ensuring good digital maturity and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, user-friendly, and compliant with GDPR requirements, supporting a high trust level for visitors and customers.

L

Latitude59

latitude59.ee

53

Latitude59 is a well-established flagship startup and technology event based in Estonia, with a history dating back to 2012. It serves as a key platform for startups, investors, partners, and media to connect and showcase innovation. The website reflects a mature event organization with a strong international presence, offering pitch competitions, investor days, and satellite events worldwide. The business model centers on event management and ecosystem development within the technology sector. Technically, the website is built on WordPress using Elementor and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and PixelYourSite. The site is optimized for SEO and mobile devices, with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is good, with a comprehensive privacy and cookie policy and GDPR adherence. However, the site lacks explicit security policies, incident response contacts, and terms of service pages, which could enhance trust and compliance. Overall, Latitude59's website demonstrates a professional, secure, and privacy-conscious digital presence aligned with its business objectives.

E

Evocon

evocon.com

61

Evocon is a Denmark-based company specializing in user-friendly OEE (Overall Equipment Effectiveness) software designed to help manufacturing companies automate data collection from machines and provide real-time production performance insights. The company targets manufacturers seeking to improve productivity, reduce waste, and enhance operational efficiency. Their market position is supported by a global client base and trusted brand presence, including notable manufacturing partners. Technically, the website is built on WordPress with modern integrations such as HubSpot, Google Tag Manager, and Hotjar, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections in place, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website reflects a professional and credible business with room for improvement in privacy and security transparency.

F

FM Capital Consulting Ltd.

capital-consulting.com

48

FM Capital Consulting Ltd. is a well-established Estonian finance consulting firm specializing in worldwide company registration, bookkeeping, compliance, legal support, and tax planning services. The company targets businesses and entrepreneurs, including startups and fintech companies, offering tailored corporate and tax advantage solutions. Their market position is that of a niche consulting provider with expertise in cross-border transactions and fintech licensing. The website is professionally designed with good content quality and clear navigation, supporting their business credibility. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It uses modern tracking and analytics tools including Google Analytics and LinkedIn Insight Tag. Performance and mobile optimization are good, though accessibility is basic. The hosting provider is not explicitly identified but the domain is registered with GoDaddy and uses DNS servers from zone.eu and zone.ee. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. No privacy or cookie policies are present, which is a compliance gap especially given the use of tracking technologies. Contact information is clearly provided, enhancing trust. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the website presents a moderate risk profile with strengths in business credibility and technical implementation but weaknesses in privacy compliance and security best practices. Strategic improvements in privacy policy implementation, cookie consent, and security headers would enhance their security posture and compliance standing.

H

Horizon Geosciences

horizon-geosciences.com

50

Horizon Geosciences is a medium-sized, established company specializing in worldwide marine survey, geotechnical services, and offshore vessel operations. Founded in 2004, the company serves key sectors including oil & gas, renewables, civil, utilities, subsea, and offshore construction. Their website reflects a professional and consistent brand with detailed service offerings and a growing fleet of specialized vessels. Technically, the site is built on WordPress with Elementor, hosted on Bluehost, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and domain transfer protection, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy and well-positioned in its market niche.

I

Iutecredit

iutecredit.md

62

Iutecredit is a Moldovan financial services company specializing in instant credit products, refinancing, and smart shopping solutions. The company leverages a mobile application (Myiute) and an extensive ATM network to provide convenient access to financial services. The website reflects a mature digital presence with a focus on user experience and mobile accessibility. The business is positioned as a trusted player in the Moldovan microfinance sector with over 15 years of operational history through its parent company, Iute Group AS. Technically, the website is built on WordPress and integrates multiple analytics and marketing tools, indicating a well-developed digital marketing strategy. Security posture is strong with HTTPS, security headers, and reCAPTCHA usage, though some improvements in cookie consent and incident response transparency are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

Nord Projekt

nordprojekt.ee

42

Nord Projekt is a leading Estonian architecture and engineering bureau offering comprehensive design and project management services. The company emphasizes creativity, precision, and quality across all project phases, serving clients seeking professional architectural and engineering solutions. Their market position is strong within Estonia, supported by a portfolio of notable projects and ISO 9001 certification. The website is built on WordPress with modern plugins and demonstrates good digital maturity, including multilingual support and SEO optimization. Security posture is solid with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. Contact information is clearly provided, enhancing business credibility. Overall, the site reflects a professional and trustworthy business presence.