Security Directory

S

Spring

springadvertising.com

62

Spring is an independent creative advertising agency based in Vancouver, Canada, established in 2005. The company offers a broad range of services including strategy, design, advertising, branding, digital, and on-demand creative services. They have a strong market presence with a focus on real estate marketing and have worked with over 100 brands across more than 70 industries. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted by Automattic Inc., ensuring reliable infrastructure and good performance. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic but present, with privacy and cookie policies including consent mechanisms. Contact information is complete and easily accessible, enhancing business credibility. Overall, the website is trustworthy and well-maintained, suitable for its target audience.

AuditPartner is a small Estonian auditing and financial consulting firm with a website primarily in Estonian and an English language option. The company positions itself as a professional service provider focusing on seeing beyond the numbers, targeting businesses requiring auditing and financial services. The website is built on WordPress with common web technologies such as jQuery and Bootstrap, indicating a standard but modern technical infrastructure. Performance and mobile optimization are moderate to good, with basic SEO and accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and visible security policies such as privacy, cookie, or incident response policies. No vulnerability disclosure or security.txt files are present, and no contact information such as emails or phone numbers are explicitly provided on the homepage. These gaps reduce the overall privacy compliance and security posture scores. Overall, the website is functional and professionally designed but lacks critical compliance and security transparency elements. The domain WHOIS data is consistent with the business claims, supporting legitimacy. Strategic improvements in privacy policy publication, security headers, and contact transparency would enhance trust and compliance.

M

M-Partner

mpartner.ee

41

M-Partner is an established Estonian recruitment company specializing in the effective hiring of managers and specialists, with over 20 years of experience and more than 1000 successful recruitments. Their business model focuses on full search and headhunting services, targeting Estonian companies seeking qualified personnel. The website reflects a professional and consistent brand image, supported by client logos and clear service descriptions. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates essential tools such as Google Tag Manager and reCAPTCHA, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, email obfuscation, and cookie consent mechanisms, though additional security headers and formal policies could enhance protection. Overall, the site is accessible, well-structured, and compliant with GDPR, presenting a trustworthy and credible online presence.

O

Ouman Oy

ouman.fi

67

Ouman Oy is a Finnish company specializing in building automation and energy efficiency solutions, targeting property owners, automation contractors, housing companies, and related sectors primarily in the Baltic Sea region. The company offers smart controllers, IoT solutions, and energy optimization services, positioning itself as a key player in energy-efficient building management. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive product and solution information. Technically, the site is built on WordPress with modern analytics and marketing integrations such as Google Analytics, HubSpot, and Facebook Pixel. Security measures include HTTPS enforcement and CAPTCHA-protected forms, though explicit security headers and policies are not fully implemented. Overall, the site demonstrates good security hygiene and business credibility, with room for improvement in privacy compliance documentation and security transparency.

F

Fortaco Group

fortacogroup.com

71

Fortaco Group is a leading brand-independent strategic partner specializing in manufacturing technology, vehicle cabins, steel fabrications, and vehicle assemblies primarily serving the heavy off-highway equipment and marine industries. Established in 2012, the company has positioned itself as a key player in Europe with a strong focus on quality, delivery performance, and operational excellence. Their business model revolves around providing comprehensive value chain solutions to global customers, emphasizing flexibility, reliability, and innovation in manufacturing processes. The website infrastructure is built on WordPress, leveraging modern plugins such as Yoast SEO and MonsterInsights for analytics and SEO optimization. The site demonstrates good mobile responsiveness, clear navigation, and professional design, supporting a positive user experience. Technical implementation is solid with HTTPS enforced, though there is room for improvement in security headers and DNSSEC deployment. Security posture is generally good, with no critical vulnerabilities detected. The domain registration is consistent with the business claims, showing a stable and legitimate presence. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. However, explicit security policies and incident response contacts are not publicly available, which could be enhanced to improve trust and compliance. Overall, Fortaco Group's digital presence reflects a mature and professional organization with a strong market position. Strategic recommendations include enhancing DNS security, publishing detailed security policies, and expanding contact information for incident response to further strengthen their security and compliance posture.

L

Lindab

lindab.si

40

Lindab.si is a Slovenian content and blogging website established in 2022, offering articles on a variety of topics including home, health, sports, services, and technology. The site targets a general Slovenian-speaking audience interested in diverse lifestyle and technology content. The business model is primarily content publishing with no direct e-commerce or transactional services evident. The website is built on WordPress CMS, utilizing Yoast SEO for search optimization and Google reCAPTCHA for form security. The technical infrastructure is modern and moderately performant with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and form protection via reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism detected. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is legitimate, consistent with its domain registration data, and presents a moderate trust level. Strategic improvements in privacy compliance, security policy transparency, and contact information availability would enhance credibility and user trust.

R

Roadplan

roadplan.ee

48

Roadplan is an Estonian company specializing in road project design, outdoor space projects, and consulting services. Founded in 2013, it positions itself as a leading road project designer in Estonia, targeting clients who require sustainable and innovative solutions for their outdoor environments. The website content is primarily in Estonian and focuses on communicating the company's expertise and service offerings. Technically, the website is built on WordPress and uses modern web technologies including Google Fonts, Google Analytics, Google Tag Manager, and reCAPTCHA for form security. The site is hosted by Zone Media OÜ, a known Estonian hosting provider. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the website uses HTTPS with a valid SSL certificate and employs reCAPTCHA to protect forms. However, it lacks important security headers and does not provide explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and functional but lacks comprehensive privacy and cookie policies, explicit contact information, and detailed security disclosures. These gaps reduce its privacy compliance and slightly impact trustworthiness. Strategic improvements in these areas would enhance the site's security posture and user trust.

T

TF Bank

tfbankgroup.com

66

TF Bank operates as an internet-based niche bank offering consumer banking services through a proprietary IT platform emphasizing automation. The website presents a professional image consistent with a financial institution targeting consumers seeking streamlined online banking solutions. The technical infrastructure is built on WordPress CMS, utilizing modern web technologies such as jQuery and Cookiebot for cookie consent management, alongside Google Tag Manager for analytics. The site is secured with HTTPS, and cookie consent is actively managed, reflecting a commitment to privacy compliance. However, the absence of WHOIS data for the domain group.tfbank.se raises questions about domain registration legitimacy, although the website content itself appears credible and well-maintained. Security posture is solid with HTTPS and consent mechanisms, but could be improved by adding explicit security headers and detailed privacy and security policies. Overall, the site demonstrates a good balance of professionalism, technical maturity, and privacy awareness, with room for enhanced transparency and security documentation.

L

Laser Diagnostic Instruments

ldi.ee

44

Laser Diagnostic Instruments (LDI) is an Estonian-based company specializing in advanced oil spill detection systems and water monitoring sensors. Their flagship product, the ROW (Remote Optical Watcher), provides autonomous, non-contact detection of oil spills and algal blooms, serving industrial and environmental clients globally. The company has a strong niche market position with installations across multiple continents and industries including energy, water treatment, and shipping ports. The website reflects a professional and consistent brand image with detailed product information and client testimonials, supporting their credibility in the environmental monitoring sector. Technically, the website is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and standard best practices, though improvements are recommended in cookie consent and security headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, LDI presents a trustworthy and professional digital presence aligned with their business objectives.

S

Sparkup

teaduspark.ee

45

Sparkup Tartu Teaduspark is a well-established science and technology park based in Tartu, Estonia, founded in 2010. It serves as a hub for science- and technology-intensive startups and scaleups, offering incubation, acceleration, business development services, and rental spaces. The organization supports companies through various programs including Sparkup Inkubaator, ESA BIC Estonia, and multiple thematic accelerators focused on energy, climate, defense, and logistics. The website reflects a mature digital presence with a modern WordPress-based infrastructure, leveraging Elementor for design and Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, primarily in Estonian. Overall, the site demonstrates good professionalism, clear navigation, and strong business credibility, positioning Sparkup as a key player in the Estonian innovation ecosystem.

E

Eesti Keskkonnauuringute Keskus OÜ

klab.ee

40

Eesti Keskkonnauuringute Keskus OÜ is a government-affiliated Estonian company specializing in chemical, physical, and microbiological laboratory analyses, geotechnical studies, and environmental condition modeling. The company positions itself as a leading environmental research and laboratory service provider in Estonia, serving government bodies, environmental agencies, and research institutions. Their website reflects a professional and consistent brand image with a clear focus on environmental services and scientific expertise. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site includes a consent management platform (Usercentrics) for cookie compliance and integrates Google Tag Manager for analytics. Performance and mobile optimization are good, though accessibility features are basic. The hosting and domain registration are consistent with an Estonian government-related entity, registered since 2013. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of a security.txt or vulnerability disclosure policy is noted as an area for improvement. Overall, the website demonstrates a solid business credibility and technical foundation with room for enhanced security and privacy policy transparency. The risk profile is low, but strategic improvements in security headers and formal policies would strengthen trust and compliance.

A

askRobin México

askrobin.com

57

askRobin México operates as an online loan search platform targeting Mexican consumers seeking personal loans and debt liquidation options. The platform aggregates offers from multiple financial institutions to provide tailored financing proposals. The website is built on WordPress with a modern tech stack including jQuery, Bootstrap Slider, and integrates marketing and tracking tools such as Google Tag Manager, Facebook Pixel, and SalesManago. The site is well-structured, mobile-optimized, and provides clear navigation and content relevant to its audience. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data for the subdomain is unavailable, which slightly impacts trust but the presence of partner logos and privacy policies supports legitimacy. Overall, the site presents a professional and functional digital presence for its business model.

L

Likewize

brightstar.com

67

Likewize is a technology service provider focused on offering comprehensive protection and support for technology disruptions. The company positions itself as a reliable partner for consumers and businesses seeking to mitigate technology-related issues. The website is professionally designed using WordPress CMS, enhanced with SEO tools like Yoast, and incorporates modern tracking and consent technologies such as Google Tag Manager and OneTrust. While the site is accessible and well-structured, it lacks explicit privacy and terms of service documentation, as well as direct contact information, which are important for trust and compliance. The absence of WHOIS data raises questions about domain registration legitimacy, though the website content suggests a legitimate business presence. Security posture is generally good with HTTPS and cookie consent, but could be improved by adding security headers and incident response contacts.

I

Indevex

indevex.com

54

Indevex is a small healthcare-focused company specializing in the development of science-based nutritional products, such as NGC®, aimed at supporting health, recovery, and performance. The company positions itself as a niche innovator leveraging clinical research to back its product offerings. The website reflects a professional and consistent brand image with good content quality and SEO optimization, targeting health-conscious consumers and athletes. Technically, the site is built on WordPress 6.8.1, utilizing modern technologies including Google Tag Manager for analytics and Cookiebot for cookie consent management. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected. Overall, the domain is legitimate, long-established since 1999, and registered through a reputable registrar without privacy protection, supporting trustworthiness. Strategic improvements in privacy transparency, security headers, and contact information publication are recommended to enhance compliance and user trust.

D

Domestack

domestack.com

51

Domestack is a small technology company specializing in tailored software development services across various business sectors. Founded in 2018, the company presents a professional online presence with a well-structured website built on WordPress and Elementor. The site targets businesses seeking custom software solutions and emphasizes expertise in multiple technologies. Technically, the website employs modern tools including Google reCAPTCHA for form security and EWWW Image Optimizer for performance enhancements. SSL is properly configured, ensuring secure communications. However, the absence of explicit privacy policies, terms of service, and direct contact details limits full compliance and trust transparency. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures.

L

LVM Kinnisvara

lvm.ee

46

LVM Kinnisvara is a well-established Estonian real estate company providing comprehensive property services including sales, valuation, development, and brokerage. The company operates across major Estonian cities with multiple office locations and a professional online presence. Their website is built on WordPress with modern plugins and integrates marketing and analytics tools to engage and track users effectively. Security measures such as HTTPS, CAPTCHA on forms, and cookie consent mechanisms are implemented, though some security headers could be improved. The domain registration data aligns well with the business profile, indicating legitimacy and a mature online presence.

J

Jolos

jolos.eu

44

Jolos is a full spectrum creative agency based in Estonia, specializing in world-class event production, branding, campaigns, and live and virtual events. The company positions itself as a high-quality, professional agency focused on delivering unique and memorable experiences for brands and organizations. The website reflects a mature digital presence built on WordPress, leveraging modern optimization and analytics tools such as Google Analytics and Tag Manager with IP anonymization enabled. The site is well-designed, mobile-optimized, and rich in multimedia content, showcasing detailed case studies and team profiles that enhance trust and professionalism. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and formal security policies suggests room for improvement. Privacy compliance is limited due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

F

FDF

fdf.dk

57

FDF.dk is the official website of FDF, a Danish voluntary youth organization focused on outdoor activities and community engagement for children and young people. The organization has an established presence since 1996, reflected in the domain age and consistent WHOIS data. The website is built on WordPress and uses modern frontend technologies such as Bootstrap and Google Fonts, providing a good user experience with mobile responsiveness and clear navigation. The site employs a comprehensive cookie consent mechanism compliant with GDPR, detailing cookie categories and third-party data processors. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though DNSSEC is not enabled and security headers are not explicitly detected, representing areas for improvement. No direct contact information or security policies are found, which could be enhanced to improve trust and compliance. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively.

N

Nordic Hotel Forum

nordichotels.eu

51

Nordic Hotel Forum is a modern four-star superior hotel located in the heart of Tallinn, Estonia, just 150 meters from the Old Town. The hotel targets business travelers, conference attendees, and tourists seeking quality accommodation and conference facilities. The website is built on WordPress using the Avada theme and integrates WooCommerce for e-commerce capabilities. It employs modern analytics and marketing tools such as Google Analytics, Hotjar, Google Tag Manager, and Cookiebot for cookie consent management. The site is well-structured with good SEO and mobile optimization, providing a professional user experience. Security posture is strong with HTTPS and cookie consent mechanisms, though it lacks some HTTP security headers and formal privacy and terms of service pages. WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains. Overall, the website represents a legitimate hospitality business with moderate digital maturity and good security hygiene.

K

Kinema

kinema.eu

56

Kinema OÜ is a small Estonian company specializing in the sale, installation, and maintenance of modern garage doors, industrial lifting doors, loading equipment, and access control systems. The company targets both industrial and private customers within Estonia, positioning itself as a local provider of comprehensive door and automation solutions. The website is built on WordPress with WooCommerce components, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for consent management. The technical infrastructure is modern and moderately optimized for performance and mobile use, though accessibility features are basic. Security posture is good with HTTPS enabled and cookie consent implemented, but could be improved by adding explicit security headers and publishing formal privacy and security policies. No contact emails or phone numbers were found in the provided content, which limits direct customer engagement visibility. Overall, the website reflects a professional small business with consistent branding and a clear business focus, but with room for improvement in privacy compliance and security transparency.

N

Nordic Consult

nordicconsult.ee

40

Nordic Consult is a small Estonian corporate services provider specializing in online company registration, legal address provision, accounting, and e-Residency support. Established since 1997, it targets entrepreneurs and e-Residents seeking efficient company formation in Estonia. The website is built on WordPress with SEO and form plugins, offering a user-friendly experience with clear navigation and relevant content. Technically, the site is hosted via Zone Media OÜ and uses HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure form handling but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy and security practices.

T

The Institute of World Politics

iwp.edu

58

The Institute of World Politics is a specialized graduate school focused on educating future leaders in national security, intelligence, diplomacy, and military strategy. It offers a range of graduate degree programs, certificates, and continuing education opportunities tailored to professionals and students seeking careers in statecraft and international affairs. The institution positions itself as a niche leader with a strong emphasis on scholar-practitioner faculty and practical skills development. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and integrations such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site is hosted likely on SiteGround, with good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and does not expose sensitive data in the HTML. However, there is no publicly visible security policy or incident response page, and no vulnerability disclosure mechanism was found. The WHOIS data is unavailable or restricted, typical for .edu domains, but the domain's legitimacy is supported by the content and .edu status. Overall, the site demonstrates a strong professional presence with good security hygiene, though it could improve transparency around security policies and incident response. The business is credible and well-positioned in its educational niche, with a clear target audience and robust digital infrastructure.

M

MyHome OÜ

myhome.ee

42

MyHome OÜ operates a professional real estate brokerage and property management business primarily serving the Estonian market with additional offerings in Spain. The company provides services including property sales, rentals, management, and interior design. The website reflects a well-established small business with a consistent brand and a focus on quality customer service, as evidenced by testimonials and detailed property listings. The technical infrastructure is based on WordPress with common plugins and integrations such as Google Analytics, Google Tag Manager, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is adequate with HTTPS and some security best practices, but lacks advanced headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

F

Ferdio

ferdio.com

57

Ferdio is a Denmark-based visual communication agency founded in 2014, specializing in creating infographics, animations, presentations, and other visual storytelling content. The company targets businesses and organizations that require professional visual explanations of complex information. Their market position is supported by a portfolio featuring notable clients and a consistent brand presence across their website and social media channels. Technically, the website is built on WordPress hosted on WP Engine, utilizing modern web technologies such as jQuery, Vimeo API, and Google Analytics, with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS with a valid SSL certificate and implements cookie consent mechanisms compliant with GDPR. However, there is room for improvement in security headers and publishing formal security policies or incident response plans. Overall, Ferdio presents a professional, trustworthy, and well-maintained digital presence with moderate technical maturity and good privacy compliance.

C

Chudovo

chudovo.com

60

Chudovo is a well-established software development company founded in 2004, offering a broad range of IT services including custom software development, dedicated development teams, application maintenance, and cloud development. The company targets businesses seeking scalable and innovative software solutions, leveraging AI and machine learning technologies to enhance delivery speed and quality. With multiple international offices and a strong portfolio of over 160 projects, Chudovo positions itself as a reliable partner in the technology sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, optimized for mobile and SEO. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site uses standard plugins for forms and code highlighting, and implements lazy loading for images to improve load times. From a security perspective, the site enforces HTTPS and employs clientTransferProhibited domain status, but lacks DNSSEC and advanced security headers. Contact forms include CAPTCHA and an NDA option, enhancing data protection. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure mechanism is present. Overall, the website demonstrates a solid business and technical foundation with good content quality and user experience. Security posture is adequate but could be improved with additional headers and policies. Privacy compliance is basic, with cookie consent present but no dedicated privacy policy page detected. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

MasterBase®

masterbase.com

70

MasterBase® is a Spanish technology company specializing in providing access to multi-skilled automation tools designed to enhance productivity and improve quality of life. The website is professionally designed using WordPress and Elementor, targeting Spanish-speaking professionals and businesses interested in automation solutions. The company has a mature domain presence dating back to 2002, indicating a stable market position within its niche. Technically, the website leverages modern technologies including Cloudflare DNS, Cookiebot for cookie consent, Google Tag Manager for analytics, and Rank Math for SEO optimization. Hosting is provided by WordPress.com, ensuring reliable infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. From a security perspective, the website enforces HTTPS with a strong SSL configuration and employs clientTransferProhibited status on the domain to prevent unauthorized transfers. Cookie consent mechanisms are in place, but the absence of DNSSEC and lack of published security policies or incident response contacts represent areas for enhancement. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a moderate risk profile with good business credibility and technical implementation. Strategic improvements in privacy compliance, explicit contact information, and security policy transparency would further strengthen trust and compliance posture.

M

Myoton AS

myoton.com

60

Myoton AS is a specialized company providing advanced digital palpation devices (MyotonPRO) for measuring muscle tone, stiffness, and elasticity. Their products serve medical professionals, sports scientists, and researchers, positioning them as a niche leader in soft tissue assessment technology. The company has a well-established online presence with a website created on a WordPress platform, optimized for SEO and mobile use, and supported by modern analytics tools such as Google Analytics and Plausible Analytics. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements could be made by adding security headers and a cookie consent mechanism to enhance GDPR compliance. The WHOIS data confirms the domain's legitimacy with a long registration history dating back to 2004 and no privacy protection, aligning with the company's transparency. Overall, the website is professional, trustworthy, and well-suited for its target audience, with minor recommendations to improve privacy compliance and security headers.

S

Sisustuskoda OÜ

sisustuskoda.ee

42

Sisustuskoda OÜ is a small Estonian company specializing in custom-made furniture, particularly kitchen furniture for residential customers. Established in 2014, the company positions itself as a provider of quality, durable, and design-focused furniture solutions. Their website reflects a professional and consistent brand image, targeting consumers seeking bespoke interior furnishings. The business operates primarily in the retail sector with a local market focus in Estonia. Technically, the website is built on WordPress using the Astra theme and WooCommerce for e-commerce capabilities. It integrates modern tools such as Google Tag Manager and Google reCAPTCHA to enhance functionality and security. The site is mobile-optimized and demonstrates good SEO practices through structured data and meta tags. Hosting appears to be managed by Zone Media OÜ, consistent with the domain's Estonian registration. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks explicit security headers and published security or incident response policies. Privacy and cookie policies are absent, posing compliance risks under GDPR. No vulnerability disclosure or security contact information is provided, which could impact trust and incident handling readiness. Overall, the website is functional and credible for its business purpose but would benefit from enhanced privacy compliance, improved security headers, and transparent security policies to strengthen its security posture and regulatory adherence.

N

Nordic Automation Systems

nasys.no

62

Nordic Automation Systems is a specialized technology company providing end-to-end LoRaWAN-based smart city and remote metering solutions. Their offerings include smart streetlight controllers, utility metering products for gas, water, and heat, as well as gateways and energy monitoring solutions. The company targets smart city planners, utility providers, telco operators, and system integrators, positioning itself as a niche provider with in-house R&D and production capabilities enabling rapid market rollout. The website is professionally designed, content-rich, and well-structured, supporting a positive user experience and clear navigation. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and SEO plugins, and is mobile-optimized with moderate performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit incident response or vulnerability disclosure policies are published. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is justified for this business type. Overall, the website reflects a credible and professional business presence with room for security and privacy improvements.

H

Horizon Pulp & Paper Ltd

horizon.ee

53

Horizon Pulp & Paper Ltd is a well-established European manufacturer specializing in 100% virgin sack kraft paper, serving packaging applications and exporting to over 70 countries. The company has a solid market position as a leading manufacturer in its sector, with a business model focused on manufacturing and international export. The website reflects a professional corporate presence with good content quality and consistent branding, targeting industrial and business clients in need of packaging materials. Technically, the website is built on a modern WordPress platform using WooCommerce for e-commerce capabilities, Elementor for page building, and Yoast SEO for search engine optimization. The site demonstrates good mobile optimization and moderate performance, with integration of analytics tools such as Google Analytics and Plausible Analytics. Hosting appears to be managed by Elkdata OÜ, consistent with the domain registration data. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible exposed sensitive data. However, there is a lack of explicit security headers and no published security or incident response policies. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service pages represents a compliance gap. No contact information or incident response contacts were found, limiting user trust and support options. Overall, the website is functional, professional, and secure in basic terms but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and terms policies, adding security headers, and providing clear contact channels for security incidents and data protection inquiries.

Bole is a company specializing in innovative and sustainable flooring solutions, prominently featuring their unique product that follows the natural growth of trees. The website positions Bole as an innovator in the manufacturing sector, targeting design professionals and environmentally conscious consumers. The digital infrastructure is built on WordPress with modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. The website is mobile optimized and provides a catalog download feature through a secure form submission process. Security posture is adequate with HTTPS enabled and secure form handling, but lacks important security headers and visible privacy and terms policies, which are critical for compliance and trust. Overall, the website is professional and functional but would benefit from enhanced transparency and security practices.

A-Film Distributie B.V. is a Dutch film distribution company providing a platform for cinema listings, DVD and Blu-ray sales, and film promotion. The website targets film enthusiasts in the Netherlands, offering detailed information on current and upcoming films, trailers, and classic film collections. The business model focuses on film distribution and consumer engagement through digital content and social media channels. Technically, the site is built on WordPress with MooTools and Yoast SEO, indicating a moderate level of digital maturity with room for improvement in mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is basic with privacy and cookie policies present but no explicit GDPR compliance statements or data protection officer contact. Overall, the site is professional and trustworthy but could enhance security and privacy transparency to improve user trust and compliance.

E

Eaton Group

eatongroup.com

63

Eaton Group is a financial services company specializing in advancing creditor rights and debt collection. The company emphasizes ethical business practices and transparent consumer guidance to help resolve outstanding debt obligations. Their market position is that of an established creditor rights service provider targeting creditors and consumers within the financial services sector. The website is built on WordPress using a professional theme and SEO plugin, indicating a moderate level of digital maturity. However, Google Analytics is present but not configured, and no social media presence is evident. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

P

PRxDigital

prxdigital.com

52

PRxDigital is a well-established digital marketing and communications agency specializing in PR, branding, social media, crisis management, public affairs, advertising, and targeted networking. With a history dating back to 1975 and a domain registered since 2010, the company serves a diverse clientele primarily in the San Francisco Bay Area and Silicon Valley, focusing on technology and other sectors. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is adequate with HTTPS enabled and some security best practices, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies, which poses a compliance risk. Overall, the website is trustworthy and credible but would benefit from improved privacy and security disclosures.

P

Printlanti Oy

printlanti.fi

49

Printlanti Oy is a Finnish print management company specializing in print brokerage and production management services. With over 10 years of experience and a strong network across Finland and the Baltic region, they provide cost-effective print solutions to small and medium-sized enterprises. Their website reflects a professional and consistent brand image, targeting businesses seeking expert print management to optimize resources and reduce costs. Technically, the site is built on WordPress using the Enfold theme, incorporating modern web technologies and marketing tools such as Google Analytics and Survicate. Security posture is solid with HTTPS enabled and standard domain protections, though DNSSEC is not enabled and no explicit security policies or vulnerability disclosures are present. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and well-positioned in its niche, though improvements in privacy and security transparency are recommended.

F

Frictape Net

frictape.com

67

Frictape Net is a specialized company providing helideck safety solutions primarily targeting the offshore energy and transportation sectors. Established in 2005, the company positions itself as a market leader offering innovative safety products designed to optimize safety and lifetime costs. Their business model focuses on B2B sales and support, catering to clients requiring certified and reliable helideck safety equipment. The website reflects a professional and consistent brand image with good content quality and clear messaging tailored to their niche audience. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery and Slick Carousel for enhanced user experience. The site is hosted with DNS managed via Cloudflare, ensuring reliable performance and security. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. The site uses Cookiebot for comprehensive cookie consent management, indicating a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS with a good SSL configuration and employs standard security headers, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security transparency and readiness. Overall, Frictape Net demonstrates a solid digital presence with good business credibility and privacy compliance. Strategic enhancements in security documentation and DNS security could further strengthen their trustworthiness and resilience against emerging threats.

A

AQ Trafotek Oy

trafotek.fi

47

AQ Trafotek Oy is a Finnish company specializing in the manufacturing and supply of inductive electrical components such as power transformers, reactors, and filters. Established in 2010 and now part of the AQ Group, the company serves industrial production, renewable energy, and marine transportation sectors. Their website reflects a professional B2B business model with clear branding and consistent messaging aligned with their market position. Technically, the website is built on WordPress using modern plugins like Yoast SEO and WPBakery Page Builder, hosted likely on Cloudpit infrastructure. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. Performance is moderate, suitable for their target audience. From a security perspective, the site enforces HTTPS and uses secure form plugins, with no visible vulnerabilities or exposed sensitive data. However, it lacks security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No incident response or security policy information is published, indicating room for maturity in security governance. Overall, the website and domain registration data are consistent and trustworthy, with a solid business presence and moderate technical sophistication. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance their security posture and trustworthiness.

N

NJ Production

nj-production.com

53

NJ Production is a well-established, award-winning event and communication agency specializing in creating powerful event experiences globally. The company offers a broad range of services including project management, venue logistics, event communication, content support, technical production, and sustainability consulting. Their market position is strong, supported by a professional portfolio and consistent branding. The website reflects a mature digital presence with multilingual support and integrated marketing tools. Technically, the site is built on WordPress with modern analytics and marketing integrations, hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS, reCaptcha, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear cookie policies and GDPR consent. Overall, the site demonstrates high professionalism and trustworthiness, suitable for corporate clients seeking event services.

M

Marketing Sharks

marketingsharks.ee

51

Marketing Sharks is an established Estonian digital marketing and digitalization service provider founded in 2012. The company offers a broad range of services including digital marketing, SEO, custom and ready-made website and e-commerce solutions, branding, and WordPress development. Their market position is supported by a consistent brand presence, client logos, and active social media channels. Technically, the website is built on WordPress with modern plugins and tracking tools such as Google Analytics and Facebook Pixel, and uses Cloudflare DNS services. Security posture is good with HTTPS enforced, reCAPTCHA on forms, and Wordfence security plugin indications, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

In Nomine OÜ is an established Estonian communication and public relations agency founded in 2001, offering effective communication and PR services primarily targeting businesses and organizations. The company positions itself as a creative and experienced agency with a strong local presence and a portfolio of successful projects. The website reflects a professional and consistent brand image with clear messaging in Estonian and English language support. Technically, the website is built on WordPress using modern frameworks and plugins, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the website demonstrates a trustworthy and credible business presence with room for enhanced security and compliance documentation.

S

Superangel OU

superangel.io

48

Superangel OU operates as an early stage venture capital fund and company builder focused on technology startups in the Baltics and Nordics. The company targets tech founders raising pre-seed or seed rounds, offering investment tickets typically between €300k and €1M. Their business model centers on leveraging entrepreneurial experience and networks to support scalable tech ventures in AI, robotics, logistics, fintech, and SaaS sectors. The website presents a professional and consistent brand image with clear messaging and portfolio highlights, positioning Superangel as a niche regional VC player with a strong founder-centric approach. Technically, the website is built on WordPress with modern SEO practices including Yoast SEO and structured data (JSON-LD). It uses common web technologies such as jQuery, GSAP for animations, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. No hosting provider is explicitly identified, and DNSSEC is not enabled, which is a minor security gap. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status clientTransferProhibited, which protects against unauthorized domain transfers. However, security headers are not detected, and there is no visible cookie consent mechanism or published security/incident response policies. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is consistent with the business claims, showing a domain registered in Estonia since 2017 under the company name Superangel OU, supporting legitimacy. Overall, the website demonstrates a good balance of business credibility, technical implementation, and content quality. Privacy compliance could be improved by adding cookie consent and more explicit GDPR-related disclosures. Security posture would benefit from enhanced HTTP headers and published policies. The risk level is low, with no critical issues detected, making the site trustworthy for its intended audience.

E

European Hematology Association

ehaweb.org

62

The European Hematology Association (EHA) operates a professional website focused on advancing hematology knowledge, collaboration, and education within the European healthcare community. The organization is well-established, with a domain registered since 2000, and positions itself as a leading force in hematology. The website targets healthcare professionals, researchers, and clinicians interested in hematology, offering services such as knowledge sharing and community engagement. The business model is non-profit and educational in nature. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO tools such as Yoast. It employs Cookiebot for GDPR-compliant cookie consent management and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good accessibility and SEO practices, although performance is moderate. Hosting is provided by Hosting Concepts B.V., and the domain registration details are consistent with the organization's identity. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent with granular user controls. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data is transparent and consistent, supporting the site's legitimacy. Overall, the website presents a professional and trustworthy digital presence with strong privacy compliance and a solid security posture. Strategic improvements include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen the security framework.

E

Eesti Kindlustusmaaklerite Liit

ekml.ee

42

Eesti Kindlustusmaaklerite Liit is a professional association representing leading insurance brokers in Estonia. The organization acts as a liaison between its members and the government, particularly in regulatory matters, providing a unified voice for the insurance brokerage sector. The website serves as an information hub for members and clients seeking insurance brokerage services, offering news, member contacts, and membership information. The site is built on WordPress with modern plugins and SEO optimizations, reflecting a moderate to good level of digital maturity. Security measures include HTTPS and Google reCAPTCHA on forms, but lack explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, suitable for its niche audience.

P

Proud Engineers

proudengineers.com

48

Proud Engineers is a specialized consulting firm focused on digital innovation, strategy, and governance. The company offers expertise in policy-making, law, architecture, and technology advisory, targeting organizations seeking complex digital transformation solutions. The website positions Proud Engineers as a trusted global partner with strong client testimonials and a professional online presence. Technically, the site is built on WordPress with Elementor, employing modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and formal privacy or cookie policies. Overall, the website reflects a credible and professional business but would benefit from enhanced privacy compliance and security disclosures.

E

EveryPay

every-pay.com

54

EveryPay operates as a payment gateway service provider offering a merchant portal and risk management tools to facilitate real-time transaction tracking, refunds, and fraud prevention. The website targets merchants and e-commerce businesses primarily in Estonia and the Baltic region, supporting multiple languages including English, Estonian, Latvian, and Lithuanian. The company positions itself as a reliable regional payment service provider with a focus on merchant support and integration ease. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It uses Uikit for styling and includes Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms with nonce tokens. However, it lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data for the subdomain is unavailable, which is typical and not suspicious. Contact information is clearly provided, enhancing trust. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in privacy compliance and security headers would enhance trust and compliance. The site is suitable for its target audience but could benefit from enhanced transparency and security best practices.

Harju Elekter is a well-established Estonian company specializing in electrical distribution solutions with over 55 years of experience. The company serves the energy sector and related industries, offering products such as prefabricated substations and electrical infrastructure services. The website reflects a mature business with a strong market presence, including public stock exchange listing and sustainability recognitions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and security tools such as Google Analytics and reCAPTCHA. The security posture is solid with HTTPS enforced and cookie consent implemented, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and business operations.

E

Edurus AB

edurus.se

51

Edurus AB operates a professional website focused on providing personalized gravestone design services in Sweden. The company positions itself as a family-owned business offering a simple three-step process to design custom gravestones, targeting individuals seeking memorial solutions. The website demonstrates a moderate level of digital maturity, utilizing WordPress CMS, Gravity Forms for data collection, and integrating marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Bing Ads. Cookie consent is implemented via Cookiebot, indicating awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks explicit security headers and visible incident response contacts. The absence of WHOIS data for the domain www.edurus.se raises concerns about domain registration legitimacy, although the website content and branding appear consistent and professional. Overall, the site scores moderately on content quality, technical implementation, security, privacy compliance, and business credibility.

R

Rocksoft

rocksoft.ee

40

Rocksoft is a small Estonian technology company specializing in Oracle E-Business Suite, Oracle NetSuite, and MONITOR ERP solutions. The website is professionally designed using WordPress with modern technologies such as Google Tag Manager and Brizy page builder. The company appears to target businesses seeking ERP and Oracle software implementations. The domain is mature, registered since 2010, and hosted by a known Estonian registrar, indicating legitimacy. However, the website lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled and anonymized Google Analytics, but no security headers or vulnerability disclosures are present. Contact information is not explicitly found on the main page, which may affect user trust and business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.

S

Smartecon

smartecon.ee

58

Smartecon is an established Estonian company specializing in solar park construction and renewable energy solutions, boasting over 10 years of industry experience. The company targets business clients seeking sustainable and cost-effective solar energy installations. Their market position is strong within Estonia, recognized as builders of some of the largest solar power plants in the country. The website reflects a professional and consistent brand image, with multilingual support and clear service offerings focused on solar energy projects and consulting. Technically, the website is built on WordPress using Elementor and Jet Engine plugins, hosted behind Cloudflare DNS. It employs modern web technologies including Matomo analytics, Google Tag Manager, and Facebook Pixel, all integrated with cookie consent mechanisms. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and DNSSEC. From a security perspective, the site uses HTTPS with a good SSL configuration and implements reCAPTCHA v3 to protect forms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website presents a trustworthy and professional digital presence with solid business credibility. To enhance security posture and compliance, it is recommended to publish privacy and security policies, implement additional security headers, enable DNSSEC, and provide incident response contacts. These steps will improve user trust and regulatory compliance.

R

Reiven Solutions

reiven.eu

47

Reiven Solutions is a small Estonian technology service provider specializing in web-based software, custom IT solutions, hosting, and marketing services. The company targets businesses and organizations seeking tailored web development and IT support. Their website presents a professional and consistent brand image with a focus on quality solutions and client engagement through portfolio showcases and service descriptions. Technically, the site is built on WordPress using the Salient theme and WPBakery page builder, incorporating modern web technologies and responsive design. The use of Matomo analytics and Cookiebot indicates a moderate level of digital maturity with attention to user privacy preferences. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security documentation to improve compliance and user trust.