Security Directory

C

CostPocket

costpocket.com

70

CostPocket is a Finnish technology company specializing in AI-powered expense management and document digitization solutions for businesses and accounting firms. The company offers a SaaS platform that automates receipt and invoice processing, integrates with numerous accounting software, and provides mobile applications for ease of use. With over 13,000 companies using their service and more than 40 integrations, CostPocket holds a strong market position in the Nordic and Baltic regions. The website demonstrates a modern technical infrastructure leveraging Vue.js, cloud hosting, and multiple analytics and marketing tools. Security posture is solid with HTTPS enforcement and access controls, though improvements such as DNSSEC and published security policies could enhance trust. Privacy compliance is basic, with cookie consent implemented but no visible privacy or terms of service pages. Overall, CostPocket presents a professional and trustworthy digital presence aligned with its business goals.

P

Peaasi.ee

peaasi.ee

48

Peaasi.ee is a well-established Estonian non-profit organization dedicated to supporting youth mental health through a comprehensive online portal. The website offers extensive mental health information, e-counseling services, first aid tools, and training programs aimed at improving mental wellbeing among Estonian youth and those working with them. The organization maintains a strong market position as a leading mental health resource in Estonia, supported by multiple partnerships and funding sources. Technically, the site is built on WordPress with a modern tech stack including WooCommerce, Bootstrap, and various analytics and marketing tools, demonstrating a mature digital infrastructure. The website is multilingual and optimized for mobile devices, providing a good user experience and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit cookie consent mechanisms are missing, representing areas for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, though enhancing privacy compliance and security policies would strengthen its risk profile.

V

Váš Hosting s.r.o.

hlidam.to

66

Hlídám.to is a Czech-based professional server monitoring service operated by Váš Hosting s.r.o. The company offers uptime and performance monitoring, outage alerts, email server monitoring, and API access, targeting website owners and IT administrators in the Czech market. The website is well-structured, with clear navigation and legal compliance including privacy and cookie policies. Technically, the site uses a custom CMS with common JavaScript libraries and frameworks such as jQuery and Bootstrap, and integrates third-party analytics and advertising tools with user consent. Security posture is solid with HTTPS enforced and secure login forms, though explicit security headers are not detected. No direct company contact emails or phone numbers are publicly listed, with contact primarily via a web form. Overall, the site demonstrates a good balance of business professionalism, technical implementation, and privacy compliance.

ČSOP Tilia is a small Czech non-profit organization dedicated to ecological education and youth engagement, focusing on renewable energy and environmental projects. The website provides information about their activities, projects, and contact details, targeting children, youth, and educators in the Ústecký region. The organization appears to be supported by regional and EU funding, as indicated by logos and project descriptions. Technically, the website is built on the eStránky.cz platform using older JavaScript libraries and includes basic social media integration via Facebook SDK. Security posture is limited with no visible security headers and unknown SSL configuration. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is unavailable, which reduces domain trust but does not necessarily indicate malicious intent given the nature of the organization. Overall, the website is functional but basic in design and security, suitable for a small non-profit but requiring improvements in security and compliance.

B

BNI

bnipodcast.com

64

The Official BNI Podcast website serves as a professional content platform delivering weekly audio discussions led by Dr. Ivan Misner, founder of BNI, the world's largest business networking organization. The site targets business professionals seeking networking education and referral strategies, positioning itself as an authoritative media outlet within the business networking niche. The business model revolves around content publishing, podcast distribution, and educational sponsorships, supported by partnerships with related training and audio program providers. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and various social sharing and marketing plugins. The site demonstrates good mobile optimization and SEO practices, though performance is moderate and accessibility features are basic. Security posture is solid with HTTPS enforced and some security best practices observed, but lacks advanced security headers and a formal vulnerability disclosure mechanism. From a security and compliance perspective, the site includes a cookie consent mechanism indicating GDPR awareness, but lacks a clearly linked privacy policy and terms of service pages. Contact information is limited to forms and subscription emails, with no explicit company emails or phone numbers found. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating domain registration issues or privacy protection, which impacts trustworthiness. Overall, the website is professionally maintained with high-quality content and strong brand association with BNI. However, the missing WHOIS data and incomplete privacy documentation suggest areas for improvement in transparency and compliance. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, verifying domain registration legitimacy, and improving accessibility features to strengthen trust and compliance.

A

Artis Zelmenis

artiszelmenis.lv

33

Artis Zelmenis operates a small Latvian-based business website offering a variety of services including web development, SEO, legal assistance, photography, advertising, and educational content. The site targets local SMEs, individuals, and students, providing multilingual content in English, Latvian, and Russian. The business appears niche-focused with a stable presence since 2012. Technically, the website uses standard JavaScript libraries and social media SDKs for Facebook, Twitter, VK, and Draugiem.lv, alongside Google Analytics for traffic monitoring. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS indications. SEO is reasonably addressed with meta tags and multilingual support. Security posture is moderate but with notable gaps: no visible HTTPS enforcement, absence of security headers, and use of some HTTP resources that may cause mixed content issues. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user safety.

A

ADOL Monitor s.r.o.

adol.cz

53

ADOL Monitor s.r.o. is a Czech Republic-based company specializing in providing monitoring services for real estate investment opportunities, particularly focusing on distressed properties such as auctions, executions, and insolvencies. The company has been operating for over 10 years and offers a suite of services including data monitoring, cadastral data access, and educational seminars. Their market position is that of a niche, trusted provider with a strong local presence and a loyal customer base. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and various plugins, supporting good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected and could be improved. The absence of WHOIS data limits domain trust assessment but the website content and business information suggest legitimacy. Overall, the site is professional, content-rich, and compliant with GDPR requirements.

N

Nadace OKD

nadaceokd.cz

44

Nadace OKD is a Czech non-profit foundation dedicated to supporting social, environmental, and community projects primarily through grant programs. The foundation targets non-profit organizations and local communities, aiming to improve social care, leisure activities, and environmental conditions. The website reflects a medium-sized organization with a consistent brand presence and active social media engagement. Technically, the site uses a custom CMS with older JavaScript libraries and Bootstrap for styling, indicating moderate digital maturity. While the site is accessible and well-structured, it lacks modern security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data reduces domain trustworthiness, though partner and donor links support legitimacy. Overall, the security posture is moderate but can be improved by updating libraries, adding security headers, and enhancing privacy compliance.

C

Cult Pens

cultpens.com

71

Cult Pens is a well-established UK-based e-commerce retailer specializing in pens and pencils, boasting a wide product range of over 24,000 items. The website positions itself as a trusted online pen shop offering secure ordering, expert knowledge, and excellent customer service with free UK delivery and worldwide shipping. Technically, the site is built on the Shopify platform, leveraging modern JavaScript libraries such as jQuery and Owl Carousel, and integrates third-party services including Klevu for search, Trustpilot for reviews, and OneTrust for cookie consent management. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security-wise, the site uses HTTPS with a domain status of clientTransferProhibited, indicating domain transfer protection. However, explicit security headers are not fully implemented, and no public security or incident response policies are found. Privacy compliance is partially addressed through cookie consent mechanisms, but no explicit privacy or terms of service pages were detected in the provided content. Overall, the website is professional and trustworthy but could improve transparency around privacy and security policies.

D

DRL OÜ

drl.ee

42

DRL OÜ is a specialized Estonian company providing professional data recovery services from various storage devices including hard drives, SSDs, RAID arrays, and NAS systems. Established in 2010, the company operates a local dust-free laboratory and offers free diagnostics and consultations, positioning itself as a trusted local expert with over 15 years of experience and a strong customer base. The website is well-structured, targeting individuals and businesses in need of data recovery solutions, with clear contact information and customer testimonials enhancing trust. Technically, the website is built on WordPress using the Enfold theme, leveraging modern web technologies such as jQuery, Google Analytics via MonsterInsights, Facebook SDK, and Google reCAPTCHA for form security. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. Hosting and domain registration are consistent with the business location and claims, enhancing legitimacy. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service on the homepage. Overall, DRL OÜ presents a credible and professional online presence with a solid business foundation. Strategic improvements in security policy transparency, privacy documentation, and security header implementation would enhance trust and compliance, supporting long-term business resilience.

E

Eesti Kirjandusmuuseum

kirmus.ee

55

Eesti Kirjandusmuuseum is a well-established Estonian national scientific and cultural institution focused on managing important archives related to cultural history and folklore. The website serves a diverse audience including researchers, students, cultural enthusiasts, and the general public by providing access to archives, scientific projects, educational programs, exhibitions, and an online store. The institution holds a strong market position as a central cultural memory organization in Estonia. Technically, the website is built on Drupal 8 with modern libraries and tools, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and anonymized analytics, though security headers and explicit security policies could be improved. Overall, the site is professional, trustworthy, and content-rich, supporting the institution's mission effectively.

Evex.ge is the official website of Evex Clinics, a large healthcare network in Georgia established in 2014. The company provides a wide range of medical services including state healthcare programs, private insurance, and specialist consultations. The website is professionally designed, mobile-optimized, and offers clear navigation to services, doctors, clinics, and booking options. The business holds ISO 9001:2015 and TÜV AUSTRIA certifications, indicating a commitment to quality standards. Technically, the site uses modern JavaScript libraries and analytics tools, with HTTPS enabled and good SSL configuration. However, it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security headers are not detected, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

CostPocket

tsekk.ee

62

CostPocket is a medium-sized Estonian SaaS company specializing in digital expense management solutions for businesses and accounting professionals. Their platform offers AI-powered tools to digitize receipts, automate expense reporting, and integrate seamlessly with popular accounting software, positioning them as a key player in the Baltic financial technology sector. The website demonstrates a modern technical infrastructure using Vue.js and integrates multiple analytics and marketing tools, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and Cloudflare DNS, though some improvements in DNSSEC and explicit security policies are recommended. Privacy compliance is basic, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and well-optimized, supporting a strong market position.

K

KaminaKeskus

kaminakeskus.ee

42

KaminaKeskus is an established Estonian retailer specializing in fireplaces, stoves, ovens, sauna stoves, chimneys, and boilers, operating since 1997. The company offers a wide selection of heating appliances with a focus on quality, competitive pricing, and customer convenience including free home delivery. Their market position is strong within Estonia, supported by multiple physical stores and an active online presence. Technically, the website is built on WordPress with the Avada theme, utilizing modern SEO and multilingual plugins, and integrates Google Analytics and Facebook SDK for tracking. Security posture is adequate with HTTPS and basic security headers, but lacks advanced headers like CSP and HSTS, and is missing privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is professional and user-friendly but should improve privacy compliance and security policies to enhance trust and regulatory adherence.

H

Hedgehog OÜ

hedgehog.ee

47

Hedgehog OÜ is a specialized Estonian electronics engineering bureau established in 2011, focusing on economical and reliable system design, prototyping, and manufacturing. Their expertise spans analog and digital circuit design, PCB layout, and embedded software development, serving startups, IT, and electronics companies as well as academic institutions. The website reflects a professional and consistent brand image with detailed team contacts and service descriptions. Technically, the site uses a CMS (Voog), jQuery, Google reCAPTCHA for form security, and Facebook SDK for social integration. While HTTPS is enabled and forms are protected with reCAPTCHA, the site lacks explicit privacy and cookie policies and security headers, which are areas for improvement. WHOIS data confirms domain legitimacy and consistency with the business history and location. Overall, the site is functional, trustworthy, and professionally presented but could enhance compliance and security posture.

C

Casa de Baile

tantsukeskus.ee

40

Casa de Baile is Estonia's largest and most recognized salsa school based in Tallinn, offering salsa, bachata, kizomba, and other Latin American social dance courses primarily targeting beginners and dance enthusiasts. The website reflects a well-established business with a domain age since 2010, consistent with its market presence. The technical infrastructure uses modern web technologies including jQuery, Vue.js, Bootstrap, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and incident response information are missing. Overall, the website demonstrates a solid business credibility and compliance with GDPR through privacy and cookie policies. Strategic improvements in security headers and incident response readiness would enhance the security maturity further.

M

METUS

metus.com

42

METUS is a specialized provider of professional audio and video systems and solutions, targeting sectors such as broadcast, medical, military, corporate, education, government, and news agencies. The company offers a suite of products including media asset management, ingest and streaming solutions, and NDI stream management tools. The website reflects a niche B2B business model with a focus on media technology professionals. Technically, the site uses common JavaScript libraries and tracking tools, hosted on HostGator, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. The domain is long-established since 2002, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced security and privacy practices.

T

Tartu Loomemajanduskeskus

lmk.ee

40

Tartu Loomemajanduskeskus (LMK) is a well-established creative industries development center and incubator based in Tartu, Estonia, founded in 2009. It focuses on supporting creative enterprises through incubation programs, mentoring, training, and providing rental spaces. The organization targets creative startups and existing businesses in the South Estonia region, aiming to boost innovation and export potential in sectors such as fashion, contemporary art, film, and performing arts. The website reflects a professional and consistent brand presence with active social media engagement and regularly updated news content. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern JavaScript libraries like Swiper.js and jQuery. It employs Google Analytics and Jetpack for visitor tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting and domain registration are stable and consistent with the business's geographic location. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security or incident response policies. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR requirements. No vulnerability disclosure or security.txt files are present, which could be improved to enhance trust and transparency. Overall, the website is functional, professional, and credible but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

A

AS Eesti Loto

eestiloto.ee

51

AS Eesti Loto operates as the official national lottery provider in Estonia, offering a variety of lottery games such as Eurojackpot, Vikinglotto, Bingo loto, Keno, Jokker, and e-kiirloterii. The website serves as a platform for ticket sales, results checking, and account management, targeting Estonian residents interested in legal lottery gaming. The company holds a strong market position as a government-licensed entity with a medium-sized operational scale. The website's content is well-structured, professionally designed, and provides comprehensive information about games, responsible gaming, and user support.

F

Fletcher Group

fletchershipping.com

59

Fletcher Group is a UK-based company specializing in the operation and management of Offshore Platform Supply Vessels, serving the energy sector with a modern fleet and over 300 employees. Their website demonstrates a professional digital presence with clear business descriptions, client testimonials, and multiple industry certifications, positioning them as a reputable service provider in offshore logistics and vessel management. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security measures include HTTPS, CSRF protection, reCAPTCHA integration, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The WHOIS data is notably missing, which raises concerns about domain registration legitimacy despite the professional appearance and content of the website. Overall, the site scores well in content quality and security posture but should address domain registration transparency and enhance security policy disclosures.

T

Tilde.ai

tilde.ee

67

Tilde.ai is a technology company specializing in AI-driven language technologies, including neural machine translation, speech-to-text, text-to-speech, and conversational AI solutions. Positioned as a European leader, the company offers a broad portfolio of language and speech technology services targeting businesses and organizations seeking multilingual and AI-powered communication tools. The website is professionally designed, multilingual, and uses modern web technologies such as WordPress, Elementor, and various analytics and marketing tools. The technical infrastructure appears robust with hosting likely on Microsoft Azure and integration of multiple tracking and marketing services. Security posture is generally good with HTTPS enabled and domain registration protections, though improvements such as enabling DNSSEC and publishing explicit security and privacy policies are recommended. Overall, the site is accessible without WAF or blocking mechanisms, indicating good operational maturity.

S

ScanMarine Estonia OÜ

scanmarine.ee

46

ScanMarine Estonia OÜ is a small Estonian company specializing in the sale and rental of sea containers along with comprehensive transport and logistics services including maritime, air, road, and rail transport. Established in 2012, the company targets both business and consumer markets within Estonia and the broader EU region. Their website reflects a professional and consistent brand presence with multilingual support and e-commerce capabilities. Technically, the site is built on WordPress with WooCommerce and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and PixelYourSite, all managed with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Overall, the website demonstrates good digital maturity, compliance, and trustworthiness.

Lennuliiklusteeninduse AS operates as the national air navigation service provider in Estonia, ensuring safe and efficient air traffic management within Estonian and European airspace. The organization offers core services including air traffic control, aeronautical information services, technical system management, and ongoing development activities to modernize aviation infrastructure. The website reflects a mature digital presence built on Drupal 10, with multilingual support and integration of modern APIs such as Google Maps and Facebook SDK for enhanced user engagement. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the domain registration and website content align well, indicating a trustworthy and established entity in the transportation sector.

E

Eesti Evangeelne Luterlik Kirik

eelk.ee

46

The Eesti Evangeelne Luterlik Kirik (Estonian Evangelical Lutheran Church) operates a well-structured official website providing comprehensive information about the church's history, organization, clergy, and community activities. The site targets church members and the Estonian public, offering religious content, news, and contact details. The website is built on WordPress with Bootstrap and includes integrations such as Google Analytics and Facebook SDK for user engagement and tracking. While the site is professionally designed with good navigation and mobile optimization, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain is well-established since 2010, registered through a reputable Estonian registrar, aligning with the church's official status. Overall, the website is credible and functional but would benefit from enhanced privacy compliance and security hardening.

D

Delfi Meedia AS

epl.ee

57

Eesti Päevaleht, operated by Delfi Meedia AS, is a leading Estonian news media outlet offering comprehensive news, opinion, and cultural content. The website demonstrates a mature digital presence with a modern tech stack including Nuxt.js and Vue.js, supported by reputable advertising and analytics providers. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

V

Visualead Ltd.

visualead.com

56

Visualead Ltd. operates a specialized online platform offering visual QR code generation services aimed at businesses and marketers seeking enhanced engagement through branded and mobile-optimized QR codes. The company positions itself as a medium-sized technology firm with a global client base including major brands, providing a SaaS model with campaign management and analytics capabilities. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site employs modern JavaScript libraries and tracking tools, with HTTPS enforced and secure form handling, though some security headers are missing. Privacy compliance is partially addressed with clear privacy and terms of use pages, but lacks a cookie consent mechanism. The absence of WHOIS data for the domain is a notable concern, potentially indicating registration or privacy issues, but the active and consistent web presence mitigates some trust concerns. Overall, the site demonstrates a solid digital maturity with room for improvement in security transparency and privacy practices.

N

NetDirect

shopcentrik.cz

69

NetDirect is a Czech Republic-based technology company specializing in custom e-commerce solutions, with over 23 years of experience. The company has established itself as a leader in the Czech market, having developed major e-shops such as Alza.cz and Notino.cz. Their business model focuses on B2B services including custom e-shop development, B2B portals, IT outsourcing, and online marketing. The website reflects a mature digital presence with professional design and clear service offerings. Technically, the website leverages modern web technologies including Angular framework, Google Fonts, Google Tag Manager, and Facebook SDK. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is generally good with HTTPS enforced and secure form implementations, but lacks some security headers and explicit security policies. From a security perspective, the absence of WHOIS data and lack of explicit privacy and security policies are notable gaps. The site uses multiple third-party analytics and marketing tools, indicating moderate user tracking. Cookie consent mechanisms are implemented, supporting GDPR compliance to some extent. Overall, the site is trustworthy but would benefit from enhanced transparency and security disclosures. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, publishing incident response contacts, and improving accessibility. These steps will enhance trust, compliance, and security posture, supporting NetDirect's market leadership and digital maturity.

Tržiště Luxury Group operates a specialized e-commerce platform offering luxury gift vouchers and items associated with high-end hotels and restaurants in Prague. Their market niche focuses on affluent customers seeking premium hospitality experiences, including vouchers for CODA Restaurant, Terasa U Zlaté Studně, Aria Hotel Prague, and Golden Well Hotel. The website is professionally designed, bilingual (Czech and English), and provides a seamless shopping experience for luxury hospitality gifts. Technically, the site is built on the Shoptet e-commerce platform, utilizing jQuery and Facebook SDK, with HTTPS enforced and standard security measures like CSRF tokens and cookie consent mechanisms. However, the use of an outdated jQuery version and lack of advanced security headers indicate room for improvement. The absence of WHOIS registration data raises concerns about domain transparency, although the website content and partner links suggest legitimate business operations. Privacy compliance is addressed with a visible privacy policy and cookie consent banner, but no explicit contact information or security policies are provided. Overall, the site presents a moderate security posture with good business credibility but would benefit from enhanced transparency and security practices.

H

HR organizer

hrorganizer.be

69

HR organizer is a Belgian technology company specializing in SaaS-based applicant tracking system (ATS) and employer branding solutions tailored for HR professionals and recruiters in Belgium. Their platform supports the entire recruitment lifecycle from job posting to onboarding, integrating with major job boards and social media channels. The company positions itself as a leading ATS provider trusted by Belgian enterprises, emphasizing productivity and seamless recruitment workflows. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, Google Fonts, and Facebook SDK for social integration. The site is mobile-optimized, SEO-friendly, and includes structured data for enhanced search engine understanding. Cookie consent mechanisms are robust, supporting GDPR compliance with multiple cookie categories and user preferences. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers such as CSP or HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but is mitigated by the professional site and GDPR compliance. Overall, HR organizer presents a mature digital presence with strong business credibility and privacy compliance. The main risk lies in the lack of WHOIS transparency and missing explicit security policy disclosures. Strategic improvements in security headers and incident response documentation would enhance trust and security posture.

K

Kartografie.cz

kartografie.cz

58

Kartografie.cz is a well-established Czech map publisher with over 70 years of experience producing educational and thematic maps, atlases, and custom cartographic products. Their business model combines e-commerce retail with bespoke map creation services targeting schools, travelers, and map enthusiasts. The website is built on the Shoptet e-commerce platform, leveraging modern analytics and marketing tools with a clear cookie consent mechanism, reflecting a mature digital presence. Security posture is generally good with HTTPS and CSRF protections, though improvements in security headers and library updates are recommended. The absence of WHOIS data reduces domain trustworthiness, but the professional website content and contact information support legitimacy. Overall, the site presents a solid business with room for technical and security enhancements.

C

Content Marketing Institute

contentmarketinginstitute.com

66

Content Marketing Institute (CMI) is a well-established organization focused on advancing the practice of content marketing through online education, in-person and digital events, strategic consultation, training, and research. The website positions itself as a leading global brand in content marketing education, targeting marketers and creators from enterprise brands, small businesses, and agencies. The business model revolves around providing educational content and events to a large community of content marketers worldwide. Technically, the website employs a modern technology stack including JavaScript frameworks, New Relic monitoring, OneTrust for cookie consent, Google Tag Manager, and various analytics and advertising tools. The site is hosted on a content delivery network (Contentstack) and demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and some recommended security headers. There is no publicly available security policy or incident response information, and no vulnerability disclosure mechanism is evident. Cookie consent is managed effectively via OneTrust, indicating some level of privacy compliance, though no explicit privacy policy or terms of service were found in the provided content. Overall, the website is professional, trustworthy, and well-positioned in its market niche. However, improvements in privacy documentation, security header implementation, and transparency around incident response would enhance its security posture and compliance standing.

S

Stylebot

stylebot.app

62

Stylebot is a technology company specializing in providing writing style and editing guidance through a SaaS platform targeted at enterprises, media organizations, and educational institutions. The website presents a professional and content-rich interface, showcasing client logos, testimonials, and awards that position Stylebot as a trusted solution in its niche. The business model revolves around subscription services with free trials and demos to attract customers. Technically, the site is built on WordPress with modern plugins and integrations such as Yoast SEO, Google Analytics, and LinkedIn Insight Tag, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and a vulnerability disclosure policy are absent. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism despite tracking scripts. Overall, the site scores well on business credibility and technical implementation, with minor recommendations to enhance security and privacy transparency.

U

UAB "Interneto vizija"

donato.lt

35

Donato.lt is a Lithuanian small business specializing in internet page creation, maintenance, individual programming, and online advertising services. The company targets local Lithuanian businesses and individuals seeking web development and digital marketing solutions. The website presents a clear service offering with a focus on custom design, SEO, and social media integration. Technically, the site uses standard JavaScript libraries including Facebook SDK and Google APIs, with Google Analytics for user tracking. The site is accessible, uses HTTPS, but lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. Contact information is limited to an obfuscated email address, with no phone or physical address provided. WHOIS data confirms the domain is registered to a Lithuanian company consistent with the website's claims, indicating legitimacy. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

S

StatykPats.lt

statykpats.lt

39

StatykPats.lt is a Lithuanian e-commerce retailer specializing in construction and finishing materials, tools, garden, leisure, and cleaning equipment. Established since 2006, it serves primarily the Lithuanian market with a broad product catalog and additional services such as trailer rental. The website demonstrates a consistent brand presence and clear contact information, supporting its medium-sized business profile. Technically, the site uses legacy JavaScript libraries like jQuery 1.11.3 alongside modern marketing tools such as Google Tag Manager and Facebook SDK, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used, but no security headers are detected and the use of outdated libraries poses potential risks. Privacy compliance is good with visible cookie consent and privacy policies aligned with GDPR. Overall, the site is trustworthy but would benefit from technical and security updates to enhance resilience and compliance.

U

UAB "DVIGUBAS AČIŪ"

dovanossiluteje.lt

41

UAB "DVIGUBAS AČIŪ" operates the website dovanossiluteje.lt, an e-commerce platform specializing in gift coupons and flower delivery services primarily targeting the Šilutė region in Lithuania. The business has been active since 2015 and positions itself as a regional leader in retail gift services, offering a variety of gift categories and convenient online purchasing options. The website is professionally designed with clear navigation and localized content tailored to its audience. Technically, the site employs a mix of established JavaScript libraries such as jQuery and Bootstrap, integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, and Visual Website Optimizer, and uses HTTPS to secure communications. While the site demonstrates good privacy compliance with a cookie consent mechanism and a comprehensive privacy policy, it lacks explicit security policies and incident response information. Security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Overall, the website is trustworthy and professionally maintained, with a moderate to good technical and security maturity level.

U

UAB DVIGUBAS AČIŪ

silutesskelbimai.lt

38

The website www.silutesskelbimai.lt operates as a local classifieds platform primarily serving the Šilutė region in Lithuania. It offers a free classifieds service with categories including real estate, transportation, services, and agriculture. The business model includes paid VIP ad placements and advertising space sales, positioning itself as the largest classifieds site in the Šilutė area. The company behind the site is UAB DVIGUBAS AČIŪ, with a clear focus on local community engagement and commerce facilitation. Technically, the site employs a modern but straightforward technology stack including jQuery, Google Analytics, Google Tag Manager, and Usercentrics for GDPR-compliant cookie consent management. The site is mobile optimized and uses HTTPS with no visible security warnings, indicating a secure baseline. However, no advanced security headers were detected, and no CMS or hosting provider information was found, suggesting a custom or lightly managed infrastructure. From a security perspective, the site demonstrates good practices such as encrypted connections and consent management but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration transparency. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the site presents a functional and regionally focused classifieds platform with moderate technical maturity and privacy compliance. The main risk lies in the lack of WHOIS transparency and limited direct company contact information. Strategic improvements in security headers, incident response readiness, and clearer business contact details would enhance trust and security posture.

Š

Šilutės dziudo klubas „Kumikata“

kumikata.lt

36

Šilutės dziudo klubas „Kumikata“ is a local Lithuanian judo club focused on martial arts training and community engagement. The website presents the club's philosophy, history, and training opportunities, targeting local sports enthusiasts. Technically, the site uses legacy JavaScript libraries such as jQuery 1.11.3, Google Analytics, and Facebook SDK for tracking and social integration. The site is accessible over HTTPS and includes basic privacy and cookie consent mechanisms, but lacks advanced security headers and modern technical optimizations. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact details appear consistent with a small local sports organization. Security posture is moderate but could be improved by updating libraries and adding security headers.

U

UAB BALTIC FROST

e-silumossiurbliai.lt

39

The website www.e-silumossiurbliai.lt represents UAB BALTIC FROST, a Lithuanian company specializing in the sale and installation of heat pumps and related heating equipment. The site targets homeowners and builders seeking energy-efficient heating solutions, offering a detailed product catalog and technical information primarily in Lithuanian. The business operates as a small-sized regional energy sector e-commerce and service provider with a focus on heat pump technologies. Technically, the website employs legacy jQuery 1.7.2, Google Tag Manager, and Facebook SDK for tracking and marketing purposes. The site is served over HTTPS with a valid SSL certificate and includes privacy and cookie policies with consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate but could be improved by updating outdated libraries and implementing security headers. The absence of WHOIS data limits domain legitimacy verification, though the website content and contact details appear professional and trustworthy. Overall, the site scores well in content quality and user experience but has room for improvement in technical security and compliance documentation.

U

UAB Baltic Frost

balticfrost.lt

38

UAB Baltic Frost is a small Lithuanian company specializing in heating, air conditioning, refrigeration, and ventilation system installation and maintenance primarily in the Klaipėda region. With 15 years of experience, the company offers services including heat pump installation, air conditioner installation, technical maintenance, consulting, and thermographic imaging. The website reflects a regional service provider with a clear focus on HVAC solutions. Technically, the site uses legacy jQuery, Google Analytics, Facebook SDK, and Google Maps API, though the map integration is currently broken due to API key issues. Security posture is moderate with HTTPS usage but lacks modern security headers and uses outdated libraries. Privacy and cookie policies are present and GDPR compliant. Contact information is clearly provided, enhancing business credibility. WHOIS data is unavailable due to query limits, limiting domain registration trust verification. Overall, the site is functional and professional but would benefit from technical and security updates.

O

Опознай.bg - Пътеводителят на България

opoznai.bg

52

Опознай.bg is a Bulgarian-language online travel guide and directory focused on providing comprehensive information about natural and cultural landmarks, events, travel ideas, offers, and accommodations within Bulgaria. The platform targets Bulgarian-speaking travelers and tourists interested in exploring Bulgaria's diverse attractions. It holds a strong market position as a detailed national travel resource with thousands of listings across multiple categories. Technically, the website employs a mix of legacy and modern technologies including jQuery 1.11.3, Firebase messaging, Google Analytics with IP anonymization, and Facebook SDK integrations. The site is hosted with assets served from imgrabo.com and uses HTTPS throughout, indicating a secure transport layer. Security posture is moderate with good practices like CSRF token usage and anonymized analytics, but lacks explicit security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is basic; no explicit privacy or cookie policies were found, though cookie consent mechanisms appear implemented. Business credibility is supported by professional design, consistent branding, and integration with major social platforms, but absence of contact details and policies reduces trust. Overall, the site is functional and content-rich but would benefit from enhanced security and privacy transparency.

D

Kilimai, Grindų Dangos, Parketas ir kitos Interjero Detalės - Dubingiai

dubingiai.lt

52

Dubingiai.lt is a Lithuanian e-commerce retailer specializing in floor coverings such as carpets, parquet, and other interior accessories. The website targets homeowners and office clients within Lithuania, offering a broad selection of interior finishing materials. The business operates on the PrestaShop platform, leveraging modern web technologies including jQuery, Bootstrap, and various marketing and analytics tools. The site is well-structured, mobile-optimized, and employs HTTPS with a good SSL configuration, reflecting a moderate level of digital maturity. Security measures include the use of Google reCAPTCHA and a cookie consent mechanism, although explicit privacy policies and contact information are not readily visible, indicating room for improvement in compliance and transparency. Overall, the website presents a professional retail presence with moderate trustworthiness but would benefit from enhanced privacy disclosures and clearer contact channels.

Š

Šilutės reklama

silutesreklama.lt

40

Šilutės reklama is a small Lithuanian web development agency specializing in creating websites, e-commerce platforms, and providing online advertising and programming services. With over 10 years of experience and a portfolio exceeding 250 websites, the company targets local businesses and individuals seeking professional digital presence solutions. Their offerings include website audits, SEO optimization, and social media administration, positioning them as a comprehensive digital service provider in their regional market. Technically, the website employs a traditional tech stack including HTML, CSS, PHP, jQuery, and Bootstrap, with integration of Facebook SDK and Google Analytics for marketing and tracking purposes. While the site is functional and professionally designed, it uses somewhat outdated libraries and lacks modern security headers and privacy policies, which could impact compliance and security posture. The security posture is moderate with HTTPS usage but missing advanced headers and updated libraries. Overall, the website is accessible and trustworthy but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include updating technology stack, implementing security headers, and publishing privacy and cookie policies to improve user trust and regulatory compliance.

B

BoilieRoller - Bait making equipment

boilieroller.com

46

BoilieRoller.com is an e-commerce website specializing in bait making equipment and accessories targeted at fishing enthusiasts. The site positions itself as a niche supplier with a focus on quality bait making tools. The website is functional with basic content and navigation, supported by social media channels on Facebook, YouTube, and Twitter. However, the lack of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Technically, the site uses older versions of jQuery and Bootstrap frameworks, with Google Tag Manager and Facebook SDK for analytics and marketing. Security posture is moderate but could be improved by adding security headers and updating libraries. Privacy compliance is addressed with a cookie consent banner and a basic privacy policy, indicating GDPR awareness. Overall, the site is operational but requires improvements in security, transparency, and technical modernization to enhance trust and user experience.

U

UAB Viltana

radilux.lt

40

RADILUX, operated by UAB Viltana, is a Lithuanian small business specializing in the manufacture and retail of window coverings including roller blinds, blinds, mosquito nets, Roman blinds, and room dividers. The company targets customers primarily in the Žemaitija region, offering a wide range of over 450 fabric options and emphasizing quality materials and fast production and installation times. The website reflects a local retail business with clear contact information and a presence on Facebook, supporting customer engagement and marketing efforts. Technically, the website employs legacy technologies such as jQuery 1.7.2 alongside modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook SDK. While the site is accessible and functional with basic mobile optimization and SEO, there is room for modernization and improvement in performance and accessibility standards. The presence of multiple tracking scripts indicates moderate user tracking, balanced by a visible cookie consent mechanism and privacy policy aligned with GDPR requirements. From a security perspective, the site uses HTTPS but lacks visible HTTP security headers and employs an outdated JavaScript library version, which could expose it to vulnerabilities. No explicit security or incident response policies are published, and WHOIS data is unavailable due to query limits, though no suspicious indicators are present. Overall, the security posture is moderate but could benefit from enhancements to protect user data and improve trust. The overall risk assessment suggests a legitimate small business with a functional online presence but with technical and security improvements recommended to enhance resilience, compliance, and user trust. Strategic recommendations include updating legacy libraries, implementing security headers, publishing security policies, and improving mobile and accessibility features.

Г

Грабо Медия АД

grabo.bg

53

Grabo.bg is a leading Bulgarian e-commerce platform specializing in promotional deals across various sectors including shopping, dining, entertainment, beauty, hotels, vacations, and excursions. The platform targets Bulgarian consumers primarily in Sofia and other major cities, offering discounts up to 70%. The business model revolves around aggregating and selling time-limited deals from various service providers and merchants. The website is well-branded, professionally designed, and offers mobile applications for Android, iPhone, and Huawei devices, enhancing accessibility and user engagement. Technically, Grabo.bg employs a modern technology stack including jQuery, Firebase Messaging, Google Analytics, Google Tag Manager, Facebook SDK, Microsoft Clarity, and Klaviyo for marketing automation. The site is served over HTTPS with strong security headers, ensuring secure data transmission. The platform integrates social login options and uses extensive tracking and advertising networks to optimize marketing efforts. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates good practices such as anonymizing IP addresses in analytics and enforcing secure cookies. However, it lacks explicit cookie consent mechanisms and does not publish a dedicated security policy or incident response contacts. There is no vulnerability disclosure or security.txt file, which are recommended for transparency and security maturity. No critical vulnerabilities or exposed sensitive data were detected. Overall, Grabo.bg presents a trustworthy and professional online presence with a strong market position in Bulgaria. To enhance compliance and security posture, the company should implement explicit cookie consent, publish security policies, and establish vulnerability disclosure channels. These steps will improve user trust and regulatory compliance, supporting sustainable growth and risk management.

B

BĮ Klaipėdos miesto globos namai

kgnamai.lt

46

BĮ Klaipėdos miesto globos namai is a Lithuanian municipal social care institution focused on providing services to elderly individuals and the local community. The organization is actively involved in EU-funded projects such as the Interreg VI-A Latvia-Lithuania Programme, demonstrating engagement in regional cooperation and social welfare initiatives. The website serves as an information portal offering news, contact details, service descriptions, and community engagement opportunities. Technically, the website is built on WordPress with a modern theme and uses common web technologies including jQuery, Google Analytics, Facebook SDK, and Leaflet.js for interactive maps. The site is mobile-optimized, accessible, and implements GDPR-compliant cookie consent mechanisms. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with privacy regulations. However, it lacks explicit security headers and dedicated security or incident response policies on the site. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable due to query limits, but the domain appears legitimate and consistent with a public institution. Overall, the website presents a trustworthy and professional digital presence for a government social care entity. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and compliance maturity.

Epas.lt is a Lithuanian digital services provider specializing in website creation, mobile application development, advertising services, graphic design, SEO optimization, and hosting. The website presents a basic but functional online presence targeting businesses or individuals seeking digital solutions. The market position appears local and small-scale with no explicit information on company size or history. The technical infrastructure includes integration with Google Analytics and Facebook Pixel for marketing and tracking purposes, but lacks advanced security headers and privacy policies. The website is accessible without any WAF or blocking mechanisms, but the absence of WHOIS data limits the ability to fully verify domain legitimacy. Security posture is moderate with room for improvement in privacy compliance and security best practices.

A

Asian Association for Investors in Non-Listed Real Estate Vehicles (ANREV)

anrev.org

61

ANREV is a well-established not-for-profit organization serving as a leading platform for investors in the Asia Pacific non-listed real estate sector. It provides comprehensive research, market data, standards, and events to support transparency and best practices in the industry. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to institutional investors and real estate professionals. Technically, the site employs modern analytics and tracking tools, including Google Analytics, Google Tag Manager, and Facebook SDK, while maintaining good privacy compliance with cookie consent and a detailed privacy policy. Security posture is solid with HTTPS enforced and secure login mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data limits domain registration trust analysis, but the overall professionalism and strategic partnerships support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and improving accessibility features.

J

Jeruzalės bendruomenės centras

jeruzalesbendruomene.lt

41

Jeruzalės bendruomenės centras is a local community center serving the Jeruzalė neighborhood and adjacent microdistricts in Vilnius, Lithuania. The organization focuses on community engagement, project implementation, and providing information and support to local residents. The website reflects a small non-profit entity with clear contact details, social media presence, and community-oriented content. Technically, the site is built on WordPress using modern plugins and libraries, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and privacy policies are lacking. The absence of WHOIS data limits domain trust analysis but the site content and contact information appear legitimate.