Security Directory

E

Elvim

elvim.lv

60

Elvim is a Latvian-based company specializing in the marketing and distribution of pharmaceutical and medical products across the Baltic and CIS countries. Established in 1992, it has grown into a medium-sized enterprise with approximately 70 employees, serving hospitals, pharmacies, and other healthcare providers in 9 countries. The company offers a range of services including logistics, storage, repackaging, and related pharmaceutical services, positioning itself as a key regional distributor with partnerships with over 20 manufacturers. The website reflects a professional and consistent brand image with clear contact information and certifications such as ISO 9001, indicating a commitment to quality management. Technically, the website is built on WordPress using the Enfold theme and Rank Math SEO plugin, integrating Google Analytics and Google Maps for enhanced user experience and tracking. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in implementing security headers and explicit security policies. No blocking or WAF challenges were detected, allowing full content accessibility. Overall, the website and business appear legitimate and well-established, though the lack of accessible WHOIS data limits domain registration verification. The company maintains good privacy compliance with dedicated policy pages and consent banners. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party scripts to mitigate risks.

du, operated by Emirates Integrated Telecommunications Company (EITC), is a leading telecommunications provider in the United Arab Emirates offering a wide range of consumer services including mobile postpaid and prepaid plans, home internet and TV packages, 5G internet, and device sales. The website reflects a mature digital presence with a focus on consumer engagement, accessibility, and e-commerce capabilities. The technical infrastructure leverages modern JavaScript frameworks, multiple analytics and marketing tools, and implements accessibility features to enhance user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not prominently disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility suitable for a major telecom operator in the region.

V

Van Genechten Packaging

kvadrapak.lv

66

Van Genechten Packaging is a well-established packaging manufacturer specializing in sustainable folding carton solutions for various markets such as food, pet care, beverages, and more. The company emphasizes innovation, creativity, and sustainability to help brands differentiate themselves. The website is professionally designed using Drupal 10, with good mobile optimization, accessibility, and SEO practices. It integrates Google Tag Manager and Analytics for tracking and marketing purposes. Security posture is strong with HTTPS enforced and domain registration consistent with the business history. However, the site lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website reflects a credible and mature business with a solid digital presence.

R

Start page / Riga Loft

rigaloft.com

49

The website rigaloft.com represents a small real estate and architectural services business focused on loft apartments and related investment opportunities in Riga, Latvia. The site offers a catalog of loft apartments, investment and development information, and links to architectural services. The business appears to be established since 2014, consistent with the domain registration date. The website is accessible and uses modern web technologies such as Bootstrap, jQuery, Google Analytics, and Cloudflare services, indicating a moderate level of digital maturity. However, the site lacks comprehensive privacy and cookie policies, contact information, and advanced SEO or accessibility features, which limits its professionalism and user trust. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, which are recommended for improved protection. Overall, the site is functional but would benefit from enhanced compliance and security measures.

E

Epata Studio

epatastudio.com

41

Epata Studio is a small audiovisual content company focused on producing documentary projects from Europe. The website is hosted on WordPress.com and uses standard WordPress technologies and advertising networks such as Amazon Ads and Google DoubleClick. The site content is minimal and currently displays a message indicating the site was 'hijacked by future,' suggesting the site is inactive or under transition. There is no contact information, privacy policy, or terms of service published, which limits user trust and compliance. Technically, the site uses HTTPS and has domain registration protections but lacks DNSSEC and security headers, which are recommended for improved security posture. Advertising and analytics scripts are present but without visible consent mechanisms, indicating poor privacy compliance.

S

SIA Vides Konsultāciju Birojs

vkb.lv

41

SIA Vides Konsultāciju Birojs is a Latvian environmental consultancy firm specializing in environmental monitoring, geological and environmental research, surveying, hydrogeology, water supply, environmental consulting, and laboratory services. The company targets businesses and organizations in Latvia requiring specialized environmental and geological services. The website reflects a small-sized, established business with a history dating back to 1996, providing a range of technical and consulting services in the energy and environmental sectors. Technically, the website is built on Joomla CMS with a technology stack including jQuery, Bootstrap, and Revolution Slider. It uses Google Analytics for tracking and has moderate performance and basic mobile optimization. The site is accessible and has clear navigation but lacks advanced SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks important security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. There are no visible privacy or cookie policies, indicating compliance gaps with GDPR. Contact information is clearly provided, but no incident response or security policy information is available. Overall, the website is functional and moderately professional but requires improvements in security best practices, privacy compliance, and technical modernization to enhance trust and reduce risk.

T

Tamar Ship Management Ltd.

tamarshipman.com

54

Tamar Ship Management Ltd. is a Hong Kong-based maritime service provider managing a fleet of 42 handy size and supramax dry bulk vessels. The company offers a range of ship management services including crew management, technical management, project management, commercial operations, dry docking, compliance, vessel inspection, and insurance management. Their website reflects a medium-sized, established business with a professional online presence and clear contact information targeting shipowners and maritime stakeholders globally. Technically, the website is built on WordPress, utilizing common technologies such as jQuery, Google Analytics, and Google reCAPTCHA for security and analytics. The site is hosted with DNS managed by Cloudflare and registered through WebNic.cc. Performance and mobile optimization are good, with SEO practices implemented via Yoast SEO. However, accessibility features are basic and could be improved. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks DNSSEC and important security headers. The customer portal login mechanism is a security concern due to password transmission in URL parameters. No explicit privacy, cookie, or security policies are published, indicating compliance gaps. The WHOIS data is consistent and domain age supports legitimacy. Overall, Tamar Ship Management's website is professional and credible but would benefit from enhanced security practices, privacy compliance improvements, and safer authentication methods to reduce risk and improve trustworthiness.

H

Hérens Quality Asset Management

hqam.ch

64

Hérens Quality Asset Management (HQAM) is a specialized asset management boutique focused on serving institutional and private investors primarily in Switzerland. The company offers key services including asset management, investment advisory, and portfolio analysis. The website is professionally designed using WordPress with modern plugins such as Elementor and Rank Math SEO, indicating a mature digital presence. The site is well-structured, mobile-optimized, and includes a customer portal for client access. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, HQAM presents a credible and professional business front with room for improvement in privacy and security transparency.

M

MCITY OFFICES

mcityoffices.lv

48

MCITY OFFICES operates as a commercial real estate leasing and property management company based in Riga, Latvia, specializing in office and warehouse space rentals across multiple business centers. The website presents a professional and consistent brand image, targeting businesses and professionals seeking functional and modern office spaces. The company demonstrates a solid market position with multiple locations and a BREEAM certification indicating environmental standards compliance. Technically, the website is built on WordPress with modern frameworks and plugins, including Elementor, Bootstrap, and Google Analytics integrations, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms, though it lacks some advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy page found. Overall, the site is trustworthy and professional but could improve in transparency and security documentation.

J

Julius Meinl

meinl.lv

42

Julius Meinl Latvia operates as a regional branch of the historic Julius Meinl brand, specializing in coffee and tea products, equipment, and business solutions primarily targeting the HoReCa and retail sectors in Latvia. The website presents a professional and content-rich platform showcasing product offerings, business packages, and coffee culture concepts. Technically, the site is built on the MODX CMS with the Gumby framework and uses legacy JavaScript libraries, which may pose security risks. Google Analytics and Tag Manager are integrated for user tracking, but no privacy or cookie policies are evident, indicating potential compliance gaps. Security posture is moderate with HTTPS implied but lacking visible security headers and using outdated libraries. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site is functional and business-focused but requires improvements in security and privacy compliance to enhance trust and reduce risk.

W

Woodpecker

woodpecker.co

70

Woodpecker is a mature SaaS company specializing in cold email and sales outreach automation, targeting sales professionals, agencies, and individual cold emailers. The platform offers a comprehensive suite of tools including email sending, verification, warm-up, lead finding, and LinkedIn outreach automation. The company positions itself as a GDPR-compliant, trusted solution with a strong content marketing and educational resource presence. Technically, the website is built on WordPress with a modern tech stack including multiple analytics and marketing tools, optimized for performance, SEO, and mobile responsiveness. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in DNSSEC and incident response transparency. Overall, the domain registration is consistent with the business profile, showing legitimacy and stability. The website demonstrates high professionalism and trustworthiness, making it a reliable platform in its niche.

I

Integrum

integrum.se

55

Integrum is a healthcare company specializing in innovative bone-anchored prostheses using the osseointegration method. Established since 1990, it serves amputees and caregivers globally, offering the OPRA™ Implant System and related patient support services. The company maintains a professional web presence with detailed patient stories and investor relations information, reflecting transparency and market maturity. Technically, the website is built on WordPress with modern tracking and marketing tools integrated, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no evident vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is basic, with cookie consent mechanisms present but no explicit privacy policy or terms of service pages found. Overall, Integrum demonstrates a credible and trustworthy digital footprint aligned with its healthcare business focus.

DevClub.lv is a Latvian-based technology community platform dedicated to software development professionals. It organizes regular events, talks, and meetups featuring industry experts from local and international companies. The platform serves as a knowledge-sharing hub and promotes IT job opportunities and training sessions through partnerships with various tech companies. The website is built on WordPress and integrates modern web technologies, including Google Analytics and YouTube video embeds, to provide rich multimedia content and event registration via Eventbrite. While the site is well-structured and professionally designed, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data limits domain legitimacy verification, but the presence of reputable sponsors and active social media channels supports its credibility.

K

Kvikworks

kvikworks.lv

53

Kvikworks is a Latvian visual advertising production company established in 2012, specializing in signage, interiors, and related manufacturing services such as CNC, laser cutting, and metalworks. The website presents a clear navigation structure with multilingual support but lacks detailed company contact information and privacy-related policies. Technically, the site uses modern tracking tools like Google Analytics and Google Tag Manager and serves content over HTTPS, but it lacks security headers and comprehensive privacy compliance features. The absence of WHOIS data due to query limits limits full domain legitimacy verification, though the website's branding and content suggest a legitimate small business. Overall, the site demonstrates moderate technical maturity but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

R

Runas Kursi

runaskursi.lv

53

Runas Kursi is a Latvian-based education provider specializing in public speaking and presentation skills training. The company offers group courses, VIP training, individual consultations, and event moderation services. The website demonstrates a professional presence with client testimonials and logos from reputable companies, indicating a solid market position within the education sector. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, Facebook SDK, and marketing tools like Mailchimp and AddThis. The site is HTTPS secured with reCAPTCHA protecting forms, but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. Overall, the security posture is moderate with no visible vulnerabilities, but privacy compliance is weak due to missing policies. The domain WHOIS data is unavailable due to query limits, but the website content suggests legitimacy and consistent operation since 2015. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve trust and compliance.

Gultni.lv is an established Latvian e-commerce platform specializing in industrial supplies including bearings, springs, seals, industrial chemicals, tools, power transmission components, motors, reducers, and other industrial elements. The website targets industrial companies, maintenance professionals, and engineers requiring quality industrial components. It maintains a broad product catalog and partnerships with recognized brands, positioning itself as a key regional supplier in Latvia. Technically, the website uses a variety of JavaScript libraries and Google Analytics for tracking, built on the DIRcms platform. The site is accessible, uses HTTPS with good SSL configuration, but lacks some security headers and an explicit privacy policy page, which are areas for improvement. Contact information is clearly provided, including phone, email, and physical address, enhancing business credibility. Overall, the site demonstrates a moderate to good level of digital maturity with room for enhancements in privacy compliance and security best practices.

S

Sabiedrība ar ierobežotu atbildību "Rock Distribution"

rock-distribution.com

57

Rock Distribution is a specialized distribution company operating primarily in the Baltic States, focusing on musical instruments and professional audio, video, and lighting equipment. The company also provides stage machinery integration and installation services, positioning itself as a comprehensive solutions provider in the entertainment technology sector. Their market position is strong within their regional niche, supported by partnerships with numerous reputable brands. The website reflects a medium-sized enterprise with a professional digital presence, leveraging modern web technologies and tracking tools with appropriate privacy mechanisms. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security practices include HTTPS enforcement, cookie consent, and bot protection via reCAPTCHA, though some security headers are missing and no explicit security policies are published. From a security perspective, the site demonstrates a solid baseline with no critical vulnerabilities detected. However, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and ownership transparency. The company provides clear contact information and privacy policies, supporting GDPR compliance. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust. Overall, the website is professional and trustworthy in appearance but would benefit from improved transparency regarding domain registration and enhanced security policy disclosures. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen legitimacy and trust.

Bioteka is a Croatian non-profit association dedicated to promoting biology and related sciences through educational content such as quizzes, articles, and resources primarily targeting students and educators. The website reflects a niche educational focus with a moderate market position in the Croatian education sector. The technical infrastructure is based on the Xoops CMS platform with legacy JavaScript libraries like jQuery 1.7.2 and includes standard web components such as Google Analytics and a cookie consent mechanism. While the site is functional and provides relevant educational content, it shows signs of technical debt and basic mobile and accessibility optimization. Security posture is moderate with no HTTPS status explicitly confirmed in the HTML content, no visible security headers, and use of outdated libraries posing potential risks. Privacy compliance is addressed with a clear privacy policy and cookie consent banner, indicating GDPR awareness. Overall, the site is trustworthy but would benefit from technical and security modernization to improve resilience and user trust.

L

Linearis

linearistranslations.com

71

Linearis is a well-established language solutions provider specializing in translation, interpreting, and language technology services, with a strong market position in the Baltic region and global reach. The company offers a comprehensive portfolio of services including translation, editing, simultaneous and consecutive interpreting, multimedia translation, and advanced technology integrations such as machine translation post-editing and WordPress localization. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a high level of digital maturity. Technically, the website is built on WordPress with modern plugins like WPBakery, Yoast SEO, and WPML, supported by Cloudflare DNS and integrated with marketing and analytics tools such as Google Analytics, Hotjar, and MailerLite. Performance and mobile optimization are good, with SEO and accessibility features well implemented. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is good, with clear privacy and cookie policies and GDPR compliance indicators. Contact information is readily available, enhancing business credibility. The domain uses privacy protection but aligns with the business profile, and the domain age is reasonable given possible rebranding. Overall, Linearis.io presents a trustworthy, professional, and secure online presence suitable for its business model. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and continuing to monitor privacy compliance to sustain trust and security.

W

WinMagic

winmagic.com

80

WinMagic is a well-established technology company specializing in enterprise data security solutions, including passwordless authentication, endpoint encryption, and key management. Founded in 1997, the company targets enterprises requiring robust cybersecurity measures to protect sensitive data. Their market position is supported by certifications such as ISO 27001 and SOC 2, and they emphasize seamless user experience combined with strong security. The website reflects a mature digital presence with comprehensive content, structured data, and modern marketing tools. Technically, the site is built on WordPress with popular plugins and demonstrates good performance and mobile optimization. Security posture is strong, with HTTPS enforced, security headers present, and no visible vulnerabilities. However, the site could improve by publishing a security.txt file and providing explicit incident response contacts. Overall, WinMagic presents a trustworthy and professional online presence aligned with its business objectives.

H

Hotel Jūrmala SPA

hoteljurmala.com

61

Hotel Jūrmala SPA is a well-established hospitality business located in Jūrmala, Latvia, offering a comprehensive range of services including accommodation, spa and wellness treatments, dining options, and event hosting facilities. The website reflects a professional and consistent brand image targeting tourists, business travelers, and wellness seekers. The business has been operating since 2004, with a domain registration consistent with this timeline, indicating stability and legitimacy. Technically, the website is built on Drupal 8 and incorporates modern web technologies such as Google Analytics, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting details are not explicitly disclosed but DNS records suggest standard hosting providers. From a security perspective, the site uses HTTPS and enforces domain transfer protection. Cookie consent is managed comprehensively via Cookiebot, supporting GDPR compliance. However, DNSSEC is not enabled, and no explicit security policies or incident response contacts are published, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to enhance trust and security posture.

Squeezmo™ operates an e-commerce website offering a niche tea accessory product designed to improve the tea drinking experience by squeezing tea bags to avoid drips and hide used bags. The website targets tea consumers interested in kitchenware and tea accessories. The site is modest in scale and content, with basic navigation and limited technical sophistication. The technical infrastructure relies on older JavaScript libraries and includes Google Analytics for tracking. Payment processing is securely handled via PayPal, but the site lacks HTTPS, which is a critical security shortfall. No privacy or cookie policies are present, and no contact information is provided, limiting transparency and compliance. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness.

L

Litografía la Unión

litografialaunion.com.mx

49

Litografía la Unión is a well-established Mexican manufacturing company specializing in the design and production of printed cardboard packaging. Founded in 1965, the company has a strong market presence supported by recognized certifications such as ISO 9001:2015 and FSSC. Their services include structural design, manufacturing, and advanced printing techniques tailored to meet client needs in various sectors. The website reflects a professional digital presence with good content quality, clear navigation, and mobile optimization. Technically, it leverages WordPress with Elementor and Yoast SEO, integrating Google Analytics and hCaptcha for security and analytics. Security posture is solid with HTTPS enforcement and security headers, though privacy and cookie policies are absent, indicating room for compliance improvement. Contact information is comprehensive and consistent with the business claims. Overall, the site demonstrates a mature digital infrastructure aligned with business goals but would benefit from enhanced privacy and incident response disclosures.

J

Jets® Group

jetsgroup.com

76

Jets® Group is a company focused on reducing global water and energy consumption through innovative solutions and sustainability initiatives. Their website positions them as an established player in the energy sector, targeting businesses and organizations interested in environmental efficiency. The site features a professional design with good content quality and clear navigation, optimized for mobile devices. Technically, the website leverages modern tools including Craft CMS, Google Tag Manager, Piwik Pro analytics, and a comprehensive cookie consent management system, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR, but lacks explicit security headers and published security policies, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and compliance features suggest legitimate operations. Overall, the site scores well in security posture and privacy compliance but could improve business credibility by providing clearer contact and legal information.

V

VUCA communications

vuca.lv

46

VUCA communications is a full-service integrated advertising agency based in Latvia, offering a range of creative and marketing services including advertising campaigns, branding, content marketing, and media production. The website is built on WordPress and uses modern web technologies such as jQuery, Bootstrap, and Google Analytics, indicating a moderate level of digital maturity. The site features multimedia content including a Vimeo video background and social media integration, targeting businesses seeking creative advertising solutions. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The absence of WHOIS data due to query limits limits full domain legitimacy verification. Overall, the website presents a professional image but would benefit from enhanced privacy compliance and security best practices.

A

ACB Co-op

acbcoop.com

68

ACB Co-op is a business-to-business service provider specializing in turnkey channel marketing solutions. Their offerings include rebate and loyalty programs, incentive and reward programs, co-op advertising/MDF, brand compliance, and channel marketing technology. The company positions itself as an expert in optimizing channel marketing strategies for businesses. The website is professionally designed using modern technologies such as Gatsby and React, with integration of major analytics and marketing tracking tools including Google Analytics, Bing Ads, LinkedIn Insight Tag, and ZoomInfo Pixel. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the active and professional online presence. No explicit privacy, cookie, or terms of service policies are found, and no direct contact information is provided on the site, which impacts trust and compliance. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but security headers and incident response information are lacking.

M

Medical Supply Company

medical-supply.ie

59

Medical Supply Company LTD is a well-established Irish supplier specializing in laboratory equipment, reagents, antibodies, and IT solutions targeting clinical diagnostics, life sciences, pharmaceutical, and academic sectors. The company operates a professional and content-rich website that effectively communicates its broad product range and services, positioning itself as a key player in the healthcare supply market in Ireland. The website demonstrates a mature digital presence with comprehensive structured data, social media integration, and clear navigation tailored for B2B customers. Technically, the site is built on WordPress with WooCommerce, leveraging modern themes and scripts, and includes GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-optimized for search engines and user experience, though the absence of WHOIS data limits domain registration trust verification.

A

Altus Intelligence

altusintelligence.lv

46

Altus Intelligence is a Latvian technology consulting company specializing in ERP and CRM system implementation, business process optimization, and IT project management, primarily leveraging SAP Business One and SAP Business ByDesign solutions. The company targets small and medium-sized enterprises seeking to improve operational efficiency and business performance through structured processes and software automation. Their website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Video.js, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as adding security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the website uses HTTPS and does not expose sensitive data in its HTML content. No explicit security policies or incident response contacts are published, which could be improved to strengthen trust and compliance. The absence of WHOIS data due to query limits limits the ability to fully verify domain legitimacy, but the professional presentation and consistent branding suggest a legitimate business. Overall, the website scores moderately well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and conducting regular security audits to maintain and improve the security posture.

M

Mental Disability Advocacy Center

mdac.org

47

Mental Disability Advocacy Center (MDAC) is a well-established non-profit organization founded in 1998, focused on advocating for the human rights of persons with mental disabilities. The organization operates internationally with a clear mission to influence policy, provide legal advocacy, and raise awareness. Their website reflects a professional and consistent brand presence with relevant content targeted at stakeholders including persons with disabilities, NGOs, and donors. The business model is donor-funded advocacy, positioning MDAC as a specialized entity in the human rights non-profit sector. Technically, the website runs on Drupal 7 with common web technologies such as jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use but shows signs of aging technology. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security (DNSSEC) and security headers. No explicit privacy or cookie policies were found, indicating gaps in compliance with modern privacy regulations. Security-wise, the site does not expose sensitive data and uses secure forms, but the absence of security headers and incident response information suggests room for improvement. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and organization. Overall, the website is functional and credible but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing DNSSEC, publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to improve trust and compliance.

A

asketic

asketic.com

67

Asketic is a specialized branding agency focused on delivering brand design services to high-stakes businesses. Their offerings include brand strategy, naming, design direction, visual identity, and a broad range of creative services tailored to elevate or create new brands. The company targets businesses seeking professional branding solutions and positions itself as a niche player in the branding and creative services market. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Webflow CMS, Google Tag Manager, and Stripe for payment processing. From a technical perspective, the website demonstrates a mature digital infrastructure with good performance and SEO optimization. The use of cookie consent mechanisms and privacy policies indicates attention to privacy compliance, particularly GDPR. However, the absence of explicit security headers and incident response policies suggests room for improvement in security posture. The WHOIS data is notably missing, which raises concerns about domain legitimacy and registration transparency. Security-wise, the site uses HTTPS and implements cookie consent, but lacks published security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site presents a moderate to good security posture but would benefit from enhanced transparency and security best practices. The overall risk is moderate due to the missing WHOIS data and lack of explicit security policies. Strategic recommendations include improving domain registration transparency, adding security headers, publishing security and incident response policies, and maintaining strong privacy compliance to enhance trust and security culture.

B

BKF Engineering

bkf.com

48

BKF Engineers is a professional engineering firm specializing in water resources, sustainability, and infrastructure projects. The company maintains a professional online presence with a well-structured website built on WordPress and Elementor, featuring modern web technologies and integrations such as Google Analytics and HubSpot. The website is accessible, mobile-optimized, and demonstrates good SEO and content quality. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, though the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, but the professional branding and active social media presence support the company's credibility. Strategic recommendations include enhancing security headers, implementing privacy compliance mechanisms, and publishing security policies to strengthen trust and compliance.

R

Riverside

riverside-property.co.uk

51

Riverside is a small independent real estate agency based in the United Kingdom, specializing in residential property sales in Hull and surrounding areas since 2004. The company offers personalized services including property sales, free valuations, and mortgage advisory partnerships. The website reflects a professional and trustworthy business with clear contact information, customer testimonials, and certifications such as Client Money Protection. The business targets local property buyers and sellers, leveraging major property portals and social media for marketing. Technically, the website is built on Joomla CMS with a modern tech stack including jQuery, Bootstrap, lazy loading, and Google services such as Analytics and reCAPTCHA. The site is mobile-optimized and performs moderately well, with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced and secure form handling, though the absence of explicit security headers and published security policies suggests room for improvement. The WHOIS lookup for the domain failed due to a naming rules violation error for the 'www' subdomain, but the root domain is active and the website fully accessible, indicating legitimacy. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the site demonstrates a solid business presence with good digital maturity but could enhance security transparency and technical hardening. Strategic recommendations include adding security headers, publishing security and incident response policies, implementing a security.txt file for vulnerability disclosure, and improving accessibility compliance to strengthen trust and compliance posture.

B

Bellissimo Foods Company

bellissimofoods.com

57

Bellissimo Foods Company is a US-based food service provider specializing in Italian and Mediterranean products, servicing over 30,000 independent pizzerias and Italian restaurants weekly. The company operates a national distributor network and offers a proprietary Bellissimo brand. The website is professionally designed using Squarespace, with moderate technical maturity including HTTPS, Google Analytics, and reCAPTCHA Enterprise for form security. However, the absence of privacy and cookie policies and missing WHOIS registration data present compliance and legitimacy concerns. Security posture is moderate with room for improvement in security headers and compliance documentation. Overall, the site reflects a legitimate business presence but requires enhanced transparency and security practices.

BIC Securities is an independent corporate finance advisory firm primarily serving Russia, Ukraine, and the Baltic states. The company focuses on mergers and acquisitions advisory and related corporate finance services, targeting corporate clients engaged in domestic and cross-border equity transactions. The website content reflects a small-sized firm with a clear business focus but limited digital maturity. Technically, the site uses legacy technologies such as jQuery and Google Analytics, with no modern CMS or advanced frameworks detected. The site lacks mobile optimization and accessibility features, and no privacy or cookie policies are present, indicating low privacy compliance. Security posture is weak due to absence of visible security headers and unknown HTTPS status. Overall, the website is functional but basic, with moderate trustworthiness given the lack of contact details and compliance documentation.

M

MTX Connect

mtxc.eu

50

MTX Connect is a telecommunications provider specializing in global mobile internet connectivity for travelers through 4G/5G eSIM and SIM card offerings. The company positions itself as a private mobile operator with flat rate pricing worldwide and additional features such as free chat. The website is professionally designed with clear navigation and multiple data package options tailored for different regions and durations. The presence of Trustpilot customer reviews enhances trustworthiness. Technically, the site uses modern frameworks like UIkit and integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Mixpanel, and Yandex Metrika, indicating a mature digital marketing approach. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is partial with cookie consent implemented but no visible privacy policy in the provided content. WHOIS data is privacy protected, which is common for telecom businesses, but limits full trust assessment. Overall, the site is functional and credible but could improve transparency and security documentation.

C

CatchSmart

catchsmartsolution.com

58

CatchSmart is an IT solutions and system development company established in 2011, offering a range of services including digital IT solutions, system integration, mobile app development, e-commerce solutions, outsourcing, and business process analysis. The company targets businesses seeking to improve productivity and manage expenses through digital transformation and automation. The website is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is solid with HTTPS enabled and reCAPTCHA implemented for form security. However, the site lacks explicit privacy and terms of service pages, and no direct contact information is readily available, which could impact user trust and compliance. The domain registration is consistent and stable, supporting the legitimacy of the business.

B

Bing Digital

bingdigital.com

66

Bing Digital is a well-established ecommerce and digital marketing agency founded in 1999, specializing in ecommerce website design, development, and marketing services. The company targets businesses seeking to grow their online presence through platforms like Magento, Shopify, and BigCommerce, offering a full suite of services including UX design, SEO, PPC, and ongoing support. Their market position is strong with a consistent brand presence and a portfolio of successful client case studies. Technically, the website is built on WordPress using Elementor and Gravity Forms, integrating modern analytics and marketing tools such as Google Analytics, Matomo, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized, SEO-friendly, and uses secure HTTPS with appropriate security headers, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement, security headers, and CAPTCHA on forms. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and readiness. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the professional site and social media presence mitigate some risk. Overall, Bing Digital presents a professional and trustworthy online presence with strong technical and marketing capabilities. The main risk lies in the domain registration opacity, which should be addressed to enhance trust. Strategic recommendations include publishing security and incident response policies, implementing vulnerability disclosure, and verifying domain registration details.

V

Vervo SIA

vervo.lv

62

SIA Vervo is a Latvian-based transport and logistics company specializing in international and local cargo transportation services. Established in 2008, the company offers a broad range of logistics solutions including road, air, sea, and rail freight, as well as value-added services such as customs brokerage, cargo insurance, and warehousing. Their website is professionally designed using Joomla CMS and Yootheme Pro, featuring clear navigation, mobile optimization, and comprehensive service descriptions. Social media integration and client testimonials enhance trustworthiness. The site employs HTTPS and includes privacy and cookie policies with consent mechanisms, reflecting good privacy compliance. However, WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Security headers are not explicitly detected, and no formal security or incident response policies are published, indicating areas for improvement. Overall, the website presents a credible and professional business presence with moderate technical maturity and security posture.

B.F. Fields Moving & Storage is a well-established moving and storage company based in Erie, Pennsylvania, with a history dating back to 1905. The company offers a comprehensive range of services including household relocation, office and industrial moving, warehousing, storage, and logistics. They maintain a strong market position locally and nationally through their partnership with North American Van Lines and certifications from industry bodies such as the American Moving & Storage Association and the Better Business Bureau. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. From a technical perspective, the website employs modern tracking and marketing technologies including Google Analytics, Google Tag Manager, and Podium widgets. The site is served over HTTPS with secure forms, indicating a good baseline security posture. However, the absence of security headers and privacy/cookie policies suggests areas for improvement in compliance and security best practices. The WHOIS data for the domain is missing, which raises questions about domain registration transparency but does not necessarily undermine the business legitimacy given the detailed content and certifications presented. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data, but lacks published incident response or vulnerability disclosure policies. The use of secure forms and HTTPS is positive, yet the lack of privacy and cookie policies indicates potential GDPR compliance gaps. Overall, the security posture is moderate with room for enhancement in policy transparency and header implementation. The overall risk assessment is moderate; the business appears credible and professional, but the missing WHOIS data and privacy compliance gaps should be addressed to strengthen trust and regulatory adherence. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and providing clear incident response contacts to improve security culture and compliance.

A

Apotek 1

apotek1.no

66

Apotek 1 is Norway's largest pharmacy chain, offering both online and physical store services for pharmaceutical products and advice. The website reflects a professional and consistent brand presence targeting Norwegian consumers seeking trusted pharmacy services. The business model focuses on retail pharmacy sales with an emphasis on safety and customer trust. Technically, the site employs modern web technologies including Angular framework, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. WHOIS data for the domain is unavailable from the official Norwegian registry, which is unusual for a major business domain and may warrant further investigation. Overall, the website is trustworthy and professional but could enhance compliance and security transparency.

TaxLink Latvia is a professional services firm specializing in tax, audit, accounting, and financial consulting services primarily for businesses with active operations in Latvia. As a member of the international IR Global network, it offers expert solutions with global reach, targeting both companies and private individuals. The company positions itself as a leading international level audit and consulting firm with over 14 years of experience and a broad client base. The website reflects a professional and consistent brand image, showcasing key services such as transfer pricing, tax risk management, and financial consulting. The technical infrastructure of the website is built on modern and widely used technologies including jQuery, Bootstrap, Swiper.js, and Google services such as Maps, Tag Manager, and Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. However, some SEO and accessibility features could be improved for better performance and compliance. From a security perspective, the website uses HTTPS and employs standard best practices such as asynchronous loading of analytics scripts. There is no evidence of exposed sensitive data or vulnerable libraries in the provided content. However, security headers are not explicitly detected, and no formal security or incident response policies are published on the site. Privacy and cookie policies are present, indicating some level of compliance with data protection regulations, though GDPR compliance is not explicitly confirmed. Overall, the website presents a trustworthy and professional image suitable for its business domain. The lack of WHOIS data limits the ability to fully verify domain legitimacy, but the content and presentation suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing incident response contacts, improving SEO and accessibility, and adding a security.txt file for vulnerability disclosure.

G

Graanul Invest

graanulinvest.com

56

Graanul Invest is a leading European biomass and bioenergy producer specializing in sustainable wood pellets and renewable energy solutions. Established in 2006 and headquartered in Estonia, the company holds a strong market position as the largest wood pellet producer in Europe. Their business model focuses on producing and supplying renewable energy products, supported by multiple e-commerce platforms serving Baltic customers. The website content is professionally presented, emphasizing sustainability, certifications, and corporate responsibility. Technically, the website is built on WordPress with modern technologies including jQuery, Bootstrap, and Yoast SEO, ensuring good SEO and mobile responsiveness. Google Analytics and Tag Manager are used for user tracking with moderate privacy compliance. The site is well-structured with clear navigation and good performance, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain transfer protection. However, DNSSEC is not enabled and security headers are missing, which are recommended improvements. No critical vulnerabilities or blocking mechanisms were detected. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies were found. Overall, the website demonstrates a solid digital presence with good business credibility and moderate to strong security posture. Strategic recommendations include enhancing DNS security, implementing security headers, and publishing incident response information to further strengthen trust and compliance.

I

International School of Riga: Private IB School in Riga

isriga.lv

65

International School of Riga is a private international educational institution based in Latvia, offering the International Baccalaureate curriculum across Early Years, Primary, Middle, and High School levels. The school positions itself as the only international school in Riga with IB accreditation candidacy, serving a diverse student body with over 47 nationalities represented. The website reflects a professional and modern digital presence, leveraging WordPress CMS with multiple plugins for SEO, analytics, and multilingual support. Social media integration and community engagement are strong, supporting the school's outreach and communication efforts. Security posture is robust with HTTPS, security headers, and secure forms, though explicit security policies and incident response information are lacking. Privacy compliance is indicated by cookie consent mechanisms and a comprehensive child protection policy, but explicit GDPR statements and data protection officer contacts are not found. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the site demonstrates a mature digital infrastructure suitable for an educational institution, with recommendations to enhance transparency around security and privacy policies.

S

SIA "Primus ERP"

primuserp.com

30

Primus ERP Ltd. is a Latvia-based small technology company specializing in end-to-end SAP ERP solutions, particularly focused on financial modules such as SAP FI/CO, FI-CA, and Shared Service Framework for Financials. The company targets businesses seeking to optimize their enterprise resource planning and financial management processes through SAP implementations. The website reflects a niche market positioning with a B2B business model centered on SAP consulting and software services. Technically, the website is built on an older WordPress platform with legacy jQuery and uses plugins like Yoast SEO and Google Analytics for SEO and analytics purposes. The site lacks HTTPS encryption and modern security headers, which impacts its security posture negatively. Performance and mobile optimization are basic, and the design is functional but dated. Security-wise, the absence of HTTPS, privacy policies, and cookie consent mechanisms are significant gaps, especially given the use of Google Analytics. No incident response or security contact information is provided, and the site uses outdated software versions, increasing risk exposure. The domain registration data is consistent with the business information, indicating legitimacy. Overall, the website presents moderate business credibility but requires urgent improvements in security and privacy compliance to reduce risk and enhance trustworthiness.

S

SIA Perfect Sales Academy

perfectsales.lv

27

Perfect Sales Academy is a Latvian-based company specializing in seminars, business consulting, and training services, operating since 2001. The website targets businesses seeking to improve growth, profitability, and product introduction through professional seminars and consultations. The site supports multiple languages including Latvian, English, Russian, Estonian, and Lithuanian, indicating a regional Baltic market focus. Technically, the website employs legacy technologies such as jQuery 1.8.2, Nivo Slider, and Lightbox, with Google Analytics for user tracking. The site lacks HTTPS, which is a critical security shortfall. The design and content quality are basic, with limited SEO and accessibility features. No CMS or modern frameworks are detected, suggesting a static or custom-built site. From a security perspective, the absence of HTTPS and outdated JavaScript libraries pose significant risks. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. Contact information is not explicitly provided, reducing business credibility. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the website presents moderate business credibility but requires urgent improvements in security, privacy compliance, and technical modernization to reduce risk and enhance trustworthiness.

B

Bite Latvija

latnetserviss.lv

62

Bite Latvija operates a professional and comprehensive telecommunications website focused on business customers, offering IT and cloud services under the brand 'Bite One IT'. The company positions itself as a major Latvian telecom provider with a strong emphasis on secure and reliable cloud solutions that relieve businesses from server maintenance burdens. The website demonstrates a mature digital presence with Drupal 10 CMS, integrated analytics, and cookie consent management, reflecting a moderate to high level of technical maturity. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and policies are not evident. Privacy compliance is partial, with cookie consent but no clear privacy policy page found in the provided content. Overall, the site is professional and trustworthy but could improve transparency on privacy and security policies. The lack of WHOIS data limits domain trust verification but the site’s quality and branding suggest legitimacy.

O

OPTRON (Pty) Ltd

optron.com

52

OPTRON (Pty) Ltd is a South African-based company specializing in advanced geospatial solutions, serving businesses across Africa. As a member of the OPTRON Group, it offers a range of geospatial products and services aimed at improving productivity and operational efficiency in sectors such as construction, surveying, and agriculture. The company positions itself as a trusted distributor of leading geospatial brands, providing innovative technology and workflow optimization to its clients. Technically, the website is built on WordPress using modern plugins like Elementor and Yoast SEO, with integrations for Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Pardot for marketing and analytics. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security-wise, HTTPS is enforced, but there is a lack of security headers and no explicit security or incident response policies published, which could be improved. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. However, the website content and branding are professional and consistent with a legitimate business. The company maintains a strong privacy and cookie policy presence, indicating compliance with GDPR and related regulations. Overall, the site is trustworthy but would benefit from enhanced security practices and verification of domain registration. Strategic recommendations include implementing security headers, publishing incident response and security policies, auditing third-party scripts, enhancing accessibility, and adding a security.txt file to facilitate vulnerability disclosures.

I

InStandart

instandart.com

58

InStandart is a UK-based IT services company specializing in custom software development with over 10 years of experience. Their offerings include bespoke software, team augmentation, UI/UX design, QA testing, software maintenance, e-commerce development, CAD, and AI solutions. The company targets businesses across fintech, ecommerce, real estate, logistics, hospitality, fashion, and education sectors. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern tracking and analytics tools, hosted via GoDaddy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements can be made in cookie consent and security policy transparency. Overall, InStandart presents a credible and trustworthy business with solid technical infrastructure and good compliance practices.

SIA KOMUNIKĀCIJU DARBNĪCA is a Latvian company specializing in professional seminars and training focused on leadership, sales, customer service, and other business development areas. Established in 2004, it serves business professionals and organizations seeking to enhance their management and sales capabilities. The website presents a professional image with clear navigation and relevant content, targeting a Latvian-speaking audience primarily. Technically, the site is built on WordPress using common plugins like Contact Form 7 and Visual Composer, with Google Analytics integrated for visitor tracking. While the site is mobile-optimized and performs moderately well, it uses an outdated jQuery version and lacks modern security headers, which could expose it to vulnerabilities. The absence of privacy and cookie policies indicates potential compliance gaps with GDPR requirements. Overall, the website is trustworthy and professional but would benefit from enhanced security measures and privacy compliance improvements.

A

Adaptive

adaptive.lv

60

Adaptive is an IT services company specializing in providing infrastructure solutions to businesses and government institutions in Latvia. The company positions itself as a trusted expert in IT infrastructure, offering a range of services including computing, data storage, network infrastructure, virtualization platforms, modern workplace solutions, planning, implementation, maintenance, lifecycle services, and IaaS. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a moderate level of digital maturity. It supports Latvian and English languages and integrates Google Analytics and Tag Manager for user tracking. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, but the website content and structure suggest a legitimate business. Overall, the site demonstrates a solid business presence with room for improvement in privacy compliance and security transparency.