Security Directory

V

Valgeranna Veinitall

veinitall.ee

43

Valgeranna Veinitall is a small Estonian hospitality business specializing in local wine tasting, event hosting, and wine sales. The website presents a niche local offering with a focus on historic ambiance and quality wine experiences near Pärnu, Estonia. The business appears to be newly established in 2021 and targets local visitors and wine enthusiasts. Technically, the website is built on WordPress using the Divi theme and WooCommerce for e-commerce capabilities. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no WAF blocking detected, but lacks advanced DNS security (no DNSSEC) and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

S

SIIDRIKODA OÜ

kodas.ee

38

SIIDRIKODA OÜ operates the Kodas brand, a craft cider producer and hospitality business based in Estonia. The company offers a range of award-winning sustainable ciders, a restaurant, factory tours, accommodation in unique iglu houses, and event tickets. The website is professionally designed using WordPress and WooCommerce, supporting e-commerce and booking functionalities. The digital infrastructure includes modern marketing and analytics tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Klaviyo, indicating a mature digital marketing approach. Security posture is good with HTTPS enabled and privacy compliance evident through comprehensive privacy and cookie policies. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data supports the legitimacy of the domain and business. Overall, the website presents a trustworthy and professional online presence for a small hospitality and retail business.

M

Murimäe veinikelder

murimaevein.ee

43

Murimäe veinikelder is a small Estonian hospitality business operating the world's northernmost terraced vineyard. The company offers a combination of e-commerce wine sales, wine tastings, accommodation, and event hosting, targeting wine enthusiasts and tourists. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good SEO and mobile optimization. Security posture is adequate with HTTPS and nonce usage, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the business presents a professional online presence with clear offerings but should enhance privacy compliance and security transparency to strengthen trust and regulatory adherence.

L

Luke Mõis

lukemois.ee

41

Luke Mõis is a hospitality business based in Estonia, operating a website that serves as a digital presence for their venue and services. The website is built on WordPress using the Divi theme and integrates WooCommerce for e-commerce functionality. It targets local and regional customers interested in hospitality, events, and accommodation services. The site demonstrates a moderate level of digital maturity with standard tracking tools such as Google Analytics and Facebook Pixel implemented alongside cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of security headers and explicit privacy policies indicates room for improvement. Overall, the website is functional and professional but lacks some compliance and security best practices, which should be addressed to enhance trust and regulatory adherence.

M

MTÜ Sibulatee

sibulatee.ee

44

Sibulatee is a non-profit organization dedicated to promoting the cultural and tourism assets of the Peipsimaa region in Estonia. The website serves as a comprehensive portal for events, local businesses, cultural heritage, and educational opportunities, targeting tourists and local communities interested in authentic regional experiences. The platform leverages WordPress and WooCommerce to provide event listings, e-commerce for local products, and seminar information, supported by active social media engagement and newsletter subscriptions. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and policies are recommended. Privacy compliance is addressed with a clear privacy policy and cookie banner, aligning with GDPR requirements. Overall, the site is professionally designed, user-friendly, and trustworthy, with clear contact information and consistent branding. No critical vulnerabilities or blocking mechanisms were detected, supporting a positive risk profile.

O

OÜ Veinimõisnik

veinivilla.ee

25

Valgejõe Veinivilla is a small Estonian winery operating since 2014, positioned as the northernmost winery in Estonia. They produce fruit, berry, and grape wines using local ingredients, offering retail sales through their online wine shop and on-site services including tours, tastings, and events. The business targets wine enthusiasts and tourists seeking authentic local experiences. Technically, the website is built on WordPress with WooCommerce and Elementor, supported by a reputable hosting provider. The site is well-structured, mobile-optimized, and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with room for compliance and security enhancements.

E

ET Infokeskuse AS

ehituskeskus.ee

38

ET Infokeskuse AS operates the website ehituskeskus.ee, providing construction-related information, seminars, and publications primarily targeted at construction professionals and real estate stakeholders in Estonia. The company has an established presence since 2010 and offers a mix of digital and physical products including training seminars, construction guidelines, and a digital kartoteek service. The website is multilingual, supporting Estonian, English, Finnish, and Russian languages, enhancing accessibility for a broader regional audience. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, leveraging modern web technologies such as Bootstrap, jQuery, and Owl Carousel. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable performance and security. SEO is well implemented with Yoast SEO plugin, and the site shows good mobile optimization and user experience. From a security perspective, the site enforces HTTPS and uses common security practices, though explicit security headers like Content-Security-Policy are not detected. No critical vulnerabilities or exposed sensitive data were found. However, the site lacks a cookie consent mechanism and does not provide explicit incident response or vulnerability disclosure information, which are areas for improvement. Overall, ehituskeskus.ee presents a professional and trustworthy digital presence for ET Infokeskuse AS, with solid business credibility and technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen its posture and user trust.

L

LCC PRODUKT OÜ

lccprodukt.ee

41

LCC PRODUKT OÜ is an Estonian company specializing in energy-efficient and modern ventilation solutions, including calculation, analysis, and distribution of ventilation equipment. Founded in 2012, the company positions itself as a professional partner to architects, designers, builders, and developers in Estonia, offering innovative European ventilation products and high-tech energy solutions. The website is built on WordPress with WooCommerce, featuring a modern and responsive design, integrated project search functionality, and active social media presence. Security posture is solid with HTTPS enabled and no exposed sensitive data, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site reflects a trustworthy and professional business with room for improvement in security and privacy transparency.

M

MTÜ Maakondlikud Arenduskeskused

arenduskeskused.ee

45

MTÜ Maakondlikud Arenduskeskused operates as the largest nationwide network in Estonia providing consulting and training services to startups, active businesses, non-profits, and local governments. Their business model is based on publicly funded, free services aimed at fostering entrepreneurship and community development across all 15 Estonian counties. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations, supporting a good user experience and mobile responsiveness. Security posture is solid with HTTPS and standard best practices, though explicit security policies and headers could be improved. Privacy compliance is evident with a GDPR-aligned privacy policy and cookie consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and partner network links.

A

A. Le Coq

alecoq.ee

47

A. Le Coq is Estonia's oldest and largest beverage producer, offering a wide range of alcoholic and non-alcoholic drinks including beer, cider, juices, water, and energy drinks. The company operates a professional and well-structured website built on WordPress with WooCommerce, targeting both consumers and distributors in Estonia and export markets. The website demonstrates good digital maturity with modern technologies, SEO optimization, and mobile responsiveness. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit privacy and security policies are not published. Overall, the site reflects a credible and established business with a focus on compliance and user experience.

A

Allikukivi Veinimõis

allikukivi.ee

40

Allikukivi Veinimõis is a small family-owned Estonian business specializing in handcrafted berry and fruit wines produced on-site in their manor's wine cellar. They complement their wine production with hospitality services including wine tastings, tours, and glamping accommodations in a historic manor park. The website is built on WordPress with WooCommerce, featuring a professional design and moderate performance. The site includes cookie consent mechanisms and integrates third-party booking services. Security posture is good with HTTPS and no exposed sensitive data, but lacks some security headers and formal privacy and terms policies. Overall, the business presents a trustworthy local niche hospitality and wine production service with room for improvement in privacy compliance and security documentation.

S

SYNLAB Eesti

synlab.ee

66

SYNLAB Eesti is the largest medical laboratory in Estonia, operating since 1995 and part of the global SYNLAB Group. The company provides a wide range of medical laboratory testing services targeting medical professionals, private clients, and employers. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations. It offers multilingual support and integrates GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance trust. Contact is primarily via a contact form, with no exposed direct emails or phone numbers. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

J

Jäneda Mõis OÜ

janedaturism.ee

46

Jäneda Mõis OÜ operates a tourism and hospitality center in Estonia offering conference facilities, restaurant services, accommodation, theater performances, and seasonal markets. The company targets tourists and event organizers, positioning itself as a regional hospitality provider with a medium-sized operation founded in 2010. The website is built on WordPress with WooCommerce and uses modern plugins and themes, providing a good user experience with multilingual support and clear navigation. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site reflects a professional and trustworthy business with good digital maturity.

P

Peipsimaa turism

visitpeipsi.com

47

Visitpeipsi.com is a regional tourism promotion website dedicated to Peipsimaa, Estonia, highlighting the area's natural beauty, cultural heritage, local cuisine, and events. The site targets tourists interested in authentic regional experiences, offering information, event promotion, and an e-commerce shop for local products. The business operates as a small-sized entity focused on hospitality and non-profit tourism promotion, founded in 2011. The website branding is consistent and content quality is good, supporting its market position as a key regional tourism promoter. Technically, the site is built on WordPress with WooCommerce and Yoast SEO plugins, leveraging jQuery and Google Analytics for functionality and tracking. The site is mobile-optimized with good navigation and SEO practices, though performance is moderate. Hosting details are not explicit but DNS and registrar data suggest a stable setup. No WAF or blocking mechanisms are detected, and the site uses HTTPS with a clientTransferProhibited domain status, indicating basic security measures. Security posture is moderate; while HTTPS is enforced, no DNSSEC or security headers are detected, and no explicit security or incident response policies are published. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. The domain WHOIS data aligns well with the website content, showing consistent registration and legitimacy. Overall, the site is functional and professional but could improve security and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to enhance trust and compliance.

E

Eesti Veevarustuse ja Kanalisatsiooni Inseneride Selts

evkis.ee

39

Eesti Veevarustuse ja Kanalisatsiooni Inseneride Selts (EVKIS) is a professional association for water supply and sanitation engineering specialists in Estonia. Established in 2010, it serves as a voluntary union providing membership services, training, news, and an online store to its members and the wider industry community. The website is well-structured and targets professionals in the environmental engineering sector, particularly those focused on water and sanitation technologies. The organization maintains partnerships with relevant industry bodies, enhancing its credibility and reach. Technically, the website is built on WordPress using popular plugins such as WooCommerce for e-commerce, Yoast SEO for search optimization, and Events Manager for event handling. The site is hosted by Zone Media OÜ, a known Estonian registrar and hosting provider. The infrastructure supports HTTPS with valid SSL certificates, ensuring secure communications. The site is moderately performant and mobile-optimized, though accessibility features are basic. From a security perspective, the site employs Google reCAPTCHA v3 to protect forms from spam and abuse. However, it lacks several important security headers such as Content-Security-Policy and HSTS, which are recommended to enhance security posture. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present, indicating room for improvement in security governance and transparency. Overall, EVKIS presents a trustworthy and professional online presence consistent with its role as an industry association. The main risks relate to privacy compliance gaps, notably the absence of privacy and cookie policies, and the lack of advanced security headers. Addressing these areas would strengthen the site's compliance and security posture, thereby enhancing trust among members and visitors.

E

Eesti Noorteühenduste Liit

enl.ee

47

Eesti Noorteühenduste Liit (ENL) is a well-established non-profit umbrella organization founded in 2010 that unites youth associations and participation bodies across Estonia. The organization focuses on advocacy, youth participation, training, and international cooperation, positioning itself as a leading entity in the Estonian youth sector. The website reflects a professional and comprehensive digital presence with clear content, strong branding, and multilingual support. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS, cookie consent, and error reporting, though some security headers and formal policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media engagement.

M

Metana Digiagentuur

metana.eu

47

Metana Digiagentuur is a small digital agency based in Tallinn, Estonia, specializing in website design, email marketing, and digital advertising services such as Meta Ads and Google Ads. The company targets businesses seeking comprehensive digital marketing and web development solutions. Their website is built on WordPress using Elementor and WooCommerce, indicating a modern and flexible technical infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security measures.

I

Ida-Viru Ettevõtluskeskus AS

idaviru.ee

54

Ida-Viru Ettevõtluskeskus AS operates the website idaviru.ee, a regional tourism cluster portal promoting adventure and leisure activities in Ida-Virumaa, Estonia. The site targets tourists and families seeking diverse experiences including outdoor adventures, cultural sites, accommodation, and events. The business model focuses on tourism promotion and cluster partnership facilitation, positioning itself as a key regional information hub. Technically, the website is built on WordPress with Elementor and WooCommerce, optimized with WP Rocket, and uses Cloudflare DNS. It integrates modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, cookie consent implemented, and no critical vulnerabilities detected. However, the absence of explicit privacy policy and terms of service pages indicates room for compliance improvement. Overall, the website is professional, well-branded, and trustworthy, with good performance and user experience.

E

Elkdata OÜ

koerumuusikakool.ee

41

Koeru Muusikakool is a small, regionally focused music school based in Estonia, providing music education and cultural events primarily targeting students and the local community. The website is built on a modern WordPress platform using popular plugins such as WooCommerce and Tutor LMS, indicating a digital maturity suitable for educational content delivery and course management. The site features active social media integration and regularly updated news content, supporting engagement with its audience. Technically, the website is well-structured with responsive design and moderate performance, although accessibility and SEO optimizations are basic. From a security perspective, the website benefits from HTTPS with a valid SSL certificate, but lacks important security headers and explicit privacy or cookie policies, which are critical for GDPR compliance and user trust. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance security posture. The WHOIS data confirms the domain is legitimately registered to Elkdata OÜ since 2010, consistent with the business's operational history. Overall, the website presents a professional and trustworthy front for the music school but requires improvements in privacy compliance and security best practices to reduce risk and increase user confidence. Strategic enhancements in these areas will support sustainable growth and regulatory adherence.

E

Eesti Tervisemuuseum

tervisemuuseum.ee

43

Eesti Tervisemuuseum is a small, non-profit educational museum based in Tallinn, Estonia, focused on health education and cultural exhibitions. The museum offers a variety of services including permanent and temporary exhibitions, educational programs for children and adults, event hosting, and a podcast series. The website is professionally designed with excellent content quality, clear navigation, and multilingual support, targeting a broad audience interested in health and wellness. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and SEO best practices. Security posture is good with HTTPS enforced and GDPR compliance mechanisms in place, though some security headers could be improved. The domain registration is consistent and transparent, registered with a reputable Estonian registrar, supporting the legitimacy of the business. Overall, the website presents a trustworthy and professional digital presence for the museum.

N

Norstat Industrial Safety, Automation and Connectivity Solution

norstat.com

57

Norstat Industrial Safety, Automation and Connectivity Solution is a specialized provider of safety, automation, and connectivity products for the industrial marketplace. Their offerings include safety controllers, light curtains, safety interlocks, non-contact safety switches, safety relays, and signaling devices. The company operates a WordPress-based e-commerce website using WooCommerce and the Avada theme, supported by various plugins including CleanTalk for anti-spam and Google Analytics for tracking. The domain is well-established since 1996, consistent with the company's business history, and uses Cloudflare DNS services. Security posture is moderate with HTTPS enabled and anti-spam measures in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and functional but would benefit from enhanced security and privacy practices.

J

John Lothian News

johnlothiannews.com

58

John Lothian News is a specialized media outlet focused on delivering financial markets news and analysis. Established in 2011, it serves a niche audience of financial professionals and market participants. The website employs a WordPress CMS with the Divi theme and WooCommerce plugin, indicating a modern and flexible technical infrastructure. Hosting is provided by SiteGround, and the site uses Google Analytics and Tag Manager for user tracking. Security posture is solid with HTTPS enabled and use of Google reCAPTCHA, though there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

E

Eesti Väike- ja Keskmiste Ettevõtjate Assotsiatsioon

evea.ee

46

EVEA (Eesti Väike- ja Keskmiste Ettevõtjate Assotsiatsioon) is a well-established non-profit business association founded in 1988, representing the interests of small and medium-sized enterprises in Estonia. The organization provides a broad range of services including legal advice, financial consulting, and networking opportunities, positioning itself as the largest SME advocacy group in Estonia. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience of Estonian SMEs. Technically, the website is built on WordPress with WooCommerce and uses modern frameworks such as UIkit and analytics tools like Google Analytics via MonsterInsights. The site is hosted by Elkdata OÜ, an Estonian hosting provider, and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for forms, but lacks explicit security headers and documented security policies or incident response plans. Privacy and cookie policies are present and GDPR compliant, indicating a basic level of privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy and credible digital presence for EVEA, with a solid foundation in business credibility and technical implementation. Strategic improvements in security headers, accessibility, and formal security policies would enhance the security posture and compliance maturity.

O

Online Solution (supported by SAVEALITY)

ano-phone.de

59

ANO-PHONE is a German-based small technology business specializing in secure, encrypted Android smartphones with integrated private VPN services. The company targets privacy-conscious consumers seeking enhanced mobile security and anonymity. Their product offers hardware encryption, secure communication channels, and control without backdoors or remote access. The website is built on WordPress with WooCommerce, featuring good content quality and a professional design. Technical infrastructure includes Cloudflare DNS and common analytics and advertising tools. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are lacking. Privacy compliance is partial, with cookie consent implemented but no dedicated privacy policy page found. Contact information is limited to an email address, with no phone or physical address provided. Overall, the domain and website appear legitimate and consistent with the business claims.

O

Online Solution 360 GmbH

ano-phone.com

55

ANO-PHONE is a specialized provider of secure encrypted smartphones integrated with private VPN services, targeting privacy-conscious users and security-focused consumers. The company operates an e-commerce platform selling purified Android-based smartphones with hardware encryption, secure communication tools, and cryptocurrency wallet support. The business is positioned as a niche player in the technology sector, emphasizing privacy and security. The website is professionally designed, mobile-optimized, and includes essential business and contact information, although phone numbers and physical addresses are not explicitly listed. Technically, the site uses WordPress with WooCommerce, Google Analytics, and Cloudflare DNS, delivering moderate performance and good SEO optimization. Security posture is solid with HTTPS and client transfer protection on the domain, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is supported by a cookie consent mechanism and a privacy policy indicating GDPR adherence. Overall, the website and domain registration data indicate a legitimate and trustworthy business presence.

V

Visionest Institute

invicta.ee

47

Visionest Institute is an Estonian education and training organization formed by the merger of Marketingi Instituut, Invicta, and Director. It offers a wide range of professional development programs, including corporate training, personal development plans, and a digital magazine. The company targets businesses and individual learners, focusing on leadership, marketing, sales, and export sectors. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on WordPress with WooCommerce and integrates advanced marketing and analytics tools such as Google Tag Manager, HubSpot, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the domain registration details align well with the business profile, indicating legitimacy and consistency.

N

Nullist OÜ

nullist.ee

50

Nullist OÜ operates a well-established Estonian online marketing education platform, offering practical training and courses for beginners and advanced learners. The company has a strong market presence with over 3000 business clients and targets entrepreneurs, social media managers, and marketing professionals. Their business model focuses on digital education through webinars, workshops, and masterclasses. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Plausible Analytics, ensuring GDPR compliance and user consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is professional, fast, mobile-optimized, and trustworthy, reflecting a mature digital infrastructure and credible business operations.

E

Eesti kaevandusmuuseum

kaevandusmuuseum.ee

44

Eesti Kaevandusmuuseum is a specialized museum and adventure tourism business located in Estonia, offering unique underground mining experiences, safaris, educational programs, and event hosting. The website is professionally designed using WordPress with WooCommerce and booking plugins, supporting multiple languages and providing rich content about their services and events. The technical infrastructure is modern and includes integration with Google Tag Manager and Facebook SDK for marketing and analytics, although Google Analytics is not fully configured. Security posture is solid with HTTPS enforced and cookie consent implemented, but could be improved with additional security headers and explicit incident response policies. Overall, the website reflects a credible and trustworthy business with a good digital presence.

T

Tallinna Loomaaed

tallinnzoo.ee

41

Tallinna Loomaaed operates as a well-established public zoo in Estonia, offering extensive animal collections, educational programs, and conservation efforts. The website reflects a mature digital presence with multilingual support, clear navigation, and comprehensive content targeting families, educators, and conservationists. Technically, the site is built on WordPress with WooCommerce for ticketing, integrating modern analytics and marketing tools while maintaining good performance and accessibility standards. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate organization.

E

Eesti Tervisemuuseum

tervishoiumuuseum.ee

43

Eesti Tervisemuuseum is a small, non-profit educational museum based in Tallinn, Estonia, focused on health and the human body. The museum offers a variety of services including exhibitions, educational programs, workshops, event hosting, and a podcast. It targets a broad audience including children, families, and adults interested in health education. The website is professionally designed with consistent branding and rich content, supporting multiple languages (Estonian, Russian, English). The museum maintains a clear online presence with social media channels and provides accessible contact information. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and SEO best practices. The hosting and domain registration are consistent with the museum's Estonian identity.

H

Hestia Hotel Group

hestiahotels.com

50

Hestia Hotel Group is a regional hospitality business operating multiple hotels and apartments across Baltic cities including Tallinn, Riga, Haapsalu, and Pärnu. Their offerings range from comfort and superior hotels to spa and old town accommodations, targeting travelers seeking quality lodging and leisure experiences in these locations. The website is professionally designed using WordPress and WooCommerce, integrating modern web technologies and providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are missing. WHOIS data is unavailable, which slightly reduces transparency but the overall business credibility remains high based on website content and contact information. The site uses analytics and marketing tools responsibly with GDPR compliance. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further improve trust and security maturity.

A

Aitan Eestit MTÜ

aitaneestit.ee

51

Aitan Eestit MTÜ is a small Estonian non-profit organization founded in 2020, focused on charitable activities that connect donors with those in need. The organization primarily engages young people to collect donations and spread their message, aiming to improve social welfare in Estonia. The website reflects this mission with clear calls to action for donations and partnership, supported by a modern WordPress infrastructure using Elementor and GiveWP plugins. The site is multilingual, supporting Estonian, English, and Russian languages, enhancing accessibility for diverse audiences. Technically, the website is built on a robust WordPress platform with SEO optimization via Yoast and integrates Google Analytics for visitor tracking. The site uses HTTPS with a valid SSL certificate, ensuring secure data transmission. However, it lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. The donation forms collect essential contact information such as email and phone numbers, but no explicit privacy or cookie policies are present, indicating a gap in GDPR compliance. From a security perspective, the site demonstrates basic best practices like HTTPS and nonce tokens in forms but misses critical elements like security headers and documented incident response or vulnerability disclosure policies. The WHOIS data is transparent and consistent with the organization's founding date and domain usage, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening. Strategically, the organization should prioritize implementing comprehensive privacy and cookie policies, enable DNSSEC, and add security headers to improve trust and compliance. Enhancing transparency around data protection and incident response will further strengthen their security culture and stakeholder confidence.

A

AMR Europe

amreurope.com

62

AMR Europe is a specialized distributor of high-end 3D printing systems, serving industrial, educational, and general 3D printing markets primarily in the Netherlands and Europe. The company offers a broad portfolio including 3D printers, scanners, filament, accessories, and parts, supported by a showroom and e-commerce platform. Their market position is that of a trusted niche technology provider with a focus on professional additive manufacturing solutions. Technically, the website is built on a modern WordPress CMS with WooCommerce and Divi theme, integrating common web technologies and optimization tools. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the business credibility is high with transparent contact information and social media presence. No blocking or WAF interference was detected, allowing full content access and analysis.

L

Laen kinnisvara tagatisel

makerlab.ee

51

The website makerlab.ee operates as a small Estonian business focused on providing information and services related to real estate secured loans. It targets individuals and investors interested in financing options secured by property, offering detailed content on loan types, repayment methods, and amortization. The business appears to be recently established in 2022, with domain registration consistent with the website's country and business focus. Technically, the site is built on WordPress using WooCommerce and Elementor, leveraging modern web technologies such as jQuery and Bootstrap. The site is mobile optimized and performs moderately well, with good SEO practices evident through meta tags and structured data. Hosting details are not explicit, but Cloudflare DNS is used, enhancing DNS reliability. From a security perspective, the website uses HTTPS, which is mandatory and well configured. However, it lacks important security headers like Content-Security-Policy and HSTS, which could improve its security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is weak due to the absence of privacy and cookie policies, and no consent mechanisms are present. Overall, the website presents a moderate risk profile with good business credibility but notable gaps in privacy compliance and security best practices. Strategic improvements in security headers and privacy disclosures are recommended to enhance trust and regulatory compliance.

O

Orpetron

orpetron.com

49

Orpetron is a specialized online platform established in 2020 that honors outstanding web design projects globally. It serves as a source of inspiration for web designers and creative professionals by showcasing award-winning websites. The platform operates on WordPress with a modern tech stack including Elementor, WooCommerce, and various marketing and analytics tools. The website demonstrates good design quality, mobile optimization, and SEO practices, positioning itself as a niche authority in the web design awards space. Security posture is adequate with HTTPS and some security headers, though DNSSEC is not enabled and advanced security policies are not disclosed. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, Orpetron presents a credible and professional business with room for improvement in privacy and security transparency.

S

Sisustuskoda OÜ

sisuko.ee

42

Sisustuskoda OÜ is a small Estonian company specializing in custom furniture manufacturing, particularly kitchen furniture. Established in 2014, it serves local consumers seeking high-quality, tailor-made interior solutions. The website reflects a niche retail business model with a focus on craftsmanship and design. The company maintains an active online presence with social media integration and a WooCommerce-based e-commerce platform. Technically, the website is built on WordPress using Elementor and Astra theme, leveraging modern web technologies and Google services such as reCAPTCHA and Tag Manager. Security posture is adequate with HTTPS enabled and basic protections, but lacks explicit security headers and formal privacy or cookie policies. Overall, the site is professional and functional, though privacy compliance and security best practices could be enhanced to improve trust and regulatory adherence.

V

Visionest Institute

visionest.institute

47

Visionest Institute is an Estonian education and training organization formed by the merger of Marketingi Instituut, Invicta, and Director. It offers a variety of training courses and development programs targeting both businesses and individual learners, positioning itself as a reputable provider in the Estonian market. The website is professionally designed, mobile-optimized, and uses modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Facebook Pixel to engage and track visitors. The technical infrastructure is based on WordPress with WooCommerce, supported by performance optimization via WP Rocket. Security posture is solid with HTTPS enabled and domain transfer protection, though some security headers and DNSSEC are missing. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy in Estonian. No explicit security policy or incident response contacts were found, indicating room for improvement in transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Scandium Kinnisvara AS

scandium.ee

43

Scandium Kinnisvara AS is a medium-sized Estonian real estate developer specializing in residential, rental, and commercial property development with a focus on quality and sustainability. The company operates notable projects such as the Marienholm peninsula development in Haapsalu and also engages in energy projects under Scandium Energia. The website is professionally designed, multilingual, and provides clear contact information and active content updates, positioning the company as a credible player in the Estonian real estate market. Technically, the site is built on WordPress with WooCommerce and uses modern libraries and analytics tools, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA protection on forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic with cookie consent implemented but no visible privacy or security policies. Overall, the site reflects a trustworthy and professional business with room for enhanced security and compliance documentation.

U

UPRENT OÜ

uprent.ee

43

UPRENT OÜ is a well-established equipment rental and sales company founded in 2012, specializing in pumps, pump systems, electric generators, and trench shoring equipment. Operating primarily in Estonia with regional presence in Latvia, Lithuania, and Poland, UPRENT serves industrial and construction clients requiring efficient and reliable pumping solutions. The company is part of the Renta Group Oy, indicating a strong parent company backing and regional market integration. The website reflects a professional and consistent brand image with detailed service offerings and project portfolios, targeting B2B clients in manufacturing, energy, and construction sectors. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging modern web technologies including Google Analytics and reCAPTCHA for user tracking and security. Hosting is supported by Microsoft Online DNS infrastructure, ensuring reliable domain resolution. The site is mobile-optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks explicit security headers and published security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages, representing a compliance gap under GDPR. Overall, UPRENT's digital presence is solid with good business credibility and technical implementation. To enhance trust and compliance, the company should publish comprehensive privacy and security policies and implement additional security headers. The domain WHOIS data is consistent and supports legitimacy, with no suspicious patterns detected.

R

RENTA PUMPS

uprent.lt

46

RENTA PUMPS operates as a leading equipment rental and sales company specializing in pumps and pumping systems across the Baltic region. The company offers a broad range of rental equipment including pumps, electrical generators, trench shoring systems, and related accessories, targeting construction, industrial, and infrastructure sectors. Their market position is strong within Lithuania and neighboring countries, supported by localized contact points and multilingual website presence. Technically, the website is built on WordPress with WooCommerce and WPBakery, integrating modern analytics and bot protection tools such as Google Tag Manager and reCAPTCHA. Security posture is solid with HTTPS enforced and no exposed sensitive data, although improvements in security headers and incident response policies are recommended. Overall, the website is professional, content-rich, and compliant with GDPR cookie and privacy policies, reflecting a mature digital presence for a medium-sized enterprise.

L

LaSpa Group OÜ

laspa.ee

42

LaSpa Group OÜ operates the LaSpa wellness and spa hotel located in Laulasmaa, Estonia, offering a comprehensive range of hospitality services including accommodation, spa treatments, dining, and event hosting. The company positions itself as a premium wellness destination with a strong emphasis on natural wellbeing and quality experiences, supported by a Michelin Guide recommended restaurant and diverse activity offerings. The website reflects a mature digital presence with well-structured content, clear navigation, and consistent branding aimed at wellness tourists, families, and business clients. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms in place, although there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site demonstrates high professionalism and trustworthiness with no critical vulnerabilities detected.

F

FinEst-Hall Factory OÜ

pvc-hall.fr

44

FinEst-Hall Factory OÜ is a specialized manufacturer and installer of PVC halls and awnings, offering turnkey solutions including design, production, installation, maintenance, and metalworking services such as plasma and laser cutting. The company targets businesses requiring flexible, mobile, and certified storage solutions primarily in European markets, with a strong presence in France and Finland. The website reflects a professional and consistent brand image supported by ISO certifications and positive customer testimonials. Technically, the site is built on WordPress with WooCommerce, leveraging modern analytics and marketing tools while maintaining good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the domain registration is consistent with the business's multilingual expansion strategy, and no suspicious patterns were detected.

F

FinEst-Hall Factory OÜ

pvc-hall.se

42

FinEst-Hall Factory OÜ is a manufacturing company specializing in the design, production, and installation of PVC halls and awnings tailored to customer needs. Established in 2021 and based in Estonia, the company serves primarily B2B clients in the Nordic and Baltic regions, offering modular, mobile, and expandable storage solutions. Their market position is supported by multiple ISO certifications and a portfolio of over 250 installed halls, demonstrating reliability and quality. The website reflects a professional and comprehensive digital presence with multilingual support and detailed service descriptions. Technically, the site is built on WordPress with WooCommerce, leveraging modern analytics and marketing tools while maintaining good performance and accessibility standards. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

FinEst-Hall Factory OÜ

pvc-hall.dk

42

FinEst-Hall Factory OÜ is a specialized manufacturer and service provider of PVC halls and awnings, offering tailored, modular, and mobile storage and workspace solutions primarily targeting businesses in Northern Europe. The company emphasizes quality, speed, and flexibility, supported by multiple ISO certifications and a portfolio of over 250 installed halls. Their business model includes turnkey services from design and manufacturing to installation and maintenance, with additional metalworking capabilities such as plasma cutting and tube laser processing. The website is professionally designed, multilingual, and optimized for SEO and mobile use, reflecting a mature digital presence for a small-sized enterprise founded in 2021. Technically, the website is built on WordPress with WooCommerce and enhanced by modern libraries and tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel, all integrated with a robust cookie consent mechanism ensuring GDPR compliance. The site demonstrates good performance, accessibility, and security practices, including HTTPS enforcement and consent-based script loading. However, it lacks some advanced security headers and explicit security or incident response policies. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the website content and business claims, indicating legitimacy and trustworthiness. The absence of a security.txt file or vulnerability disclosure policy is noted as an area for improvement. Overall, the website and business present a trustworthy, professional, and compliant profile with strong branding and customer trust signals. Strategic enhancements in security policies and DNS security could further strengthen their posture.

F

FinEst-Hall Factory OÜ

pvc-halli.fi

43

FinEst-Hall Factory OÜ is a medium-sized manufacturing company specializing in the production and installation of PVC halls and awnings tailored to customer needs. Established in 2014, the company holds multiple ISO certifications, underscoring its commitment to quality and compliance. Its market position is solid within the regional manufacturing sector, serving businesses requiring durable and mobile storage solutions in Finland and neighboring countries. The company offers a comprehensive service model including manufacturing, installation, maintenance, and metal processing services such as plasma cutting and tube laser work. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, leveraging popular libraries and tools such as jQuery, Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a good performance profile. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs consent blocking for tracking scripts, though it could improve by implementing additional security headers. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the business profile, enhancing trustworthiness. Overall, the website reflects a professional and credible business presence with a strong focus on quality and customer service.

F

FinEst-Hall Factory OÜ

pvc-hall.ee

40

FinEst-Hall Factory OÜ is a medium-sized Estonian manufacturing company specializing in the design, production, installation, and maintenance of PVC halls and awnings, as well as metalworking services such as plasma cutting and tube laser processing. The company holds multiple ISO certifications, indicating a strong commitment to quality and industry standards. Their website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern analytics and marketing tools integrated with user consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and published security policies. Overall, the company presents a trustworthy and credible business front with clear contact information and customer testimonials.

V

Viljandi Motokeskus

motokeskus.eu

40

Viljandi Motokeskus is a small Estonian retailer specializing in the sale and maintenance of motor vehicles including ATVs, motorcycles, scooters, and electric vehicles. The company targets local consumers and enthusiasts seeking motorized transport and related accessories. Their business model combines e-commerce with physical retail and service offerings. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good SEO practices and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is functional and professional but could improve in security and privacy transparency to enhance trust and compliance.

K

KALASTUSPOOD OÜ

boat-service.ee

40

Boat Service Estonia, operated by KALASTUSPOOD OÜ, is a specialized e-commerce and service provider focused on marine equipment including boats, boat motors, marine electronics, and accessories. Established in 2018, the company targets boat owners and marine enthusiasts primarily in Estonia, offering sales, maintenance, rental, and winter storage services. The website demonstrates a solid market position as one of the leading marine equipment sellers in the region, supported by a professional online presence and active social media engagement. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Overall, the site is trustworthy and professionally managed, but could improve privacy and security transparency.

E

Elkdata OÜ

carsland.ee

39

Carsland is a small Estonian vehicle rental company specializing in motorhomes, caravans, vans, cars, and roof tents for travel and camping enthusiasts. The website is professionally designed using WordPress and WooCommerce, providing an online booking platform with clear navigation and good mobile optimization. The technical infrastructure leverages modern plugins and frameworks, hosted by Elkdata OÜ, an Estonian hosting provider. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial due to the absence of cookie consent and limited GDPR indicators. Overall, the business presents a credible and functional online presence with room for improvement in privacy and security transparency.