Security Directory

K

Kuusakoski Oy

kuusakoski.com

77

Kuusakoski Oy is a well-established company specializing in expert-level recycling services, focusing on restoring value to waste materials by collecting, processing, and producing new raw materials. With a history spanning over 100 years, Kuusakoski positions itself as a pioneer in the circular economy, serving industrial and business customers worldwide. Their key services include material processing, sale of recycled raw materials, data security and reuse, logistics, analysis and research, and local service offerings. The company emphasizes sustainability and holds certifications such as EcoVadis Silver. Technically, the website employs modern JavaScript libraries and tracking tools including Google Analytics, Google Tag Manager, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. However, explicit security headers are not detected, and no incident response or vulnerability disclosure policies are published, indicating areas for improvement in security maturity. The security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, but the absence of WHOIS data and domain registration details introduces some uncertainty regarding domain legitimacy. The website provides clear contact information, including official company emails and phone numbers, and maintains active social media profiles, enhancing trustworthiness. Overall, Kuusakoski demonstrates a mature digital presence aligned with its business goals, though it should address security header implementation and publish incident response policies to strengthen its security posture and compliance stance.

C

CBS Pakistan

cbspakistan.com

41

CBS Pakistan is a medium-sized technology company founded in 2009, specializing in customized business software solutions including ERP systems for retail, manufacturing, and education sectors, as well as UI/UX design and website development services. The company positions itself as an experienced provider with over 16 years of continual excellence and more than 1000 projects delivered, targeting businesses seeking tailored technology solutions to optimize operations and growth. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and uses Cloudflare for DNS and hosting services. Google Analytics is integrated for user tracking. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and functional but could improve in privacy and security transparency.

Stimscape OÜ is a small specialized service provider operating primarily in Estonia and Finland, offering digital imaging technician (DIT) services and technical solutions for film and TV production sets and studios. Their key offerings include on-set data management, LTO archiving, and IT solutions tailored to the media production industry. The website presents a professional image with clear navigation, client logos, and references to notable film and TV projects, positioning the company as a niche technical partner in the media sector. Technically, the website uses a basic but functional technology stack including jQuery, Google Fonts, Font Awesome, and Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. No CMS or hosting provider details are evident. SEO is basic with meta keywords and description present but no advanced structured data or Open Graph tags. From a security perspective, the site lacks critical security headers and does not provide privacy or cookie policies, which impacts GDPR compliance. No forms or user input fields reduce attack surface, but the absence of incident response contacts and security policies indicates a low maturity in security governance. The WHOIS data aligns well with the business claims, showing a consistent registrant in Estonia, supporting domain legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security posture, and more comprehensive contact and policy disclosures to increase trust and reduce risk.

E

Elkdata OÜ

remedyway.ee

45

Wiru Mill operates an e-commerce website specializing in organic and specialty food products such as specialty breads, organic olive oil, and buckwheat products. The business is relatively new, established in 2023, and targets consumers interested in healthy and organic food options. The website is built on WordPress with WooCommerce, leveraging common plugins and Google services for analytics and advertising. The technical infrastructure is standard for small to medium e-commerce sites, hosted by Elkdata OÜ, which is also the domain registrar, indicating consistency and legitimacy. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and explicit privacy or cookie policies. The absence of contact information and compliance documents reduces trust and privacy compliance scores.

A

AS Eesti Raudtee

evr.ee

69

AS Eesti Raudtee is a state-owned enterprise responsible for the management, maintenance, and administration of Estonia's railway infrastructure. The company plays a critical role in ensuring smooth, efficient, and safe railway operations across the country. Their website reflects a professional and consistent brand image, targeting a broad audience including business clients, passengers, and potential employees. The site offers key services such as infrastructure information, project updates, job vacancies, and customer portals. Technically, the website is built on Joomla CMS with modern frontend technologies and integrates Google Analytics and Adform for analytics and advertising, all managed with a robust cookie consent mechanism. Security-wise, the site enforces HTTPS, uses bot protection cookies, and shows no signs of exposed sensitive data or vulnerabilities. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website is well-structured, performant, and trustworthy, supporting the company's position as a key national transportation infrastructure operator.

C

COMBICON OÜ

combicon.ee

50

COMBICON OÜ is a small Estonian company specializing in the design, construction, and development of production, warehouse, and commercial buildings, including additions and real estate acquisition assistance. The company targets local businesses and individuals seeking construction and real estate services, positioning itself as a professional local player with a clear focus on project-based services. The website is professionally designed, mobile-optimized, and uses modern web technologies including Voog CMS, Google Analytics, and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy but could improve transparency and compliance.

L

LandCredit AS

landcredit.ee

44

LandCredit AS is an Estonian financial services company specializing in loans secured by agricultural and forestry land. Their website targets farmers, forestry businesses, and renewable energy project developers, offering flexible loan products with faster processing times than traditional banks. The company positions itself as a niche lender contributing to rural development in Estonia. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Hotjar, and CookieYes for GDPR compliance. The site is well-structured, mobile-optimized, and provides clear contact channels and customer testimonials, enhancing trust and user experience. Security posture is solid with HTTPS and secure form handling, though improvements are recommended in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a mature digital presence with good compliance and business credibility.

N

Nord Property Ltd

nordproperty.com

43

Nord Property Ltd is a medium-sized real estate company based in Estonia, specializing in international real estate services including brokering, property management, consulting, appraisal, investment counseling, and development sales. The company targets property buyers, sellers, and investors primarily in Estonia and Spain, offering multilingual support and a professional service portfolio. The website is well-structured with clear navigation and relevant content, supporting a good user experience and moderate mobile optimization. Technically, the site uses common analytics and tracking tools such as Google Analytics and Google Tag Manager, along with Google Maps API for location services. However, no CMS or hosting provider details were identified, and performance is moderate.

The website cvok.ee is an established Estonian job portal operated by Zone Media OÜ since 2010. It offers job postings, CV database services, and recruitment-related offerings targeting job seekers and employers in Estonia. The platform includes additional services such as accounting and CV expert advice, positioning itself as a comprehensive employment resource in the local market. The site content is primarily in English with options for Estonian and Russian, catering to a diverse audience. Technically, the site uses legacy HTML and JavaScript technologies, including an outdated jQuery version, and integrates Google Analytics for traffic monitoring. The design and user experience are basic, with limited mobile optimization and accessibility features. Security posture is moderate; HTTPS is implied but no advanced security headers or cookie consent mechanisms are present. The WHOIS data confirms a consistent and legitimate domain registration with no privacy protection, enhancing trust. Overall, the site is functional but would benefit from modernization and improved security and privacy compliance.

E

Eliko Location Technologies OU

eliko.ee

61

Eliko Location Technologies OU is a technology company specializing in next-generation location tracking solutions based on ultra-wideband (UWB) technology. Their website presents a mature and professional digital presence, highlighting their RTLS products, case studies with reputable clients such as Bosch, and a strong emphasis on accuracy, reliability, and tailored solutions for industrial and immersive applications. The company targets machine builders, enterprise software providers, and manufacturing operations, positioning itself as a trusted provider with over 200 companies relying on their technology. Technically, the website is built on WordPress and leverages modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA for security and analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive SEO metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements a cookie consent mechanism, demonstrating awareness of privacy and security best practices. However, explicit privacy policies, terms of service, and security policies are not found, representing areas for improvement. DNSSEC is not enabled, which could enhance DNS security. Overall, the security posture is good but could be strengthened with more explicit documentation and technical controls. The domain WHOIS data aligns well with the website content, showing consistent registrant information and appropriate domain age, supporting the legitimacy of the business. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategically, Eliko is well-positioned in the RTLS market with a solid technical foundation and trusted customer base. Enhancing transparency around privacy, security policies, and incident response would further strengthen trust and compliance posture.

M

METUS

metus.com

42

METUS is a specialized provider of professional audio and video systems and solutions, targeting sectors such as broadcast, medical, military, corporate, education, government, and news agencies. The company offers a suite of products including media asset management, ingest and streaming solutions, and NDI stream management tools. The website reflects a niche B2B business model with a focus on media technology professionals. Technically, the site uses common JavaScript libraries and tracking tools, hosted on HostGator, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. The domain is long-established since 2002, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced security and privacy practices.

V

Via 3L

via3l.com

40

Via 3L is a Baltic-based third-party logistics company specializing in warehouse logistics, central warehousing, and international transportation services. Positioned as a leading logistics provider in the Baltic region, the company targets businesses requiring efficient supply chain and transport solutions. The website reflects a professional digital presence with clear branding and relevant service descriptions. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO readiness. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the website demonstrates moderate risk with room for enhanced compliance and security maturity.

R

Rederij Groen

rederijgroen.nl

36

Rederij Groen is a well-established Dutch offshore shipping and service company specializing in various types of support vessels including seismic supply, guard vessels, and crew tenders. Founded in 1973, the company has grown to operate a modern fleet serving global offshore energy clients. The website reflects a mature business with clear service offerings, a detailed company history, and recognized ISO certifications that emphasize quality, safety, and environmental responsibility. Technically, the site is built on WordPress with modern plugins and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic but includes a cookie consent banner and a privacy policy. Overall, the site is professional, trustworthy, and well-aligned with the company’s business profile.

A

Advokaadibüroo LINDEBERG

lindeberg.legal

30

Advokaadibüroo LINDEBERG is a well-established Estonian law firm providing comprehensive legal services across major law domains including private law, public law, IT and intellectual property, and dispute resolution. The firm serves a diverse clientele including businesses, individuals, and the public sector, with a strong reputation in litigation and recognized partnerships such as with the Estonian E-commerce Association. Their website reflects a professional and consistent brand image, multilingual support, and a broad service offering. Technically, the site is built on WordPress with WooCommerce and enhanced by various plugins for SEO, analytics, and marketing, demonstrating a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy and cookie policies are present and GDPR compliant, with clear contact information and active use of analytics and marketing pixels under consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the firm's market position as a leading legal service provider in Estonia.

V

Veebimajutus.ee

veebimajutus.ee

55

Veebimajutus.ee is an Estonian technology service provider specializing in domain registration, web hosting, website creation, and email hosting services. The company targets Estonian businesses and individuals seeking an integrated and user-friendly platform to manage their online presence. Their market position is that of a trusted local provider with a focus on ease of use and customer support. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, and enforces HTTPS with strong security headers, indicating a mature digital infrastructure. However, the absence of explicit privacy and cookie policies represents a compliance gap that should be addressed. Security posture is strong with no visible vulnerabilities, but incident response and security policies are not publicly documented. Overall, the website is professional, trustworthy, and well-structured, though improvements in privacy compliance and transparency are recommended.

OÜ Tormitehnika is a small Estonian company specializing in manufacturing and selling marine equipment such as floating docks, buoys, swimming ladders, and boat stands. The website serves as a basic informational portal targeting maritime professionals and boat owners primarily in Estonia. The business operates in a niche market with a local focus and provides clear contact information but lacks comprehensive online policies and advanced digital features. Technically, the website is built on an outdated WordPress 4.9.3 platform with legacy jQuery libraries, which poses security risks and limits modern functionality. The site uses Google Analytics for visitor tracking but does not implement cookie consent or privacy policies, indicating low privacy compliance. Security posture is weak due to missing security headers and outdated software, although HTTPS is enabled. Overall, the website is functional but requires modernization and improved security and privacy practices to enhance trust and compliance.

C

Colombo Stock Exchange

cse.lk

72

The Colombo Stock Exchange (CSE) is the primary stock exchange in Sri Lanka, serving as a critical financial market infrastructure provider. The website offers comprehensive information on equity and debt trading, market disclosures, financial reports, and investor education. It targets investors, listed companies, and financial professionals within Sri Lanka and the broader financial community interested in Sri Lankan markets. The CSE holds a significant market position as the national stock exchange, facilitating capital market activities and supporting economic growth.

K

Kõnelev Trumm OÜ

eksootika.ee

49

The website eksootika.ee represents a small Estonian e-commerce business named Kõnelev Trumm OÜ, specializing in exotic goods sourced from various Asian countries such as India, Indonesia, Thailand, and Nepal. The site offers a range of products including ethnic musical instruments, semi-precious stones, incense, clothing, and jewelry. The business targets consumers interested in unique Asian cultural products and operates primarily through an online store with additional wholesale options. The website is built on the Voog CMS platform, leveraging Voog's e-commerce capabilities, and integrates modern JavaScript libraries and Google Analytics for tracking and marketing purposes. Hosting is provided by Zone Media OÜ, consistent with the domain registration data.

A

Apifonica

apifonica.com

80

Apifonica is a medium-sized telecommunications technology company specializing in AI-powered customer communication solutions including voicebots, SMS marketing, phone number masking, and cloud telecom platforms. The company positions itself as an established player with over 10 years in the market, serving over 200 clients with thousands of integrations. Their technical infrastructure leverages modern web technologies such as Vue.js and integrates with major analytics and marketing tools like Google Analytics and HubSpot. Security posture is strong, evidenced by ISO 27001 certification, regular penetration testing, and GDPR compliance. The website is professionally designed, mobile-optimized, and provides comprehensive legal and security documentation. However, the absence of WHOIS registration data for the domain introduces some uncertainty about domain legitimacy, though the overall business credibility remains high based on content and certifications. Strategic recommendations include improving transparency on domain registration and publishing additional security headers and a security.txt file.

W

Whirlpool Europe

whirlpool.eu

77

Whirlpool Europe operates as the regional web presence for Whirlpool Corporation, a leading global manufacturer of home appliances. The website serves multiple European markets with localized content and provides product information, customer support, and store locator services. The site demonstrates a professional design with consistent branding and a focus on European consumers. Technically, the website employs modern JavaScript libraries, Google Analytics, Google Tag Manager, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is served over HTTPS with good SSL configuration, though it lacks some advanced security headers. Privacy compliance is partially addressed through cookie consent mechanisms, but explicit privacy policy and terms of service documents were not detected in the provided content. No contact information or forms were found, which may impact user trust and compliance. Overall, the domain appears legitimate and consistent with a major brand, though WHOIS data is privacy protected as typical for .eu domains.

Welement AS is a medium-sized Estonian company specializing in offsite timber construction solutions, serving contractors, engineers, and developers primarily in Northern Europe. Founded in 2015 and part of the Rand & Tuulberg Group, Welement offers prefabricated timber frame elements and facade systems, positioning itself as an innovative partner in the construction industry. The website reflects a professional and consistent brand with clear business messaging and multiple case studies showcasing their projects. Technically, the site is built on modern frameworks like Gatsby and React, with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Privacy compliance is basic, lacking a dedicated privacy policy page, which is a notable gap. Overall, the domain registration and WHOIS data support the legitimacy and maturity of the business.

C

Crane Service Inc

craneserviceinc.com

53

Crane Service Inc is a well-established North American company specializing in heavy lift, rigging, heavy hauling, alternative movement, and warehouse/storage services. Founded in 1998, the company positions itself as a trusted leader with a modern fleet and a strong safety record. Their website reflects a professional and consistent brand image targeting industrial clients requiring specialized crane and rigging services. Technically, the site is built on WordPress with the Divi theme and integrates modern JavaScript libraries and Google Analytics for tracking. Security posture is good with HTTPS and reCAPTCHA implemented, though there is room for improvement in DNS security and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is credible and trustworthy, supporting the company's market position.

P

Producement

producement.com

59

Producement is a small Estonian technology company specializing in startup product engineering services. Founded in 2017, the company helps founders rapidly build and scale their products while investing sweat equity to become shareholders. Their key services include product engineering, full-stack development, and tech recruitment. The company positions itself as a niche partner for early-stage startups, aiming to build successful startups and help them become independent. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern tools such as Google Analytics and Cloudflare DNS, but hosting provider details are not explicit. Security posture is solid with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, including email and physical address, along with social media presence. Overall, the website is trustworthy and credible but could improve privacy and security transparency.

A

Avera-Trading AS

avera.ee

44

Avera-Trading AS operates a professional e-commerce website focused on retailing cleaning chemicals, equipment, and hygiene products primarily in Estonia. Established in 2010, the company presents a well-structured online catalog with clear pricing and product categorization, targeting businesses and consumers seeking cleaning solutions. The website leverages WordPress and WooCommerce platforms, enhanced with popular plugins such as Yoast SEO and WPBakery Page Builder, indicating a mature digital infrastructure. Integration of Google Analytics and Tag Manager reflects a data-driven approach to marketing and user behavior analysis. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and privacy policies are missing, representing compliance and security improvement opportunities. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit security disclosures.

U

UPRENT Ltd.

uprent.eu

47

UPRENT Ltd. is a regional provider specializing in pump rental, energy solutions, and construction equipment across Latvia, Estonia, Lithuania, and Poland. The company offers a broad range of rental equipment including pumps, excavators, generators, and trench support systems, complemented by specialist project services. Their market position is strong within the Baltic region and Poland, supported by a multilingual website and localized contact points. The business model focuses on equipment rental and sales with value-added specialist solutions for industrial and construction clients. Technically, the website is built on a modern WordPress platform with WooCommerce and WPBakery Page Builder, integrating Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility. Security measures include HTTPS, reCAPTCHA on forms, and nonce tokens, though explicit security headers and policies are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a published privacy policy and security incident response details indicates room for improvement in compliance and transparency. Cookie consent mechanisms are implemented, supporting GDPR compliance to some extent. Overall, UPRENT presents a professional and trustworthy online presence with comprehensive contact information and clear business focus. Strategic enhancements in privacy documentation, security policies, and accessibility would further strengthen their digital maturity and compliance standing.

I

Import2

import2.com

64

Import2 is a technology company specializing in automated data migration services for businesses transitioning between various business applications. Their platform supports over 50 apps and offers features such as free sample migrations, CRM backup, and CSV import/export. The company positions itself as a reliable and cost-effective solution with a money-back guarantee, targeting businesses seeking seamless data transfer without technical complexity. Technically, the website is built on the Tilda CMS platform and integrates multiple modern analytics and marketing tools including Google Analytics, HubSpot, FullStory, Hotjar, and LinkedIn Insight. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and incident response disclosures. The absence of WHOIS registration data is a notable concern, impacting domain trustworthiness despite the professional web presence. Overall, Import2 presents a mature SaaS offering with solid digital infrastructure but would benefit from enhanced transparency in domain registration and security policies.

S

STARK Suomi

stark-suomi.fi

68

STARK Suomi operates as a significant retail entity in the Finnish construction sector, supplying building materials and related products primarily to professional builders and contractors. The website leverages modern web technologies including Angular and integrates with Google Tag Manager, Google Analytics, and Genesys Messenger for customer engagement and analytics. A comprehensive cookie consent mechanism is implemented, reflecting good privacy compliance practices. However, explicit privacy and security policies beyond cookie management are not directly present on the site. The security posture is strong with HTTPS and security headers properly configured, and no critical vulnerabilities detected. Overall, the site demonstrates a mature digital presence suitable for its market segment, though improvements in direct contact information and policy transparency could enhance trust and compliance.

E

Edhotels OÜ

edreamhotels.com

52

Edhotels OÜ operates a specialized hospitality technology and web design business focused on providing hotel sales and management software (BOUK) and website design services primarily in Estonia and the Baltic region. The company targets hotels, guest apartments, spas, and other accommodation providers, offering integrated booking engines and management tools to streamline operations and increase direct bookings. Their market position is that of a small but established regional player with a decade-plus history, supported by client testimonials and a professional online presence. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Facebook Pixel, Hotjar, and MailerLite for marketing automation. The site is mobile-optimized, SEO-friendly, and uses consent management for GDPR compliance. Performance is moderate with good user experience and navigation clarity. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and lack of explicit security or incident response policies are areas for improvement. The domain WHOIS data is missing, which raises concerns about domain legitimacy and registration consistency, potentially impacting trust. Overall, the website and business demonstrate professionalism and technical maturity, but the domain registration anomaly requires verification. Strategic recommendations include enhancing security headers, publishing security policies, and resolving WHOIS discrepancies to strengthen trust and compliance.

P

PersonaliDisain

personalidisain.ee

44

PersonaliDisain is an Estonian-based small business specializing in strategic human resource consulting and development services. The company offers a range of HR-related services including consulting, system development, surveys, recruitment, training, and coaching. Their market position is that of a niche HR consulting partner serving organizations seeking to optimize their personnel management. The website is professionally designed using WordPress and Bootstrap, with good mobile optimization and clear navigation. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Leadfeeder, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and use of reCAPTCHA on forms, though security headers could be improved. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, though no terms of service or security policy pages were found. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Recommendations include enhancing security headers and reviewing third-party scripts to reduce risk.

F

FinEst-Hall Factory OÜ

pvc-hall.com

47

FinEst-Hall Factory OÜ is a specialized manufacturer and service provider of PVC hangars and awnings, serving primarily B2B clients in Northern Europe. The company offers a full turnkey solution including design, manufacturing, installation, maintenance, and expansion of modular PVC structures, complemented by metal processing services such as plasma cutting and tube laser. Their market position is supported by multiple ISO certifications and a portfolio of completed projects, emphasizing quality, flexibility, and customer satisfaction. Technically, the website is built on WordPress with WooCommerce and employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel. The site is well-optimized for SEO, mobile-friendly, and accessible, with structured data enhancing search engine visibility. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces domain transfer protection. However, it lacks some advanced security headers and does not publish a dedicated security policy or incident response information. Tracking and marketing tools are used responsibly with user consent mechanisms in place. Overall, the website presents a professional, trustworthy, and compliant digital presence for a small manufacturing business. Recommendations include enhancing security headers, enabling DNSSEC, and publishing security and incident response policies to further strengthen trust and compliance.

T

TBC Bank

tbcbank.ge

58

TBC Bank is a leading financial institution in Georgia, operating since 2000. The website serves as a digital portal for banking services targeting retail and corporate customers. The site is built as a modern Angular single-page application hosted on AWS infrastructure, integrating multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Visual Website Optimizer, and Zendesk Chat. While the technical implementation is modern and performant with good mobile optimization, the site lacks visible privacy and terms of service policies, as well as explicit contact information, which are critical for user trust and regulatory compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. The domain WHOIS data is consistent with a legitimate, long-established Georgian bank, using privacy protection appropriately. Overall, the website is professional but could improve transparency and compliance documentation.

R

Reaalprojekt OÜ

reaalprojekt.ee

43

Reaalprojekt OÜ is a well-established infrastructure design and engineering company based in Estonia with over 20 years of experience. The company offers a broad range of services including project management, geodesy, and geotechnical investigations, serving clients primarily in Estonia and the Baltic region with subsidiaries in Latvia, Lithuania, and Sweden. Their website reflects a professional and consistent brand image, showcasing a strong portfolio and certifications such as ISO, which enhance their credibility. Technically, the site is built on WordPress with modern plugins and supports multilingual content, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the website demonstrates a mature digital presence aligned with the company's business stature and regional market position.

W

WOW EVENTS

wowevents.eu

43

WOW EVENTS is an established Estonian event management company with over 23 years of experience, specializing in corporate events such as conferences, client events, large-scale festivals, and internal communications. The company positions itself as a trusted and professional partner in the Estonian market, offering comprehensive event planning and production services. Their website reflects a mature digital presence with a professional design, clear navigation, and extensive service descriptions targeting business clients in Estonia. Technically, the website is built on WordPress using the Divi theme and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and MonsterInsights. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced, but explicit security headers are not clearly detected. No critical vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is an area for improvement as no explicit privacy or cookie policies were found, and user tracking is extensive via multiple third-party services. The WHOIS data is not publicly available due to EURid privacy policies, which is common for .eu domains but reduces transparency. Contact information is clearly provided with company domain emails and phone numbers, and social media presence is strong across major platforms. Overall, the website and business appear legitimate and professional, with minor gaps in privacy compliance and WHOIS transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, enhancing security headers, and improving accessibility to strengthen trust and compliance.

2

2ood / Oliver Oberg

2ood.com

56

The website '2ood / Oliver Oberg' represents a small, award-winning digital design studio specializing in creating user experiences, branding, and digital identities. The site showcases a portfolio of projects including corporate websites, branding, app design, and e-commerce solutions, targeting businesses seeking creative digital services. The business model is service-oriented, focusing on bespoke digital design and branding solutions. Technically, the website employs modern JavaScript libraries and Google Analytics for tracking, with a moderate performance and good mobile optimization. However, no CMS or hosting provider details are evident, and accessibility features are basic. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact information is provided on the main page, which impacts business credibility. WHOIS data for the subdomain is unavailable, which is typical for subdomains but reduces transparency. Overall, the site is professional and functional but would benefit from enhanced security and compliance disclosures.

H

Harku Vallavalitsus

harku.ee

50

Harku Vallavalitsus operates the official municipal government website for Harku vald, a coastal municipality in Estonia near Tallinn. The website serves as a comprehensive portal providing residents and stakeholders with access to municipal information, public services, community news, planning documents, and e-services. The site is well-structured with extensive navigation menus covering various sectors such as social services, education, environment, and governance. The target audience primarily includes local residents and businesses within the municipality. The business model is that of a government entity providing public information and services online. Technically, the website is built on the Liferay portal platform, utilizing technologies such as jQuery, Google Analytics, Hotjar, and Font Awesome. The site is accessible on both desktop and mobile devices with good mobile optimization and responsive design. Performance is moderate, and SEO practices are adequately implemented with proper meta tags and structured navigation. However, the use of an outdated jQuery version presents a moderate security risk. From a security perspective, the website enforces HTTPS and includes some security headers, but lacks advanced security policies such as Content Security Policy or published incident response procedures. No cookie consent mechanism is present, which may impact GDPR compliance. Analytics tools like Google Analytics and Hotjar are used, indicating moderate user tracking. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website demonstrates a solid business credibility and technical foundation appropriate for a local government portal. Key areas for improvement include updating JavaScript libraries, implementing cookie consent, publishing security and incident response policies, and enhancing privacy compliance measures. These steps will strengthen the security posture and regulatory adherence of the site.

T

TRAFF OÜ

traff.co

53

TRAFF OÜ operates a sophisticated online marketing platform that connects advertisers and publishers through its proprietary AdExchange system. The company focuses on delivering targeted advertising solutions using advanced audience analytics, campaign optimization, and a variety of digital marketing tools. Positioned as a medium-sized technology company based in Estonia, TRAFF OÜ serves a global audience with a strong emphasis on quality traffic and conversion metrics. The website reflects a professional and consistent brand image with comprehensive service offerings and clear contact channels. Technically, the website employs modern web technologies including jQuery, Google Analytics, Yandex Metrika, and Google reCAPTCHA to ensure both functionality and security. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could enhance its posture. The presence of multiple analytics and tracking tools indicates a moderate level of user tracking balanced with privacy compliance measures. From a security perspective, the site uses HTTPS exclusively and integrates CAPTCHA for form submissions, reducing the risk of automated abuse. However, the absence of explicit security headers and incident response information suggests room for improvement in security maturity. The WHOIS data is privacy protected, which is common for this business type, and the website provides sufficient company information to establish legitimacy. Overall, TRAFF OÜ presents a credible and professional online marketing platform with a solid technical foundation and good privacy compliance. Strategic enhancements in security policies and transparency could further strengthen trust and resilience against emerging threats.

D

Dashbird Inc.

dashbird.io

68

Dashbird Inc. is a technology company specializing in serverless observability and troubleshooting solutions. Their platform offers agentless monitoring, error detection, and end-to-end visibility across cloud-native infrastructures, primarily targeting developers, DevOps, security teams, and architects working with serverless applications. Recognized as a Gartner Cool Vendor in observability, Dashbird serves thousands of users with a SaaS business model focused on usage-based pricing. The company is headquartered in San Francisco and has been operational since 2017. Technically, the website is built on WordPress and leverages a modern tech stack including Google Analytics, Google Tag Manager, Intercom, HubSpot Forms, Hotjar, and other marketing and analytics tools. Hosting is likely on AWS, supported by DNS records. The site demonstrates good SEO optimization, mobile responsiveness, and a professional design with clear navigation and rich content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. No vulnerability disclosure or security.txt file is present. The domain registration is mature and consistent with the business claims, though the registrant country differs from the business address, likely due to registrar location or privacy. Overall, Dashbird presents a strong business and technical profile with good privacy compliance and trust indicators. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve security posture and trust further.

Z

Zone Media OÜ

artist.ee

49

Artist.ee is a specialized Estonian marketing and media company operating since 2010 under Zone Media OÜ. The company focuses on retail and service environments, offering services such as marketing, media, audio design, studio production, technical audio solutions, and advertising screens. Their market position is strong within Estonia, targeting retail businesses and brands aiming for effective in-store and service environment communication. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern libraries and Google Analytics for tracking. However, it lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is good with HTTPS enabled and no exposed sensitive data, but missing security headers and vulnerability disclosure mechanisms indicate room for improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

H

Huntloc

huntloc.com

57

Huntloc is a technology company specializing in real-time hunting tracking applications and GPS-GSM tracking devices for hunting dogs. Founded in 2013 and based in Estonia, the company targets hunters and hunting dog owners with a niche product offering that enhances hunting efficiency and safety. The website is built on WordPress with WooCommerce, leveraging modern web technologies such as Bootstrap and FontAwesome, and integrates extensive analytics and tracking tools to monitor user engagement. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent mechanisms in place but no visible privacy policy or terms of service. Overall, the site presents a professional and consistent brand image with moderate trustworthiness.

R

RMIT University

rmit.edu.au

61

RMIT University is a large, internationally recognized educational institution specializing in technology, design, and enterprise education. It offers a broad range of undergraduate, postgraduate, vocational, and online courses, serving a diverse audience including students, alumni, staff, and research partners. The website reflects a mature digital presence with consistent branding and comprehensive navigation tailored to its academic and global audience. Technically, the site leverages Adobe Experience Manager CMS and integrates multiple analytics and marketing tools, indicating a sophisticated digital marketing strategy. Security posture is generally strong with HTTPS enforced and no visible sensitive data exposure, though the absence of explicit security headers and privacy policies suggests room for improvement. The WHOIS data is privacy protected, which is typical for Australian domains and does not detract from the domain's legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer security communication.

P

PRIA

pria.org

60

PRIA is a well-established non-profit organization founded in 1982, specializing in participatory research, training, and capacity building to empower citizens and civil society in India and globally. The organization focuses on gender equality, sustainable urban futures, and participatory governance, positioning itself as a reputable leader in its sector. The website reflects a mature digital presence with good content quality and consistent branding. Technically, the site uses modern JavaScript libraries and CSS frameworks, hosted via GoDaddy, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and published security policies. Privacy compliance is basic, with no cookie consent mechanism despite use of tracking tools. Overall, PRIA demonstrates strong business credibility and trustworthiness, though improvements in security and privacy practices are recommended.

E

ESA-BIC Estonia

esabic.ee

58

ESA-BIC Estonia is a specialized business incubation center affiliated with the European Space Agency, focused on supporting startups and innovators leveraging space technologies for non-space markets. The organization offers funding, technical and business mentoring, IP support, and access to a broad international network, positioning itself as a niche incubator within the technology sector in Estonia. The website reflects a professional and consistent brand image with clear messaging and calls to action targeting startups and entrepreneurs in the space technology domain. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile devices, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and use of reCAPTCHA, but could benefit from enhanced security headers and published security policies. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with no critical security issues detected.

A

AS Emor

emor.ee

39

Kantar Emor is a reputable Estonian market research and data analytics company providing comprehensive services such as trend studies, social research, brand and communication analysis, and media research. The company targets businesses and organizations in Estonia seeking reliable data to make informed decisions. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations, demonstrating good technical infrastructure and content management practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in the market research sector.

A

Anju Software, Inc.

anjusoftware.com

61

Anju Software, Inc. is a medium-sized, customer-focused software company specializing in life sciences technology solutions. Their offerings include adaptable software suites for clinical research, medical affairs, and data science, targeting biopharmaceutical companies and CROs globally. The company positions itself as a trusted partner to top pharmaceutical firms, providing tools that accelerate clinical trials and enhance patient outcomes. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the website is built on WordPress with modern frameworks like Bootstrap and Elementor, integrating multiple analytics and marketing tools such as Google Analytics, LinkedIn Insight, and VWO. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security measures include HTTPS enforcement and reCAPTCHA on forms, but additional security headers could improve the security posture. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms, though no explicit terms of service or vulnerability disclosure policies were found. The absence of WHOIS data reduces domain trustworthiness, suggesting privacy protection or unregistered status, which should be verified. Overall, Anju Software presents a credible and professional online presence with strong business and technical foundations. Strategic improvements in security headers, accessibility, and transparency policies would further enhance trust and compliance.

N

Nordecon AS

nordecon.com

52

Nordecon AS is a leading construction and real estate development company based in Estonia, with a strong market presence since 1989. The company operates in Estonia and neighboring countries including Finland, Sweden, and Ukraine. It offers comprehensive services including building and facility construction, project management, and real estate development. The company is publicly listed on the Nasdaq Tallinn stock exchange since 2006, reinforcing its market credibility. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and detailed project showcases. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, optimized for mobile and accessibility. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some improvements like DNSSEC and security headers could enhance protection. Overall, the website and domain registration data align well with the company's business claims, indicating high legitimacy and trustworthiness.

D

Devolon

devolon.fi

66

Devolon is a Finnish software development company specializing in future-proof web and mobile software solutions. Their service offerings include IT consulting, UI/UX design, clean code development, QA, maintenance, and support, targeting industries such as FinTech, transportation, healthcare, and museums. The company positions itself as a niche provider of full-stack development services with a focus on innovative and tailored solutions. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including jQuery, HubSpot forms, Weglot for multilingual support, and OneTrust for cookie consent management. The site is mobile responsive and implements HTTPS with HSTS for secure communications. Security posture is solid with no evident vulnerabilities or exposed sensitive data, though the absence of explicit privacy and terms of service policies and incident response contacts indicates room for improvement in compliance and transparency. Overall, the website reflects a professional and trustworthy business presence with moderate tracking and marketing tools in use.

W

Walless

walless.com

66

Walless is a modern Baltic law firm established in 2008, providing bespoke legal services focused on client trust, openness, and innovation. The firm targets businesses in the Baltic region and offers services including arbitration, dispute resolution, and corporate legal advisory. Their market position is that of a growing regional legal services provider with a professional online presence. Technically, the website is built on WordPress, leveraging modern plugins and technologies such as Google Analytics, reCAPTCHA, and GDPR cookie consent mechanisms. The site is well optimized for performance and mobile devices, with good SEO and accessibility features. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a credible and professional business with a high trustworthiness rating.

T

Tartu Loomemajanduskeskus

lmk.ee

40

Tartu Loomemajanduskeskus (LMK) is a well-established creative industries development center and incubator based in Tartu, Estonia, founded in 2009. It focuses on supporting creative enterprises through incubation programs, mentoring, training, and providing rental spaces. The organization targets creative startups and existing businesses in the South Estonia region, aiming to boost innovation and export potential in sectors such as fashion, contemporary art, film, and performing arts. The website reflects a professional and consistent brand presence with active social media engagement and regularly updated news content. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern JavaScript libraries like Swiper.js and jQuery. It employs Google Analytics and Jetpack for visitor tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting and domain registration are stable and consistent with the business's geographic location. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security or incident response policies. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR requirements. No vulnerability disclosure or security.txt files are present, which could be improved to enhance trust and transparency. Overall, the website is functional, professional, and credible but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

G

Geo S.T.

geo.ee

48

Geo S.T. is an established Estonian company specializing in geodetic measurements, 3D laser scanning, construction geodesy, and cadastral services. Founded in 2010, it serves clients in energy, transportation, and real estate sectors, offering precise surveying and modeling solutions. The company maintains a professional web presence with clear service descriptions and partner affiliations, targeting construction and industrial clients. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, integrating Google Analytics and Google Tag Manager for user tracking. The site is mobile-optimized and moderately performant, though accessibility and SEO could be improved. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy but no consent mechanism or detailed privacy policy. Overall, the domain registration is consistent and trustworthy, supporting the company's legitimacy.

T

Tallinn Dolls

tallinndolls.com

50

Tallinn Dolls operates as a specialized e-commerce retailer focusing on fashion apparel and accessories for women, men, and children. The website offers a variety of collections including pre-order and immediate purchase options, targeting consumers interested in curated fashion products. The company has a stable market presence with a domain registered since 2008, indicating longevity and business continuity. The site supports multilingual content in English and Estonian, enhancing accessibility for its target audience. Technically, the website leverages modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Weglot for translations. It is built on the Sylius e-commerce platform, which is a modern and flexible solution. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and does not publish security policies or incident response contacts. No privacy or cookie policies were detected, which is a compliance gap especially under GDPR. Tracking technologies are extensively used, but without visible consent mechanisms, raising privacy concerns. Overall, Tallinn Dolls presents a credible and professional e-commerce presence with solid technical foundations but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.