Security Directory

E

eHost OÜ

ettevotja.ee

40

Aktiva.ee is an Estonian business information portal focused on supporting entrepreneurs at various stages including startups, operating companies, and those expanding internationally. The site provides practical guides, legal and accounting information, marketing advice, and resources to help businesses succeed. It targets Estonian-speaking entrepreneurs and small businesses, positioning itself as a trusted informational gateway in the local business ecosystem. The website is built on WordPress, uses modern web technologies including Google Analytics and reCAPTCHA, and is hosted with reputable providers including Cloudflare for DNS and eHost OÜ as registrar. The site is well-structured with clear navigation and good mobile optimization, though it lacks explicit privacy and cookie policies which impacts compliance. Security posture is solid with HTTPS and anti-bot measures, but could be improved with additional security headers and published policies. Overall, the site is a credible, small-scale business resource with room for enhanced privacy and security transparency.

H

HansaLaw

hansalaw.ee

45

HansaLaw is an internationally recognized legal and tax advisory firm with over 10 years of experience, operating primarily in the Baltic region with offices in Tallinn, Riga, and Vilnius. The firm offers comprehensive legal consulting and conflict resolution services tailored to clients seeking expert legal advice. The website is built on WordPress using the Avada theme, incorporating modern web technologies and third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, and Adform tracking. The site is well-designed, mobile-optimized, and provides clear navigation, although it lacks explicit privacy and cookie policies, which impacts its privacy compliance rating. Security posture is adequate with HTTPS enabled and good SSL configuration, but could be improved by enabling DNSSEC and adding security headers. No WAF or blocking mechanisms were detected, and the domain registration data is consistent with the business claims, supporting legitimacy.

Rentokil is a professional pest control service provider targeting residential and business customers in Estonia. The website presents localized content in Estonian, emphasizing expertise and comprehensive pest control solutions. The technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and Google Tag Manager, hosted primarily on Rentokil's CDN. While the website design and content quality are good, there is a lack of visible privacy, cookie, and security policies, which impacts compliance and trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, warranting further verification. Overall, the security posture is moderate but could be improved by implementing security headers and explicit compliance documentation.

N

Nuare Studio

nuarestudio.com

45

Nuare Studio is a specialized art outsourcing and software development company established in 2006, serving the video game and movie industries. The company offers a broad range of creative services including 2D and 3D art, animation, VFX, and IT development such as mobile and web applications. Their market position is supported by collaborations with prominent clients and a portfolio of major projects. Technically, the website is built on WordPress with modern plugins and SEO tools, delivering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain locks in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is lacking as no privacy or cookie policies are found, which is a notable gap. Overall, the business credibility is high with clear contact information and trust signals like testimonials and client logos. Strategic improvements in privacy compliance and DNS security would enhance their security and trust profile.

B

BNI Eesti

bni.ee

54

BNI Eesti operates as the Estonian chapter of BNI, the world's leading business referral organization established globally in 1985. The website serves business professionals and entrepreneurs in Estonia, providing networking, referral generation, and business training services. The domain has been registered since 2010, aligning with the organization's established presence. The site uses a proprietary CMS and is hosted behind Cloudflare, leveraging modern web technologies including jQuery, Google Analytics, and Facebook Pixel for analytics and marketing. The website is well-structured, mobile-optimized, and presents consistent branding aligned with the global BNI identity. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and detailed privacy/security policies are absent. Contact information is primarily via contact forms, with no direct emails or phone numbers visible. Overall, the site is professional, trustworthy, and serves its business networking purpose effectively.

T

Tritech OÜ

tritech.ee

49

Tritech OÜ is a small Estonian manufacturing company specializing in mechanical engineering and CNC machining services, established in 2012. The company offers a range of services including mechanical engineering design, CNC turning and milling, product assembly, and customized mechanical solutions. Their target audience is industrial companies seeking high-quality machined parts and assembly services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, using modern tools such as Google Analytics and Facebook Pixel for marketing and tracking. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and formal security policies. Overall, the security posture is solid but could be improved by adding cookie consent mechanisms, security policies, and vulnerability disclosure information. The domain registration is consistent with the business claims, enhancing trustworthiness. Strategic recommendations include enhancing privacy compliance and security transparency to further build customer trust and regulatory adherence.

Stratum Traffic Engineering GmbH is a specialized consulting company in the Intelligent Transport Systems (ITS) and traffic engineering sector, offering services such as traffic analysis, road safety, project management, and business development for ITS SMEs. The company targets organizations seeking expertise in traffic audits, modeling, and tolling systems, positioning itself as a niche ITS SME with international market development capabilities. The website reflects a professional and consistent brand image with clear service offerings and contact information, supported by social media presence on Facebook and LinkedIn. Technically, the site is built on WordPress using popular plugins and themes, delivering moderate performance and good mobile optimization. However, the site lacks advanced security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The domain registration is consistent and transparent, with no privacy protection, supporting the legitimacy of the business. Overall, the website is functional and credible but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

G

Goal Marketing OÜ

goal.ee

40

Goal Marketing OÜ is a well-established Estonian digital marketing agency founded in 2010. The company specializes in social media content creation, strategic marketing campaigns on Meta and Google platforms, and offers training services including Chat GPT and GA4. Their website reflects a professional service provider targeting businesses seeking comprehensive digital marketing solutions. The agency maintains a consistent brand presence with detailed team profiles and client logos, indicating a credible market position within Estonia. Technically, the website is built on WordPress using popular plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and captcha-protected forms, but lacks advanced security headers and explicit privacy policies. Cookie consent is implemented via CookieYes, supporting GDPR compliance to some extent. Overall, the domain registration data aligns with the business claims, reinforcing legitimacy. Strategic improvements in privacy documentation and security headers would enhance compliance and trust.

S

SA Tallinna Lauluväljak

lauluvaljak.ee

46

Tallinna Lauluväljak is a well-established event venue and cultural site in Tallinn, Estonia, operating since 2010. The organization offers rental services for event spaces, furniture, and equipment, alongside visitor services such as a visitor center and park attractions. The website is professionally designed using Drupal CMS, with integration of modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and provides clear navigation and relevant content for event organizers and visitors. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though security headers are not explicitly detected. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms and terms of service. Contact information is clearly provided, enhancing business credibility.

I

International Transport Workers' Federation (ITF)

itfafrica.org

59

The International Transport Workers' Federation (ITF) operates a comprehensive website focused on its Africa regional activities, advocating for transport workers' rights and union coordination across the continent. The site demonstrates a mature digital presence with multilingual support, modern CMS technology (Drupal 10), and integration of analytics and translation services. Contact information is clearly provided with physical offices in Nairobi and Abidjan, supporting its global federation status. However, the absence of a visible privacy policy and terms of service pages, along with incomplete WHOIS data, slightly detracts from its overall trustworthiness. Security posture is adequate with HTTPS and anonymized analytics but lacks explicit security headers and vulnerability disclosure mechanisms. Overall, the website is professional, content-rich, and well-structured, serving its target audience effectively while leaving room for improvements in privacy and security transparency.

B

Blend IT

blendit.eu

45

Blend IT is a small technology company specializing in providing remote software development teams primarily located in the Philippines and Estonia. Their business model focuses on outsourcing long-term software professionals to clients globally, emphasizing flexible team structures and direct client-to-developer communication. The company positions itself as a niche provider addressing talent shortages through remote work solutions. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, and it integrates Google Analytics for user tracking. The site is mobile optimized and uses SEO best practices including structured data and meta tags. Security-wise, the site enforces HTTPS and employs basic anti-spam measures in its contact form but lacks published security policies or incident response information. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures.

E

Efore

efore.com

52

Efore is a company specializing in automated battery cell manufacturing and energy storage solutions, targeting industrial, telecom, and energy sectors. Their website presents a professional image with clear navigation and modern design, leveraging WordPress and Elementor technologies. The company emphasizes customized battery solutions and sustainability. Technically, the site is well-structured with SEO optimization and mobile responsiveness, though performance is moderate. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no clear privacy or terms of service pages, though a cookie consent mechanism is present. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

B

Baltic Legal

baltic-legal.com

44

Baltic Legal is a specialized corporate law office providing company formation, legal, accounting, and immigration services focused on the Baltic states of Latvia, Estonia, and Lithuania. The company targets entrepreneurs and businesses seeking to establish operations in these countries, offering a one-stop solution for business registration, tax management, and residence permits through investment. The website content is professionally structured and provides detailed service descriptions, although it lacks explicit contact information and privacy policies. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, Font Awesome icons, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for mobile devices and SEO, but lacks advanced accessibility features and security headers. The absence of HTTPS status information and security headers suggests room for improvement in security posture. From a security perspective, the site does not expose sensitive data and uses no known vulnerable libraries. However, the lack of privacy and cookie policies, absence of contact details for incident response, and missing WHOIS registration data reduce trustworthiness and compliance with data protection regulations. The WHOIS query returned no registration data, which is inconsistent with the active website presence and raises concerns about domain legitimacy. Overall, Baltic Legal presents a credible business offering with good content quality and technical implementation but requires significant improvements in security, privacy compliance, and transparency to enhance trust and regulatory adherence.

PD Instore is a well-established retail design-to-build partner with over 80 years of industry experience, specializing in visual merchandising and instore environment solutions. The company targets retail brands seeking innovative and comprehensive brand experience services, offering design, build, and rollout capabilities. Their market position is strong, supported by a large team and a broad portfolio of well-known brand partnerships. Technically, the website is built on WordPress using Elementor, with modern JavaScript libraries and Google Analytics integration, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

T

Total Risc Technology (TRT)

trt.com

66

Total Risc Technology (TRT) is a globally recognized IT managed services provider specializing in server, storage, and networking solutions. With a strong emphasis on ISO 27001 and ISO 9001 certifications, TRT delivers cost-effective, scalable IT support and maintenance services to a diverse clientele ranging from small businesses to multinational corporations. Their service portfolio includes business continuity, managed services, professional consulting, infrastructure deployment, and cloud solutions, supported by a global team of IT experts and strategic partnerships with leading technology vendors such as IBM, HP, Dell, Cisco EMC, and NetApp. Technically, the website is built on WordPress with modern plugins like Yoast SEO and WPBakery Page Builder, integrating analytics and user behavior tracking tools such as Google Analytics and Hotjar. The site demonstrates good mobile optimization and SEO practices but lacks some advanced accessibility features and explicit cookie consent mechanisms. Security posture is strengthened by HTTPS enforcement and ISO certification; however, the absence of visible security headers and incident response contact details suggests room for improvement. The domain WHOIS data is notably missing, which raises concerns about domain registration transparency and trustworthiness despite the professional online presence. This discrepancy should be addressed to enhance credibility. Overall, TRT presents as a mature and reliable IT services provider with a solid market position but could benefit from enhanced transparency and compliance features on their website.

S

Savantor Ltd

savantor.com

54

Savantor Ltd is a specialized consulting and resourcing firm focused on the payments, cards, mobile, banking, and transactions sectors. With over 25 years of experience, the company offers expert services including specialist resourcing, payments strategy, platform selection and transition, and operational efficiency. Their client base includes major financial institutions and payment networks, positioning them as a trusted advisor in the European and UK markets. The website reflects a professional and well-structured digital presence, leveraging WordPress and Elementor technologies, with good mobile optimization and SEO practices. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS registration data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the website and business present a credible and professional image with minor technical and security enhancements recommended.

M

MRPeasy

mrpeasy.com

69

MRPeasy is a cloud-based SaaS provider specializing in Manufacturing ERP and MRP software tailored for small manufacturers. The company offers a comprehensive suite of services including production planning, stock management, CRM, purchases, finances, and team collaboration tools. Positioned as a leading solution for small manufacturers, MRPeasy emphasizes simplicity and power in its offerings. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates advanced analytics and optimization tools like Google Analytics and Visual Website Optimizer. The site is mobile-optimized and performs moderately well, with good accessibility and SEO features. Security best practices are observed, including HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS registration data reduces the overall trust score, as domain legitimacy cannot be fully verified. Contact information is available, including verified company emails and social media presence, enhancing business credibility. Overall, MRPeasy presents a trustworthy and professional online presence suitable for its target market, but improvements in transparency regarding security policies and domain registration details would further strengthen trust and compliance.

IITEE OÜ is an Estonian IT service provider specializing in professional IT solutions for companies, particularly those in the manufacturing sector. Founded in 2006, the company offers IT maintenance, hosting services with high availability, and Office 365 business-class email solutions. Their business model focuses on providing reliable and efficient IT support to improve operational efficiency for their clients. The website reflects a small but professional company with clear contact information and a focus on B2B services. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, Owl Carousel, and Google Fonts. Google Analytics and Google Tag Manager are employed for user tracking and marketing insights. The site is mobile responsive and well-structured, though accessibility features are basic. Hosting appears to be managed by Elkdata OÜ, consistent with the WHOIS data. From a security perspective, the website uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and there is a lack of privacy and cookie policies, which impacts GDPR compliance. No vulnerability disclosure or incident response information is provided. The security posture is moderate but could be improved by implementing standard security headers and formal policies. Overall, the website is professional and trustworthy with a solid business foundation. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance trust and regulatory adherence.

B

Baklavacı Güllüoğlu

gulluoglu.com

61

Baklavacı Güllüoğlu operates a well-established e-commerce website specializing in traditional Turkish desserts such as baklava, kadayıf, lokum, and chocolates. The company targets consumers interested in authentic Turkish sweets and offers a variety of products with online ordering and delivery options. The website demonstrates a good level of digital maturity with modern technologies including jQuery, Google Tag Manager, Facebook Pixel, and Google Analytics integrated for marketing and analytics purposes. The site is built on the Hipotenus e-commerce platform, indicating a professional infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers are not explicitly detected. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent banner supporting GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts overall trustworthiness. No evidence of WAF or blocking mechanisms was found, allowing full content accessibility and analysis.

O

Outline Reklaam

outline.ee

39

Outline Reklaam is an established Estonian marketing and advertising agency with over 20 years of experience. They offer a comprehensive suite of services including graphic design, internet solutions, photography, 3D, video marketing, and website development. Their business model focuses on in-house content creation and serving a diverse client base, as evidenced by their portfolio and testimonials. Technically, the website is built on WordPress using the Avada theme and integrates common plugins such as Contact Form 7 and MonsterInsights for analytics. The site is moderately optimized for performance and mobile devices, with basic accessibility features. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency.

MTÜ Eesti Kvaliteediühing is a non-profit organization based in Estonia focused on uniting organizations and individuals dedicated to development and quality improvement. The website serves as a platform for sharing news, events, and international quality-related activities, targeting quality professionals and organizations. The business model centers on membership and community engagement within the quality sector. The organization appears established with a domain age consistent with its founding year of 2018 and maintains a moderate market position within Estonia's quality community. Technically, the website is built on WordPress 6.5.5 using the Avada theme and integrates popular plugins such as Yoast SEO and CleanTalk anti-spam. It employs modern web technologies including jQuery and Font Awesome, and uses Google Analytics for visitor tracking. The site is served over HTTPS, indicating a secure transport layer, and shows moderate performance and good mobile optimization. SEO practices are implemented with meta tags and structured data, although accessibility features are basic. From a security perspective, the site benefits from HTTPS and anti-spam measures but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy and cookie policies are absent, which is a compliance gap, especially under GDPR. Incident response and vulnerability disclosure mechanisms are not evident, limiting transparency in security management. Overall, the website demonstrates a solid business credibility and technical foundation but requires improvements in privacy compliance and security policy transparency. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enhancing security headers, and publishing incident response contacts to strengthen trust and compliance.

The website seo.com.au is currently a parked domain with minimal content indicating it is available for purchase or joint venture. There is no active business operation or service offering visible on the site. The primary contact method is a single email address. The technical infrastructure includes use of Google Tag Manager, Google Analytics, and Facebook Pixel for tracking, hosted on AWS DNS servers. However, the site lacks security headers, DNSSEC, and visible HTTPS confirmation, which reduces its security posture. Privacy compliance is poor, with no privacy or cookie policies present despite extensive tracking scripts. Overall, the site is low in content quality and business credibility, reflecting its parked status rather than an operational business.

F

Forlle'd

forlle-d.com

54

Forlle'd appears to be a skincare brand with a website built on modern JavaScript frameworks such as Nuxt.js and Vue.js. The site includes product showcases and professional/scientific content related to skincare. The technical infrastructure is moderately modern with Google Analytics and Tag Manager integrated for tracking. However, the website lacks critical privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The domain is well-established, registered since 2004 with a reputable registrar, indicating business stability. Security posture is weak due to missing headers and lack of explicit security policies. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

D

Devtailor

devtailor.com

59

Devtailor is a technology company specializing in turnkey software development services and white label products such as license plate recognition, facial recognition, and tvOS applications. Founded in 2015, the company targets businesses seeking scalable software solutions and innovative technology products. Their market position is that of a niche provider with a focus on quality and specialized offerings. Technically, the website is built on Angular 13 with server-side prerendering, uses modern tracking and analytics tools, and is hosted likely on AWS infrastructure. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks published security policies, security headers, and incident response information. Privacy compliance is partial, with a cookie consent mechanism but no privacy policy or terms of service pages. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

T

Thulema

thulema.ee

39

Thulema is a well-established Estonian company specializing in the manufacturing and retail of ergonomic and modern office and public furniture. The company positions itself as a leading brand in Estonia, emphasizing human-friendly materials and innovative Nordic design. Their website reflects a medium-sized business with a clear focus on sustainability, as evidenced by their published carbon footprint report. The target audience includes businesses and institutions seeking quality workplace solutions. Technically, the website is built on WordPress with modern plugins and tracking tools, offering a good user experience and SEO optimization. Security posture is solid with HTTPS and nonce usage, though lacking some advanced security headers and explicit security policies. Privacy compliance is basic, with no visible cookie consent mechanism or GDPR-specific disclosures. Overall, the website is professional, trustworthy, and aligned with the company's business claims.

A

AKU Collective OÜ

aku.co

40

AKU Collective OÜ is a small, established design studio based in Tallinn, Estonia, specializing in branding, strategy, and creative solutions across various media. Founded in 2012, the company serves clients in culture, government, music, and other sectors, with a strong portfolio and multiple design awards. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress, uses modern JavaScript libraries like jQuery, and integrates Google Analytics and Tag Manager for tracking. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is privacy protected but legitimate, with no suspicious patterns.

E

Eesti Kirjandusmuuseum

kirmus.ee

55

Eesti Kirjandusmuuseum is a well-established Estonian national scientific and cultural institution focused on managing important archives related to cultural history and folklore. The website serves a diverse audience including researchers, students, cultural enthusiasts, and the general public by providing access to archives, scientific projects, educational programs, exhibitions, and an online store. The institution holds a strong market position as a central cultural memory organization in Estonia. Technically, the website is built on Drupal 8 with modern libraries and tools, offering good mobile optimization, accessibility, and SEO. Security posture is solid with HTTPS and anonymized analytics, though security headers and explicit security policies could be improved. Overall, the site is professional, trustworthy, and content-rich, supporting the institution's mission effectively.

Evex.ge is the official website of Evex Clinics, a large healthcare network in Georgia established in 2014. The company provides a wide range of medical services including state healthcare programs, private insurance, and specialist consultations. The website is professionally designed, mobile-optimized, and offers clear navigation to services, doctors, clinics, and booking options. The business holds ISO 9001:2015 and TÜV AUSTRIA certifications, indicating a commitment to quality standards. Technically, the site uses modern JavaScript libraries and analytics tools, with HTTPS enabled and good SSL configuration. However, it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security headers are not detected, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Pure Norwegian Seafood

pns.no

42

Pure Norwegian Seafood is a Norwegian family-owned seafood producer specializing in high-quality salmon products. The company emphasizes sustainability, quality assurance, and traceability, aiming to be a leading supplier for premium seafood markets. Their website reflects a professional and consistent brand image focused on natural purity and product excellence. Technically, the site uses modern tracking tools such as Google Analytics and Google Tag Manager, with images optimized via Imgix CDN. The site is mobile-optimized and SEO-friendly, though no explicit CMS or hosting provider is identified. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and detailed security policies. WHOIS data is unavailable due to Norid's privacy policies for .no domains, which is typical and justified for this business type. Overall, the website presents a trustworthy and credible business presence with room for improvement in security transparency and contact information availability.

B

Bestnet Group

tikitreiler.com

48

Bestnet Group is a medium-sized manufacturing company based in Estonia, specializing in metal industry services including trailer development, subcontracted metalworking, and environmentally friendly surface coatings. The company positions itself as a reliable partner with over 30 years of experience and significant factory space in Scandinavia and the Baltics. Their website is professionally designed, mobile-optimized, and uses modern web technologies such as WordPress, Bootstrap, and Google Analytics for tracking. Structured data and SEO practices are well implemented, enhancing their digital presence. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with no cookie consent mechanism despite active analytics tracking. Overall, the website reflects a credible and professional business with room for improvement in privacy and security transparency.

N

North Star

northstarshipping.co.uk

69

North Star is a UK-based marine infrastructure support company specializing in offshore energy sectors including renewables and conventional energy. The company offers a range of services such as offshore wind support vessels, emergency response, platform supply, patrol and research, and rescue and maintenance. Their market position is that of an established medium-sized player with decades of marine experience and a modern fleet. The website is professionally designed, mobile-optimized, and provides comprehensive compliance and contact information, indicating a mature digital presence. Technically, the website is built on Webflow CMS, leveraging modern web fonts, analytics, and consent management tools. Performance and accessibility are rated highly, with fast loading times and good SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data reveals a domain registration anomaly: the domain www.northstarshipping.co.uk is reported as unregistered due to naming rules violation by Nominet UK. Despite this, the website content is accessible and professional, suggesting the domain may be a subdomain or alias. This discrepancy lowers the domain legitimacy score and warrants caution. Overall, North Star's website demonstrates a solid business and technical foundation with good security and privacy compliance. Strategic recommendations include enhancing security headers, clarifying domain registration status, and adding incident response information to further strengthen trust and compliance.

B

Brokeree Solutions

brokeree.com

64

Brokeree Solutions is a technology provider specializing in turnkey software solutions for retail brokers, focusing on enhancing trading platforms such as MetaTrader 4, MetaTrader 5, cTrader, and DXtrade. With over a decade of experience and a client base of hundreds of brokerages, the company offers products like liquidity bridges, PAMM systems, social trading platforms, and account management tools tailored for the forex brokerage industry. Their market position is solid, supported by a professional website, client logos, and active social media presence. Technically, the website is built on WordPress with modern integrations including Gravity Forms for data collection, Google Tag Manager, and various tracking pixels. Hosting and DNS services leverage Cloudflare, ensuring good performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Consent management is implemented via ConsentManager, indicating attention to privacy compliance. Security posture is good with HTTPS enforced, use of reCAPTCHA v3 on forms, and domain transfer protection. However, DNSSEC is not enabled, and some security headers are missing. There is no visible security policy or incident response information, which could be improved to enhance trust and compliance. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Brokeree Solutions presents a trustworthy and professional online presence with room for improvement in privacy policy transparency and security best practices. Strategic enhancements in these areas would strengthen their compliance and security posture, supporting their business credibility and customer trust.

Metaprofit is an established Estonian training and consulting company specializing in organizational development, personnel training, and psychological services. With over 20 years of experience and a client base exceeding 500 organizations, it offers a wide range of personalized training programs and consulting services targeting both public and private sectors. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, it is built on WordPress with modern plugins and integrates analytics tools such as Google Analytics and Yandex Metrika. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

I

Indico

indicosys.com

57

Indico is a Norway-based company specializing in digital evidence capture, management, and analysis solutions, primarily targeting law enforcement and forensic professionals. The website is built on the Wix platform and integrates common analytics tools such as Google Analytics and Google Tag Manager. While the site provides basic information about its services, it lacks comprehensive business and security disclosures. The absence of WHOIS data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but missing key security headers and policies. Privacy compliance is weak due to the lack of privacy and cookie policies. Overall, the site presents a basic digital presence with room for significant improvements in transparency, security, and compliance.

L

LenovoArvutid

lenovoarvutid.ee

43

LenovoArvutid is an Estonian e-commerce retailer specializing in business-class Lenovo ThinkPad laptops and related accessories. The website targets business customers and individual buyers seeking high-quality Lenovo laptops, offering products such as the ThinkPad X1 Carbon, T14, and P14 series. The business model focuses on online sales with additional services like leasing and installment payment options. The company has been operating since 2017 and maintains a consistent brand presence with a professional website design and clear navigation.

B

Bait Partner OÜ

baitpartner.eu

41

Bait Partner OÜ is a specialized provider of innovative medical technology solutions aimed at improving healthcare workflows through tailored hardware and software products. The company targets healthcare institutions such as hospitals and laboratories primarily in Europe, positioning itself as a niche B2B technology partner. The website is built on WordPress using the Avada theme and incorporates modern plugins and SEO tools, reflecting a moderate to high level of digital maturity. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and dedicated security policies. Overall, the site presents a professional and trustworthy image with clear contact information and client testimonials.

C

CostPocket

tsekk.ee

62

CostPocket is a medium-sized Estonian SaaS company specializing in digital expense management solutions for businesses and accounting professionals. Their platform offers AI-powered tools to digitize receipts, automate expense reporting, and integrate seamlessly with popular accounting software, positioning them as a key player in the Baltic financial technology sector. The website demonstrates a modern technical infrastructure using Vue.js and integrates multiple analytics and marketing tools, reflecting a mature digital presence. Security posture is strong with HTTPS, security headers, and Cloudflare DNS, though some improvements in DNSSEC and explicit security policies are recommended. Privacy compliance is basic, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the site is professional, trustworthy, and well-optimized, supporting a strong market position.

T

Tehnoplast AS

tehnoplast.ee

33

Tehnoplast AS is a leading plastic packaging manufacturer based in Estonia, serving primarily the Baltic and Scandinavian markets. With over 30 years of industry experience, the company specializes in producing high-quality HDPE bottles, canisters, and caps for chemical and food industries. Their business model focuses on manufacturing and providing comprehensive packaging solutions, supported by certifications such as ISO 9001 and ISO 22000, which underline their commitment to quality and safety. The website reflects a professional and consistent brand image, targeting business customers in relevant industrial sectors. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO best practices. It uses Google Analytics and Tag Manager for tracking and is hosted by a reputable Estonian registrar. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate, and accessibility features are basic. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and published security policies. There is no evidence of a privacy or cookie policy, which is a compliance gap. No incident response or vulnerability disclosure information is provided, which limits transparency in security matters. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

K

Kipwise Inc.

kipwise.com

66

Kipwise Inc. operates a SaaS platform focused on internal company wikis, knowledge management, and team enablement with AI-powered features such as knowledge suggestions and Slack auto-answering bots. The company targets a broad audience including remote teams, customer support, sales, marketing, HR, and product teams, positioning itself as a trusted solution with enterprise-grade support and integrations. Technically, the website is built on Webflow CMS, leveraging modern analytics and tracking tools like Segment, Google Analytics, Mixpanel, Amplitude, and FullStory, hosted via Cloudflare and AWS Cloudfront, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and domain protections in place, though improvements are recommended such as enabling DNSSEC and publishing formal security policies. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, content-rich, and trustworthy, with minor gaps in privacy and security transparency.

Z

Zaproo

zaproo.com

71

Zaproo is a specialized eCommerce and custom web application development company focusing on Magento2 and Vue Storefront technologies. Positioned as a Magento Solution Partner and Vue Storefront Partner, Zaproo offers a range of services including UI/UX design, eCommerce development, digital marketing, custom development, DevOps support, and training. Their target audience primarily consists of businesses seeking tailored eCommerce solutions and digital marketing support. The website demonstrates a professional design with clear navigation and mobile responsiveness, reflecting a moderate level of digital maturity. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js for the frontend, integrated with Magento backend systems. It employs common analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel, alongside reCAPTCHA for form security. Performance is moderate with good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, while the website is professionally presented and technologically sound, the lack of WHOIS data and explicit privacy policy reduces its trust and compliance posture. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance credibility and security.

D

Data Protected

lambda.ge

55

Lambda Gaming is a small technology company specializing in the development and publishing of retro and indie video games. Founded in 2022, the company targets gamers interested in nostalgic 8-bit style games and maintains an active online presence through its website, blog, and career opportunities. The business model focuses on direct engagement with its community and game distribution via digital platforms. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted with Cloudflare DNS and secured with HTTPS. The site demonstrates good mobile optimization and moderate performance, with standard SEO and accessibility features. Security posture is solid with HTTPS enforcement and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy and cookie policies are comprehensive and GDPR compliant, with user tracking via Google Analytics and Facebook Pixel at a moderate level. Overall, the website is professional and trustworthy, with room for improvement in security transparency and accessibility compliance.

M

Moneyzen

moneyzen.eu

56

Moneyzen is an Estonian-based online lending and investment platform that offers a variety of personal loans and investment opportunities. The company positions itself as a transparent and empathetic financial intermediary connecting borrowers and investors. The website is professionally designed using WordPress and Elementor, featuring loan and investment calculators, clear navigation, and multilingual support. The business targets individuals seeking flexible loans and investors looking for peer-to-peer lending options. The platform has a clear market niche in Estonia's finance sector with a small company size and a consistent brand presence. Technically, the website employs modern web technologies including WordPress 6.8.1, Elementor 3.29.2, Yoast SEO, Google Tag Manager, Facebook Pixel, Hotjar, and reCAPTCHA for security and analytics. The site is mobile-optimized and SEO-friendly, though some security headers could be enhanced. Cookie consent mechanisms and privacy policies indicate good GDPR compliance. From a security perspective, the site uses HTTPS with good SSL configuration and implements standard best practices such as reCAPTCHA and cookie consent. However, explicit security policies and incident response information are not found, and security headers like CSP and X-Frame-Options are not explicitly detected. No vulnerabilities or exposed sensitive data were identified in the HTML content. Overall, Moneyzen presents a trustworthy and professional online financial service with solid technical infrastructure and privacy compliance. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and user trust.

Bolt Technology OÜ operates a leading European mobility superservice platform offering ride-hailing, food and grocery delivery, car and scooter rentals, and business travel solutions. The company is well-positioned in the transportation and technology sectors with a large global footprint across 600+ cities and 50+ countries. Their digital presence is robust, leveraging modern web technologies such as Next.js and React, with strong SEO, mobile optimization, and accessibility features. The website demonstrates a high level of professionalism and branding consistency, supported by comprehensive privacy and cookie policies aligned with GDPR requirements. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, Bolt's website and digital infrastructure reflect a mature and trustworthy business with a strong market presence and good compliance practices.

H

Hala

hala.ai

62

Hala.ai is a technology company specializing in conversational AI platforms that integrate with major business software such as QuickBooks Online, IBM Watson, Microsoft Dynamics, and SAP. The company offers digital assistants and enterprise-grade conversational interfaces designed to streamline business processes and improve operational efficiency. Positioned as a niche B2B SaaS provider, Hala.ai targets business users and enterprises seeking to automate routine tasks and unify software interactions under a single conversational UI. The company is small-sized, founded in 2017, and based in Estonia. Technically, the website is built on modern web technologies including Ghost CMS, Tailwind CSS, and JavaScript frameworks, hosted on AWS infrastructure. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Analytics are implemented via Google Analytics and Google Tag Manager, with additional marketing tracking through Albacross. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response information. DNSSEC is not enabled, which is a recommended improvement. The WHOIS data is transparent and consistent with the website content, though the registrant uses a personal Gmail address, which is common for small businesses but slightly reduces trust. Overall, Hala.ai presents a professional and trustworthy online presence with a solid technical foundation and good privacy compliance. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance its security posture and trustworthiness further.

S

Servaali Oy

servaali.com

53

Servaali Oy is a well-established Finnish company specializing in the import and distribution of quality alcoholic and non-alcoholic beverages. Operating since 1995 and owned by Olvi Oyj, it holds a strong market position as one of Finland's leading alcohol importers. The website reflects this with clear branding, product categories, and a professional presentation targeting HoReCa professionals and consumers interested in premium drinks. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and jQuery, and it employs Cloudflare DNS and Google Analytics for performance and tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

L

Linde

linde.in

71

Linde in India operates as a subsidiary of Linde plc, a global leader in industrial gases and engineering solutions. The website serves as a corporate portal targeting industrial clients in India, showcasing Linde's presence and offerings in the energy sector. The business model focuses on B2B services supplying industrial gases and engineering expertise. The site reflects a strong market position with consistent branding and enterprise-level scale. Technically, the website employs modern analytics and monitoring tools such as Google Analytics, Google Tag Manager, and Microsoft Application Insights, indicating a mature digital infrastructure. The use of HTTPS and security headers demonstrates a good security baseline, although some areas like accessibility and privacy compliance could be improved. The site is mobile-optimized and SEO-friendly, supporting good user experience. From a security perspective, the site enforces HTTPS and includes key security headers, reducing common web vulnerabilities. However, the absence of explicit privacy and cookie policies, as well as lack of visible contact information for security incidents, represents compliance and transparency gaps. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and clearer contact channels to improve compliance and user trust. Strategic improvements in these areas will strengthen the security posture and regulatory alignment.

T

Tanel Teemusk

teemusk.com

47

The website teemusk.com represents a seasoned freelance iOS developer and technical team lead, Tanel Teemusk, showcasing his portfolio, resume, and contact information. The site targets businesses and clients seeking expert iOS development and technical leadership services. The business model is freelance consultancy with a strong emphasis on technical expertise and project leadership. The website is professionally designed using WordPress with Divi Builder and SEO optimizations, providing a good user experience and clear navigation. Social media presence is leveraged for contact and trust building. Technically, the site employs modern web technologies including HTTPS, Google Analytics, and Google reCAPTCHA for security and analytics. The CMS is WordPress, with plugins enhancing SEO and form functionality. Performance is moderate with good mobile optimization. However, some security best practices such as DNSSEC and security headers are missing, which could be improved. Security posture is solid with HTTPS and anti-bot measures, but lacks published security or privacy policies, which impacts privacy compliance. No direct company emails or phone numbers are disclosed, relying on contact forms and social media. The domain registration data is consistent with the business claims, showing a long-standing domain without privacy protection, supporting legitimacy. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

G

Gabriel Scientific OÜ

sleepangel-medical.com

46

Gabriel Scientific OÜ operates the SleepAngel Medical website, offering innovative medical barrier bedding products featuring patented PneumaPure® filter technology. Their products are certified as Class I Medical Devices in the EU, registered with the FDA, and approved by the SFDA, positioning them as a niche innovator in healthcare infection control. The company targets healthcare facilities and distributors, emphasizing sustainability and hygiene. The website is professionally designed using WordPress with Divi and Elementor, featuring multimedia content and clear navigation. Technical infrastructure includes modern web technologies, Google Analytics, and Facebook Pixel for marketing insights. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site reflects a trustworthy and credible business with room for enhanced privacy and security disclosures.

R

RangeForce

rangeforce.com

72

RangeForce is a cybersecurity training platform specializing in cloud-based cyber ranges and solo labs designed to empower security operations centers (SOCs) and threat hunters. The company positions itself as a provider of realistic, team-focused training environments that use real tools and networks to close technical and soft skills gaps. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting enterprise security teams. Technically, the site leverages HubSpot CMS, Google Analytics, and modern JavaScript libraries to deliver a responsive and engaging user experience. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie consent mechanisms and detailed privacy policies. However, the absence of WHOIS data and explicit security headers slightly reduces trustworthiness. Overall, RangeForce presents as a credible and professional cybersecurity training provider with room for improvement in transparency and security best practices.

F

FB Asset Management

fbassets.eu

46

FB Asset Management is a small Estonian investment fund management company established in 2013. The company manages investment funds licensed by the Estonian Financial Supervision Authority and targets professional and experienced investors with funds such as FB Opportunity Fund and FB Corporate Bond Fund. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. Google Analytics is used for visitor tracking, but no cookie consent mechanism or privacy policy is present, representing a compliance gap. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks security headers and incident response information. Overall, the website is professional and trustworthy but should improve privacy compliance and security transparency.