Security Directory

Pridea is a Dutch technology consultancy specializing in intrapreneurship and innovation management. They provide methodologies, platforms, and workshops to help organizations harness employee ideas and realize them effectively. Their market position is that of a niche player focused on bottom-up innovation facilitation within organizations. Technically, the website is built on the Weebly platform using standard web technologies including jQuery, Google Analytics, and video.js, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and uses an outdated jQuery version. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Business credibility is strong with clear contact information, social media presence, and trust signals such as case studies and podcasts. Overall, the website is professional and trustworthy but could improve in security and privacy compliance.

HugeDomains operates as a reputable domain marketplace specializing in premium domain name sales, offering flexible payment plans and guarantees such as a 30-day money back policy. The website RunwayBpo.com is presented as a domain for sale with clear pricing and purchase options, targeting individuals and businesses seeking premium domains. The company has been established since 2005 and maintains a consistent brand presence with customer testimonials and trust signals. Technically, the website employs modern JavaScript libraries, Google Analytics, and Google reCAPTCHA Enterprise for security and analytics, with a cookie consent mechanism in place to comply with privacy regulations. Security posture is strong with HTTPS enforced and secure forms, though some security headers are not explicitly detected. WHOIS data for the hugedomains.com domain is unavailable, likely due to privacy protection or query limitations, but the overall business credibility remains high. Contact is available via phone and a contact form, though no direct company emails are published.

AS Eesti Pagar is a well-established Estonian bakery company founded in 2010, specializing in a wide range of bread, pastry, and frozen bakery products. The company serves retail consumers and export markets, positioning itself as a key player in the Estonian bakery sector. Their website reflects a professional and consistent brand image with clear product categorization and marketing efforts. Technically, the website is built on WordPress using modern frameworks and libraries such as Foundation, jQuery, and Slick Slider, with integrated marketing and analytics tools including Google Analytics, Facebook Pixel, and Mailchimp. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS with a cookie consent mechanism compliant with GDPR, but lacks explicit security policies and some security headers. WHOIS data confirms the domain's legitimacy and long-term presence, matching the business profile. Overall, the website demonstrates a mature digital presence with room for improvement in security transparency and incident response readiness.

O

OÜ MyFinancier

myf.ee

42

MyFinancier is a small Estonian company providing an intelligent personal finance assistant service that helps users analyze cash flows and gain detailed insights into asset distribution. The website is professionally designed using WordPress with Elementor and optimized for SEO and mobile devices. It targets Estonian individuals seeking financial management tools. The company maintains a consistent brand presence with active social media profiles on Facebook, LinkedIn, and YouTube. The domain is registered with Elkdata OÜ since 2018, aligning with the business age and location. Technically, the site uses modern web technologies, including Google Analytics and Facebook Pixel for analytics and marketing, with a compliant cookie consent mechanism.

P

Puidukoda OÜ

puidukoda.eu

49

Puidukoda OÜ is a medium-sized Estonian manufacturing company specializing in high-quality planed softwood timber products, founded in 1997 and part of the French Groupe Rose. The company operates modern automated production lines with a capacity exceeding 225,000 m³ annually and offers additional finishing services such as painting and impregnation. Their market position is strong in Europe, supported by a professional website with multilingual support and e-commerce capabilities. Technically, the website is built on WordPress with WooCommerce and employs modern SEO and privacy compliance tools, including GDPR cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the company demonstrates a professional digital presence aligned with its business operations and compliance requirements.

S

Servodata Group

servodata.net

59

Servodata Group is a well-established IT services and solutions provider operating in the Czech Republic for over three decades. The company specializes in delivering professional business IT solutions including Red Hat, Open Source, Microsoft Licensing, JBoss, and IT training. They have a strong market position supported by multiple industry awards and a professional online presence. Technically, the website is built on WordPress with a modern tech stack including jQuery and Google Analytics, offering good mobile optimization and SEO. Security posture is solid with HTTPS and reCAPTCHA usage, though lacking some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Meidron is a small Estonian company founded in 2011, offering IT support and consulting services, EU funding project management, and environmental consulting. The company targets businesses and organizations requiring specialized consulting and support services. The website is simple and functional, providing basic business information and contact details, including email, phone, and LinkedIn profile. The market position appears niche and regional with a focus on professional service delivery. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. Hosting appears to be on Oracle Cloud infrastructure. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or frameworks are detected, indicating a custom or static site. From a security perspective, the domain is well-registered with a long history and transfer protection. However, the site lacks DNSSEC, visible HTTPS enforcement, and security headers. No privacy or cookie policies are present, and no consent mechanisms are implemented, indicating GDPR compliance gaps. The use of Google Analytics without cookie consent further impacts privacy compliance. No incident response or vulnerability disclosure information is provided. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

M

Mediapark

singleton.ee

58

Mediapark is an established digital agency specializing in modern web development, mobile app creation for Android and iOS, UI/UX design, testing, and support services. With a domain age dating back to 1995 and a broad international presence including offices across Europe and Asia, Mediapark serves a diverse clientele including notable brands such as Red Bull and Vodafone Zambia. The company positions itself as a one-stop-shop for digital product development, targeting businesses seeking scalable and high-performance digital solutions. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized and demonstrates good design and navigation quality. Hosting and DNS services leverage Cloudflare, enhancing performance and security. However, DNSSEC is not enabled, and security headers are absent, indicating room for security improvements. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA v3 for form protection, but lacks published security policies and incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which could expose the company to regulatory risks. Contact information is available primarily via contact forms and office addresses, with no direct emails or phone numbers publicly listed. Overall, Mediapark presents a professional and credible digital presence with a mature business history and solid technical foundation. Strategic enhancements in privacy compliance, security headers, and DNS security would further strengthen their security posture and regulatory adherence.

Mehiläinen Oy is a leading Finnish healthcare service provider offering comprehensive medical and health services across Finland. The website presents a professional and user-friendly interface, targeting Finnish residents seeking quality healthcare. The company operates both physical clinics and digital health services, positioning itself strongly in the Finnish healthcare market with a long history dating back to 1909. The website is built on modern technologies including React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room to improve transparency by publishing a dedicated security policy and incident response contacts. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

P

Pontos

pontos.fi

54

Pontos is a Finnish family-owned investment company focusing on selective investments both domestically and internationally. The website positions the company as an established player in the investment sector with a clear business model centered on strategic asset allocation. The digital presence is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Analytics, Hotjar, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good technical maturity with HTTPS enforcement and a responsive design, although some advanced security headers are missing. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and a detailed privacy policy. However, explicit contact information and terms of service are not prominently available, which could be improved for better business credibility and user trust. Overall, the website reflects a professional and trustworthy investment firm with room for enhanced security and transparency features.

Z

Zlick Ltd

zlick.it

49

Zlick Ltd operates a specialized paywall software service designed for WordPress subscription sites, targeting content creators, bloggers, podcasters, and media corporations. The company positions itself as an easy-to-use, high-conversion paywall solution that requires minimal technical setup, emphasizing a 10-minute integration and no need for developers. Their business model is subscription and transaction-based, with integrated CRM and analytics tools to help customers optimize monetization. The website reflects a professional and consistent brand image with clear messaging and trust indicators such as customer earnings and testimonials. Technically, the website is built on WordPress using Elementor and Yoast SEO, leveraging modern JavaScript libraries and Google Analytics for tracking. The site demonstrates good SEO optimization, mobile responsiveness, and moderate performance. Security best practices are observed with HTTPS enforcement and security headers, though some privacy compliance aspects like cookie consent are lacking. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. The WHOIS data aligns well with the website's claims, showing consistent registration details and no privacy protection, supporting legitimacy. Overall, Zlick's website is a credible and professional platform with a strong business focus and good technical implementation. Enhancements in privacy compliance and security transparency would further strengthen its position and user trust.

S

Sparta.com domain name is for sale. Inquire now.

sparta.com

52

The website www.sparta.com currently serves as a domain sales landing page advertising the premium domain name Sparta.com for purchase. It targets domain investors and businesses seeking a strong, memorable brand domain. The site offers a contact form for potential buyers to make offers but lacks direct company contact details or business entity information. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, Font Awesome, Google Fonts, Google Analytics, and Google reCAPTCHA to provide a responsive and secure user experience. However, no CMS or hosting provider information is evident. Security posture is moderate with HTTPS enabled and spam protection via reCAPTCHA, but no security headers or explicit privacy and cookie policies are present. WHOIS data is unavailable, indicating the domain is likely unregistered or expired, which aligns with the site’s purpose as a domain sales landing page but reduces trustworthiness for operational business use. Overall, the site is professionally designed but minimal in business and compliance information, resulting in a moderate risk profile.

R-Systems is an Estonian software development company specializing in hydrography and spatial data software solutions, founded in 1989. The company offers services including hydrographic survey software, spatial data processing, and sensor integration, targeting sectors such as military, air surveillance, logistics, and GIS. The website reflects a small, niche technology business with a long operational history but limited online presence and content depth. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. The site lacks modern frameworks or CMS and shows basic performance and SEO optimization. Mobile optimization and accessibility are minimal, indicating room for improvement in digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response details are provided, limiting transparency and trust. The use of Google Analytics without a consent mechanism further impacts privacy compliance. Overall, the website presents a moderate risk profile with no critical security issues detected but several compliance and usability gaps. Strategic improvements in privacy policies, security headers, mobile optimization, and contact transparency are recommended to enhance trust and compliance.

F

Fineltec Oy

fineltec.fi

50

Fineltec Oy is a well-established electronics manufacturing services (EMS) provider founded in 2003, specializing in contract manufacturing and assembly of electronics, electro-mechanics, and wiring harnesses. The company serves diverse industries including energy, industrial automation, instrumentation, defence, safety, building automation, and medical devices, positioning itself as a preferred partner with strong quality and environmental certifications such as ISO 9001, ISO 14001, and ISO 13485. Their business model focuses on providing comprehensive manufacturing solutions from prototypes to life-cycle services, supported by a subsidiary production site in Estonia. Technically, the website is built on WordPress with modern frameworks like Bootstrap and enhanced by SEO and analytics tools including Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized, has good navigation, and employs cookie consent mechanisms to comply with privacy regulations. Performance is moderate with a good balance of content richness and technical implementation. From a security perspective, the site enforces HTTPS with a solid SSL configuration but lacks DNSSEC and some recommended security headers. No vulnerabilities or exposed sensitive data were detected. The company demonstrates adherence to recognized quality and environmental standards but does not publicly provide an incident response or vulnerability disclosure policy, which could be improved. Overall, Fineltec presents a credible and professional online presence with strong business legitimacy and moderate to good security posture. Strategic recommendations include enhancing DNS security, adding security headers, publishing incident response contacts, and formalizing vulnerability disclosure to further strengthen trust and compliance.

C

Constructive

constructive.net.au

67

Constructive is a specialist recruitment consultancy operating in Australia since 2003, focusing on the Built Environment and Infrastructure sectors. The company offers permanent and contract recruitment solutions, franchise opportunities, and tailored hiring services to employers and jobseekers. The website reflects a professional and consistent brand with clear navigation and relevant content. Technically, the site uses modern web technologies including service workers, Google Analytics, and Elfsight widgets, hosted likely by Identity Digital Australia. Security posture is good with HTTPS and captcha-protected forms, but lacks explicit security headers and published privacy or cookie policies. WHOIS data is incomplete but registrar information aligns with Australian domain administration, supporting legitimacy. Overall, the site is functional and trustworthy but could improve compliance and security transparency.

B

Briti Eesti Kaubanduskoda

becc.ee

50

The British-Estonian Chamber of Commerce (Briti Eesti Kaubanduskoda) operates as a membership organization facilitating business connections and trade between Estonia and the United Kingdom. Established in 2010, it serves a niche market of businesses engaged in bilateral commerce, providing networking opportunities and member support. The website reflects a professional and consistent brand image with clear business focus and relevant content for its target audience. Technically, the website is built on WordPress with WooCommerce and BuddyPress plugins, leveraging modern web technologies such as jQuery, Google Analytics, and Google Tag Manager for analytics and user engagement tracking. The site is hosted under the domain registrar Zone Media OÜ, with a stable and long-standing domain registration since 2010. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection, alongside a cookie consent mechanism compliant with GDPR principles. However, explicit security headers are not detected, and there is a lack of published security policies or incident response contacts. Privacy and terms of service pages are missing, representing compliance gaps. Overall, the website presents a trustworthy and credible business presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

R

Respo Haagised AS

respo.ee

46

Respo Haagised AS is a well-established Estonian company founded in 1990, specializing in the manufacturing and sale of trailers, accessories, and spare parts. It holds a market leader position in Estonia and is a significant player in the Baltic and Scandinavian regions. The company operates a modern e-commerce platform with multi-language support and offers innovative services such as 24/7 self-service trailer sales points. The website reflects a mature digital infrastructure built on Magento, integrating advanced tracking and marketing tools like Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's business credibility and market presence.

T

Tallinna Tehnikaülikool (TalTech)

gi.ee

64

Tallinna Tehnikaülikool's Geoloogia instituut is a reputable academic unit specializing in geology, mineral resources, and mining engineering. It serves as a key educational and research hub within Estonia, offering undergraduate, graduate, and doctoral programs, alongside active research groups and modern laboratories. The institute maintains a strong presence in the academic community through events, publications, and collaborations. Technically, the website employs modern frameworks such as Next.js and integrates multiple analytics and marketing tools while ensuring GDPR-compliant cookie consent. Security posture is strong with HTTPS enforcement and bot protection mechanisms, though explicit security policies and incident response information are not publicly detailed. Overall, the site reflects a professional, trustworthy, and well-maintained digital presence aligned with its institutional mission.

Addenda OÜ is an Estonian-based professional training and consulting company established in 2010. The company offers a wide range of training courses, including construction, occupational safety, accounting, and legal topics, both in-person and via an e-learning platform called Addenda e-akadeemia. The website targets Estonian professionals and organizations seeking continuing education and compliance training. The business maintains a stable market position with a comprehensive course catalog and partnerships with local organizations. Technically, the website uses a custom CMS with legacy JavaScript libraries such as jQuery 1.11.1, and integrates common analytics and advertising tools like Google Analytics and Facebook Pixel. The site is mobile optimized and SEO friendly but lacks modern security headers and updated libraries. Security posture is moderate with HTTPS enabled but missing explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

F

Fort Aero

fort.aero

51

Fort Aero is a specialized aviation service provider focused on corporate jet management, sales, acquisition, maintenance, and charter services. Established since 1997, the company positions itself as a trusted and experienced player in the business aviation sector, primarily serving corporate jet owners and operators. The website reflects a professional and consistent brand image with comprehensive service descriptions and multiple contact channels. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable due to privacy protection, which is common for this business type but slightly reduces trust. Overall, Fort Aero presents a credible and professional online presence with room for improvement in privacy and security transparency.

Z

Zone Media OÜ

depile.ee

51

Depile.ee is an established Estonian e-commerce website specializing in beauty, health, and wellness products. The site offers a wide range of branded products including hair care, nail care, body care, massage items, and related accessories. The business targets both consumers and professionals in the beauty sector, primarily serving the Estonian market. The company behind the domain is Zone Media OÜ, with a domain age dating back to 2010, indicating a mature online presence. Technically, the website is built on Magento 2, leveraging modern web technologies such as RequireJS, jQuery, and FontAwesome. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site demonstrates good mobile optimization and SEO practices, with a clear navigation structure and responsive design. Performance is moderate, with room for optimization. From a security perspective, the website enforces HTTPS and includes several security headers, contributing to a good security posture. Cookie consent is implemented with a detailed mechanism allowing users to manage preferences, which aligns with GDPR requirements. However, the absence of a publicly accessible privacy policy and terms of service pages represents a compliance gap. No critical vulnerabilities or exposed sensitive data were detected. Overall, Depile.ee presents a professional and trustworthy e-commerce platform with solid technical foundations and security practices. To enhance compliance and trust, it is recommended to publish comprehensive privacy and terms of service documents and improve accessibility features. Regular security audits and updates to third-party scripts will further strengthen the site's security posture.

N

Nordic Hunting Club

nordichuntingclub.com

55

Nordic Hunting Club is a specialized outfitter offering guided hunting experiences in Estonia, focusing on big game and migratory birds. The company positions itself as a high-quality service provider with over 15 years of experience, targeting hunters interested in trophy hunting in Northern Europe. The website is professionally designed using WordPress and the Avada theme, with SEO optimized via Yoast plugin and enriched with structured data. The technical infrastructure includes modern JavaScript libraries and analytics tools, providing a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing, raising concerns about domain legitimacy and registration consistency. Overall, the site is functional and professional but requires improvements in privacy compliance and domain registration transparency.

K

Kuusakoski Oy

kuusakoski.com

77

Kuusakoski Oy is a well-established company specializing in expert-level recycling services, focusing on restoring value to waste materials by collecting, processing, and producing new raw materials. With a history spanning over 100 years, Kuusakoski positions itself as a pioneer in the circular economy, serving industrial and business customers worldwide. Their key services include material processing, sale of recycled raw materials, data security and reuse, logistics, analysis and research, and local service offerings. The company emphasizes sustainability and holds certifications such as EcoVadis Silver. Technically, the website employs modern JavaScript libraries and tracking tools including Google Analytics, Google Tag Manager, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. However, explicit security headers are not detected, and no incident response or vulnerability disclosure policies are published, indicating areas for improvement in security maturity. The security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, but the absence of WHOIS data and domain registration details introduces some uncertainty regarding domain legitimacy. The website provides clear contact information, including official company emails and phone numbers, and maintains active social media profiles, enhancing trustworthiness. Overall, Kuusakoski demonstrates a mature digital presence aligned with its business goals, though it should address security header implementation and publish incident response policies to strengthen its security posture and compliance stance.

C

CBS Pakistan

cbspakistan.com

41

CBS Pakistan is a medium-sized technology company founded in 2009, specializing in customized business software solutions including ERP systems for retail, manufacturing, and education sectors, as well as UI/UX design and website development services. The company positions itself as an experienced provider with over 16 years of continual excellence and more than 1000 projects delivered, targeting businesses seeking tailored technology solutions to optimize operations and growth. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and uses Cloudflare for DNS and hosting services. Google Analytics is integrated for user tracking. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and functional but could improve in privacy and security transparency.

Stimscape OÜ is a small specialized service provider operating primarily in Estonia and Finland, offering digital imaging technician (DIT) services and technical solutions for film and TV production sets and studios. Their key offerings include on-set data management, LTO archiving, and IT solutions tailored to the media production industry. The website presents a professional image with clear navigation, client logos, and references to notable film and TV projects, positioning the company as a niche technical partner in the media sector. Technically, the website uses a basic but functional technology stack including jQuery, Google Fonts, Font Awesome, and Google Analytics for user tracking. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. No CMS or hosting provider details are evident. SEO is basic with meta keywords and description present but no advanced structured data or Open Graph tags. From a security perspective, the site lacks critical security headers and does not provide privacy or cookie policies, which impacts GDPR compliance. No forms or user input fields reduce attack surface, but the absence of incident response contacts and security policies indicates a low maturity in security governance. The WHOIS data aligns well with the business claims, showing a consistent registrant in Estonia, supporting domain legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security posture, and more comprehensive contact and policy disclosures to increase trust and reduce risk.

E

Elkdata OÜ

remedyway.ee

45

Wiru Mill operates an e-commerce website specializing in organic and specialty food products such as specialty breads, organic olive oil, and buckwheat products. The business is relatively new, established in 2023, and targets consumers interested in healthy and organic food options. The website is built on WordPress with WooCommerce, leveraging common plugins and Google services for analytics and advertising. The technical infrastructure is standard for small to medium e-commerce sites, hosted by Elkdata OÜ, which is also the domain registrar, indicating consistency and legitimacy. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and explicit privacy or cookie policies. The absence of contact information and compliance documents reduces trust and privacy compliance scores.

A

AS Eesti Raudtee

evr.ee

69

AS Eesti Raudtee is a state-owned enterprise responsible for the management, maintenance, and administration of Estonia's railway infrastructure. The company plays a critical role in ensuring smooth, efficient, and safe railway operations across the country. Their website reflects a professional and consistent brand image, targeting a broad audience including business clients, passengers, and potential employees. The site offers key services such as infrastructure information, project updates, job vacancies, and customer portals. Technically, the website is built on Joomla CMS with modern frontend technologies and integrates Google Analytics and Adform for analytics and advertising, all managed with a robust cookie consent mechanism. Security-wise, the site enforces HTTPS, uses bot protection cookies, and shows no signs of exposed sensitive data or vulnerabilities. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website is well-structured, performant, and trustworthy, supporting the company's position as a key national transportation infrastructure operator.

C

COMBICON OÜ

combicon.ee

50

COMBICON OÜ is a small Estonian company specializing in the design, construction, and development of production, warehouse, and commercial buildings, including additions and real estate acquisition assistance. The company targets local businesses and individuals seeking construction and real estate services, positioning itself as a professional local player with a clear focus on project-based services. The website is professionally designed, mobile-optimized, and uses modern web technologies including Voog CMS, Google Analytics, and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy but could improve transparency and compliance.

L

LandCredit AS

landcredit.ee

44

LandCredit AS is an Estonian financial services company specializing in loans secured by agricultural and forestry land. Their website targets farmers, forestry businesses, and renewable energy project developers, offering flexible loan products with faster processing times than traditional banks. The company positions itself as a niche lender contributing to rural development in Estonia. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Hotjar, and CookieYes for GDPR compliance. The site is well-structured, mobile-optimized, and provides clear contact channels and customer testimonials, enhancing trust and user experience. Security posture is solid with HTTPS and secure form handling, though improvements are recommended in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a mature digital presence with good compliance and business credibility.

N

Nord Property Ltd

nordproperty.com

43

Nord Property Ltd is a medium-sized real estate company based in Estonia, specializing in international real estate services including brokering, property management, consulting, appraisal, investment counseling, and development sales. The company targets property buyers, sellers, and investors primarily in Estonia and Spain, offering multilingual support and a professional service portfolio. The website is well-structured with clear navigation and relevant content, supporting a good user experience and moderate mobile optimization. Technically, the site uses common analytics and tracking tools such as Google Analytics and Google Tag Manager, along with Google Maps API for location services. However, no CMS or hosting provider details were identified, and performance is moderate.

The website cvok.ee is an established Estonian job portal operated by Zone Media OÜ since 2010. It offers job postings, CV database services, and recruitment-related offerings targeting job seekers and employers in Estonia. The platform includes additional services such as accounting and CV expert advice, positioning itself as a comprehensive employment resource in the local market. The site content is primarily in English with options for Estonian and Russian, catering to a diverse audience. Technically, the site uses legacy HTML and JavaScript technologies, including an outdated jQuery version, and integrates Google Analytics for traffic monitoring. The design and user experience are basic, with limited mobile optimization and accessibility features. Security posture is moderate; HTTPS is implied but no advanced security headers or cookie consent mechanisms are present. The WHOIS data confirms a consistent and legitimate domain registration with no privacy protection, enhancing trust. Overall, the site is functional but would benefit from modernization and improved security and privacy compliance.

E

Eliko Location Technologies OU

eliko.ee

61

Eliko Location Technologies OU is a technology company specializing in next-generation location tracking solutions based on ultra-wideband (UWB) technology. Their website presents a mature and professional digital presence, highlighting their RTLS products, case studies with reputable clients such as Bosch, and a strong emphasis on accuracy, reliability, and tailored solutions for industrial and immersive applications. The company targets machine builders, enterprise software providers, and manufacturing operations, positioning itself as a trusted provider with over 200 companies relying on their technology. Technically, the website is built on WordPress and leverages modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA for security and analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive SEO metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements a cookie consent mechanism, demonstrating awareness of privacy and security best practices. However, explicit privacy policies, terms of service, and security policies are not found, representing areas for improvement. DNSSEC is not enabled, which could enhance DNS security. Overall, the security posture is good but could be strengthened with more explicit documentation and technical controls. The domain WHOIS data aligns well with the website content, showing consistent registrant information and appropriate domain age, supporting the legitimacy of the business. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Strategically, Eliko is well-positioned in the RTLS market with a solid technical foundation and trusted customer base. Enhancing transparency around privacy, security policies, and incident response would further strengthen trust and compliance posture.

M

METUS

metus.com

42

METUS is a specialized provider of professional audio and video systems and solutions, targeting sectors such as broadcast, medical, military, corporate, education, government, and news agencies. The company offers a suite of products including media asset management, ingest and streaming solutions, and NDI stream management tools. The website reflects a niche B2B business model with a focus on media technology professionals. Technically, the site uses common JavaScript libraries and tracking tools, hosted on HostGator, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. The domain is long-established since 2002, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced security and privacy practices.

V

Via 3L

via3l.com

40

Via 3L is a Baltic-based third-party logistics company specializing in warehouse logistics, central warehousing, and international transportation services. Positioned as a leading logistics provider in the Baltic region, the company targets businesses requiring efficient supply chain and transport solutions. The website reflects a professional digital presence with clear branding and relevant service descriptions. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO readiness. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the website demonstrates moderate risk with room for enhanced compliance and security maturity.

R

Rederij Groen

rederijgroen.nl

36

Rederij Groen is a well-established Dutch offshore shipping and service company specializing in various types of support vessels including seismic supply, guard vessels, and crew tenders. Founded in 1973, the company has grown to operate a modern fleet serving global offshore energy clients. The website reflects a mature business with clear service offerings, a detailed company history, and recognized ISO certifications that emphasize quality, safety, and environmental responsibility. Technically, the site is built on WordPress with modern plugins and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic but includes a cookie consent banner and a privacy policy. Overall, the site is professional, trustworthy, and well-aligned with the company’s business profile.

A

Advokaadibüroo LINDEBERG

lindeberg.legal

30

Advokaadibüroo LINDEBERG is a well-established Estonian law firm providing comprehensive legal services across major law domains including private law, public law, IT and intellectual property, and dispute resolution. The firm serves a diverse clientele including businesses, individuals, and the public sector, with a strong reputation in litigation and recognized partnerships such as with the Estonian E-commerce Association. Their website reflects a professional and consistent brand image, multilingual support, and a broad service offering. Technically, the site is built on WordPress with WooCommerce and enhanced by various plugins for SEO, analytics, and marketing, demonstrating a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy and cookie policies are present and GDPR compliant, with clear contact information and active use of analytics and marketing pixels under consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the firm's market position as a leading legal service provider in Estonia.

V

Veebimajutus.ee

veebimajutus.ee

55

Veebimajutus.ee is an Estonian technology service provider specializing in domain registration, web hosting, website creation, and email hosting services. The company targets Estonian businesses and individuals seeking an integrated and user-friendly platform to manage their online presence. Their market position is that of a trusted local provider with a focus on ease of use and customer support. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, and enforces HTTPS with strong security headers, indicating a mature digital infrastructure. However, the absence of explicit privacy and cookie policies represents a compliance gap that should be addressed. Security posture is strong with no visible vulnerabilities, but incident response and security policies are not publicly documented. Overall, the website is professional, trustworthy, and well-structured, though improvements in privacy compliance and transparency are recommended.

OÜ Tormitehnika is a small Estonian company specializing in manufacturing and selling marine equipment such as floating docks, buoys, swimming ladders, and boat stands. The website serves as a basic informational portal targeting maritime professionals and boat owners primarily in Estonia. The business operates in a niche market with a local focus and provides clear contact information but lacks comprehensive online policies and advanced digital features. Technically, the website is built on an outdated WordPress 4.9.3 platform with legacy jQuery libraries, which poses security risks and limits modern functionality. The site uses Google Analytics for visitor tracking but does not implement cookie consent or privacy policies, indicating low privacy compliance. Security posture is weak due to missing security headers and outdated software, although HTTPS is enabled. Overall, the website is functional but requires modernization and improved security and privacy practices to enhance trust and compliance.

C

Colombo Stock Exchange

cse.lk

72

The Colombo Stock Exchange (CSE) is the primary stock exchange in Sri Lanka, serving as a critical financial market infrastructure provider. The website offers comprehensive information on equity and debt trading, market disclosures, financial reports, and investor education. It targets investors, listed companies, and financial professionals within Sri Lanka and the broader financial community interested in Sri Lankan markets. The CSE holds a significant market position as the national stock exchange, facilitating capital market activities and supporting economic growth.

K

Kõnelev Trumm OÜ

eksootika.ee

49

The website eksootika.ee represents a small Estonian e-commerce business named Kõnelev Trumm OÜ, specializing in exotic goods sourced from various Asian countries such as India, Indonesia, Thailand, and Nepal. The site offers a range of products including ethnic musical instruments, semi-precious stones, incense, clothing, and jewelry. The business targets consumers interested in unique Asian cultural products and operates primarily through an online store with additional wholesale options. The website is built on the Voog CMS platform, leveraging Voog's e-commerce capabilities, and integrates modern JavaScript libraries and Google Analytics for tracking and marketing purposes. Hosting is provided by Zone Media OÜ, consistent with the domain registration data.

A

Apifonica

apifonica.com

80

Apifonica is a medium-sized telecommunications technology company specializing in AI-powered customer communication solutions including voicebots, SMS marketing, phone number masking, and cloud telecom platforms. The company positions itself as an established player with over 10 years in the market, serving over 200 clients with thousands of integrations. Their technical infrastructure leverages modern web technologies such as Vue.js and integrates with major analytics and marketing tools like Google Analytics and HubSpot. Security posture is strong, evidenced by ISO 27001 certification, regular penetration testing, and GDPR compliance. The website is professionally designed, mobile-optimized, and provides comprehensive legal and security documentation. However, the absence of WHOIS registration data for the domain introduces some uncertainty about domain legitimacy, though the overall business credibility remains high based on content and certifications. Strategic recommendations include improving transparency on domain registration and publishing additional security headers and a security.txt file.

W

Whirlpool Europe

whirlpool.eu

77

Whirlpool Europe operates as the regional web presence for Whirlpool Corporation, a leading global manufacturer of home appliances. The website serves multiple European markets with localized content and provides product information, customer support, and store locator services. The site demonstrates a professional design with consistent branding and a focus on European consumers. Technically, the website employs modern JavaScript libraries, Google Analytics, Google Tag Manager, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is served over HTTPS with good SSL configuration, though it lacks some advanced security headers. Privacy compliance is partially addressed through cookie consent mechanisms, but explicit privacy policy and terms of service documents were not detected in the provided content. No contact information or forms were found, which may impact user trust and compliance. Overall, the domain appears legitimate and consistent with a major brand, though WHOIS data is privacy protected as typical for .eu domains.

Welement AS is a medium-sized Estonian company specializing in offsite timber construction solutions, serving contractors, engineers, and developers primarily in Northern Europe. Founded in 2015 and part of the Rand & Tuulberg Group, Welement offers prefabricated timber frame elements and facade systems, positioning itself as an innovative partner in the construction industry. The website reflects a professional and consistent brand with clear business messaging and multiple case studies showcasing their projects. Technically, the site is built on modern frameworks like Gatsby and React, with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Privacy compliance is basic, lacking a dedicated privacy policy page, which is a notable gap. Overall, the domain registration and WHOIS data support the legitimacy and maturity of the business.

C

Crane Service Inc

craneserviceinc.com

53

Crane Service Inc is a well-established North American company specializing in heavy lift, rigging, heavy hauling, alternative movement, and warehouse/storage services. Founded in 1998, the company positions itself as a trusted leader with a modern fleet and a strong safety record. Their website reflects a professional and consistent brand image targeting industrial clients requiring specialized crane and rigging services. Technically, the site is built on WordPress with the Divi theme and integrates modern JavaScript libraries and Google Analytics for tracking. Security posture is good with HTTPS and reCAPTCHA implemented, though there is room for improvement in DNS security and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is credible and trustworthy, supporting the company's market position.

P

Producement

producement.com

59

Producement is a small Estonian technology company specializing in startup product engineering services. Founded in 2017, the company helps founders rapidly build and scale their products while investing sweat equity to become shareholders. Their key services include product engineering, full-stack development, and tech recruitment. The company positions itself as a niche partner for early-stage startups, aiming to build successful startups and help them become independent. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. The technical infrastructure includes modern tools such as Google Analytics and Cloudflare DNS, but hosting provider details are not explicit. Security posture is solid with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, including email and physical address, along with social media presence. Overall, the website is trustworthy and credible but could improve privacy and security transparency.

A

Avera-Trading AS

avera.ee

44

Avera-Trading AS operates a professional e-commerce website focused on retailing cleaning chemicals, equipment, and hygiene products primarily in Estonia. Established in 2010, the company presents a well-structured online catalog with clear pricing and product categorization, targeting businesses and consumers seeking cleaning solutions. The website leverages WordPress and WooCommerce platforms, enhanced with popular plugins such as Yoast SEO and WPBakery Page Builder, indicating a mature digital infrastructure. Integration of Google Analytics and Tag Manager reflects a data-driven approach to marketing and user behavior analysis. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and privacy policies are missing, representing compliance and security improvement opportunities. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and explicit security disclosures.

U

UPRENT Ltd.

uprent.eu

47

UPRENT Ltd. is a regional provider specializing in pump rental, energy solutions, and construction equipment across Latvia, Estonia, Lithuania, and Poland. The company offers a broad range of rental equipment including pumps, excavators, generators, and trench support systems, complemented by specialist project services. Their market position is strong within the Baltic region and Poland, supported by a multilingual website and localized contact points. The business model focuses on equipment rental and sales with value-added specialist solutions for industrial and construction clients. Technically, the website is built on a modern WordPress platform with WooCommerce and WPBakery Page Builder, integrating Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility. Security measures include HTTPS, reCAPTCHA on forms, and nonce tokens, though explicit security headers and policies are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a published privacy policy and security incident response details indicates room for improvement in compliance and transparency. Cookie consent mechanisms are implemented, supporting GDPR compliance to some extent. Overall, UPRENT presents a professional and trustworthy online presence with comprehensive contact information and clear business focus. Strategic enhancements in privacy documentation, security policies, and accessibility would further strengthen their digital maturity and compliance standing.

I

Import2

import2.com

64

Import2 is a technology company specializing in automated data migration services for businesses transitioning between various business applications. Their platform supports over 50 apps and offers features such as free sample migrations, CRM backup, and CSV import/export. The company positions itself as a reliable and cost-effective solution with a money-back guarantee, targeting businesses seeking seamless data transfer without technical complexity. Technically, the website is built on the Tilda CMS platform and integrates multiple modern analytics and marketing tools including Google Analytics, HubSpot, FullStory, Hotjar, and LinkedIn Insight. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and incident response disclosures. The absence of WHOIS registration data is a notable concern, impacting domain trustworthiness despite the professional web presence. Overall, Import2 presents a mature SaaS offering with solid digital infrastructure but would benefit from enhanced transparency in domain registration and security policies.

S

STARK Suomi

stark-suomi.fi

68

STARK Suomi operates as a significant retail entity in the Finnish construction sector, supplying building materials and related products primarily to professional builders and contractors. The website leverages modern web technologies including Angular and integrates with Google Tag Manager, Google Analytics, and Genesys Messenger for customer engagement and analytics. A comprehensive cookie consent mechanism is implemented, reflecting good privacy compliance practices. However, explicit privacy and security policies beyond cookie management are not directly present on the site. The security posture is strong with HTTPS and security headers properly configured, and no critical vulnerabilities detected. Overall, the site demonstrates a mature digital presence suitable for its market segment, though improvements in direct contact information and policy transparency could enhance trust and compliance.

E

Edhotels OÜ

edreamhotels.com

52

Edhotels OÜ operates a specialized hospitality technology and web design business focused on providing hotel sales and management software (BOUK) and website design services primarily in Estonia and the Baltic region. The company targets hotels, guest apartments, spas, and other accommodation providers, offering integrated booking engines and management tools to streamline operations and increase direct bookings. Their market position is that of a small but established regional player with a decade-plus history, supported by client testimonials and a professional online presence. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Facebook Pixel, Hotjar, and MailerLite for marketing automation. The site is mobile-optimized, SEO-friendly, and uses consent management for GDPR compliance. Performance is moderate with good user experience and navigation clarity. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and lack of explicit security or incident response policies are areas for improvement. The domain WHOIS data is missing, which raises concerns about domain legitimacy and registration consistency, potentially impacting trust. Overall, the website and business demonstrate professionalism and technical maturity, but the domain registration anomaly requires verification. Strategic recommendations include enhancing security headers, publishing security policies, and resolving WHOIS discrepancies to strengthen trust and compliance.