Security Directory

P

PersonaliDisain

personalidisain.ee

44

PersonaliDisain is an Estonian-based small business specializing in strategic human resource consulting and development services. The company offers a range of HR-related services including consulting, system development, surveys, recruitment, training, and coaching. Their market position is that of a niche HR consulting partner serving organizations seeking to optimize their personnel management. The website is professionally designed using WordPress and Bootstrap, with good mobile optimization and clear navigation. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Leadfeeder, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and use of reCAPTCHA on forms, though security headers could be improved. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, though no terms of service or security policy pages were found. Overall, the domain registration is consistent and legitimate, supporting the business credibility. Recommendations include enhancing security headers and reviewing third-party scripts to reduce risk.

F

FinEst-Hall Factory OÜ

pvc-hall.com

47

FinEst-Hall Factory OÜ is a specialized manufacturer and service provider of PVC hangars and awnings, serving primarily B2B clients in Northern Europe. The company offers a full turnkey solution including design, manufacturing, installation, maintenance, and expansion of modular PVC structures, complemented by metal processing services such as plasma cutting and tube laser. Their market position is supported by multiple ISO certifications and a portfolio of completed projects, emphasizing quality, flexibility, and customer satisfaction. Technically, the website is built on WordPress with WooCommerce and employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel. The site is well-optimized for SEO, mobile-friendly, and accessible, with structured data enhancing search engine visibility. Cookie consent and privacy policies are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS with a good SSL configuration and enforces domain transfer protection. However, it lacks some advanced security headers and does not publish a dedicated security policy or incident response information. Tracking and marketing tools are used responsibly with user consent mechanisms in place. Overall, the website presents a professional, trustworthy, and compliant digital presence for a small manufacturing business. Recommendations include enhancing security headers, enabling DNSSEC, and publishing security and incident response policies to further strengthen trust and compliance.

T

TBC Bank

tbcbank.ge

58

TBC Bank is a leading financial institution in Georgia, operating since 2000. The website serves as a digital portal for banking services targeting retail and corporate customers. The site is built as a modern Angular single-page application hosted on AWS infrastructure, integrating multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Visual Website Optimizer, and Zendesk Chat. While the technical implementation is modern and performant with good mobile optimization, the site lacks visible privacy and terms of service policies, as well as explicit contact information, which are critical for user trust and regulatory compliance. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. The domain WHOIS data is consistent with a legitimate, long-established Georgian bank, using privacy protection appropriately. Overall, the website is professional but could improve transparency and compliance documentation.

R

Reaalprojekt OÜ

reaalprojekt.ee

43

Reaalprojekt OÜ is a well-established infrastructure design and engineering company based in Estonia with over 20 years of experience. The company offers a broad range of services including project management, geodesy, and geotechnical investigations, serving clients primarily in Estonia and the Baltic region with subsidiaries in Latvia, Lithuania, and Sweden. Their website reflects a professional and consistent brand image, showcasing a strong portfolio and certifications such as ISO, which enhance their credibility. Technically, the site is built on WordPress with modern plugins and supports multilingual content, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the website demonstrates a mature digital presence aligned with the company's business stature and regional market position.

W

WOW EVENTS

wowevents.eu

43

WOW EVENTS is an established Estonian event management company with over 23 years of experience, specializing in corporate events such as conferences, client events, large-scale festivals, and internal communications. The company positions itself as a trusted and professional partner in the Estonian market, offering comprehensive event planning and production services. Their website reflects a mature digital presence with a professional design, clear navigation, and extensive service descriptions targeting business clients in Estonia. Technically, the website is built on WordPress using the Divi theme and integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and MonsterInsights. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced, but explicit security headers are not clearly detected. No critical vulnerabilities or exposed sensitive data were found in the content. Privacy compliance is an area for improvement as no explicit privacy or cookie policies were found, and user tracking is extensive via multiple third-party services. The WHOIS data is not publicly available due to EURid privacy policies, which is common for .eu domains but reduces transparency. Contact information is clearly provided with company domain emails and phone numbers, and social media presence is strong across major platforms. Overall, the website and business appear legitimate and professional, with minor gaps in privacy compliance and WHOIS transparency. Strategic recommendations include adding comprehensive privacy and cookie policies, enhancing security headers, and improving accessibility to strengthen trust and compliance.

2

2ood / Oliver Oberg

2ood.com

56

The website '2ood / Oliver Oberg' represents a small, award-winning digital design studio specializing in creating user experiences, branding, and digital identities. The site showcases a portfolio of projects including corporate websites, branding, app design, and e-commerce solutions, targeting businesses seeking creative digital services. The business model is service-oriented, focusing on bespoke digital design and branding solutions. Technically, the website employs modern JavaScript libraries and Google Analytics for tracking, with a moderate performance and good mobile optimization. However, no CMS or hosting provider details are evident, and accessibility features are basic. Security posture is moderate with HTTPS implied but no visible security headers or explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact information is provided on the main page, which impacts business credibility. WHOIS data for the subdomain is unavailable, which is typical for subdomains but reduces transparency. Overall, the site is professional and functional but would benefit from enhanced security and compliance disclosures.

H

Harku Vallavalitsus

harku.ee

50

Harku Vallavalitsus operates the official municipal government website for Harku vald, a coastal municipality in Estonia near Tallinn. The website serves as a comprehensive portal providing residents and stakeholders with access to municipal information, public services, community news, planning documents, and e-services. The site is well-structured with extensive navigation menus covering various sectors such as social services, education, environment, and governance. The target audience primarily includes local residents and businesses within the municipality. The business model is that of a government entity providing public information and services online. Technically, the website is built on the Liferay portal platform, utilizing technologies such as jQuery, Google Analytics, Hotjar, and Font Awesome. The site is accessible on both desktop and mobile devices with good mobile optimization and responsive design. Performance is moderate, and SEO practices are adequately implemented with proper meta tags and structured navigation. However, the use of an outdated jQuery version presents a moderate security risk. From a security perspective, the website enforces HTTPS and includes some security headers, but lacks advanced security policies such as Content Security Policy or published incident response procedures. No cookie consent mechanism is present, which may impact GDPR compliance. Analytics tools like Google Analytics and Hotjar are used, indicating moderate user tracking. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website demonstrates a solid business credibility and technical foundation appropriate for a local government portal. Key areas for improvement include updating JavaScript libraries, implementing cookie consent, publishing security and incident response policies, and enhancing privacy compliance measures. These steps will strengthen the security posture and regulatory adherence of the site.

T

TRAFF OÜ

traff.co

53

TRAFF OÜ operates a sophisticated online marketing platform that connects advertisers and publishers through its proprietary AdExchange system. The company focuses on delivering targeted advertising solutions using advanced audience analytics, campaign optimization, and a variety of digital marketing tools. Positioned as a medium-sized technology company based in Estonia, TRAFF OÜ serves a global audience with a strong emphasis on quality traffic and conversion metrics. The website reflects a professional and consistent brand image with comprehensive service offerings and clear contact channels. Technically, the website employs modern web technologies including jQuery, Google Analytics, Yandex Metrika, and Google reCAPTCHA to ensure both functionality and security. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could enhance its posture. The presence of multiple analytics and tracking tools indicates a moderate level of user tracking balanced with privacy compliance measures. From a security perspective, the site uses HTTPS exclusively and integrates CAPTCHA for form submissions, reducing the risk of automated abuse. However, the absence of explicit security headers and incident response information suggests room for improvement in security maturity. The WHOIS data is privacy protected, which is common for this business type, and the website provides sufficient company information to establish legitimacy. Overall, TRAFF OÜ presents a credible and professional online marketing platform with a solid technical foundation and good privacy compliance. Strategic enhancements in security policies and transparency could further strengthen trust and resilience against emerging threats.

D

Dashbird Inc.

dashbird.io

68

Dashbird Inc. is a technology company specializing in serverless observability and troubleshooting solutions. Their platform offers agentless monitoring, error detection, and end-to-end visibility across cloud-native infrastructures, primarily targeting developers, DevOps, security teams, and architects working with serverless applications. Recognized as a Gartner Cool Vendor in observability, Dashbird serves thousands of users with a SaaS business model focused on usage-based pricing. The company is headquartered in San Francisco and has been operational since 2017. Technically, the website is built on WordPress and leverages a modern tech stack including Google Analytics, Google Tag Manager, Intercom, HubSpot Forms, Hotjar, and other marketing and analytics tools. Hosting is likely on AWS, supported by DNS records. The site demonstrates good SEO optimization, mobile responsiveness, and a professional design with clear navigation and rich content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. No vulnerability disclosure or security.txt file is present. The domain registration is mature and consistent with the business claims, though the registrant country differs from the business address, likely due to registrar location or privacy. Overall, Dashbird presents a strong business and technical profile with good privacy compliance and trust indicators. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to improve security posture and trust further.

Z

Zone Media OÜ

artist.ee

49

Artist.ee is a specialized Estonian marketing and media company operating since 2010 under Zone Media OÜ. The company focuses on retail and service environments, offering services such as marketing, media, audio design, studio production, technical audio solutions, and advertising screens. Their market position is strong within Estonia, targeting retail businesses and brands aiming for effective in-store and service environment communication. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern libraries and Google Analytics for tracking. However, it lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is good with HTTPS enabled and no exposed sensitive data, but missing security headers and vulnerability disclosure mechanisms indicate room for improvement. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

H

Huntloc

huntloc.com

57

Huntloc is a technology company specializing in real-time hunting tracking applications and GPS-GSM tracking devices for hunting dogs. Founded in 2013 and based in Estonia, the company targets hunters and hunting dog owners with a niche product offering that enhances hunting efficiency and safety. The website is built on WordPress with WooCommerce, leveraging modern web technologies such as Bootstrap and FontAwesome, and integrates extensive analytics and tracking tools to monitor user engagement. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent mechanisms in place but no visible privacy policy or terms of service. Overall, the site presents a professional and consistent brand image with moderate trustworthiness.

R

RMIT University

rmit.edu.au

61

RMIT University is a large, internationally recognized educational institution specializing in technology, design, and enterprise education. It offers a broad range of undergraduate, postgraduate, vocational, and online courses, serving a diverse audience including students, alumni, staff, and research partners. The website reflects a mature digital presence with consistent branding and comprehensive navigation tailored to its academic and global audience. Technically, the site leverages Adobe Experience Manager CMS and integrates multiple analytics and marketing tools, indicating a sophisticated digital marketing strategy. Security posture is generally strong with HTTPS enforced and no visible sensitive data exposure, though the absence of explicit security headers and privacy policies suggests room for improvement. The WHOIS data is privacy protected, which is typical for Australian domains and does not detract from the domain's legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer security communication.

P

PRIA

pria.org

60

PRIA is a well-established non-profit organization founded in 1982, specializing in participatory research, training, and capacity building to empower citizens and civil society in India and globally. The organization focuses on gender equality, sustainable urban futures, and participatory governance, positioning itself as a reputable leader in its sector. The website reflects a mature digital presence with good content quality and consistent branding. Technically, the site uses modern JavaScript libraries and CSS frameworks, hosted via GoDaddy, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and published security policies. Privacy compliance is basic, with no cookie consent mechanism despite use of tracking tools. Overall, PRIA demonstrates strong business credibility and trustworthiness, though improvements in security and privacy practices are recommended.

E

ESA-BIC Estonia

esabic.ee

58

ESA-BIC Estonia is a specialized business incubation center affiliated with the European Space Agency, focused on supporting startups and innovators leveraging space technologies for non-space markets. The organization offers funding, technical and business mentoring, IP support, and access to a broad international network, positioning itself as a niche incubator within the technology sector in Estonia. The website reflects a professional and consistent brand image with clear messaging and calls to action targeting startups and entrepreneurs in the space technology domain. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile devices, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and use of reCAPTCHA, but could benefit from enhanced security headers and published security policies. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with no critical security issues detected.

A

AS Emor

emor.ee

39

Kantar Emor is a reputable Estonian market research and data analytics company providing comprehensive services such as trend studies, social research, brand and communication analysis, and media research. The company targets businesses and organizations in Estonia seeking reliable data to make informed decisions. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations, demonstrating good technical infrastructure and content management practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility in the market research sector.

A

Anju Software, Inc.

anjusoftware.com

61

Anju Software, Inc. is a medium-sized, customer-focused software company specializing in life sciences technology solutions. Their offerings include adaptable software suites for clinical research, medical affairs, and data science, targeting biopharmaceutical companies and CROs globally. The company positions itself as a trusted partner to top pharmaceutical firms, providing tools that accelerate clinical trials and enhance patient outcomes. The website reflects a professional and consistent brand image with comprehensive product and service information. Technically, the website is built on WordPress with modern frameworks like Bootstrap and Elementor, integrating multiple analytics and marketing tools such as Google Analytics, LinkedIn Insight, and VWO. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security measures include HTTPS enforcement and reCAPTCHA on forms, but additional security headers could improve the security posture. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms, though no explicit terms of service or vulnerability disclosure policies were found. The absence of WHOIS data reduces domain trustworthiness, suggesting privacy protection or unregistered status, which should be verified. Overall, Anju Software presents a credible and professional online presence with strong business and technical foundations. Strategic improvements in security headers, accessibility, and transparency policies would further enhance trust and compliance.

N

Nordecon AS

nordecon.com

52

Nordecon AS is a leading construction and real estate development company based in Estonia, with a strong market presence since 1989. The company operates in Estonia and neighboring countries including Finland, Sweden, and Ukraine. It offers comprehensive services including building and facility construction, project management, and real estate development. The company is publicly listed on the Nasdaq Tallinn stock exchange since 2006, reinforcing its market credibility. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and detailed project showcases. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, optimized for mobile and accessibility. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some improvements like DNSSEC and security headers could enhance protection. Overall, the website and domain registration data align well with the company's business claims, indicating high legitimacy and trustworthiness.

D

Devolon

devolon.fi

66

Devolon is a Finnish software development company specializing in future-proof web and mobile software solutions. Their service offerings include IT consulting, UI/UX design, clean code development, QA, maintenance, and support, targeting industries such as FinTech, transportation, healthcare, and museums. The company positions itself as a niche provider of full-stack development services with a focus on innovative and tailored solutions. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including jQuery, HubSpot forms, Weglot for multilingual support, and OneTrust for cookie consent management. The site is mobile responsive and implements HTTPS with HSTS for secure communications. Security posture is solid with no evident vulnerabilities or exposed sensitive data, though the absence of explicit privacy and terms of service policies and incident response contacts indicates room for improvement in compliance and transparency. Overall, the website reflects a professional and trustworthy business presence with moderate tracking and marketing tools in use.

W

Walless

walless.com

66

Walless is a modern Baltic law firm established in 2008, providing bespoke legal services focused on client trust, openness, and innovation. The firm targets businesses in the Baltic region and offers services including arbitration, dispute resolution, and corporate legal advisory. Their market position is that of a growing regional legal services provider with a professional online presence. Technically, the website is built on WordPress, leveraging modern plugins and technologies such as Google Analytics, reCAPTCHA, and GDPR cookie consent mechanisms. The site is well optimized for performance and mobile devices, with good SEO and accessibility features. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a credible and professional business with a high trustworthiness rating.

T

Tartu Loomemajanduskeskus

lmk.ee

40

Tartu Loomemajanduskeskus (LMK) is a well-established creative industries development center and incubator based in Tartu, Estonia, founded in 2009. It focuses on supporting creative enterprises through incubation programs, mentoring, training, and providing rental spaces. The organization targets creative startups and existing businesses in the South Estonia region, aiming to boost innovation and export potential in sectors such as fashion, contemporary art, film, and performing arts. The website reflects a professional and consistent brand presence with active social media engagement and regularly updated news content. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern JavaScript libraries like Swiper.js and jQuery. It employs Google Analytics and Jetpack for visitor tracking and performance monitoring. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Hosting and domain registration are stable and consistent with the business's geographic location. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal security or incident response policies. No privacy or cookie policies were found, indicating potential compliance gaps with GDPR requirements. No vulnerability disclosure or security.txt files are present, which could be improved to enhance trust and transparency. Overall, the website is functional, professional, and credible but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

G

Geo S.T.

geo.ee

48

Geo S.T. is an established Estonian company specializing in geodetic measurements, 3D laser scanning, construction geodesy, and cadastral services. Founded in 2010, it serves clients in energy, transportation, and real estate sectors, offering precise surveying and modeling solutions. The company maintains a professional web presence with clear service descriptions and partner affiliations, targeting construction and industrial clients. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, integrating Google Analytics and Google Tag Manager for user tracking. The site is mobile-optimized and moderately performant, though accessibility and SEO could be improved. Security posture is solid with HTTPS and secure forms, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie policy but no consent mechanism or detailed privacy policy. Overall, the domain registration is consistent and trustworthy, supporting the company's legitimacy.

T

Tallinn Dolls

tallinndolls.com

50

Tallinn Dolls operates as a specialized e-commerce retailer focusing on fashion apparel and accessories for women, men, and children. The website offers a variety of collections including pre-order and immediate purchase options, targeting consumers interested in curated fashion products. The company has a stable market presence with a domain registered since 2008, indicating longevity and business continuity. The site supports multilingual content in English and Estonian, enhancing accessibility for its target audience. Technically, the website leverages modern marketing and analytics tools such as Google Analytics, Facebook Pixel, Klaviyo, and Weglot for translations. It is built on the Sylius e-commerce platform, which is a modern and flexible solution. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and does not publish security policies or incident response contacts. No privacy or cookie policies were detected, which is a compliance gap especially under GDPR. Tracking technologies are extensively used, but without visible consent mechanisms, raising privacy concerns. Overall, Tallinn Dolls presents a credible and professional e-commerce presence with solid technical foundations but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

W

WERMO AS

wermo.ee

40

WERMO AS is an established Estonian furniture manufacturer with over 75 years of experience in crafting high-quality furniture for living rooms, home offices, and dining rooms. The company leverages traditional craftsmanship combined with modern production technologies to meet discerning customer expectations. Their website reflects a medium-sized manufacturing business targeting consumers and businesses seeking premium furniture products. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Contact Form 7, with multilingual support via WPML. The site is hosted likely by Zone Media OÜ, an Estonian registrar and hosting provider. Security-wise, the site uses HTTPS with good SSL configuration and integrates Google reCAPTCHA to protect forms. However, it lacks explicit privacy, cookie, and security policies, as well as vulnerability disclosure mechanisms, which are important for compliance and trust. Overall, the website is professional and functional but could improve its privacy and security transparency.

SDF Group is a globally recognized manufacturer and distributor of tractors, diesel engines, and agricultural machinery, operating under multiple well-known brands. The company targets farmers and contractors seeking advanced farming technology and precision agriculture solutions. The website demonstrates a mature digital presence with a modern tech stack based on Nuxt.js and Vue.js, incorporating analytics and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security best practices like security headers and explicit incident response policies could be improved. The absence of WHOIS data reduces domain registration trust but is offset by professional branding and comprehensive content. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, supporting a strong business credibility profile.

C

Change Ventures

changeventures.com

55

Change Ventures is a seed stage venture capital fund focused on backing ambitious Baltic founders globally. The company provides pre-seed investments ranging from €100k to €500k, along with hands-on support to help startups reach product-market fit and access to a network of later stage investors and partners. Their portfolio includes innovative technology companies across sectors such as energy, fintech, and software. The website presents a professional and consistent brand image with detailed team profiles and portfolio highlights, targeting founders and investors interested in the Baltic startup ecosystem. Technically, the website is built on Webflow and uses modern web technologies including Google Analytics and Tag Manager for tracking, with content delivered via a CDN. The site is mobile optimized and features good SEO practices. However, some accessibility features could be improved. Security posture is generally good with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency. Despite this, the website content and business information appear legitimate and professional. There are no privacy or cookie policies found, indicating compliance gaps with GDPR and other privacy regulations. Contact information includes a verified company email and physical address in Estonia, but no phone numbers are explicitly provided. Overall, the website is well designed and informative, supporting a credible business presence. However, improvements in privacy compliance, security policy transparency, and domain registration clarity are recommended to enhance trust and reduce risk.

P

Powerfleet (formerly Fleet Complete)

fleetcomplete.com

66

Powerfleet (formerly Fleet Complete) is a leading provider of connected fleet management and asset tracking solutions, targeting businesses ranging from small-medium enterprises to large Fortune 500 companies. The company offers a comprehensive suite of products including fleet management software, AI dash cameras, asset trackers, and telematics integrations, positioning itself as a key player in the transportation and logistics sector. The website reflects a mature digital presence with consistent branding and a focus on data intelligence to optimize fleet operations. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Google Tag Manager, LinkedIn Insight, and 6sense. The site is mobile-optimized, SEO-friendly, and includes privacy and cookie consent mechanisms, indicating a good level of digital maturity and compliance with privacy regulations like GDPR. From a security perspective, the site enforces HTTPS and includes basic security headers, but lacks some advanced headers and a public security or incident response policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data transparency slightly reduces trust but does not outweigh the professional and active nature of the website. Overall, the risk profile is moderate to low with recommendations to enhance security headers, publish explicit security policies, and consider vulnerability disclosure mechanisms to further strengthen trust and compliance.

T

TJO Konsultatsioonid

tjo.ee

52

TJO Konsultatsioonid is a leading Estonian consulting firm specializing in management systems development, strategic management, and production efficiency enhancement. The company offers a range of consulting services and training programs targeted at businesses seeking to improve operational effectiveness and comply with international standards. Their market position is strong within Estonia, supported by multiple ISO certifications and a robust client base. The website infrastructure is built on WordPress, utilizing modern plugins such as Yoast SEO and Ninja Forms, integrated with Google Analytics and Google Tag Manager for performance and user behavior tracking. The site is mobile-optimized and demonstrates good SEO practices, contributing to a positive digital maturity profile. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA on forms, and indications of security plugins like Wordfence. However, some security headers are not explicitly confirmed and could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website and business present a trustworthy and professional image with no critical security issues detected. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a formal incident response policy to further strengthen security and compliance.

B

Barrington Group

smartek.com

74

Smartek, operated by Barrington Group, is a mature Australian-based technology company specializing in workforce compliance and contractor management solutions. Their SaaS platform offers modules for compliance management, inductions, visitor management, asset management, and permit to work, supported by a team of compliance experts. The company serves a broad range of industries including healthcare, government, and construction, with a strong market presence evidenced by a large user base and notable clients such as Qantas and City of Melbourne. The website reflects a professional and consistent brand with comprehensive service descriptions and client testimonials. Technically, the website is built on WordPress with modern plugins and tracking technologies including Google Analytics, Facebook Pixel, LinkedIn Insight, and HubSpot. Hosting is managed via Azure DNS, and the site uses HTTPS with a good SSL configuration. However, DNSSEC is not enabled, and some recommended security headers are not explicitly detected. The site lacks a cookie consent mechanism, which may impact GDPR compliance. Forms use reCAPTCHA v3 to mitigate spam. From a security perspective, the domain is well-established with a long registration history and protective domain status flags. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. The absence of a published security policy or incident response contact is a gap. Overall, the site demonstrates a solid security posture with room for improvement in DNS security and privacy compliance. Strategically, Smartek is positioned as a reliable compliance management solution with strong business credibility and digital maturity. Recommendations include enabling DNSSEC, implementing security headers, publishing security and incident response policies, and adding a cookie consent mechanism to enhance privacy compliance and user trust.

S

Spliethoff

spliethoff.com

76

Spliethoff is a well-established Dutch shipping company specializing in worldwide dry cargo ocean transport. With a fleet of over 50 modern vessels and a history dating back to 1921, the company positions itself as a reliable and high-quality partner in the maritime transport sector. Their website reflects a professional and comprehensive digital presence, targeting businesses requiring specialized cargo shipping services across various market segments including bulk cargo, containers, metals, and project cargo. Technically, the website employs modern frontend technologies such as Tailwind CSS, Alpine.js, and Swiper JS, alongside Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is mobile responsive, well-structured, and optimized for SEO, providing a good user experience. Privacy compliance is evident through a cookie consent banner and a detailed privacy policy, indicating adherence to GDPR standards. From a security perspective, the site uses HTTPS and implements secure forms with anti-forgery tokens. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which could enhance protection. The absence of WHOIS data transparency reduces domain trust slightly, though the website content and business information strongly support legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and WHOIS transparency would further enhance trust and security posture.

E

Elkdata OÜ

keeleagentuur.ee

41

Keeleagentuur is a small Estonian language agency founded in 2022, specializing in language education and translation services primarily for Estonian and Russian languages. The company offers goal-oriented language courses for adults, including exam preparation and thematic courses. The website is built on WordPress using the Astra theme, Elementor page builder, and WooCommerce for e-commerce capabilities. It employs modern web technologies and integrates Google Analytics for visitor tracking. The website is well-structured, mobile-optimized, and SEO-friendly, but lacks explicit privacy and terms of service policies. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers could be improved. Overall, the business appears legitimate and consistent with its domain registration data.

T

TTK - Leak Detection System

ttkuk.com

70

TTK Leak Detection is a specialized manufacturer of liquid leak detection systems, focusing on water, acids, and oil leak detection for commercial and industrial applications. The company positions itself as a global leader with a strong presence in multiple international markets, offering products made in France with a notable 10-year warranty. Their target audience includes data centers, industrial facilities, airports, and other critical infrastructure sectors requiring reliable leak detection solutions. The website reflects a mature digital presence with comprehensive product information, case studies, and certifications that reinforce their market credibility. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Matomo, and Google Tag Manager for analytics and marketing. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, although some advanced security headers are not detected. From a security perspective, the site demonstrates good practices but lacks explicit security policies or incident response information. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness from a domain registration standpoint. Despite this, the professional website, certifications, and client references suggest a legitimate and established business. Overall, the risk assessment is moderate with recommendations to enhance domain registration transparency, implement additional security headers, and publish vulnerability disclosure policies to improve trust and compliance.

M

Manimal OÜ

manimaldesign.com

46

Manimal OÜ is a small Estonian digital media and design studio specializing in web design, SEO, and social media services. Founded in 2016, the company targets local businesses and individuals seeking creative digital solutions. The website reflects a professional and consistent brand image with a clear portfolio and client references. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, and includes tracking via Google Analytics and Facebook Pixel. Security measures include HTTPS and Google reCAPTCHA on the contact form, but lack advanced security headers and explicit privacy or cookie policies. Overall, the site is functional and credible but would benefit from enhanced privacy compliance and security hardening.

T

Tallinna Tehnikakõrgkool

tktk.ee

49

Tallinna Tehnikakõrgkool is a reputable higher education institution in Estonia specializing in technical and engineering education. The website serves multiple audiences including prospective and current students, continuing education learners, and business partners. It offers comprehensive information on study programs, admissions, continuing education, and institutional news. The institution maintains a solid market position as a key technical education provider in Estonia. Technically, the website is built on WordPress using the Elementor page builder, enhanced with Yoast SEO and Usercentrics for GDPR-compliant cookie management. It integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and a chat widget, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit security headers like Content-Security-Policy and does not publicly disclose security policies or incident response procedures. No vulnerability disclosure or security.txt file is present, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and well-maintained, with moderate to good scores in content quality, technical implementation, and security posture. Strategic improvements in security headers, privacy policy publication, and incident response transparency are recommended to further strengthen compliance and security maturity.

W

Walless

derling.ee

64

Walless is a modern Baltic law firm established in 2008, offering innovative and bespoke legal solutions primarily targeting businesses in the Baltic region. The firm emphasizes client trust, openness, and innovation, positioning itself as a growing and reputable player in the regional legal market. Their key services include legal advisory, arbitration, and dispute resolution. The website reflects a professional and consistent brand image with multi-language support and clear navigation. Technically, the site is built on WordPress, leveraging modern tools such as Google Analytics, MailerLite for marketing, and Google reCAPTCHA for form security. Hosting and DNS services are provided by reputable providers including Cloudflare and Tucows Domains Inc. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or suspicious domain registration patterns.

S

Softwerk

softwerk.ee

43

Softwerk OÜ is an Estonian technology company specializing in custom business software solutions including business intelligence (BI), ERP implementations (notably Microsoft Dynamics 365), and web development using modern frameworks such as .NET and React. Established in 2012, Softwerk has positioned itself as a trusted partner for businesses in Estonia and Europe, offering tailored solutions that improve operational efficiency and data-driven decision making. The company emphasizes long-term client relationships and quality service delivery, supported by positive client testimonials and recognized partnerships such as Microsoft. Technically, the website is built on WordPress with WPBakery Page Builder, leveraging common web technologies like jQuery and FontAwesome, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and secure form handling, but lacks advanced security headers and explicit security or incident response policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, Softwerk demonstrates a mature digital presence with room for improvement in privacy and security transparency.

B

Big Penny

trumansbeer.co.uk

53

Big Penny is a hospitality operator based in Walthamstow, London, managing large community venues that offer food, drink, and live events. The company emphasizes inclusivity and community connection, operating flagship venues such as Big Penny Social and Flukes. The website is professionally designed using Webflow CMS and integrates modern technologies including Google Analytics and cookie consent mechanisms. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS usage and cookie consent, but lacks visible security headers and formal security policies. Privacy compliance is basic with a privacy policy and cookie banner present but no GDPR explicit statements or data retention policies. Business credibility is strong with clear contact information and consistent branding. Overall, the website is functional and trustworthy for its hospitality business purpose.

L

Latitude59

latitude59.ee

53

Latitude59 is a well-established flagship startup and technology event based in Estonia, with a history dating back to 2012. It serves as a key platform for startups, investors, partners, and media to connect and showcase innovation. The website reflects a mature event organization with a strong international presence, offering pitch competitions, investor days, and satellite events worldwide. The business model centers on event management and ecosystem development within the technology sector. Technically, the website is built on WordPress using Elementor and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and PixelYourSite. The site is optimized for SEO and mobile devices, with a good user experience and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is good, with a comprehensive privacy and cookie policy and GDPR adherence. However, the site lacks explicit security policies, incident response contacts, and terms of service pages, which could enhance trust and compliance. Overall, Latitude59's website demonstrates a professional, secure, and privacy-conscious digital presence aligned with its business objectives.

F

FM Capital Consulting Ltd.

capital-consulting.com

48

FM Capital Consulting Ltd. is a well-established Estonian finance consulting firm specializing in worldwide company registration, bookkeeping, compliance, legal support, and tax planning services. The company targets businesses and entrepreneurs, including startups and fintech companies, offering tailored corporate and tax advantage solutions. Their market position is that of a niche consulting provider with expertise in cross-border transactions and fintech licensing. The website is professionally designed with good content quality and clear navigation, supporting their business credibility. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It uses modern tracking and analytics tools including Google Analytics and LinkedIn Insight Tag. Performance and mobile optimization are good, though accessibility is basic. The hosting provider is not explicitly identified but the domain is registered with GoDaddy and uses DNS servers from zone.eu and zone.ee. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. No privacy or cookie policies are present, which is a compliance gap especially given the use of tracking technologies. Contact information is clearly provided, enhancing trust. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the website presents a moderate risk profile with strengths in business credibility and technical implementation but weaknesses in privacy compliance and security best practices. Strategic improvements in privacy policy implementation, cookie consent, and security headers would enhance their security posture and compliance standing.

I

Iutecredit

iutecredit.md

62

Iutecredit is a Moldovan financial services company specializing in instant credit products, refinancing, and smart shopping solutions. The company leverages a mobile application (Myiute) and an extensive ATM network to provide convenient access to financial services. The website reflects a mature digital presence with a focus on user experience and mobile accessibility. The business is positioned as a trusted player in the Moldovan microfinance sector with over 15 years of operational history through its parent company, Iute Group AS. Technically, the website is built on WordPress and integrates multiple analytics and marketing tools, indicating a well-developed digital marketing strategy. Security posture is strong with HTTPS, security headers, and reCAPTCHA usage, though some improvements in cookie consent and incident response transparency are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

R Haldus OÜ

rhaldus.ee

45

R Haldus OÜ is a small Estonian company specializing in property management services for commercial and residential real estate. Their website presents a focused business model offering competent and quality property maintenance and management services. The site is primarily in Estonian with options for English and Russian, targeting property owners seeking professional management solutions. Technically, the website is built on the Voog CMS platform and uses common JavaScript libraries such as jQuery and Modernizr, along with Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Security-wise, the website uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. There is no visible incident response or vulnerability disclosure information, which limits transparency in security matters. Overall, the website is functional but basic, with room for improvement in privacy, security, and content depth.

M

Mobalytics

mobalytics.gg

69

Mobalytics is a technology company specializing in gaming performance analytics and companion software, targeting competitive gamers across multiple popular titles such as League of Legends, TFT, Diablo 4, and others. The platform boasts over 10 million users and maintains partnerships with esports organizations, positioning itself as a leading player in the gaming analytics market. Their business model revolves around providing personalized game insights, in-game overlays, and esports data services, primarily delivered via a WordPress-based website and a Windows desktop application integrated through Overwolf. Technically, the website leverages a modern tech stack including WordPress CMS, Google Fonts, multiple analytics and marketing tools (Google Analytics, Mixpanel, Hotjar, Ahrefs, Comscore), and integrates Riot Games APIs for game data. The site is well-optimized for performance, mobile responsiveness, and SEO, with fast loading times and clear navigation. Hosting appears to be cloud-based with CDN usage for static assets. From a security perspective, the site uses HTTPS with good SSL configuration and employs asynchronous loading of scripts to minimize performance impact. However, explicit security headers are not evident, and there is no visible security policy or incident response contact information. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the provided content. No direct company contact emails or phone numbers are visible, which may impact user trust and support accessibility. Overall, Mobalytics presents a professional and trustworthy online presence with strong business credibility and technical maturity. To enhance security posture and compliance, the company should publish clear privacy and security policies, implement security headers, and provide direct contact information. These improvements would further solidify user trust and regulatory adherence.

S

Spring

springadvertising.com

62

Spring is an independent creative advertising agency based in Vancouver, Canada, established in 2005. The company offers a broad range of services including strategy, design, advertising, branding, digital, and on-demand creative services. They have a strong market presence with a focus on real estate marketing and have worked with over 100 brands across more than 70 industries. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted by Automattic Inc., ensuring reliable infrastructure and good performance. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is basic but present, with privacy and cookie policies including consent mechanisms. Contact information is complete and easily accessible, enhancing business credibility. Overall, the website is trustworthy and well-maintained, suitable for its target audience.

O

Ouman Oy

ouman.fi

67

Ouman Oy is a Finnish company specializing in building automation and energy efficiency solutions, targeting property owners, automation contractors, housing companies, and related sectors primarily in the Baltic Sea region. The company offers smart controllers, IoT solutions, and energy optimization services, positioning itself as a key player in energy-efficient building management. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive product and solution information. Technically, the site is built on WordPress with modern analytics and marketing integrations such as Google Analytics, HubSpot, and Facebook Pixel. Security measures include HTTPS enforcement and CAPTCHA-protected forms, though explicit security headers and policies are not fully implemented. Overall, the site demonstrates good security hygiene and business credibility, with room for improvement in privacy compliance documentation and security transparency.

Namespace OÜ is a small Estonian digital agency specializing in full-service software development with expertise in Python, API, and React.js technologies. The company targets businesses seeking custom digital applications and API integrations, positioning itself as a niche technology service provider with a portfolio of notable projects such as Navirec, GSMtasks, and Parcelfellows. The website reflects a professional and consistent brand image with clear contact information and project showcases. Technically, the website is built using modern frameworks including React.js and Next.js, with integrations for Google Analytics, Google Tag Manager, and Cal.com scheduling. The site is mobile-optimized and performs moderately well, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses standard analytics scripts but lacks explicit security headers and visible security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

R

Roadplan

roadplan.ee

48

Roadplan is an Estonian company specializing in road project design, outdoor space projects, and consulting services. Founded in 2013, it positions itself as a leading road project designer in Estonia, targeting clients who require sustainable and innovative solutions for their outdoor environments. The website content is primarily in Estonian and focuses on communicating the company's expertise and service offerings. Technically, the website is built on WordPress and uses modern web technologies including Google Fonts, Google Analytics, Google Tag Manager, and reCAPTCHA for form security. The site is hosted by Zone Media OÜ, a known Estonian hosting provider. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the website uses HTTPS with a valid SSL certificate and employs reCAPTCHA to protect forms. However, it lacks important security headers and does not provide explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and functional but lacks comprehensive privacy and cookie policies, explicit contact information, and detailed security disclosures. These gaps reduce its privacy compliance and slightly impact trustworthiness. Strategic improvements in these areas would enhance the site's security posture and user trust.

Berbank AS operates as a small Estonian financial institution providing traditional banking services including private and business banking, loans, deposits, and internet banking. The website targets Estonian private individuals and business clients, offering localized financial products. The domain is registered since 2019, consistent with a relatively new or niche bank. The technical infrastructure is basic, relying on jQuery and Google Analytics, with no modern frameworks or CMS detected. The website lacks HTTPS enforcement and security headers, which are critical for banking sites, indicating a weak security posture. Privacy compliance is poor, with no visible privacy or cookie policies, and no GDPR compliance indicators. Contact information is present but limited, and no incident response or security policy details are provided. Overall, the site shows moderate business credibility but requires significant improvements in security and privacy to meet industry standards.

D

Dispak

dispak.ee

45

Dispak is an Estonian retail business specializing in the sale of paper and fabric bags, primarily targeting customers seeking packaging solutions for gifts and corporate gifts. The company claims over two decades of experience and offers custom logo printing services with a minimum order quantity. The website is primarily in Estonian and serves the local market with a product-focused approach. Technically, the site uses jQuery and jQuery UI libraries along with Google Analytics and Tag Manager for tracking. The hosting and domain registration are consistent with an Estonian business identity. However, the website lacks explicit privacy, cookie, and terms of service policies, which impacts its compliance posture. Security headers and advanced security practices are not evident, and no incident response or vulnerability disclosure information is provided. Overall, the site is functional with moderate technical implementation but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

L

Laser Diagnostic Instruments

ldi.ee

44

Laser Diagnostic Instruments (LDI) is an Estonian-based company specializing in advanced oil spill detection systems and water monitoring sensors. Their flagship product, the ROW (Remote Optical Watcher), provides autonomous, non-contact detection of oil spills and algal blooms, serving industrial and environmental clients globally. The company has a strong niche market position with installations across multiple continents and industries including energy, water treatment, and shipping ports. The website reflects a professional and consistent brand image with detailed product information and client testimonials, supporting their credibility in the environmental monitoring sector. Technically, the website is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and standard best practices, though improvements are recommended in cookie consent and security headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, LDI presents a trustworthy and professional digital presence aligned with their business objectives.

D

Dajani Pharmacy Ltd

dajanipharmacy.com

63

Dajani Pharmacy Ltd is a well-established healthcare provider based in Central London, offering a comprehensive range of pharmacy and medical clinic services including prescribing pharmacists, GP services, allergy and blood testing, aesthetic treatments, and COVID-19 testing. The company has a strong local presence with two physical locations and a history spanning over 40 years. Their website reflects a professional and user-friendly digital presence with clear service offerings and multiple contact channels. Technically, the site uses modern web technologies such as Bootstrap, jQuery, Google Analytics, and Microsoft Clarity, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with privacy and cookie policies present but lacking active consent mechanisms. Overall, the website demonstrates a credible and trustworthy business with room for technical and security enhancements.

T

Thorgate

thorgate.eu

55

Thorgate is a well-established technology company specializing in software development, web design, and mobile applications with a strong focus on Python and related technologies. Operating primarily in the Nordics and Baltics with offices in Estonia, UK, Norway, and Poland, the company targets businesses and startups seeking expert development and design services. Their market position is strong within the Nordic region, supported by a professional online presence and a diversified service portfolio including startup investments. Technically, the website leverages modern frameworks such as Django and React, integrates multiple analytics and marketing tools including Google Analytics, Hotjar, Facebook Pixel, and HubSpot, and maintains good mobile optimization and SEO practices. While performance is moderate, the site is well-structured and content-rich, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses Sentry for error tracking, but lacks explicit security headers and published security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website presents a high level of professionalism and trustworthiness with minor areas for improvement in security policy transparency and accessibility. The risk profile is low, and the company demonstrates a solid foundation for secure and compliant digital operations.