Security Directory

Polhem International is a marketing and communications agency operating primarily in Scandinavia and the Baltics. The company offers a broad range of services including marketing, communication, public relations, events, influencer marketing, digital advertising, social media, and media training. The website reflects a professional and consistent brand presence with a modern technical infrastructure leveraging Nuxt.js and Bootstrap 5 frameworks. Tracking and analytics are implemented via Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain is well-established and legitimate, supporting the credibility of the business.

S

SRINI OÜ

srini.ee

45

SRINI OÜ is an Estonian software development company specializing in custom software solutions primarily for government and private sector clients. Founded in 2019, the company operates from Tallinn and Tartu with approximately 80 employees. Their business model focuses on delivering tailored software design, development, and maintenance services, leveraging modern methodologies such as SCRUM and XP. The company has a positive market position supported by government contracts and a spin-off subsidiary, Modena. Technically, the website is built on WordPress, uses Java-based technologies, and integrates Google Analytics and Google Maps APIs. The site is mobile-optimized and SEO-friendly but lacks published privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS enforced, but missing security headers and incident response contacts are areas for improvement. Overall, SRINI presents a credible and professional digital presence with moderate risk and room for enhanced privacy and security practices.

M

Moonwalk

moonwalk.ee

46

Moonwalk is an Estonian music agency specializing in artist management, music production, and event promotion. The company represents notable artists such as Stefan, Getter Jaani, Black Velvet, and Mr Happyman, positioning itself as a recognized player in the Estonian music industry. The website reflects a professional and consistent brand image, targeting music fans and industry professionals. Technically, the site is built on Squarespace, leveraging modern web technologies and standard analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS but lacks several important security headers such as HSTS and Content-Security-Policy, which could improve its security posture. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the website is credible and functional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

W

Weekdone

weekdone.com

64

Weekdone is a technology company specializing in SaaS-based OKR (Objectives and Key Results) software designed to help businesses align goals, track progress, and manage performance. The company offers a suite of services including OKR management, weekly progress reporting, project tracking, and continuous performance management. Positioned as a leading provider in the OKR software market, Weekdone targets businesses and teams seeking structured goal-setting and transparent progress reporting tools. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at its target audience. Technically, the website is built on WordPress CMS and leverages modern front-end technologies such as jQuery, Google Analytics, Google Tag Manager, and CookieYes for consent management. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with multiple external resources loaded from reputable domains. The technical infrastructure is supported by GoDaddy as the registrar and hosting provider. From a security perspective, the website enforces HTTPS with excellent SSL configuration and employs a comprehensive cookie consent mechanism that aligns with GDPR requirements. However, it lacks explicit security headers, published security policies, incident response contacts, and vulnerability disclosure mechanisms. No exposed sensitive data or vulnerable libraries were detected in the HTML content. The security posture is solid but could be improved by implementing additional security best practices and transparency measures. Overall, Weekdone presents a trustworthy and professional online presence with a mature domain and consistent business information. The main risks relate to the absence of published privacy and security policies and limited contact information. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving accessibility compliance to further strengthen trust and compliance.

J

JAS Worldwide Inc.

jas.com

71

JAS Worldwide Inc. is a well-established global freight forwarding and logistics company offering a comprehensive range of services including airfreight, ocean freight, ground freight, customs brokerage, cargo insurance, contract logistics, and green solutions. The company positions itself as a leader in international shipping and supply chain support with over four decades of industry experience. Their market presence is supported by partnerships such as with Lufthansa Cargo and a network of subsidiaries including JAS Jet Air Service S.p.A., Multilogistics S.p.A., and Setoa S.p.A. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices. Accessibility is good, though there is room for further enhancement. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers. It implements a GDPR-compliant cookie consent mechanism and maintains privacy and cookie policies. However, there is no explicit security policy or incident response contact information visible, and no vulnerability disclosure or security.txt file is present. The absence of WHOIS data for the domain is a notable concern, though the website content and branding strongly indicate legitimacy. Overall, the website presents a professional, trustworthy, and secure digital presence for JAS Worldwide, with recommendations to improve transparency around security policies and domain registration details to further enhance trust and compliance.

T

TBD Pharmatech

biodiscovery.eu

52

TBD Pharmatech is a European-based Contract Development and Manufacturing Organization (CDMO) specializing in Active Pharmaceutical Ingredients, advanced intermediates, and fine chemicals production. Founded in 2021, the company positions itself as a reliable partner for pharmaceutical companies seeking development and manufacturing services. The website reflects a professional and consistent brand image with clear business focus and relevant service offerings. Technically, the site is built on WordPress with modern analytics and tracking tools integrated, including Google Analytics and Google Tag Manager. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and comprehensive security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security practices to align with regulatory requirements and industry best practices.

L

LVM Kinnisvara

lvm.ee

46

LVM Kinnisvara is a well-established Estonian real estate company providing comprehensive property services including sales, valuation, development, and brokerage. The company operates across major Estonian cities with multiple office locations and a professional online presence. Their website is built on WordPress with modern plugins and integrates marketing and analytics tools to engage and track users effectively. Security measures such as HTTPS, CAPTCHA on forms, and cookie consent mechanisms are implemented, though some security headers could be improved. The domain registration data aligns well with the business profile, indicating legitimacy and a mature online presence.

J

Jolos

jolos.eu

44

Jolos is a full spectrum creative agency based in Estonia, specializing in world-class event production, branding, campaigns, and live and virtual events. The company positions itself as a high-quality, professional agency focused on delivering unique and memorable experiences for brands and organizations. The website reflects a mature digital presence built on WordPress, leveraging modern optimization and analytics tools such as Google Analytics and Tag Manager with IP anonymization enabled. The site is well-designed, mobile-optimized, and rich in multimedia content, showcasing detailed case studies and team profiles that enhance trust and professionalism. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and formal security policies suggests room for improvement. Privacy compliance is limited due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

R

RESCUE®

rescuefirst.com

64

RESCUE® is a specialized roadside assistance provider operating primarily in Bengaluru, India, offering 24/7 vehicle breakdown services including puncture repair, battery jumpstart, towing, emergency fuel delivery, and key recovery. The company positions itself as a premier and reliable service provider with OEM trained mechanics and a fleet of state-of-the-art tow trucks, servicing over 100,000 vehicles since 2011. Their business model focuses on rapid dispatch of mechanics and tow trucks within 30 minutes to customer locations, targeting vehicle owners in need of emergency roadside help. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and Google reCAPTCHA for analytics and security. The site is mobile optimized with good SEO practices and moderate performance. Accessibility is basic but functional. The hosting and infrastructure appear stable and professionally managed. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Forms are protected with reCAPTCHA, and no sensitive data is exposed in the HTML. However, the site lacks a visible cookie consent mechanism and formal security or incident response policies, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, RESCUE® demonstrates a solid business presence with a trustworthy domain registration and consistent branding. The website quality is good, supporting the business credibility. Strategic recommendations include implementing cookie consent for privacy compliance, publishing security policies, and enhancing accessibility to further strengthen trust and compliance.

L

Luxury Produtos & Ecommerce

luxurysex.com.br

58

Luxury Sex is a Brazilian e-commerce retailer specializing in adult pleasure products, founded in 2018. The company offers a wide range of products including cosmetics, accessories, vibrators, and fetish items, targeting adult consumers seeking to enhance their intimate experiences. The business emphasizes fast delivery, discreet packaging, and multiple payment options including Pix with discounts, positioning itself as a niche market leader in Brazil. The website is professionally designed with consistent branding and clear contact information, supporting a trustworthy online shopping experience. Technically, the site leverages a modern tech stack including the Yampi e-commerce platform, Google Analytics, Microsoft Clarity, and Mixpanel for analytics and user tracking. It uses HTTPS with a secure checkout subdomain and integrates various marketing and retargeting tools. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Cookie consent mechanisms are implemented, but a dedicated privacy policy page is missing. From a security perspective, the website enforces HTTPS and uses secure payment processing domains. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is consistent with the business information, indicating legitimate domain ownership. Overall, the site demonstrates a good security posture but could improve transparency and compliance documentation. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing security headers, publishing a security policy and incident response contacts, adding a vulnerability disclosure mechanism, and enhancing accessibility. These improvements would strengthen the site's security posture and compliance, further boosting customer trust and business credibility.

K

Kinema

kinema.eu

56

Kinema OÜ is a small Estonian company specializing in the sale, installation, and maintenance of modern garage doors, industrial lifting doors, loading equipment, and access control systems. The company targets both industrial and private customers within Estonia, positioning itself as a local provider of comprehensive door and automation solutions. The website is built on WordPress with WooCommerce components, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot for consent management. The technical infrastructure is modern and moderately optimized for performance and mobile use, though accessibility features are basic. Security posture is good with HTTPS enabled and cookie consent implemented, but could be improved by adding explicit security headers and publishing formal privacy and security policies. No contact emails or phone numbers were found in the provided content, which limits direct customer engagement visibility. Overall, the website reflects a professional small business with consistent branding and a clear business focus, but with room for improvement in privacy compliance and security transparency.

T

Tickmill Europe Ltd

tickmill.com

69

Tickmill Europe Ltd operates as a regulated online forex and CFD broker targeting European clients. The company offers a range of trading instruments including forex, cryptocurrencies, stocks, indices, bonds, and commodities through popular platforms such as MetaTrader 4 and 5. The website demonstrates a strong market position with emphasis on low spreads, fast execution, and comprehensive client support. The digital infrastructure leverages modern technologies including Google Analytics, HubSpot, and Cloudflare, ensuring robust performance and user experience. Security posture is solid with HTTPS enforcement, bot management, and cookie consent mechanisms, although explicit security headers and incident response contacts could be enhanced. The absence of WHOIS domain registration data introduces some uncertainty in domain legitimacy, but the professional presentation and regulatory references mitigate this concern. Overall, the website is well-designed, compliant with GDPR, and employs extensive analytics and advertising tools to support its business model.

S

SandFox OÜ

sandfox.ee

42

SandFox OÜ is a small Estonian company founded in 2016 specializing in integrated energy storage solutions, smart battery management, solar panel integration, and Linux-based IT infrastructure services. The company targets industrial clients and businesses in the energy sector, offering critical IT and industrial automation solutions. Their market position is supported by partnerships with major technology vendors such as RedHat, IBM, Huawei, and SUSE, and they emphasize business-critical IT solutions and energy management. Technically, the website uses a basic but functional stack including jQuery, Google Analytics, and Google Translate, hosted likely by Zone Media OÜ. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and visible privacy compliance mechanisms. Overall, the company presents a credible and trustworthy business presence with room for improvement in privacy compliance and technical modernization.

M

MyHome OÜ

myhome.ee

42

MyHome OÜ operates a professional real estate brokerage and property management business primarily serving the Estonian market with additional offerings in Spain. The company provides services including property sales, rentals, management, and interior design. The website reflects a well-established small business with a consistent brand and a focus on quality customer service, as evidenced by testimonials and detailed property listings. The technical infrastructure is based on WordPress with common plugins and integrations such as Google Analytics, Google Tag Manager, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is adequate with HTTPS and some security best practices, but lacks advanced headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

F

Ferdio

ferdio.com

57

Ferdio is a Denmark-based visual communication agency founded in 2014, specializing in creating infographics, animations, presentations, and other visual storytelling content. The company targets businesses and organizations that require professional visual explanations of complex information. Their market position is supported by a portfolio featuring notable clients and a consistent brand presence across their website and social media channels. Technically, the website is built on WordPress hosted on WP Engine, utilizing modern web technologies such as jQuery, Vimeo API, and Google Analytics, with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS with a valid SSL certificate and implements cookie consent mechanisms compliant with GDPR. However, there is room for improvement in security headers and publishing formal security policies or incident response plans. Overall, Ferdio presents a professional, trustworthy, and well-maintained digital presence with moderate technical maturity and good privacy compliance.

M

Myoton AS

myoton.com

60

Myoton AS is a specialized company providing advanced digital palpation devices (MyotonPRO) for measuring muscle tone, stiffness, and elasticity. Their products serve medical professionals, sports scientists, and researchers, positioning them as a niche leader in soft tissue assessment technology. The company has a well-established online presence with a website created on a WordPress platform, optimized for SEO and mobile use, and supported by modern analytics tools such as Google Analytics and Plausible Analytics. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and domain transfer protections in place, though improvements could be made by adding security headers and a cookie consent mechanism to enhance GDPR compliance. The WHOIS data confirms the domain's legitimacy with a long registration history dating back to 2004 and no privacy protection, aligning with the company's transparency. Overall, the website is professional, trustworthy, and well-suited for its target audience, with minor recommendations to improve privacy compliance and security headers.

C

Celsius Healthcare

celsius.ee

42

Celsius Healthcare is a leading Estonian medical information company specializing in delivering comprehensive healthcare communication solutions. Their services include the largest medical web publication Med24, organizing medical conferences and training, and publishing specialized healthcare journals. The company targets healthcare professionals such as doctors, nurses, pharmacists, and decision-makers within Estonia, positioning itself as a key player in the national healthcare media and event sector. Founded in 2010, Celsius Healthcare has established a strong market presence supported by public grants and cluster memberships.

R

Raumaster Oy

raumaster.fi

61

Raumaster Oy is a Finnish company founded in 1984 specializing in advanced material handling systems primarily for the energy, pulp, and paper industries. The company positions itself as a global leader in its sector, offering a range of products and services including fuel yards, pneumatic conveying, wood handling, and related services. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at industrial B2B customers. The presence of a subsidiary, Raumaster Paper, indicates business diversification within related industrial sectors. Technically, the website uses modern analytics tools such as Google Analytics and Snoobi, hosted on the Flockler platform, and is optimized for mobile devices with good SEO practices. However, there is room for improvement in accessibility and explicit privacy compliance features.

N

Nordic Automation Systems

nasys.no

62

Nordic Automation Systems is a specialized technology company providing end-to-end LoRaWAN-based smart city and remote metering solutions. Their offerings include smart streetlight controllers, utility metering products for gas, water, and heat, as well as gateways and energy monitoring solutions. The company targets smart city planners, utility providers, telco operators, and system integrators, positioning itself as a niche provider with in-house R&D and production capabilities enabling rapid market rollout. The website is professionally designed, content-rich, and well-structured, supporting a positive user experience and clear navigation. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and SEO plugins, and is mobile-optimized with moderate performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit incident response or vulnerability disclosure policies are published. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is justified for this business type. Overall, the website reflects a credible and professional business presence with room for security and privacy improvements.

B

BCS Auto - Baltic Car Solutions

bcsauto.ee

48

BCS Auto - Baltic Car Solutions is a well-established Estonian company specializing in long-term car rental, vehicle sales, commission sales, and automotive services since 2007. The company targets both private individuals and businesses seeking flexible and cost-effective vehicle solutions. Their market position is strong within Estonia, supported by recognition from the Transport Authority and positive customer testimonials. The website is built on a modern WordPress platform with WooCommerce and Elementor, integrating SEO and marketing tools such as Yoast SEO, Google Analytics, Microsoft Clarity, and MailerLite. Social media presence on Facebook and Instagram further supports their brand visibility. Security posture is adequate with HTTPS and no exposed sensitive data, though improvements in security headers and explicit security policies are recommended. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is professional, user-friendly, and trustworthy, reflecting a medium-sized transportation business with a solid digital presence.

R

Recrur

recrur.com

55

Recrur is a recruitment software company offering an applicant tracking system designed to connect HR teams, hiring managers, and candidates to simplify and automate the hiring process. The website positions itself as a SaaS platform focused on enhancing recruitment efficiency and transparency. The company appears to be a small-sized technology business founded in 2016, with hosting on DigitalOcean and a WordPress CMS platform. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Microsoft Clarity, and MailerLite for email marketing. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and functional but could improve transparency and security documentation to enhance trust and compliance.

H

Horizon Pulp & Paper Ltd

horizon.ee

53

Horizon Pulp & Paper Ltd is a well-established European manufacturer specializing in 100% virgin sack kraft paper, serving packaging applications and exporting to over 70 countries. The company has a solid market position as a leading manufacturer in its sector, with a business model focused on manufacturing and international export. The website reflects a professional corporate presence with good content quality and consistent branding, targeting industrial and business clients in need of packaging materials. Technically, the website is built on a modern WordPress platform using WooCommerce for e-commerce capabilities, Elementor for page building, and Yoast SEO for search engine optimization. The site demonstrates good mobile optimization and moderate performance, with integration of analytics tools such as Google Analytics and Plausible Analytics. Hosting appears to be managed by Elkdata OÜ, consistent with the domain registration data. From a security perspective, the site uses HTTPS with excellent SSL configuration and no visible exposed sensitive data. However, there is a lack of explicit security headers and no published security or incident response policies. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a clear privacy policy and terms of service pages represents a compliance gap. No contact information or incident response contacts were found, limiting user trust and support options. Overall, the website is functional, professional, and secure in basic terms but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and terms policies, adding security headers, and providing clear contact channels for security incidents and data protection inquiries.

Bole is a company specializing in innovative and sustainable flooring solutions, prominently featuring their unique product that follows the natural growth of trees. The website positions Bole as an innovator in the manufacturing sector, targeting design professionals and environmentally conscious consumers. The digital infrastructure is built on WordPress with modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. The website is mobile optimized and provides a catalog download feature through a secure form submission process. Security posture is adequate with HTTPS enabled and secure form handling, but lacks important security headers and visible privacy and terms policies, which are critical for compliance and trust. Overall, the website is professional and functional but would benefit from enhanced transparency and security practices.

N

Nordcrewing Group OÜ

nordcrewing.com

57

Nordcrewing Group OÜ is a specialized maritime recruitment and crew management company operating primarily in Scandinavia and Europe. Founded in 2018, the company offers qualified seagoing personnel and maritime specialists to shipowners, shipyards, and offshore operators. Their business model leverages a proprietary Applicant Tracking and Crew Management System to optimize recruitment and crew management processes, positioning them as a trusted partner in the maritime sector. The company also provides niche services such as Ice Advisory and Deep Sea Pilotage, enhancing their market differentiation. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various plugins for SEO, multilingual support, and user interaction. The site demonstrates good mobile optimization, clear navigation, and professional design. Analytics and marketing tools such as Google Analytics and Google Tag Manager are implemented with a cookie consent mechanism, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to protect domain ownership. However, DNSSEC is not enabled, and there is no Content Security Policy or security.txt file, indicating areas for improvement. Privacy compliance is addressed with a privacy policy and cookie consent, but incident response and security policy details are absent. Overall, Nordcrewing presents a credible and professional online presence with solid business and technical foundations. Strategic enhancements in DNS security, security headers, and incident response transparency would further strengthen their security posture and trustworthiness.

F

Fletcher Group

fletchershipping.com

59

Fletcher Group is a UK-based company specializing in the operation and management of Offshore Platform Supply Vessels, serving the energy sector with a modern fleet and over 300 employees. Their website demonstrates a professional digital presence with clear business descriptions, client testimonials, and multiple industry certifications, positioning them as a reputable service provider in offshore logistics and vessel management. Technically, the site employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security measures include HTTPS, CSRF protection, reCAPTCHA integration, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The WHOIS data is notably missing, which raises concerns about domain registration legitimacy despite the professional appearance and content of the website. Overall, the site scores well in content quality and security posture but should address domain registration transparency and enhance security policy disclosures.

S

Solis BioDyne OÜ

sbd.ee

55

Solis BioDyne OÜ is an established Estonian company specializing in the development and production of molecular biology reagents, particularly PCR, qPCR, and RT-qPCR products. Founded in 1995, it has grown into a leading reagent supplier in Europe with a global customer base including research institutes and biotech companies. The company offers a broad product portfolio and additional services such as contract manufacturing and assay development. The website reflects a professional and comprehensive digital presence with clear product information, customer testimonials, and certifications that reinforce its market position. Technically, the site uses modern web technologies including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring a responsive and user-friendly experience. Security posture is good with HTTPS, cookie consent, and no visible vulnerabilities, although DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

W

Woodman

woodman.ee

41

Woodman is a medium-sized Estonian company specializing in the manufacturing and retail of designer furniture products. With over 16 years of professional service and sales in more than 20 countries, Woodman positions itself as a reliable and modern furniture producer collaborating with international designers. Their business model focuses on flexible production quantities and modern technologies to serve retailers and designers globally. The website reflects a professional brand image with good content quality and clear navigation, targeting furniture retailers and design professionals. Technically, the website is built on Joomla CMS and utilizes common web technologies such as jQuery, Google Analytics, Google reCAPTCHA, and bxSlider for interactive elements. The site is hosted by Radicenter OÜ, an Estonian hosting provider, and uses HTTPS with a valid SSL certificate, ensuring secure communication. Mobile optimization is good, though accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site employs HTTPS and Google reCAPTCHA on its contact form, which are positive indicators. However, no security headers were detected, and there is no published privacy policy, cookie consent, or terms of service, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is functional and professional but lacks critical privacy and security documentation. The domain registration is consistent with the business claims, enhancing trustworthiness. Strategic improvements in privacy compliance, security headers, and contact transparency would strengthen the site's security posture and user confidence.

N

NJ Production

nj-production.com

53

NJ Production is a well-established, award-winning event and communication agency specializing in creating powerful event experiences globally. The company offers a broad range of services including project management, venue logistics, event communication, content support, technical production, and sustainability consulting. Their market position is strong, supported by a professional portfolio and consistent branding. The website reflects a mature digital presence with multilingual support and integrated marketing tools. Technically, the site is built on WordPress with modern analytics and marketing integrations, hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS, reCaptcha, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear cookie policies and GDPR consent. Overall, the site demonstrates high professionalism and trustworthiness, suitable for corporate clients seeking event services.

T

Tugikeskus JUKS

juks.ee

42

JUKS is a Tallinn-based social and healthcare institution managed by the Tallinn Social and Health Care Department, focusing on supporting working-age individuals with intellectual disabilities. The organization provides a range of specialized care, social and work-related rehabilitation services, and training programs. The website reflects a government-managed entity with a clear mission and consistent branding. Technically, the site is built on WordPress with standard plugins and integrates Google Analytics for visitor tracking. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite analytics usage. Overall, the domain registration data supports the legitimacy and trustworthiness of the site.

M

Marketing Sharks

marketingsharks.ee

51

Marketing Sharks is an established Estonian digital marketing and digitalization service provider founded in 2012. The company offers a broad range of services including digital marketing, SEO, custom and ready-made website and e-commerce solutions, branding, and WordPress development. Their market position is supported by a consistent brand presence, client logos, and active social media channels. Technically, the website is built on WordPress with modern plugins and tracking tools such as Google Analytics and Facebook Pixel, and uses Cloudflare DNS services. Security posture is good with HTTPS enforced, reCAPTCHA on forms, and Wordfence security plugin indications, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience.

F

Fed Africa

fedafrica.com

62

Fed Africa is a recruitment consultancy specializing in senior and middle management placements across Africa and the Middle East, operating from offices in Paris and Abidjan. The company targets expatriates, diasporas, and local professionals seeking executive roles, as well as companies looking to recruit top talent. The website reflects a professional and consistent brand presence with clear navigation and sector-specific job listings. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and integrates marketing and analytics tools such as Google Analytics, Pardot, and Criteo. The site is mobile-optimized and uses HTTPS with CSRF protections on forms, indicating a good security baseline. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence mitigates some risk. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanisms. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced transparency on security policies and domain registration.

S

Superangel OU

superangel.io

48

Superangel OU operates as an early stage venture capital fund and company builder focused on technology startups in the Baltics and Nordics. The company targets tech founders raising pre-seed or seed rounds, offering investment tickets typically between €300k and €1M. Their business model centers on leveraging entrepreneurial experience and networks to support scalable tech ventures in AI, robotics, logistics, fintech, and SaaS sectors. The website presents a professional and consistent brand image with clear messaging and portfolio highlights, positioning Superangel as a niche regional VC player with a strong founder-centric approach. Technically, the website is built on WordPress with modern SEO practices including Yoast SEO and structured data (JSON-LD). It uses common web technologies such as jQuery, GSAP for animations, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. No hosting provider is explicitly identified, and DNSSEC is not enabled, which is a minor security gap. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status clientTransferProhibited, which protects against unauthorized domain transfers. However, security headers are not detected, and there is no visible cookie consent mechanism or published security/incident response policies. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is consistent with the business claims, showing a domain registered in Estonia since 2017 under the company name Superangel OU, supporting legitimacy. Overall, the website demonstrates a good balance of business credibility, technical implementation, and content quality. Privacy compliance could be improved by adding cookie consent and more explicit GDPR-related disclosures. Security posture would benefit from enhanced HTTP headers and published policies. The risk level is low, with no critical issues detected, making the site trustworthy for its intended audience.

A

Audi Eesti

audi.ee

62

Audi Eesti operates as the official online presence for Audi's premium vehicle offerings in Estonia, providing detailed information on new and used cars, accessories, and dealer locations. The website reflects a strong market position as a national distributor for Audi, targeting Estonian consumers interested in premium automobiles. The technical infrastructure leverages modern web technologies including Adobe Experience Manager Headless CMS, Google Tag Manager, and Facebook Pixel, ensuring a robust digital experience with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit privacy policies and incident response contacts are absent, representing areas for improvement. Overall, the site is professional and trustworthy, but enhancing privacy compliance and transparency would further strengthen user confidence.

W

Wageningen University & Research

wur.nl

69

Wageningen University & Research is a prominent educational and research institution based in the Netherlands, specializing in life sciences, food production, environment, and health. The website serves as a comprehensive portal for academic programs including bachelor, master, and professional courses, targeting students, researchers, and professionals in related fields. The institution holds a strong market position as a leading global university in its sector. Technically, the website employs a modern technology stack including GX WebManager CMS, JavaScript libraries such as jQuery, and integrates advanced analytics and marketing tools like Google Tag Manager, Google Analytics, and Visual Website Optimizer. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and implements several best practices such as opening external links in new tabs and asynchronous script loading. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional, trustworthy, and technically sound but would benefit from enhanced privacy compliance and explicit security governance disclosures to improve user trust and regulatory adherence.

M

Mobi Lab OU

lab.mobi

65

Mobi Lab OU is an established Estonian technology company specializing in designing and building mobile and augmented reality products. Founded in 2001, the company serves a diverse clientele including renowned tech businesses such as Microsoft, Skype, Ericsson, and Bolt. Their service offerings encompass business design, product management, digital product design, software engineering, and CTO as a Service, targeting SMEs, creative agencies, and product companies. The company positions itself as a trusted partner for innovative digital solutions with a strong market presence in the technology sector. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Tag Manager, Google Analytics, Hotjar, and Cloudflare DNS services. The site is well-optimized for performance, mobile responsiveness, and SEO, with a fast loading experience and good accessibility features. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and a cookie consent mechanism, although some security headers and DNSSEC are not implemented. From a security perspective, the website demonstrates a good posture with no critical vulnerabilities detected. However, it lacks a published privacy policy, terms of service, and explicit security or incident response policies, which are important for GDPR compliance and user trust. The domain registration data is consistent and trustworthy, with a long domain age and registrant details matching the website's business claims. Overall, Mobi Lab's website reflects a professional and credible business with strong technical infrastructure and moderate privacy compliance. Strategic improvements in privacy documentation, security headers, and DNS security would enhance their security posture and compliance standing.

H

Harbour Enterprise Group | Latvija, Lietuva, Igaunija

harbour.lv

53

The website www.harbour.lv is a small business site hosted on the Wix platform, targeting a Latvian audience. The site uses standard Wix technologies and integrates Google Analytics for visitor tracking. However, the site lacks comprehensive business information, privacy policies, and contact details, which limits its credibility and user trust. Technically, the site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. Overall, the site presents a minimal digital footprint with room for significant improvements in privacy compliance, security, and business transparency.

E

EveryPay

every-pay.com

54

EveryPay operates as a payment gateway service provider offering a merchant portal and risk management tools to facilitate real-time transaction tracking, refunds, and fraud prevention. The website targets merchants and e-commerce businesses primarily in Estonia and the Baltic region, supporting multiple languages including English, Estonian, Latvian, and Lithuanian. The company positions itself as a reliable regional payment service provider with a focus on merchant support and integration ease. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It uses Uikit for styling and includes Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms with nonce tokens. However, it lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were found. The WHOIS data for the subdomain is unavailable, which is typical and not suspicious. Contact information is clearly provided, enhancing trust. Overall, the website demonstrates a solid business and technical foundation with moderate security posture. Strategic improvements in privacy compliance and security headers would enhance trust and compliance. The site is suitable for its target audience but could benefit from enhanced transparency and security best practices.

Harju Elekter is a well-established Estonian company specializing in electrical distribution solutions with over 55 years of experience. The company serves the energy sector and related industries, offering products such as prefabricated substations and electrical infrastructure services. The website reflects a mature business with a strong market presence, including public stock exchange listing and sustainability recognitions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates analytics and security tools such as Google Analytics and reCAPTCHA. The security posture is solid with HTTPS enforced and cookie consent implemented, though improvements can be made by enabling DNSSEC and adding security headers. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and business operations.

E

Eesti Kaubandus-Tööstuskoda

koda.ee

40

Eesti Kaubandus-Tööstuskoda is a well-established Estonian chamber of commerce and industry organization dedicated to supporting and representing the interests of Estonian businesses. The website reflects a mature digital presence with comprehensive content, including detailed information about services, membership, events, and news. The organization targets Estonian entrepreneurs and companies, offering services such as export development, partner search, tender monitoring, legal advice, and arbitration. The site is built on Drupal 10 with modern analytics and marketing integrations, demonstrating a good level of digital maturity and user experience. Security posture is strong with HTTPS enforced, privacy compliance evident through cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns with the organization's legitimacy, showing consistent registration details and no privacy protection. Overall, the website is professional, trustworthy, and well-optimized for its audience.

O

OpenNode LLC

opennodecloud.com

49

OpenNode LLC is a small technology company specializing in open-source infrastructure management software and cloud system implementations. Their product portfolio includes Waldur, an open-source multi-cloud marketplace; Kubernetes ON, a managed Kubernetes service; and the G-Cloud Platform, targeting government cloud solutions. The company targets enterprises and public sector organizations seeking cloud infrastructure management and governance solutions. The website is professionally designed, consistent in branding, and provides clear information about products and services, though it lacks comprehensive privacy and security policy disclosures. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Leaflet.js for mapping, and Google Analytics for user tracking. Hosting appears to be on AWS infrastructure, inferred from DNS nameservers. The site is mobile-optimized with good navigation and user experience, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and published security policies such as privacy, cookie, incident response, or vulnerability disclosure statements. DNSSEC is not enabled, which is a recommended improvement. The WHOIS data shows a consistent and legitimate domain registration dating back to 2010, supporting the company's credibility. Overall, the website presents a moderate security posture and good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

R

Rocksoft

rocksoft.ee

40

Rocksoft is a small Estonian technology company specializing in Oracle E-Business Suite, Oracle NetSuite, and MONITOR ERP solutions. The website is professionally designed using WordPress with modern technologies such as Google Tag Manager and Brizy page builder. The company appears to target businesses seeking ERP and Oracle software implementations. The domain is mature, registered since 2010, and hosted by a known Estonian registrar, indicating legitimacy. However, the website lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance. Security posture is moderate with HTTPS enabled and anonymized Google Analytics, but no security headers or vulnerability disclosures are present. Contact information is not explicitly found on the main page, which may affect user trust and business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.

E

eAgronom

eagronom.com

60

eAgronom is a technology company focused on enabling businesses to achieve sustainability goals while supporting farmers through improved revenue generation, soil quality, and financing access. The website presents a modern, well-designed interface built with Framer and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The site lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts its privacy compliance and business credibility scores. Security posture is weak due to missing security headers and unclear SSL configuration. Overall, the website is functional and professional in design but requires improvements in security, compliance, and transparency to enhance trust and legitimacy.

OÜ TMB Element is a well-established Estonian manufacturing company specializing in the production of concrete building elements, serving primarily the Baltic region. Founded in 1961, it holds a strong market position as one of the largest producers in its sector. The website reflects a professional and consistent brand image, offering multilingual support and detailed product and company information. The technical infrastructure is based on WordPress with modern web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers and policies could be improved. Privacy compliance is well addressed with comprehensive cookie and privacy policies and consent mechanisms. Overall, the site demonstrates high trustworthiness and business credibility.

S

Synerall AS

synerall.com

58

Synerall AS is a software company specializing in customer service and invoicing solutions tailored for small and medium-sized energy companies. Established in 2009, the company positions itself as a market leader in its niche, offering automated processes to improve operational efficiency for energy sector clients. The website reflects a professional and modern digital presence built on WordPress with Elementor, integrating various analytics and marketing tools to support business growth. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements in security headers and explicit privacy policies are recommended. Overall, the domain registration data supports the legitimacy and longevity of the business, with consistent WHOIS information and no privacy protection masking ownership.

P

Printon AS

printon.ee

46

Printon AS is a well-established printing company based in Tallinn, Estonia, specializing in a wide range of printing services including books, magazines, catalogs, calendars, and advertising materials. The company positions itself as a comprehensive printing partner offering consultation, repro, printing, binding, post-processing, and logistics services all under one roof. Their market presence is supported by ISO 9001 and ISO 14001 certifications, indicating a commitment to quality and environmental management. The website is professionally designed, multilingual, and provides clear contact information and service descriptions, targeting both business and individual customers in the region. Technically, the website is built on WordPress using the Avada theme and integrates modern web technologies such as Google Analytics, Google reCAPTCHA v3, and Slider Revolution. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Security posture is strong with HTTPS enforced, security headers present, and secure form handling, but lacks a formal security policy or incident response information. Overall, the site is trustworthy and professional with no signs of malicious activity or suspicious behavior. However, improvements in cookie consent mechanisms and formal security disclosures would enhance compliance and user trust. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing accessibility.

A

Advokaadibüroo GLIMSTEDT

glimstedt.ee

41

Advokaadibüroo GLIMSTEDT is a well-established full-service law firm with a strong focus on business law, serving clients primarily in the Baltics and Scandinavia. Founded in 1935, the firm offers a broad range of legal services including data protection, M&A, energy, real estate, tax, banking, and dispute resolution. The website reflects a professional and consistent brand image with clear navigation and regularly updated content, supporting its market position as a reputable legal services provider. Technically, the site is built on WordPress with modern libraries and integrates key analytics and marketing tools, ensuring a good digital maturity level. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit security policies are missing. Overall, the site is trustworthy and well-maintained, with room for improvement in privacy policy transparency and incident response readiness.

E

Ester Digital OÜ

ester.co

53

Ester Digital OÜ is a full-service digital agency established in 2015, providing a broad range of services including web design, branding, UI/UX software design, CMS and software development, mobile development, and IT consulting. The company targets businesses primarily in the USA, UK, Canada, and Europe, positioning itself as a trusted partner for meaningful digital growth. Their client portfolio includes notable brands such as IQVIA, T-Mobile, and NHS, indicating a strong market presence and credibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google reCAPTCHA, Gravity Forms, and SEO tools like Yoast. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Analytics tools such as Google Analytics, Google Tag Manager, and Ahrefs are employed for user tracking and marketing insights. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks some security headers and explicit security or incident response policies. WHOIS data shows privacy protection consistent with a legitimate business, and the domain age aligns with the company's history. Privacy and cookie policies are present, though a cookie consent mechanism is missing, which is a minor compliance gap. Overall, Ester Digital presents a professional, trustworthy digital agency with solid technical infrastructure and good security hygiene, though improvements in security headers and privacy compliance mechanisms are recommended to enhance their security posture and regulatory adherence.

R

Ringtail Studios

ringtail-studios.com

73

Ringtail Studios is a well-established EU-based art development studio specializing in 3D content production and co-development services for the gaming and digital entertainment industries. Founded in 2006 and part of the Magic Media group, the company serves a global clientele including AAA game titles and mobile games. Their key services include game art production, animation, VFX, and cybersecurity, supported by a workforce of over 1000 professionals across 15 worldwide locations. The website reflects a professional and consistent brand image with a focus on showcasing their portfolio and partnerships.

R

Roksnet Solutions OÜ

roksnet.com

53

Roksnet Solutions OÜ is a technology company specializing in secure data exchange platforms based on the X-Road protocol, which is widely used in Estonia, Finland, and other countries. The company offers platform-as-a-service solutions and consultancy to governments and organizations aiming to build interoperable digital societies. Their market position is strengthened by their extensive experience and EU Horizon 2020 funding, positioning them as a credible player in the digital interoperability space. Technically, the website is built on a modern stack including Laravel, Bootstrap, and jQuery, hosted on DigitalOcean, with good mobile optimization and moderate performance. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though lacking explicit security policies and security headers. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the website is professional, trustworthy, and well-aligned with the business claims.

A

AS Ekspress Grupp

egrupp.ee

44

AS Ekspress Grupp is a leading media conglomerate in the Baltic region, specializing in digital and traditional media publishing including web media, newspapers, magazines, and books. The company has a strong market position supported by a large portfolio of subsidiaries across Estonia, Latvia, and Lithuania. Their business model focuses on digital media solutions and services, targeting a broad audience in the Baltic states. The website reflects a mature digital presence with multilingual support and investor relations transparency. Technically, the site is built on WordPress with common plugins for analytics, multilingual content, and cookie compliance. Security posture is solid with HTTPS and reCAPTCHA integration, though some improvements in security headers and library versions are recommended. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy. Overall, the site demonstrates high business credibility and professional presentation.