Security Directory

S

Stereo Creative

stereocreative.com

60

Stereo Creative is a global creative agency specializing in culturally charged branding and marketing services. The website presents a professional and visually rich experience, showcasing recent projects and emphasizing brand building that engages audiences culturally. The agency targets brands seeking innovative and culturally relevant creative campaigns. Technically, the website is built using Framer, a modern web design platform, and integrates analytics tools such as Google Analytics, HubSpot, and LinkedIn Insight Tag, indicating a moderate level of digital maturity. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics in place. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks important security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content itself appears professional and active. Overall, the site scores moderately on content quality and technical implementation but falls short on privacy compliance and business credibility due to missing contact and legal information.

B

Bikeep

bikeep.com

54

Bikeep is a medium-sized Estonian company founded in 2012, specializing in smart micromobility infrastructure including commercial bike racks, smart bike lockers, and e-scooter stations. The company targets municipalities, transit companies, commercial and residential properties, positioning itself as a global leader in smart bike parking and charging solutions. The website is built on WordPress with modern plugins and tracking tools, optimized for performance and mobile use. Security posture is good with HTTPS and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is partial with cookie consent but no explicit privacy policy found. Business credibility is high with clear company information, testimonials, and references. Overall, the website is professional and trustworthy but could improve privacy and security transparency.

M

Merko

merko.ee

48

Merko is a well-established Estonian construction and real estate development company with a strong regional presence in the Baltics and Norway. The company offers comprehensive construction services including building, infrastructure, and material production, serving clients seeking residential and commercial properties. Their website reflects a mature digital presence with multi-language support, detailed project portfolios, and integration of modern analytics and marketing tools. The technical infrastructure is based on WordPress CMS with common industry-standard technologies and good mobile optimization. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing trust and compliance. Overall, Merko demonstrates a professional and credible online presence aligned with their business operations.

R

Reach-U

reach-u.com

63

Reach-U is a technology company specializing in location-based solutions for telecommunications, security, and smart city sectors. With a claimed 30 years of experience and operations across 34 countries, they serve a large subscriber base globally. The website is professionally designed, hosted on the Weebly platform, and incorporates standard analytics and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and transparency. Security posture is generally good with HTTPS and cookie consent, but outdated libraries and missing security headers suggest room for improvement. Contact information is limited, and no explicit security or incident response policies are published.

N

Novian Group

andmevara.ee

60

Novian Group is a well-established IT services and solutions provider operating primarily in Estonia and the Baltic region, with subsidiaries in Lithuania, Norway, and Rwanda. The company specializes in IT infrastructure management, software development, digitization, and e-government solutions, serving both enterprise and public sector clients. Their market position is strong, supported by over 30 years of experience and a broad portfolio of services tailored to complex IT needs. The website reflects a mature digital presence with multilingual support and comprehensive service descriptions. Technically, the site is built on WordPress with modern plugins and libraries, optimized for performance and SEO. Security posture is solid with HTTPS, cookie consent management, and use of reCAPTCHA, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates professionalism, compliance with GDPR, and effective use of analytics and marketing tools, positioning Novian as a credible and trustworthy technology partner.

R

RRK Logistics Parks Rental Warehouses Logistics Services

rrk.ee

45

RRK Logistics Parks Rental Warehouses Logistics Services operates a professional website offering rental warehouse and logistics park spaces primarily in Estonia. The company positions itself as the largest provider of warehouse and production spaces, targeting businesses requiring logistics and storage solutions. The website is multilingual, supporting Estonian, English, and Russian, enhancing accessibility to a broader audience. The business appears medium-sized with a domain age consistent with an established presence since 2010. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Yoast SEO for optimization. Google Analytics and Google reCAPTCHA are integrated for analytics and security. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and implements invisible reCAPTCHA on forms, indicating attention to bot mitigation. However, no security headers were detected, and there is a lack of published privacy, cookie, or security policies, which are important for compliance and trust. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the website is professional and functional but has gaps in privacy compliance and security best practices. Strategic improvements in policy publication, security headers, and contact transparency would enhance trust and compliance.

E

Eesti Evangeelne Luterlik Kirik

eelk.ee

46

The Eesti Evangeelne Luterlik Kirik (Estonian Evangelical Lutheran Church) operates a well-structured official website providing comprehensive information about the church's history, organization, clergy, and community activities. The site targets church members and the Estonian public, offering religious content, news, and contact details. The website is built on WordPress with Bootstrap and includes integrations such as Google Analytics and Facebook SDK for user engagement and tracking. While the site is professionally designed with good navigation and mobile optimization, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain is well-established since 2010, registered through a reputable Estonian registrar, aligning with the church's official status. Overall, the website is credible and functional but would benefit from enhanced privacy compliance and security hardening.

L

LVL UP OÜ

levelup.ee

45

LVL UP OÜ operates the website levelup.ee as a digital recruitment agency specializing in fast and efficient talent acquisition for Estonian businesses. The company leverages digital marketing, social media, and recruitment software to identify and attract candidates aligned with client needs. The website presents a professional and modern digital presence with clear branding and multimedia content to engage visitors. Technically, the site is built on WordPress with Elementor and Yoast SEO, supported by Cloudflare DNS and CDN services, ensuring good performance and SEO readiness. Security posture is solid with HTTPS and bot protection scripts, though explicit security headers are not fully evident. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Contact information is available primarily via email and contact forms, with social media integration enhancing trust. Overall, the site is credible and well-positioned in its niche but would benefit from enhanced privacy and security disclosures.

L

Loovuskohvik OÜ

loovuskohvik.ee

40

Loovuskohvik OÜ operates a creative wellbeing studio website focused on personal development, creativity, and empowerment. The company offers workshops, trainings, and creative therapy services targeting individuals and teams interested in holistic growth. The website is professionally designed using WordPress with Elementor and Astra theme, showing moderate technical maturity and good mobile optimization. Security posture is adequate with HTTPS enabled and nonce tokens in forms, but lacks some security headers and explicit privacy and cookie policies. The domain is well-established since 2010, registered with a reputable Estonian registrar, consistent with the business profile. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and security hardening.

T

Tallinna Teeninduskool

teeninduskool.ee

47

Tallinna Teeninduskool is a well-established vocational education institution in Estonia specializing in hospitality, catering, spa services, and commerce. The website reflects a medium-sized educational entity with a strong focus on practical training and international cooperation, including Erasmus+ projects. The digital infrastructure is built on WordPress with modern plugins and analytics tools, providing a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the website presents a trustworthy and professional image consistent with its educational mission.

C

Comedy Estonia

comedyestonia.com

52

Comedy Estonia is a small media company specializing in promoting stand-up comedy culture and talent management across Estonia. The website serves as a platform for event promotion, talent showcases, and audience engagement through newsletters and social media. The technical infrastructure is based on WordPress with common plugins for events and forms, integrating Google Analytics and Facebook Pixel for marketing and tracking. Security posture is generally good with HTTPS and CAPTCHA protections, but lacks advanced security headers and formal privacy/cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and social presence indicate an active business. Overall, the site is functional and professional but requires improvements in compliance and domain transparency.

A

AS Orient Office

kontorikaubad.ee

46

AS Orient Office operates a professional e-commerce website offering a broad range of office supplies, paper goods, household items, food products, and electronics primarily targeting Estonian businesses and consumers. The company has an established market presence since 2011 and provides a comprehensive product catalog with clear navigation and a consistent brand presentation. The website is built on Drupal CMS and leverages common web technologies including jQuery, Bootstrap, and Google Analytics for tracking and marketing purposes. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and incident response contacts indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which poses a compliance risk under GDPR. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security practices to strengthen user trust and regulatory compliance.

S

SA Estonian Business School

ebs.ee

47

Estonian Business School (EBS) is a reputable educational institution based in Estonia, specializing in business and entrepreneurship education. The website reflects a mature organization with a broad offering including bachelor, master, doctoral, executive education, and micro-credentials. The institution also operates a gymnasium and has an international presence in Helsinki. The site is well-structured, professionally designed, and provides comprehensive content relevant to its audience of students, alumni, and business professionals. Technically, the site is built on Drupal 9 and integrates multiple modern analytics and marketing tools, ensuring good digital maturity. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms including GDPR-aligned cookie consent and privacy policy. WHOIS data confirms legitimacy with a government-related registrar and consistent domain age. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy and security best practices.

O

OT Malta Ltd

onetouch.io

62

OneTouch is a Malta-based mobile casino game developer specializing in premium mobile-first games, including the world’s best mobile Baccarat. The company operates under OT Malta Ltd and holds a Malta Gaming Authority B2B Critical Supply License, positioning it as a trusted supplier in the iGaming industry. The website reflects a professional and consistent brand with clear industry partnerships and testimonials, targeting mobile casino operators and players globally. Technically, the site is built on WordPress with modern SEO and analytics tools, delivering a good user experience with mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and cookie consent are recommended. WHOIS data is unavailable, limiting domain transparency, but regulatory licensing and business information support legitimacy. Overall, the site is credible, well-structured, and aligned with industry standards.

D

DataFeedWatch by Cart.com

datafeedwatch.com

70

DataFeedWatch by Cart.com is a leading SaaS platform specializing in product feed management and optimization for eCommerce brands, retailers, and agencies globally. The platform supports integration with over 2000 shopping channels and marketplaces, offering advanced features such as AI-generated product titles and descriptions, feed validation, and custom campaign labels. The company positions itself as a top-rated solution with a strong client base including major brands like adidas and Decathlon. Technically, the website is built on HubSpot CMS with React, leveraging a modern tech stack and multiple analytics and marketing tools, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are not published. The absence of WHOIS data introduces some trust concerns, but overall the site demonstrates professionalism and strong business credibility.

M

Moosedog Oy

moosedog.fi

52

Moosedog Oy is a Finnish innovation company specializing in patenting, trademark protection, and intellectual property rights (IPR) services globally. Established in 2010, the company offers a comprehensive suite of services including patent searches, trademark registrations, design protections, innovation workshops, and patent commercialization. Moosedog has built significant patent portfolios for numerous startups, contributing to a combined exit valuation exceeding fifteen billion euros. The company is a founding member of the Aalbun international network, enabling cost-effective patent services worldwide. Additionally, Moosedog embraces virtual environments for innovative service delivery.

S

SELF II

self.ee

41

SELF II is an established Estonian training and development company operating since 1989, specializing in practical, activity-based training, consulting, and coaching services aimed at individuals, teams, and organizations. The company offers a broad range of services including leadership development, personnel consulting, and change management support. Their market position is that of a trusted, small-sized education provider with a long-standing presence in Estonia. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by Zone Media OÜ, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the site lacks published security policies and security headers. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security transparency.

F

Fin-Tek Ozone Water Treatment

fin-tek.com

60

Fin-Tek Ozone Water Treatment is a specialized service provider with over 30 years of experience in the design, installation, maintenance, and optimization of ozone generating systems. The company focuses on delivering environmentally responsible water treatment solutions, targeting industrial and commercial customers requiring ozone generator services and related maintenance. Their market position is that of a niche, experienced provider with a clear emphasis on quality and reliability. The website reflects this with detailed service descriptions and regional contact phone numbers, supporting their global reach in the US, Asia/Pacific, and Europe. Technically, the website is built on WordPress using modern plugins and themes such as Astra and Beaver Builder, with integration of CleanTalk Anti-Spam and Google Analytics for spam protection and analytics respectively. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Hosting details are limited but the domain registrar is Hostopia Canada Corp, consistent with the company's Canadian origin. From a security perspective, the site uses HTTPS and anti-spam measures but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. No privacy or cookie consent mechanisms are present, indicating partial GDPR compliance. No incident response or security policies are published, which could be improved to enhance trust and readiness. Overall, the website is professional and trustworthy with a solid business foundation. Strategic improvements in security headers, privacy compliance, and published security policies would strengthen their security posture and regulatory adherence, supporting continued business growth and customer confidence.

M

Metaprint AS

metaprint.com

49

Metaprint AS is an international manufacturing group specializing in metal containers, with a well-established presence since 2006. The company targets industrial clients requiring metal packaging solutions, positioning itself as a reliable medium-sized manufacturer in the sector. Their website reflects a professional and consistent brand image, providing clear business information and contact details. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates Google Analytics and Tag Manager for marketing insights. The site is mobile-optimized and SEO-friendly, though performance is moderate. From a security perspective, the website employs HTTPS and a comprehensive cookie consent mechanism that supports GDPR compliance. However, there is room for improvement in security headers and explicit security policies. No incident response or vulnerability disclosure information is provided, which could enhance trust and preparedness. The WHOIS data confirms the domain's legitimacy and consistency with the business claims, with no privacy protection masking registrant details. Overall, the website demonstrates a solid digital maturity with good privacy compliance and business credibility. The main risks relate to the absence of detailed security policies and vulnerability disclosure mechanisms. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and introducing terms of service to strengthen legal and compliance posture.

V

Viron ulkoilmamuseo

evm.ee

54

Viron ulkoilmamuseo (Estonian Open Air Museum) operates as a cultural and educational institution showcasing Estonia's rural heritage through exhibitions, events, and educational programs. The museum targets families, tourists, and cultural enthusiasts, positioning itself as a leading open-air museum in Estonia with a medium organizational size and a history dating back to 2010. The website is professionally designed, multilingual, and provides comprehensive visitor information and event details. Technically, the site uses modern web technologies including Voog CMS, Google Analytics, Facebook Pixel, and Leaflet.js for interactive maps. It is hosted by Zone Media OÜ, an Estonian registrar and hosting provider. Security posture is good with HTTPS enforced and secure forms, though some security headers and cookie consent mechanisms are missing. Privacy compliance is adequate with a clear privacy policy and consent on newsletter subscription, but lacks a cookie banner. Overall, the site is trustworthy and credible with active social media presence and clear contact information.

C

Comodule

comodule.com

59

Comodule is a specialized IoT solutions provider focused on connectivity for e-bikes and light electric vehicles. Their offerings include flexible IoT solutions tailored for manufacturers, fleet operators, and software developers, positioning them as a leading player in the emissionless transport technology sector. The website reflects a professional digital presence with clear navigation and targeted content for their audience. Technically, the site is built on Squarespace with integration of multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but lacks advanced security headers and explicit security policies. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, though the overall business presentation and related domains support credibility. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy or terms of service. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving WHOIS transparency to strengthen trust.

T

Trustek

trustek.eu

45

Trustek is a medium-sized European manufacturing company specializing in roof trusses and construction materials. The company targets construction professionals and contractors across multiple European countries, as evidenced by its multilingual websites. The business model focuses on B2B manufacturing and supply with additional services such as delivery and installation. The website is professionally designed using WordPress with the Divi theme, integrating modern analytics and consent management tools. Security posture is good with HTTPS enforced, security headers present, and use of reCAPTCHA on forms. However, the absence of a public security policy and incident response information indicates room for improvement in transparency and preparedness. Overall, the website and business appear legitimate and trustworthy, though WHOIS privacy limits domain registration transparency.

S

Smart MasterKey

blelocking.com

57

Smart MasterKey is a technology company specializing in cloud-based access control solutions that unify mobile smart keys with property systems. The company offers a SaaS platform with features such as digital access administration, multiple access types, integration with existing security infrastructure, and white-label options. Positioned as an innovator with TÜV SÜD certifications and industry awards, Smart MasterKey targets businesses and organizations across sectors including energy, real estate, hospitality, and critical infrastructure. The website demonstrates a high level of professionalism, clear navigation, and multilingual support, reflecting a mature digital presence for a company founded in 2024. Technically, the website is built on WordPress hosted on Amazon AWS infrastructure, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and HubSpot. Performance and mobile optimization are good, with SEO best practices implemented. Security posture is solid with HTTPS enforced and no exposed sensitive data, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is addressed with clear privacy and cookie policies and consent mechanisms. Overall, the security posture is strong but could be enhanced by publishing explicit security policies and incident response contacts, enabling DNSSEC, and adding vulnerability disclosure mechanisms. The domain registration is consistent with the company's founding timeline and shows no suspicious patterns, supporting legitimacy. Strategic recommendations include improving DNS security, enhancing transparency around security policies, and continuing to build trust through certifications and clear contact channels.

U

Unique Hotels Group

uhotelsgroup.com

47

Unique Hotels Group operates a small portfolio of lifestyle hotels in Estonia, focusing on boutique hospitality experiences with historical ambiance and modern amenities. Their services include hotel accommodations, dining, spa treatments, seminars, and gift cards, targeting tourists and business travelers. The website is professionally designed using WordPress with modern technologies and supports multiple languages. Privacy and cookie policies are implemented, and contact information is clearly provided. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy, though the website content and business information appear authentic. Security posture is generally good with HTTPS enforced, but security headers are missing, and no incident response or vulnerability disclosure information is provided. Overall, the website is functional, trustworthy, and well-positioned in the hospitality market in Estonia.

I

Iglu

iglu.ee

58

Iglu is an Estonian software development company specializing in business analysis, UI design, and development of e-services, self-service portals, and Java portals. Founded in 2013, it serves a range of clients including telecommunications, banking, and government sectors, positioning itself as a reliable partner with strong client relationships and a focus on agile development. The website reflects a professional and modern digital presence built on Gatsby and React technologies, with integration of Google Analytics and Tag Manager for performance and user tracking. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is lacking as no privacy or cookie policies are found, which is a notable gap given GDPR requirements. Overall, the site is well-designed and trustworthy, but enhancing privacy and security transparency would strengthen its compliance and user trust.

S

SecureOps

secureops.com

68

SecureOps is a Canadian-based boutique cybersecurity service provider with over 25 years of industry experience, offering managed security services including 24/7 SOC monitoring, security infrastructure management, vulnerability management, and professional services. The company emphasizes personalized, collaborative, and scalable cybersecurity solutions tailored to enterprise clients across multiple sectors globally. Their market position is strengthened by a SOC 2 Type 2 certification and a strong reputation for quality service delivery. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, HubSpot, and multiple marketing and tracking tools. The site is well-optimized for SEO and mobile devices, with good performance and accessibility features. Hosting and domain registration are consistent with the business claims, with Amazon Registrar as the registrar and a domain age of over 20 years. Security posture is strong with HTTPS enforced, use of reCAPTCHA on forms, and no visible sensitive data exposure. However, DNSSEC is not enabled and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is good with a clear privacy policy and cookie consent mechanism, though no explicit GDPR statement or data retention policies were found. Overall, SecureOps presents a professional and trustworthy online presence with comprehensive service offerings and solid technical infrastructure. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would further enhance their security posture and trustworthiness.

G

GT Tarkvara

soft.ee

37

GT Tarkvara is a well-established Estonian technology company specializing in software and cloud solutions, with over 25 years of market presence. The company positions itself as the largest software and related services provider in Estonia, targeting businesses and educational institutions. Their offerings include cloud solutions, software licensing, consulting, implementation, and ongoing support. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms, Google Analytics, Google Tag Manager, and LinkedIn Insight Tag. Hosting is managed via Azure DNS, indicating a reliable infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. From a security perspective, the site uses HTTPS with good SSL configuration and employs reCAPTCHA v3 to protect forms. However, explicit security headers and published security policies are absent, and no incident response or vulnerability disclosure information is provided. Privacy compliance is partially addressed with a privacy and cookie policy present, but no active consent mechanism is implemented. Overall, GT Tarkvara's website demonstrates a strong business credibility and technical foundation with room for improvement in security policy transparency and privacy compliance mechanisms.

Solaris is a well-established cultural and commercial center located in the heart of Tallinn, Estonia. Founded in 2010, it offers a diverse range of services including retail shops, restaurants, entertainment venues, office spaces, and parking facilities. The website reflects a professional and modern digital presence, targeting local visitors and shoppers with relevant content and event information. The business maintains a solid market position as a key destination for shopping and cultural activities in Tallinn.

I

Industry62

industry62.com

60

Industry62 is a small, employee-owned digital design company operating primarily in Finland and Estonia, with offices in Helsinki, Turku, Tallinn, and Tampere. The company focuses on creating impactful digital services and positions itself as a human-centric, value-driven organization. Their website reflects a professional and consistent brand image, targeting businesses seeking digital design and development services. The technical infrastructure is based on the Squarespace platform, leveraging modern web technologies including Google Analytics and YouTube integrations, providing a moderate performance and good mobile optimization. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given GDPR requirements. The domain WHOIS data is missing, raising concerns about domain registration legitimacy, though the website content and social media presence support the business's authenticity. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer domain registration transparency.

A

AS Kevelt

kevelt.ee

41

AS Kevelt is an established Estonian pharmaceutical company specializing in the manufacturing, resale, and subcontracting of pharmaceuticals. The company emphasizes scientific approaches and strict quality controls to produce original and generic medicines, with ongoing research and innovation efforts to support long-term growth. The website targets healthcare industry stakeholders, partners, and investors, presenting a professional and consistent brand image with multilingual support in English, Russian, and Estonian. The business model focuses on pharmaceutical production and related services, positioning AS Kevelt as a reputable player in the Estonian healthcare sector. Technically, the website is built on WordPress CMS using a modern tech stack including Bootstrap, jQuery, Google Maps API, and several plugins such as Yoast SEO and Contact Form 7. The site is mobile-optimized with good SEO practices and moderate performance. Hosting and domain registration are managed by Zone Media OÜ, a legitimate Estonian registrar, with the domain active since 2010, aligning with the company's history. From a security perspective, the site enforces HTTPS and integrates Google reCAPTCHA v3 for form protection. However, it lacks several security headers and does not publish a security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with no cookie consent mechanism or detailed privacy policy visible, which could be improved to meet GDPR standards fully. Overall, AS Kevelt's website demonstrates a solid business presence with good technical implementation and a moderate security posture. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory adherence, supporting the company's professional image and operational security.

D

DUX

dux.ee

43

DUX is a small, established UX and UI design studio based in Estonia, founded in 2014. They specialize in creating digital experiences including mobile and desktop applications, websites, e-commerce platforms, and SaaS products. Their portfolio showcases over 200 projects, targeting NGOs, startups, SMEs, and global/local leaders, positioning them as a reputable design partner in the technology sector. The website is professionally designed with excellent content quality and clear navigation, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google Analytics, and Google Tag Manager, hosted by Elkdata OÜ, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

Sportlyzer LLC. operates a SaaS platform focused on player development and team management software tailored for youth and amateur sports clubs. The platform facilitates membership management, invoicing, attendance tracking, communication, and athlete homework assignments, serving coaches, managers, players, and parents globally. The company maintains a professional web presence with mobile apps on iOS and Android, and a consistent brand image emphasizing ease of use and comprehensive sports club management. The website content is well-structured, informative, and targets sports organizations seeking digital management solutions. Technically, the website employs modern JavaScript frameworks and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized and uses HTTPS exclusively, ensuring secure data transmission. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The lack of WHOIS data transparency is a moderate concern but does not outweigh the professional presentation and trust signals on the site. Privacy and terms of service pages are present and comprehensive, indicating attention to compliance, though explicit cookie consent is absent. Overall, the security posture is good but could benefit from additional transparency and policy disclosures. Strategically, Sportlyzer is positioned as a specialized SaaS provider in the sports management niche with a solid user base and positive testimonials. The company should focus on improving security headers, cookie consent, and publishing incident response policies to strengthen trust and compliance. Enhancing WHOIS transparency or providing verified domain registration details would also improve legitimacy perception.

H

HELMES

helmes.ee

74

Helmes is a well-established software development company specializing in custom software solutions, digital transformation, and consulting services. With over 30 years of experience and a global presence spanning 20 offices, Helmes serves more than 500 international clients including major organizations such as Airbus, Telia, OECD, and CERN. Their service portfolio includes mobile app development, legacy software modernization, data analytics, design, and cybersecurity services, positioning them as a comprehensive digital innovation partner for enterprises. Technically, the website is built on WordPress with modern SEO practices implemented via Yoast SEO. It integrates multiple analytics and consent management tools such as Google Analytics, Microsoft Clarity, Google Tag Manager, and Conseno for GDPR compliance. The site is mobile-optimized, accessible, and demonstrates good performance, although some security headers are not explicitly detected. The company holds ISO certifications (27001, 9001, 14001), reflecting a strong commitment to security and quality management. From a security perspective, Helmes employs HTTPS, Google reCAPTCHA, and a consent management platform to protect user data and ensure compliance. However, the absence of WHOIS registration data and lack of visible incident response contacts or security.txt file slightly reduce the overall trust score. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Helmes presents a professional, trustworthy, and technically mature digital presence suitable for enterprise clients. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance further.

H

HOOANDJA MTÜ

hooandja.ee

54

Hooandja is a well-established Estonian non-profit crowdfunding platform that enables creative, cultural, social, and community projects to find funding through public support. It holds a strong market position in Estonia with a significant number of successfully funded projects and a large supporter base. The platform offers project discovery, community engagement, and crowdfunding services primarily targeting individuals and organizations within Estonia. Technically, the website is built on Drupal 7, utilizing common web technologies such as jQuery, Google Analytics, Facebook Pixel, and Google Maps API. The site demonstrates moderate performance and basic mobile optimization. Security-wise, HTTPS is enforced, and basic input validation is implemented; however, the absence of security headers and cookie consent mechanisms indicates room for improvement in security posture and privacy compliance. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced security practices and GDPR compliance measures.

P

Proekspert

proekspert.ee

65

Proekspert is an established technology company founded in 2005, specializing in full-cycle software services for device and machine manufacturers. Their offerings include smart product development, device-to-cloud connectivity, and digital services, positioning them as a key player in digital business transformation within the technology sector. The company targets B2B clients, particularly manufacturers seeking to enhance their products with software and connectivity solutions. Technically, the website is built on WordPress with multilingual support, leveraging modern tools such as Google Analytics, Google Tag Manager, and Cookiebot for analytics and privacy compliance. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security-wise, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms, but lacks DNSSEC and explicit security headers. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a mature digital presence with room for improvement in security policies and contact transparency.

H

Hotel Telegraaf

telegraafhotel.com

55

Hotel Telegraaf is a luxury 5-star hotel located in Tallinn’s Old Town, operating under the Marriott Autograph Collection brand. The hotel offers upscale accommodation, spa services, fine dining at Restaurant Tchaikovsky, and event hosting facilities. It targets luxury travelers and business guests seeking premium hospitality experiences. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site is built on WordPress with modern libraries and SEO best practices, supported by Google Analytics and cookie consent mechanisms ensuring GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers could be improved. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall business credibility. Strategic verification of domain registration is recommended to reinforce trust. Overall, the site demonstrates a solid business and technical foundation with room for security and compliance enhancements.

B

Brightway.ro

brightway.ro

46

Brightway.ro is a Romanian company specializing in professional and personal development training, coaching, consulting, recruitment, and team building services. Established since 2004, it offers a broad portfolio of courses and programs aimed at individuals and organizations seeking to enhance leadership, sales, technical skills, and organizational culture. The company leverages expert trainers and innovative methodologies to deliver value and growth opportunities to its clients. The website reflects a mature digital presence with comprehensive content, client testimonials, and multiple service offerings.

Universal Industries is a manufacturing and product development company based in Estonia, offering comprehensive services from product analysis and design to final manufacturing. The company positions itself as a competent partner with a global client base, leveraging modern technologies and years of expertise. The website is built on the Weebly platform and uses common web technologies including jQuery and Google Analytics. While the site is accessible and provides relevant business information, it lacks critical privacy and security documentation such as privacy policies and cookie consent mechanisms. The security posture is moderate, with HTTPS enabled but using an outdated jQuery version and missing security headers. Overall, the website presents a professional image but would benefit from enhanced security and privacy compliance measures.

Liewenthal Electronics Ltd. is a small Estonian engineering and R&D company specializing in embedded systems, electronics, and software design. With over 15 years of experience, the company serves diverse sectors including telecom, medical, industrial, aerospace, and consumer electronics. Their website reflects a professional B2B service provider with a clear portfolio of key services such as system design, software and electronics design, FPGA/PLD design, testing, and small volume production. The company holds ISO 9001 certification and is recognized as an AMD Adaptive Computing Partner, enhancing its market credibility. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Slider Revolution, and uses Google Analytics and Tag Manager for analytics. The site is mobile optimized and has good SEO practices, though performance is moderate. Cookie consent is implemented via Cookiebot, but a domain authorization error is present, indicating a configuration issue. No WAF or blocking mechanisms were detected, and the site uses HTTPS with good SSL configuration. Security posture is moderate; HTTPS is enforced but lacks explicit security headers and dedicated security or incident response policies. No vulnerability disclosure or security.txt files were found. Privacy compliance is basic with a privacy policy present but no strong GDPR compliance indicators. Contact information is clearly provided, supporting business credibility. Overall, the website is trustworthy and professional but could improve security practices and privacy compliance. Strategic recommendations include fixing Cookiebot errors, adding security headers, publishing security and incident response policies, and implementing vulnerability disclosure mechanisms.

T

tõlkebüroo Interlex

interlex.ee

52

Tõlkebüroo Interlex is a well-established Estonian translation bureau founded in 2010, offering a wide range of professional translation and interpreting services including written, oral, AI-assisted, and sworn translations. The company holds internationally recognized certifications ISO 17100 and ISO 18587, underscoring its commitment to quality and industry standards. Their market position is strong within Estonia and internationally, supported by a diverse client base and subsidiary operations such as Dussan OÜ specializing in sworn interpreting. The website reflects a mature digital presence with multilingual support, professional design, and comprehensive service descriptions.

E

Europanel

europanel.com

61

Europanel is a collaborative international consumer panel business that integrates multiple leading household purchase panels worldwide to provide deep shopper insights and support brand growth strategies. The website reflects a mature, well-established business with a strong partner ecosystem including Kantar, YouGov, Ipsos, and others. Technically, the site is built on WordPress with modern web technologies and is hosted on Azure DNS infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and reCaptcha protections, but lacks advanced security headers and explicit privacy and cookie policies. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

E

Eesti Rahva Muuseum

erm.ee

48

Eesti Rahva Muuseum (ERM) is a prominent national museum in Estonia dedicated to preserving and showcasing Estonian ethnography, culture, and history. Operated under the Estonian Ministry of Education and Research, ERM offers a wide range of exhibitions, educational programs, events, and visitor services including a restaurant and retail shop. The museum targets a broad audience including the general public, educators, researchers, and cultural enthusiasts, positioning itself as a leading cultural institution in Estonia. Technically, the website is built on Drupal CMS with modern web technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience. It integrates analytics and marketing tools like Google Analytics, Google Tag Manager, and Facebook Pixel, demonstrating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and employs Google reCAPTCHA on forms to prevent abuse. However, it lacks some security headers that could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident through a GDPR-compliant privacy policy, though a cookie consent mechanism is not clearly present. Overall, ERM's website reflects a professional, trustworthy, and well-maintained digital presence suitable for a government cultural institution. The domain registration aligns with the official entity, reinforcing legitimacy. Strategic improvements in security headers and cookie consent transparency could further strengthen the site's security and compliance posture.

B

BLRT Grupp

blrt.ee

64

BLRT Grupp is a leading industrial holding company in the Baltic Sea region, managing over 50 subsidiaries across multiple countries including Estonia, Latvia, Lithuania, Poland, Ukraine, Finland, and Norway. The company operates in diverse sectors such as shipbuilding, ship repair, manufacturing of high-tech equipment, metal processing, mechanical engineering, transport services, equipment rental, port and stevedoring services, industrial and medical gas production, casting production, and real estate development. Their market position as the largest industrial holding in the Baltics is supported by a broad portfolio and extensive regional presence. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Swiper.js, and Fancybox, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is hosted with Cloudflare DNS and uses HTTPS with good SSL configuration, providing a secure browsing experience. Mobile optimization and SEO practices are implemented at a good level, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no published security or incident response policies are found. Cookie consent mechanisms are in place, indicating GDPR compliance, but more comprehensive privacy and security documentation could enhance trust. Overall, the website reflects a professional and credible industrial business with a solid digital presence. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic improvements in security policy transparency and enhanced security headers are recommended to strengthen the security posture and compliance.

S

Signi

signi.com

71

Signi is a technology company specializing in digital signing and workflow solutions, targeting business and professional users. The website is built on WordPress and employs modern web technologies including Google Analytics, LinkedIn Insight, and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and uses HTTPS with Cloudflare DNS services. Security measures include reCAPTCHA for bot protection and a cookie consent mechanism, though explicit privacy policy and terms of service pages are not detected in the scanned content. The domain is long-established since 2000, registered with a reputable registrar, and shows no suspicious patterns. Overall, the website demonstrates a moderate to good level of digital maturity and security posture.

C

Cesta domů, z.ú.

cestadomu.cz

55

Cesta domů, z.ú. is a Czech non-profit organization providing specialized home hospice and palliative care services to terminally ill patients and their families primarily in Prague. Established in 2001, it operates a multidisciplinary team offering medical, social, and psychosocial support, alongside educational and awareness programs to improve end-of-life care. The organization is funded through donations, grants, and income from its own activities, maintaining a strong community presence and transparent operations. The website reflects a mature digital presence with good content quality, clear navigation, and mobile optimization, supporting its mission effectively. Technically, the site runs on Drupal 7 with modern JavaScript libraries and integrates video content and analytics tools. Security posture is moderate, with HTTPS enforced and cookie consent implemented, but the use of an older CMS version and lack of some security headers suggest areas for improvement. WHOIS data is unavailable, limiting domain legitimacy verification, but the website content and business information align with a credible healthcare non-profit. Overall, the site is professional and trustworthy, serving a critical healthcare niche with room for technical and security enhancements.

P

Patron dětí

patrondeti.cz

47

Patron dětí is a Czech non-profit organization established in 2017, dedicated to supporting children who have faced adversity. The website serves as a platform to share stories of these children and connect donors and volunteers willing to help. The organization positions itself as a trusted charity within the Czech Republic, leveraging modern web technologies such as Nuxt.js and Vue.js to provide a responsive and user-friendly experience. The site integrates standard analytics and marketing tools including Google Analytics, Facebook Pixel, and Hotjar, while maintaining GDPR compliance through cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response procedures are not publicly disclosed. Overall, the website demonstrates a good balance of professional design, technical implementation, and privacy compliance, supporting its mission effectively.

C

Czechitas z.ú.

shop-czechitas.cz

55

Czechitas z.ú. operates a pilot mini e-commerce shop offering branded merchandise and vouchers to support its mission of empowering women and children in the Czech Republic to explore IT. The website is professionally designed, mobile-optimized, and built on the Shoptet platform, integrating standard analytics and marketing tools such as Google Analytics and Facebook Pixel. Contact information and social media presence are clearly provided, enhancing trust and engagement. Technically, the site uses HTTPS with CSRF protection on forms and a cookie consent mechanism, reflecting a good security posture. However, the absence of WHOIS data limits domain legitimacy verification, and security headers are not explicitly detected, suggesting room for improvement. No explicit security policies or incident response contacts are published. Overall, the website demonstrates a solid foundation in content quality, privacy compliance, and business credibility, but would benefit from enhanced transparency in domain registration and security practices. The risk level is moderate with no critical vulnerabilities detected, but verification of domain registration details is recommended to strengthen trust.

4

42 Abu Dhabi

42abudhabi.ae

57

42 Abu Dhabi is a tuition-free coding school based in Abu Dhabi, UAE, operating as part of the global 42 Network. The school emphasizes peer-to-peer learning and project-based education, targeting aspiring coders aged 18 and above. The website reflects a professional and consistent brand image, with clear navigation and good content quality. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools. Security posture is solid with HTTPS and anti-clickjacking measures, though lacks some security headers and explicit privacy policies. The domain registration is consistent with the business location and purpose, enhancing trustworthiness. Overall, the website is well-positioned in the education sector with a strong market presence but should improve privacy compliance and security headers to enhance user trust and regulatory adherence.

4

42 Prague

42prague.cz

64

42 Prague is a tuition-free coding institute that offers innovative, peer-to-peer software engineering education as part of the global 42 Network. The website reflects a strong market position within the education and technology sectors, targeting aspiring coders worldwide with a unique, gamified, and project-based learning model. Technically, the site employs modern analytics and marketing tools, including Google Tag Manager, TikTok Pixel, and Hotjar, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with its business goals.

S

Stop Parkinson vzw

stopparkinson.be

47

Stop Parkinson vzw is a Belgian non-profit organization dedicated to raising awareness and funds for Parkinson's disease research. The website serves as a platform to inform the public, engage donors, and promote fundraising events such as Peloton Parkinson and Trappenloop. The organization targets individuals, companies, and communities interested in supporting Parkinson's research. Technically, the website is built on WordPress using the Divi theme, integrated with Gravity Forms for data collection, and employs modern analytics and tracking tools including Google Analytics and Facebook Pixel. The site is hosted by Combell nv, a reputable provider, and uses HTTPS to secure communications. Security posture is generally good with no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is professional and trustworthy, with a solid business model focused on community engagement and fundraising.