High-risk security reports

T

Telema AS

telema.lv

46

Telema AS is a technology company specializing in Electronic Data Interchange (EDI) and supply chain optimization solutions, targeting businesses seeking to automate and improve their trading document workflows. The company holds a strong regional presence in the Baltics with multilingual websites and certified partners, positioning itself as a reliable and trusted provider in its niche. The website demonstrates a mature digital infrastructure built on WordPress with modern front-end libraries and comprehensive marketing and analytics integrations. Security posture is robust, supported by ISO 27001 certification and HTTPS enforcement, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well managed through Cookiebot and clear privacy policies. Overall, the website reflects a professional, trustworthy, and business-focused digital presence.

T

Telema AS

telema.ee

42

Telema AS is a well-established Estonian technology company specializing in Electronic Data Interchange (EDI) and e-invoicing services, primarily serving the Baltic region. The company positions itself as a market leader and standard developer with a strong focus on seamless and automated business document exchange. Their services cater to businesses seeking efficient and reliable data exchange solutions, supported by a network of certified software partners and global roaming capabilities. The website reflects a mature digital presence with multi-language support and regional domains. Technically, the site is built on WordPress with modern front-end libraries and integrates advanced marketing and analytics tools, including consent management for GDPR compliance. Security posture is strong, evidenced by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

C

Creative Wings

creative-wings.ro

43

Creative Wings is a Romanian digital agency specializing in building websites, web and mobile applications, ecommerce solutions, and online marketing services. With over 12 years of experience, the company positions itself as a creative and functional partner for businesses seeking to establish or enhance their online presence. Their website reflects a professional design with clear navigation and good content relevance, targeting businesses looking for tailored digital solutions. Technically, the site uses modern front-end libraries such as GSAP and Swiper.js, hosted by CYBER_FOLKS S.R.L., but lacks some advanced security configurations such as DNSSEC and security headers. The absence of privacy and cookie policies indicates gaps in compliance with GDPR and related regulations. Contact information is clearly provided, enhancing business credibility.

E

EuPlătesc

euplatesc.ro

45

EuPlătesc.ro is a Romanian online payment processor with nearly two decades of experience providing secure and innovative payment solutions to businesses. The company offers a variety of payment methods including card payments, recurring payments, installment payments, QR code payments, and SMS payments, positioning itself as a comprehensive payment service provider in the Romanian market. The website is professionally designed using WordPress and Elementor, featuring modern SEO practices and mobile optimization. Security is emphasized through the use of HTTPS and 3DSecure authentication technology, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is partially addressed with a cookie consent mechanism, but a dedicated privacy policy page is not clearly found. Overall, the website presents a credible and trustworthy business presence with room for improvement in transparency and security documentation.

N

Nordic Symphony Orchestra

nordicsymphony.com

45

Nordic Symphony Orchestra is a small cultural organization based in Estonia, specializing in classical symphony performances with a focus on Nordic composers and artists. The website serves primarily as an informational portal providing concert schedules, streaming links, and contact details for management and artistic leadership. The business operates in the media sector, targeting classical music audiences in Estonia and the Nordic region. The domain age of nearly two decades supports the legitimacy and established presence of the organization. Technically, the website is built with basic HTML and CSS without modern frameworks or CMS platforms. It lacks mobile optimization and accessibility features, which limits user experience on diverse devices. There is no evidence of advanced analytics, tracking, or advertising technologies, indicating a minimalistic digital footprint. Hosting and DNS are managed through EuroDNS and elkdata name servers, but DNSSEC is not enabled, and no security headers are detected. From a security perspective, the site does not demonstrate strong security practices. There is no visible HTTPS confirmation in the provided data, no privacy or cookie policies, and no incident response or security contact information. These gaps represent compliance and security risks, especially under GDPR regulations. However, the domain registration is consistent and transparent, with no privacy protection or suspicious WHOIS patterns, which supports trustworthiness. Overall, the website is functional but basic, with significant room for improvement in security, privacy compliance, and technical modernization. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, enabling DNSSEC, adding security headers, and improving mobile and accessibility standards to enhance user trust and regulatory compliance.

I

Itera BI

bi365.ee

42

BCS Itera, operating under the brand Itera BI, is a specialized provider of business intelligence and data analytics solutions primarily leveraging Microsoft technologies such as Power BI, BI4Dynamics, and Azure. Founded in 2019 and based in Estonia, the company offers a comprehensive portfolio of services including BI strategy development, data warehouse architecture, BI implementation, cloud BI solutions, version upgrades, and advanced forecasting models. The website demonstrates a mature digital presence with rich content, client case studies, and educational resources, positioning the company as a trusted expert in the BI domain within its regional market. Technically, the site is built on WordPress with modern plugins and analytics integrations, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and privacy compliance are recommended. Overall, the company presents a credible and professional image with clear contact channels and certifications, though it should enhance its privacy and cookie policies to meet compliance standards.

B

BCS itera

crmlahendused.ee

42

BCS itera is an Estonian technology company specializing in providing modern CRM and ERP solutions, including Microsoft Business Central and customer insights services. The company targets businesses seeking to manage customer journeys and sales processes effectively. The website reflects a professional B2B service provider with a clear focus on CRM-related offerings and digital transformation. The presence of a Finnish language partner site indicates regional market expansion. Technically, the website is built on WordPress with Elementor, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and MonsterInsights. The site is served over HTTPS with a good SSL configuration, but lacks some security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the website demonstrates moderate digital maturity with room for improvement in privacy compliance and security best practices.

B

Business Central

businesscentral.ee

42

Business Central is a technology company specializing in Microsoft Dynamics 365 Business Central ERP solutions, targeting medium and large enterprises primarily in Estonia. The company positions itself as a market leader with a comprehensive ERP offering recognized by Forbes as the best ERP in 2024. Their services include ERP implementation, support processes, and consulting, supported by a professional and content-rich website. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Google Fonts, Microsoft Clarity, and Google Tag Manager for analytics. Hosting is provided by Zone Media OÜ, a reputable Estonian hosting provider. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website startupestonia.ee is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to the actual content. This prevents extraction of meaningful business, contact, or policy information. The domain is registered since 2011 with an Estonian registrar, indicating a legitimate and stable presence. The site uses Cloudflare services for security and analytics, but no direct security headers or policies are visible due to the blocking. Overall, the website's digital maturity and content quality cannot be assessed accurately under these conditions.

E

Estonian Maritime Cluster

maritimecluster.ee

40

Estonian Maritime Cluster is a newly established (2024) non-profit organization focused on fostering collaboration, innovation, and growth within Estonia's maritime sector. It serves as a network for maritime professionals, companies, and organizations, aiming to position Estonia as a leading maritime hub in the Baltic Sea region. The website presents a professional and well-structured digital presence built on WordPress, featuring comprehensive contact information and a broad membership base. Technically, the site uses modern web technologies and includes security measures such as HTTPS and Cloudflare Turnstile captcha on forms. However, it lacks critical compliance documents like privacy and cookie policies, and security headers are not implemented, which are areas for improvement. Overall, the domain registration is consistent with the business claims, indicating legitimacy.

E

Estonian Defence and Aerospace Industry Association

defence.ee

42

The Estonian Defence and Aerospace Industry Association is a medium-sized, essential government-related entity representing over 130 companies in Estonia's defence, aerospace, and security sectors. The association focuses on creating market opportunities, advocacy, and fostering cooperation among its members. The website is built on WordPress and uses standard analytics and marketing tools such as Google Analytics and Mailchimp. The technical infrastructure is modern but shows some server-side PHP warnings that could impact stability and security. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is available but limited to email and physical address, with no phone numbers or incident response contacts published. The website is professionally designed with good navigation and mobile optimization, supporting the association's credibility and trustworthiness.

E

Eesti Infotehnoloogia ja Telekommunikatsiooni Liit

itl.ee

47

Eesti Infotehnoloogia ja Telekommunikatsiooni Liit (ITL) is a well-established Estonian industry association representing companies in the digital technology and telecommunications sectors. Founded in 2010, ITL serves as a key advocate and facilitator for its members, which collectively represent over 70% of the sector's turnover. The website reflects a professional and consistent brand presence, offering comprehensive information about the association's activities, events, and member services. The target audience includes Estonian technology companies, policymakers, and stakeholders in the digital economy. Technically, the site is built on WordPress with common plugins for forms, GDPR compliance, and image lightbox functionality. The site is mobile-optimized and SEO-friendly, with moderate performance and basic accessibility features.

I

Intuit

intuitoffice.ee

44

Intuit is an Estonian company specializing in the design, manufacturing, and retail of sustainable and functional office furniture. Their product range includes sofas, chairs, workstations, acoustic booths, and other office-related furniture solutions. The company emphasizes eco-friendly practices, evidenced by their EU Ecolabel certification, and offers flexible rental services for office furniture. The website is built on WordPress, leveraging modern technologies such as Google Tag Manager, reCAPTCHA, and a CDN for optimized image delivery. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and professional content presentation. However, there are gaps in privacy compliance, as no explicit privacy or cookie policies were found, and no consent mechanisms are implemented. Security posture is generally good with HTTPS enabled and secure form handling, but could be improved by enabling DNSSEC and adding security headers. Overall, the website and business appear legitimate and professional, with room for improvement in privacy and security best practices.

T

Tallinna Kontserdimaja AS

kontserdimaja.ee

38

Alexela Kontserdimaja is a prominent concert hall located in Tallinn, Estonia, recognized as the largest in the Baltic region with seating for up to 1829 visitors. The venue offers a variety of services including event hosting, ticket sales, and catering options such as pre-ordered coffee tables and private champagne salon rentals. The website reflects a well-established business with a domain registered since 2010, consistent with its market presence. The target audience includes cultural event attendees and event organizers in the region. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, and multilingual support via WPML. SEO is well-implemented using Yoast SEO, and analytics are managed through Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and event information. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, indicating a baseline security posture. However, there is a lack of explicit security headers and no visible incident response or security policy pages, which could be improved. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may pose GDPR compliance risks. Overall, the website is professional, trustworthy, and functional, serving its business purpose effectively. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.

Carlsberg Ukraine is a large manufacturing company operating as part of the global Carlsberg Group. It produces and distributes beer and beverages in Ukraine with a strong market position and a portfolio of well-known brands. The website provides comprehensive corporate information, news, and sustainability goals, targeting consumers and stakeholders in Ukraine. Technically, the site uses a mix of modern and legacy JavaScript libraries, is mobile optimized, and employs HTTPS with some security best practices, though there is room for improvement in security headers and DNSSEC implementation. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's business credibility and digital presence.