High-risk security reports

AuditPartner is a small Estonian auditing and financial consulting firm with a website primarily in Estonian and an English language option. The company positions itself as a professional service provider focusing on seeing beyond the numbers, targeting businesses requiring auditing and financial services. The website is built on WordPress with common web technologies such as jQuery and Bootstrap, indicating a standard but modern technical infrastructure. Performance and mobile optimization are moderate to good, with basic SEO and accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and visible security policies such as privacy, cookie, or incident response policies. No vulnerability disclosure or security.txt files are present, and no contact information such as emails or phone numbers are explicitly provided on the homepage. These gaps reduce the overall privacy compliance and security posture scores. Overall, the website is functional and professionally designed but lacks critical compliance and security transparency elements. The domain WHOIS data is consistent with the business claims, supporting legitimacy. Strategic improvements in privacy policy publication, security headers, and contact transparency would enhance trust and compliance.

M

M-Partner

mpartner.ee

41

M-Partner is an established Estonian recruitment company specializing in the effective hiring of managers and specialists, with over 20 years of experience and more than 1000 successful recruitments. Their business model focuses on full search and headhunting services, targeting Estonian companies seeking qualified personnel. The website reflects a professional and consistent brand image, supported by client logos and clear service descriptions. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates essential tools such as Google Tag Manager and reCAPTCHA, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, email obfuscation, and cookie consent mechanisms, though additional security headers and formal policies could enhance protection. Overall, the site is accessible, well-structured, and compliant with GDPR, presenting a trustworthy and credible online presence.

The website vanglateenistus.ee is currently inaccessible beyond a Cloudflare Turnstile captcha challenge page, preventing access to any substantive content. The domain is very recently registered (December 2023) and is owned by Elkdata OÜ, a hosting and registrar provider, indicating the site is likely new or under development. Due to the WAF challenge, no business, security, or compliance information is available for analysis. The technical infrastructure relies on Cloudflare's security and analytics services, but no CMS or frameworks are detectable. The security posture cannot be fully assessed, but the presence of Cloudflare WAF indicates some baseline protection. Overall, the site is low trust at this stage due to lack of accessible content and new domain age.

L

Lindab

lindab.si

40

Lindab.si is a Slovenian content and blogging website established in 2022, offering articles on a variety of topics including home, health, sports, services, and technology. The site targets a general Slovenian-speaking audience interested in diverse lifestyle and technology content. The business model is primarily content publishing with no direct e-commerce or transactional services evident. The website is built on WordPress CMS, utilizing Yoast SEO for search optimization and Google reCAPTCHA for form security. The technical infrastructure is modern and moderately performant with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and form protection via reCAPTCHA, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy page present but no cookie consent mechanism detected. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is legitimate, consistent with its domain registration data, and presents a moderate trust level. Strategic improvements in privacy compliance, security policy transparency, and contact information availability would enhance credibility and user trust.

R

Roadplan

roadplan.ee

48

Roadplan is an Estonian company specializing in road project design, outdoor space projects, and consulting services. Founded in 2013, it positions itself as a leading road project designer in Estonia, targeting clients who require sustainable and innovative solutions for their outdoor environments. The website content is primarily in Estonian and focuses on communicating the company's expertise and service offerings. Technically, the website is built on WordPress and uses modern web technologies including Google Fonts, Google Analytics, Google Tag Manager, and reCAPTCHA for form security. The site is hosted by Zone Media OÜ, a known Estonian hosting provider. Performance and mobile optimization are good, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the website uses HTTPS with a valid SSL certificate and employs reCAPTCHA to protect forms. However, it lacks important security headers and does not provide explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and functional but lacks comprehensive privacy and cookie policies, explicit contact information, and detailed security disclosures. These gaps reduce its privacy compliance and slightly impact trustworthiness. Strategic improvements in these areas would enhance the site's security posture and user trust.

Berbank AS operates as a small Estonian financial institution providing traditional banking services including private and business banking, loans, deposits, and internet banking. The website targets Estonian private individuals and business clients, offering localized financial products. The domain is registered since 2019, consistent with a relatively new or niche bank. The technical infrastructure is basic, relying on jQuery and Google Analytics, with no modern frameworks or CMS detected. The website lacks HTTPS enforcement and security headers, which are critical for banking sites, indicating a weak security posture. Privacy compliance is poor, with no visible privacy or cookie policies, and no GDPR compliance indicators. Contact information is present but limited, and no incident response or security policy details are provided. Overall, the site shows moderate business credibility but requires significant improvements in security and privacy to meet industry standards.

D

Dispak

dispak.ee

45

Dispak is an Estonian retail business specializing in the sale of paper and fabric bags, primarily targeting customers seeking packaging solutions for gifts and corporate gifts. The company claims over two decades of experience and offers custom logo printing services with a minimum order quantity. The website is primarily in Estonian and serves the local market with a product-focused approach. Technically, the site uses jQuery and jQuery UI libraries along with Google Analytics and Tag Manager for tracking. The hosting and domain registration are consistent with an Estonian business identity. However, the website lacks explicit privacy, cookie, and terms of service policies, which impacts its compliance posture. Security headers and advanced security practices are not evident, and no incident response or vulnerability disclosure information is provided. Overall, the site is functional with moderate technical implementation but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

L

Laser Diagnostic Instruments

ldi.ee

44

Laser Diagnostic Instruments (LDI) is an Estonian-based company specializing in advanced oil spill detection systems and water monitoring sensors. Their flagship product, the ROW (Remote Optical Watcher), provides autonomous, non-contact detection of oil spills and algal blooms, serving industrial and environmental clients globally. The company has a strong niche market position with installations across multiple continents and industries including energy, water treatment, and shipping ports. The website reflects a professional and consistent brand image with detailed product information and client testimonials, supporting their credibility in the environmental monitoring sector. Technically, the website is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and standard best practices, though improvements are recommended in cookie consent and security headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, LDI presents a trustworthy and professional digital presence aligned with their business objectives.

S

Sparkup

teaduspark.ee

45

Sparkup Tartu Teaduspark is a well-established science and technology park based in Tartu, Estonia, founded in 2010. It serves as a hub for science- and technology-intensive startups and scaleups, offering incubation, acceleration, business development services, and rental spaces. The organization supports companies through various programs including Sparkup Inkubaator, ESA BIC Estonia, and multiple thematic accelerators focused on energy, climate, defense, and logistics. The website reflects a mature digital presence with a modern WordPress-based infrastructure, leveraging Elementor for design and Google Tag Manager and Facebook Pixel for analytics and marketing. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, primarily in Estonian. Overall, the site demonstrates good professionalism, clear navigation, and strong business credibility, positioning Sparkup as a key player in the Estonian innovation ecosystem.

E

Eesti Keskkonnauuringute Keskus OÜ

klab.ee

40

Eesti Keskkonnauuringute Keskus OÜ is a government-affiliated Estonian company specializing in chemical, physical, and microbiological laboratory analyses, geotechnical studies, and environmental condition modeling. The company positions itself as a leading environmental research and laboratory service provider in Estonia, serving government bodies, environmental agencies, and research institutions. Their website reflects a professional and consistent brand image with a clear focus on environmental services and scientific expertise. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site includes a consent management platform (Usercentrics) for cookie compliance and integrates Google Tag Manager for analytics. Performance and mobile optimization are good, though accessibility features are basic. The hosting and domain registration are consistent with an Estonian government-related entity, registered since 2013. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of a security.txt or vulnerability disclosure policy is noted as an area for improvement. Overall, the website demonstrates a solid business credibility and technical foundation with room for enhanced security and privacy policy transparency. The risk profile is low, but strategic improvements in security headers and formal policies would strengthen trust and compliance.

Polhem International is a marketing and communications agency operating primarily in Scandinavia and the Baltics. The company offers a broad range of services including marketing, communication, public relations, events, influencer marketing, digital advertising, social media, and media training. The website reflects a professional and consistent brand presence with a modern technical infrastructure leveraging Nuxt.js and Bootstrap 5 frameworks. Tracking and analytics are implemented via Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, which could be improved. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain is well-established and legitimate, supporting the credibility of the business.

S

SRINI OÜ

srini.ee

45

SRINI OÜ is an Estonian software development company specializing in custom software solutions primarily for government and private sector clients. Founded in 2019, the company operates from Tallinn and Tartu with approximately 80 employees. Their business model focuses on delivering tailored software design, development, and maintenance services, leveraging modern methodologies such as SCRUM and XP. The company has a positive market position supported by government contracts and a spin-off subsidiary, Modena. Technically, the website is built on WordPress, uses Java-based technologies, and integrates Google Analytics and Google Maps APIs. The site is mobile-optimized and SEO-friendly but lacks published privacy and cookie policies, which impacts compliance. Security posture is good with HTTPS enforced, but missing security headers and incident response contacts are areas for improvement. Overall, SRINI presents a credible and professional digital presence with moderate risk and room for enhanced privacy and security practices.

Nixor is a technology solutions provider specializing in retail and IT infrastructure services. Their offerings include sales systems, self-service solutions, POS hardware, payment solutions, electronic shelf labels, weighing systems, security technology, business software, and IT infrastructure. The website targets businesses seeking integrated technology solutions in Estonia and the surrounding region. The company presents itself as a medium-sized, established player in the technology sector with a professional online presence. Technically, the website is built on the Odoo CMS platform, utilizing modern frontend technologies such as Bootstrap and FontAwesome. The site is mobile-optimized and provides a multilingual experience with support for English, Estonian, Latvian, and Lithuanian. Performance is moderate, and SEO practices are adequately implemented. However, accessibility features are basic, and there is room for improvement in technical implementation. From a security perspective, the website lacks visible security headers and explicit security or privacy policies. There is no evidence of GDPR compliance mechanisms such as cookie consent banners or privacy policies. No incident response or vulnerability disclosure information is provided, which may impact trust and compliance. The absence of these elements suggests a need for enhanced security posture and privacy compliance. Overall, the website is functional and professional but requires improvements in privacy, security, and compliance transparency to strengthen trustworthiness and meet regulatory expectations. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and establishing clear incident response and vulnerability disclosure processes.

M

Moonwalk

moonwalk.ee

46

Moonwalk is an Estonian music agency specializing in artist management, music production, and event promotion. The company represents notable artists such as Stefan, Getter Jaani, Black Velvet, and Mr Happyman, positioning itself as a recognized player in the Estonian music industry. The website reflects a professional and consistent brand image, targeting music fans and industry professionals. Technically, the site is built on Squarespace, leveraging modern web technologies and standard analytics tools like Google Analytics and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS but lacks several important security headers such as HSTS and Content-Security-Policy, which could improve its security posture. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the website is credible and functional but would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

N

Nex OÜ

nex.ee

40

Nex OÜ operates as a small Estonian IT service provider specializing in computer repair, network consulting, remote support, and IT infrastructure management. The company positions itself as a reliable local partner with authorized partnerships from recognized brands such as Lenovo and Epson. Their website clearly communicates their service offerings and contact information, targeting businesses and individuals requiring IT support and hardware sales. Technically, the website is built on WordPress and utilizes modern web technologies including jQuery, LiteSpeed Cache, and Google Tag Manager. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, some security best practices such as security headers are missing. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks published privacy and cookie policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for compliance and trust. The WHOIS data is consistent with the business claims, enhancing legitimacy. Overall, the website is professional and functional but would benefit from improved privacy compliance and enhanced security headers to strengthen trust and regulatory adherence.

The website epicenter.ee is currently inaccessible due to an HTTP 403 Forbidden error, indicating that access to the site's content is blocked or restricted by server configuration or security policies. As a result, no metadata, structured data, contact information, or business content is available for analysis. The domain is registered to Zone Media OÜ since 2012, which suggests a legitimate and established presence in Estonia. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or compliance posture. Technically, the site runs on an Apache server hosted by Zone Media OÜ, but no further technology stack details or security headers are visible due to the access restriction. Security posture cannot be evaluated beyond the presence of HTTPS (implied by port 443) and the 403 error. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility due to the blocked content.

The website iaconsulting.info currently presents minimal content, consisting solely of a frameset that redirects visitors to an external domain (www.searchvity.com). There is no visible business information, contact details, or policies on the site, which severely limits the ability to assess the company's market position or services. The domain is registered since 2015 with privacy protection, but the lack of transparency and meaningful content raises concerns about legitimacy and professionalism. From a technical perspective, the website lacks modern infrastructure elements such as HTTPS, security headers, and accessible HTML structure. The use of framesets is outdated and negatively impacts user experience and SEO. No scripts, analytics, or tracking technologies were detected, indicating a very basic or placeholder site. Security posture is weak due to the absence of HTTPS, security headers, and any visible security or privacy policies. The WHOIS privacy protection, while common for small businesses, combined with the minimal content and redirect behavior, suggests a low trust level. There are no indications of incident response readiness or certifications. Overall, the website poses a high risk from a security and trust perspective. It is recommended to implement HTTPS, develop meaningful content including privacy and cookie policies, provide clear contact information, and modernize the technical implementation to improve credibility and compliance.

L

LVM Kinnisvara

lvm.ee

46

LVM Kinnisvara is a well-established Estonian real estate company providing comprehensive property services including sales, valuation, development, and brokerage. The company operates across major Estonian cities with multiple office locations and a professional online presence. Their website is built on WordPress with modern plugins and integrates marketing and analytics tools to engage and track users effectively. Security measures such as HTTPS, CAPTCHA on forms, and cookie consent mechanisms are implemented, though some security headers could be improved. The domain registration data aligns well with the business profile, indicating legitimacy and a mature online presence.

J

Jolos

jolos.eu

44

Jolos is a full spectrum creative agency based in Estonia, specializing in world-class event production, branding, campaigns, and live and virtual events. The company positions itself as a high-quality, professional agency focused on delivering unique and memorable experiences for brands and organizations. The website reflects a mature digital presence built on WordPress, leveraging modern optimization and analytics tools such as Google Analytics and Tag Manager with IP anonymization enabled. The site is well-designed, mobile-optimized, and rich in multimedia content, showcasing detailed case studies and team profiles that enhance trust and professionalism. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and formal security policies suggests room for improvement. Privacy compliance is limited due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.

R

Rescoval

rescoval.ee

42

Rescoval is an Estonian company specializing in advertising installation services, including banner and sticker advertising, seasonal sales areas, and rental of advertising trailers across Estonia. Established in 2010, the company targets retail chains, supermarkets, and shopping centers, offering professional and rapid campaign installations. The website reflects a mature local business with consistent branding and clear service offerings. Technically, the site is built on WordPress with common plugins for SEO, forms, and sliders, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and incident response policies. Overall, the domain registration data aligns well with the business claims, enhancing trustworthiness.

N

Nordic Consult

nordicconsult.ee

40

Nordic Consult is a small Estonian corporate services provider specializing in online company registration, legal address provision, accounting, and e-Residency support. Established since 1997, it targets entrepreneurs and e-Residents seeking efficient company formation in Estonia. The website is built on WordPress with SEO and form plugins, offering a user-friendly experience with clear navigation and relevant content. Technically, the site is hosted via Zone Media OÜ and uses HTTPS with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure form handling but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy and security practices.

Tehnolabor OÜ is a specialized technology development laboratory based in Estonia, focusing on electronics, automation, telecommunication, and industrial solutions. With over 20 years of experience, the company offers comprehensive services from prototype creation to product development and production management. Their portfolio includes projects in healthcare, transportation, and industrial sectors, with notable collaborations such as Airbus and EU-funded research initiatives. The company targets businesses and individuals seeking reliable technology development and automation solutions. Technically, the website is built on WordPress with common plugins and modern JavaScript libraries, providing a good user experience and mobile optimization. Security posture is adequate with enforced HTTPS, though improvements are needed in security headers and server-side HTTPS enforcement. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website reflects a credible and professional business with room for compliance and security enhancements.

S

SandFox OÜ

sandfox.ee

42

SandFox OÜ is a small Estonian company founded in 2016 specializing in integrated energy storage solutions, smart battery management, solar panel integration, and Linux-based IT infrastructure services. The company targets industrial clients and businesses in the energy sector, offering critical IT and industrial automation solutions. Their market position is supported by partnerships with major technology vendors such as RedHat, IBM, Huawei, and SUSE, and they emphasize business-critical IT solutions and energy management. Technically, the website uses a basic but functional stack including jQuery, Google Analytics, and Google Translate, hosted likely by Zone Media OÜ. The site is accessible and moderately optimized but lacks advanced mobile responsiveness and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and visible privacy compliance mechanisms. Overall, the company presents a credible and trustworthy business presence with room for improvement in privacy compliance and technical modernization.

The website leegohansson.com is currently inaccessible due to an origin web server downtime, as indicated by the Cloudflare 521 error page. The domain is very recently registered (July 2024) and uses Cloudflare as a CDN and security provider. There is no accessible business content, contact information, or policies available on the site, which severely limits the ability to assess the business or its market position. Technically, the site relies on Cloudflare but lacks DNSSEC and security headers, and the server is currently non-responsive. The security posture is weak due to the downtime and lack of standard security configurations. Overall, the site presents a high risk due to unavailability and lack of transparency, and it is recommended to restore server availability, implement security best practices, and publish necessary compliance policies to improve trust and security.

G

GS Group

gs-group.com

44

GS Group is a well-established Russian investment and industrial holding company with over 30 years of expertise in high-tech industries, primarily focusing on electronics development and manufacturing. The company operates a diversified portfolio including microelectronics, software development, packaging production, and energy-efficient lighting solutions. Their market position is strong within Russia, supported by a robust production base and a strategic focus on import substitution and technology localization. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting industrial partners, investors, and technology professionals. Technically, the website is built on the Bitrix CMS platform, leveraging modern JavaScript libraries and analytics tools such as Yandex Metrika and Google Tag Manager. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partial; a comprehensive privacy policy is present, but no cookie consent mechanism was detected, which may pose compliance risks under GDPR. Contact information is limited to a subscription form without direct emails or phone numbers, reducing transparency. The domain WHOIS data is consistent with the business profile, showing a long-standing registration with no privacy protection, indicating legitimacy. Overall, GS Group's digital presence is professional and credible but could benefit from enhanced security practices and improved privacy compliance to strengthen trust and regulatory adherence.

M

MyHome OÜ

myhome.ee

42

MyHome OÜ operates a professional real estate brokerage and property management business primarily serving the Estonian market with additional offerings in Spain. The company provides services including property sales, rentals, management, and interior design. The website reflects a well-established small business with a consistent brand and a focus on quality customer service, as evidenced by testimonials and detailed property listings. The technical infrastructure is based on WordPress with common plugins and integrations such as Google Analytics, Google Tag Manager, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is adequate with HTTPS and some security best practices, but lacks advanced headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

The website lasitamaja.com/lander is a newly registered domain (August 2023) currently serving a minimal placeholder or parking page with no substantive business content. The site uses React and JavaScript technologies and includes Google AdSense scripts, indicating an intent to monetize traffic. However, there is no visible business information, contact details, privacy or cookie policies, or terms of service, which limits trust and credibility. Technically, the site is hosted via GoDaddy with domain status locks enabled but lacks DNSSEC and security headers, which are important for domain and web security. The minimal content and lack of SEO or accessibility features suggest a low level of digital maturity. No forms or user data collection mechanisms are present. From a security perspective, the absence of HTTPS enforcement details, security headers, and privacy compliance measures indicates a basic security posture with room for improvement. The domain registration is consistent with a new business but the lack of transparency and content reduces confidence. Overall, the site scores low on content quality, privacy compliance, and business credibility, with moderate technical implementation.

S

Standard

standard.ee

46

Standard is a well-established Estonian company specializing in office and hospitality interior solutions, offering high-quality furniture and comprehensive services including design, manufacturing, and installation. The company targets B2B clients such as businesses, architects, and hotels, with a strong market presence supported by decades of experience and international exports. The website reflects a mature digital infrastructure built on WordPress, leveraging modern technologies and SEO best practices to deliver a professional user experience. Security posture is solid with HTTPS enforcement, cookie consent compliance, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the site demonstrates a trustworthy and credible business presence with room for enhanced privacy and security disclosures.

The website duendekoolitused.ee currently presents no visible content, with an empty HTML body and no metadata, scripts, or forms. The domain is registered since 2010 with Zone Media OÜ, a known Estonian registrar and hosting provider, indicating a legitimate registration history. However, the lack of website content and absence of contact or policy information significantly limit the ability to assess the business operations or digital maturity. The technical infrastructure appears minimal, with no detected CMS, frameworks, or security headers. Security posture is weak due to missing HTTPS information and lack of security best practices. Overall, the website is either inactive or a placeholder, resulting in a low trust and security score.

S

Sisustuskoda OÜ

sisustuskoda.ee

42

Sisustuskoda OÜ is a small Estonian company specializing in custom-made furniture, particularly kitchen furniture for residential customers. Established in 2014, the company positions itself as a provider of quality, durable, and design-focused furniture solutions. Their website reflects a professional and consistent brand image, targeting consumers seeking bespoke interior furnishings. The business operates primarily in the retail sector with a local market focus in Estonia. Technically, the website is built on WordPress using the Astra theme and WooCommerce for e-commerce capabilities. It integrates modern tools such as Google Tag Manager and Google reCAPTCHA to enhance functionality and security. The site is mobile-optimized and demonstrates good SEO practices through structured data and meta tags. Hosting appears to be managed by Zone Media OÜ, consistent with the domain's Estonian registration. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks explicit security headers and published security or incident response policies. Privacy and cookie policies are absent, posing compliance risks under GDPR. No vulnerability disclosure or security contact information is provided, which could impact trust and incident handling readiness. Overall, the website is functional and credible for its business purpose but would benefit from enhanced privacy compliance, improved security headers, and transparent security policies to strengthen its security posture and regulatory adherence.

C

Celsius Healthcare

celsius.ee

42

Celsius Healthcare is a leading Estonian medical information company specializing in delivering comprehensive healthcare communication solutions. Their services include the largest medical web publication Med24, organizing medical conferences and training, and publishing specialized healthcare journals. The company targets healthcare professionals such as doctors, nurses, pharmacists, and decision-makers within Estonia, positioning itself as a key player in the national healthcare media and event sector. Founded in 2010, Celsius Healthcare has established a strong market presence supported by public grants and cluster memberships.

B

BCS Auto - Baltic Car Solutions

bcsauto.ee

48

BCS Auto - Baltic Car Solutions is a well-established Estonian company specializing in long-term car rental, vehicle sales, commission sales, and automotive services since 2007. The company targets both private individuals and businesses seeking flexible and cost-effective vehicle solutions. Their market position is strong within Estonia, supported by recognition from the Transport Authority and positive customer testimonials. The website is built on a modern WordPress platform with WooCommerce and Elementor, integrating SEO and marketing tools such as Yoast SEO, Google Analytics, Microsoft Clarity, and MailerLite. Social media presence on Facebook and Instagram further supports their brand visibility. Security posture is adequate with HTTPS and no exposed sensitive data, though improvements in security headers and explicit security policies are recommended. Privacy compliance is basic with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the website is professional, user-friendly, and trustworthy, reflecting a medium-sized transportation business with a solid digital presence.

The website envir.ee is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks direct content access. The domain is registered since 2010 with an Estonian registrar, indicating a potentially established entity. However, no business, contact, or policy information is publicly visible, limiting the ability to assess the company's operations or compliance. The technical infrastructure relies on Cloudflare's security and performance services, including Turnstile captcha and insights beacon. Due to the access restrictions, the security posture cannot be fully evaluated, but the presence of Cloudflare indicates a baseline security layer. Overall, the site lacks publicly accessible content, policies, or contact details, resulting in a low trust and compliance profile.

Bole is a company specializing in innovative and sustainable flooring solutions, prominently featuring their unique product that follows the natural growth of trees. The website positions Bole as an innovator in the manufacturing sector, targeting design professionals and environmentally conscious consumers. The digital infrastructure is built on WordPress with modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. The website is mobile optimized and provides a catalog download feature through a secure form submission process. Security posture is adequate with HTTPS enabled and secure form handling, but lacks important security headers and visible privacy and terms policies, which are critical for compliance and trust. Overall, the website is professional and functional but would benefit from enhanced transparency and security practices.

A-Film Distributie B.V. is a Dutch film distribution company providing a platform for cinema listings, DVD and Blu-ray sales, and film promotion. The website targets film enthusiasts in the Netherlands, offering detailed information on current and upcoming films, trailers, and classic film collections. The business model focuses on film distribution and consumer engagement through digital content and social media channels. Technically, the site is built on WordPress with MooTools and Yoast SEO, indicating a moderate level of digital maturity with room for improvement in mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is basic with privacy and cookie policies present but no explicit GDPR compliance statements or data protection officer contact. Overall, the site is professional and trustworthy but could enhance security and privacy transparency to improve user trust and compliance.

P

Printlanti Oy

printlanti.fi

49

Printlanti Oy is a Finnish print management company specializing in print brokerage and production management services. With over 10 years of experience and a strong network across Finland and the Baltic region, they provide cost-effective print solutions to small and medium-sized enterprises. Their website reflects a professional and consistent brand image, targeting businesses seeking expert print management to optimize resources and reduce costs. Technically, the site is built on WordPress using the Enfold theme, incorporating modern web technologies and marketing tools such as Google Analytics and Survicate. Security posture is solid with HTTPS enabled and standard domain protections, though DNSSEC is not enabled and no explicit security policies or vulnerability disclosures are present. Privacy compliance is basic, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is trustworthy and well-positioned in its niche, though improvements in privacy and security transparency are recommended.

A

AQ Trafotek Oy

trafotek.fi

47

AQ Trafotek Oy is a Finnish company specializing in the manufacturing and supply of inductive electrical components such as power transformers, reactors, and filters. Established in 2010 and now part of the AQ Group, the company serves industrial production, renewable energy, and marine transportation sectors. Their website reflects a professional B2B business model with clear branding and consistent messaging aligned with their market position. Technically, the website is built on WordPress using modern plugins like Yoast SEO and WPBakery Page Builder, hosted likely on Cloudpit infrastructure. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features and security headers. Performance is moderate, suitable for their target audience. From a security perspective, the site enforces HTTPS and uses secure form plugins, with no visible vulnerabilities or exposed sensitive data. However, it lacks security headers and a cookie consent mechanism, which are recommended for GDPR compliance. No incident response or security policy information is published, indicating room for maturity in security governance. Overall, the website and domain registration data are consistent and trustworthy, with a solid business presence and moderate technical sophistication. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance their security posture and trustworthiness.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which indicates that the actual website content for the domain 'chromewebdata' is not accessible or blocked. This page primarily contains embedded Chromium offline game scripts and styling, with no real business or website content available. Consequently, no privacy, cookie, or terms of service policies are present, nor is there any contact or security policy information. The technical infrastructure is limited to Chromium's internal JavaScript and canvas-based game code, with no external hosting or CMS detected. Security posture is minimal due to lack of accessible content and absence of security headers or HTTPS enforcement details. The domain WHOIS data is not provided, preventing any domain legitimacy or registration analysis. Overall, the site is inaccessible for meaningful business or security evaluation, resulting in a low AI score and no trust indicators.

W

Woodman

woodman.ee

41

Woodman is a medium-sized Estonian company specializing in the manufacturing and retail of designer furniture products. With over 16 years of professional service and sales in more than 20 countries, Woodman positions itself as a reliable and modern furniture producer collaborating with international designers. Their business model focuses on flexible production quantities and modern technologies to serve retailers and designers globally. The website reflects a professional brand image with good content quality and clear navigation, targeting furniture retailers and design professionals. Technically, the website is built on Joomla CMS and utilizes common web technologies such as jQuery, Google Analytics, Google reCAPTCHA, and bxSlider for interactive elements. The site is hosted by Radicenter OÜ, an Estonian hosting provider, and uses HTTPS with a valid SSL certificate, ensuring secure communication. Mobile optimization is good, though accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site employs HTTPS and Google reCAPTCHA on its contact form, which are positive indicators. However, no security headers were detected, and there is no published privacy policy, cookie consent, or terms of service, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is functional and professional but lacks critical privacy and security documentation. The domain registration is consistent with the business claims, enhancing trustworthiness. Strategic improvements in privacy compliance, security headers, and contact transparency would strengthen the site's security posture and user confidence.

T

Tugikeskus JUKS

juks.ee

42

JUKS is a Tallinn-based social and healthcare institution managed by the Tallinn Social and Health Care Department, focusing on supporting working-age individuals with intellectual disabilities. The organization provides a range of specialized care, social and work-related rehabilitation services, and training programs. The website reflects a government-managed entity with a clear mission and consistent branding. Technically, the site is built on WordPress with standard plugins and integrates Google Analytics for visitor tracking. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite analytics usage. Overall, the domain registration data supports the legitimacy and trustworthiness of the site.

In Nomine OÜ is an established Estonian communication and public relations agency founded in 2001, offering effective communication and PR services primarily targeting businesses and organizations. The company positions itself as a creative and experienced agency with a strong local presence and a portfolio of successful projects. The website reflects a professional and consistent brand image with clear messaging in Estonian and English language support. Technically, the website is built on WordPress using modern frameworks and plugins, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the website demonstrates a trustworthy and credible business presence with room for enhanced security and compliance documentation.

TIIB Kindlustusmaakler OÜ is an Estonian insurance brokerage firm established in 2010, offering various insurance products such as traffic, casco, home, and property insurance. The company maintains a basic but functional website providing essential business and contact information, including financial reports and legal documents, which supports its credibility in the local market. The website targets Estonian customers seeking insurance brokerage services and positions itself as a trusted local player in the finance sector. From a technical perspective, the website is built using basic HTML and CSS without modern frameworks or CMS detected. The site lacks mobile optimization and advanced accessibility features, indicating a need for modernization. No analytics or tracking technologies are present, suggesting minimal user data collection. Hosting and domain registration are stable and consistent with the business profile, registered through Telia Eesti AS. Security posture is weak due to the absence of visible HTTPS confirmation, security headers, privacy and cookie policies, and incident response information. No forms or interactive elements are present, reducing attack surface but also limiting user engagement. The lack of GDPR compliance indicators and cookie consent mechanisms poses regulatory risks. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

S

Superangel OU

superangel.io

48

Superangel OU operates as an early stage venture capital fund and company builder focused on technology startups in the Baltics and Nordics. The company targets tech founders raising pre-seed or seed rounds, offering investment tickets typically between €300k and €1M. Their business model centers on leveraging entrepreneurial experience and networks to support scalable tech ventures in AI, robotics, logistics, fintech, and SaaS sectors. The website presents a professional and consistent brand image with clear messaging and portfolio highlights, positioning Superangel as a niche regional VC player with a strong founder-centric approach. Technically, the website is built on WordPress with modern SEO practices including Yoast SEO and structured data (JSON-LD). It uses common web technologies such as jQuery, GSAP for animations, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. No hosting provider is explicitly identified, and DNSSEC is not enabled, which is a minor security gap. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain status clientTransferProhibited, which protects against unauthorized domain transfers. However, security headers are not detected, and there is no visible cookie consent mechanism or published security/incident response policies. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is consistent with the business claims, showing a domain registered in Estonia since 2017 under the company name Superangel OU, supporting legitimacy. Overall, the website demonstrates a good balance of business credibility, technical implementation, and content quality. Privacy compliance could be improved by adding cookie consent and more explicit GDPR-related disclosures. Security posture would benefit from enhanced HTTP headers and published policies. The risk level is low, with no critical issues detected, making the site trustworthy for its intended audience.

D

DECK Engineering OÜ

deckengineering.ee

40

DECK Engineering OÜ is a specialized engineering and EPC company based in Estonia, founded in 2013. The company focuses on mechanical engineering, structural calculations, and turnkey EPC solutions primarily for the Oil & Gas, Offshore, Marine, and Machine-building industries. Their website presents a professional image with detailed service descriptions, project references, and partner logos from recognized classification societies, indicating a credible market position within their niche. The target audience includes industrial clients requiring engineering design and manufacturing services in energy and manufacturing sectors. Technically, the website employs a modern frontend stack including jQuery, Bootstrap 4.3.1, and a proprietary Imperial CMS framework. The site is mobile optimized with good navigation and moderate performance. However, accessibility features are basic and SEO optimization is minimal. No analytics or tracking scripts were detected, suggesting a privacy-conscious or minimal tracking approach. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were found, but the absence of privacy and cookie policies represents a compliance gap, especially under GDPR. Incident response and vulnerability disclosure information are also missing, which could impact trust and readiness for security incidents. Overall, the website is professional and credible but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information. These improvements would strengthen trust and align the site with best practices in security and privacy.

P

Pelltech

pelltech.eu

47

Pelltech is a specialized company focused on the development, manufacture, and sale of pellet burners and boilers, targeting the renewable energy market primarily in Estonia. The company emphasizes its own design and development capabilities, offering products with online monitoring and software update features. The website reflects a professional and consistent brand image with good content quality and clear navigation, supporting their market positioning as a niche energy equipment provider. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and SEO best practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the domain registration aligns well with the company’s profile, indicating legitimacy and trustworthiness.

E

Eesti Kindlustusmaaklerite Liit

ekml.ee

42

Eesti Kindlustusmaaklerite Liit is a professional association representing leading insurance brokers in Estonia. The organization acts as a liaison between its members and the government, particularly in regulatory matters, providing a unified voice for the insurance brokerage sector. The website serves as an information hub for members and clients seeking insurance brokerage services, offering news, member contacts, and membership information. The site is built on WordPress with modern plugins and SEO optimizations, reflecting a moderate to good level of digital maturity. Security measures include HTTPS and Google reCAPTCHA on forms, but lack explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, suitable for its niche audience.

K

Kiviõli Keemiatööstus

keemiatoostus.ee

44

Kiviõli Keemiatööstus is an established Estonian company operating in the energy and chemical manufacturing sector. The website presents the company as a regional player focused on traditional energy and chemical production, targeting Estonian-speaking audiences with multilingual support for Russian and English. The business model centers on industrial manufacturing with a clear emphasis on energy and chemical products. The website content is professionally presented with good design quality and clear navigation, supporting a positive user experience. Technically, the website is built on WordPress with common plugins such as Yoast SEO and WPML for multilingual capabilities. It uses jQuery and Google Fonts, and the site is mobile optimized with moderate performance. SEO practices are well implemented, and accessibility is basic but present. The site is served over HTTPS with no detected blocking or WAF mechanisms, indicating a secure and accessible infrastructure. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not provide explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's business claims, supporting domain legitimacy. Overall, the website demonstrates a solid digital presence with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency would enhance trust and resilience. The site is suitable for its business purpose but could benefit from further security and compliance enhancements.