Security Directory

A

Art Media Agency

artmedia.ee

50

Art Media Agency is a small Estonian digital agency specializing in website creation services, catering to notable clients including marketers, digital agencies, and advertising bureaus. The website demonstrates a professional and consistent brand presence with good content quality and clear target audience focus. The business model revolves around providing tailored website development solutions, positioning itself as a trusted service provider in its niche. Technically, the website is built on WordPress CMS, leveraging modern web technologies such as Google reCAPTCHA for bot protection, Cookiebot for cookie consent management, and common frontend libraries including jQuery and Bootstrap. The site is mobile-optimized and exhibits good SEO practices with structured data and meta tags, although some accessibility features could be enhanced. From a security perspective, the website employs HTTPS and integrates reCAPTCHA to secure forms, alongside a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response contacts, which are recommended for improving its security posture. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation. Strategic improvements in security headers, privacy policy publication, and incident response readiness would further enhance trust and compliance.

S

Spend Matters

spendmatters.com

71

Spend Matters is a well-established procurement solutions intelligence platform founded in 2004, providing market insights, analysis, and news targeted at procurement professionals and business decision makers. The website demonstrates a professional design and consistent branding, leveraging modern web technologies and marketing tools such as HubSpot, Facebook Pixel, and LinkedIn Insight for analytics and advertising. The technical infrastructure is based on WordPress, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of explicit privacy policies, terms of service, and security headers indicates room for improvement in compliance and security best practices. Overall, the domain registration data supports the legitimacy and stability of the business, with no suspicious patterns detected.

D

Domain Protection Services, Inc.

videoly.co

65

Videoly is a technology company founded in 2014 that offers a SaaS platform designed to automatically connect product videos to online stores, targeting online retailers and brands. Positioned as a leading product video platform, Videoly aims to increase sales and streamline video distribution for e-commerce businesses. The website reflects a modern digital presence built on Webflow CMS, leveraging Cloudflare for hosting and DNS services, and integrates advanced marketing and analytics tools such as HubSpot, Google Analytics, and Cookiebot for privacy compliance and user tracking. From a technical perspective, the website demonstrates good implementation with responsive design, moderate performance, and adherence to SEO best practices. The use of Cookiebot ensures GDPR-compliant cookie consent management, reflecting a strong commitment to privacy. Security posture is solid with HTTPS enforced and domain transfer protections in place, although there is room for improvement in DNSSEC adoption and explicit security headers. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, the absence of a public security policy, incident response contacts, or vulnerability disclosure mechanisms suggests opportunities to enhance transparency and readiness. The domain's WHOIS data indicates privacy protection typical for SaaS businesses, with a well-aged registration supporting legitimacy. Overall, Videoly presents a professional and trustworthy online presence with good privacy and security foundations. Strategic enhancements in security policy publication, DNS security, and contact information transparency would further strengthen its risk posture and stakeholder confidence.

H

Härkila

harkila.com

75

Härkila is a well-established hunting apparel and equipment brand with a strong market presence in over 50 countries. The company offers a wide range of hunting clothes, footwear, and accessories targeting hunters and outdoor enthusiasts. The website reflects a professional e-commerce platform built with modern technologies such as React and Next.js, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy and terms of service. Overall, the website is trustworthy and credible but could improve transparency and security practices.

K

Keskuskauppakamari

ilmoituskanava.fi

75

Ilmoituskanava.fi is a Finnish whistleblowing channel service operated by Keskuskauppakamari, providing organizations with an efficient and cost-effective platform to establish whistleblowing channels. The website is professionally designed using WordPress CMS, integrating modern SEO and cookie consent technologies such as Yoast SEO and Cookiebot. The service targets organizations requiring compliance with whistleblowing regulations, positioning itself as a niche government-related service in Finland. The domain registration data aligns well with the business entity, reinforcing legitimacy and trust. Technically, the website employs a standard WordPress stack with essential plugins for forms and analytics, hosted on Finnish nameservers. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search engine visibility. Cookie consent is implemented with a clear mechanism, supporting GDPR compliance. Security headers and HTTPS are properly configured, contributing to a solid security posture. However, some areas such as accessibility and explicit security policies could be improved. Security-wise, the site shows no signs of vulnerabilities or exposed sensitive data. The use of third-party scripts is standard, with tracking and marketing cookies disclosed via Cookiebot. No incident response or vulnerability disclosure information is present, which could be a gap for security transparency. Overall, the site maintains a good balance of security, privacy, and usability. The overall risk assessment is low, with the site appearing trustworthy and compliant with relevant privacy regulations. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility features, and maintaining regular audits of third-party integrations to mitigate potential risks.

A

Admicom

trackinno.com

57

Admicom is a Finnish technology company specializing in software solutions for fleet management, maintenance, and construction project management. Their product Trackinno offers digital tools to keep important fleet and maintenance information accessible anytime and anywhere. The company targets businesses in construction, real estate, and related sectors, providing SaaS solutions to improve operational efficiency. Technically, the website is built on the HubSpot CMS platform and integrates modern web technologies including Google Tag Manager, Cookiebot for consent management, and analytics tools such as Google Analytics and Hotjar. The site is mobile optimized and provides a professional user experience with clear navigation and structured content. From a security perspective, the website uses HTTPS and cookie consent mechanisms but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, the website presents a professional and trustworthy front for Admicom's business offerings, but improvements in security transparency and WHOIS data availability are recommended to enhance trust and compliance.

M

MPY Telecom Oyj

mpy.fi

55

MPY Telecom Oyj is a Finnish telecommunications company specializing in providing fiber optic internet and reliable connectivity services to residential customers, housing companies, and businesses. Established in 2000, MPY has a strong market presence in Finland, offering high-speed internet solutions tailored for remote work, entertainment, and communication needs. The website reflects a professional and consistent brand image with clear service offerings and customer-centric content. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Matomo and Google Analytics, managed with a compliant cookie consent mechanism. Security-wise, the website enforces HTTPS, implements key security headers, and maintains good SSL configuration, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, MPY demonstrates a mature digital infrastructure and a trustworthy online presence, with room for improvement in security transparency and accessibility compliance.

V

Vetonaula

vetonaula.fi

70

Vetonaula is a Finnish IT service provider specializing in offering outsourced IT teams as a subscription-based service. The company targets Finnish businesses seeking to improve their IT solutions by leveraging expert IT teams easily and flexibly. The website presents a professional and modern digital presence, built on WordPress with integration of standard web technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for cookie consent management. Structured data is implemented to enhance SEO and provide clear organization information. Security posture is strong with HTTPS enforced and security headers present, although explicit privacy and terms of service policies are missing, which impacts compliance confidence. Contact information is not directly visible on the homepage, which may affect user trust and engagement.

G

G4S Eesti AS

nublu.ee

62

Nublu.ee is the official website for Nublu, a smart smoke and carbon monoxide detector product offered by G4S Eesti AS. The product uniquely combines traditional smoke detection with remote alerting capabilities and emergency service notification, targeting homeowners and families in Estonia concerned about fire and gas safety. The website content is professionally presented in Estonian with clear navigation and mobile optimization, reflecting a medium-sized business with a solid market position in the energy and security sector. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, with backend indications of Laravel framework usage. Security posture is good with HTTPS enforced and CSRF protections, though explicit security policies and incident response contacts are not published. Privacy compliance is supported by a comprehensive cookie consent mechanism, but a formal privacy policy page is not clearly found. Overall, the website demonstrates a mature digital presence with extensive tracking and advertising integrations, aligned with business credibility and trustworthiness.

G

G4S

aiko.ee

69

The website aiko.ee represents a wireless home security service branded as AIKO, supported by the established security company G4S. It offers a modern, wireless home alarm system with a mobile app for remote control and monitoring. The business targets residential customers in Estonia seeking reliable home security solutions with professional installation and a security guarantee. The site is professionally designed, mobile-optimized, and integrates consent management via Cookiebot, reflecting a mature digital presence. Technically, the site uses Bootstrap, Google Fonts, Google Tag Manager, and Cookiebot scripts, hosted by Telia Eesti AS, ensuring stable infrastructure and performance. Security posture is good with HTTPS enforced and no exposed sensitive data, though additional security headers could enhance protection. Privacy compliance is supported by a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

Directo äritarkvara

directo.ee

53

Directo äritarkvara is a well-established Estonian business software provider specializing in ERP, accounting, financial management, warehouse, production, and CRM solutions. The company holds a strong market position in Estonia with the largest user base for web-based business software. Their business model is SaaS, targeting Estonian and regional businesses, supported by multilingual websites for neighboring countries. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS and cookie consent mechanisms, but there are gaps such as missing advanced security headers and a misconfiguration in Cookiebot domain group authorization. No privacy policy or terms of service pages were detected, which impacts compliance and trust. WHOIS data confirms domain legitimacy with consistent registration since 2010. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures.

H

Harju Elekter Oy

harjuelekter.fi

52

Harju Elekter Oy is a leading Finnish company specializing in electrical and automation technology solutions, serving industrial, energy, and transportation sectors. The company offers a broad range of services including electrical system manufacturing, transformer production, electrical contracting, and electric vehicle charging solutions. Their market position is strong within Finland and internationally, supported by a reputable parent company, Harju Elekter Group. The website reflects a professional and consistent brand image with comprehensive content tailored to B2B clients. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Cookiebot for compliance. The infrastructure is stable with good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and use of Google reCAPTCHA, though some security headers could be improved. Overall, the security posture is mature with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence. The domain registration details are consistent and transparent, reinforcing trustworthiness. Strategically, the company should enhance security headers, publish explicit security policies, and maintain regular updates to sustain their strong security and compliance stance.

U

UPGREAT

upgreat.ee

53

UPGREAT is an Estonian-based e-commerce retailer specializing in used and guaranteed Apple devices such as iPhones, MacBooks, iPads, and Apple Watches. The company positions itself as the largest provider of checked used Apple products in Estonia, offering a two-year warranty to customers. The website is built on WordPress with WooCommerce, leveraging modern marketing and analytics tools including Google Tag Manager, TikTok Pixel, Hotjar, and Klaviyo, indicating a mature digital marketing infrastructure. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations. However, explicit privacy and terms of service policies are not detected in the provided content, which may impact compliance and user trust.

P

Proact SE

proact.se

76

Proact SE is a leading Swedish IT services company specializing in data storage, backup, cybersecurity, network solutions, and modern workplace consulting. Positioned as Europe's leading specialist in data and information management with a focus on cloud services and data center solutions, Proact offers expert consulting and 24/7 support to its business clientele. The website reflects a professional and consistent brand image with comprehensive service descriptions and a strong emphasis on expertise and support. Technically, the website is built on a modern WordPress CMS platform using Elementor and Yoast SEO plugins, indicating a mature digital infrastructure. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be improved. Analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot are integrated, supporting data-driven marketing and compliance. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements a robust cookie consent mechanism via Cookiebot. However, explicit security headers are not detected, and there is no visible security policy or incident response contact information, which are areas for improvement. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. The lack of WHOIS data for the exact queried subdomain is typical and does not detract from the legitimacy of the main domain. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer contact information to further strengthen trust and compliance.

P

Proact IT NL | #thepoweroftogether

proact.nl

75

Proact IT NL is a well-established European IT service and managed service provider specializing in cloud and data center solutions. With a strong presence in 12 countries across Europe and North America, the company targets enterprise clients seeking advanced IT infrastructure and managed services. Their business model focuses on delivering tailored cloud transformation, security, storage, and professional consulting services. The website reflects a mature digital presence with comprehensive investor relations and corporate governance information, underscoring their market position and transparency. Technically, the website is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and third-party tools like Google Tag Manager and Cookiebot for analytics and compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, Proact IT NL demonstrates a high level of professionalism, security awareness, and compliance, making it a trustworthy and credible IT service provider. The domain registration details align well with the company's history and business claims, further reinforcing legitimacy. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and security readiness.

P

Proact DE

proact.de

75

Proact Deutschland is a large, established IT service provider specializing in data and information management, cloud services, and data center solutions. Positioned as a leading European specialist, the company targets businesses seeking comprehensive IT strategy consulting, implementation, and operational support. The website reflects a professional digital presence with clear branding and consistent messaging aligned with its market position. Technically, the website is built on WordPress using modern plugins such as Yoast SEO Premium and Elementor, supported by SiteGround hosting inferred from optimization plugins. The site employs HTTPS with strong SSL configuration and integrates Cookiebot for GDPR-compliant cookie consent management. Google Tag Manager and reCAPTCHA are used for analytics and bot protection respectively, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices including HTTPS enforcement and consent management. However, it lacks explicit security headers, published security policies, and incident response contacts, which are recommended for enhanced security posture. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy and professionally maintained, with moderate to good scores in content quality, technical implementation, security, privacy compliance, and business credibility. Strategic improvements include publishing privacy and security policies, adding security headers, and providing clear contact information for incident response to further strengthen trust and compliance.

P

Proact UK

proact.co.uk

69

Proact UK is a leading European specialist in IT infrastructure, security, and workspace solutions, delivering expert consulting, services, and 24/7 support focused on data management, backup, cybersecurity, networking, and modern workspace environments. The company positions itself as a trusted partner for businesses seeking cloud transformation, private and public cloud solutions, data centre modernization, and operational resilience. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service offerings. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and cookie consent management via Cookiebot. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. WHOIS data for the exact domain 'www.proact.co.uk' is unavailable due to it being a subdomain, but related domains and website content support legitimacy. Overall, the site demonstrates a solid business and technical foundation with room for enhanced privacy and security disclosures.

1

1plusX

1plusx.com

73

1plusX is a technology company specializing in AI-powered first-party data management solutions for publishers and advertisers. Positioned as an award-winning data management platform, it offers services such as audience management, data clean rooms, connected TV solutions, and privacy-first data strategies. The company is a subsidiary of TripleLift, enhancing its market credibility and reach. The website demonstrates a professional digital presence with clear branding, client testimonials, and a focus on privacy compliance. Technically, the site is built on WordPress with modern SEO and cookie consent tools, ensuring good performance and user experience. Security posture is solid with HTTPS and privacy mechanisms, though some security headers and policies could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility features to further strengthen trust and compliance.

L

Liquid Instruments

liquidinstruments.com

68

Liquid Instruments is a technology company specializing in innovative software-reconfigurable hardware platforms designed for scientists, engineers, students, and professionals in test and measurement fields. Their flagship product, Moku, offers multi-instrument modes and cloud compilation services, positioning them as a niche leader in scientific instrumentation. The website reflects a professional and modern digital presence, leveraging WordPress with advanced marketing and analytics integrations such as HubSpot, Google Analytics, and Hotjar. The technical infrastructure is robust, hosted on DreamHost with a secure HTTPS configuration and a consistent branding approach. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and no detected vulnerabilities, although some security headers could be enhanced. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website demonstrates a mature digital footprint with good business credibility and technical implementation.

L

Lappset GmbH

lappset.de

57

Lappset GmbH operates as a manufacturer and supplier of innovative playground and sports equipment, targeting organizations and communities interested in promoting active play and social interaction. The website presents a professional and consistent brand image with good content quality and user experience, primarily in German. Technically, the site is built on WordPress, leveraging modern tools such as Google Tag Manager, Google Analytics, and Cookiebot for consent management and analytics. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, though some security headers are missing and no explicit security policy or incident response information is provided. Privacy compliance is supported by a comprehensive cookie consent mechanism, but no explicit privacy policy or terms of service pages were detected in the provided content. Overall, the website is trustworthy and well-maintained, with room for improvement in transparency and security best practices.

Tady Chutná is a hospitality business operating four distinct restaurants in the heart of Prague, specializing in traditional Czech and Austro-Hungarian cuisine. The brand emphasizes quality food, regional wines, and a rich historical ambiance, targeting both locals and tourists seeking authentic dining experiences. The parent company, Husičky s.r.o., manages these establishments with a focus on culinary heritage and customer satisfaction. The website serves as a central hub linking to each restaurant's dedicated site and provides daily menu offerings and contact information. Technically, the website is built on WordPress 6.8.1, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for interactive elements. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing, alongside Cookiebot for GDPR-compliant cookie consent management. Hosting is provided by Webglobe, consistent with the domain's WHOIS data. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies. No forms are present for direct data collection, reducing attack surface, but the absence of privacy and terms of service documents represents a compliance gap. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and preparedness. Overall, the website presents a professional and trustworthy front for a medium-sized hospitality business, with good technical implementation and moderate privacy compliance. Strategic improvements in policy transparency and security posture would further strengthen its risk profile and customer confidence.

M

Miltton Latvia

miltton.lv

51

Miltton Latvia is a creative and dynamic agency focused on providing communication consulting and branding services to clients in Latvia and the Baltic region. The company positions itself as a bold and innovative partner helping clients to be visible in a changing world. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for GDPR compliance, and integrates Google Analytics for traffic analysis. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and headers could be improved. Overall, the site demonstrates a good balance of business professionalism, technical implementation, and privacy compliance, suitable for a medium-sized agency in the media sector.

M

Miltton

miltton.com

53

Miltton is a well-established consultancy agency founded in 2007, specializing in business, communications, and design services aimed at enabling impactful change for organizations. The company operates across multiple European markets with subsidiaries and regional sites, positioning itself as a strategic partner for business transformation, branding, and communications. The website reflects a mature digital presence with rich content including case studies, insights, and news updates, targeting businesses and organizations seeking consultancy and creative solutions. Technically, the site is built on WordPress with modern technologies such as Tailwind CSS, jQuery, and integrates advanced SEO and analytics tools like Yoast SEO, Matomo, and Google Tag Manager. Mobile optimization and accessibility are well addressed, providing a seamless user experience across devices. Security posture is good with HTTPS enforced and privacy compliance supported by Cookiebot for consent management, although some security headers and DNSSEC are missing. No direct contact emails or phone numbers are published, relying on contact forms for communication. Overall, the site demonstrates high professionalism and trustworthiness with minor areas for security enhancement.

S

STIGA Sports

stigasports.se

67

STIGA Sports operates an e-commerce platform specializing in sports and leisure products, including table tennis equipment, scooters, and hockey games. The website targets consumers interested in sports gadgets and leisure activities, positioning itself as a recognized brand in the retail sports sector primarily in Sweden. The business model focuses on direct online sales with a moderate company size and consistent branding. Technically, the website is built using modern frameworks such as Next.js and integrates multiple third-party services for analytics, marketing, and user engagement, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is partial, with a cookie consent banner present but no explicit privacy policy or terms of service detected in the provided content. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trustworthiness. Strategic recommendations include enhancing privacy disclosures, improving security headers, and verifying domain registration details to strengthen business credibility and compliance.

M

Medline

medline.eu

73

Medline Europe operates as a significant healthcare supplier supporting clinicians, patients, and communities. The website presents a professional and consistent brand image with a focus on medical supplies and healthcare services. The company targets healthcare professionals and institutions across Europe, positioning itself as a trusted business partner in the healthcare sector. The digital presence is built on a Magento e-commerce platform, leveraging modern web technologies and third-party services such as Algolia for search and Cookiebot for privacy compliance. The technical infrastructure is mature, with good mobile optimization and SEO practices, although some improvements in accessibility and security headers could enhance the overall quality. Security posture is strong with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response information. Overall, the website is trustworthy and professionally maintained, though WHOIS data is privacy protected, limiting domain age and registrant verification.

M

Montibello – Skin

montibello.com

65

Montibello is a Spanish-based company specializing in hair care, facial, and body treatment products, targeting professionals in the beauty and aesthetics industry. The website provides product information, professional courses, and inspiration for hairdressers and aesthetic professionals, positioning itself as a reputable brand in the retail beauty sector. The digital presence is built on WordPress with WooCommerce, indicating a mature e-commerce platform with integrated marketing and analytics tools such as Google Tag Manager and Cookiebot for consent management. Security is enhanced by the Wordfence plugin, and HTTPS is enforced, reflecting a good security posture. However, the absence of publicly available WHOIS data raises concerns about domain registration transparency. Additionally, the lack of explicit privacy policy, terms of service, and contact information limits the website's compliance and trustworthiness from a privacy and regulatory perspective. Overall, the website is professionally designed and functional but would benefit from enhanced transparency and compliance documentation.

O

Olivia Garden

oliviagarden.eu

71

Olivia Garden is a professional hair styling tools brand offering products such as hair brushes, combs, and scissors. The website targets professional hair stylists and consumers interested in hair care innovations. The brand appears established with a consistent and professional online presence. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Google Analytics, Cookiebot for consent management, and reCAPTCHA for bot protection, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website is professional, trustworthy, and well-optimized, with room for improvement in transparency of security policies and contact information.

P

Prague City Tourism

praguecitytourism.com

61

Prague City Tourism is the official Destination Management Organisation for the City of Prague, focusing on sustainable tourism, cultural heritage preservation, and marketing Prague as a premier travel destination. The organization provides a range of services including guide services, concierge experiences, and business cooperation opportunities targeting tourism industry partners and visitors. The website reflects a well-established entity with a consistent brand and professional content tailored to its audience. Technically, the website is built on WordPress, utilizing modern tools such as Google Tag Manager, Cookiebot for consent management, and Yoast SEO for search engine optimization. Hosting is provided by Active24, and the site demonstrates good mobile optimization and moderate performance. The technical implementation is solid with no critical vulnerabilities detected. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms, indicating compliance with GDPR. However, DNSSEC is not enabled, and no advanced security headers were detected, suggesting room for improvement. No incident response or security policy information is publicly available, which could be enhanced to improve trust and transparency. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. The risk profile is low, with recommendations focusing on enhancing DNS security, publishing security policies, and adding terms of service to strengthen legal and security posture.

C

CrossCafe

crosscafe.cz

49

CrossCafe is a Czech coffeehouse chain providing coffee, cakes, and related products through physical locations and an e-commerce platform. The website demonstrates a solid digital presence with integrated cookie consent mechanisms and advertising/tracking technologies such as Google Analytics, Adform, and Facebook Pixel. The site is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership. No direct contact emails or phone numbers are exposed on the site, which may impact user trust and business credibility. Security policies and incident response information are not publicly available, indicating room for improvement in transparency and compliance documentation.

M

MR.PARKIT

mrparkit.com

71

MR.PARKIT operates an online parking reservation platform focused on the Czech cities of Prague and Brno, offering users the ability to select parking garages on a map and book parking spaces for days or weeks. The business targets drivers seeking convenient, stress-free parking solutions and positions itself as a local service provider with a user-friendly digital presence. The website is professionally designed with good content relevance and clear navigation, supporting a positive user experience. Technically, the site leverages modern technologies including Google Maps API for location services, Cookiebot for consent management, and integrates multiple analytics and advertising platforms such as Google Analytics, Bing Ads, and Facebook Pixel. Hosting is provided by a Czech hosting provider, and the domain is well aged and consistent with the business profile. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in DNSSEC adoption and security headers. Privacy compliance is strong, with a comprehensive cookie policy and GDPR-aligned consent mechanisms. However, the site lacks visible contact information, terms of service, and explicit security policies, which could be enhanced to improve trust and compliance. Overall, MR.PARKIT presents a credible and functional online service with moderate technical maturity and good privacy practices.

W

Wi s.r.o.

pizzacoloseum.cz

46

Pizza Coloseum is a Czech hospitality business specializing in Italian cuisine, operating multiple restaurant locations primarily in Prague, Ostrava, and Teplice. The company emphasizes tradition and authentic Italian flavors, targeting local customers and visitors seeking quality dining experiences. The business model is based on brick-and-mortar restaurants with an integrated online reservation system, positioning itself as a regional restaurant chain with a medium-sized footprint. Technically, the website is built using modern web technologies including React, Next.js, and Apollo GraphQL, hosted on a Czech provider (WEDOS). The site includes a comprehensive cookie consent mechanism powered by Cookiebot, reflecting a moderate level of digital maturity and privacy compliance. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain is long-established (since 1999) and registration data is consistent with the business location, supporting legitimacy. Overall, the website presents a professional and trustworthy online presence with room for improvement in privacy policy publication, security header implementation, and contact information transparency. Strategic recommendations include enhancing security headers, publishing clear privacy and terms documents, and adding incident response contacts to strengthen compliance and trust.

G

Getriebebau NORD GmbH & Co. KG

nord.com

73

Getriebebau NORD GmbH & Co. KG operates the website www.nord.com, presenting itself as a leading global supplier of mechanical and electronic drive technology solutions including gear motors, industrial gear units, electric motors, and frequency inverters. The company targets a broad industrial audience with a strong B2B focus, emphasizing product competitiveness and energy efficiency. The website supports multiple languages, indicating a global market presence. Technically, the site uses modern web technologies such as Bootstrap, Cookiebot for consent management, and Google Tag Manager for analytics, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and no dedicated security policy or incident response contacts are published. The absence of WHOIS data for the domain reduces transparency and business credibility, though the website content and branding are professional and consistent with a legitimate enterprise. Overall, the site scores well on content quality, technical implementation, and privacy compliance, but business credibility is slightly impacted by missing WHOIS information.

R

ROSSMANN

rossmann.cz

69

ROSSMANN.cz is the online presence of ROSSMANN, a large retail chain specializing in drugstore products in the Czech Republic. The website offers a broad assortment of quality goods at competitive prices, including current promotions, flyers, and customer contests. The site targets retail consumers in the Czech market and positions itself as a well-established player in the retail sector. Technically, the website employs modern JavaScript frameworks and libraries, including React components, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized and uses preloading techniques for fonts and images to enhance performance. Security-wise, HTTPS is enforced, and cookie consent is implemented, but no explicit security headers or privacy policy pages were detected in the provided content. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and branding suggest a legitimate business. Overall, the site demonstrates good digital maturity with room for improvement in security and privacy transparency.

V

VAKOVAKO | Endowment fund

nf2091.org

62

VAKOVAKO is a Czech Republic-based non-profit endowment fund operating a global donation platform focused on environmental and humanitarian causes. The platform connects donors with carefully vetted nonprofits working in areas such as rainforests, oceans, biodiversity, endangered species, and humanity. The business model emphasizes transparency, with 100% of donations going directly to nonprofits and audited bank accounts. The platform supports donations via a mobile app available on iOS and Android, facilitating easy and fast contributions with no minimum or maximum limits. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Stripe payments, Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is well-optimized for mobile devices, fast loading, and includes accessibility features. Security best practices are observed with HTTPS, security headers, and reCAPTCHA integration, though no explicit security policy or incident response information is published. The WHOIS data for the domain is unavailable or malformed, indicating privacy protection which is common and justified for non-profit organizations. Despite this, the website's transparency, presence of official policies, and contact information support its legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly platform for charitable donations. Recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.

Kantar Worldpanel operates as a leading global provider of consumer panel research and consumer behavior insights, offering services such as retail surveys and shopper research. The website content reflects a professional and consistent brand presence targeting businesses seeking market research data. Technically, the site employs modern JavaScript libraries like MooTools and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance, though no major CMS or hosting provider is explicitly identified. Security posture is moderate, with HTTPS implied but no explicit security headers detected, and privacy compliance is partial with a cookie consent mechanism but no visible privacy policy page. Overall, the domain WHOIS data is unavailable, which reduces trust but the website content aligns with the known Kantar brand. Strategic recommendations include enhancing privacy disclosures, improving security headers, and publishing clear contact and incident response information.

T

Telema AS

telema.lt

43

Telema AS is a well-established technology company specializing in Electronic Data Interchange (EDI) services, facilitating automated and accurate electronic document exchange between businesses. With over 25 years in the market and a strong presence in Lithuania and the Baltic region, Telema serves thousands of stores and suppliers, positioning itself as a trusted partner in business process automation and ERP integration. The website reflects a mature digital presence with comprehensive service descriptions, client testimonials, and a network of certified software partners. Technically, the site is built on WordPress with modern libraries and tools, including robust analytics and marketing integrations. Security posture is strong, supported by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Privacy compliance is well addressed with Cookiebot consent management and clear privacy policies. Overall, the site projects professionalism, trustworthiness, and technical competence.

T

Telema AS

telema.lv

46

Telema AS is a technology company specializing in Electronic Data Interchange (EDI) and supply chain optimization solutions, targeting businesses seeking to automate and improve their trading document workflows. The company holds a strong regional presence in the Baltics with multilingual websites and certified partners, positioning itself as a reliable and trusted provider in its niche. The website demonstrates a mature digital infrastructure built on WordPress with modern front-end libraries and comprehensive marketing and analytics integrations. Security posture is robust, supported by ISO 27001 certification and HTTPS enforcement, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well managed through Cookiebot and clear privacy policies. Overall, the website reflects a professional, trustworthy, and business-focused digital presence.

T

Telema AS

telema.ee

42

Telema AS is a well-established Estonian technology company specializing in Electronic Data Interchange (EDI) and e-invoicing services, primarily serving the Baltic region. The company positions itself as a market leader and standard developer with a strong focus on seamless and automated business document exchange. Their services cater to businesses seeking efficient and reliable data exchange solutions, supported by a network of certified software partners and global roaming capabilities. The website reflects a mature digital presence with multi-language support and regional domains. Technically, the site is built on WordPress with modern front-end libraries and integrates advanced marketing and analytics tools, including consent management for GDPR compliance. Security posture is strong, evidenced by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

R

Rahva Raamat

rahvaraamat.ee

56

Rahvaraamat.ee is the leading Estonian bookstore chain offering a comprehensive selection of books and media products through both online and physical retail channels. The company is well-established with a domain age since 2010 and operates under Zone Media OÜ. Their website is built on modern technologies such as Next.js and React, providing a responsive and user-friendly experience. The integration of Cookiebot ensures GDPR compliance with a detailed cookie consent mechanism. Security posture is strong with HTTPS enforced and appropriate security headers in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates a mature digital presence with extensive analytics and advertising integrations, supporting a robust e-commerce business model.

V

Vejle Idrætshøjskole

vih.dk

67

Vejle Idrætshøjskole is a Danish educational institution specializing in sports-focused high school courses, targeting young people in sabbatical years or summer courses. The website presents a professional and modern digital presence built on React and Next.js, with good mobile optimization and SEO practices. The site implements a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance and user privacy awareness. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly visible. WHOIS data is unavailable, which is typical for Danish domains, but no suspicious indicators are found. Overall, the site reflects a trustworthy and well-managed educational service with moderate to good digital maturity.

Y

Yaga

yaga.co.za

62

Yaga is a South African online marketplace specializing in preloved and new fashion items, providing a platform for users to buy and sell clothing safely. The website targets consumers interested in sustainable fashion and sellers looking to monetize their preloved items. The platform integrates secure payment methods and multiple delivery partners, enhancing user trust and convenience. Technically, Yaga employs modern web technologies including React, Next.js, and Material-UI, with integrations for analytics and marketing tools such as Google Tag Manager, TikTok Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses secure payment gateways, but lacks explicit security headers and published privacy or terms policies, which are recommended for compliance and trust. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security policies would strengthen its posture.

H

Hutten

hutten.eu

68

Hutten is a well-established Dutch catering and hospitality company with a history dating back to 1929. The company provides culinary services including business catering, event catering, and healthcare catering across the Netherlands. Their business model focuses on delivering high-quality, sustainable food and hospitality experiences with a strong emphasis on guest satisfaction and social impact. The website reflects a professional and consistent brand image targeting corporate clients, event organizers, and healthcare institutions. Technically, the website employs modern web technologies such as jQuery, Magnific Popup, Google Tag Manager, and Cookiebot for cookie consent management. Hosting assets on DigitalOcean CDN suggests a reliable infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and cookie consent implemented. However, the absence of security headers and visible privacy policy or terms of service pages indicates room for improvement in compliance and security best practices. No WHOIS registrant data is publicly available due to EURid privacy policies, but the domain and website content appear legitimate and consistent with the company's Dutch origin. Overall, Hutten's digital presence is professional and trustworthy, but enhancing transparency around privacy, security policies, and incident response would strengthen their compliance and security posture.

V

Vroon Group

vroon.nl

67

Vroon Group is a well-established international shipping company based in the Netherlands, specializing in vessel management and various shipping segments including offshore support, product tankers, and livestock carriers. The company maintains a professional and modern web presence with clear navigation and multimedia content to engage its target audience of shipping industry professionals and clients. The website demonstrates a good level of digital maturity with the use of modern JavaScript frameworks, video integration, and a comprehensive cookie consent mechanism compliant with GDPR standards. Security posture is strong, with HTTPS enforced and appropriate security headers in place, although explicit security and incident response policies are not publicly visible. Overall, the site reflects a trustworthy and credible business with room for improvement in transparency around terms of service and incident response. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

EIT Digital

eitdigital.eu

66

EIT Digital operates as Europe's largest digital innovation ecosystem, focusing on fostering a strong, inclusive, fair, and sustainable digital Europe. The organization facilitates collaboration among industry, academia, and startups to drive digital innovation, education, and entrepreneurship. Their market position is well established as a key player in the European technology sector, providing services that include ecosystem facilitation, education, and startup support. Technically, the website is built on TYPO3 CMS and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, HubSpot, and Cookiebot for consent management. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with a well-structured and professional design. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, some security headers are not explicitly detected, and no privacy policy or terms of service pages were found in the provided content, which are areas for improvement. The WHOIS data is privacy protected, which is typical for organizations of this nature, and no suspicious patterns were identified. Overall, the website presents a professional and trustworthy digital presence with a strong business model and technical foundation. Strategic recommendations include enhancing privacy transparency, improving security header implementation, and providing clear contact information to bolster trust and compliance.

M

Miltton

miltton.ee

54

Miltton is an established consultancy firm founded in 2007, specializing in business, communications, and design consultancy services. The company targets organizations seeking impactful change through strategic insights, creative communications, and design thinking. Their market position is strengthened by a diverse team and international presence with subsidiaries or related sites in Europe, Finland, Sweden, Ukraine, and the USA. The website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and analytics integrations such as Yoast SEO, Google Tag Manager, and Matomo. Cookie consent mechanisms and a comprehensive privacy policy demonstrate GDPR compliance and a commitment to user privacy. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

Lappset Group

lappset.com

65

Lappset Group is a global manufacturer and supplier specializing in playground equipment, outdoor exercise equipment, park furniture, and interactive sports equipment. The company targets diverse markets including schools, public spaces, private yards, sports facilities, healthcare, and leisure sectors. Their business model includes manufacturing, custom solutions, and lifecycle services such as installation, maintenance, and recycling. The website reflects a well-established brand with comprehensive product and service offerings, supported by certifications like Environmental Product Declarations (EPDs). Technically, the website is built on modern frameworks such as Vue.js and Tailwind CSS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional web presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen trust and compliance.

K

Klarvinduer

klarvinduer.dk

65

Klarvinduer.dk is a Danish retail website specializing in custom-made windows and doors, offering high-quality products at factory prices with discounts up to 60%. The business targets both DIY consumers and professional customers, positioning itself competitively in the Nordic and European markets with sister sites in multiple countries. The website is built on modern web technologies including React and Next.js, with content managed via DatoCMS and cookie consent managed by Cookiebot. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service policies. Contact information is limited to a contact form without explicit emails or phone numbers. The domain registration is consistent with the business history and shows no suspicious patterns, supporting the legitimacy of the site.

N

Natuzzi SpA

natuzzi.com

68

Natuzzi SpA is a globally recognized furniture brand specializing in the design and retail of sofas, chairs, tables, beds, and other home furnishings. The company targets consumers seeking premium and harmonious home decor solutions, positioning itself as a leader in the retail furniture industry. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation tailored for an international audience. Technically, the site leverages modern technologies including React, Google Tag Manager, and Cookiebot for compliance and analytics, ensuring a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published, representing an area for improvement. The WHOIS data is notably missing or unavailable, which introduces some uncertainty about domain registration transparency, but the overall website and brand presence strongly indicate legitimacy. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing domain registration transparency to bolster trust and compliance.

P

Proact IT Group AB

proact.ee

82

Proact IT Group AB is a leading European specialist in data management and IT services, focusing on cloud transformation, data center modernization, cybersecurity, and managed services. The company operates across 12 countries in Europe and North America, targeting medium to large enterprises seeking advanced IT infrastructure solutions. Their website reflects a mature digital presence with comprehensive service offerings and investor relations transparency. Technically, the site is built on WordPress with Elementor and Yoast SEO, employing modern web standards and good performance practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve transparency around vulnerability disclosure and incident response. Overall, Proact demonstrates a high level of professionalism and trustworthiness, consistent with its market position as a major IT services provider.

Enefit Green is a leading renewable energy producer in the Baltic Sea region, specializing in wind and solar energy production across Estonia, Latvia, Lithuania, Poland, and Finland. The company operates a substantial portfolio of wind parks, solar power plants, and other renewable energy assets, positioning itself as the largest wind energy producer in the Baltics. Their business model focuses on sustainable energy production and regional energy independence, supported by significant recent investments and growth. Technically, the website is built on modern frameworks like React and Next.js, hosted with Cloudflare DNS and CDN services, ensuring fast performance and mobile optimization. The site implements strong privacy and cookie consent mechanisms, reflecting good GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and providing incident response contacts to further strengthen trust and compliance.