Security Directory

R

Rīgas Tehniskā universitāte

liepu.lv

63

Rīgas Tehniskā universitāte (RTU) Liepāja is a regional academy of the well-established Riga Technical University, providing higher education, professional development, and research services in Liepāja, Latvia. The website serves as an information portal for prospective and current students, academic staff, and the local community, offering details on study programs, events, news, and institutional information. The university holds a strong market position in Latvia's education sector with recognized rankings and a broad partner network. Technically, the website is built on the Unibit CMS platform and employs modern web technologies including JavaScript, Google Tag Manager, Google Analytics, Hotjar, and social media integrations. It demonstrates good mobile optimization, accessibility features, and SEO practices. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting compliance with GDPR requirements. From a security perspective, the site uses HTTPS and integrates standard tracking and analytics tools with user consent. While explicit security headers are not visible in the HTML, the overall posture is good with no exposed sensitive data or vulnerabilities detected. However, the absence of a public incident response or vulnerability disclosure policy is noted. Overall, the website is professional, trustworthy, and well-maintained, supporting RTU Liepāja's mission as a reputable educational institution. The lack of WHOIS data limits domain registration trust verification but does not detract from the evident legitimacy and quality of the site.

A

AE Partner DK A/S

aepartner.lv

50

AE Partner DK A/S is a medium-sized manufacturing and automation engineering company based in Denmark, specializing in the design and production of electrical panels, metal cabinets, containers, and e-houses. Established around 2013, the company serves industrial clients requiring complex automation systems and consulting services in outsourcing and machine safety analysis. The website reflects a professional and consistent brand presence with detailed business information and client testimonials, positioning AE Partner as a trusted regional player with over 2300 projects completed. Technically, the website is built on WordPress using the Enfold theme, enhanced with Yoast SEO, WPML for multilingual support, and Google Analytics for tracking. It employs modern web technologies and is mobile-optimized with good SEO practices. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and a cookie consent mechanism, although some security headers are missing, indicating room for improvement. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of explicit security policies and incident response contacts suggests a need for enhanced transparency. WHOIS data is unavailable, limiting domain registration trust verification, but the website's content and certifications support legitimacy. Overall, AE Partner's digital presence is professional and trustworthy, with strategic recommendations focusing on improving security headers, publishing security policies, and enhancing incident response readiness to further strengthen their security and compliance posture.

S

SIA CMB

cmb.lv

49

SIA CMB is a Latvian engineering office established in 2005, providing comprehensive multi-disciplinary engineering services including construction process management, building supervision, expertise, and sustainable building solutions. The company positions itself as a leading service provider in Latvia with a professional team of certified specialists and a strong portfolio of over 1000 projects. The website reflects a mature digital presence built on Joomla CMS, integrating modern front-end libraries and analytics tools. Security posture is solid with HTTPS enforced and email obfuscation, though security headers and explicit incident response policies are absent. Privacy compliance is well addressed with cookie consent and a privacy policy in Latvian. Overall, the website and business information indicate a trustworthy and professional organization with room for improvement in security transparency and WHOIS data availability.

O

OMD

omd.lv

75

OMD is a global media agency specializing in creative, cultural, and commercial media solutions aimed at transforming businesses. The company positions itself as a leader in media strategy and planning, targeting businesses seeking innovative media approaches. The website reflects a mature digital presence built on WordPress with modern tools and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional website and corporate email domain affiliation support legitimacy. Overall, the site is well-designed, accessible, and compliant with privacy regulations, making it a credible digital asset for the business.

U

Unimar, Inc.

unimar.com

68

Unimar, Inc. is a well-established company specializing in FAA obstruction lighting and tower lighting solutions, serving industries such as energy and transportation. The company offers a range of products and services including custom FAA obstruction lighting design, certified lighting system installation, hazardous location controls, and IoT-based obstruction light monitoring. Their market position is strong, supported by certifications such as UL, ATEX, GOST, and FAA, and a long domain history dating back to 1997. The website is professionally designed on the Shopify platform, providing a good user experience with clear navigation and mobile optimization. Technically, the site uses modern e-commerce technologies and integrates analytics and marketing tools effectively. Security posture is solid with HTTPS and domain transfer lock, though DNSSEC is not enabled and privacy compliance mechanisms like cookie consent are lacking. Contact information is available primarily via phone and contact forms, with active social media presence on Twitter and LinkedIn. Overall, the site reflects a credible and trustworthy business with room for improvement in privacy compliance and security transparency.

C

CBRE Baltics

cbre.lv

69

CBRE Baltics is a professional commercial real estate consultancy operating in the Baltic region, providing a broad range of services including advisory, transaction, asset management, valuation, and research. The company targets occupiers, investors, and developers in office, industrial, retail, and hotel property sectors. The website reflects a well-established brand with consistent messaging and a clear market position as part of the global CBRE Group. Technically, the site is built on WordPress with modern plugins and tracking tools, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is professional and trustworthy, though WHOIS data is unavailable due to query limits, limiting full domain legitimacy verification.

I

International School of Latvia

isl.edu.lv

46

The International School of Latvia (ISL) is a well-established non-profit educational institution founded in 1994, offering international college preparatory programs including Early Years, Primary Years, Middle Years, and Diploma Programmes. The school serves a diverse student body with faculty from multiple countries, emphasizing a low student-teacher ratio and small class sizes. The website reflects a professional and consistent brand presence targeting parents and students seeking quality international education in Latvia. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap, Yoast SEO, and event/calendar management tools. It employs Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS and some security best practices but lacks visible cookie consent mechanisms and explicit security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits full domain legitimacy verification, but the website content and social media presence support its credibility. Overall, ISL's digital presence is solid with room for improvement in privacy compliance and security transparency. Strategic enhancements in cookie consent, security headers, and published policies would strengthen trust and compliance.

C

Cabot Corporation

cabotcorp.com

60

Cabot Corporation is a well-established global specialty chemicals and performance materials company with over 140 years of history. The company serves industrial sectors including transportation, infrastructure, environment, and consumer industries by providing a broad portfolio of advanced materials such as reinforcing carbons, battery materials, and specialty carbons. Their market position is strong, supported by NYSE listing and comprehensive sustainability initiatives. Technically, the website employs modern JavaScript libraries and analytics tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements can be made in security headers and incident response transparency. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional web presence and external references. Overall, the website reflects a mature, credible business with room for enhanced privacy and security disclosures.

L

Level Up

lvl-up.me

52

Level Up is a small, newly established education consultancy founded in 2023, specializing in assisting students with international education programs across countries such as the USA, UK, Canada, Australia, Switzerland, Spain, and the EU. The company offers a range of services including program selection, visa assistance, accommodation support, and language courses. Their market position is niche, targeting students and parents seeking quality education abroad. The website is built on the Tilda CMS platform, leveraging modern web technologies and includes customer testimonials and social media integration to build trust. Technically, the site is moderately performant and mobile-optimized but lacks some advanced accessibility features. Security posture is adequate with HTTPS enforced but missing several important security headers and no published security or privacy policies, indicating compliance gaps. Contact information is primarily via social media and a contact form, with a single clearly labeled phone number. Overall, the site is professional but would benefit from enhanced privacy compliance and security hardening.

Z

Zemgales plānošanas reģions

zemgale.lv

54

Zemgales plānošanas reģions operates as the official regional planning authority for the Zemgale region in Latvia, providing comprehensive information on regional development, social services, tourism, culture, and education. The website serves residents, local governments, businesses, and tourists with detailed planning documents, project updates, and public participation opportunities. Technically, the site is built on Drupal CMS, leveraging modern web technologies including Google reCAPTCHA and Google Analytics for security and analytics. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security measures include HTTPS enforcement and CAPTCHA integration, though explicit security policies and incident response information are absent. Overall, the site demonstrates a solid security posture and compliance with privacy regulations, including GDPR, supported by a detailed cookie consent mechanism and privacy policy. However, the lack of WHOIS data limits domain legitimacy verification. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms.

B

Banku Augstskola

ba.lv

47

Banku Augstskola is a Latvian higher education institution providing academic programs, research, cooperation, and lifelong learning services. The website reflects a professional educational entity with a clear market position in Latvia's education sector. The institution targets students, researchers, and lifelong learners, offering accredited programs and maintaining active communication channels including social media and a mobile app. Technically, the website is built on WordPress with modern front-end technologies such as AngularJS and jQuery, and uses WPBakery Page Builder for content management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though accessibility could be further improved. Security-wise, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, it lacks explicit security headers and publicly available security or incident response policies, which are recommended for enhanced trust and compliance. The WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website is trustworthy, well-maintained, and suitable for its educational purpose.

A

AS TWINO Investments

twino.eu

59

AS TWINO Investments operates the TWINO investment platform, a pioneering European fintech company specializing in peer-to-peer lending with buyback guarantees. The platform offers retail and professional investors access to unsecured consumer loans and real estate securities, boasting over €1 billion in originated loans since 2009. Licensed and supervised by Latvijas Banka, TWINO emphasizes investor protection and regulatory compliance. The website demonstrates a mature digital presence with modern technologies such as Vue.js and Nuxt.js, delivering a user-friendly and mobile-optimized experience. Security practices include HTTPS enforcement and cookie consent mechanisms, though additional security headers and a public security policy could enhance posture. WHOIS data is privacy protected, typical for .eu domains, but the company's transparency through licensing and media coverage supports legitimacy. Overall, TWINO presents a credible, professional, and well-structured investment platform with strong business and technical foundations.

S

SIA Rīgas ūdens

rigasudens.lv

53

SIA Rīgas ūdens is the largest water supply and sewage service provider in the Baltic region, serving residents and businesses primarily in Riga, Latvia. The company offers a comprehensive range of water-related utility services including water supply, sewage management, water quality testing, and connection services. Their market position is strong as a key municipal utility provider with a large customer base. The website is professionally designed using Drupal CMS and modern JavaScript libraries, providing good user experience and mobile optimization. The technical infrastructure includes integration with mapping services and analytics tools such as ContentSquare and Facebook Pixel, indicating a mature digital presence. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are missing. Overall, the website and business information reflect a legitimate and professional utility provider with good privacy compliance and user trust indicators.

D

Disc Soft Limited

disc-soft.com

62

Disc Soft Limited is a medium-sized technology company specializing in software solutions related to virtual disc imaging, gamepad remapping, mobile file transfer, disc burning, and network storage. Established since the early 2000s, the company has a solid market position with a portfolio of about 10 software products including the well-known DAEMON Tools line. The website reflects a professional digital presence with good content quality and consistent branding, targeting users who require advanced software tools for managing virtual drives and related tasks. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for analytics and security. Hosting and domain registration are stable and consistent with the company's history. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS was detected, indicating a custom or static site architecture. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact form, which is a positive security measure. However, it lacks DNSSEC and explicit security headers, and does not publish detailed security or incident response policies. Privacy compliance is basic, with a privacy policy and cookie banner present but no advanced GDPR indicators. Contact information is limited to a modal form without direct emails or phone numbers, which may impact user trust. Overall, the website is functional and professional but could improve in security posture and privacy compliance. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and enhancing privacy compliance to build greater user trust and meet regulatory standards.

S

State Treasury

statetreasury.fi

69

The State Treasury (Valtiokonttori) is a Finnish government agency under the Ministry of Finance responsible for managing government loans, debt, cash management, central government accounting, and compensation payments related to accidents and military injuries. It serves state government entities, citizens, municipalities, and communities, providing a broad range of financial and administrative services. The website reflects its authoritative position with comprehensive service descriptions, official contact information, and a professional presentation. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, ensuring good SEO and accessibility standards. The site uses HTTPS with no detected security issues, includes cookie consent mechanisms, and integrates Google Tag Manager for analytics and tracking. Mobile optimization and accessibility are well addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and avoids exposing sensitive data. However, it lacks a publicly available dedicated security policy or incident response information, which could enhance transparency and trust. WHOIS data confirms the domain's legitimacy as a Finnish government entity, consistent with the website's claims. Overall, the site demonstrates a strong security posture, good privacy compliance, and high business credibility, making it a trustworthy source for its target audience.

C

CSM Baltija

csmlv.com

37

CSM Baltija is a Latvian company specializing in crewing management and the supply of qualified seafarers to shipping principals. Established in 2003, it positions itself as a provider focused on quality, safety, and environmental responsibility within the maritime transportation sector. The website reflects a small-sized business with a service-oriented model targeting shipping companies and principals. The digital presence is built on WordPress with standard web technologies such as jQuery and Google Fonts, featuring basic design and moderate branding consistency. However, the website lacks HTTPS encryption and essential security headers, which poses a risk to user data and trust. There are no visible privacy or cookie policies, and contact information is limited to a contact page link without direct emails or phone numbers. The integration of an AI chat widget indicates some level of digital engagement but lacks transparency regarding data collection and privacy compliance. Overall, the security posture is weak, and privacy compliance is minimal, which could impact user trust and regulatory adherence.

XTM is a well-established construction company specializing in concrete structures with over 20 years of experience and a strong presence in Scandinavia, particularly Norway and Sweden. The company emphasizes client trust, quality, environmental responsibility, and employee well-being, supported by internationally recognized ISO certifications. Their website is professionally designed, mobile-optimized, and provides comprehensive information about their projects and quality standards, although it lacks explicit privacy and cookie policies. Technically, the site runs on WordPress with modern JavaScript libraries and is hosted by a reputable registrar. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and incident response information. Overall, the website reflects a credible and professional business with room for improvement in privacy compliance and security transparency.

B

Balsan

balsan.com

40

Balsan is a French manufacturer specializing in customized textile flooring solutions for offices, hotels, retail, and residential spaces. The company emphasizes creativity, comfort, and environmental respect, positioning itself as a longstanding player in the manufacturing sector with a rich heritage. The website reflects a professional and consistent brand image with comprehensive product information and design tools. Technically, the website is built on Drupal CMS with Bootstrap and jQuery frameworks, delivering a responsive and moderately performant user experience. The site includes modern privacy and cookie consent mechanisms, indicating good digital maturity and compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and uses tracking and marketing tools responsibly with user consent. However, it lacks explicit security policies and incident response information, which could be improved to enhance trust and preparedness. A notable concern is the absence of WHOIS registration data, which raises questions about domain registration legitimacy despite the professional website presence. This discrepancy should be investigated further to ensure domain ownership and reduce risk. Overall, Balsan's website is well-constructed and business-focused but would benefit from enhanced security transparency and domain registration clarity.

S

SIA „Skrīveru saldumi”

skriverusaldumi.lv

49

SIA „Skrīveru saldumi” is a Latvian confectionery manufacturer specializing in traditional sweets such as the iconic "Skrīveru Gotiņa" and premium chocolates including "Aspasia". The company targets consumers seeking high-quality, traditional Latvian sweets, as well as corporate clients interested in branded gifts. Their business model combines manufacturing with an online retail presence, positioning them as a recognized player in the Latvian confectionery market. The website is professionally designed with a clear focus on product promotion and e-commerce functionality, supporting multiple languages and featuring a cookie consent mechanism to address privacy concerns. Technically, the site uses modern frontend technologies like Bootstrap, jQuery, and Swiper.js, and integrates Google Analytics for visitor tracking. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and explicit privacy and terms of service pages indicates room for improvement. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site presents a trustworthy and professional front for a small-sized confectionery business in Latvia.

Merhels Revidenti Konsultanti is a Latvian financial consultancy firm specializing in financial audit, advisory, accounting, tax services, due diligence, CFO outsourcing, and business valuation. The company positions itself as a trusted partner with a strong reputation, emphasizing hands-on involvement by partners and a customer and quality-centered approach. The website content reflects a professional small-sized business with a focus on serving Latvian and regional clients in the finance sector. Technically, the website uses a traditional tech stack including jQuery, Bootstrap 3.3.5, Font Awesome, and Google Analytics for tracking. The site is mobile optimized with good navigation and content relevance. However, there is no detected CMS or advanced hosting information. Performance is moderate, and accessibility is basic. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which indicates potential compliance gaps with GDPR and other data protection regulations. No forms or data collection mechanisms are present on the main page, reducing immediate risk exposure. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the security posture is moderate but could be improved with better security headers, privacy disclosures, and incident response information. The overall risk is moderate with no critical vulnerabilities detected in the visible content. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and improving transparency around data protection and incident response.

S

SIA “ERDA Group”

erda.lv

63

ERDA Group is a strategic HR and communications consulting company based in Latvia, specializing in employer branding, organizational strategy, and internal transformations. The company targets businesses seeking to improve their HR processes, employer brand, and organizational culture. Their website demonstrates a professional and consistent brand presence, supported by client testimonials and notable client logos, indicating a solid market position within their niche. Technically, the website is built on Webflow, uses modern analytics and translation tools, and is well-optimized for mobile and SEO. Security posture is good with HTTPS enforced and cookie consent implemented, though additional security headers and incident response information could enhance their security maturity. Overall, the domain WHOIS data is unavailable due to query limits, but the website content and contact details support legitimacy and trustworthiness.

A

Antaris Consulting

antarisconsulting.com

68

Antaris Consulting is a well-established Irish consultancy specializing in sustainability, ISO management systems, environmental, energy, occupational health & safety, quality, and training services. The company positions itself as a leading partner for organizations aiming to elevate their sustainability standards, serving a diverse client base including notable organizations. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators. Technically, the site is built on WordPress using Elementor and Gravity Forms, with integrations for Google Analytics and Tag Manager, and a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and domain registration consistent with business claims, though improvements can be made by enabling DNSSEC and publishing explicit security and privacy policies. Overall, the website demonstrates good digital maturity and business credibility, supporting its market position effectively.

F

FirstHost

firsthost.lv

59

FirstHost is a Latvia-based technology company specializing in high-performance web hosting, dedicated servers, and cloud VPS solutions primarily targeting European businesses. With over 18 years of experience and a client base exceeding 9,000, the company positions itself as a reliable and scalable IT infrastructure provider. Their services include dedicated servers, cloud hosting, domain registration, SSL certificates, and virtual desktop infrastructure, catering to enterprises seeking robust and flexible hosting solutions. The website reflects a mature digital presence with multilingual support and multiple currency options, indicating a broad regional focus. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and performance. Integration with analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Yandex Metrika demonstrates a data-driven approach to customer engagement. The site is mobile-optimized and exhibits good SEO practices, contributing to its accessibility and reach. From a security standpoint, the site enforces HTTPS and uses reputable third-party services for live chat and analytics. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for improvement. The lack of WHOIS data due to query limits restricts full domain trust verification, though the website content and business indicators suggest legitimacy. Overall, FirstHost presents a solid business and technical profile with room to enhance transparency around security and compliance. Strategic improvements in security documentation and WHOIS data availability would strengthen trust and compliance posture.

D

DDSTUDIO

ddstudio.com

54

DDSTUDIO is a boutique design consultancy specializing in industrial design, user experience (UX), and user interface (UI) design. Established in 1997, the company positions itself as a premier partner for industry innovators seeking strategic, business-driven design solutions that empower people, influence positive change, and drive commercial success. Their services focus on human-centered design methodologies to create compelling, market-ready products. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including case studies and client testimonials, indicating a strong market position in the technology sector. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates analytics tools like HubSpot and Google Analytics. The site is mobile-optimized and accessible, with good SEO practices and performance rated as moderate. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, DDSTUDIO demonstrates a solid security and compliance posture with no critical vulnerabilities detected. The domain registration is consistent with the business history, enhancing trustworthiness. Strategic recommendations include enhancing DNS security, publishing a security.txt file, and improving security header implementation to further strengthen the security posture.

N

Nekustamo īpašumu aģentūra Latio

latio.lv

53

Nekustamo īpašumu aģentūra Latio is a leading real estate agency in Latvia, established in 1991, offering comprehensive property transaction services including sales, rentals, valuation, legal support, and market analysis. The company operates with over 150 employees across 12 offices, positioning itself as a market leader in the Latvian real estate sector. The website reflects a professional and well-structured digital presence with multilingual support and extensive service information targeting both private and corporate clients. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Maps API, and various marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and incorporates cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics, though some improvements in security headers and accessibility could be made. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. However, the absence of certain security headers and lack of published security policies or incident response contacts indicate room for enhancement. The WHOIS data could not be retrieved due to query limits, limiting domain registration transparency and trust verification. Overall, Latio's website demonstrates a solid business and technical foundation with good privacy compliance and marketing integration. Strategic improvements in security policies, WHOIS transparency, and accessibility would further strengthen its digital trust and compliance posture.

ARCO REAL ESTATE is a Latvian real estate agency established in 1992, offering brokerage, property valuation, consulting, and marketing services primarily focused on residential and commercial properties within Latvia. The website presents a professional and content-rich platform targeting property buyers, sellers, renters, and investors in the Latvian market. The company maintains an active social media presence and provides clear contact information, enhancing trust and accessibility. Technically, the website employs modern web technologies including jQuery, Foundation CSS framework, Leaflet.js for maps, and integrates Google Analytics for user tracking. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Security practices include HTTPS usage and a cookie consent mechanism, but explicit security headers and incident response policies are not evident from the HTML content. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response transparency. Privacy compliance is basic with GDPR-related cookie consent and a privacy policy page available. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification, but website content and business information appear consistent with a legitimate real estate business. Overall, the website is professional and trustworthy with room for enhanced security and compliance measures. Strategic recommendations include strengthening security headers, publishing incident response and terms of service documents, and improving accessibility compliance to further solidify the company's digital maturity and trustworthiness.

AxFlow is a leading industrial supplier in Latvia specializing in fluid control and metering systems, offering a full service cycle from solution selection to maintenance. The website is professionally designed, localized in Latvian, and targets industrial clients in energy and manufacturing sectors. Technically, the site uses modern JavaScript libraries, Google Tag Manager, Facebook Pixel, Azure Application Insights, and Cookiebot for consent management, running on Episerver CMS. Security posture is good with HTTPS and cookie consent but lacks explicit security headers and published incident response information. WHOIS data is missing, which is unusual but the site’s professional appearance and parent company affiliation support legitimacy. Overall, the site is functional, secure, and compliant with privacy regulations, though improvements in security headers and contact transparency are recommended.

N

Norbulk

norbulkshipping.com

61

Norbulk is a well-established ship management company with over four decades of experience managing a diverse fleet engaged in worldwide trade. The company offers a comprehensive range of services including technical ship management, crew management and training, consultancy, quality assurance, marine travel, and commercial services. The website reflects a professional and consistent brand presence targeting ship owners and maritime industry stakeholders. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though DNSSEC is not configured. However, the site lacks explicit privacy, cookie, and terms of service policies, and does not provide direct contact information or incident response details, which are areas for improvement. Overall, the domain registration data supports the legitimacy and longevity of the business.

A

Autentica SIA

autentica.lv

64

Autentica SIA is a Latvian IT company specializing in business and IT strategy alignment, software development, implementation, and support services. The company serves clients primarily in the energy and government sectors, offering a broad range of IT solutions including public sector software, integration, mobile and web development, and automation. The website presents a professional image with clear service descriptions, client logos, and employee testimonials, indicating a stable market position and trustworthiness. Technically, the website is built on WordPress with common technologies such as jQuery, Bootstrap, and Google Maps API. SEO is enhanced by the Yoast SEO plugin, and the site is mobile-optimized with good navigation and content quality. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and a cookie consent mechanism that supports GDPR compliance. However, the absence of security headers and incident response information suggests areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy and professional, though the lack of WHOIS data limits full domain legitimacy assessment. Strategic recommendations include adding security headers, publishing security policies, and improving accessibility to strengthen compliance and security maturity.

S

SIDC GROUP

sidcgroup.com

42

SIDC GROUP is a specialized recruitment agency with over 25 years of experience, focusing on staffing for VIP clients, luxury yachts, private residences, and the hospitality sector in the Baltic States and Europe. The company offers a broad range of services including executive search, career coaching, and personalized training, positioning itself as a trusted partner for high-end staffing needs. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting both employers and job seekers in the luxury recruitment market. Technically, the site uses modern frameworks such as Bootstrap and jQuery, with good mobile optimization and moderate performance. Security practices include HTTPS enforcement, CSRF tokens, and captcha on forms, but lack some standard security headers and cookie consent mechanisms. The WHOIS data aligns well with the business claims, showing consistent registration details and domain age appropriate for the company's history. Overall, the website is functional, professional, and moderately secure but could improve privacy compliance and security posture.

E

Elsana SIA

elsana.lv

43

Elsana SIA is a Latvian company specializing in the construction and reconstruction of energy infrastructure, including electric power transmission lines, cable networks, transformer substations, and KTP installations. The company also offers services related to solar panel installation and helicopter services, positioning itself as a regional player in the energy sector. The website is professionally designed, built on WordPress, and incorporates modern technologies such as Bootstrap and Swiper.js, with SEO optimization via Yoast and user tracking through Google Analytics. Contact information is clearly provided, enhancing business credibility. However, the absence of privacy and cookie policies, as well as security headers, indicates areas for compliance and security improvement. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the site presents a legitimate and professional business presence with moderate technical and security maturity.

Y

Your Social

yoursocial.nl

53

Your Social is a small Dutch media website focused on delivering business and financial news, marketing insights, and local business content. The site uses WordPress CMS with a modern tech stack including Yoast SEO, Bootstrap, and jQuery, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. The domain is privacy protected but consistent with the business profile. Overall, the website is professional and trustworthy for its niche, though improvements in security and compliance documentation are recommended.

T

The Institute of Internal Auditors

theiia.org

68

The Institute of Internal Auditors (The IIA) is a globally recognized professional association dedicated to supporting and advancing the internal audit profession. Headquartered in Lake Mary, Florida, The IIA offers a comprehensive suite of services including membership, professional certifications such as the Certified Internal Auditor (CIA), educational resources, standards, and quality assurance services. The organization positions itself as the authoritative voice and principal educator for internal auditors worldwide, serving a large and diverse audience of audit, risk, and compliance professionals. Technically, the website demonstrates a mature digital infrastructure leveraging modern web technologies and analytics tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and Azure Application Insights. The site is built on the Episerver CMS platform, optimized for mobile devices, and incorporates accessibility and SEO best practices. The presence of multiple tracking and advertising scripts indicates a sophisticated approach to user engagement and marketing. From a security perspective, the site enforces HTTPS, employs reputable analytics and advertising services, and shows no signs of exposed sensitive data or vulnerabilities in the visible content. While explicit security headers are not fully visible in the HTML, the overall posture is strong. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms and GDPR adherence. Overall, The IIA website reflects a high level of professionalism, trustworthiness, and operational maturity. The lack of WHOIS data limits domain registration insights, but the website's content, branding, and external linkages strongly support its legitimacy. Strategic recommendations include enhancing visible security headers, continuous monitoring of third-party scripts, and maintaining transparency in advertising practices to further strengthen trust and compliance.

M

Marine Services Group

marineservices.lv

52

Marine Services Group is a professional service provider specializing in marine, aviation, and transport insurance, along with legal services, ship sale brokerage, and survey services. Positioned as a market leader in their sector, they target clients in shipping, logistics, aviation, and corporate insurance markets primarily in Latvia and surrounding regions. Their website reflects a medium-sized enterprise with a consistent brand and professional content presentation. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Feather Icons. SEO is well implemented with Yoast SEO plugin and structured data. Security posture is good with HTTPS enforced and use of Google reCAPTCHA on forms, though additional security headers could enhance protection. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Contact information is available primarily through forms and social media channels. WHOIS data is unavailable due to query limits, which limits domain legitimacy verification. Overall, the website is professional, secure, and trustworthy with room for improvement in explicit security policies and WHOIS transparency.

D

DEGIRO

degirogroup.com

67

DEGIRO operates as a major Pan-European online securities broker offering a comprehensive investment platform with a focus on low fees and broad market access. The website presents a professional and user-friendly interface targeting both individual and professional investors across Europe. The company emphasizes transparency, security, and innovation, supported by over 100 international awards. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Cookiebot for consent management, ensuring a responsive and performant user experience. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers and explicit incident response contacts are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the website content and structure strongly suggest a legitimate and established financial services provider. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy platform for its target audience.

B

Biedrība “Sabiedrība par atklātību – Delna”

delna.lv

59

Biedrība “Sabiedrība par atklātību – Delna” is a Latvian non-profit organization dedicated to promoting transparency and combating corruption. Established in 1998 as the Latvian chapter of Transparency International, Delna operates primarily in Latvia with a focus on public sector and civil society engagement. The organization offers services including advocacy, public awareness campaigns, whistleblowing support, and educational initiatives. Their market position is that of a recognized NGO with international ties, targeting government, NGOs, and the general public. Technically, the website is built on WordPress with modern web technologies such as Google Tag Manager, reCAPTCHA v3, and Mailchimp integration for newsletters. The site is mobile-optimized and provides multilingual support. Performance is moderate with good SEO and accessibility basics in place. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms. However, explicit security headers like CSP and X-Frame-Options are not clearly present, and no dedicated security or incident response policies are published. The site includes a cookie consent banner and privacy policy indicating GDPR compliance. Overall, the website is professional, trustworthy, and well-maintained, though WHOIS data is unavailable due to query limits, slightly reducing trust score. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date CMS and plugins to mitigate vulnerabilities.

P

Prizma Mediation

prizma.nl

36

Prizma Mediation is a small Dutch company specializing in mediation, coaching, and conflict resolution services primarily focused on workplace and team environments. The company presents itself as a certified mediator with MfN accreditation, targeting individuals and organizations seeking sustainable conflict solutions. The website is built on WordPress using a premium theme and common plugins, providing a moderate level of technical maturity with good mobile optimization but basic content quality and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy but would benefit from improved privacy compliance and security hardening.

襄樊富仕纺织服饰有限公司 is a large Chinese textile manufacturing company established in 2001, specializing in spinning and weaving with significant production capacity. The company holds multiple provincial and national certifications, positioning it as a reputable player in the manufacturing sector. The website presents a professional design with clear navigation and relevant business content targeting industry clients and partners. Technically, the site uses a SaaS platform with common web technologies like jQuery and Swiper.js, but mobile optimization and accessibility are basic. Security posture is weak due to lack of security headers and unclear SSL configuration. Privacy compliance is poor, with no visible privacy or cookie policies. The domain WHOIS data is unavailable, raising concerns about domain legitimacy. Suspicious external domains embedded in scripts and iframes further reduce trust. Overall, the site is functional and business-oriented but requires improvements in security, privacy, and domain registration transparency.

J

Jānis Roze

jr.lv

66

Jānis Roze is a well-established Latvian retail company specializing in books, stationery, and office supplies, operating a professional e-commerce platform targeting local consumers and businesses. The website demonstrates a solid technical infrastructure built on Magento with modern web technologies and performance optimizations. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is generally good with HTTPS enforcement, security headers, and monitoring tools like New Relic, though there is room for improvement in publishing explicit security policies and vulnerability disclosures. The absence of WHOIS data limits full domain trust assessment but the website content and technical indicators suggest a legitimate and professional business. Overall, the site is functional, secure, and compliant with relevant regulations, serving its target market effectively.

J

Jelgavas Tipogrāfija

jt.lv

43

Jelgavas Tipogrāfija is a well-established Latvian book printing and binding company, offering a full production cycle from offset and digital printing to post-processing and delivery across Europe. The company positions itself as one of the oldest and largest in the Baltic region, targeting publishers, governmental bodies, NGOs, and authors. Their website reflects a professional and modern digital presence, leveraging WordPress and multiple contemporary web technologies to deliver a responsive and SEO-optimized experience. Security-wise, the site enforces HTTPS and provides a comprehensive cookie consent mechanism, aligning with GDPR requirements. However, explicit security headers and incident response information are not evident, suggesting room for improvement in security posture documentation. Overall, the site is trustworthy and professionally maintained, though WHOIS data is unavailable due to query limits, limiting domain registration insights.

S

Solar Heat Europe

solarheateurope.eu

55

Solar Heat Europe is a European industry association dedicated to promoting solar thermal technologies to decarbonise heat. The organization serves industry stakeholders, policymakers, and the public by providing policy advocacy, market data, certification, and a resource center with news and publications. The website reflects a medium-sized, professional non-profit entity focused on renewable energy within the European market. Technically, the site is built on WordPress using modern plugins such as Elementor and Yoast SEO, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and GDPR-compliant cookie consent, though no explicit security or incident response policies are published. Overall, the website is trustworthy, professional, and compliant, with room for improvement in publishing security policies and enhancing accessibility.

E

Eurelectric

eurelectric.org

51

Eurelectric is a prominent sector association representing the European electricity industry, advocating for a carbon-neutral and energy-independent future. The organization serves over 3500 utilities across Europe, providing policy advocacy, publications, events, and data services to accelerate the energy transition. The website reflects a mature digital presence with comprehensive content tailored to industry stakeholders and policymakers. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating modern web technologies such as Google Tag Manager and Algolia Search. The site is well-optimized for SEO, mobile responsiveness, and accessibility, ensuring a positive user experience. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS, employs security headers, and includes a cookie consent mechanism compliant with GDPR. No exposed sensitive data or vulnerabilities were found. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Overall, Eurelectric's website demonstrates a strong business and technical foundation with good security and privacy practices. Strategic enhancements in security transparency and direct contact information could further strengthen its posture and stakeholder confidence.

E

European Federation of Intelligent Energy Efficiency Services (EFIEES)

efiees.eu

53

The European Federation of Intelligent Energy Efficiency Services (EFIEES) is a professional federation focused on representing and promoting the interests of energy efficiency service providers within the European Union. Their core mission is to advocate for Energy Efficiency Services Companies (EESCs) by influencing European policies and providing a platform for member engagement. The website reflects a well-structured and professional presence with relevant content about their activities, events, and projects, targeting stakeholders in the energy efficiency sector. Technically, the website is built on WordPress using the Astra theme, incorporating modern JavaScript libraries such as Swiper.js for interactive elements. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. However, some technical improvements could be made in accessibility and performance optimization. From a security perspective, the site uses HTTPS, ensuring encrypted communication. However, it lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of contact information and incident response details limits transparency. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing incident response and vulnerability disclosure information, and enhancing accessibility features.

E

EGEC - European Geothermal Energy Council

egec.org

57

EGEC - European Geothermal Energy Council is a well-established non-profit organization founded in 1998 that promotes the geothermal energy sector across Europe and globally. It serves as a key industry voice, providing policy advocacy, research support, event organization, and member networking services. The website reflects a mature digital presence with comprehensive content including news, policy documents, events, and membership information targeted at industry professionals, policymakers, and researchers. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain trust analysis, but the professional content and EU transparency registration support legitimacy. Overall, the site is a credible and authoritative platform in the geothermal energy sector.

E

European Construction Technology Platform (ECTP)

ectp.org

51

The European Construction Technology Platform (ECTP) is a well-established non-profit organization focused on driving innovation and research in the construction and built environment sector across Europe. Founded in 2004, it serves as a collaborative platform for over 150 member organizations spanning the entire supply chain. The website reflects a professional and structured presentation of their activities, including projects, events, membership, and resources, targeting construction professionals, researchers, and policy makers. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and demonstrates good SEO practices, though performance is moderate. Security posture is adequate with HTTPS enforced and secure forms, but lacks important security headers and a cookie consent mechanism, which are recommended for compliance and protection. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data limits domain registration trust verification, which slightly reduces overall trustworthiness. The site does not publish explicit security policies or incident response information, which could be improved to enhance transparency and readiness. Overall, the website is credible and professionally maintained, with clear contact information and active social media presence. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and improving WHOIS transparency to strengthen trust and compliance.

E

Efficient Buildings Europe

efficientbuildings.eu

60

Efficient Buildings Europe is a prominent European industry association focused on advancing energy efficiency in buildings across Europe. The organization collaborates with stakeholders and industry leaders to promote zero emission buildings and supports EU initiatives such as the BUILD UP portal. Their website reflects a professional and consistent brand image, targeting industry professionals and policymakers in the energy efficiency sector. Technically, the website is built on WordPress using popular plugins like LayerSlider and Visual Composer, with Google Analytics and Tag Manager integrated for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks security headers and formal incident response or vulnerability disclosure information. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. Overall, the website is credible and functional but would benefit from enhanced privacy and security practices.

C

Cool Heating Coalition

coolheatingcoalition.eu

48

Cool Heating Coalition is an EU-focused advocacy group dedicated to promoting decarbonised, renewable, and affordable heating and cooling solutions by 2040. The coalition targets policymakers, industry stakeholders, and EU citizens to advance climate action and energy security. Their website reflects a professional and consistent brand presence with clear messaging and calls to action, including open letters and statements to the European Commission. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, supported by Google Analytics for traffic insights. Security posture is solid with HTTPS and cookie consent mechanisms, though additional HTTP security headers and published policies could enhance trust. Privacy compliance is partially addressed via cookie consent but lacks explicit privacy and terms of service documents. Contact is primarily through a web form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and well-positioned as an important player in the EU energy advocacy space.

COGEN Europe is a well-established European association dedicated to promoting cogeneration technologies and policies across Europe. The organization collaborates with EU institutions and industry stakeholders to advocate for energy efficiency and emission reduction through cogeneration. The website reflects a medium-sized association with a solid membership base of national associations and corporate members, positioning itself as a key player in the energy sector focused on cogeneration. Technically, the website is built on WordPress using popular page builders and plugins, indicating a moderate level of digital maturity. The site is mobile-optimized, uses HTTPS, and includes structured data for SEO enhancement. However, some technical improvements are possible, such as adding security headers and fully configuring analytics tools. From a security perspective, the site benefits from HTTPS and does not expose sensitive data. However, it lacks visible security headers and formal privacy and cookie policies, which are important for GDPR compliance and user trust. The absence of incident response and vulnerability disclosure information suggests room for improvement in security governance. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

A

Armstrong Fluid Technology

armstrongfluidtechnology.com

64

Armstrong Fluid Technology is a well-established manufacturer specializing in intelligent fluid flow equipment such as pumps, valves, and heat exchangers, targeting commercial and industrial HVAC markets globally. The company emphasizes energy efficiency and sustainability, supported by a comprehensive website offering detailed product information, case studies, and resources. The technical infrastructure is modern, leveraging ASP.NET, Bootstrap, and various JavaScript libraries, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and domain transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website projects a professional and trustworthy image aligned with its business objectives.

T

Turboden S.p.A.

turboden.com

70

Turboden S.p.A. is an Italian company specializing in the design, manufacture, and maintenance of Organic Rankine Cycle (ORC) systems, large heat pumps, and gas expanders. Positioned as a global leader in energy efficiency and renewable energy technologies, Turboden serves industrial clients seeking sustainable and clean energy solutions. The company is affiliated with Mitsubishi Heavy Industries, enhancing its market credibility and reach. Their product portfolio targets decarbonization and electrification of heat, addressing critical global energy challenges. The website demonstrates a mature technical infrastructure utilizing modern web technologies such as Bootstrap, jQuery, Google Analytics, and Google Tag Manager. It features responsive design, multilingual support, and interactive elements like carousels and video content. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms implemented. However, some security best practices such as explicit Content-Security-Policy headers and public incident response information are lacking. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, although the website content and corporate affiliations mitigate this concern. Overall, the site is professional, trustworthy, and well-optimized for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and verifying domain registration details to improve trustworthiness and compliance.