Security Directory

The website linnuriik.ee serves as an informational and promotional platform focused on birdwatching and nature tourism in Matsalu National Park, Estonia. It provides detailed descriptions of bird species, observation towers, hiking trails, and virtual tours, targeting nature enthusiasts and tourists interested in the region. The site is operated by the Foundation of Lääne County and funded by the European Regional Development Fund, indicating a regional public interest focus. Technically, the website is built on WordPress using a modern tech stack including popular plugins like Yoast SEO, WPBakery Page Builder, and Slider Revolution. The site is hosted under the registrar Zone Media OÜ, an Estonian entity, with HTTPS enabled and good SEO practices implemented. Mobile optimization and accessibility are adequate, though some improvements could be made. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC and important security headers, and does not publish explicit security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable gap given GDPR requirements. Overall, the website is a well-maintained regional informational resource with good business credibility but requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

V

Visit Haapsalu

visithaapsalu.com

45

Visit Haapsalu is a regional tourism promotion website focused on Haapsalu and Läänemaa in Estonia, targeting tourists including families, couples, and health seekers. The site provides comprehensive travel information, event listings, guided tours, and recommendations for accommodation and dining. It positions itself as a key regional tourism information portal with a consistent brand and active social media presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating Google Analytics for visitor tracking. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit cookie consent mechanism is present. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional website content. Overall, the site is functional, informative, and trustworthy for visitors but would benefit from enhanced transparency and security practices.

E

Ettevõtlusnädal 2025

ettevotlusnadal.ee

39

Ettevõtlusnädal 2025 is a prominent Estonian nationwide entrepreneurship event organized annually by regional development centers to foster entrepreneurial spirit and support business startups. The website serves as an information hub for event programs, regional trainings, and inspirational content targeting entrepreneurs and aspiring business owners. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and security, including Google Tag Manager and reCAPTCHA. The site is well-optimized for mobile and SEO, with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site reflects a trustworthy and professional digital presence for a non-profit event organization.

T

Tartumaa Omavalitsuste Liit

tartumaa.ee

51

Tartumaa Omavalitsuste Liit is a regional governmental association representing municipalities in Tartu County, Estonia. The organization focuses on local governance, regional cooperation, education, welfare, culture, and strategic development. Their website serves as an information hub for residents, officials, and partners, providing news, event updates, and resources relevant to the county's municipalities. The association operates as a non-profit entity with a clear regional focus and a small organizational size. Technically, the website is built on the Voog CMS platform and utilizes modern web technologies including jQuery, Vue.js, Axios, Google Fonts, and Google Maps API. The site is mobile-optimized with a clear navigation structure and moderate performance. Security measures include HTTPS enforcement and Google reCAPTCHA integration on the contact form, though additional security headers and policies could enhance the security posture. From a security perspective, the site shows good baseline practices but lacks comprehensive privacy and cookie policies, as well as vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's governmental nature, supporting legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and serves its intended audience effectively. However, improvements in privacy compliance and security hardening are recommended to align with best practices and regulatory requirements.

V

Veinitee.ee

veinitee.ee

40

Veinitee.ee is a small Estonian hospitality business focused on promoting local wineries and wine tourism through a collaborative network of producers. The website serves as a portal to explore various wine routes and wineries across Estonia, targeting wine enthusiasts and tourists. The business is relatively new, founded in 2022, and leverages modern web technologies including WordPress with the Divi theme and Yoast SEO for content management and search optimization. The site integrates Google Tag Manager and Analytics for visitor tracking but lacks visible privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but could be improved with enhanced security headers and incident response information. Overall, the website is professionally designed with good content relevance and navigation, though privacy compliance and explicit contact details could be enhanced to improve trust and regulatory adherence.

P

Peace and Sport

april6.org

58

April6.org is a professionally designed website representing the International Day of Sport for Development and Peace, an initiative by the non-profit organization Peace and Sport based in Monaco. The site serves as a platform to promote awareness, mobilize organizations and individuals, and share impactful stories related to sport's role in peacebuilding and sustainable development. It features multilingual support, partner endorsements, and calls to action including donations and toolkit downloads. Technically, the site is built on WordPress using the Divi theme, integrates Google Analytics for tracking, and uses Mailjet for newsletter subscriptions. The website is well-structured with good SEO practices and mobile optimization, though it lacks explicit privacy and cookie policies, which impacts privacy compliance scoring. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but security headers are not explicitly detected. WHOIS data is unavailable due to privacy protection or query failure, which limits domain trust transparency but is not uncommon for non-profit organizations. Overall, the site is credible, functional, and serves its advocacy purpose effectively.

E

Eurochild AISBL

eurochild.org

55

Eurochild AISBL operates as the largest network of organizations and individuals dedicated to child rights advocacy across Europe. Founded in 2003 and headquartered in Belgium, Eurochild focuses on influencing policies, building civil society capacity, and facilitating knowledge exchange underpinned by the UN Convention on the Rights of the Child. The website reflects a mature digital presence with a WordPress CMS, modern front-end libraries, and a moderate performance profile. Security posture is strong with HTTPS enforced, reCAPTCHA integration, and GDPR-compliant cookie consent, though improvements are recommended in DNSSEC and security headers. Overall, the organization demonstrates high legitimacy and trustworthiness with consistent WHOIS data and active social media engagement.

C

Cleverec AB

cleverec.se

42

Cleverec AB operates a specialized SaaS platform called Cleverservice, designed to streamline referee assignments, digital receipts, payments, and tax reporting for sports associations primarily in Sweden. The company has an established market presence since 2014, focusing on a niche segment with tailored services for associations and referees. The website is built on WordPress with the Divi theme, incorporating modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The site demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with a dedicated GDPR page and cookie policy. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business objectives.

Riga Hockey Cup is a youth ice hockey tournament organizer based in Latvia, providing a platform for various age groups to compete in a well-structured European championship. The website offers multilingual support and comprehensive event information, targeting youth hockey teams, coaches, and fans. The digital infrastructure leverages common web technologies such as jQuery, Fancybox, and social media integrations, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie consent implemented, reflecting GDPR awareness. The absence of WHOIS data limits domain legitimacy verification, but the site appears professional and trustworthy overall.

F

Foundation for Environmental Education

leaf.global

52

The website www.leaf.global represents the Learning about Ecosystems and Forests (LEAF) programme, operated by the Foundation for Environmental Education, a registered non-profit organization focused on environmental education. LEAF promotes outdoor learning and ecosystem restoration education globally, with implementation in 28 countries and recognition by HundrED’s Global Collection 2024. The site provides educational resources, campaigns, and online courses via the FEE Academy platform. Technically, the site is built on Squarespace, uses modern web technologies, and integrates Google Analytics and Stripe for analytics and payment processing. Security posture is strong with HTTPS and HSTS enabled, no exposed sensitive data, and secure forms. Privacy compliance is well addressed with GDPR-compliant cookie and privacy policies. However, WHOIS data is unavailable due to privacy protection, which is justified for this non-profit entity. Overall, the site is professional, trustworthy, and well-maintained, serving a global educational mission.

F

Foundation for Environmental Education

ecoschools.global

56

Eco-Schools is a globally recognized environmental education programme operated by the Foundation for Environmental Education, engaging millions of students across over 100 countries. The website serves as a comprehensive resource hub offering educational materials, news, events, and online courses to support sustainability education. Technically, the site is built on Squarespace, leveraging modern web technologies and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is well addressed with clear GDPR and cookie policies. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the organization's established reputation and transparent content.

F

Foundation for Environmental Education

blueflag.global

56

Blue Flag is a globally recognized eco-label program operated by the Foundation for Environmental Education, a registered non-profit organization based in Denmark and England. The website serves as an informational and educational platform promoting sustainable tourism, environmental education, and certification of beaches, marinas, and boats. The organization maintains a strong market position as a leader in voluntary environmental awards with a global network of partners and national operators. Technically, the website is built on Squarespace, leveraging modern web technologies and ensuring secure HTTPS connections with HSTS enabled. Privacy and cookie policies are comprehensive and GDPR compliant, though terms of service and incident response contacts are absent. Social media presence and sustainability policy documents enhance trust and transparency. Overall, the site demonstrates good content quality, technical implementation, and security posture, suitable for its non-profit mission and audience.

T

Tervise Paradiis

terviseparadiis.ee

54

Tervise Paradiis is a well-established 4-star spa hotel and water center located in Pärnu, Estonia, offering a comprehensive range of leisure and wellness services including accommodation, water park facilities, sports complex, bowling, and dining options. The business targets spa and wellness tourists, families, and leisure travelers, positioning itself as a leading hospitality provider in the region. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress CMS, leveraging modern SEO tools and cookie consent management, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and published security policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in privacy compliance and security transparency would enhance trust and compliance.

Talsu Kultūras centrs is a local cultural institution based in Talsi, Latvia, focused on organizing and promoting cultural events, exhibitions, and community activities. The website serves as an information hub for upcoming events and cultural programs, targeting residents and visitors interested in local culture and amateur arts. The business model is that of a public cultural center, supporting cultural policy implementation and community engagement. Technically, the website is built on WordPress 6.8.1 with common plugins and uses Google Tag Manager for analytics. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and no visible privacy or cookie policies, which impacts compliance and user trust. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the site is functional and informative but would benefit from enhanced security and privacy compliance measures.

K

Keep.eu

keep.eu

48

Keep.eu is a specialized platform providing aggregated information on Interreg and IPA-IPA cross-border projects, partners, and programmes. It serves governmental and non-profit organizations involved in cross-border cooperation by consolidating operational and financial data in one accessible location. The website leverages a WordPress CMS with modern JavaScript libraries and integrates Google services such as Maps and Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks comprehensive privacy and security policies, which are critical for compliance and trust. Overall, the platform is functional and professionally presented but would benefit from enhanced transparency and security documentation.

S

Sport For One Humanity

sportforonehumanity.org

56

Sport For One Humanity is a non-profit initiative launched in 2022 by Turkish Airlines with support from the United Nations Alliance of Civilizations (UNAOC). The initiative focuses on empowering grassroots organizations that use sport as a tool for peace, development, and social inclusion. The website presents a professional and consistent brand image, highlighting capacity-building, mentorship, and visibility services for civil society organizations worldwide. Technically, the site is built on WordPress using the Divi theme and several plugins, hosted on Quadranet servers, and secured with HTTPS. However, it lacks published privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible.

U

United Nations Alliance of Civilizations (UNAOC) in partnership with BMW Group

interculturalleaders.org

58

InterculturalLeaders.org is a non-profit digital platform established in 2013 as a partnership between the United Nations Alliance of Civilizations (UNAOC) and the BMW Group. It serves as a skills and knowledge-sharing hub for civil society organizations and young leaders focused on intercultural dialogue and addressing cross-cultural tensions. The platform offers networking, training, mentorship, and funding opportunities to its community, positioning itself as a niche but credible player in the non-profit sector dedicated to peacebuilding and social inclusion. Technically, the website is built on WordPress 5.1.19 and leverages common web technologies such as jQuery, Bootstrap, Font Awesome, and Google reCAPTCHA for form security. Hosting is managed via Quadranet, and the site enforces HTTPS with a Content Security Policy header. While the site is mobile-optimized and has a professional design, some accessibility and SEO features are basic. Analytics usage includes Google Analytics and Facebook SDK, indicating moderate user tracking without explicit cookie consent mechanisms. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and CAPTCHA on forms but lacks advanced security headers and DNSSEC. No exposed sensitive data or vulnerabilities were detected in the HTML content. The WHOIS data shows privacy protection typical for non-profit organizations, with domain age consistent with the business history, supporting legitimacy. Overall, the website is a credible and professionally maintained platform with moderate technical maturity and security posture. However, it lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Strategic improvements in security headers, privacy disclosures, and cookie consent would enhance trust and compliance.

T

The Intercultural Innovation Hub

interculturalinnovation.org

57

The Intercultural Innovation Hub is a non-profit initiative established in 2011, operating as a partnership between UNAOC and the BMW Group. It focuses on supporting innovative grassroots projects that promote intercultural dialogue and cooperation globally. The website presents a professional and consistent brand image with good content quality targeting changemakers and organizations interested in social innovation. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and Facebook Pixel, hosted on Quadranet servers. Mobile optimization and SEO practices are well implemented, though accessibility is basic. Security posture is moderate with HTTPS enabled and domain protection in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

U

United Nations Alliance of Civilizations (UNAOC)

forsafeworship.org

58

The website forsafeworship.org represents the United Nations Alliance of Civilizations (UNAOC) initiative titled '#forSafeWorship - UN Plan of Action to Safeguard Religious Sites'. It serves as a platform to advocate for the protection and respect of religious sites worldwide, emphasizing peace and harmony. The target audience includes global communities, religious groups, governments, and peace organizations. The site operates as a non-profit advocacy platform under the United Nations umbrella, with a small organizational size and a founding year of 2020. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, hosted on Quadranet servers. It employs modern web technologies such as JavaScript and jQuery, and the site is moderately optimized for performance and mobile responsiveness. SEO practices are good, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status protections. However, it lacks several security headers and does not provide explicit security or incident response policies. No vulnerability disclosure or security.txt files are present, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain registration is privacy protected but consistent with the nature of a UN-affiliated non-profit. Overall, the website is trustworthy and professional in its presentation and content but would benefit from enhanced privacy compliance, security headers, and explicit contact information to improve user trust and regulatory adherence.

The Outdoor Industries Association (OIA) CIC is a UK-based non-profit membership organization representing over 200 entities in the outdoor recreation sector. It provides advocacy, representation, promotion, and leadership services to unite the industry with a common voice. The website is professionally designed using WordPress with modern plugins for SEO, performance, and membership management. It targets industry members, retailers, NGOs, and related organizations in the UK outdoor recreation market. The site features comprehensive content including news, events, membership information, and resources. Technically, the site uses a modern tech stack with performance optimizations and is mobile responsive. Security posture is good with HTTPS enforced and some security headers present, though explicit privacy and cookie policies are missing. Analytics tracking is implemented with Google Analytics and PixelYourSite, with moderate user tracking. WHOIS data for the queried domain 'www.theoia.co.uk' is unavailable due to domain naming rules, indicating a possible misconfiguration or incorrect domain query, which slightly impacts trust. Overall, the site is credible and professional but would benefit from enhanced privacy compliance and published security policies.

NEXTING s.r.l. is an Italian media company specializing in TV content production, broadcast services, OTT solutions, communication, and innovative technologies such as AR and VR. The company operates internationally with ENG crews and offers multimedia OTT platforms focused on cultural heritage. Their business model is service-oriented, supported by European and regional funding for research and development projects. The website presents a professional image with clear contact information and social media presence, targeting media and broadcast clients. Technically, the website uses common web technologies including jQuery, FontAwesome, and Google Fonts. The site is mobile-optimized with good navigation and content relevance. However, no CMS or hosting provider information is evident. Performance is moderate, and accessibility is basic. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the website lacks visible security headers and published privacy or cookie policies, which impacts compliance and trust. The WHOIS data is missing or indicates the domain is unregistered, which is a significant concern for legitimacy. No forms or incident response contacts are present, limiting data protection and security readiness. Overall, the site is functional and professional but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

C

Coopalsa + Nadal

bus.ad

55

Coopalsa + Nadal operates as a primary public transportation service provider in Andorra, offering regular bus lines and related services. The website serves residents and visitors by providing schedules, ticket sales information, and route details. The company maintains a consistent brand presence and engages users through social media platforms such as Facebook, Twitter, and Instagram. The business model focuses on essential transportation services within the country, positioning itself as a key local operator.

R

RAMIRENT BALTIC AS

ramirent.ee

62

Ramirent Baltic AS operates as the largest tool and construction equipment rental service provider in the Baltic region, offering a comprehensive range of rental products and services including 24-hour technical support and modular factory solutions. The company is part of the Loxam Group, a recognized leader in equipment rental, which enhances its market position and credibility. The website reflects a professional and user-friendly digital presence with clear navigation and localized content tailored for Estonian customers. Technically, the website is built on a modern WordPress CMS platform with WooCommerce integration, leveraging popular libraries such as jQuery and Google Tag Manager for analytics and marketing. The site demonstrates good mobile optimization and moderate performance, with a GDPR-compliant cookie consent mechanism and structured data enhancing SEO and user experience. From a security perspective, the site enforces HTTPS and uses Cloudflare bot management cookies, indicating a proactive approach to security. However, some security headers are not explicitly detected, and there is no publicly available security policy or incident response contact, which could be improved to strengthen trust and compliance. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic improvements in security policy transparency and enhanced accessibility could further elevate the site's maturity and user trust.

V

Visit Talsi

visittalsi.com

44

Visit Talsi is a regional tourism information center website dedicated to promoting the Talsi region in Latvia. The site provides comprehensive information about local attractions, events, accommodations, and dining options, targeting tourists and visitors interested in exploring the area. The business operates as a small entity focused on hospitality and regional tourism promotion, with a clear market position as a trusted local information source. The website is multilingual, primarily in Latvian, with options for English, German, Estonian, Lithuanian, and French, enhancing accessibility for international visitors. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, Google Maps API, and Google Fonts. It uses common plugins such as MonsterInsights for Google Analytics tracking. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Hosting is via name servers cloudns1.hostnet.lv and cloudns2.hostnet.lv, though the exact hosting provider is not explicitly identified. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protection enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no visible privacy policy, cookie policy, or terms of service, and no consent mechanism for tracking cookies, which poses compliance risks under GDPR. Incident response and security policies are not published, indicating a low maturity in security governance. Overall, the website is professional, trustworthy, and serves its business purpose well but requires improvements in privacy compliance and security best practices to reduce risk and enhance user trust. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response contacts.

T

Talsi novads

talsunovads.lv

61

The website www.talsunovads.lv serves as the official digital presence of Talsi Municipality in Latvia, providing comprehensive information about local government operations, public services, cultural events, education, social support, and community engagement. It targets residents, local businesses, and visitors, offering structured navigation and multilingual support primarily in Latvian. The site is built on Drupal CMS with modern web technologies and demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though explicit incident response and vulnerability disclosure policies are absent. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. WHOIS data could not be retrieved due to query limits, but the domain appears legitimate and consistent with a government entity. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

R

Rebelcreations AG

epeeglobal.org

45

EPEE is a European industry association representing the refrigeration, air conditioning, and heat pump sectors. The organization focuses on policy advocacy, sustainable heating and cooling solutions, and industry representation. The website reflects an established presence with a domain registered since 2000 and hosted by OVH in Germany. Technically, the site is built on WordPress with modern libraries such as Bootstrap and jQuery, providing a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, and no consent mechanisms are detected, which may pose compliance risks. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security best practices.

E

Euroopa rändevõrgustiku Eesti kontaktpunkt

emn.ee

44

The website www.emn.ee serves as the official Estonian contact point for the European Migration Network, providing comprehensive migration and asylum policy reports, applied research, and urgent information exchange. It targets policymakers, researchers, and migration professionals, positioning itself as a trusted government-related entity with a focus on migration statistics and policy analysis. The site is well-structured, content-rich, and regularly updated with news, events, and publications relevant to migration topics. Technically, the website is built on WordPress with Yoast SEO and integrates Google Analytics and Tag Manager for tracking. It demonstrates good mobile optimization and moderate performance. The use of HTTPS and cookie consent mechanisms reflects a solid privacy posture, although some security headers and explicit incident response information are missing. Security-wise, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks published security policies and vulnerability disclosure mechanisms, which could enhance trust and compliance. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the website scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional resource in its domain. Strategic improvements in security headers, incident response transparency, and accessibility could further strengthen its position.

M

Medicover

medicover.com

70

Medicover is a large healthcare provider specializing in diagnostic and healthcare services primarily in Central and Eastern Europe, with recent expansion into India. The company operates through two main divisions, Diagnostic Services and Healthcare Services, targeting patients and healthcare consumers in these regions. The website presents a professional and consistent brand image with comprehensive corporate governance and financial information, indicating a mature business presence. Technically, the website is built on Drupal CMS with Bootstrap framework and integrates modern analytics tools such as Google Analytics and Google Tag Manager. It is mobile optimized and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and there is no visible security policy or incident response information published. From a security perspective, the site enforces HTTPS and uses privacy-compliant analytics configurations. The absence of WHOIS data raises concerns about domain registration legitimacy, which requires further investigation. No critical vulnerabilities or exposed sensitive data were found in the content. Overall, the website demonstrates a good security posture but could improve transparency and security best practices. The overall risk is moderate due to the missing WHOIS data and lack of explicit security policies. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and verifying domain registration details to strengthen trust and compliance.

O

Overcode.bg

affiliatly.com

64

Affiliatly is a SaaS provider specializing in affiliate marketing program management software tailored for e-commerce businesses. The platform offers a comprehensive suite of features including multiple affiliate tracking methods, affiliate management, payment integrations, marketing asset management, and performance analytics. With over 11 years of experience and more than 2500 registered clients, Affiliatly positions itself as a reliable and established player in the affiliate marketing technology space. The website targets e-commerce store owners and affiliate marketers seeking to launch and manage affiliate programs efficiently. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various JavaScript libraries for UI enhancements and analytics. It integrates with a broad range of popular e-commerce platforms, demonstrating a mature and flexible technical infrastructure. The site is mobile-optimized and uses Matomo for privacy-conscious analytics tracking. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, privacy policies, and incident response documentation, reflecting a solid security posture. However, the absence of WHOIS data and lack of explicit security headers indicate areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security maturity is good but could benefit from enhanced header configurations and clearer security contact information. The overall risk assessment is moderate with a trustable business presence but some transparency concerns due to missing WHOIS data. Strategic recommendations include improving security headers, providing explicit security contact channels, enhancing accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

O

OÜ Tervise Paradiis

veekeskus.eu

44

OÜ Tervise Paradiis operates the largest water center in Estonia, located in Pärnu, offering a wide range of recreational and sports facilities including pools, saunas, bowling, and fitness services. The website is well designed, multilingual, and provides comprehensive information and booking forms for various customer segments such as families, schools, and groups. Technically, the site is built on WordPress with modern plugins and frameworks, and it integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and secure form handling, though some security headers could be improved and no explicit security policies are published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the domain registration is consistent with the business location and sector, indicating legitimacy and trustworthiness.

T

Toyota Eesti

toyota.ee

72

Toyota Eesti operates as the official Toyota brand presence in Estonia, offering a comprehensive range of automotive products including hybrid and electric vehicles, SUVs, commercial vehicles, and special offers. The website serves as a digital storefront and information hub for Estonian consumers and businesses interested in Toyota's mobility solutions. It reflects Toyota's global brand standards and local market adaptation. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies such as Adobe Launch for tag management, Datadog for real user monitoring, and OneTrust for cookie consent management. The infrastructure is robust, with CDN usage and integration with Toyota Europe services. Security posture is strong, with HTTPS enforced, privacy-conscious tracking, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policy and terms of service documents are not detected in the provided content, which is a compliance gap. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

I

Invaru OÜ

invaru.ee

65

Invaru OÜ operates as a specialized provider of assistive devices and healthcare-related products in Estonia, offering a comprehensive range of mobility aids, incontinence products, rehabilitation equipment, and personal care items. The company supports its customers through both online e-commerce and multiple physical store locations, providing sales, rental, repair, and consultation services. Their market position is that of a trusted regional player catering to individuals with special needs, elderly customers, and healthcare providers. Technically, the website is built on the nopCommerce platform, integrating modern analytics and marketing tools such as Google Analytics, Facebook SDK, and Klevu Search, reflecting a mature digital infrastructure with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security policies and vulnerability disclosure reduces transparency. Overall, the site demonstrates moderate to good professionalism and trustworthiness, with room for improvement in privacy compliance and security communication.

E

ENRE OÜ

oakohv.ee

46

ENRE OÜ operates the website oakohv.ee, an Estonian e-commerce platform specializing in the retail and wholesale of coffee products including coffee beans, capsules compatible with Dolce Gusto, Nespresso, and Senseo machines, as well as coffee machines and accessories. The company targets both individual consumers and businesses within Estonia, offering a broad product range with options for bulk purchases and subscription services. The website is professionally designed with clear navigation, product categorization, and detailed product information, supporting a positive user experience.

F

Foundation for Environmental Education

greenkey.global

56

Green Key is a globally recognized environmental certification program operated by the Foundation for Environmental Education, focusing on sustainable operation within the tourism and hospitality industry. The website presents a professional and comprehensive overview of the program, its benefits, and participation process, targeting hospitality businesses and environmentally conscious travelers. The digital infrastructure is built on Squarespace, leveraging modern web technologies and analytics tools such as Google Analytics and Hotjar for user insights. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and incident response information could enhance trust. Privacy compliance is well addressed with clear GDPR and cookie policies. WHOIS data is privacy protected but consistent with the organization's profile, supporting legitimacy. Overall, the website is a credible and effective platform for promoting sustainable tourism certification.

L

Liikumistervise innovatsiooni klaster SportEST

sportest.eu

42

Liikumistervise innovatsiooni klaster SportEST is a small Estonian cluster organization focused on fostering innovation in the field of movement health. The website presents the cluster as a recognized European-level partner with a bronze certification from the European Cluster Excellence program. The business model centers on collaboration among sector organizations and companies to develop innovative solutions in movement health. The website content is primarily in Estonian with language options for English and Russian, targeting regional and international stakeholders in the health innovation sector. Technically, the website is built on WordPress 4.7.29, utilizing common JavaScript libraries such as jQuery and plugins for slideshows and lightboxes. Google Analytics and Google Tag Manager are implemented for user tracking. The site is served over HTTPS, ensuring encrypted communication. However, the WordPress version is outdated, and minor PHP warnings are visible, indicating backend issues that could pose security risks. Accessibility and SEO optimizations are basic but functional, and mobile responsiveness is good. From a security perspective, the site lacks important security headers and does not publicly disclose privacy or cookie policies, which impacts GDPR compliance. No incident response or vulnerability disclosure information is available. The WHOIS data is unavailable due to EURid privacy policies, but the domain appears legitimate based on website content and certifications. Overall, the security posture is moderate but could be improved by addressing backend errors, updating software, and enhancing privacy compliance. The overall risk is moderate with recommendations to improve backend stability, implement security headers, publish privacy and cookie policies, and update the CMS to a supported version. These steps will enhance trust, compliance, and security posture for the cluster and its stakeholders.

J

Jocs dels Petits Estats d'Europa

gsse-andorra2025.com

49

The website gsse-andorra2025.com serves as the official digital platform for the Games of the Small States of Europe (GSSE) event hosted by Andorra in 2025. It provides comprehensive information about the event, including schedules, venues, media resources, and transport details. The site targets athletes, officials, media, and fans interested in this biennial multi-sport event featuring small European states. The business model focuses on event promotion and information dissemination, positioning itself as the authoritative source for GSSE 2025 in Andorra. Technically, the website is built on WordPress with Elementor page builder, leveraging modern web technologies such as jQuery, Swiper, and SEO tools like Rank Math. The site demonstrates good mobile optimization, SEO practices, and moderate performance. It uses HTTPS and includes a cookie consent mechanism, reflecting a mature digital infrastructure suitable for event promotion. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, it lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Contact information is limited, with no direct emails or phone numbers found on the main pages. Overall, the website presents a low-risk profile with a professional appearance and solid privacy compliance. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clearer contact channels to improve trust and incident response readiness.

U

United Nations Alliance of Civilizations (UNAOC)

unaoc.org

59

The United Nations Alliance of Civilizations (UNAOC) is a United Nations entity dedicated to fostering intercultural dialogue, understanding, and cooperation globally. It serves as a convener and facilitator to promote harmony among diverse cultures and religions, aiming to prevent conflict and enhance social cohesion. UNAOC operates through various programs, global forums, youth engagement initiatives, and campaigns against hate speech and antisemitism, positioning itself as a key player in international peacebuilding and cultural diplomacy. Technically, the UNAOC website is built on the WordPress CMS platform, utilizing a modern tech stack including jQuery, Yoast SEO, and various plugins for enhanced functionality such as responsive sliders, mega menus, and media embedding. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by structured data markup and social media integration. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement to enhance compliance and security posture. No vulnerabilities or suspicious activities were detected in the visible content. Overall, UNAOC's digital presence reflects a professional, trustworthy, and authoritative organization aligned with United Nations standards. The domain's WHOIS data is privacy protected, which is typical for UN domains, and the domain age aligns with the organization's history. Strategic recommendations include implementing security headers, adding a cookie consent banner for GDPR compliance, and publishing incident response and vulnerability disclosure policies to further strengthen trust and security.

T

The European Organisation for Grassroots Sport (ENGSO)

engso-education.eu

60

The European Organisation for Grassroots Sport (ENGSO) operates a dedicated education portal aimed at supporting the development of grassroots sport across Europe. The website offers a comprehensive range of educational resources, research publications, seminars, and e-courses focused on equality, governance, and the societal role of sport. ENGSO positions itself as a leading voice in voluntary grassroots sport, supported by EU funding and partnerships. The target audience includes sport professionals, voluntary organizations, and stakeholders involved in grassroots sport development. Technically, the website is built on WordPress using the Enfold theme and Elementor page builder, leveraging modern web technologies such as Google Tag Manager and Cloudflare Zaraz for analytics and performance. The site is mobile-optimized with good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with a well-structured and professional design. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, indicating a solid baseline security posture. However, additional security headers and formal security policies are absent. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional front for ENGSO's educational mission. The main limitation is the absence of WHOIS data, which restricts domain trust verification. Despite this, the presence of EU funding disclosures and consistent branding supports legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and verifying domain registration details to improve trustworthiness.

S

SIIDRIKODA OÜ

kodas.ee

38

SIIDRIKODA OÜ operates the Kodas brand, a craft cider producer and hospitality business based in Estonia. The company offers a range of award-winning sustainable ciders, a restaurant, factory tours, accommodation in unique iglu houses, and event tickets. The website is professionally designed using WordPress and WooCommerce, supporting e-commerce and booking functionalities. The digital infrastructure includes modern marketing and analytics tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Klaviyo, indicating a mature digital marketing approach. Security posture is good with HTTPS enabled and privacy compliance evident through comprehensive privacy and cookie policies. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data supports the legitimacy of the domain and business. Overall, the website presents a trustworthy and professional online presence for a small hospitality and retail business.

M

Murimäe veinikelder

murimaevein.ee

43

Murimäe veinikelder is a small Estonian hospitality business operating the world's northernmost terraced vineyard. The company offers a combination of e-commerce wine sales, wine tastings, accommodation, and event hosting, targeting wine enthusiasts and tourists. The website is built on WordPress with WooCommerce and Elementor, reflecting a moderate level of digital maturity with good SEO and mobile optimization. Security posture is adequate with HTTPS and nonce usage, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the business presents a professional online presence with clear offerings but should enhance privacy compliance and security transparency to strengthen trust and regulatory adherence.

T

Toidutänavad

toidutanavad.ee

40

Toidutänavad is an event organization business hosting Estonia's largest street food festival, established in 2020. The website serves as a promotional platform targeting families and street food enthusiasts in Estonia, offering information about the festival and related events. The site is built on WordPress with modern SEO and multilingual support, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are critical for GDPR compliance. Contact and incident response information are not present, limiting user trust and compliance transparency. Overall, the website is functional and professional but requires improvements in privacy, security policies, and contact transparency to enhance trust and compliance.

M

MTÜ Hiiukala

hiiukala.org

46

MTÜ Hiiukala is a small Estonian non-profit organization dedicated to supporting the sustainable development of the Hiiumaa fishing region and representing the interests of local professional fishermen. Founded in 2008, it has a solid history of managing European fisheries fund projects and engaging the local community. The website reflects a well-structured WordPress platform with good design and navigation, optimized for mobile devices and SEO. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled and domain registration consistent with the organization's identity, but could be improved by enabling DNSSEC and adding security headers. Contact information is clearly provided, and the organization maintains an active Facebook presence. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

A

Anija Mõis

anijamois.ee

42

Anija Mõis is a historic manor and cultural site located in Northern Estonia, offering a wide range of services including a permanent exhibition, visitor programs, event hosting such as weddings and seminars, workshops, a manor café, and a gift shop. The website reflects a well-established cultural tourism business targeting families, tourists, and event organizers. The site is built on WordPress using the Avada theme and Fusion Builder, integrating modern plugins like Slider Revolution and Contact Form 7 with Google Analytics and reCAPTCHA for security and analytics. Security posture is good with HTTPS and reCAPTCHA, though some security headers are missing and no privacy policy page was found, indicating room for compliance improvement. Overall, the website is professional, content-rich, and trustworthy, with clear contact information and active social media presence.

M

MTÜ Sibulatee

sibulatee.ee

44

Sibulatee is a non-profit organization dedicated to promoting the cultural and tourism assets of the Peipsimaa region in Estonia. The website serves as a comprehensive portal for events, local businesses, cultural heritage, and educational opportunities, targeting tourists and local communities interested in authentic regional experiences. The platform leverages WordPress and WooCommerce to provide event listings, e-commerce for local products, and seminar information, supported by active social media engagement and newsletter subscriptions. Technically, the site uses modern JavaScript libraries and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and policies are recommended. Privacy compliance is addressed with a clear privacy policy and cookie banner, aligning with GDPR requirements. Overall, the site is professionally designed, user-friendly, and trustworthy, with clear contact information and consistent branding. No critical vulnerabilities or blocking mechanisms were detected, supporting a positive risk profile.

K

kalateave.ee

kalateave.ee

42

The website kalateave.ee serves as the Fisheries Information Centre for Estonia, focusing on enhancing knowledge and sustainability in fisheries, aquaculture, and aquatic resource utilization. It targets industry professionals, non-profits, research institutions, and the general public interested in fisheries. The site offers informational content, research publications, educational materials, and event announcements, positioning itself as a central knowledge hub in the Estonian fisheries sector. Technically, the site is built on Joomla CMS with modern web technologies including jQuery, Bootstrap, and FontAwesome, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and has good SEO practices but lacks some accessibility features and security headers. Security posture is solid with HTTPS enforced and CSRF protections, but there is room for improvement in privacy compliance and explicit security policies. Overall, the site is professional and trustworthy but should enhance privacy transparency and security headers to align with best practices.

O

OÜ Veinimõisnik

veinivilla.ee

25

Valgejõe Veinivilla is a small Estonian winery operating since 2014, positioned as the northernmost winery in Estonia. They produce fruit, berry, and grape wines using local ingredients, offering retail sales through their online wine shop and on-site services including tours, tastings, and events. The business targets wine enthusiasts and tourists seeking authentic local experiences. Technically, the website is built on WordPress with WooCommerce and Elementor, supported by a reputable hosting provider. The site is well-structured, mobile-optimized, and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with room for compliance and security enhancements.

V

V360 agency

v360.ee

43

V360 Agency OÜ is a small Estonian digital agency specializing in web development, e-commerce solutions, branding, and full digital marketing services. The company positions itself as a smart solution for digital success, targeting businesses seeking to elevate their online presence through comprehensive marketing and branding strategies. Their website showcases a professional design with clear navigation, client testimonials, and a portfolio of projects, indicating a trusted market presence. Technically, the site is built on WordPress with modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates Google Tag Manager and reCAPTCHA for tracking and security. The hosting and domain registration are managed by Zone Media OÜ, a reputable Estonian registrar and hosting provider. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional and credible, though improvements in privacy and security policies are recommended.

V

Võrumaa Arenguagentuur SA

vorumaa.ee

39

Võrumaa Arenguagentuur SA operates the website vorumaa.ee as a regional development center serving Southeast Estonia. The organization provides information, consulting, and training services primarily targeting local businesses, non-profits, and municipalities. The website reflects a government or non-profit entity with a clear regional focus and a mission to support economic and community development. The site is built on WordPress using the Divi theme and incorporates modern SEO practices via Yoast SEO. It uses Google Analytics and Tag Manager for analytics and includes a cookie consent mechanism, indicating some attention to privacy compliance. Security measures include HTTPS and Google reCAPTCHA, but explicit security policies and incident response information are absent. Overall, the website is professionally designed with good content relevance and moderate trustworthiness, though it lacks some compliance documentation such as privacy and terms of service pages.

T

Tartu Ärinõuandla

arinouandla.ee

41

Tartu Ärinõuandla is a non-profit organization based in Estonia, providing expert consultancy and support services to entrepreneurs, NGOs, youth labs, and investors. The organization is recognized within its network as a leading entrepreneurship developer since 2014. The website serves as a portal for information, events, and service registration, targeting local and regional business communities. Technically, the site is built on WordPress, leveraging common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Sendinblue for newsletter management. Security measures include HTTPS enforcement and reCAPTCHA on forms, though some security headers are missing. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though terms of service and security policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

S

SA Jõgevamaa Arendus- ja Ettevõtluskeskus

jaek.ee

45

SA Jõgevamaa Arendus- ja Ettevõtluskeskus (JAEK) is a regional development and entrepreneurship support organization based in Jõgeva County, Estonia. Founded in 2010, it provides a broad range of services including entrepreneurship training, community programs, cultural and tourism promotion, and health and safety initiatives. The website serves as an information hub for local businesses, citizens, and institutions, offering news, project details, and contact information. The organization positions itself as a key regional player in supporting economic and social development.