Security Directory

S

Sosiaali- ja terveysministeriö

stm.fi

55

The Sosiaali- ja terveysministeriö (Ministry of Social Affairs and Health) is a Finnish government entity responsible for social and health policy. The website serves as an official information portal providing updates, policy documents, project details, and contact information primarily targeting Finnish citizens and professionals in the social and health sectors. The site is well-established with a domain age dating back to 1997, reflecting a mature digital presence. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries and frameworks such as React and Clay UI, ensuring a responsive and accessible user experience. Security measures are robust, with HTTPS enforced and multiple security headers implemented, although DNSSEC is not enabled. Privacy compliance is strong, featuring a clear cookie consent mechanism and a comprehensive privacy policy aligned with GDPR requirements. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for a government ministry.

O

Oikeusministeriö/Oikeushallinnon tietotekniikkakeskus

oikeusministerio.fi

43

The website represents the Finnish Ministry of Justice (Oikeusministeriö), responsible for maintaining and developing the justice system, legal protections, and democratic structures in Finland. It serves as an official government portal providing information on laws, justice administration, and citizens' fundamental rights. The site targets Finnish citizens, legal professionals, and government officials, offering multi-language support and comprehensive content relevant to its mandate. The business model is that of a government entity providing public services and legal frameworks, with a strong market position as an official ministry.

T

Työ- ja elinkeinoministeriö

tem.fi

55

Työ- ja elinkeinoministeriö (Ministry of Employment and the Economy) is a Finnish government ministry responsible for employment, economic policy, energy, and regional development. The website serves as an official platform for disseminating governmental information, news, public consultations, and services to Finnish citizens, businesses, and other stakeholders. It maintains a strong market position as an authoritative source of official information in its sector. The website is built on a modern technical infrastructure leveraging Liferay CMS, React, and various JavaScript libraries such as jQuery and ChartJS. It demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Hosting appears to be managed by Finnish government IT services, ensuring reliability and security. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not prominently published, representing an area for improvement. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a government entity, with recommendations to enhance security transparency and incident response readiness to further strengthen trust and compliance.

Valtiovarainministeriö is the Finnish Ministry of Finance responsible for stabilizing public finances, ensuring sustainable economic growth, and enhancing the effectiveness and productivity of public services and administration. The website serves as an official government portal providing news, publications, and information relevant to Finnish citizens, government officials, and stakeholders in public finance. The site is well-branded, consistent, and professionally maintained, reflecting its authoritative position in the Finnish government. Technically, the website is built on the Liferay Portal CMS platform, utilizing modern JavaScript libraries including React and jQuery, and incorporates accessibility and SEO best practices. The site is mobile-optimized and performs moderately well, hosted likely on Finnish government infrastructure. Security posture is strong with HTTPS enforced, cookie consent implemented, and no exposed sensitive data detected. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not prominently published. Overall, the website demonstrates a mature digital presence with strong business credibility and technical implementation. Security practices are solid but could be enhanced by publishing formal security policies and enabling DNSSEC. Privacy compliance is good with visible cookie consent and a comprehensive privacy policy. No blocking or WAF interference was detected, allowing full content access and analysis.

U

Ulkoministeriö

um.fi

56

Ulkoministeriö is the official Finnish Ministry for Foreign Affairs, providing comprehensive information and services related to Finland's foreign policy, consular services, international cooperation, and travel advisories. The website serves Finnish citizens, businesses, international partners, and travelers with a broad range of government-related content and resources. The site is positioned as a key government portal with authoritative and official information. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries including React and jQuery, and is hosted with Cloudflare DNS services with DNSSEC enabled, ensuring strong domain security. The site is mobile optimized, accessible, and features a well-structured navigation system. Security posture is strong with HTTPS enforced, DNSSEC, and presence of privacy and security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie consent mechanisms in place. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for a government entity.

L

Liikenne- ja viestintäministeriö

lvm.fi

53

Liikenne- ja viestintäministeriö (Ministry of Transport and Communications of Finland) is a government entity responsible for policies and regulations in transportation and communications sectors. The website serves as an official communication channel providing news, project updates, and regulatory information to Finnish citizens and stakeholders. It maintains a strong market position as an authoritative government ministry with a clear focus on sustainable growth, wellbeing, and security through information and future connectivity. The site is well-structured, multilingual, and integrates social media channels to enhance outreach. Technically, the website is built on the Liferay CMS platform, utilizing modern JavaScript libraries including React and jQuery, and government-hosted infrastructure via Valtori. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with comprehensive meta tags and structured navigation. From a security perspective, the site enforces HTTPS, employs multiple security headers, and includes a cookie consent mechanism aligned with GDPR. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, the website exhibits a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source of official government information. Strategic improvements in security transparency and DNS security could further strengthen its posture.

V

Valtioneuvoston kanslia

vnk.fi

53

Valtioneuvoston kanslia is the official Finnish Government Prime Minister's Office, providing authoritative information on government operations, policies, and public services. The website serves a broad audience including citizens, officials, and international visitors, offering comprehensive content in multiple languages. The site is built on a modern technical infrastructure using Liferay CMS and popular JavaScript frameworks, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although public security policies and incident response contacts are not explicitly published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, reflecting its role as a government portal.

V

Valtioneuvoston kanslia

valtioneuvosto.fi

53

Valtioneuvosto.fi is the official website of the Finnish Government's Cabinet Office, serving as the highest executive authority in Finland. The site provides comprehensive information about government operations, decisions, ministries, and public administration. It targets Finnish citizens, government officials, media, and stakeholders interested in governmental affairs. The website is well-established, with a domain age dating back to 2001, reflecting its long-standing governmental role. Technically, the website employs a mature and modern infrastructure based on the Liferay CMS platform, enhanced with JavaScript frameworks including jQuery and React. It demonstrates good mobile optimization, accessibility, and SEO practices. Hosting and DNS services appear to be managed by Finnish government IT providers, ensuring reliability and compliance with national standards. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements key security headers. It includes a cookie consent mechanism aligned with GDPR requirements and maintains comprehensive privacy policies. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, valtioneuvosto.fi presents a high level of professionalism, trustworthiness, and compliance suitable for a government institution. Strategic recommendations include publishing detailed security and incident response policies, establishing vulnerability disclosure channels, and enhancing transparency regarding data protection officer contacts to further strengthen trust and security posture.

E

Eesti Tervisemuuseum

tervisemuuseum.ee

43

Eesti Tervisemuuseum is a small, non-profit educational museum based in Tallinn, Estonia, focused on health education and cultural exhibitions. The museum offers a variety of services including permanent and temporary exhibitions, educational programs for children and adults, event hosting, and a podcast series. The website is professionally designed with excellent content quality, clear navigation, and multilingual support, targeting a broad audience interested in health and wellness. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and SEO best practices. Security posture is good with HTTPS enforced and GDPR compliance mechanisms in place, though some security headers could be improved. The domain registration is consistent and transparent, registered with a reputable Estonian registrar, supporting the legitimacy of the business. Overall, the website presents a trustworthy and professional digital presence for the museum.

Parkimine.ee is an Estonian online platform operated by AS Ühisteenused, providing parking information and electronic parking permit services primarily for Tallinn and other Estonian cities. The website integrates Google Maps API for location services and offers a user-friendly interface for searching parking spots and purchasing permits. The business targets residents and visitors needing parking solutions, positioning itself as a key service provider in the transportation sector within Estonia. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Select2, ensuring good SEO and usability. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, the site enforces HTTPS, uses standard security headers, and validates form inputs, reflecting a good security posture. However, it lacks dedicated security and incident response policies publicly available. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for enhancements in security transparency and analytics configuration.

Ł

ŁÓDŹ MIASTO FILMU UNESCO EC1

lodzcityoffilm.com

58

Łódź Miasto Filmu UNESCO EC1 is a cultural and tourism-focused organization promoting the film heritage and film-related activities in Łódź, Poland. The website serves as a portal for film trails, festivals, events, and projects related to the city's film culture, targeting film enthusiasts, tourists, and cultural visitors. The organization leverages UNESCO branding and local government support to position itself as a regional cultural promoter. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Advanced Custom Fields, integrating Google Maps and social media for enhanced user engagement. The site is mobile-optimized and provides multilingual support, enhancing accessibility for international visitors. Security-wise, the website uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and advanced security headers, and no explicit security or incident response policies are published. Privacy compliance is basic but includes a cookie consent mechanism aligned with GDPR requirements. Overall, the website is professional and trustworthy but could improve in security transparency and contact information availability.

M

Międzynarodowy Festiwal Komiksu i Gier w Łodzi

komiksfestiwal.com

67

The Międzynarodowy Festiwal Komiksu i Gier w Łodzi website represents a well-established cultural event focused on comics and games, primarily targeting creators and enthusiasts in Poland and Central-Eastern Europe. The festival is the largest of its kind in the region, with a history dating back to 2006 for the domain and earlier for the event itself. The site offers multilingual support, event information, contests, and partner links, reflecting a mature digital presence. Technically, the site is built on WordPress with common plugins and tracking tools such as Google Analytics and Facebook Pixel, indicating a standard but effective infrastructure. Security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and security headers. Privacy compliance is basic but present, with cookie and privacy policies accessible and a consent mechanism implemented. Business credibility is strong due to the festival's reputation, social media presence, and consistent branding. Overall, the site is professional and trustworthy with room for security enhancements.

K

KOKO architects

koko.ee

43

KOKO architects is an established Estonian architectural firm founded in 2010, specializing in architecture, interior design, urban planning, and restoration projects. The company emphasizes contextual design that respects history, environment, and culture, targeting clients seeking unique and culturally sensitive architectural solutions. Their website showcases a professional portfolio of projects and maintains an active presence on major social media platforms, supporting their market position as a reputable small-sized architecture firm in Estonia. Technically, the website is built on Concrete CMS with modern frontend technologies like Bootstrap 5 and jQuery, and integrates analytics tools such as Google Analytics and Facebook SDK. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and avoids exposing sensitive data but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance and security improvements. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

E

Elixir OÜ

elixir.ee

39

Elixir OÜ is a small Estonian creative agency founded in 2011, specializing in website creation, branding, and web marketing with a strong emphasis on integrating digital and physical solutions. The company has a solid market position locally with a diverse portfolio and official partnerships, indicating a stable business model focused on service delivery to other businesses. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and Google Analytics, with moderate performance and good mobile optimization. However, there is room for improvement in accessibility and security headers. Security posture is adequate with HTTPS usage implied, secure form handling, and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance gap. Overall, the website is professional and trustworthy, but enhancing privacy and security transparency would improve its risk profile.

M

MuseumNext

museumnext.com

49

MuseumNext is a professional organization providing virtual conferences and online learning content tailored for museum professionals worldwide. The website positions itself as a leading platform for museum industry professional development, offering virtual events, season passes, and a blog with relevant articles. The site is well-branded, with trust signals including logos of leading museums and testimonials. Technically, the site is built on WordPress with Gravity Forms for data collection and integrates Google Tag Manager and LinkedIn Insight for analytics and marketing. The site is accessible, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing or unavailable, which slightly reduces trust but the professional presentation and content quality mitigate concerns. Overall, the site is a credible and valuable resource for its target audience.

M

Motor Agency

motor.ee

40

Motor Agency is a specialized exhibition design and production company based in Estonia, founded in 2014. They focus on creating immersive experiences for museums, expos, and showrooms by integrating multimedia and virtual reality technologies. Their market position is that of a niche, innovative agency with recognized awards and international partnerships. The website is built on Concrete CMS with modern frontend technologies like Bootstrap 5 and jQuery, and it demonstrates good mobile optimization and user experience. However, the site lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS and no exposed sensitive data, but the absence of security headers and incident response information suggests room for improvement. Overall, the business presents a professional and trustworthy image but should enhance privacy compliance and security transparency to strengthen its digital maturity.

N

Norstat Industrial Safety, Automation and Connectivity Solution

norstat.com

57

Norstat Industrial Safety, Automation and Connectivity Solution is a specialized provider of safety, automation, and connectivity products for the industrial marketplace. Their offerings include safety controllers, light curtains, safety interlocks, non-contact safety switches, safety relays, and signaling devices. The company operates a WordPress-based e-commerce website using WooCommerce and the Avada theme, supported by various plugins including CleanTalk for anti-spam and Google Analytics for tracking. The domain is well-established since 1996, consistent with the company's business history, and uses Cloudflare DNS services. Security posture is moderate with HTTPS enabled and anti-spam measures in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and functional but would benefit from enhanced security and privacy practices.

L

Logotrade OÜ

logotrade.ee

46

Logotrade OÜ is a well-established Estonian company specializing in promotional products, including advertising gifts, business gifts, and branded merchandise. With over 20 years of experience and a strong client base exceeding 4000 customers, Logotrade positions itself as a leading provider in the promotional retail sector in Estonia and Europe. The company offers a comprehensive range of services including promotional gifts, advertising services, and advertising design, supported by professional expertise and strategic marketing insights. The website reflects a mature business with consistent branding, clear communication, and strong trust indicators such as customer testimonials and industry memberships. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Segment Analytics, integrated with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, well-structured, and uses HTTPS with good SSL configuration. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site demonstrates good practices including secure forms, privacy policies, and cookie consent. However, there is room for improvement by implementing additional security headers and publishing a formal security or vulnerability disclosure policy. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, Logotrade's website is professional, secure, and compliant, supporting its business credibility and customer trust. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, formalizing security policies, and continuous monitoring of third-party scripts to maintain a robust security posture.

D

Digiposter

digiposter.ee

41

Digiposter is an Estonian-based digital advertising company specializing in digital screens and LED advertising solutions across major cities and shopping centers in Estonia. The company leverages a network of digital and LED screens to deliver impactful advertising campaigns directly to potential customers in high-traffic locations. The website reflects a medium-sized enterprise with a professional digital presence, utilizing WordPress with Elementor and SEO best practices to reach its target audience effectively. Technically, the website is built on a modern WordPress stack with multilingual support via WPML, SEO optimization through Yoast, and analytics integration using Google Analytics and Hotjar. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and has no visible exposed sensitive data or vulnerable libraries. However, it lacks advanced security headers and explicit security or privacy policies, which could be enhanced to improve compliance and trust. No WAF or blocking mechanisms were detected, indicating open accessibility. Overall, the website presents a credible and professional business with a solid market position in Estonia's retail and media advertising sectors. Strategic improvements in privacy compliance and security posture would further strengthen its digital maturity and trustworthiness.

Copix is a newly established Estonian digital printing company specializing in a wide range of printing services including labels, packaging, interior decoration prints, and book printing. The website is professionally designed using WordPress and Bootstrap, featuring a modern and responsive layout with clear navigation and multiple contact channels. The company targets businesses, schools, publishers, designers, and individual customers, positioning itself as a regional printing service provider with an online ordering platform. The technical infrastructure includes common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Adform tracking, integrated via Google Tag Manager. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, which are recommended for improvement. The domain is newly registered in 2024, consistent with the business launch, and shows no suspicious registration patterns. Overall, the website is functional, trustworthy, and business credible, though it would benefit from enhanced privacy and security policies.

B

Bestmarketing.ee

balticbest.eu

56

BalticBest is a specialized advertising competition targeting the Baltic region, organized in partnership with EPICA Awards. The competition is conducted online with live judging sessions, providing entrants with immediate feedback and transparency. The website serves as a hub for competition information, news, submission details, and agency rankings. The business is positioned as a niche media entity focused on marketing and advertising professionals in Estonia and neighboring Baltic countries. Technically, the site is built on WordPress using Elementor, with modern web technologies and a moderate performance profile. Security posture is solid with HTTPS and secure forms, though it lacks some security headers and formal privacy and cookie policies, which are compliance gaps. Contact information is comprehensive, including emails, phone numbers, and physical address, enhancing business credibility. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

D

Doping

doping.agency

55

Doping is a results-driven digital marketing agency specializing in Google Ads management and growth strategies for e-commerce, B2B, and B2C companies primarily in Estonia. The company emphasizes a 90-day Growth Sprint™ methodology to deliver measurable sales growth and ROI improvements. Their website showcases strong client testimonials, case studies, and a clear service offering including campaign optimization, landing page creation, and training programs. Technically, the site is built on Webflow with modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some advanced security headers and published policies. The absence of WHOIS data for the domain raises concerns about registration transparency, though the professional presentation and active business presence mitigate some risk. Overall, the site is credible and well-structured, but could improve privacy compliance and domain legitimacy disclosures.

A

Autoosta

autoosta.lv

55

Autoosta.lv is a Latvian transportation information website focused on providing bus schedules, news, and related information to the public. The site targets local travelers and residents seeking timely and accurate public transport data. The business operates as a small-scale information service platform with a niche focus on Latvian transportation. Technically, the website is built on WordPress using the Divi theme and leverages Jetpack for additional functionality and analytics. The infrastructure is modern and uses HTTPS with appropriate security headers, ensuring a secure browsing experience. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is solid with no detected vulnerabilities or blocking mechanisms, but incident response and vulnerability disclosure information are absent. Overall, the website is functional, moderately optimized for mobile, and provides relevant content for its audience, but could improve in privacy compliance and contact transparency.

U

UAB Eltechnika

eltechnika.lt

54

UAB Eltechnika is a Lithuanian-based company specializing in the distribution and sales of advanced manufacturing machinery, including CO2, UV, Fiber laser cutting and engraving machines, as well as CNC milling equipment. Established in 2015, the company serves the Baltic region as an official distributor for AEON and LightBurn, targeting industrial and manufacturing businesses seeking high-precision equipment. Their website reflects a professional and consistent brand image with multilingual support, clear product categorization, and active social media engagement. Technically, the site is built on WordPress with modern plugins and themes, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure forms, but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the business demonstrates credibility and a solid market position, but should improve privacy and security transparency to enhance trust and compliance.

H

Helsingin Osuuskauppa Elanto

hok-elanto.fi

51

HOK-Elanto is Finland's largest regional cooperative within the S-ryhmä group, operating a broad network of over 400 retail outlets, restaurants, and service stations across the Helsinki metropolitan area and surrounding municipalities. The company serves over 700,000 customer-owners and employs nearly 7,000 people, positioning itself as a significant regional employer and retail service provider. The website reflects a mature digital presence with clear branding, comprehensive service information, and active engagement channels including social media and customer service portals. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, supported by third-party services like Google Tag Manager for analytics and Usercentrics for consent management, indicating a commitment to privacy compliance and user experience. Hosting appears to be managed via a specialized Finnish cloud provider, ensuring regional performance and reliability. The site is mobile-optimized and SEO-friendly, with structured data and meta tags enhancing discoverability. From a security perspective, the site enforces HTTPS and integrates consent mechanisms, though it lacks explicit security headers which could be improved. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the domain's legitimacy, showing consistent registration details aligned with the business identity and a long operational history. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, HOK-Elanto's website demonstrates a solid digital infrastructure and trustworthy business representation. Strategic improvements in security headers and accessibility could further enhance the site's robustness and user inclusivity.

S

Sotsiaalkindlustusamet

tarkvanem.ee

46

Tarkvanem.ee is a government-affiliated Estonian website operated by Sotsiaalkindlustusamet, providing comprehensive parenting information and resources targeted at parents of children of all ages. The site offers educational content on child development, parenting styles, health, and safety, supported by tests, videos, and expert advice. It holds a strong market position as a trusted public information portal in Estonia. Technically, the website is built on WordPress and leverages modern analytics and marketing tools such as Google Analytics, Matomo, Hotjar, and Facebook Pixel, alongside SEO optimization via Yoast. The site is mobile-optimized and accessible with good navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is limited but includes a verified company email and a contact form. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

M

Maria Mägi Advokaadibüroo

mmab.ee

42

Maria Mägi Advokaadibüroo is a professional law firm based in Estonia, providing legal services across major legal domains including business law, real estate law, contract law, tax law, intellectual property, bankruptcy, family law, and environmental law. The firm positions itself as a modern legal service provider with a team of partners and specialized lawyers, targeting clients seeking comprehensive legal assistance in Estonia. The website is well-structured, multilingual, and professionally designed, reflecting the firm's commitment to quality and client service. Technically, the website is built on WordPress using the Avia Framework, with integrations such as Yoast SEO and Google Analytics for performance and marketing insights. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent with opt-in/out options, demonstrating good privacy compliance. However, explicit security headers are missing, and there is no dedicated security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website presents a trustworthy and professional digital presence for the law firm, with a solid foundation in security and privacy compliance. Strategic improvements in security headers, accessibility, and explicit security policies would enhance the firm's digital maturity and client trust.

O

Online Solution 360 GmbH

saveality.net

59

Saveality, operated by Online Solution 360 GmbH, is a specialized provider of cyber security and privacy solutions based in Germany. Founded in 2018, the company offers a range of services including secure remote desktop environments, multi-encryption data storage, end-to-end encrypted email and communication services, TOR/Onion web services, bulletproof hosting, penetration testing, secure mobile phone solutions, IoT protection, and cryptocurrency cold storage. The business targets clients requiring high confidentiality and privacy protection, positioning itself as a niche player in the cyber security market. The parent company is Online Solution Int Ltd. based in the UK. Technically, the website is built on WordPress and uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager. Hosting and DNS services are managed via Cloudflare. The site implements HTTPS with a good SSL configuration but lacks DNSSEC and advanced security headers. Performance is moderate with good mobile optimization. Privacy compliance is basic with a cookie consent banner and a privacy policy hosted externally on adsafety.net. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, publishing a security policy, and providing a vulnerability disclosure mechanism. No critical vulnerabilities or exposed sensitive data were detected. Contact information is clearly presented, including phone numbers, emails, and physical addresses, enhancing business credibility. Overall, Saveality presents a professional and trustworthy front with room for improvement in security best practices and privacy transparency. Strategic recommendations include enhancing domain security, publishing detailed security and incident response policies, and improving privacy compliance disclosures.

E

Eesti Meediaettevõtete Liit

meedialiit.ee

41

Eesti Meediaettevõtete Liit is a well-established Estonian media association founded in 1990, representing a broad spectrum of private media outlets including web portals, TV, radio, newspapers, and magazines. The organization focuses on promoting trustworthy journalism, protecting the interests of its members, and advocating for fair competition in the media market. The website reflects this mission with relevant content, press council decisions, and news updates targeted at media professionals and the Estonian public. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and Google reCAPTCHA, ensuring a good user experience and basic security measures. The security posture is solid with HTTPS and anti-bot protections, though some advanced security headers could be added. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its audience effectively.

C

Cargo Handling AS

ch.ee

43

Cargo Handling AS is an Estonian-based small transportation and logistics company specializing in cargo handling and storage services for international air and road carriers, freight forwarders, and companies engaged in international trade. The company also offers customs warehouse and excise warehouse services. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a focus on clear presentation and multilingual support (Estonian and English). Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and functional but could improve in privacy and security transparency to enhance trust and compliance.

O

Opetus- ja kulttuuriministeriö

minedu.fi

52

Opetus- ja kulttuuriministeriö (OKM) is the Finnish Ministry of Education and Culture responsible for national policies in education, science, culture, sports, youth work, archives, museums, libraries, and religious affairs. The ministry serves Finnish citizens, educational institutions, cultural organizations, and researchers by providing policy guidance, funding, and regulatory oversight. The website reflects a mature digital presence with a modern CMS (Liferay), responsive design, and multilingual support, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no evident vulnerabilities, although DNSSEC is not implemented. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations.

K

KiVa / Tenz

kivaschool.be

48

The website www.kivaschool.be represents the KiVa anti-bullying program operated by Tenz in Belgium, supported by recognized educational institutions. It provides comprehensive information about the program, resources for schools, parents, and educators, and includes a webshop and training offerings. The site is well-structured with consistent branding and clear navigation, targeting educational stakeholders in Flanders. Technically, the site uses a custom CMS (Ambacht CMS) with common web technologies such as jQuery, Bootstrap 3, and Select2, and integrates Google Analytics and ReadSpeaker for accessibility. Security posture is moderate with no visible security headers and unknown SSL configuration, but it implements a detailed cookie consent mechanism. WHOIS data is unavailable due to registry restrictions, which reduces transparency but the site content and contact details support legitimacy. Overall, the site is professional and functional with room for improvement in security and privacy policy disclosures.

K

KiVa

kivaschool.nl

51

KiVa is an established educational program focused on promoting social safety and positive group dynamics in schools, primarily in the Netherlands. The website presents a comprehensive and scientifically backed anti-bullying program, supported by certified trainers and a large network of schools and teachers. The digital infrastructure leverages modern web technologies including jQuery, Bootstrap, Google Maps API, and tracking tools such as Google Analytics and Facebook Pixel, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-positioned in the education sector.

F

FinanceEstonia

financeestonia.eu

45

FinanceEstonia is a well-established umbrella organization representing the Estonian financial sector, with over 90 members from both private and public sectors. The organization focuses on advocacy, fostering innovation, and supporting the growth of fintech and capital markets in Estonia. The website reflects a mature digital presence built on WordPress, with good SEO and mobile optimization. Security posture is solid with HTTPS and secure forms, though it lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, supporting FinanceEstonia's role as a key industry player.

M

Moncera OU

moncera.com

65

Moncera OU operates an investment platform based in Estonia that enables investors to invest in assigned loan claims with buyback guarantees, offering returns up to 12%. The platform is part of the Placet Group, a financial services conglomerate with over 15 years of experience and multiple subsidiary brands across Estonia, Lithuania, and Poland. Moncera targets retail investors seeking passive income through diversified loan investments. Technically, the website employs modern JavaScript libraries such as jQuery and Handlebars, integrates Google Analytics and Facebook Pixel for tracking, and provides a responsive, well-structured user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though some security headers and formal security policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, Moncera presents a trustworthy and professional online presence with strong business credibility and moderate technical sophistication.

S

Suomi (fi)

kivakoulu.fi

54

KiVa Koulu is an anti-bullying program developed by the University of Turku, widely adopted in Finnish primary schools and internationally in over 20 countries. The website serves as an educational and informational platform targeting schools, teachers, students, and parents, providing resources, research, and program participation information. The business model is non-profit and education-focused, with strong institutional backing and a reputable market position in the education sector. Technically, the website is built on WordPress with modern frontend technologies including jQuery and DustPress JS. It demonstrates good mobile optimization, accessibility, and SEO practices. Cookie consent is managed via Cookiebot, indicating GDPR compliance. Performance is moderate with no blocking or WAF detected, and HTTPS is enforced. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and incident response contact information. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a comprehensive privacy policy and cookie consent. Overall, the website is trustworthy, professional, and well-maintained, with minor recommendations to enhance security headers and incident response transparency to further strengthen its security and compliance posture.

A

ACE Logistics Group AS

acegroup.ee

49

ACE Logistics Group AS is a well-established logistics company operating primarily in the Baltic states and neighboring countries. Founded in 1992, the group comprises multiple subsidiaries specializing in logistics, freight forwarding, cargo handling, sales agency, and real estate services. The company positions itself as a regional leader in logistics services, targeting businesses requiring comprehensive logistics solutions in Estonia, Latvia, Lithuania, and Ukraine. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the website is built on WordPress using Visual Composer, leveraging common libraries such as jQuery and Bootstrap. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. HTTPS is enforced, ensuring secure communications, though the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site demonstrates a solid baseline with HTTPS but lacks advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy policies exist but lack explicit GDPR consent mechanisms. The absence of terms of service and incident response contacts suggests gaps in compliance and security readiness. Overall, the website is credible and trustworthy, with a strong business presence and good technical implementation. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security posture and regulatory adherence.

A

ACE Logistics Ukraine LLC

acelogistics.ua

47

ACE Logistics Ukraine LLC is a small transportation and logistics company based in Ukraine, specializing in international freight forwarding services including road, air, and sea transport, customs brokerage, cargo insurance, and warehousing. The company targets businesses requiring efficient and professional logistics solutions with a focus on individual customer needs. Their website is built on WordPress using common plugins and libraries, providing a good user experience with clear navigation and relevant content. However, the site lacks critical compliance documentation such as privacy and cookie policies, and does not disclose security or incident response policies. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website uses Google Analytics and Google Tag Manager for tracking, indicating moderate user tracking without clear privacy compliance disclosures.

A

ACE Logistics Latvia SIA

ace.lv

44

ACE Logistics Latvia SIA is a medium-sized logistics and freight transportation company based in Latvia, operating as part of the ACE Logistics Group with subsidiaries in Estonia, Lithuania, and Ukraine. The company offers a broad range of transportation services including road, air, sea, and rail freight, complemented by customs documentation, warehousing, and cargo insurance. Their market position is that of an established regional player with international reach, supported by ISO 9001 and ISO 14001 certifications that demonstrate commitment to quality and environmental standards. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service information. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site performs moderately well with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers could be enhanced and legacy jQuery usage updated to reduce risk. No explicit incident response or vulnerability disclosure mechanisms are present, which could be improved to enhance security transparency. Contact information is clearly provided, including phone numbers, email, and physical address, supporting business credibility. Overall, the site reflects a trustworthy and professional logistics provider with room for security and compliance enhancements. Strategic recommendations include implementing stronger security headers, updating legacy scripts, publishing incident response contacts and vulnerability disclosure policies, and continuing to enhance privacy compliance and user trust through transparent communication.

E

Eesti Väike- ja Keskmiste Ettevõtjate Assotsiatsioon

evea.ee

46

EVEA (Eesti Väike- ja Keskmiste Ettevõtjate Assotsiatsioon) is a well-established non-profit business association founded in 1988, representing the interests of small and medium-sized enterprises in Estonia. The organization provides a broad range of services including legal advice, financial consulting, and networking opportunities, positioning itself as the largest SME advocacy group in Estonia. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience of Estonian SMEs. Technically, the website is built on WordPress with WooCommerce and uses modern frameworks such as UIkit and analytics tools like Google Analytics via MonsterInsights. The site is hosted by Elkdata OÜ, an Estonian hosting provider, and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for forms, but lacks explicit security headers and documented security policies or incident response plans. Privacy and cookie policies are present and GDPR compliant, indicating a basic level of privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a trustworthy and credible digital presence for EVEA, with a solid foundation in business credibility and technical implementation. Strategic improvements in security headers, accessibility, and formal security policies would enhance the security posture and compliance maturity.

O

Online Solution (supported by SAVEALITY)

ano-phone.de

59

ANO-PHONE is a German-based small technology business specializing in secure, encrypted Android smartphones with integrated private VPN services. The company targets privacy-conscious consumers seeking enhanced mobile security and anonymity. Their product offers hardware encryption, secure communication channels, and control without backdoors or remote access. The website is built on WordPress with WooCommerce, featuring good content quality and a professional design. Technical infrastructure includes Cloudflare DNS and common analytics and advertising tools. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are lacking. Privacy compliance is partial, with cookie consent implemented but no dedicated privacy policy page found. Contact information is limited to an email address, with no phone or physical address provided. Overall, the domain and website appear legitimate and consistent with the business claims.

O

Online Solution 360 GmbH

ano-phone.com

55

ANO-PHONE is a specialized provider of secure encrypted smartphones integrated with private VPN services, targeting privacy-conscious users and security-focused consumers. The company operates an e-commerce platform selling purified Android-based smartphones with hardware encryption, secure communication tools, and cryptocurrency wallet support. The business is positioned as a niche player in the technology sector, emphasizing privacy and security. The website is professionally designed, mobile-optimized, and includes essential business and contact information, although phone numbers and physical addresses are not explicitly listed. Technically, the site uses WordPress with WooCommerce, Google Analytics, and Cloudflare DNS, delivering moderate performance and good SEO optimization. Security posture is solid with HTTPS and client transfer protection on the domain, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is supported by a cookie consent mechanism and a privacy policy indicating GDPR adherence. Overall, the website and domain registration data indicate a legitimate and trustworthy business presence.

O

Online Solution 360 GmbH

securecommerce.eu

64

SecureCommerce, operated by Online Solution 360 GmbH, is a specialized cybersecurity service provider focused on protecting online stores and e-commerce platforms. The company offers managed firewall, DDoS protection, malware scanning, and monitoring services tailored to popular e-commerce systems such as Magento, WooCommerce, and Shopware. Their market position is that of a niche provider delivering Security-as-a-Service solutions to online merchants primarily in Germany. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. Contact information and cookie consent mechanisms are well implemented, though privacy and terms policies are missing. Technically, the site uses reputable hosting via OVH SAS and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement in security headers and published policies. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

O

Online Solution 360 GmbH

cdn-solution.net

51

Online Solution 360 GmbH operates the website cdn-solution.net, providing full service hosting, cyber security, and content delivery network solutions with a focus on eco-friendly data centers. The company targets businesses requiring advanced hosting and CDN services, emphasizing sustainability and innovative technologies such as GeoDNS, load balancing, and AI-driven energy efficiency. The website is professionally designed using WordPress CMS, hosted on Linode infrastructure, and includes a cookie consent mechanism compliant with GDPR. Contact information and company registration details are clearly presented, enhancing business credibility. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

N

Noatum Logistics

noatumlogistics.com

63

Noatum Logistics operates as a global transport and logistics solutions provider, positioned among the top 50 freight forwarders worldwide. Their services encompass air, ocean, road, and rail freight, along with customs brokerage, warehousing, and value supply chain services. The website reflects a professional and consistent brand presence targeting businesses requiring comprehensive logistics solutions. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and infrastructure appear credible. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security best practices.

B

BOX Options

boxoptions.com

63

BOX Options Market LLC operates a fully automated electronic options exchange specializing in trading OCC issued standardized options on equities and ETFs. The company emphasizes technological innovation and transparency to provide a reliable marketplace for options traders. The website reflects a mature business with a domain age of approximately 8 years and a clear market presence in the financial sector. The target audience includes institutional investors, market participants, and potential members interested in options trading technology and services. The business model centers on providing exchange services, membership access, and market data dissemination.

C

Caotica OÜ

caotica.ee

49

Caotica OÜ is a specialized web design and development agency based in Estonia, operating since 2008. The company offers a comprehensive suite of digital services including website design, web development across platforms like WordPress, Webflow, and Wix, e-commerce solutions with WooCommerce and Shopify, as well as ongoing website management and SEO optimization. Their market position is that of a trusted, experienced small business serving both local and international clients, with over 200 projects completed and 80+ clients served. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, supporting their credibility. Technically, the website is built on WordPress using the Avia Framework and Yoast SEO plugin, leveraging modern web technologies such as jQuery and Google Fonts. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Hosting and domain registration are managed by Zone Media OÜ, consistent with the company's Estonian base. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with anonymized IP tracking in Google Analytics and implements a cookie consent mechanism, indicating awareness of privacy compliance. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no formal security or incident response policies are published. There is no vulnerability disclosure or security.txt file, which could be areas for improvement. Overall, Caotica OÜ presents a low-risk profile with a solid business foundation, professional web presence, and basic privacy compliance. Strategic enhancements in security headers, incident response transparency, and accessibility could further strengthen their security posture and trustworthiness.

V

VEPA

vepa.ee

40

VEPA is an Estonian educational initiative focused on evidence-based classroom management methodologies primarily targeting early school years. The website presents a professional and consistent brand supported by the Tervise Arengu Instituut, with clear educational content and training offerings. The digital infrastructure is based on WordPress with common JavaScript libraries and includes standard tracking and marketing tools such as Google Analytics and Mailchimp. Privacy and cookie policies are well implemented and GDPR compliant, enhancing user trust. Security posture is generally good with HTTPS enforced and secure form practices, though improvements in security headers and incident response transparency are recommended. Overall, the website is accessible, well-structured, and trustworthy, supporting its educational mission effectively.

T

Tervise Arengu Instituut

tubakainfo.ee

43

Tubakainfo.ee is an official Estonian government public health website managed by the Tervise Arengu Instituut (Health Development Institute). It provides comprehensive educational content on the harms of tobacco use, passive smoking, and supports tobacco cessation efforts. The site targets Estonian-speaking tobacco users, their families, and healthcare professionals, offering interactive tools, videos, and guidance. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Google Tag Manager, and Facebook Pixel for analytics and marketing. It uses HTTPS with good SSL configuration but lacks some security headers. The site does not display a privacy or cookie policy, which is a notable compliance gap, especially given the use of tracking pixels. Contact information is clearly provided, enhancing business credibility. From a security perspective, the site shows good practices like HTTPS and nonce usage for AJAX but could improve by adding security headers and publishing explicit security and incident response policies. No vulnerabilities or suspicious patterns were detected. WHOIS data confirms the domain is registered to the official Estonian health institute, supporting legitimacy. Overall, the site is trustworthy and professional but should address privacy compliance and security policy transparency to improve its security posture and regulatory adherence.