Security Directory

H

Avaleht - Hiv

hiv.ee

40

The website hiv.ee serves as an informational and support portal focused on HIV awareness, prevention, testing, and living with HIV in Estonia. It targets Estonian-speaking individuals, including those living with HIV and at-risk populations, providing educational content, testing locations, and counseling resources. The site is positioned as a trusted health information source, likely operated or supported by public health entities or non-profit organizations. Technically, the site is built on WordPress, utilizing common libraries such as jQuery and Slick Carousel, and integrates marketing and analytics tools like Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses cookie consent banners but lacks visible security headers and explicit privacy policies, which are areas for improvement. Overall, the site is functional, professional, and moderately secure, with room to enhance privacy compliance and security posture.

Z

Zone Media OÜ

alkoinfo.ee

42

Alkoinfo.ee is a well-established Estonian public health informational website focused on reducing alcohol consumption and providing support and education to individuals and their families. Operated by Zone Media OÜ and affiliated with the Estonian Health Development Institute (Tervise Arengu Instituut), it offers a range of services including educational content, self-assessment tests, and a Q&A advice section. The site targets Estonian and Russian speaking audiences concerned about alcohol use. Technically, the site is built on WordPress using the Understrap theme and integrates modern web technologies such as Google Analytics and Facebook Pixel for tracking. Security posture is good with HTTPS and CAPTCHA on forms, but lacks some security headers and explicit privacy and cookie policies. The domain is legitimate, registered since 2010, and consistent with the business identity.

P

Paya, Inc.

paya.com

64

Paya, Inc. is a well-established payment solutions provider offering integrated payment technologies and services primarily targeting businesses across multiple sectors including B2B, education, insurance, government, healthcare, nonprofits, and ERP providers. The company operates under the parent company Nuvei and has a strong market position with a large customer base and extensive partner network. Their website reflects a mature digital presence with professional design, comprehensive content, and clear navigation. Technically, the site is built on WordPress with modern marketing and analytics integrations, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain protections, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Paya demonstrates high business credibility and digital maturity.

V

Visionest Institute

invicta.ee

47

Visionest Institute is an Estonian education and training organization formed by the merger of Marketingi Instituut, Invicta, and Director. It offers a wide range of professional development programs, including corporate training, personal development plans, and a digital magazine. The company targets businesses and individual learners, focusing on leadership, marketing, sales, and export sectors. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support. Technically, it is built on WordPress with WooCommerce and integrates advanced marketing and analytics tools such as Google Tag Manager, HubSpot, and Facebook Pixel. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Overall, the domain registration details align well with the business profile, indicating legitimacy and consistency.

R

RIGA COMM

rigacomm.com

50

RIGA COMM is a well-established Baltic business technology event organizer hosting annual exhibitions and multiple conferences in Riga, Latvia. The platform targets business and technology professionals, entrepreneurs, and institutional leaders, offering a comprehensive event experience with specialized conferences covering cybersecurity, fintech, e-commerce, and more. The website reflects a mature digital presence with a WordPress CMS, modern marketing and analytics tools, and a cookie consent mechanism, indicating awareness of privacy compliance requirements. However, explicit privacy policies and terms of service are missing, which could be improved to enhance compliance and user trust. Security posture is generally good with HTTPS and reCAPTCHA usage, but could benefit from enhanced security headers and DNSSEC implementation. Overall, the site is professional, content-rich, and well-positioned in its market niche.

P

Pärnumaa infovärav

parnumaa.ee

51

Pärnumaa.ee is a well-established regional information portal serving the Pärnumaa county in Estonia. It provides comprehensive information for residents and visitors including news, job listings, educational resources, real estate offers, and business environment insights. The website is professionally designed using WordPress with Elementor and Yoast SEO plugins, ensuring good content management and search engine optimization. The site is bilingual with Estonian as the primary language and English as an alternate option. Technically, the site employs modern web technologies and integrates analytics and marketing tools such as Google Tag Manager, Hotjar, and Facebook Pixel, while maintaining GDPR compliance through a robust cookie consent mechanism.

Z

Zone Media OÜ

digioskused.ee

47

Digioskused.ee is an Estonian educational platform offering free AI and digital skills training, developed in partnership with Google and Estonian government agencies. The website serves individuals and businesses aiming to enhance their digital competencies through practical, accessible online courses. The platform leverages modern web technologies including WordPress, jQuery, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers are missing. The domain registration is consistent with the business purpose and geographic location, supporting legitimacy. Overall, the site presents a professional and trustworthy digital presence with good content quality and user experience.

M

Motor Agency

motoragency.eu

40

Motor Agency is a specialized exhibition design and production company focused on museums, expos, and showrooms. They integrate multimedia and virtual reality technologies to create immersive educational and entertainment experiences. Their market position is that of a niche service provider with recognized awards and partnerships in the cultural sector. The website reflects a professional and consistent brand image targeting cultural institutions and educational organizations primarily in Estonia and Europe. Technically, the site uses Concrete CMS with modern frameworks like Bootstrap 5 and includes multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile optimized and has good SEO practices but lacks visible privacy and cookie policies, which is a compliance gap. Security posture is decent with HTTPS enforced but missing security headers and formal security policies. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

E

Eesti kaevandusmuuseum

kaevandusmuuseum.ee

44

Eesti Kaevandusmuuseum is a specialized museum and adventure tourism business located in Estonia, offering unique underground mining experiences, safaris, educational programs, and event hosting. The website is professionally designed using WordPress with WooCommerce and booking plugins, supporting multiple languages and providing rich content about their services and events. The technical infrastructure is modern and includes integration with Google Tag Manager and Facebook SDK for marketing and analytics, although Google Analytics is not fully configured. Security posture is solid with HTTPS enforced and cookie consent implemented, but could be improved with additional security headers and explicit incident response policies. Overall, the website reflects a credible and trustworthy business with a good digital presence.

Z

Zone Media OÜ

teletorn.ee

43

Tallinna Teletorn is a prominent Estonian tourism and hospitality business operating the highest open viewing platform in Northern Europe. The website presents a professional and engaging digital presence, offering ticket sales, event hosting, educational programs, and restaurant services. The company targets tourists, families, and educational groups, positioning itself as a key cultural landmark in Tallinn. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and social media integration, delivering a good user experience with responsive design and multimedia content. Security posture is solid with HTTPS, cookie consent, and anti-spam measures, though explicit security policies and headers could be improved. Overall, the business demonstrates credibility and digital maturity with room for enhanced privacy compliance and security transparency.

T

Tallinna Loomaaed

tallinnzoo.ee

41

Tallinna Loomaaed operates as a well-established public zoo in Estonia, offering extensive animal collections, educational programs, and conservation efforts. The website reflects a mature digital presence with multilingual support, clear navigation, and comprehensive content targeting families, educators, and conservationists. Technically, the site is built on WordPress with WooCommerce for ticketing, integrating modern analytics and marketing tools while maintaining good performance and accessibility standards. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate organization.

E

Eesti Tervisemuuseum

tervishoiumuuseum.ee

43

Eesti Tervisemuuseum is a small, non-profit educational museum based in Tallinn, Estonia, focused on health and the human body. The museum offers a variety of services including exhibitions, educational programs, workshops, event hosting, and a podcast. It targets a broad audience including children, families, and adults interested in health education. The website is professionally designed with consistent branding and rich content, supporting multiple languages (Estonian, Russian, English). The museum maintains a clear online presence with social media channels and provides accessible contact information. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies and SEO best practices. The hosting and domain registration are consistent with the museum's Estonian identity.

L

Læsø Museum

laesoe-museum.dk

48

Læsø Museum is a small, state-recognized local museum established in 1938, dedicated to preserving and showcasing the cultural heritage of Læsø, Denmark. The museum operates multiple departments and offers exhibitions, guided tours, and visitor services including a shop and café. The website reflects a well-structured and content-rich platform targeting visitors interested in local history and culture. Technically, the site uses modern JavaScript libraries, Google Analytics for tracking, and is hosted with assets served from a CDN, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published privacy or security policies. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with the museum's profile. Overall, the site scores well in business credibility and user experience but should improve privacy transparency and security practices.

S

SA Eesti Meremuuseum

meremuuseum.ee

46

Eesti Meremuuseum is a well-established maritime museum organization in Estonia, operating multiple museum sites and offering a range of cultural, educational, and research services related to maritime heritage. The website reflects a professional and consistent brand presence, targeting museum visitors, educators, researchers, and maritime enthusiasts. The business model is that of a government or non-profit cultural institution with a medium organizational size and a history dating back to at least 2010. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimization tools such as WP Rocket. It integrates Google Analytics and Tag Manager for analytics and tracking, and employs Google reCAPTCHA for form security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with clear contact information provided. Overall, the website is trustworthy, well-structured, and provides a good user experience.

LA-Studio is a small technology business specializing in the development and sale of WordPress themes, targeting WordPress users and developers seeking high-quality themes. The company leverages popular marketplaces such as ThemeForest to distribute its products and provides customer support via a dedicated support portal. The website demonstrates a good level of professionalism with consistent branding, customer testimonials, and active social media presence, positioning itself as a niche player in the WordPress theme market. Technically, the website is built on WordPress 5.9.7 using Elementor and Slider Revolution plugins, with jQuery as a JavaScript library. The site is hosted with DNS managed by Cloudflare and registered via GoDaddy, using HTTPS with a valid SSL certificate. Performance and mobile optimization are moderate to good, though accessibility features are basic. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, the site benefits from HTTPS and domain registration protections but lacks DNSSEC and security headers such as CSP or HSTS. No explicit privacy, cookie, or security policies are present, which may impact compliance with GDPR and other regulations. The use of Google reCAPTCHA helps mitigate bot traffic. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

A

Anvol

anvol.ge

55

Anvol is a well-established private company specializing in the distribution and retail of toys and children's products, operating primarily in the Baltic Sea region and Georgia. The company has a professional team and a significant market presence with over 2000 customers and multiple retail chains. The website is built on WordPress with multilingual support, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. Contact information is primarily email-based, with no phone or physical address explicitly provided on the site. Overall, the website presents a professional image but could improve in privacy compliance and security best practices.

A

Anvol

anvol.lt

50

Anvol is a well-established private company specializing in wholesale and retail distribution of toys and children's products across the Baltic region and selected international markets. Founded in 1995, it operates a retail chain and maintains strong supplier relationships with major global brands. The website reflects a professional business presence with consistent branding and clear market positioning. Technically, the site is built on WordPress, uses modern JavaScript libraries, and integrates Google Analytics for tracking. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks published security policies and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and credible but would benefit from enhanced privacy and security disclosures.

A

Anvol

anvol.lv

52

Anvol is a well-established private company specializing in the wholesale and retail distribution of toys and children's products across the Baltic Sea region and selected countries in Eastern Europe and Central Asia. Founded in 1995 and headquartered near Tallinn, Estonia, it operates multiple country-specific websites and retail chains, serving over 2000 clients with a strong portfolio of global toy brands. The website reflects a professional digital presence built on WordPress, with moderate performance and good mobile optimization. However, it lacks critical privacy and cookie policies, which are essential for GDPR compliance. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but missing security headers and incident response information indicate room for improvement. Overall, the site is trustworthy and credible but should enhance privacy compliance and security transparency to reduce risk and build greater user trust.

A

Anvol

anvol.ee

50

Anvol is a well-established Estonian company specializing in the wholesale distribution and retail of toys, games, and trend products across the Baltic and Nordic regions. With over 30 years of experience and a large portfolio of more than 400 brands, Anvol serves a broad client base including retailers and consumers. The company operates both wholesale and retail channels, including a franchise model and online presence. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for marketing insights. The site is mobile-optimized and professionally designed, supporting multiple languages for regional markets. Security posture is solid with HTTPS and Cloudflare DNS, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears credible and trustworthy with consistent WHOIS data and domain registration.

A

Anvol Oy

anvol.fi

53

Anvol Oy is a well-established family-owned company specializing in the distribution and retail of toys and children's products across multiple countries in the Baltic Sea region and beyond. The company operates a large network of retail stores under the XS Lelut brand and maintains strong partnerships with major toy manufacturers. The website reflects a mature business with a professional online presence, leveraging WordPress CMS and Cloudflare DNS services. Security posture is solid with HTTPS enabled and Cloudflare usage, though improvements can be made by implementing security headers and privacy compliance features. The domain registration data is consistent with the company's business claims, enhancing trustworthiness. Overall, Anvol presents a credible and stable business with room for enhanced privacy and security practices.

M

MIXD meediaagentuur

mixd.ee

44

MIXD meediaagentuur is a small Estonian digital marketing agency specializing in digital media solutions, SEO, and conversion rate optimization to help brands grow sales and meet profit goals. The company presents a professional and well-structured website built on WordPress, leveraging modern SEO and analytics tools such as Rank Math and Google Tag Manager. The technical infrastructure is solid with HTTPS enabled and asynchronous loading of scripts, though performance is moderate and accessibility is basic. Security posture is generally good with no exposed sensitive data, but lacks advanced security headers and incident response mechanisms. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and credible but would benefit from enhanced privacy and security practices.

3

3Cloud

3cloudsolutions.com

65

3Cloud is a specialized technology services company focused exclusively on Microsoft Azure cloud solutions, data analytics, AI, and app innovation for enterprise clients. Established in 2016, the company positions itself as a leading Azure partner and innovator in generative AI services, helping enterprises transform and optimize their business performance through cloud technologies. Their market position is reinforced by strong client testimonials, awards, and Microsoft partner recognitions. Technically, the website is built on WordPress with modern frameworks like Bootstrap and React, hosted behind Cloudflare for performance and security. The site demonstrates excellent design, mobile optimization, and SEO practices. Security posture is strong with HTTPS, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response page is found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

W

WebbyCards

webbycards.com

52

WebbyCards is a specialized e-commerce business offering custom and semi-custom corporate holiday and event electronic greeting cards. Their market position is niche, targeting businesses seeking professional branded eCards for various occasions. The website demonstrates a moderate level of digital maturity with use of modern JavaScript libraries and frameworks, mobile-friendly design, and integration of marketing and analytics tools such as Google Tag Manager. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is adequate with HTTPS enforced and form validation, but lacks some security headers and cookie consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

H

häk agency

hak.ee

42

häk agency is a strategic design and digital agency based in Estonia, founded in 2018. The company offers comprehensive services including branding, web environments, and advertising, serving over 500 satisfied clients. Their market position is strong, supported by client testimonials, awards, and certifications that enhance their credibility. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site runs on WordPress with modern tools such as Gravity Forms, Google Tag Manager, and Facebook Pixel, indicating a robust infrastructure. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website and business demonstrate high professionalism and trustworthiness, with minor recommendations to enhance security headers and publish security policies.

M

Milrem Robotics

milrem.com

54

Milrem Robotics is a leading global provider of autonomous unmanned ground vehicles (UGVs) specializing in combat-ready robotic solutions that enhance military operational effectiveness and tactical advantages. Established in 2013 and headquartered in Estonia, the company has expanded its footprint with offices across Europe, the UAE, and the USA, serving 19 customer countries. Their product portfolio includes multi-mission UGVs such as THeMIS, VECTOR, HAVOC, and Type-X, supported by advanced autonomy kits and participation in key EU defense projects. The website reflects a professional and modern digital presence with comprehensive content tailored to defense and military audiences. Technically, the website is built on WordPress with modern SEO and user experience optimizations, including mobile responsiveness and accessibility considerations. It employs standard security measures such as HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms. However, there is room for improvement in security headers and explicit security policy disclosures. Analytics usage is moderate, primarily via Google Analytics through Google Tag Manager, with privacy compliance well addressed. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but lacks dedicated incident response or vulnerability disclosure information. WHOIS data confirms domain legitimacy and consistency with the company's history and operations. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, supporting Milrem Robotics' position as a reputable defense technology provider.

M

Milrem Robotics

milremrobotics.com

54

Milrem Robotics is a leading global provider of autonomous unmanned ground vehicles, specializing in combat-ready robotic solutions that enhance military operational effectiveness and troop safety. Established in 2013 and headquartered in Estonia, the company has expanded its footprint with offices across Europe, the UAE, and the USA. Their product portfolio includes multi-mission UGVs like THeMIS, VECTOR, HAVOC, and Type-X, supported by advanced autonomy integration kits. The company actively participates in European defense projects, reinforcing its market leadership and innovation capabilities. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Fluent Forms, ensuring good SEO, accessibility, and user experience. The site is mobile-optimized and uses Google reCAPTCHA to secure forms. Cookie consent mechanisms and comprehensive privacy policies demonstrate strong privacy compliance. Performance is moderate with room for optimization. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and use of reCAPTCHA. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting areas for improvement. No incident response or security policy information is publicly available, which could be enhanced to build trust. Overall, Milrem Robotics presents a professional, trustworthy, and technically sound online presence aligned with its business stature. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen their security and compliance posture.

P

Petri Kajander

petrikajander.com

60

Petri Kajander's website serves as a personal and professional platform showcasing his work as a purpose-driven founder, content creator, and mentor. The site features a variety of content including blogs, podcasts, and curated social media feeds, targeting entrepreneurs, business leaders, and individuals interested in personal development and startups. The business model revolves around thought leadership and content dissemination rather than direct product sales. Technically, the website is built on WordPress, leveraging common plugins and modern web technologies such as jQuery and YouTube Embed Plus. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. However, hosting provider details are not explicitly identified. From a security perspective, the site uses HTTPS and implements some best practices like setting rel="noopener noreferrer" on external links. However, it lacks visible security headers, privacy and cookie policies, and vulnerability disclosure mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site content and branding appear consistent and professional. Overall, the website is functional and professional but would benefit from enhanced transparency in privacy, security policies, and domain registration details to improve trust and compliance.

D

Dirty Rigger™

dirtyrigger.co.uk

45

Dirty Rigger™ is a UK-based company specializing in manufacturing and retailing rugged personal protective equipment (PPE) such as gloves, tool bags, belts, and accessories tailored for professional riggers and tradespeople. Established in 2010 and operating under the parent company The Le Mark Group, the company positions itself as a niche leader in the rigging and trade gear market. Their website reflects a focused e-commerce business model targeting professionals requiring durable and reliable work gear. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable digital infrastructure. The site is hosted likely with SiteGround and uses Ionos SE as the domain registrar. The website demonstrates good SEO practices, mobile optimization, and moderate performance. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and implements a comprehensive cookie consent mechanism with detailed user controls. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which are areas for improvement. Overall, the site is professional, trustworthy, and compliant with basic privacy standards, but could enhance transparency and security posture further.

iWallet is a specialized payment processing platform targeting home service and field service businesses, offering a secure mobile app for contactless payments, mobile check deposits, and reputation management. The company positions itself as a leading Field Service Point of Sale (FPOS) solution with a focus on ease of use, security, and operational efficiency. The website reflects a professional and consistent brand image with strong trust indicators such as BBB accreditation and multiple security certifications. Technically, the site uses a modern but somewhat dated tech stack including jQuery and Bootstrap 3, with integrations for analytics and live chat. Hosting is via Cloudflare, ensuring good performance and security at the network level. Security posture is strong with SSL encryption and fraud protection, though improvements are possible by enabling DNSSEC and adding security headers. Privacy compliance is addressed with clear policies but lacks an explicit cookie consent mechanism. Overall, the site is well-structured, mobile-optimized, and trustworthy, supporting a small but focused business model.

T

Tervise Arengu Instituut

tai.ee

48

Tervise Arengu Instituut (TAI) is a leading Estonian national research and development institution focused on public health, disease prevention, and health promotion. The website reflects a well-established government-affiliated organization with a strong market position in healthcare research and public health services. It offers extensive resources including research publications, statistics, training events, and health registries, targeting health professionals, policymakers, and the general public. The site is professionally designed, content-rich, and well-structured, supporting multiple languages with a focus on Estonian.

B

Burpee

burpee.com

70

Burpee is a well-established company specializing in seeds, plants, and gardening supplies with a history dating back to 1876. The company operates a large-scale e-commerce platform built on Magento 2, serving home gardeners and plant enthusiasts primarily in the United States. The website demonstrates a mature digital presence with integrated marketing, analytics, and personalization technologies. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Burpee presents a trustworthy and professional online presence aligned with its brand legacy.

T

The Options Clearing Corporation

optionseducation.org

50

The Options Industry Council (OIC) is a well-established educational resource operated by The Options Clearing Corporation (OCC), providing comprehensive options trading education to investors, financial advisors, and institutional participants globally. The website offers a rich array of educational materials including webinars, podcasts, strategy guides, and real-time options quotes, positioning itself as a trusted industry leader since 1992. The business model is non-profit and supported by major participant exchanges, reinforcing its credibility and market position. Technically, the website is built on the Kentico CMS platform and leverages a modern technology stack including Google Tag Manager, Google Analytics, Facebook Pixel, and Microsoft Clarity for analytics and marketing. The site demonstrates good performance, mobile optimization, and accessibility, with a professional and consistent design that enhances user experience and trustworthiness. From a security perspective, the site enforces HTTPS and employs secure form handling with hashed data submissions. While no critical vulnerabilities were detected, the absence of explicit security headers such as Content-Security-Policy and lack of published security or incident response policies represent areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy, but the lack of a cookie consent mechanism and GDPR-specific disclosures suggests room for enhancement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include implementing additional security headers, publishing security policies, enhancing privacy compliance with cookie consent, and improving WHOIS transparency to further strengthen trust and compliance.

E

eLMEK Accounting OÜ

elmek.ee

43

eLMEK Accounting OÜ is a small Estonian accounting and payroll service provider established in 2017. The company positions itself as a friendly and expert partner for businesses needing accounting and payroll advice and services. It has received recognition as one of the fastest growing accounting firms in Estonia and awards for female entrepreneurship, indicating a positive market presence and growth trajectory. The website clearly communicates its key services and team members, targeting Estonian businesses seeking professional financial services. Technically, the website is built on WordPress using the Enfold theme, enhanced with Yoast SEO and jQuery-based components like Owl Carousel. It employs Google Tag Manager for analytics and tracking, and the site is hosted by Zone Media OÜ, consistent with the Estonian locale. The site is mobile-optimized and SEO-friendly, with good performance and accessibility basics. From a security perspective, the site uses HTTPS with strong SSL configuration and implements a cookie consent mechanism compliant with GDPR principles. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The site collects user data via a contact form with required fields and uses cookies and session storage for user experience and tracking. Overall, the website presents a professional and trustworthy front for a small accounting firm with good technical implementation and moderate privacy compliance. Strategic improvements include publishing a privacy policy, security policy, and incident response information, enhancing security headers, and improving accessibility features to strengthen compliance and trust.

K

Kysk

kysk.ee

45

SA Kodanikuühiskonna Sihtkapital (KÜSK) operates as a key non-profit organization in Estonia dedicated to supporting civil society, social innovation, and community development. Established in 2010, it provides grant funding and resources to NGOs and community initiatives, positioning itself as a central actor in Estonia's non-profit sector. The website reflects a professional and consistent brand presence with multilingual support and rich media content to engage its audience. Technically, the site is built on WordPress with a modern tech stack including SEO and analytics tools, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and some best practices, though it lacks explicit security policies and vulnerability disclosures. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is trustworthy and credible, with room for improvement in transparency and security documentation.

H

Hestia Hotel Group

hestiahotels.com

50

Hestia Hotel Group is a regional hospitality business operating multiple hotels and apartments across Baltic cities including Tallinn, Riga, Haapsalu, and Pärnu. Their offerings range from comfort and superior hotels to spa and old town accommodations, targeting travelers seeking quality lodging and leisure experiences in these locations. The website is professionally designed using WordPress and WooCommerce, integrating modern web technologies and providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers and explicit security policies are missing. WHOIS data is unavailable, which slightly reduces transparency but the overall business credibility remains high based on website content and contact information. The site uses analytics and marketing tools responsibly with GDPR compliance. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further improve trust and security maturity.

A

ACE Logistics Estonia AS

ace.ee

48

ACE Logistics Estonia AS is a medium-sized logistics company based in Estonia, specializing in multimodal transportation services including road, air, sea, and rail transport, as well as warehousing and customs clearance. The company operates primarily in the Baltic region and Europe, with subsidiaries in Latvia, Lithuania, and Ukraine, and is part of the ACE Logistics Group. The website reflects a professional and consistent brand image, supported by ISO 9001 and ISO 14001 certifications, indicating a commitment to quality and environmental management. The target audience includes businesses requiring comprehensive logistics solutions across multiple transport modes. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Slider Revolution, and it employs SEO best practices and cookie consent mechanisms to comply with GDPR. Security posture is generally good with HTTPS enforced and no visible critical vulnerabilities, though some plugins may require updates to mitigate known risks. Privacy compliance is strong, with clear privacy and cookie policies and consent management. Overall, the website presents a trustworthy and professional digital presence aligned with the company's business operations and market positioning.

K

KiVa Program

kivaprogram.net

61

KiVa Program is an established international anti-bullying educational initiative focused on providing schools, educators, and parents with resources and research to combat bullying. The website demonstrates a professional design with clear navigation and a global presence through multiple localized domains. Technically, the site is built on WordPress, uses modern libraries such as jQuery and DustPress, and integrates Cookiebot for privacy compliance. The site is mobile-optimized and accessible, with good SEO practices. Security-wise, the website enforces HTTPS and employs a comprehensive cookie consent mechanism, but lacks advanced security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts the overall trustworthiness assessment. No explicit contact emails or phone numbers were found, limiting direct communication channels. Overall, the website is functional, privacy-conscious, and professionally presented, but the missing WHOIS data and lack of explicit business contact details reduce confidence in business credibility. Strategic improvements in security transparency and domain registration verification are recommended.

N

NORDWOOD

nordwood.ee

39

NORDWOOD is a collaborative brand representing four wood industry companies based in Estonia, focusing on wood sawing, processing, and sales. The website provides basic information about the company, its products, employment opportunities, and certifications. The business targets customers and potential employees interested in the wood manufacturing sector. The domain is well-established since 2013 and registered with a reputable Estonian registrar, supporting the legitimacy of the business. Technically, the website is built on WordPress and uses common technologies such as jQuery and Google Fonts. It employs the Wordfence security plugin and has HTTPS enabled, indicating a baseline security posture. However, the site lacks advanced security headers and proper configuration of analytics tools. The website is moderately optimized for mobile and performance but has room for improvement in SEO and accessibility. From a security perspective, the site shows basic good practices like HTTPS and Wordfence usage but lacks visible privacy and cookie policies, security headers, and incident response information. No forms or contact emails were found, which limits user engagement and transparency. The absence of privacy compliance elements is a notable gap given GDPR requirements. Overall, the website is functional and moderately professional but requires enhancements in privacy compliance, security headers, and user contact options to improve trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, adding security headers, properly configuring analytics, and providing clear contact and incident response information.

P

Pinest AS

pinest.ee

45

Pinest AS is an Estonian manufacturing company founded in 2005 specializing in finger-jointed and laminated wood components. The company emphasizes flexibility in raw materials and production to serve large and medium-sized industrial clients, primarily using domestic pine wood. Their production facility is located in Himmaste village, Põlvamaa. The website reflects a professional and consistent brand presence with clear business and contact information, supported by recognized certifications such as FSC and PEFC. Technically, the site is built on WordPress with modern libraries and tools, including Google Analytics and Tag Manager for tracking, and uses SEO best practices via Yoast. Security posture is generally good with HTTPS enabled and secure forms, though some improvements are needed in script handling and security headers. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is trustworthy and well-positioned in its market segment.

E

Estonian Plywood AS

estply.com

50

Estonian Plywood AS (ESTPLY) is a medium-sized manufacturing company specializing in the production of Nordic birch plywood in large sizes. Founded in 2018 and part of the Lemeks Group, ESTPLY operates one of the most modern plywood factories in the Baltics and Scandinavia, located in Estonia. The company targets European industrial clients and resellers, supplying plywood for trailers, furniture, packaging, and construction. ESTPLY emphasizes sustainability by utilizing local wood resources and environmentally friendly production processes. The website is built on WordPress with common plugins and uses Google Analytics for visitor tracking. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, which impacts privacy compliance scoring. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Contact information is clearly provided, enhancing business credibility.

S

SMSPinigai.lt

smspinigai.lt

66

SMSPinigai.lt is a Lithuanian online lending platform established in 2010, offering personal loans, credit cards, and refinancing services. The company positions itself as a reliable and customer-focused financial service provider with a strong online presence and a user-friendly loan application process. Their market position is supported by a consistent brand, clear contact channels, and a comprehensive service offering tailored to Lithuanian consumers. Technically, the website employs modern JavaScript libraries, tracking tools, and structured data to enhance SEO and user experience. The site is mobile-optimized and provides clear navigation and content relevant to its audience. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit security policies and incident response information. Overall, the website demonstrates a mature digital infrastructure with good privacy compliance and business credibility, though there is room for improvement in security transparency and accessibility.

P

Placet Group OÜ

smsmoney.ee

66

Smsraha.ee is a well-established Estonian financial services website operated by Placet Group OÜ, offering a variety of lending products including credit lines, credit cards, consumer loans, and business loans. The company has been active since 2009 and positions itself as a reliable and modern partner for both private and business clients in Estonia. The website is professionally designed with clear navigation and multi-language support, providing detailed product information and customer testimonials to build trust. Technically, the site uses modern JavaScript libraries and Google analytics tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and standard security headers present, although no dedicated security or incident response policies are published. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site demonstrates a mature digital presence with a solid business credibility and trustworthy domain registration.

P

Placet Group OÜ

placetgroup.com

55

Placet Group OÜ is a financial services company established in 2005, specializing in secured and unsecured loans, credit cards, and related financial products. Operating primarily in Estonia and Lithuania, with additional brands in Poland, the company serves private individuals and legal entities, emphasizing fast, convenient, and reliable financing solutions. Their market position is supported by a broad customer base and multiple subsidiaries, with a focus on individual customer approach and quality service. Technically, the website employs a modern JavaScript stack including jQuery, Google Analytics, and various carousel libraries, hosted under a domain registered since 2010. The site is mobile optimized and presents a professional design with clear navigation. However, some accessibility features are basic, and no CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS and Google reCAPTCHA on its contact form, but lacks DNSSEC, security headers, and published security or privacy policies. The WHOIS data is consistent with the business claims, indicating legitimacy. No WAF or blocking mechanisms are detected, allowing full content access. Overall, the website demonstrates a moderate to good security posture and business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

U

UAB ITM Inkasso

itminkasso.lt

44

UAB ITM Inkasso is a Lithuanian debt collection and legal assistance company, established in 2019. The company offers a range of services including pre-litigation and litigation debt recovery, as well as legal consultations. It positions itself as a high-quality service provider with experienced specialists and a growing partner network across Lithuania and Estonia. The website is professionally designed, mobile responsive, and provides clear navigation, although it lacks published privacy, cookie, and terms of service policies. Technically, the site uses Bootstrap, jQuery, and Google Analytics for tracking, but does not show advanced security headers or explicit contact information. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the company appears credible but could improve transparency and compliance documentation.

P

Paskolos.lt

paskolos.lt

66

Paskolos.lt is a Lithuanian financial services company specializing in consumer credit products including credit lines, consumer loans, credit cards, auto loans, and mortgage loans. Established in 2011, it operates as a medium-sized entity under the parent company UAB Nordecum. The website is professionally designed, providing clear navigation and comprehensive information tailored to Lithuanian consumers seeking flexible credit solutions. The company leverages online platforms to deliver convenient financial services with a focus on user experience and accessibility. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and analytics tools, ensuring a responsive and moderately performant user experience. The presence of a chat component using Vue.js enhances customer interaction. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While basic security headers are present, additional headers like Content-Security-Policy could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, Paskolos.lt presents a trustworthy and compliant online presence with solid business credibility and a good security posture. Strategic enhancements in security headers and incident response transparency could further strengthen its position.

M

Mohawk College

mohawkcollege.ca

65

Mohawk College is a well-established Canadian educational institution offering a wide range of programs including certificates, diplomas, degrees, apprenticeships, and continuing education. The website targets a diverse audience including future and current students, indigenous and international students, alumni, and industry partners. The institution positions itself as a comprehensive provider of post-secondary education with strong community and industry ties. Technically, the website is built on Drupal 10 and incorporates a modern technology stack including various analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and CrazyEgg. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate rather than fast. From a security perspective, the site uses HTTPS with good SSL configuration and follows several best practices including privacy and security policy disclosures. However, it lacks a visible cookie consent mechanism and explicit incident response contact details. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the institutional nature and content quality. Overall, Mohawk College's website reflects a mature digital presence with strong business credibility and a good security posture. Enhancements in privacy compliance and transparency around domain registration would further strengthen trust and compliance.

C

CDED

cd-ed.com

59

CDED operates as an online distance education provider specializing in flexible diploma programs across various fields including Medical Administration, Accounting, Graphic Design, Health Information Management, and Office Administration. The website positions itself as a specialized college offering remote learning opportunities, targeting students seeking flexible education options. The business appears established with a domain age dating back to 1999, indicating longevity in the education sector. Technically, the website is built on WordPress using the Astra theme and enhanced with plugins such as Yoast SEO and Ultimate Addons for Gutenberg. It integrates marketing and analytics tools including Google Tag Manager and Trustpilot for customer reviews. The site demonstrates good mobile optimization and SEO practices, though performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections. However, it lacks DNSSEC and security headers, and does not provide explicit privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies with consent mechanisms, and providing clear incident response contacts.

E

e-Governance Academy

egovconference.ee

47

The e-Governance Conference 2025 website represents a well-established global event organized by the e-Governance Academy and supported by Estonian government entities. It targets digital governance leaders and practitioners worldwide, showcasing Estonia's leadership in digital transformation. The site is content-rich, professionally designed, and features high-profile speakers and partners, reinforcing its market position as a leading digital governance conference. Technically, the site uses WordPress with Elementor, integrates Vimeo for video content, and employs modern web technologies, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and secure content embedding, though it lacks some security headers and formal policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet GDPR requirements. Overall, the site is trustworthy and credible, but improvements in privacy and security transparency are recommended.

A

AMR Europe

amreurope.com

62

AMR Europe is a specialized distributor of high-end 3D printing systems, serving industrial, educational, and general 3D printing markets primarily in the Netherlands and Europe. The company offers a broad portfolio including 3D printers, scanners, filament, accessories, and parts, supported by a showroom and e-commerce platform. Their market position is that of a trusted niche technology provider with a focus on professional additive manufacturing solutions. Technically, the website is built on a modern WordPress CMS with WooCommerce and Divi theme, integrating common web technologies and optimization tools. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the business credibility is high with transparent contact information and social media presence. No blocking or WAF interference was detected, allowing full content access and analysis.