Security Directory

M

Magnetico

magnetico.cz

58

Magnetico is a Czech freelance graphic design business specializing in functional and aesthetic graphic design services including branding, web design, photography, and video production. The website presents a professional portfolio showcasing diverse projects and client logos, targeting businesses and individuals seeking creative marketing solutions. The technical infrastructure is based on WordPress with Elementor and common JavaScript libraries, delivering a moderately performant and mobile-optimized experience. Security posture is solid with HTTPS and cookie consent implemented, though security headers and incident response details are lacking. The absence of WHOIS data reduces domain trustworthiness, but the website content and presentation suggest a legitimate and professional operation. Strategic recommendations include enhancing security headers, adding vulnerability disclosure mechanisms, and improving contact transparency.

F

FlexiSystems s.r.o.

edituj.cz

33

FlexiSystems s.r.o. operates the website flexisite.cz, specializing in delivering modern, custom web solutions including complex web projects, e-commerce platforms, and visual editing content management systems. The company targets businesses requiring tailored web development services primarily within the Czech Republic. The website demonstrates a professional design with clear navigation and relevant content, supporting its position as a specialized technology provider. Technically, the site employs common JavaScript libraries such as jQuery and Slick Carousel, integrates Google Tag Manager for analytics, and uses a custom CMS with visual editing capabilities. Mobile optimization and SEO practices are adequately addressed, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and documented policies. The absence of WHOIS data limits domain trust verification, but the presence of clear company contact details and client logos supports business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

Č

Česká asociace rozvojových agentur

cara.cz

53

Česká asociace rozvojových agentur (ČARA) is a well-established non-profit association in the Czech Republic that unites regional development agencies to support regional competitiveness and policy implementation. The website reflects a professional and consistent brand presence with clear contact information and comprehensive privacy and cookie policies, indicating a mature approach to compliance. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and various UI libraries, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. The lack of WHOIS data is a notable gap, reducing domain trustworthiness and warranting further verification. Overall, the site is functional, compliant, and serves its target audience effectively.

K

Kauza ApS

kauza.dk

56

Kauza ApS is a Danish technology company specializing in data-driven consumer insights through its WhatIBuy app and platform. The company aggregates grocery receipts from multiple stores to provide users with budgeting, consumption analytics, and personalized insights. The website reflects a small but professional operation with clear business information and a focus on privacy and compliance. Technically, the site is built on WordPress with modern plugins and frameworks, offering a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some improvements in security headers and incident response transparency are recommended. Overall, Kauza presents a trustworthy and compliant digital presence with a niche market focus in Denmark.

E

eulogia

eulogia.eu

62

Eulogia is a European alliance of translation companies providing expert language services across more than 100 language combinations. The organization positions itself as a leading network of specialized translation providers, emphasizing quality, native language expertise, and collaborative growth. The website is built on a modern WordPress infrastructure using Elementor and various SEO and performance plugins, hosted likely on SiteGround. It features GDPR-compliant privacy and cookie policies with a consent mechanism, but lacks explicit security and incident response policies. The security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

R

Redwall OÜ

redwall.ee

58

Redwall OÜ is a well-established Estonian web agency with over 13 years of experience, specializing in full-service web solutions including design, development, maintenance, and consulting. The company targets businesses and organizations seeking professional and user-centric digital presence. Their market position is solid within the local Estonian market, supported by a consistent brand and a comprehensive portfolio of services. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket, lazy loading, and deferred scripts. The site is mobile-optimized and accessible, integrating advanced analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS enforced, CAPTCHA on forms, and no visible vulnerabilities, though explicit security policies and incident response documentation are absent. Overall, the website reflects a professional, trustworthy, and technically mature digital presence.

L

Lumi Capital OÜ

luminamai.lt

43

Lumi Namai is a Lithuanian real estate rental business specializing in modern apartments located in the 'Naujasis Skanseno' quarter of Vilnius. The company offers a range of 1 to 4-room apartments fully furnished with kitchen appliances and storage solutions. The website is professionally designed using Joomla CMS and integrates modern technologies such as Google Maps for location visualization, Google reCAPTCHA for form security, and GDPR-compliant cookie consent mechanisms. Social media presence is established on Facebook and Instagram, enhancing customer engagement. The domain is newly registered in 2024, consistent with the business launch timeline, and the WHOIS data aligns with the company identity.

L

Lumi Capital OÜ

lumikodud.ee

45

Lumi Kodud is a small Estonian real estate company specializing in rental apartments in Tallinn, offering 1-, 2-, and 3-room modern apartments managed reliably. The website is professionally designed using Joomla CMS with modern frameworks like Bootstrap and includes multi-language support. It integrates common analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, and employs Google reCAPTCHA for form security. Privacy and cookie policies are present and indicate GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers could enhance protection. Overall, the site is trustworthy and well-positioned for its local rental market niche.

S

SeaTech Consortium

seatech2020.eu

62

SeaTech Consortium is a research-focused organization funded by Horizon 2020, dedicated to developing innovative ship engine and propulsion technologies aimed at improving fuel efficiency and reducing emissions in the maritime sector. The consortium targets stakeholders in the maritime, energy, and transportation industries, positioning itself as a specialized innovator in short-sea ship dual-fuel engine retrofits and bio-mimetic wing propulsion systems. The website reflects a professional and consistent brand image with clear messaging about its mission and funded projects. Technically, the website is built on WordPress using the OceanWP theme and Elementor page builder, incorporating modern web technologies such as jQuery and Wistia for video content. SEO is enhanced through Yoast SEO plugin, and cookie consent is managed via OneTrust, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation. From a security perspective, the site uses HTTPS with anonymized IP tracking in Google Analytics and implements cookie consent mechanisms. However, it lacks explicit security headers, published security policies, and incident response contacts, which are areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a moderate to good security posture and business credibility but would benefit from enhanced privacy compliance documentation and explicit security policies to strengthen trust and regulatory adherence.

E

European Law Firm

european-law-firm.com

56

European Law Firm is a well-established network of independent law firms providing cross-border legal expertise across Europe and beyond. The network comprises over 250 locally qualified lawyers operating in more than 28 jurisdictions, offering a broad range of legal services including corporate, commercial, real estate, litigation, employment, intellectual property, and data privacy. The website presents a professional image with clear navigation and good SEO practices, targeting businesses and individuals seeking legal advice in multiple European countries. Technically, the site is built on WordPress with modern plugins and integrates Google Maps for member locations, hosted by a reputable registrar. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is credible and functional but would benefit from enhanced privacy disclosures and security hardening.

T

Telema AS

telema.lt

43

Telema AS is a well-established technology company specializing in Electronic Data Interchange (EDI) services, facilitating automated and accurate electronic document exchange between businesses. With over 25 years in the market and a strong presence in Lithuania and the Baltic region, Telema serves thousands of stores and suppliers, positioning itself as a trusted partner in business process automation and ERP integration. The website reflects a mature digital presence with comprehensive service descriptions, client testimonials, and a network of certified software partners. Technically, the site is built on WordPress with modern libraries and tools, including robust analytics and marketing integrations. Security posture is strong, supported by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Privacy compliance is well addressed with Cookiebot consent management and clear privacy policies. Overall, the site projects professionalism, trustworthiness, and technical competence.

T

Telema AS

telema.lv

46

Telema AS is a technology company specializing in Electronic Data Interchange (EDI) and supply chain optimization solutions, targeting businesses seeking to automate and improve their trading document workflows. The company holds a strong regional presence in the Baltics with multilingual websites and certified partners, positioning itself as a reliable and trusted provider in its niche. The website demonstrates a mature digital infrastructure built on WordPress with modern front-end libraries and comprehensive marketing and analytics integrations. Security posture is robust, supported by ISO 27001 certification and HTTPS enforcement, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well managed through Cookiebot and clear privacy policies. Overall, the website reflects a professional, trustworthy, and business-focused digital presence.

T

Telema AS

telema.ee

42

Telema AS is a well-established Estonian technology company specializing in Electronic Data Interchange (EDI) and e-invoicing services, primarily serving the Baltic region. The company positions itself as a market leader and standard developer with a strong focus on seamless and automated business document exchange. Their services cater to businesses seeking efficient and reliable data exchange solutions, supported by a network of certified software partners and global roaming capabilities. The website reflects a mature digital presence with multi-language support and regional domains. Technically, the site is built on WordPress with modern front-end libraries and integrates advanced marketing and analytics tools, including consent management for GDPR compliance. Security posture is strong, evidenced by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

E

EuPlătesc

euplatesc.ro

45

EuPlătesc.ro is a Romanian online payment processor with nearly two decades of experience providing secure and innovative payment solutions to businesses. The company offers a variety of payment methods including card payments, recurring payments, installment payments, QR code payments, and SMS payments, positioning itself as a comprehensive payment service provider in the Romanian market. The website is professionally designed using WordPress and Elementor, featuring modern SEO practices and mobile optimization. Security is emphasized through the use of HTTPS and 3DSecure authentication technology, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is partially addressed with a cookie consent mechanism, but a dedicated privacy policy page is not clearly found. Overall, the website presents a credible and trustworthy business presence with room for improvement in transparency and security documentation.

I

Itera BI

bi365.ee

42

BCS Itera, operating under the brand Itera BI, is a specialized provider of business intelligence and data analytics solutions primarily leveraging Microsoft technologies such as Power BI, BI4Dynamics, and Azure. Founded in 2019 and based in Estonia, the company offers a comprehensive portfolio of services including BI strategy development, data warehouse architecture, BI implementation, cloud BI solutions, version upgrades, and advanced forecasting models. The website demonstrates a mature digital presence with rich content, client case studies, and educational resources, positioning the company as a trusted expert in the BI domain within its regional market. Technically, the site is built on WordPress with modern plugins and analytics integrations, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS and secure form handling, though improvements in security headers and privacy compliance are recommended. Overall, the company presents a credible and professional image with clear contact channels and certifications, though it should enhance its privacy and cookie policies to meet compliance standards.

P

POMPdeLUX FI Oy

pompdelux.com

70

POMPdeLUX FI Oy operates a professional e-commerce platform specializing in Scandinavian children's clothing, targeting parents and caregivers seeking quality kidswear. The company has established a solid market presence since its domain registration in 2011, offering seasonal collections through a well-branded and user-friendly Shopify-based website. The site demonstrates a mature digital infrastructure with integration of modern marketing and analytics tools such as Klaviyo and Facebook Pixel, ensuring effective customer engagement and data-driven marketing strategies. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a trustworthy and professional retail business with room for improvement in explicit security transparency and incident readiness.

E

Eesti Infotehnoloogia ja Telekommunikatsiooni Liit

itl.ee

47

Eesti Infotehnoloogia ja Telekommunikatsiooni Liit (ITL) is a well-established Estonian industry association representing companies in the digital technology and telecommunications sectors. Founded in 2010, ITL serves as a key advocate and facilitator for its members, which collectively represent over 70% of the sector's turnover. The website reflects a professional and consistent brand presence, offering comprehensive information about the association's activities, events, and member services. The target audience includes Estonian technology companies, policymakers, and stakeholders in the digital economy. Technically, the site is built on WordPress with common plugins for forms, GDPR compliance, and image lightbox functionality. The site is mobile-optimized and SEO-friendly, with moderate performance and basic accessibility features.

T

Tallinna Kontserdimaja AS

kontserdimaja.ee

38

Alexela Kontserdimaja is a prominent concert hall located in Tallinn, Estonia, recognized as the largest in the Baltic region with seating for up to 1829 visitors. The venue offers a variety of services including event hosting, ticket sales, and catering options such as pre-ordered coffee tables and private champagne salon rentals. The website reflects a well-established business with a domain registered since 2010, consistent with its market presence. The target audience includes cultural event attendees and event organizers in the region. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, and multilingual support via WPML. SEO is well-implemented using Yoast SEO, and analytics are managed through Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and event information. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms, indicating a baseline security posture. However, there is a lack of explicit security headers and no visible incident response or security policy pages, which could be improved. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may pose GDPR compliance risks. Overall, the website is professional, trustworthy, and functional, serving its business purpose effectively. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.

AS Farmi Piimatööstus operates as an Estonian dairy product manufacturer with a well-established online presence since at least 2010. The website serves as a platform to showcase their products, recipes, and company information, targeting consumers interested in dairy goods. The company maintains active engagement through social media channels and provides clear contact details, reinforcing its market position as a reputable local manufacturer. Technically, the website is built on the Voog CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site employs HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security policies, which could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. No vulnerability disclosure or incident response information is provided, indicating room for maturity in security governance. Overall, the website is professional and trustworthy with a solid business foundation. Strategic improvements in security policies, privacy transparency, and accessibility would enhance compliance and user trust, supporting long-term digital resilience.

BIND is a small Estonian digital product development agency specializing in designing, building, and launching custom multimedia and digital products including mobile-optimized websites, e-commerce solutions, browser extensions, embedded systems, and mobile apps. The company has an established market presence since 2011 with a credible client base and positive testimonials. Technically, the website is built on WordPress with modern frontend technologies and SEO optimization, delivering a good user experience with mobile responsiveness and moderate performance. Security posture is solid with HTTPS and secure form handling, though it lacks some advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

D

DIRECT INVEST

directinvest.ee

43

Direct Invest Group is a well-established commercial real estate investment company operating primarily in Estonia and Latvia since 2009. The company focuses on investing in shopping centers, office buildings, and development projects, with a portfolio nearing 100 million euros and serving approximately 100 tenants. Their Navigator building holds a prestigious LEED Gold certification, highlighting their commitment to sustainable development. The website reflects a professional digital presence built on WordPress with Elementor, optimized for SEO and mobile devices. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though security headers and incident response information are lacking. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

P

Powerhouse OÜ

powerhouse.ee

49

Powerhouse OÜ is a well-established communications agency based in Estonia with nearly 25 years of experience. The company specializes in public and internal communications, government relations, process management, event organization, and managing communication channels. Their market position is that of a trusted regional player with a versatile team and a strong focus on client relationships. The website reflects a professional and consistent brand image with clear contact information and expert profiles. Technically, the website uses a modern but straightforward technology stack including jQuery, Bootstrap 4, Google reCAPTCHA, and the Voog CMS platform. The site is mobile-optimized and performs moderately well, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection, but lacks advanced security headers such as Content-Security-Policy and HSTS. No privacy or cookie policies are present, indicating gaps in GDPR compliance. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

B

Baltic Industrial OÜ

balticindustrial.com

48

Baltic Industrial OÜ is an established service provider in the Baltic region specializing in repair, diagnostics, and maintenance solutions primarily for the energy sector. With over 20 years of experience and a professional team, the company positions itself as a trusted partner for businesses requiring comprehensive industrial maintenance services. The website reflects this positioning with clear business descriptions and a professional design, targeting companies in need of industrial repair and maintenance in Estonia and neighboring countries. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Hosting details are not explicitly disclosed, but DNS servers suggest regional hosting providers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and important security headers, and no explicit security or incident response policies are published. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could pose compliance risks under GDPR. Overall, Baltic Industrial demonstrates a solid business and technical foundation but should prioritize enhancing privacy compliance and security best practices to reduce risk and improve trustworthiness. Strategic improvements in these areas will strengthen their digital maturity and regulatory adherence.

O

Oreon OÜ

bestcredit.ee

52

BestCredit.ee is an established Estonian financial services company operating since 2011 under Oreon OÜ. The company offers a variety of loan products including small consumer loans, business loans, mortgage loans, guarantee loans, and construction loans. Their business model focuses on online lending with self-service features and loan calculators to facilitate customer engagement. The website targets both private individuals and businesses within Estonia, positioning itself as a reliable and professional lender with a clear regulatory license from the Estonian Financial Supervision Authority.

B

Baltic Rail AS

balticrail.com

49

Baltic Rail AS is a medium-sized transportation company specializing in container-train operations and intermodal rail services primarily in the Baltic Adriatic Rail Corridor. Established in 2008 and owned by the Rail World Group, it operates container terminals and warehousing facilities in Estonia and Poland, serving key locations such as Wroclaw, Katowice, Ostrava, and Koper. The company targets businesses requiring efficient rail freight and logistics solutions in Central and Eastern Europe. The website reflects a professional and consistent brand image with clear service offerings and active news updates, indicating ongoing operations and market presence. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and employs Google reCAPTCHA v3 for form security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, some security best practices such as security headers are missing, and no privacy or cookie policies are published, which impacts compliance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a notable concern, as it conflicts with the business history claimed and may indicate domain registration issues. Overall, the site is trustworthy but would benefit from improved transparency and security documentation. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, adding a vulnerability disclosure policy, and resolving WHOIS registration inconsistencies to enhance trust and compliance.

L

Laomaailm

laomaailm.ee

43

Laomaailm is an established Estonian company specializing in warehouse and industrial storage solutions with over 30 years of market presence. The company offers a broad range of products including shelving, lifting equipment, industrial stairs, and rental services, targeting B2B customers in manufacturing and logistics sectors. The website reflects a mature business with consistent branding and multilingual support, indicating a focus on regional and international clients. Technically, the site is built on WordPress with WooCommerce and enhanced by popular plugins such as Yoast SEO and WPML for multilingual capabilities. The infrastructure includes Google Tag Manager and Analytics for tracking, and the site is secured with HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. Security posture is solid but could be improved by adding explicit security headers and incident response information. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's market position and business credibility.

D

Digient

digient.in

63

Digient is a medium-sized Indian technology company specializing in B2B iGaming software, platforms, and solutions. With nearly two decades of experience, they provide customizable, scalable iGaming platforms, custom game development, hosting, payment integrations, and compliance services. Their website reflects a professional digital presence built on WordPress with modern plugins and SEO best practices. The company targets iGaming operators seeking fast and secure technology solutions to accelerate their market launch and growth. Technically, the website is well-structured, mobile-optimized, and uses HTTPS with a valid SSL certificate. However, it lacks explicit privacy and terms of service pages, and no security headers were detected, indicating room for improvement in security posture. Cookie consent is implemented, showing some privacy compliance awareness. Social media presence on Facebook, LinkedIn, and Twitter supports their business credibility. Overall, the site is functional and professional but could enhance trust and compliance by publishing comprehensive privacy, security, and incident response policies.

A

addCar

addcar.com

55

addCar Rental operates an international online car rental service offering vehicle bookings across Europe, the USA, the Middle East, and other countries. The company targets travelers seeking affordable and reliable car rentals with services including airport pickup, insurance protection, flexible cancellations, and 24/7 support. The website reflects a medium-sized business with a consistent brand presence and recognition such as the 2024 booking.com Traveller Review Award. Technically, the site uses modern frameworks like Angular and Bootstrap, integrates Google Analytics and Tag Manager for tracking, and provides a responsive, well-structured user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website and business presence. Overall, the site scores well on content quality and business credibility but should address WHOIS transparency and security header implementation to improve trust and compliance.

E

eHost OÜ

ettevotja.ee

40

Aktiva.ee is an Estonian business information portal focused on supporting entrepreneurs at various stages including startups, operating companies, and those expanding internationally. The site provides practical guides, legal and accounting information, marketing advice, and resources to help businesses succeed. It targets Estonian-speaking entrepreneurs and small businesses, positioning itself as a trusted informational gateway in the local business ecosystem. The website is built on WordPress, uses modern web technologies including Google Analytics and reCAPTCHA, and is hosted with reputable providers including Cloudflare for DNS and eHost OÜ as registrar. The site is well-structured with clear navigation and good mobile optimization, though it lacks explicit privacy and cookie policies which impacts compliance. Security posture is solid with HTTPS and anti-bot measures, but could be improved with additional security headers and published policies. Overall, the site is a credible, small-scale business resource with room for enhanced privacy and security transparency.

L

Levstal Group

levstal.com

48

Levstal Group is a well-established Estonian company specializing in steel structures, metal engineering, and marine infrastructure services. With over three decades of experience, the company serves a broad European industrial client base, delivering high-quality fabrication and engineering solutions. Their business model focuses on B2B project-based contracts with a strong emphasis on quality and compliance, supported by multiple industry certifications. Technically, the website is built on WordPress with modern JavaScript libraries and analytics tools, demonstrating a mature digital presence with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Levstal Group presents a professional, trustworthy, and technically sound online presence aligned with their business operations.

B

Birdeye Capital

birdeyecapital.com

50

Birdeye Capital is a specialized alternative investment fund manager focusing on sustainable forestland investments. Established in 2013 and regulated by the Estonian Financial Supervision Authority, the company offers non-public, closed-ended funds tailored for institutional investors such as pension funds and family offices. Their business model emphasizes long-term sustainable growth and ESG compliance, positioning them as a trusted player in the Baltic investment market. Technically, the website is built on WordPress with modern plugins and libraries, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though lacking advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

C

Citadele

citadele.ee

57

Citadele is a well-established banking institution operating in Estonia, providing a broad range of retail banking services including loans, deposits, insurance, and payment solutions tailored to individual customers. The website reflects a mature digital presence with comprehensive content, including loan calculators and detailed product offerings, targeting private banking customers. The company maintains a consistent brand image and integrates social media and partner links effectively. Technically, the site uses modern JavaScript libraries such as jQuery and Bootstrap, and is likely powered by OctoberCMS, ensuring a responsive and user-friendly experience. Security is robust with HTTPS enforced, secure cookie consent mechanisms, and standard security headers, although explicit security policies and incident response information are not publicly available. Overall, the site demonstrates good compliance with privacy regulations and provides clear contact information, supporting a trustworthy user experience.

D

Diotech OÜ

diotech.ee

50

Diotech OÜ is an Estonian company specializing in smart energy solutions aimed at accelerating the transition to carbon-neutral electricity production and consumption. Their service portfolio includes lighting services, electrical construction and design, solar power plants, energy services, and operational and maintenance services. The company maintains a professional online presence with a well-structured website, active news updates, and clear service offerings, positioning itself as a reputable player in the Estonian energy sector. The website is built on WordPress with modern plugins and SEO optimizations, providing a good user experience and mobile responsiveness. Security posture is solid with HTTPS enforced and anti-spam measures in place, though formal security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and business information reflect a trustworthy and credible organization with room for improvement in security transparency and accessibility.

S

Sustinere

sustinere.ee

60

Sustinere is a medium-sized ESG and sustainability advisory firm operating primarily in the Baltic region since 2016. The company offers a comprehensive suite of services including ESG strategy development, climate impact assessments, risk management, and digital solutions to support sustainability transformations. Their client base spans 11 sectors, indicating a broad market reach and trusted reputation. Technically, the website is built on WordPress with Elementor and Astra theme, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks explicit privacy and incident response policies. Overall, the website reflects a professional and credible business with room for improvement in privacy compliance and transparency.

H

HansaLaw

hansalaw.ee

45

HansaLaw is an internationally recognized legal and tax advisory firm with over 10 years of experience, operating primarily in the Baltic region with offices in Tallinn, Riga, and Vilnius. The firm offers comprehensive legal consulting and conflict resolution services tailored to clients seeking expert legal advice. The website is built on WordPress using the Avada theme, incorporating modern web technologies and third-party marketing and analytics tools such as Google Analytics, Facebook Pixel, and Adform tracking. The site is well-designed, mobile-optimized, and provides clear navigation, although it lacks explicit privacy and cookie policies, which impacts its privacy compliance rating. Security posture is adequate with HTTPS enabled and good SSL configuration, but could be improved by enabling DNSSEC and adding security headers. No WAF or blocking mechanisms were detected, and the domain registration data is consistent with the business claims, supporting legitimacy.

N

Nuare Studio

nuarestudio.com

45

Nuare Studio is a specialized art outsourcing and software development company established in 2006, serving the video game and movie industries. The company offers a broad range of creative services including 2D and 3D art, animation, VFX, and IT development such as mobile and web applications. Their market position is supported by collaborations with prominent clients and a portfolio of major projects. Technically, the website is built on WordPress with modern plugins and SEO tools, delivering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain locks in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is lacking as no privacy or cookie policies are found, which is a notable gap. Overall, the business credibility is high with clear contact information and trust signals like testimonials and client logos. Strategic improvements in privacy compliance and DNS security would enhance their security and trust profile.

T

Tritech OÜ

tritech.ee

49

Tritech OÜ is a small Estonian manufacturing company specializing in mechanical engineering and CNC machining services, established in 2012. The company offers a range of services including mechanical engineering design, CNC turning and milling, product assembly, and customized mechanical solutions. Their target audience is industrial companies seeking high-quality machined parts and assembly services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, using modern tools such as Google Analytics and Facebook Pixel for marketing and tracking. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and formal security policies. Overall, the security posture is solid but could be improved by adding cookie consent mechanisms, security policies, and vulnerability disclosure information. The domain registration is consistent with the business claims, enhancing trustworthiness. Strategic recommendations include enhancing privacy compliance and security transparency to further build customer trust and regulatory adherence.

Stratum Traffic Engineering GmbH is a specialized consulting company in the Intelligent Transport Systems (ITS) and traffic engineering sector, offering services such as traffic analysis, road safety, project management, and business development for ITS SMEs. The company targets organizations seeking expertise in traffic audits, modeling, and tolling systems, positioning itself as a niche ITS SME with international market development capabilities. The website reflects a professional and consistent brand image with clear service offerings and contact information, supported by social media presence on Facebook and LinkedIn. Technically, the site is built on WordPress using popular plugins and themes, delivering moderate performance and good mobile optimization. However, the site lacks advanced security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The domain registration is consistent and transparent, with no privacy protection, supporting the legitimacy of the business. Overall, the website is functional and credible but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

S

Splendid Asia Maldives

splendidasia.com

59

Splendid Asia Maldives is a well-established travel agency specializing in inbound travel services to the Maldives, offering a broad portfolio of luxury resorts, tours, flights, and holiday packages. Founded in 2006, the company enjoys a strong market position with a reputation for reliability, best rates, and expert local knowledge. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to leisure travelers and travel agents. Technically, the site is built on WordPress with modern plugins and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and explicit privacy policies are missing. Cookie consent is implemented, indicating some privacy compliance efforts. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy documentation and security header improvements.

S

SA Tallinna Lauluväljak

lauluvaljak.ee

46

Tallinna Lauluväljak is a well-established event venue and cultural site in Tallinn, Estonia, operating since 2010. The organization offers rental services for event spaces, furniture, and equipment, alongside visitor services such as a visitor center and park attractions. The website is professionally designed using Drupal CMS, with integration of modern analytics and marketing tools including Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and provides clear navigation and relevant content for event organizers and visitors. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though security headers are not explicitly detected. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms and terms of service. Contact information is clearly provided, enhancing business credibility.

S

SmartCap

smartcap.ee

54

SmartCap is a state-owned Estonian fund manager established in 2011, operating under a license from the Estonian Financial Supervision Authority. It focuses on cornerstone investments in venture capital, green technology, and defence sectors to foster innovation and economic growth in Estonia. The company is a subsidiary of Foundation KredEx and targets private fund managers and innovative companies within Estonia. The website reflects a professional and consistent brand image with comprehensive content about its funds and investment focus. Technically, the site is built on WordPress with modern performance optimizations and cookie consent management, ensuring good user experience and compliance with privacy regulations. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

K

Kahjurite Tõrje

kt.ee

38

Kahjurite Tõrje is a small Estonian pest control service provider specializing in fast and effective pest control solutions including gel treatments for insects such as wasps, cockroaches, and ants. The company has an established online presence with a professionally designed WordPress website optimized for SEO and mobile devices. The website content is relevant and clearly structured, targeting local Estonian customers seeking pest control services. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and reCAPTCHA for security and analytics purposes. However, the absence of privacy and cookie policies indicates a gap in compliance with GDPR and general privacy best practices. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks important security headers and explicit incident response information. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Blend IT

blendit.eu

45

Blend IT is a small technology company specializing in providing remote software development teams primarily located in the Philippines and Estonia. Their business model focuses on outsourcing long-term software professionals to clients globally, emphasizing flexible team structures and direct client-to-developer communication. The company positions itself as a niche provider addressing talent shortages through remote work solutions. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap and jQuery, and it integrates Google Analytics for user tracking. The site is mobile optimized and uses SEO best practices including structured data and meta tags. Security-wise, the site enforces HTTPS and employs basic anti-spam measures in its contact form but lacks published security policies or incident response information. Privacy compliance is limited due to the absence of privacy and cookie policies. Overall, the website is professional and credible but would benefit from enhanced privacy and security disclosures.

M

Miltton

miltton.ee

54

Miltton is an established consultancy firm founded in 2007, specializing in business, communications, and design consultancy services. The company targets organizations seeking impactful change through strategic insights, creative communications, and design thinking. Their market position is strengthened by a diverse team and international presence with subsidiaries or related sites in Europe, Finland, Sweden, Ukraine, and the USA. The website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and analytics integrations such as Yoast SEO, Google Tag Manager, and Matomo. Cookie consent mechanisms and a comprehensive privacy policy demonstrate GDPR compliance and a commitment to user privacy. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

Efore

efore.com

52

Efore is a company specializing in automated battery cell manufacturing and energy storage solutions, targeting industrial, telecom, and energy sectors. Their website presents a professional image with clear navigation and modern design, leveraging WordPress and Elementor technologies. The company emphasizes customized battery solutions and sustainability. Technically, the site is well-structured with SEO optimization and mobile responsiveness, though performance is moderate. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is limited, with no clear privacy or terms of service pages, though a cookie consent mechanism is present. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

E

Eesti Lauatenniseliit

lauatennis.ee

41

Eesti Lauatenniseliit is the official Estonian Table Tennis Federation, serving as the national governing body for table tennis in Estonia. The website provides comprehensive information on competitions, clubs, youth sports, rankings, rules, and contact details, targeting players, clubs, and enthusiasts within the Estonian table tennis community. The business model is that of a non-profit sports federation focused on organizational and informational services. Technically, the website is built on WordPress using the Elementor page builder and OceanWP theme, incorporating modern JavaScript libraries such as jQuery, Swiper.js, and Tippy.js. The site is mobile-optimized with good navigation and content quality, though performance is moderate. Analytics are handled via plausible.io, indicating a privacy-conscious approach but lacking explicit cookie consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and incident response contacts. No privacy or cookie policies are present, representing compliance gaps. The WHOIS data is consistent with the website's identity, showing legitimate registration without privacy protection, appropriate for a public sports federation. Overall, the site is professional and trustworthy but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

K

KUUKUUP OÜ

digipurk.ee

41

Digipurk is a small Estonian company specializing in robotics, automation, and Internet of Things services, combined with educational offerings such as programming courses and workshops for children and adults. The company also operates an e-commerce store selling robotics and electronics components. Their market position is that of a niche local provider focused on technology education and hobbyist products. The website is built on WordPress with WooCommerce, featuring modern technologies like Google reCAPTCHA v3 and Leaflet.js for maps. The site is well-structured, mobile-optimized, and uses HTTPS with no detected blocking or WAF challenges. Security practices include bot protection and no visible sensitive data exposure, though security headers are not explicitly present. Privacy compliance is partial, with a privacy policy but no cookie consent mechanism. Overall, the site demonstrates good business credibility and technical maturity for a small technology education and retail business.

T

Technology Partners

technologypartners.net

68

Technology Partners is an established IT solutions and staffing company founded in 2003, offering a comprehensive suite of services including Agile Delivery, Application Services, Artificial Intelligence, Cloud Engineering, Data Engineering, and more. Their market position is that of a medium-sized B2B service provider targeting businesses seeking full-stack IT solutions and leadership. The website reflects a professional and consistent brand image with a focus on innovation and industry-specific expertise. Technically, the website is built on the HubSpot CMS platform, utilizing modern web technologies such as jQuery and FontAwesome, and integrates marketing and analytics tools including Google Analytics 4 and Google Tag Manager. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, suitable for their audience. From a security perspective, the site employs HTTPS with a stable domain registration dating back to 2003, indicating legitimacy. However, DNSSEC is not enabled, and security headers are not detected, suggesting room for improvement. No explicit security policies or incident response contacts are published, which could be a compliance gap. Cookie consent mechanisms are present, but no dedicated privacy or cookie policy pages were found in the provided content. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced privacy compliance documentation and improved security header implementation. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and enhancing accessibility and security posture to align with industry best practices.

PD Instore is a well-established retail design-to-build partner with over 80 years of industry experience, specializing in visual merchandising and instore environment solutions. The company targets retail brands seeking innovative and comprehensive brand experience services, offering design, build, and rollout capabilities. Their market position is strong, supported by a large team and a broad portfolio of well-known brand partnerships. Technically, the website is built on WordPress using Elementor, with modern JavaScript libraries and Google Analytics integration, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

L

Lamorinda Tutoring, LLC

lamorindatutoring.com

48

Lamorinda Tutoring, LLC is a small education business specializing in private tutoring services for K-College students. With over 25 years of academic excellence, the company offers personalized tutoring in mathematics, science, foreign languages, and business subjects through in-person, online, and group sessions. The website reflects a professional and trustworthy brand with clear service offerings and positive testimonials. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by GoDaddy, and optimized for mobile users. However, there are gaps in privacy compliance and security best practices, such as the absence of privacy and cookie policies and missing security headers. The domain registration is consistent and legitimate, supporting the business's credibility.