Security Directory

S

Savantor Ltd

savantor.com

54

Savantor Ltd is a specialized consulting and resourcing firm focused on the payments, cards, mobile, banking, and transactions sectors. With over 25 years of experience, the company offers expert services including specialist resourcing, payments strategy, platform selection and transition, and operational efficiency. Their client base includes major financial institutions and payment networks, positioning them as a trusted advisor in the European and UK markets. The website reflects a professional and well-structured digital presence, leveraging WordPress and Elementor technologies, with good mobile optimization and SEO practices. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent mechanism. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS registration data is a notable anomaly that requires further investigation to confirm domain legitimacy. Overall, the website and business present a credible and professional image with minor technical and security enhancements recommended.

M

MRPeasy

mrpeasy.com

69

MRPeasy is a cloud-based SaaS provider specializing in Manufacturing ERP and MRP software tailored for small manufacturers. The company offers a comprehensive suite of services including production planning, stock management, CRM, purchases, finances, and team collaboration tools. Positioned as a leading solution for small manufacturers, MRPeasy emphasizes simplicity and power in its offerings. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates advanced analytics and optimization tools like Google Analytics and Visual Website Optimizer. The site is mobile-optimized and performs moderately well, with good accessibility and SEO features. Security best practices are observed, including HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS registration data reduces the overall trust score, as domain legitimacy cannot be fully verified. Contact information is available, including verified company emails and social media presence, enhancing business credibility. Overall, MRPeasy presents a trustworthy and professional online presence suitable for its target market, but improvements in transparency regarding security policies and domain registration details would further strengthen trust and compliance.

K

Klöckner Pentaplast

kpfilms.com

64

Klöckner Pentaplast is a global leader in manufacturing sustainable and recyclable plastic films and high-barrier protective packaging, serving sectors such as food, pharmaceutical, health, and durable goods. The company emphasizes sustainability and circular economy principles, with a strong market presence and over 60 years of industry experience. Their website reflects a professional and comprehensive digital presence, showcasing detailed product information, sustainability reports, and corporate governance content. Technically, the site employs modern frameworks like Bootstrap and AngularJS, integrates accessibility tools such as Recite Me, and uses analytics services responsibly with cookie consent mechanisms in place. Security posture is solid with HTTPS enforcement and privacy policies, though some security headers and explicit incident response information are absent. The WHOIS data for the domain is missing, which is unusual for a company of this size and history, slightly impacting trust but not undermining the overall legitimacy given the strong branding and external presence. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and clarifying domain registration details.

IITEE OÜ is an Estonian IT service provider specializing in professional IT solutions for companies, particularly those in the manufacturing sector. Founded in 2006, the company offers IT maintenance, hosting services with high availability, and Office 365 business-class email solutions. Their business model focuses on providing reliable and efficient IT support to improve operational efficiency for their clients. The website reflects a small but professional company with clear contact information and a focus on B2B services. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, Owl Carousel, and Google Fonts. Google Analytics and Google Tag Manager are employed for user tracking and marketing insights. The site is mobile responsive and well-structured, though accessibility features are basic. Hosting appears to be managed by Elkdata OÜ, consistent with the WHOIS data. From a security perspective, the website uses HTTPS and avoids exposing sensitive data. However, no explicit security headers were detected, and there is a lack of privacy and cookie policies, which impacts GDPR compliance. No vulnerability disclosure or incident response information is provided. The security posture is moderate but could be improved by implementing standard security headers and formal policies. Overall, the website is professional and trustworthy with a solid business foundation. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance trust and regulatory adherence.

W

Wiru õlu

wiru.ee

39

Wiru õlu is a small Estonian craft beer brand with a professionally designed WordPress website launched in December 2023. The site focuses on presenting the brand's artisanal beer products with rich descriptive content targeting beer enthusiasts. The technical infrastructure is modern, leveraging WordPress CMS, jQuery, and popular plugins such as Contact Form 7 and All in One SEO, hosted likely by Zone Media OÜ in Estonia. The website is accessible, mobile-optimized, and SEO-friendly with structured data implemented. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site demonstrates a good baseline for a new small business but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

F

Fractory

fractory.co

63

Fractory is a UK-based manufacturing service platform specializing in scalable metal fabrication solutions including laser cutting, CNC machining, welding, and assembly. Established in 2000, the company targets engineering businesses requiring project and series manufacturing with 1-1 engineering support and flexible payment terms. Their market position is strengthened by certifications such as ISO 9001 and JOSCAR, and a professional online presence with multi-language support. Technically, the website is built on WordPress with modern performance optimizations including WP Rocket, and integrates advanced analytics tools like Google Tag Manager, FullStory, and RudderStack. Hosting is on AWS infrastructure, ensuring reliability and speed. The site is mobile-optimized and SEO-friendly, providing an excellent user experience. From a security perspective, the site enforces HTTPS and uses domain registration protections but lacks some advanced security headers and explicit incident response disclosures. Privacy compliance is good with a comprehensive privacy policy, though cookie consent mechanisms are missing. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Fractory presents a trustworthy and professional digital footprint with strong business credibility and technical maturity. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance their security posture and compliance.

L

Lamark

lamark.com

47

Lamark is a Dutch company specializing in exam logistics and management services, operating over 20 locations across the Netherlands. Their core offerings include a proprietary Exam Management System (EMS) that facilitates flexible booking, fraud prevention, and real-time reporting for exam centers and candidates. The company emphasizes a serene, minimalistic environment with certified hosts to ensure exam integrity. Technically, the website is built on WordPress using Oxygen Builder and WPML for multilingual support, with performance optimizations via Flying Press and cookie consent managed by CookieYes. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though no explicit security policy or incident response information is published. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a professional, trustworthy image with good content quality and technical implementation.

O

Orkla Eesti AS

kalev.eu

46

Kalev is a prominent Estonian confectionery brand operating under Orkla Eesti AS, offering a wide range of chocolates and sweets through retail stores and e-commerce. The website showcases the brand's rich history, product offerings, sustainability initiatives, and retail locations, targeting consumers in Estonia. Technically, the site is built on WordPress with modern plugins and technologies, optimized for SEO and mobile use. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though formal security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting a positive user experience and business credibility.

M

MAINOR

mainor.ee

45

MAINOR is an established Estonian corporate group with a 50-year history, operating primarily in environment, education, healthcare, and energy sectors. The company acts as a parent entity to multiple subsidiaries and is involved in significant development projects including Estonia's third largest economic city. The website is professionally designed, multilingual, and built on WordPress with modern frontend technologies. It includes SEO optimizations and a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is supported by a privacy policy and cookie consent, but lacks detailed data protection officer or incident response information. Overall, the site is trustworthy and credible, with room for improvement in security best practices and transparency.

S

Sandman Group

sandman.ee

55

Sandman Group is a well-established wholesale distributor of consumer electronics in the Baltic region, founded in 1992 and operating the largest warehouse for home appliances in the Baltics. The company serves a broad range of partners including distributors, retail chains, and independent resellers, offering logistics, retail partnerships, and after-sales services. Their market position is strong within Estonia and the wider Baltic states. Technically, the website is built on WordPress using modern themes and plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, but lacks published security policies and comprehensive privacy compliance. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy and security disclosures.

T

Thulema

thulema.ee

39

Thulema is a well-established Estonian company specializing in the manufacturing and retail of ergonomic and modern office and public furniture. The company positions itself as a leading brand in Estonia, emphasizing human-friendly materials and innovative Nordic design. Their website reflects a medium-sized business with a clear focus on sustainability, as evidenced by their published carbon footprint report. The target audience includes businesses and institutions seeking quality workplace solutions. Technically, the website is built on WordPress with modern plugins and tracking tools, offering a good user experience and SEO optimization. Security posture is solid with HTTPS and nonce usage, though lacking some advanced security headers and explicit security policies. Privacy compliance is basic, with no visible cookie consent mechanism or GDPR-specific disclosures. Overall, the website is professional, trustworthy, and aligned with the company's business claims.

A

AKU Collective OÜ

aku.co

40

AKU Collective OÜ is a small, established design studio based in Tallinn, Estonia, specializing in branding, strategy, and creative solutions across various media. Founded in 2012, the company serves clients in culture, government, music, and other sectors, with a strong portfolio and multiple design awards. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site is built on WordPress, uses modern JavaScript libraries like jQuery, and integrates Google Analytics and Tag Manager for tracking. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is privacy protected but legitimate, with no suspicious patterns.

E

Ellex Raidla Advokaadiburoo OU

raidlaellex.ee

58

Ellex is a leading Baltic law firm with over 30 years of experience and a team of 250+ professionals, offering a wide range of legal services across multiple sectors including banking, energy, technology, real estate, and healthcare. The firm operates regionally with offices in Estonia, Latvia, and Lithuania, and holds international recognition and awards. The website is built on WordPress with modern SEO and analytics tools, featuring a comprehensive cookie consent mechanism and multi-language support. Security posture is strong with HTTPS enforcement and domain transfer protection, though some security headers could be improved and no explicit security or incident response policies are published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

Proact IT Group AB

proact.ee

82

Proact IT Group AB is a leading European specialist in data management and IT services, focusing on cloud transformation, data center modernization, cybersecurity, and managed services. The company operates across 12 countries in Europe and North America, targeting medium to large enterprises seeking advanced IT infrastructure solutions. Their website reflects a mature digital presence with comprehensive service offerings and investor relations transparency. Technically, the site is built on WordPress with Elementor and Yoast SEO, employing modern web standards and good performance practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though there is room to improve transparency around vulnerability disclosure and incident response. Overall, Proact demonstrates a high level of professionalism and trustworthiness, consistent with its market position as a major IT services provider.

A

Andevis

andevis.ee

34

Andevis is an Estonian software development company specializing in integrated HR, payroll, and personnel management solutions, notably the Virosoft HR system and self-service portals. The company targets Estonian businesses seeking comprehensive personnel management software tailored to their organizational rules and accounting needs. The website reflects a professional and consistent brand presence with clear contact information and multiple service offerings. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Google reCAPTCHA v2 for form security. Performance and mobile optimization are adequate, though accessibility and SEO could be enhanced. Security posture is moderate with HTTPS enforced and anti-spam measures in place, but lacks important security headers and explicit privacy or cookie policies, indicating compliance gaps. The domain is well-established since 2010 with consistent WHOIS data, supporting business legitimacy. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

Evex.ge is the official website of Evex Clinics, a large healthcare network in Georgia established in 2014. The company provides a wide range of medical services including state healthcare programs, private insurance, and specialist consultations. The website is professionally designed, mobile-optimized, and offers clear navigation to services, doctors, clinics, and booking options. The business holds ISO 9001:2015 and TÜV AUSTRIA certifications, indicating a commitment to quality standards. Technically, the site uses modern JavaScript libraries and analytics tools, with HTTPS enabled and good SSL configuration. However, it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security headers are not detected, suggesting room for improvement in security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Bestnet Group

tikitreiler.com

48

Bestnet Group is a medium-sized manufacturing company based in Estonia, specializing in metal industry services including trailer development, subcontracted metalworking, and environmentally friendly surface coatings. The company positions itself as a reliable partner with over 30 years of experience and significant factory space in Scandinavia and the Baltics. Their website is professionally designed, mobile-optimized, and uses modern web technologies such as WordPress, Bootstrap, and Google Analytics for tracking. Structured data and SEO practices are well implemented, enhancing their digital presence. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with no cookie consent mechanism despite active analytics tracking. Overall, the website reflects a credible and professional business with room for improvement in privacy and security transparency.

Metaprofit is an established Estonian training and consulting company specializing in organizational development, personnel training, and psychological services. With over 20 years of experience and a client base exceeding 500 organizations, it offers a wide range of personalized training programs and consulting services targeting both public and private sectors. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, it is built on WordPress with modern plugins and integrates analytics tools such as Google Analytics and Yandex Metrika. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

T

Tallinna 21. Kool

21k.ee

41

Tallinna 21. Kool is a well-established educational institution in Estonia, providing primary and secondary education with a focus on modern, innovative learning approaches. The school has a strong market position supported by a long history since 1903 and multiple recognitions and awards. The website reflects a medium-sized institution targeting students, parents, and educators with comprehensive educational services and extracurricular activities. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and various JavaScript libraries, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and anonymized Google Analytics tracking, though it lacks some advanced security headers and formal security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

R

Reiting PR OÜ

reiting.ee

45

Reiting PR OÜ is an established Estonian company specializing in adult education, business training, and accounting services. Founded in 2010, it operates a professional website offering a wide range of practical courses, including entrepreneurship, personal work, logistics, IT, and language training. The company also provides reliable accounting services for businesses and housing associations, alongside psychological and addiction counseling. It holds a reputable market position as a partner of the Estonian Unemployment Insurance Fund (Töötukassa) and collaborates with several recognized local organizations. The website is well-structured, content-rich, and targets adult learners, entrepreneurs, and professionals seeking skill development.

A

ALPA Kids

alpa.ee

50

ALPA Kids is an educational technology company specializing in Estonian-language digital learning games for children aged 3 to 8. The company collaborates with educators and child development experts to create culturally relevant and curriculum-aligned content. With over 2 million downloads and usage in more than 500 educational institutions across 170 countries, ALPA Kids holds a strong market position in the niche of early childhood digital education. Their business model includes app distribution via major app stores and direct engagement with educational institutions. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and various SEO and analytics plugins, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-branded, supporting ALPA Kids' credibility in the education sector.

RAKETT OÜ is a small independent advertising and design agency specializing in the food industry, operating primarily in Northern Europe with offices in Tallinn and Helsinki. The company showcases a professional portfolio with notable clients, emphasizing creative advertising and design services. The website is built on WordPress using modern plugins and frameworks, indicating a moderate level of digital maturity. Security measures such as HTTPS and Google reCAPTCHA are implemented, and a cookie consent mechanism is active, though explicit privacy and terms of service pages are absent. WHOIS data is privacy protected, which is common for small agencies, and no suspicious indicators were found. Overall, the website presents a trustworthy and professional image with room for improvement in compliance documentation and security headers.

L

LenovoArvutid

lenovoarvutid.ee

43

LenovoArvutid is an Estonian e-commerce retailer specializing in business-class Lenovo ThinkPad laptops and related accessories. The website targets business customers and individual buyers seeking high-quality Lenovo laptops, offering products such as the ThinkPad X1 Carbon, T14, and P14 series. The business model focuses on online sales with additional services like leasing and installment payment options. The company has been operating since 2017 and maintains a consistent brand presence with a professional website design and clear navigation.

E

Emerante

emerante.ee

41

Emerante is a small Estonian retail and service company specializing in home interior furnishings, offering full services from project planning to installation and furniture maintenance. The website reflects a local market focus with a professional and consistent brand presence. Technically, the site is built on WordPress with WooCommerce, leveraging modern libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel. The site is mobile-optimized and uses SSL with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms pages. Overall, the site is trustworthy and functional but could improve transparency and security documentation.

B

Bait Partner OÜ

baitpartner.eu

41

Bait Partner OÜ is a specialized provider of innovative medical technology solutions aimed at improving healthcare workflows through tailored hardware and software products. The company targets healthcare institutions such as hospitals and laboratories primarily in Europe, positioning itself as a niche B2B technology partner. The website is built on WordPress using the Avada theme and incorporates modern plugins and SEO tools, reflecting a moderate to high level of digital maturity. Security posture is strong with HTTPS and security headers implemented, though privacy compliance could be improved by adding cookie consent mechanisms and dedicated security policies. Overall, the site presents a professional and trustworthy image with clear contact information and client testimonials.

P

PharmaEstica Manufacturing OÜ

pharmaestica.ee

33

PharmaEstica Manufacturing OÜ is an Estonian pharmaceutical manufacturing company specializing in full-cycle production and development of medicines and biologically active supplements. Established in 1997, the company has a solid market presence and offers key services including pharmaceutical development, manufacturing, quality assurance, and R&D. The website reflects a medium-sized enterprise with consistent branding and a professional online presence. Technically, the site is built on WordPress using the Avada theme and Gravity Forms, with basic bot protection via Google reCAPTCHA. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit privacy or cookie policies. Contact information is comprehensive and easily accessible, enhancing business credibility.

S

Startax Finland Oy

startax.net

55

Startax Finland Oy is a well-established Finnish company specializing in the wholesale import and distribution of electrical spare parts for passenger and commercial vehicles. Founded in 2000, it holds a leading market position in Finland and serves automotive wholesalers and repair garages. The website reflects a professional and consistent brand image, offering multilingual support and electronic catalog access for customers. The business model focuses on B2B wholesale distribution with additional services such as garage account registrations. Technically, the website employs a modern yet stable technology stack including Bootstrap 3, jQuery, and Magnific Popup, with Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and responsive design. Hosting appears to be Finnish-based, aligning with the company's geographic focus. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks DNSSEC and explicit security headers. The login form includes CSRF protection and basic input validation. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security headers and DNSSEC are recommended to enhance protection. Overall, the website and domain registration data indicate a legitimate and credible business with a solid digital presence. The security posture is adequate but could benefit from enhancements. Privacy compliance is basic but present, with a privacy policy and cookie consent implemented. Strategic recommendations include strengthening security headers, enabling DNSSEC, and expanding transparency around security policies and incident response.

T

Tehnoplast AS

tehnoplast.ee

33

Tehnoplast AS is a leading plastic packaging manufacturer based in Estonia, serving primarily the Baltic and Scandinavian markets. With over 30 years of industry experience, the company specializes in producing high-quality HDPE bottles, canisters, and caps for chemical and food industries. Their business model focuses on manufacturing and providing comprehensive packaging solutions, supported by certifications such as ISO 9001 and ISO 22000, which underline their commitment to quality and safety. The website reflects a professional and consistent brand image, targeting business customers in relevant industrial sectors. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO best practices. It uses Google Analytics and Tag Manager for tracking and is hosted by a reputable Estonian registrar. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate, and accessibility features are basic. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and published security policies. There is no evidence of a privacy or cookie policy, which is a compliance gap. No incident response or vulnerability disclosure information is provided, which limits transparency in security matters. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

Y

Yliopiston Apteekki

yliopistonapteekki.fi

63

Yliopiston Apteekki operates Finland's largest online pharmacy, offering prescription medicines, over-the-counter products, and cosmetics with a focus on fast delivery and customer service. The business model centers on e-commerce pharmacy retail, targeting Finnish consumers seeking convenient pharmaceutical services. The website demonstrates a mature digital infrastructure built on Magento 2, leveraging modern JavaScript frameworks and analytics tools such as Piwik PRO and Cookiebot for privacy compliance. Security posture is robust with HTTPS enforcement, comprehensive security headers, and secure cookie practices, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility, supporting a high level of user trust and engagement.

M

Miltton

miltton.fi

57

Miltton is a well-established Finnish consulting firm specializing in business, communication, and design services. Founded in 2007, it serves a broad range of clients seeking strategic and creative solutions to business challenges. The company maintains a professional and content-rich website with strong branding consistency and active engagement through blogs and social media channels. Technically, the site is built on WordPress with modern CSS frameworks and SEO optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though DNSSEC is not enabled and security policies are not explicitly published. Privacy compliance is addressed with a comprehensive privacy statement and cookie consent mechanisms, but no explicit terms of service or incident response policies are found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

O

Oribalt Group

oribalt.com

49

Oribalt Group is a regional pharmaceutical logistics and wholesale company operating in the Baltic states of Estonia, Latvia, and Lithuania. Established in 2017 following the acquisition of Baltic operations from Oriola Group, Oribalt continues a legacy dating back to the early 1990s. The company offers a broad range of services including logistics, wholesale, tenders, repackaging, clinical trials, marketing, and pharmacy operations, targeting businesses in the healthcare sector across the Baltics. The website reflects a professional and consistent brand presence with clear navigation and comprehensive contact information for multiple regional offices. Technically, the website employs modern web technologies such as Google Tag Manager, jQuery, and FontAwesome, with good mobile optimization and moderate performance. The site uses HTTPS with a valid SSL configuration and implements CSRF tokens for form security. Cookie consent is managed via an opt-in banner, indicating some level of privacy compliance. However, the absence of a dedicated privacy policy, terms of service, and security policy pages limits full compliance and transparency. From a security perspective, the site shows good practices like HTTPS enforcement and CSRF protection but lacks security headers and explicit incident response contacts. WHOIS data is transparent and consistent with the business claims, enhancing trustworthiness. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, Oribalt's digital presence is solid with room for improvement in privacy and security policy disclosures. Strategic enhancements in these areas would strengthen compliance posture and stakeholder trust.

K

Kingivabrik OÜ

kingivabrik.ee

41

Kingivabrik OÜ operates a professional e-commerce website specializing in promotional and corporate gifts, offering a wide range of branded merchandise including writing instruments, souvenirs, gift sets, drinkware, textiles, and sweets. The company targets businesses and organizations looking for customized logo products to enhance brand visibility and employee recognition. With over 13 years of experience and a strong client base exceeding 10,000 companies, Kingivabrik holds a solid position in the Estonian retail market for promotional goods. The website is built on a WordPress platform using WooCommerce, enhanced by the Avia Framework and various plugins for e-commerce functionality, multilingual support, and marketing integrations. The technical infrastructure includes modern tracking and analytics tools such as Google Analytics and Facebook Pixel, alongside a live chat widget for customer support. The site demonstrates good mobile optimization, SEO practices, and user experience design, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs Google reCaptcha on its contact form to mitigate spam. Cookie consent mechanisms are implemented in compliance with GDPR, and privacy policies are clearly accessible. However, the site lacks explicit security headers and published security or incident response policies, which could be enhanced to strengthen its security posture. Overall, Kingivabrik's website reflects a trustworthy and professional business with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and transparency around security policies would further enhance its risk profile and customer trust.

M

monitorTech

monitortech.co.nz

51

monitorTech is a small New Zealand-based company specializing in electronic repair services, computer upgrades, safety testing certifications, and authorized sales and warranty service for ViewSonic monitors and projectors. The company targets both consumers and commercial clients primarily in Christchurch and surrounding areas. The website is built on WordPress and uses common web technologies such as jQuery and Owl Carousel, with moderate performance and good mobile optimization. While the site is professional and well-branded, it lacks key compliance documents such as privacy and cookie policies, and does not implement security headers, which are important for enhancing security posture. The domain is well-established since 2009, indicating a stable business presence. Overall, the website provides clear contact information and relevant content but could improve in privacy compliance and security best practices.

S

Semetron AS

semetron.ee

48

Semetron AS is an established Estonian company specializing in the sale, maintenance, and repair of advanced medical technology and supplies. With over 30 years of experience and partnerships with more than 200 brands, Semetron serves healthcare providers and medical institutions primarily in Estonia and the Baltic region. Their business model focuses on B2B sales and service, supported by a professional website that highlights their product range and services. The company also operates an online store and partners with related entities such as mmh.ee for modular field hospital solutions. Technically, the website is built on WordPress with modern JavaScript libraries like Swiper.js and jQuery, and it employs Yoast SEO for search optimization and CookieYes for cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security-wise, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms, but lacks explicit security policies or incident response contacts. Overall, the website demonstrates a solid security posture with room for improvement in security headers and formal policies. The domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen trust and compliance.

Best Programs is a small, non-subsidized, and non-affiliated educational service provider specializing in budget internship and experiential learning programs worldwide, with a focus on language enhancement, edutravel, NGO, and work experience. The company targets students and young professionals seeking affordable international internship opportunities, primarily operating from Spain. The website is professionally designed using WordPress CMS and incorporates modern plugins for SEO, analytics, and user engagement. It offers clear navigation, mobile optimization, and comprehensive content relevant to its audience. Security posture is solid with HTTPS enabled and cookie consent implemented, though some security headers could be improved. Privacy policies and GDPR compliance are addressed adequately. WHOIS data is unavailable due to privacy protection, which is typical for small businesses. Overall, the site presents a trustworthy and professional front with moderate technical sophistication and good business credibility.

S

Servaali Oy

servaali.com

53

Servaali Oy is a well-established Finnish company specializing in the import and distribution of quality alcoholic and non-alcoholic beverages. Operating since 1995 and owned by Olvi Oyj, it holds a strong market position as one of Finland's leading alcohol importers. The website reflects this with clear branding, product categories, and a professional presentation targeting HoReCa professionals and consumers interested in premium drinks. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and jQuery, and it employs Cloudflare DNS and Google Analytics for performance and tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

S

Scania

scania.ee

73

Scania is a globally recognized enterprise specializing in the manufacturing and sales of trucks, buses, and related services, with a strong presence in Estonia. The website reflects a mature digital infrastructure built on Adobe Experience Manager, featuring professional design, clear navigation, and mobile optimization. Privacy compliance is well addressed through OneTrust cookie consent mechanisms and comprehensive privacy policies. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are not published. The absence of WHOIS data is likely due to privacy protection and does not detract from the site's legitimacy given the brand consistency and professional presentation. Overall, the site demonstrates a robust business and technical foundation with room for enhanced transparency in security disclosures.

H

Harju Elekter AS

harjuelekter.ee

49

Harju Elekter AS is a well-established Estonian industrial group specializing in the design, manufacture, and installation of electrical distribution equipment for energy, industrial, and infrastructure sectors. The company has a strong market position supported by multiple awards and contracts with major entities such as Eesti Energia and CERN. Their website reflects a mature digital presence built on WordPress with modern plugins and frameworks, offering good SEO and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness.

F

Feministeerium

feministeerium.ee

47

Feministeerium is an Estonian feminist media platform established in 2015, offering well-argued articles on politics, culture, and personal experiences. The website targets Estonian-speaking audiences interested in feminist perspectives and social issues. It operates a content publishing model supplemented by an online store and donation options, positioning itself as a niche media outlet in Estonia. Technically, the site is built on WordPress with WooCommerce, leveraging popular plugins like Yoast SEO for optimization. The infrastructure is hosted by Elkdata OÜ, a reputable Estonian hosting provider. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

A

Avatud Kool

avatudkool.ee

51

Avatud Kool is an innovative primary school based in Kalamaja, Estonia, established in 2017 with a focus on multicultural and project-based learning. The school aims to develop balanced and intelligent individuals and foster a more open and stronger society. It is recognized as a nominee for the Aasta Kool 2025 award and collaborates with the City of Tallinn to open a municipal school variant. The website reflects a small-sized educational institution with a clear mission and community engagement. Technically, the site is built on WordPress with SEO and analytics plugins, hosted by a local Estonian registrar and hosting provider. The site is mobile-optimized and well-structured, offering good user experience and content relevance. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies and consent mechanisms. Contact information is not explicitly provided in the analyzed content, which may affect user trust and compliance. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

M

Marimo Fashion

marimofashion.com

62

Marimo Fashion is a small, conscious luxury e-commerce brand specializing in women's ready-to-wear collections, bespoke garments, and styling services. The brand emphasizes sustainability, timeless style, and quality craftsmanship, targeting women seeking versatile and elegant fashion solutions. The website is built on Shopify using the Impulse theme, integrating multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Tidio Chat, reflecting a mature digital infrastructure. The site offers a good user experience with clear navigation and mobile optimization, though accessibility features are basic. From a security perspective, the website enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and security headers like Content Security Policy are missing, which could be improved. Privacy compliance is partial; while a terms and conditions page exists, no explicit cookie consent mechanism or privacy policy banner is detected, potentially exposing the business to GDPR compliance risks. Contact information is limited to forms and social media links, with no direct emails or phone numbers publicly listed. Overall, the website presents a professional and trustworthy front with moderate security and privacy posture. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence. The domain WHOIS data aligns well with the business claims, supporting legitimacy.

T

Tanel Teemusk

teemusk.com

47

The website teemusk.com represents a seasoned freelance iOS developer and technical team lead, Tanel Teemusk, showcasing his portfolio, resume, and contact information. The site targets businesses and clients seeking expert iOS development and technical leadership services. The business model is freelance consultancy with a strong emphasis on technical expertise and project leadership. The website is professionally designed using WordPress with Divi Builder and SEO optimizations, providing a good user experience and clear navigation. Social media presence is leveraged for contact and trust building. Technically, the site employs modern web technologies including HTTPS, Google Analytics, and Google reCAPTCHA for security and analytics. The CMS is WordPress, with plugins enhancing SEO and form functionality. Performance is moderate with good mobile optimization. However, some security best practices such as DNSSEC and security headers are missing, which could be improved. Security posture is solid with HTTPS and anti-bot measures, but lacks published security or privacy policies, which impacts privacy compliance. No direct company emails or phone numbers are disclosed, relying on contact forms and social media. The domain registration data is consistent with the business claims, showing a long-standing domain without privacy protection, supporting legitimacy. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

C

C&C EE OÜ (endine iDeal Group AS)

ideal.ee

51

iDeal (operated by C&C EE OÜ) is Estonia's largest reseller and service partner for Apple products, offering a comprehensive range of Apple devices and accessories through both e-commerce and physical stores. The company targets consumers, students, and business clients with services including device sales, repairs, trade-in programs, and financing options. The website demonstrates a mature digital infrastructure built on Magento with modern JavaScript frameworks and integrates multiple marketing and analytics tools. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

F

FullPowerBet

powerupenergytech.com

52

FullPowerBet is a small-scale online gaming content website focused on providing guides and strategies for various online games such as slots, sportsbook, casino, arcade, and toto. The website is built on WordPress and uses popular SEO plugins like Yoast and Rank Math, indicating an emphasis on search engine optimization. The technical infrastructure includes Cloudflare DNS services but lacks advanced security features such as DNSSEC and security headers. The website content is primarily in Indonesian and targets online gaming enthusiasts. However, there is a notable mismatch between the domain name 'powerupenergytech.com' and the website content, which may confuse users or reduce trust. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide any privacy, cookie, or terms of service policies. No contact information or incident response details are published, which limits transparency and user trust. The WHOIS data shows inconsistencies, including a suspicious future creation date and lack of registrant details, which further impacts the domain's legitimacy score. Overall, the website demonstrates moderate technical implementation and content quality but falls short in privacy compliance and business credibility. Strategic improvements in security policies, transparency, and domain registration information are recommended to enhance trust and compliance.

I

Infobuild Oy

infobuild.ee

57

Infobuild Oy is a Finnish technology company established in 1998, specializing in business intelligence, data integration, and software services. The company offers a range of solutions including TIBCO analytics, SAP services, DataGaps DataOps, and consulting. Their market position is that of a specialized, well-established service provider catering primarily to business clients seeking advanced data and integration solutions. The website reflects a professional and consistent brand image with clear service descriptions and a focus on business customers. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by plugins such as Yoast SEO and GDPR Cookie Compliance. Hosting is provided by Hostingpalvelu, and the site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some recommended security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The presence of a GDPR cookie consent mechanism indicates some level of privacy compliance, though the absence of a privacy policy page is a notable gap. No explicit security or incident response policies are published. Overall, the website and domain registration data are consistent and trustworthy, with a high legitimacy score. The main risks relate to privacy compliance and security header implementation. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

R

RangeForce

rangeforce.com

72

RangeForce is a cybersecurity training platform specializing in cloud-based cyber ranges and solo labs designed to empower security operations centers (SOCs) and threat hunters. The company positions itself as a provider of realistic, team-focused training environments that use real tools and networks to close technical and soft skills gaps. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting enterprise security teams. Technically, the site leverages HubSpot CMS, Google Analytics, and modern JavaScript libraries to deliver a responsive and engaging user experience. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie consent mechanisms and detailed privacy policies. However, the absence of WHOIS data and explicit security headers slightly reduces trustworthiness. Overall, RangeForce presents as a credible and professional cybersecurity training provider with room for improvement in transparency and security best practices.

F

FB Asset Management

fbassets.eu

46

FB Asset Management is a small Estonian investment fund management company established in 2013. The company manages investment funds licensed by the Estonian Financial Supervision Authority and targets professional and experienced investors with funds such as FB Opportunity Fund and FB Corporate Bond Fund. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. Google Analytics is used for visitor tracking, but no cookie consent mechanism or privacy policy is present, representing a compliance gap. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks security headers and incident response information. Overall, the website is professional and trustworthy but should improve privacy compliance and security transparency.

P

Please See

please-see.com

58

Please See is a creative branding and design agency focused on Indian brands, offering services such as brand strategy, packaging design, UI/UX design, and marketing. The company positions itself as a partner for both emerging and legacy brands seeking innovative brand transformation. The website is professionally designed using modern web technologies like Webflow, GSAP, and Lenis, hosted on Webflow's CDN, and includes multimedia content showcasing client projects. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information suggest a legitimate business presence. Security posture is generally good with HTTPS and secure forms, but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

P

Perfectline

perfectline.co

55

Perfectline is a small technology service provider specializing in full stack software development services targeted primarily at startup founders. Their expertise includes Ruby on Rails, blockchain, e-commerce, and modern frontend frameworks. The website presents a professional and consistent brand image with relevant content including portfolio projects and blog articles. Technically, the site is built on WordPress with modern JavaScript libraries and frameworks, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is fully redacted, which limits transparency but is likely justified for this business type. Overall, the site is functional and credible but could improve in compliance and security best practices.

HugeDomains operates as a reputable domain marketplace specializing in premium domain name sales, offering flexible payment plans and guarantees such as a 30-day money back policy. The website RunwayBpo.com is presented as a domain for sale with clear pricing and purchase options, targeting individuals and businesses seeking premium domains. The company has been established since 2005 and maintains a consistent brand presence with customer testimonials and trust signals. Technically, the website employs modern JavaScript libraries, Google Analytics, and Google reCAPTCHA Enterprise for security and analytics, with a cookie consent mechanism in place to comply with privacy regulations. Security posture is strong with HTTPS enforced and secure forms, though some security headers are not explicitly detected. WHOIS data for the hugedomains.com domain is unavailable, likely due to privacy protection or query limitations, but the overall business credibility remains high. Contact is available via phone and a contact form, though no direct company emails are published.