Security Directory

AS Eesti Pagar is a well-established Estonian bakery company founded in 2010, specializing in a wide range of bread, pastry, and frozen bakery products. The company serves retail consumers and export markets, positioning itself as a key player in the Estonian bakery sector. Their website reflects a professional and consistent brand image with clear product categorization and marketing efforts. Technically, the website is built on WordPress using modern frameworks and libraries such as Foundation, jQuery, and Slick Slider, with integrated marketing and analytics tools including Google Analytics, Facebook Pixel, and Mailchimp. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS with a cookie consent mechanism compliant with GDPR, but lacks explicit security policies and some security headers. WHOIS data confirms the domain's legitimacy and long-term presence, matching the business profile. Overall, the website demonstrates a mature digital presence with room for improvement in security transparency and incident response readiness.

O

OÜ MyFinancier

myf.ee

42

MyFinancier is a small Estonian company providing an intelligent personal finance assistant service that helps users analyze cash flows and gain detailed insights into asset distribution. The website is professionally designed using WordPress with Elementor and optimized for SEO and mobile devices. It targets Estonian individuals seeking financial management tools. The company maintains a consistent brand presence with active social media profiles on Facebook, LinkedIn, and YouTube. The domain is registered with Elkdata OÜ since 2018, aligning with the business age and location. Technically, the site uses modern web technologies, including Google Analytics and Facebook Pixel for analytics and marketing, with a compliant cookie consent mechanism.

P

Puidukoda OÜ

puidukoda.eu

49

Puidukoda OÜ is a medium-sized Estonian manufacturing company specializing in high-quality planed softwood timber products, founded in 1997 and part of the French Groupe Rose. The company operates modern automated production lines with a capacity exceeding 225,000 m³ annually and offers additional finishing services such as painting and impregnation. Their market position is strong in Europe, supported by a professional website with multilingual support and e-commerce capabilities. Technically, the website is built on WordPress with WooCommerce and employs modern SEO and privacy compliance tools, including GDPR cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the company demonstrates a professional digital presence aligned with its business operations and compliance requirements.

S

Servodata Group

servodata.net

59

Servodata Group is a well-established IT services and solutions provider operating in the Czech Republic for over three decades. The company specializes in delivering professional business IT solutions including Red Hat, Open Source, Microsoft Licensing, JBoss, and IT training. They have a strong market position supported by multiple industry awards and a professional online presence. Technically, the website is built on WordPress with a modern tech stack including jQuery and Google Analytics, offering good mobile optimization and SEO. Security posture is solid with HTTPS and reCAPTCHA usage, though lacking some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

V

Vanalinna Ehitus

vanalinnaehitus.ee

44

Vanalinna Ehitus is an established Estonian construction company specializing in building construction under main contracting agreements. Founded in 2010, the company emphasizes flexibility, client-centric approaches, and quality workmanship. Their website reflects a professional and modern digital presence with multilingual support for Estonian, Finnish, and Swedish audiences. The company showcases a portfolio of projects and maintains active social media channels, reinforcing their market position. Technically, the site is built on WordPress with modern libraries and optimizations, delivering good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with a privacy policy and cookie consent mechanism. Overall, the website supports the company's credibility and business goals effectively.

Q

QualityOne

rocketlab.ch

57

QualityOne is a specialized software testing company providing a wide range of testing services including functional, performance, security, usability, compatibility, and AI-powered test automation. The company targets businesses seeking professional QA and testing services to improve software quality and reduce development costs. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The presence of client logos such as Allianz and BMW Group suggests a reputable market position. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS data is a concern for domain legitimacy verification. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security transparency.

S

Silma laseroperatsioon | KSA Silmakeskus

ksa.ee

64

KSA Silmakeskus is a specialized healthcare provider in Estonia focusing on eye laser surgery and related eye care services. The website presents a professional image with clear branding and a focus on delivering information about laser eye operations to potential patients. The business appears established since 2010, targeting individuals seeking vision correction without glasses or contact lenses. The site uses WordPress CMS with the Avada theme and integrates modern SEO and marketing tools to enhance visibility and user engagement. Technically, the site is well-structured, mobile-optimized, and employs GDPR-compliant cookie consent mechanisms, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is good, leveraging Cookiebot for consent management and linking to a comprehensive privacy policy. However, explicit contact information, terms of service, and security policies are not prominently available, which could be enhanced to improve trust and compliance. Overall, the site is trustworthy, professional, and well-positioned in its niche, with recommendations to bolster security policies and public contact channels for incident response.

K

KaminaKeskus

kaminakeskus.ee

42

KaminaKeskus is an established Estonian retailer specializing in fireplaces, stoves, ovens, sauna stoves, chimneys, and boilers, operating since 1997. The company offers a wide selection of heating appliances with a focus on quality, competitive pricing, and customer convenience including free home delivery. Their market position is strong within Estonia, supported by multiple physical stores and an active online presence. Technically, the website is built on WordPress with the Avada theme, utilizing modern SEO and multilingual plugins, and integrates Google Analytics and Facebook SDK for tracking. Security posture is adequate with HTTPS and basic security headers, but lacks advanced headers like CSP and HSTS, and is missing privacy and cookie policies, which are critical for GDPR compliance. Overall, the site is professional and user-friendly but should improve privacy compliance and security policies to enhance trust and regulatory adherence.

M

MAS Holdings

masholdings.com

67

MAS Holdings is a leading innovative clothing manufacturer specializing in high-quality garments including sportswear, lingerie, sleepwear, swimwear, and medical apparel. Established in 2000, the company operates at an enterprise scale and targets businesses and brands seeking garment manufacturing solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google reCAPTCHA, and employs SEO best practices via Yoast SEO Premium. Security posture is solid with HTTPS enabled and reCAPTCHA protecting forms, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service on the main site. Overall, the website is trustworthy and professionally maintained, with room for improvement in security headers and privacy documentation.

M

MTÜ Eesti Sukeldujate Klubi

sukeldujad.ee

38

Eesti Sukeldujate Klubi is a small non-profit diving club based in Estonia, providing diving courses, trial dives, and organizing diving-related projects and events. The website serves as an informational portal for diving enthusiasts in Estonia, with a focus on community engagement and education. The club encourages support for its activities, such as purchasing a new bus, indicating active community involvement. Technically, the website is built on WordPress with common plugins like Events Manager, uses HTTPS, and includes social media integration with Facebook and Instagram. However, the site lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The absence of explicit contact emails and phone numbers on the homepage limits direct communication channels. Overall, the site is functional with basic content and navigation but could benefit from enhanced security and privacy features to improve trust and compliance.

A

Aurightec

eolane.ee

54

Aurightec is a professional electronics manufacturing service provider based in Estonia, offering industrial services to support business partners in delivering cutting-edge electronic products. The company holds multiple ISO certifications, indicating a strong commitment to quality and safety standards. Their website is well-designed, SEO-optimized, and compliant with GDPR and cookie regulations, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and security features such as Google reCAPTCHA and cookie consent management. Security posture is solid with HTTPS and bot protection, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, Aurightec presents a trustworthy and professional business front with clear contact information and social media presence.

O

OBO Bettermann Holding GmbH & Co. KG

obo-bettermann.com

59

OBO Bettermann Holding GmbH & Co. KG is a leading manufacturer specializing in installation systems for electrotechnical equipment in buildings and systems. The company maintains a strong market position with a broad international presence, supported by numerous regional partner websites tailored to local languages and markets. Their business model focuses on manufacturing and distributing high-quality electrotechnical installation products to professional and business customers worldwide. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and Google Tag Manager for analytics, alongside Usercentrics for GDPR-compliant consent management. The site demonstrates good mobile optimization and a professional design, although there is room for improvement in SEO and accessibility features. From a security perspective, the website enforces HTTPS and employs consent management for cookies, reflecting a solid security posture. However, the absence of explicit security headers and vulnerability disclosure policies suggests opportunities for enhancing security best practices. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence, though the lack of WHOIS data for the domain raises concerns about domain registration legitimacy. It is recommended to verify domain registration details to ensure full trustworthiness. Strategic improvements in security headers, accessibility, and SEO would further strengthen the site’s compliance and user experience.

A

As Balsnack International Holding

balsnack.ee

43

Balsnack is an established Estonian snack food company founded in 2010, specializing in unique snack products such as potato waffles, popcorn, and breakfast cereals. The company operates an e-commerce platform built on WordPress and WooCommerce, targeting both local consumers and export markets. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies including jQuery and Google APIs, hosted by Elkdata OÜ, a local Estonian registrar and hosting provider. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or security policies. No critical vulnerabilities or WAF blocks were detected, indicating a stable and accessible site. Overall, the website demonstrates a medium-sized retail business with a solid online presence but could improve privacy compliance and security transparency.

P

Pontos

pontos.fi

54

Pontos is a Finnish family-owned investment company focusing on selective investments both domestically and internationally. The website positions the company as an established player in the investment sector with a clear business model centered on strategic asset allocation. The digital presence is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Analytics, Hotjar, and Cookiebot for GDPR-compliant cookie management. The site demonstrates good technical maturity with HTTPS enforcement and a responsive design, although some advanced security headers are missing. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and a detailed privacy policy. However, explicit contact information and terms of service are not prominently available, which could be improved for better business credibility and user trust. Overall, the website reflects a professional and trustworthy investment firm with room for enhanced security and transparency features.

Z

Zlick Ltd

zlick.it

49

Zlick Ltd operates a specialized paywall software service designed for WordPress subscription sites, targeting content creators, bloggers, podcasters, and media corporations. The company positions itself as an easy-to-use, high-conversion paywall solution that requires minimal technical setup, emphasizing a 10-minute integration and no need for developers. Their business model is subscription and transaction-based, with integrated CRM and analytics tools to help customers optimize monetization. The website reflects a professional and consistent brand image with clear messaging and trust indicators such as customer earnings and testimonials. Technically, the website is built on WordPress using Elementor and Yoast SEO, leveraging modern JavaScript libraries and Google Analytics for tracking. The site demonstrates good SEO optimization, mobile responsiveness, and moderate performance. Security best practices are observed with HTTPS enforcement and security headers, though some privacy compliance aspects like cookie consent are lacking. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies and incident response information, which could be improved to enhance trust and compliance. The WHOIS data aligns well with the website's claims, showing consistent registration details and no privacy protection, supporting legitimacy. Overall, Zlick's website is a credible and professional platform with a strong business focus and good technical implementation. Enhancements in privacy compliance and security transparency would further strengthen its position and user trust.

F

Fineltec Oy

fineltec.fi

50

Fineltec Oy is a well-established electronics manufacturing services (EMS) provider founded in 2003, specializing in contract manufacturing and assembly of electronics, electro-mechanics, and wiring harnesses. The company serves diverse industries including energy, industrial automation, instrumentation, defence, safety, building automation, and medical devices, positioning itself as a preferred partner with strong quality and environmental certifications such as ISO 9001, ISO 14001, and ISO 13485. Their business model focuses on providing comprehensive manufacturing solutions from prototypes to life-cycle services, supported by a subsidiary production site in Estonia. Technically, the website is built on WordPress with modern frameworks like Bootstrap and enhanced by SEO and analytics tools including Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized, has good navigation, and employs cookie consent mechanisms to comply with privacy regulations. Performance is moderate with a good balance of content richness and technical implementation. From a security perspective, the site enforces HTTPS with a solid SSL configuration but lacks DNSSEC and some recommended security headers. No vulnerabilities or exposed sensitive data were detected. The company demonstrates adherence to recognized quality and environmental standards but does not publicly provide an incident response or vulnerability disclosure policy, which could be improved. Overall, Fineltec presents a credible and professional online presence with strong business legitimacy and moderate to good security posture. Strategic recommendations include enhancing DNS security, adding security headers, publishing incident response contacts, and formalizing vulnerability disclosure to further strengthen trust and compliance.

T

SEO Optimeerimine | Teie Ettevõte

taddy.ee

35

The website www.taddy.ee is a small Estonian SEO service provider specializing in both internal and external SEO optimization, competitor analysis, and targeted advertising. The business targets companies seeking to improve their search engine visibility and website traffic. The site presents clear service packages with pricing and showcases client examples, indicating a focused and professional approach. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Analytics, with a responsive design and good navigation. However, there are gaps in privacy compliance, as no privacy or cookie policies are published, and contact information is limited to a web form without direct emails or phone numbers. Security posture is moderate with HTTPS enabled but lacking explicit security headers and vulnerability disclosures. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices to improve trust and compliance.

B

Briti Eesti Kaubanduskoda

becc.ee

50

The British-Estonian Chamber of Commerce (Briti Eesti Kaubanduskoda) operates as a membership organization facilitating business connections and trade between Estonia and the United Kingdom. Established in 2010, it serves a niche market of businesses engaged in bilateral commerce, providing networking opportunities and member support. The website reflects a professional and consistent brand image with clear business focus and relevant content for its target audience. Technically, the website is built on WordPress with WooCommerce and BuddyPress plugins, leveraging modern web technologies such as jQuery, Google Analytics, and Google Tag Manager for analytics and user engagement tracking. The site is hosted under the domain registrar Zone Media OÜ, with a stable and long-standing domain registration since 2010. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection, alongside a cookie consent mechanism compliant with GDPR principles. However, explicit security headers are not detected, and there is a lack of published security policies or incident response contacts. Privacy and terms of service pages are missing, representing compliance gaps. Overall, the website presents a trustworthy and credible business presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

P

PZU Kindlustus

pzu.ee

67

PZU Kindlustus operates as an established insurance provider in Estonia, offering a range of personal insurance products including vehicle, travel, home, and accident insurance. The website reflects a professional presence with consistent branding and a focus on serving private individuals. The business is supported by a domain registered since 2012 under ALMIC OÜ, an Estonian registrar, indicating a stable and legitimate operation. Technically, the site is built on WordPress, leveraging modern tools such as Google Tag Manager, Cookiebot for cookie consent, and Cloudflare for DNS and security, demonstrating a mature digital infrastructure. Security measures include HTTPS enforcement and reCAPTCHA integration, though explicit security policies and headers could be enhanced. Privacy compliance is partially addressed via cookie consent, but the absence of a clear privacy policy and terms of service pages represents a compliance gap. Overall, the site is functional and trustworthy but would benefit from improved transparency and security documentation.

R

Respo Haagised AS

respo.ee

46

Respo Haagised AS is a well-established Estonian company founded in 1990, specializing in the manufacturing and sale of trailers, accessories, and spare parts. It holds a market leader position in Estonia and is a significant player in the Baltic and Scandinavian regions. The company operates a modern e-commerce platform with multi-language support and offers innovative services such as 24/7 self-service trailer sales points. The website reflects a mature digital infrastructure built on Magento, integrating advanced tracking and marketing tools like Google Analytics, Facebook Pixel, and Hotjar. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's business credibility and market presence.

G

GH Imaging

ghimaging.com

55

GH Imaging is a medium-sized manufacturing company specializing in large format digital printing products such as custom decals, vehicle wraps, banners, and rigid prints. The company operates under the Graphics House family umbrella, with multiple related subsidiaries supporting various product lines. The website is professionally designed using WordPress with Elementor and OceanWP theme, providing a good user experience and clear navigation. Contact information including phone number and physical address is prominently displayed, supporting business credibility. However, the absence of WHOIS data raises concerns about domain registration legitimacy. The website uses HTTPS and includes anti-spam and tracking technologies but lacks explicit privacy and cookie policies, which impacts privacy compliance scores.

M

Mipro Oy

mipro.fi

66

Mipro Oy is a Finnish specialist company focused on railway and industrial systems, with a history dating back to 1980. The company provides advanced safety and operational solutions for railway traffic, metro systems, water and energy supply, and industrial sectors. With headquarters in Mikkeli and offices in Espoo, Oulu, and Tallinn, Mipro serves a broad international client base including government agencies and utility companies. The website reflects a mature business with clear market positioning and a strong emphasis on safety and technology expertise. Technically, the site is built on WordPress with modern plugins and includes security measures such as HTTPS and hCaptcha for form protection. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Security posture is good but could be enhanced by adding security headers and publishing explicit security policies. Overall, the website and domain registration data indicate a legitimate, professional, and trustworthy business presence.

I

Islamic Azad University | Dubai Branch

iau.ae

49

Islamic Azad University Dubai Branch is an educational institution offering fourteen quality and cost-effective degree programs with English as the medium of instruction. The university aligns its curricula with nationally approved standards, targeting students in Dubai and the UAE region. The website is built on a WordPress platform using Elementor, indicating a modern and maintainable technical infrastructure. SEO practices are implemented, and the site is mobile optimized with good user experience. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and incident response information. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is professional and credible but would benefit from enhanced privacy and security disclosures.

R

RTT AS

rtt.ee

45

RTT AS is an established Estonian company specializing in retail technology and office supplies, with over 28 years of experience. The company offers a broad range of products including cash registers, printers, copiers, and consumables, alongside installation, maintenance, and training services. Their market position is that of a trusted local provider catering primarily to business customers in Estonia. The website reflects a mature e-commerce platform built on WordPress and WooCommerce, featuring multilingual support and a comprehensive product catalog. Technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and CookieYes for consent management. Security posture is solid with HTTPS enforced and reCAPTCHA integration, although explicit security policies and incident response contacts are not published. Privacy compliance is supported by a detailed cookie consent mechanism, but lacks a visible privacy policy page. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in formal policy disclosures and security header implementation.

C

Cryo Transport

cryo-transport.com

55

Cryo Transport is a specialized courier service focused on the transport of cryopreserved human biological materials such as sperm, eggs, embryos, and stem cells from clinics or cryobanks to IVF clinics. The company operates in a niche segment of medical logistics, serving fertility and reproductive medicine providers. The website is built on WordPress and employs modern digital tools including Cookiebot for cookie consent, Google Tag Manager for analytics, and Tawk.to for live chat support. The technical infrastructure is standard for small to medium-sized service providers, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is supported by cookie consent mechanisms and links to third-party privacy policies, but the site lacks an explicit privacy policy and terms of service pages. Overall, the website presents a professional and trustworthy image consistent with its business focus.

F

Fort Aero

fort.aero

51

Fort Aero is a specialized aviation service provider focused on corporate jet management, sales, acquisition, maintenance, and charter services. Established since 1997, the company positions itself as a trusted and experienced player in the business aviation sector, primarily serving corporate jet owners and operators. The website reflects a professional and consistent brand image with comprehensive service descriptions and multiple contact channels. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable due to privacy protection, which is common for this business type but slightly reduces trust. Overall, Fort Aero presents a credible and professional online presence with room for improvement in privacy and security transparency.

H

Hansabuss AS

hansabuss.ee

41

Hansabuss AS is an established Estonian transportation company specializing in bus services including charter, line routes, employee transport, school transport, and city tours. With over 30 years of experience, the company positions itself as a reliable and caring bus partner in Estonia and neighboring regions. The website reflects a mature digital presence with multilingual support and active social media engagement. Technically, the site is built on WordPress with modern plugins and SEO tools, offering a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and spam protection on forms, though explicit security policies and incident response contacts are not published. Privacy compliance is basic with cookie consent mechanisms and privacy policy presence, but lacks detailed GDPR documentation or data protection officer contact. Overall, the website and domain registration data indicate a legitimate and professional business with moderate to high trustworthiness.

G

GDPR Register

gdprregister.eu

53

GDPR Register is a specialized technology company providing GDPR compliance software tools designed to streamline privacy management for organizations. The company offers a SaaS platform that supports data mapping, records of processing activities, data breach registers, contract lifecycle management, and reporting tools. Their market position is that of an established GDPR compliance software provider with a focus on privacy teams and Data Protection Officers, primarily serving clients in the EU and UK regions. The website demonstrates a mature digital presence with multilingual support and integration of modern marketing and analytics technologies. Technically, the website is built on WordPress using Elementor, with a modern tech stack including jQuery, FontAwesome, and Klaviyo for marketing automation. The site is well-optimized for SEO and mobile responsiveness, with good performance and accessibility features. Security posture is strong, with HTTPS enforced and multiple security headers present. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly visible vulnerability disclosure policy and explicit incident response contact details. Overall, GDPR Register presents a professional, trustworthy, and secure online presence consistent with its business focus on data privacy compliance. The domain WHOIS data is privacy protected, which aligns with the nature of the business. The site integrates trusted client logos and provides comprehensive privacy and cookie policies, reinforcing its compliance credentials. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing incident response transparency, and improving accessibility compliance to further strengthen trust and security posture.

O

olgatessari

olgatessari.com

47

Olga Tessari is a small Brazilian business focused on personal development, psychology, and behavioral consulting. The website provides guidance and information aimed at helping individuals improve themselves and achieve happiness across various life areas. The business operates primarily through content dissemination and consulting services, targeting individuals interested in self-improvement. The site is built on WordPress using common plugins and themes, indicating a moderate level of digital maturity. The technical infrastructure supports good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. The absence of privacy and cookie policies indicates compliance gaps. WHOIS data is unavailable, which raises some trust concerns, but the website content and social media presence support legitimacy. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and improving incident response transparency.

The website bkry.org is a personal or small-scale blog site operated by an individual named Adam Saynuk. The site primarily serves as a platform for philosophical blog content with minimal additional business or commercial services. The domain is registered since 2011 under the organization 'studio_saynuk' in the US, consistent with the website owner’s identity. The site uses WordPress CMS with standard plugins and minimal customization. Technical infrastructure is basic but functional, with HTTPS enabled and moderate performance. However, the site lacks advanced security measures such as DNSSEC and security headers, and no privacy or cookie policies are present, indicating limited compliance with privacy regulations. Contact information is not explicitly provided, reducing business credibility and user trust.

Z

Zone Media OÜ

depile.ee

51

Depile.ee is an established Estonian e-commerce website specializing in beauty, health, and wellness products. The site offers a wide range of branded products including hair care, nail care, body care, massage items, and related accessories. The business targets both consumers and professionals in the beauty sector, primarily serving the Estonian market. The company behind the domain is Zone Media OÜ, with a domain age dating back to 2010, indicating a mature online presence. Technically, the website is built on Magento 2, leveraging modern web technologies such as RequireJS, jQuery, and FontAwesome. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site demonstrates good mobile optimization and SEO practices, with a clear navigation structure and responsive design. Performance is moderate, with room for optimization. From a security perspective, the website enforces HTTPS and includes several security headers, contributing to a good security posture. Cookie consent is implemented with a detailed mechanism allowing users to manage preferences, which aligns with GDPR requirements. However, the absence of a publicly accessible privacy policy and terms of service pages represents a compliance gap. No critical vulnerabilities or exposed sensitive data were detected. Overall, Depile.ee presents a professional and trustworthy e-commerce platform with solid technical foundations and security practices. To enhance compliance and trust, it is recommended to publish comprehensive privacy and terms of service documents and improve accessibility features. Regular security audits and updates to third-party scripts will further strengthen the site's security posture.

K

Kolmeks Group

kolmeks.fi

48

Kolmeks Group is a Finnish family-owned industrial company established in 1945, specializing in high-quality pump technology and contract manufacturing services. With operations spanning Finland, Estonia, China, and India, Kolmeks serves a diverse industrial clientele, focusing on durable products and long-term customer relationships. The website reflects a mature digital presence built on WordPress with WooCommerce and Yoast SEO, supporting both Finnish and English languages and providing comprehensive information about products, services, and corporate responsibility. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled, representing a minor security gap. No blocking or WAF challenges were detected, allowing full content accessibility.

B

Baltresto

baltresto.com

52

Baltresto is a specialized manufacturer and retailer of high-quality wooden and fiberglass hot tubs and outdoor saunas, operating primarily in the EU market since 2008. The company offers a broad product range including wood-fired hot tubs, fiberglass hot tubs, hot tub liners, and sauna accessories, targeting consumers and businesses seeking durable and affordable private garden spa solutions. Their market position is supported by direct manufacturing and a 15+ year history, with localized partner sites in multiple European countries enhancing regional reach. Technically, the website is built on a mature WordPress and WooCommerce platform, utilizing popular plugins such as WPBakery Page Builder and WP Rocket for performance optimization. The site integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, Yandex Metrika, and Trustpilot reviews, reflecting a moderate to advanced digital maturity. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized domain changes. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. No explicit security policies or incident response contacts are published, which could be enhanced to improve trust and compliance. Privacy compliance is basic with cookie consent implemented but no dedicated privacy policy page clearly identified. Overall, Baltresto presents a credible and professional online presence with solid business credibility and moderate security posture. Strategic improvements in security headers, DNSSEC, and privacy documentation would strengthen their security and compliance stance, supporting continued growth and customer trust.

The American Chamber of Commerce in Estonia (AmCham Estonia) is a well-established non-profit organization founded in 2010 that serves as a key platform for business professionals and investors from 25 countries to foster a competitive business climate in Estonia. The organization offers membership-based services including advocacy, networking, events, and business visibility. The website reflects a professional and consistent brand image with comprehensive content about membership, events, and partners. Technically, the site is built on WordPress with Elementor and uses modern web technologies, providing good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is partial, with a clear privacy policy but lacking cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

V

Valio

valio.fi

70

Valio is a leading Finnish dairy and food company recognized for its innovation in the food sector. The website serves as a comprehensive platform showcasing their products, recipes, and corporate information targeted primarily at Finnish consumers. The company maintains a strong market position as an innovative food producer with a large operational scale. Technically, the website is built on WordPress with modern SEO and tracking tools such as Yoast SEO and Google Tag Manager, complemented by a cookie consent mechanism via OneTrust and an AI-powered chatbot from Boost.ai. The site demonstrates good mobile optimization, accessibility, and performance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, although explicit security policies and incident response information are not publicly found. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business identity.

H

Hedgehog OÜ

hedgehog.ee

47

Hedgehog OÜ is a specialized Estonian electronics engineering bureau established in 2011, focusing on economical and reliable system design, prototyping, and manufacturing. Their expertise spans analog and digital circuit design, PCB layout, and embedded software development, serving startups, IT, and electronics companies as well as academic institutions. The website reflects a professional and consistent brand image with detailed team contacts and service descriptions. Technically, the site uses a CMS (Voog), jQuery, Google reCAPTCHA for form security, and Facebook SDK for social integration. While HTTPS is enabled and forms are protected with reCAPTCHA, the site lacks explicit privacy and cookie policies and security headers, which are areas for improvement. WHOIS data confirms domain legitimacy and consistency with the business history and location. Overall, the site is functional, trustworthy, and professionally presented but could enhance compliance and security posture.

E

Elkdata OÜ

remedyway.ee

45

Wiru Mill operates an e-commerce website specializing in organic and specialty food products such as specialty breads, organic olive oil, and buckwheat products. The business is relatively new, established in 2023, and targets consumers interested in healthy and organic food options. The website is built on WordPress with WooCommerce, leveraging common plugins and Google services for analytics and advertising. The technical infrastructure is standard for small to medium e-commerce sites, hosted by Elkdata OÜ, which is also the domain registrar, indicating consistency and legitimacy. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and explicit privacy or cookie policies. The absence of contact information and compliance documents reduces trust and privacy compliance scores.

G

GBC Team

gbc-team.com

40

GBC Team is a specialized technology consulting company focused on Salesforce CRM platform implementation, training, and maintenance. Established in 2016, the company positions itself as a certified Salesforce Consulting Partner, targeting local and international corporations seeking CRM integration and support services. Their website reflects a professional and consistent brand image with clear service offerings centered on Salesforce solutions. The technical infrastructure is based on Joomla! CMS with modern JavaScript libraries and Yandex Metrika analytics, indicating a moderate level of digital maturity. However, the site lacks comprehensive privacy and cookie policies, which impacts compliance with GDPR and related regulations. Security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC.

A

AS Eesti Raudtee

evr.ee

69

AS Eesti Raudtee is a state-owned enterprise responsible for the management, maintenance, and administration of Estonia's railway infrastructure. The company plays a critical role in ensuring smooth, efficient, and safe railway operations across the country. Their website reflects a professional and consistent brand image, targeting a broad audience including business clients, passengers, and potential employees. The site offers key services such as infrastructure information, project updates, job vacancies, and customer portals. Technically, the website is built on Joomla CMS with modern frontend technologies and integrates Google Analytics and Adform for analytics and advertising, all managed with a robust cookie consent mechanism. Security-wise, the site enforces HTTPS, uses bot protection cookies, and shows no signs of exposed sensitive data or vulnerabilities. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the website is well-structured, performant, and trustworthy, supporting the company's position as a key national transportation infrastructure operator.

O

Oy Flinkenberg Ab

flinkenberg.fi

59

Oy Flinkenberg Ab is a well-established Finnish company founded in 1921, serving industrial, commercial, and public sector clients primarily in Finland. The company specializes in steel products, energy solutions including batteries and solar energy, chemicals for various industries, and electronic components. Their website reflects a mature B2B business model with a focus on professional service and product offerings across multiple sectors. The company maintains a consistent brand presence and active engagement through social media channels.

L

LandCredit AS

landcredit.ee

44

LandCredit AS is an Estonian financial services company specializing in loans secured by agricultural and forestry land. Their website targets farmers, forestry businesses, and renewable energy project developers, offering flexible loan products with faster processing times than traditional banks. The company positions itself as a niche lender contributing to rural development in Estonia. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Hotjar, and CookieYes for GDPR compliance. The site is well-structured, mobile-optimized, and provides clear contact channels and customer testimonials, enhancing trust and user experience. Security posture is solid with HTTPS and secure form handling, though improvements are recommended in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a mature digital presence with good compliance and business credibility.

L

Leden Group

ojalagroup.com

55

Leden Group Oy is a Finnish manufacturing company specializing in metal-based contract manufacturing, steel service center operations, and production of cold roll formed steel profiles. The company is positioned as a leading partner in the Baltic region, offering comprehensive OEM services from design to logistics. It is part of the HANZA Group, which enhances its market presence and operational capabilities. The website reflects a medium-sized enterprise with a professional digital presence, leveraging WordPress and Elementor for content management and user experience. Technical infrastructure includes modern JavaScript libraries and consent management tools, indicating a mature digital strategy. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as DNSSEC and security headers could enhance resilience. Privacy compliance is supported by Usercentrics consent mechanisms, though explicit privacy and security policies could be more comprehensive. Overall, the website and business demonstrate high trustworthiness and professionalism, suitable for industrial clients seeking reliable manufacturing partnerships.

C

Casa de Baile

tantsukeskus.ee

40

Casa de Baile is Estonia's largest and most recognized salsa school based in Tallinn, offering salsa, bachata, kizomba, and other Latin American social dance courses primarily targeting beginners and dance enthusiasts. The website reflects a well-established business with a domain age since 2010, consistent with its market presence. The technical infrastructure uses modern web technologies including jQuery, Vue.js, Bootstrap, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and incident response information are missing. Overall, the website demonstrates a solid business credibility and compliance with GDPR through privacy and cookie policies. Strategic improvements in security headers and incident response readiness would enhance the security maturity further.

M

METUS

metus.com

42

METUS is a specialized provider of professional audio and video systems and solutions, targeting sectors such as broadcast, medical, military, corporate, education, government, and news agencies. The company offers a suite of products including media asset management, ingest and streaming solutions, and NDI stream management tools. The website reflects a niche B2B business model with a focus on media technology professionals. Technically, the site uses common JavaScript libraries and tracking tools, hosted on HostGator, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. The domain is long-established since 2002, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced security and privacy practices.

V

Via 3L

via3l.com

40

Via 3L is a Baltic-based third-party logistics company specializing in warehouse logistics, central warehousing, and international transportation services. Positioned as a leading logistics provider in the Baltic region, the company targets businesses requiring efficient supply chain and transport solutions. The website reflects a professional digital presence with clear branding and relevant service descriptions. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO readiness. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the website demonstrates moderate risk with room for enhanced compliance and security maturity.

C

ClanBeat

clanbeat.com

65

ClanBeat operates the website clanbeat.com, offering an app focused on supporting well-being and nurturing social and emotional learning through co-creation. The company targets educators, students, international schools, fitness communities, and lifelong learning communities. The business model centers on providing digital tools for well-being tracking, quality reflections, meaningful connections, and co-creation, positioning itself as a niche player in the education technology sector. The website is professionally designed with clear navigation and good content quality, supporting its market position as a specialized educational app provider. Technically, the site is built on WordPress, leveraging modern technologies such as NitroPack for performance optimization, Google Tag Manager for analytics, and Cloudflare for DNS services. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features. Security posture is adequate with HTTPS enabled and domain registration protections in place; however, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Business credibility is supported by consistent branding and structured data but is limited by the absence of direct contact information and security policies. Overall, the site scores moderately well but should address privacy and security policy gaps to enhance trust and compliance.

A

Advokaadibüroo LINDEBERG

lindeberg.legal

30

Advokaadibüroo LINDEBERG is a well-established Estonian law firm providing comprehensive legal services across major law domains including private law, public law, IT and intellectual property, and dispute resolution. The firm serves a diverse clientele including businesses, individuals, and the public sector, with a strong reputation in litigation and recognized partnerships such as with the Estonian E-commerce Association. Their website reflects a professional and consistent brand image, multilingual support, and a broad service offering. Technically, the site is built on WordPress with WooCommerce and enhanced by various plugins for SEO, analytics, and marketing, demonstrating a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy and cookie policies are present and GDPR compliant, with clear contact information and active use of analytics and marketing pixels under consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the firm's market position as a leading legal service provider in Estonia.

K

Kumera Corporation

kumera.com

33

Kumera Corporation is a well-established Finnish company specializing in manufacturing and marketing industrial and marine gearboxes, power transmission products, and engineering services. The company targets industrial sectors such as manufacturing, marine, energy, and heavy-duty industries, offering a broad range of products including custom-built gearboxes and propulsion systems. Their market position is supported by a long domain registration history and a consistent brand presence online. Technically, the website is built on WordPress with Elementor, leveraging modern plugins and a Cloudflare-based hosting infrastructure. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and Google reCAPTCHA in place, but could be improved by enabling DNSSEC and adding more HTTP security headers. Privacy compliance is partially addressed with a comprehensive cookie consent mechanism, but lacks a visible privacy policy or terms of service. Contact information is primarily via forms, with no explicit emails or phone numbers found. Overall, the website is professional and trustworthy, but could enhance transparency and security practices further.

Oshino Electronics Estonia OÜ is a well-established electronic contract manufacturing company based in Estonia, founded in 2010. It offers comprehensive services including product design, industrialization, manufacturing, and support, focusing on prototype assembly and small to medium volume production runs. The company is part of the larger Oshino Group, enhancing its market position and capabilities. The website reflects a professional and consistent brand image with good content quality and clear navigation, targeting industrial and automotive sectors. Technically, the site is built on WordPress with the Avada theme and uses modern technologies such as jQuery and Google reCAPTCHA, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, but lacks some security headers and formal policies, which are recommended for improvement. WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

T

TESRON EHITUS OÜ

tesron.ee

43

Tesron Ehitus OÜ is an Estonian construction company specializing in general contracting, project management, and design services. Founded in 2018, the company employs experienced construction professionals and emphasizes systematic, innovative, and thoughtful work. The website reflects a focused business model targeting local Estonian clients in the construction and real estate sectors, showcasing ongoing projects and company credentials. The digital presence is built on WordPress with common plugins, providing a functional and moderately optimized user experience. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and incident response transparency are recommended. Privacy compliance is partially met with a privacy policy but lacks cookie consent mechanisms. Overall, the website is professional and trustworthy, supporting the company's market position as a reliable construction service provider in Estonia.