Security Directory

S

Shokkin Group International

shokkin.org

45

Shokkin Group International is a European network of youth organizations focused on supporting innovative development in youth work and education. Established in 2015 and registered in Estonia, it serves as a collaborative platform for small to medium NGOs to foster personal and civic growth among young people. The website is built on WordPress and employs common plugins such as Yoast SEO and Jetpack, hosted on HostGator servers. It features good SEO practices and a cookie consent mechanism compliant with EU regulations. Security posture is adequate with HTTPS enabled and domain protection measures, though lacks advanced security headers and published security policies. Contact information is limited to email addresses, with no phone or physical address provided. WHOIS data shows privacy protection consistent with the organization's profile and domain age aligns with business history. Overall, the site is professional and functional but could improve in privacy compliance and security transparency.

B

Balti Logistika

baltilogistika.com

44

Balti Logistika is a well-established logistics company founded in 2005, providing freight forwarding and supply chain management services primarily in the Baltic countries of Estonia, Latvia, and Lithuania. The company offers a comprehensive range of services including air, ocean, rail, and road freight, as well as special services, VMI, and warehousing. Their market position is regional with a focus on serving businesses requiring logistics solutions in the Baltic region. The website supports multiple languages, indicating a broad target audience within these countries. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates several third-party analytics and advertising tools such as Google Analytics, Facebook Pixel, and Adform. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled and domain protection statuses set, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is weak due to the absence of privacy and cookie policies, and no direct contact emails or phone numbers are visible, relying solely on contact forms. Overall, the website is professional and credible but would benefit from enhanced security and privacy transparency.

S

SA Kutsekoda

kutsekoda.ee

45

SA Kutsekoda operates as an impartial cooperation platform in Estonia, focusing on identifying current and future skill and occupational needs. It coordinates the development of vocational standards, organizes vocational examinations, and analyzes labor market and skill requirements. The organization serves as a central body in Estonia's vocational education and labor market ecosystem, targeting employers, employees, and educational institutions. The website is professionally designed, multilingual, and integrates modern web technologies including WordPress, Yoast SEO, and Smart Slider 3, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, use of security plugins, and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is good with visible cookie consent and privacy policy in Estonian. Overall, the site demonstrates high trustworthiness and professionalism appropriate for a government-related entity.

T

Thermoarena OÜ

thermoarena.com

51

Thermoarena OÜ is a medium-sized Estonian manufacturing company specializing in high-quality thermally modified wood products such as decking, cladding, and lumber. The company emphasizes sustainability and eco-friendliness, positioning itself as a leader in the Estonian wood industry with multiple recognitions and a strong creditworthiness rating. Their target audience includes architects, designers, and environmentally conscious consumers seeking durable and natural wood alternatives. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using modern libraries such as jQuery, Bootstrap, and Slick Slider. It employs HTTPS with a good SSL configuration and uses CAPTCHA to secure its contact form. However, the site lacks DNSSEC and important security headers, which are recommended for enhanced security. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates a reasonable posture with HTTPS enforcement and domain transfer protection. However, the absence of privacy and cookie policies, security headers, and incident response information indicates compliance gaps and areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Thermoarena's website is credible and professional but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

C

Convertal OÜ

convertal.ee

46

Convertal OÜ is a well-established Estonian digital marketing agency specializing in a broad spectrum of services including SEO, social media marketing, digital advertising, analytics, and marketing training. The company positions itself as a strategic partner for businesses aiming to enhance their online visibility and achieve measurable business outcomes. Their market position is strong within Estonia and the Baltic region, supported by client testimonials and Google Partner certification. Technically, the website is built on WordPress with modern marketing and analytics integrations such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements in security headers and formal security policies are recommended. Overall, the website demonstrates professionalism, good user experience, and trustworthy business credibility.

Interlogistics is a small logistics and transportation company operating primarily in Estonia and Belgium, as indicated by the contact phone numbers and email domain. The website is built on Joomla! CMS and uses common web technologies such as jQuery and Bootstrap. The technical infrastructure appears basic but functional, hosted by Radicenter OÜ, which also acts as the domain registrar, indicating consistent ownership and control. The website content is minimal, focusing mainly on contact information and a login form, with no visible privacy, cookie, or terms of service policies. Security posture is moderate; HTTPS is implied but no advanced security headers or protections are evident. The login form lacks visible CSRF tokens or other modern security controls. Overall, the site is functional but lacks comprehensive security and privacy compliance features.

A

Associazione Joint

associazionejoint.org

48

Associazione Joint is a well-established Italian non-profit organization based in Milan, specializing in international youth mobility, volunteering, and cultural exchange programs. Founded in 2003, it has a strong market position as a leader in its sector, offering a variety of services including European Voluntary Service, international work camps, language courses, and support for other non-profit organizations. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at young people seeking international experiences. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Tag Manager, and various marketing and privacy plugins. The hosting is provided by Hosting Concepts B.V., with Cloudflare DNS but DNSSEC is not enabled. Security posture is good with HTTPS and domain transfer protections, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service on the main site. Overall, the site is trustworthy and professionally maintained but could improve transparency on privacy and security policies.

D

Datafruit

datafruit.ee

57

Datafruit is a small Estonian technology company specializing in accelerating business data evolution through analytics and optimization services. Their website reflects a professional B2B service provider targeting businesses interested in supply chain and cost dynamics analysis. The company has been established since 2014, with a consistent domain registration and hosting setup. Technically, the website is built on WordPress with Bootstrap and jQuery, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR-compliant cookie management. Security posture is good with HTTPS enabled and bot protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed through detailed cookie consent mechanisms and a linked cookie policy. However, explicit contact information and security policies are not present, which could be enhanced to improve trust and compliance. Overall, the website is functional, moderately performant, and professionally presented, with room for improvement in accessibility and security transparency.

M

Mistra-Autex AS

mistra.ee

62

Mistra-Autex AS is a well-established Estonian manufacturing company specializing in high-quality non-woven and tufted carpet products primarily for the automotive industry, with additional markets in furniture and footwear. The company has a strong market position supported by multiple industry certifications and awards, a medium-sized workforce, and a turnover of approximately 27 million Euros. Their website reflects a professional digital presence built on WordPress with Elementor, optimized for performance and mobile use. Security posture is solid with HTTPS, security headers, and reCAPTCHA on forms, though explicit security policies and cookie consent mechanisms are absent. Overall, the website and domain registration data indicate a legitimate and credible business with room for improvement in privacy compliance and security transparency.

S

ScanMarine Estonia OÜ

scanmarine.ee

46

ScanMarine Estonia OÜ is a small Estonian company specializing in the sale and rental of sea containers along with comprehensive transport and logistics services including maritime, air, road, and rail transport. Established in 2012, the company targets both business and consumer markets within Estonia and the broader EU region. Their website reflects a professional and consistent brand presence with multilingual support and e-commerce capabilities. Technically, the site is built on WordPress with WooCommerce and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and PixelYourSite, all managed with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Overall, the website demonstrates good digital maturity, compliance, and trustworthiness.

T

Tavrida Electric

tavrida.com

46

Tavrida Electric is a globally recognized manufacturer specializing in medium voltage electrical equipment, including vacuum circuit breakers and automatic circuit reclosers. The company operates in over 22 countries with nearly 3000 employees, positioning itself among the top three suppliers worldwide in its industry. Their website reflects a professional and well-structured digital presence, targeting utility companies and industrial clients requiring reliable power system components. Technically, the site leverages Bitrix CMS, jQuery, and Google Tag Manager, indicating a mature but somewhat traditional technology stack. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks comprehensive security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of public WHOIS data slightly reduces trust but is not uncommon for large international companies employing privacy protection. Overall, the website is functional, professional, and credible, with moderate room for enhancement in privacy compliance and security posture.

1

1Home

1home.eu

41

1Home is a regional student housing provider focusing on accommodation for international students and interns in Baltic states and Poland. The company offers freshly renovated shared apartments with services such as weekly housekeeping, fixed utilities, and high-speed Wi-Fi. The website is built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity. It integrates common analytics and marketing tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, but lacks comprehensive security headers and explicit GDPR cookie consent mechanisms. Overall, the website presents a professional and trustworthy image but could improve privacy compliance and security best practices.

M

Motieka & Audzevičius

tark.legal

50

Advokaadibüroo TARK OÜ is a well-established full-service law firm based in Estonia, operating since 1991. The firm offers a broad range of legal services including corporate law, mergers and acquisitions, banking and finance, competition regulation, dispute resolution, energy, real estate, IT, labor, and tax law. Positioned as a leader in the Baltic legal market, TARK has received multiple industry recognitions and maintains a strong client testimonial presence. Their target audience primarily consists of businesses and professionals requiring comprehensive legal support in Estonia and the Baltic region. Technically, the website is built on WordPress using modern plugins such as Yoast SEO Premium and WPBakery Page Builder. It integrates multiple tracking and analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good SEO practices, though performance is moderate. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, but lack advanced security headers and explicit security policies. The security posture is solid but could be improved by implementing additional HTTP security headers and publishing incident response and security policies. Privacy compliance is supported by a cookie consent mechanism and a privacy policy page, though terms of service and vulnerability disclosure information are absent. WHOIS data confirms domain legitimacy and consistency with the business location and history. Overall, the website reflects a professional and credible legal services provider with a mature digital presence. Strategic improvements in security policies and technical hardening would enhance trust and compliance further.

E

eHost OÜ

royal.ee

40

Aktiva.ee is an Estonian business information portal focused on supporting entrepreneurs at various stages, including startups, operating companies, and those expanding internationally. The site offers practical guidance, resources, and educational content related to business planning, management, marketing, accounting, legal frameworks, and international trade. The portal positions itself as a comprehensive guide for business success in Estonia and beyond. Technically, the website is built on WordPress, leveraging common plugins such as Google Analytics and Google reCAPTCHA for security and tracking. Hosting and DNS services are provided by eHost OÜ and Cloudflare respectively, ensuring reliable infrastructure. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit HTTP security headers and does not provide visible privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency and readiness. Overall, the website is a well-structured, content-rich portal with moderate technical maturity and security posture. To enhance trust and compliance, it should implement comprehensive privacy and cookie policies, improve security headers, and provide clear contact and incident response information.

H

Hookah

hekkpipe.com

56

Hekkpipe.com appears to be a WordPress-based website branded as 'Hookah' with minimal content and limited business information. The domain is well-established since 2013 and uses Cloudflare DNS services, indicating a moderate level of technical infrastructure. The website employs standard web technologies including Bootstrap and jQuery, but lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled and domain-level protections, but the absence of DNSSEC and security headers suggests room for improvement. Overall, the site shows basic digital maturity but requires enhancements in privacy compliance, security best practices, and business transparency to improve trustworthiness and professional standing.

S

SDDNL

sdd.nl

69

SDDNL is a specialized distributor of high-quality print finishing machinery and materials based in the Netherlands. The company offers a range of products including binders, laminators, cutters, creasers, and folders, targeting professional print finishing businesses. Their website reflects a strong market position with partnerships with well-known brands and a focus on quality and technical innovation. The digital infrastructure is built on WordPress with WooCommerce, enhanced by performance and GDPR compliance plugins, indicating a mature and professional online presence. Security posture is solid with HTTPS, security headers, and spam protection, though there is room for improvement in publishing dedicated security policies and incident response information. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, supporting the company’s credibility and trustworthiness in its niche market.

E

Exove

exove.com

67

Exove is a technology company specializing in creating future-friendly digital solutions aimed at helping businesses grow. Their website presents a professional and modern digital presence, leveraging WordPress CMS and integrating multiple third-party marketing and analytics tools such as Google Analytics, HubSpot, and Leadfeeder. The company demonstrates compliance with GDPR through a comprehensive cookie consent mechanism and detailed cookie policy. Technically, the site is hosted behind Cloudflare, ensuring good SSL configuration and performance. Security headers are partially inferred but could be improved with explicit implementation. No blocking or WAF challenges were detected, indicating open accessibility. However, the absence of WHOIS data for the domain www.exove.com raises concerns about domain registration transparency, which impacts trustworthiness despite the professional website content.

M

Miterassa

miterassa.ee

56

Miterassa operates a professional e-commerce platform specializing in consumer electronics, including audio, video, and smart devices, targeting customers primarily in Estonia. The website presents a well-structured catalog with clear navigation and a consistent brand presence. The business model focuses on retail sales supported by extended warranty and installation services, positioning Miterassa as a reputable regional player in the electronics retail market. Technically, the website is built on Magento 2, leveraging modern JavaScript frameworks such as RequireJS and jQuery, and integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for consent management. The site is mobile-optimized and employs HTTPS with appropriate security headers, indicating a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as enforcing HTTPS, implementing cookie consent, and using security headers. However, it lacks publicly available security policies and incident response contacts, which are recommended for enhanced transparency and compliance. No critical vulnerabilities or suspicious indicators were detected. Overall, the website is professional, secure, and compliant with privacy regulations, reflecting a trustworthy business. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility features, and maintaining regular audits of third-party scripts to sustain security posture.

F

FOB Solutions OÜ

fob-solutions.com

50

FOB Solutions OÜ is a technology service provider specializing in software development, quality assurance, digitized business operations, and Elastic consulting services. The company targets businesses seeking expert technology solutions and positions itself as a niche provider with a focus on Elastic technologies and digitized operations. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern SEO and analytics tools integrated. The presence of a comprehensive cookie consent mechanism and privacy policy indicates good privacy compliance. Security posture is strong with HTTPS enforced and no exposed sensitive data, though additional security headers and policies could enhance protection. The absence of WHOIS data is a concern for domain legitimacy but is offset by the professional website and active social media presence. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security documentation.

ج

جيديا للتقنية

geidea.net

62

جيديا للتقنية هي شركة رائدة في مجال حلول الدفع الإلكتروني ونقاط البيع في المملكة العربية السعودية، تقدم خدمات متكاملة تشمل أجهزة نقاط البيع، المدفوعات عبر الإنترنت، وحلول نقاط البيع للمطاعم. تتمتع الشركة بحصة سوقية كبيرة في السعودية وتقدم خدماتها لأكثر من 150,000 تاجر مع أكثر من 5 ملايين عملية مالية يومياً. الموقع الإلكتروني يعكس تركيز الشركة على السوق السعودي ويقدم محتوى غني ومتنوع باللغة العربية مع دعم للغة الإنجليزية. من الناحية التقنية، يستخدم الموقع تقنيات حديثة مثل Bootstrap وjQuery مع تكامل أدوات تتبع وتحليل مثل Google Tag Manager وFacebook Pixel. من حيث الأمن، الموقع يستخدم HTTPS بشكل كامل ويطبق ممارسات أمان أساسية، لكنه يفتقر إلى بعض السياسات الأمنية المنشورة مثل سياسة الأمان أو سياسة الحوادث. لا توجد سياسات خصوصية أو ملفات تعريف ارتباط واضحة، مما يشير إلى فجوات في الامتثال للخصوصية. من ناحية أخرى، وجود شهادات معتمدة وترخيص من البنك المركزي السعودي يعزز من مصداقية الشركة. التقييم العام للموقع جيد مع نقاط قوة في المحتوى والموثوقية، لكن هناك مجال لتحسين الامتثال للخصوصية وتعزيز ممارسات الأمان التقنية. التوصيات الاستراتيجية تشمل نشر سياسات الخصوصية والكوكيز، تحسين رؤوس الأمان، وتوفير قنوات اتصال للحوادث الأمنية.

H

Hoob OÜ

hoob.ee

43

Hoob OÜ is an Estonian company specializing in factory automation and machine building, serving industries such as automotive, electronics, telecom, and medical sectors. Established in 2015, it offers turnkey automation solutions and subcontracting services including engineering and manufacturing. The company maintains a strong market position with reputable clients like ABB and Ericsson, supported by ISO certifications and European funding. Technically, the website is built on WordPress with modern libraries and plugins, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and anti-spam measures, though lacking some advanced security headers and explicit privacy policies. Overall, the site is professional and trustworthy, but could improve privacy compliance and security transparency.

A

AS Arstikeskus Confido

ortopeediaarstid.ee

43

Ortopeediaarstid, now part of AS Arstikeskus Confido since April 2024, is a well-established orthopedic healthcare provider in Estonia offering a comprehensive range of modern orthopedic treatments including arthroscopy, endoprosthetics, physiotherapy, and sports medicine. The website targets patients seeking specialized orthopedic care and provides detailed service descriptions, appointment booking options, and patient information in multiple languages. The business is positioned as a reputable healthcare provider with a medium-sized operation and a clear focus on quality patient care. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Google Analytics, and reCAPTCHA v3 for form security. The site is mobile-optimized, SEO-friendly, and uses structured data for enhanced search engine visibility. Hosting is managed by Zone Media OÜ, a known Estonian hosting provider. Performance is moderate with good accessibility and navigation. From a security perspective, the site enforces HTTPS, integrates reCAPTCHA to protect forms, and uses Wordfence security plugin scripts. However, it lacks explicit security headers and published security policies or incident response contacts. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and a clear cookie consent mechanism. Contact information is comprehensive and professionally presented. Overall, the website demonstrates a solid security posture and business credibility with room for improvement in security policy transparency and accessibility. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance.

A

APTEK

aptek.ee

41

APTEK is a small hospitality business operating as a cocktail and shot bar located in Pärnu, Estonia. The website presents a well-structured digital presence with event promotions, a cocktail menu, and club membership offerings targeting adults interested in nightlife. The business appears established with a domain age of over 12 years, consistent WHOIS data, and active social media engagement. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Owl Carousel, providing a moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, and the contact form is disabled, which limits user interaction and compliance with data protection regulations. Security headers are not evident, and while HTTPS is used, further security hardening is recommended. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices.

H

Heidi Park Kondiiter

kondiiter.ee

44

Heidi Park Kondiiter is a small Estonian bakery business operating since 2010, specializing in retail and custom cakes including gluten-free options. The website is built on WordPress with WooCommerce, providing an e-commerce platform and rich content including product descriptions and Instagram integration. The business has announced permanent closure effective June 13, 2025. Technically, the site uses modern web technologies and maintains good SSL security, but lacks explicit privacy and security policies. Contact information is clearly presented, enhancing business credibility. Security posture is adequate but could be improved with additional headers and published policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

O

OÜ Teadusteater

teadusteater.ee

41

OÜ Teadusteater is an Estonian small-sized company specializing in personalized scientific performances and workshops for various events such as children's birthdays, corporate parties, schools, and festivals. The company leverages a team of enthusiastic science popularizers with extensive experience in notable Estonian science outreach projects. Their market position is strong within the educational and entertainment niche in Estonia, supported by partnerships with reputable institutions like Tartu University and Teaduskeskus AHHAA. Technically, the website is built on WordPress with a moderate performance profile and good mobile optimization, though it uses outdated software versions that pose security risks. Security posture is adequate with HTTPS enforced but lacks modern security headers and up-to-date software. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but requires improvements in security and compliance to reduce risk and enhance user trust.

V

Vecta Design

vectadesign.com

56

Vecta Design is a specialized interior solutions company focusing on stretch ceilings, lighting, acoustic, and smart air systems. Established in 2009, it positions itself as a market leader offering high-quality products and installation services to residential and commercial clients. The website reflects a professional and modern digital presence built on WordPress with WooCommerce, showcasing products and projects effectively. Technically, the site uses modern plugins and frameworks, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and Cloudflare DNS, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security practices.

C

Compensa Vienna Insurance Group, ADB Eesti filiaal

seesam.ee

36

Seesam.ee is the online presence of Compensa Vienna Insurance Group, ADB Eesti filiaal, a well-established insurance provider in Estonia with over 30 years of market experience. The company offers a broad range of insurance products including motor, casco, travel, home, accident, and life insurance, targeting both private individuals and business clients. The website is professionally designed, mobile-optimized, and provides clear navigation and multiple contact channels, supporting a user-friendly customer experience. The business is part of the Vienna Insurance Group, enhancing its market credibility and trustworthiness. Technically, the website employs modern web technologies including JavaScript, jQuery, and Google Tag Manager, with Cloudflare DNS and likely CDN services ensuring reliable hosting and performance. The site implements GDPR-compliant cookie consent mechanisms and uses Google Analytics for user behavior tracking. Accessibility and SEO optimizations are well addressed, contributing to good overall digital maturity. From a security perspective, the site enforces HTTPS and integrates GDPR-aware analytics scripts. However, it lacks explicit security policy documentation and incident response contact information, which are recommended for enhanced transparency and preparedness. No critical vulnerabilities or exposed sensitive data were detected in the content. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, seesam.ee presents a trustworthy, professional, and user-centric insurance service platform with solid technical and security foundations. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture and customer confidence.

S

SSH - Master Planning, Infrastructure, Building Design and Construction Supervision.

sshic.com

43

SSH is a well-established international architecture and engineering consultancy firm with a strong presence across the GCC and Middle East & Africa regions. Founded in 1961, the company offers a comprehensive range of services including building design, construction supervision, infrastructure design, and master planning. The firm is recognized as a top player in its industry, ranked 95 globally by ENR in 2024 and among the top 10 fee-earning architects in the Middle East. Their target audience includes clients seeking high-quality architectural and engineering consultancy services in the MEA region. The website reflects a professional and consistent brand image with good content quality and clear navigation.

L

Leden Group

favor.ee

55

Leden Group Oy is a Finnish manufacturing company specializing in metal-based contract manufacturing, steel service center operations, and cold roll formed steel profiles. The company is positioned as a leading partner in the Baltic region and is part of the HANZA Group, which supports its growth and market presence. The website reflects a professional and modern digital presence built on WordPress and Elementor, with integrated consent management and analytics tools. Security posture is solid with HTTPS, domain locking, and consent mechanisms, though some security policy documentation and incident response contacts are missing. Overall, the website is trustworthy and well-structured, supporting the company's B2B manufacturing business model effectively.

S

SchooLinks

schoolinks.com

68

SchooLinks is a specialized education technology company providing a comprehensive SaaS platform designed to support K-12 schools and districts in college and career readiness planning. The platform offers tools for student planning, compliance reporting, family engagement, and industry partnerships, positioning itself as a modern solution for educational institutions. The website demonstrates a strong market presence with multiple customer testimonials and state-specific resources, indicating a well-established user base. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, HubSpot, Clearbit, and other marketing and analytics tools. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security practices are robust, with HTTPS enforced, security headers present, and published policies including vulnerability disclosure and SOC certification, indicating a commitment to data protection and compliance. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the professional nature of the website and business mitigates immediate trust issues. Overall, SchooLinks presents a credible, professional, and secure online presence suitable for its target market. Continued monitoring of domain registration details and enhancement of incident response contact information would further strengthen trust and security posture.

G

Geenius Meedia

geenius.ee

34

Geenius.ee is a well-established Estonian media platform operated by Geenius Meedia, focusing on delivering fact-based, understandable, and useful content across various domains including technology, automotive, finance, health, and lifestyle. The platform operates multiple niche subdomains and offers services such as news articles, podcasts, e-commerce, and subscription content, positioning itself as a leading media outlet in Estonia. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern advertising and analytics tools such as Google Tag Manager and Facebook Pixel, and is hosted behind Cloudflare DNS for performance and security benefits. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and vulnerability disclosure policies are absent. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website demonstrates good digital maturity, professional content quality, and a trustworthy online presence.

C

Codelight

codelight.eu

43

Codelight is a small Estonian technology company specializing in custom WordPress websites, WooCommerce stores, and bespoke web applications. Their market position is that of a quality-focused service provider emphasizing client collaboration and tailored digital solutions. The website demonstrates a mature technical infrastructure built on WordPress with modern integrations such as Google reCAPTCHA v3 and Gravity Forms for secure contact form handling. The site is well-designed, mobile-optimized, and accessible, reflecting a high level of digital maturity. Security posture is good with HTTPS enforced and anti-spam measures, but lacks published security policies and security headers, which are recommended for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy with clear business information and contact channels.

C

Clínica Dermaline

dermaline.es

48

Clínica Dermaline is a well-established medical aesthetic clinic based in Madrid, Spain, operating since 2008. The website presents a professional and comprehensive overview of their services, including laser treatments, varicose veins care, and facial and body aesthetic procedures. The clinic targets individuals seeking quality medical aesthetic solutions and has built a strong local reputation with over 10,000 patients and media presence. Technically, the site is built on WordPress using common plugins and libraries, with moderate performance and good mobile optimization. Security is generally good with HTTPS enforced and no exposed sensitive data, but there are areas for improvement such as updating outdated JavaScript libraries and implementing stronger security headers. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service policies found. Overall, the site is trustworthy and professional but should address compliance and security best practices to enhance user trust and regulatory adherence.

Refit & Maintenance OÜ is a small Estonian company specializing in marine vessel refit and maintenance services, with over 15 years of experience providing interior upgrades and turnkey solutions for vessels worldwide. The website presents basic business information and a clear description of services but lacks comprehensive contact details and formal policies. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and Bootstrap 5, hosted on Radicenter infrastructure. The site is mobile-optimized with moderate performance but limited SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional but basic, with room for improvement in security, privacy, and content completeness.

K

Kiilto Oy

kiiltoclean.fi

76

Kiilto Oy is a well-established Finnish manufacturing company specializing in adhesives, cleaning, and hygiene solutions primarily for professional and industrial customers. With a history dating back to 1919, Kiilto holds a strong market position in the Nordic region and offers a broad portfolio of sustainable and innovative products. The website reflects a professional B2B business model targeting sectors such as construction, healthcare, and food industries. Technically, the site is built on WordPress with integration of modern marketing and analytics tools like HubSpot and Google Tag Manager, ensuring good digital maturity and user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no detected vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website demonstrates high business credibility and compliance with privacy regulations including GDPR.

M

MSMedia

msmedia.ee

45

MSMedia is a small Estonian communication consultancy specializing in strategic communication, media relations, crisis communication, marketing, social-political communication, and training services. Founded in 2012, the company offers a communication manager rental service alongside other consulting and content creation offerings. The website reflects a professional and consistent brand presence with clear service descriptions and active social media engagement. Technically, the site is built on WordPress with modern plugins such as Revolution Slider and Yoast SEO, and it employs Google Analytics for visitor tracking. Cookie consent is implemented via CookieYes, supporting GDPR compliance, although no explicit privacy policy or terms of service pages were found. Security posture is good with HTTPS enabled, but security headers are not explicitly detected. WHOIS data confirms domain legitimacy and consistency with the business claims.

I

INTELLIGENTNE GRUPP OÜ

intelligentne.ee

42

Intelligentne Grupp OÜ is a well-established Estonian company specializing in professional development services including coaching, mentoring, and training. Founded in 2010, the company targets leaders, managers, and specialists seeking to enhance their skills and organizational performance. Their business model integrates in-person and online training programs, coaching services, and an e-commerce platform offering related books and materials. The company maintains a strong market position in Estonia's education sector with recognized certifications and active social media presence. Technically, the website is built on WordPress with WooCommerce and leverages modern frameworks like Bootstrap and jQuery. It integrates advanced marketing and analytics tools such as Google Analytics, Google Ads, and Meta Pixel for comprehensive user tracking and retargeting. The site demonstrates good mobile optimization, SEO practices, and moderate performance, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS and employs secure forms with validation. While explicit security headers are not fully detected, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies, GDPR adherence, and consent mechanisms in place. Contact information is transparent and easily accessible, enhancing trustworthiness. Overall, Intelligentne Grupp OÜ presents a professional, secure, and user-friendly online presence with a high level of business credibility. Strategic improvements in security headers and accessibility could further enhance their posture. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis.

Avor Kindlustusmaakler OÜ is an established insurance brokerage firm based in Estonia, founded in 2010. The company specializes in providing insurance brokerage services to both private individuals and corporate clients, focusing on risk reduction, insurance planning, contract management, and claims assistance. Their market position is that of a trusted intermediary registered with the Estonian financial supervisory authority, offering tailored insurance solutions. The website is professionally designed, primarily in Finnish, and targets the Estonian market with clear navigation and relevant content. Technically, the site uses modern web technologies including Alpine.js, jQuery, and Google Analytics, hosted on the Voog CMS platform, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response disclosures. Overall, the website reflects a credible and professional business with appropriate digital maturity and compliance awareness.

R

Reiven Solutions

kannukas.ee

58

Kännukas is an Estonian-based retailer specializing in mobile phones and related accessories, operating both an online e-commerce platform and a physical sales salon in Tallinn. The company offers a wide range of products including popular brands such as Google Pixel, HTC, and Cat phones, along with protective accessories like PanzerGlass and branded cases. Their market position is that of a local, trusted retailer with a substantial product inventory and a focus on consumer electronics. Technically, the website is built on the Click-and-Run CMS platform and leverages modern JavaScript libraries such as jQuery, Select2, FlexSlider, FancyBox, and Klevu Search for enhanced user experience and search capabilities. The site is mobile-optimized and demonstrates good SEO practices with proper meta tags and structured navigation. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, but lacks a formal published security policy and incident response contacts. The WHOIS data confirms the legitimacy of the domain registration, matching the company information and location. Overall, the website presents a professional and trustworthy front with room for improvement in formal security documentation and advanced security headers.

3

3Cloud LLC.

designmind.com

65

3Cloud LLC is a specialized technology consulting firm focused exclusively on Microsoft Azure cloud services, data analytics, AI, and application innovation. Founded in 2016 and headquartered in Downers Grove, Illinois, 3Cloud has positioned itself as a leading Azure partner and Microsoft innovator, recognized by multiple Microsoft Partner of the Year awards. The company targets enterprise clients across technology, healthcare, finance, manufacturing, and retail sectors, delivering tailored cloud and AI solutions to optimize business performance. Technically, the website is built on WordPress with modern frameworks like Bootstrap and React libraries, supported by Cloudflare DNS and leveraging HubSpot and Google Analytics for marketing and analytics. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security practices include HTTPS enforcement, domain locking, and use of Cloudflare, though DNSSEC is not enabled, representing a minor security gap. From a security posture perspective, 3Cloud demonstrates good maturity with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Contact information is transparent, including phone numbers and a physical address, enhancing business credibility. Overall, 3Cloud presents a trustworthy and professional online presence with strong alignment between domain registration data and business claims. Recommendations include enabling DNSSEC, publishing a formal security policy, and adding vulnerability disclosure information to further enhance trust and security posture.

Kontuur LB OÜ operates the website kontuur.ee, presenting itself as an established advertising agency based in Estonia, founded in 2010. The company offers a broad range of creative advertising services including 3D advertising, digital marketing, animation, and campaign development. The website showcases a comprehensive portfolio of client works, indicating a solid market position within the media and advertising sector. Technically, the site is built on WordPress, leveraging common plugins such as Yoast SEO and Responsive Lightbox, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security or incident response policies. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms implemented. Contact information is clearly presented with company email and phone number, enhancing business credibility. Overall, the website is professional and functional but would benefit from improved privacy and security practices.

E

Estanc AS

estanc.ee

68

Estanc AS is an Estonian-based manufacturing company specializing in static process equipment for high-impact industries such as pulp & paper, chemical, petrochemical, carbon capture, energy, hydrogen, and marine sectors. The company offers end-to-end services including design, engineering, manufacturing, project management, quality control, delivery, and installation. Their website reflects a professional and modern digital presence with a focus on user experience and clear communication of their core values and services. Technically, the site is built on WordPress, leveraging modern performance and consent management tools, and is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is partially addressed with a comprehensive cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the website is trustworthy and credible, supported by consistent WHOIS data and a clear business focus.

P

PricewaterhouseCoopers Eesti

pwc.ee

73

PricewaterhouseCoopers Eesti (PwC Estonia) is a professional services firm operating as part of the global PwC network. The company provides consulting, auditing, tax, and business advisory services primarily targeting businesses and professionals in Estonia. The website reflects a mature digital presence with a professional design, consistent branding, and use of advanced technologies such as Adobe Experience Manager and Adobe Analytics. Cookie consent is managed via OneTrust, indicating attention to privacy compliance. However, explicit privacy policy and terms of service documents were not found in the provided content, which is a potential compliance gap. The security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the domain WHOIS data is unavailable publicly, which is typical for large corporate domains using privacy protection. The website is trustworthy and professionally maintained, suitable for an enterprise-level business.

Y

YFU Eesti

yfu.ee

42

YFU Eesti is a non-profit organization dedicated to fostering an open and active civic society by providing international educational exchange programs for youth aged 14-18 and Estonian families. The organization operates a well-structured website built on WordPress with WooCommerce and Elementor, reflecting a mature digital presence. The site includes comprehensive information about their programs, volunteer opportunities, and support for host families and students. Technically, the website employs modern tracking and analytics tools such as Google Analytics, TikTok Pixel, and Facebook Pixel, integrated via Google Tag Manager, ensuring effective marketing and user engagement tracking. Security-wise, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data, though it lacks a dedicated security policy or incident response page. Overall, the website demonstrates a solid security posture and good privacy compliance, with clear contact channels and GDPR-aligned data protection information. Strategic recommendations include publishing explicit security policies, enhancing accessibility, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

T

Tallinna Ülikooli Akadeemiline Raamatukogu

tlulib.ee

59

Tallinna Ülikooli Akadeemiline Raamatukogu is the academic library of Tallinn University, serving both the university community and the general public. It offers extensive resources including 15 reading rooms and over 2.6 million items, supporting research, study, and academic activities. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and SEO optimizations, ensuring good performance and mobile responsiveness. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and vulnerability disclosure channels. Overall, the website is trustworthy and credible, aligned with the institution's academic mission.

M

Milrem Robotics

milrem.ee

54

Milrem Robotics is a leading Estonian company specializing in the development and deployment of autonomous unmanned ground vehicles (UGVs) designed for military and defense applications. Established in 2013, the company has grown to serve 19 customer countries with a portfolio of combat-proven robotic systems, including the THeMIS family, VECTOR, HAVOC, and Type-X vehicles. Their solutions focus on enhancing combat effectiveness, providing tactical advantages, and safeguarding troops. The company maintains a strong global presence with multiple offices across Europe, the UAE, and the USA, and actively participates in European Union defense projects, underscoring its commitment to innovation and interoperability.

P

Positium

positium.com

60

Positium is a specialized data analytics company focused on transforming anonymised mobile positioning data into actionable statistical insights primarily for mobility, tourism, and population sectors. Established in 2003 and based in Estonia, Positium serves government and private sector clients with data-driven solutions that support sustainable decision-making. The company holds a strong market position as a leader in mobile phone data analytics, supported by partnerships with notable organizations such as Eurostat and the International Telecommunication Union. Technically, the website is built on the Voog CMS platform and integrates modern analytics and marketing tools including Google Analytics, Hotjar, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in security headers and DNSSEC implementation are recommended. The hosting appears stable with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, there is no explicit security policy or incident response contact information published, which could be enhanced to improve trust and compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, Positium's website reflects a professional and trustworthy digital presence with solid privacy compliance and business credibility. Strategic recommendations include enabling DNSSEC, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen security posture and stakeholder confidence.

P

Petri Kajander

credentum.com

53

Petri Kajander operates as a personal business partner and coach specializing in supporting startup founders through coaching, mentoring, and hands-on assistance to build competitive business edges. The website positions Petri as a niche expert for founders seeking growth and clarity in their ventures, with a business model primarily based on equity and retainer fees aligned with startup success. Technically, the site is built on WordPress with modern plugins and optimizations, delivering moderate performance and good mobile responsiveness. Security posture is solid with HTTPS and standard best practices, though explicit security policies and vulnerability disclosure mechanisms are absent. The domain WHOIS data is missing, raising concerns about registration transparency, but the professional site content and social media presence support legitimacy. Overall, the site is well-designed and trustworthy but would benefit from enhanced privacy compliance and domain registration clarity.

shineyourcareer.com is a small Italian technology news website founded in 2023, focusing on consumer electronics news and reviews. The site targets Italian-speaking technology enthusiasts and consumers, providing timely articles on smartphones, tablets, and related tech topics. The business model is advertising-supported online media, with a consistent brand presence and good content quality. Technically, the site is built on WordPress using the Morenews theme and child theme Newslight, leveraging common web technologies like jQuery and Bootstrap. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. Privacy compliance is adequate with a privacy policy and cookie consent banner in Italian, aligned with GDPR requirements. Contact information is clearly provided with a physical address, phone number, and company email. No terms of service or incident response policies are found. Overall, the website is professional and trustworthy but could improve security hardening and transparency on security policies.

Arras OÜ operates the website arrascf.eu, representing Arras Construction Furniture, a medium-sized Estonian manufacturing company specializing in high-quality innovative construction fastening products. Established in 1999, the company has a strong market position with over 20 years of experience, offering manufacturing, wholesale distribution, subcontracting, and private label services primarily targeting construction industry partners and wholesalers. The website is professionally designed with good content quality and clear navigation, supporting Estonian and English languages. The technical infrastructure is based on WordPress with WooCommerce, enhanced by modern JavaScript libraries and SEO plugins, reflecting a moderate to good digital maturity level. Security posture is adequate with HTTPS enforced and reCAPTCHA protection on forms, but lacks some advanced security headers and public incident response information. Privacy compliance is basic, with a privacy policy present and GDPR consent on contact forms, but no cookie consent mechanism is detected. Overall, the website demonstrates high business credibility with clear contact information, certifications, and trust indicators. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would enhance the security and compliance posture.