Security Directory

S

S-ryhmä

s-kanava.fi

59

The website www.s-kanava.fi represents S-ryhmä, a major Finnish retail and banking group offering customer loyalty programs and banking services. The site promotes the S-Etukortti loyalty card and associated benefits, targeting Finnish consumers. Technically, the site is built using modern React and Gatsby frameworks, with integration of Usercentrics for cookie consent and Google Tag Manager for analytics. The site is well-secured with HTTPS and appropriate security headers, reflecting a good security posture. However, explicit privacy policy, terms of service, and contact information are not found in the provided content, indicating areas for compliance improvement. Overall, the site is professional, trustworthy, and technically sound, but could enhance transparency and privacy compliance documentation.

H

Havaş

havas.net

64

Havaş is a well-established Turkish transportation and ground services company, founded in 1999, specializing in airport ground handling, bus services, and cargo warehousing. The website reflects a professional and modern digital presence with a focus on service offerings relevant to airlines, airports, and passengers. The technical infrastructure leverages popular front-end frameworks like Bootstrap and integrates multiple analytics tools such as Google Analytics and Yandex Metrika, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced DNS security (DNSSEC) and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms, which could pose regulatory risks. Overall, the website is functional and credible but would benefit from improvements in privacy transparency and security hardening.

Copix is a modern digital printing company based in Estonia, offering a wide range of printing products and services such as labels, floor stickers, books, and interior decoration prints. The company targets businesses and individuals requiring quality printing solutions and operates an e-commerce platform for convenient ordering. The website is built on WordPress with modern technologies including Bootstrap, jQuery, and integrates multiple marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. The domain is newly registered in 2024, consistent with the business's apparent recent establishment. Contact information is comprehensive and transparent, enhancing business credibility.

General Public is an independent branding and design agency based in Newcastle upon Tyne, UK, founded in 2009. The company focuses on providing creative branding and design services to a niche market of businesses and organizations seeking professional brand development. Their website reflects a consistent and professional brand image, with a clear presentation of their portfolio and thought leadership content. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO and Google Analytics. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy and cookie policies, which are compliance gaps. Overall, the business appears credible and established with a moderate trust level, but should enhance privacy compliance and security best practices to improve user trust and regulatory adherence.

T

Tuumik Stuudio OÜ

tuumik.ee

49

Tuumik Stuudio OÜ is an established Estonian graphic design and photography studio founded in 2007. The company specializes in visual identity, illustration, print preparation, and photography services, targeting cultural institutions and corporate clients. Their website showcases a comprehensive portfolio demonstrating professional design and consistent branding. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

R

RP9 OÜ

rp9.ee

43

RP9 OÜ operates a pub named Pubi RP9 located at Raekoja Plats 9 in Tartu, Estonia. The business focuses on hospitality services including food and beverage offerings, sports event broadcasting, and table reservations. The website provides a comprehensive menu with detailed descriptions and pricing, targeting local residents and visitors interested in social dining and sports entertainment. The company is a small-sized entity founded in 2017, with a consistent brand presence and clear contact information. Technically, the website is built on the concrete5 CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Google Analytics. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is transparent and consistent with the business claims, indicating legitimacy.

T

Taararing OÜ

taararing.ee

42

Taararing OÜ is an Estonian company specializing in full solutions for deposit points and cleaning services for businesses, operating since 2006. The company serves retail stores and enterprises by managing deposit acceptance and providing cleaning services, employing approximately 50 people. Their market position is that of a trusted local service provider with a solid client base and over 16 years of experience in deposit acceptance management. Technically, the website is built on Concrete CMS with modern frontend technologies including Bootstrap 5 and jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO practices, though accessibility is basic. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the website is professional and credible but could improve in compliance and security transparency.

Articulate Global Inc. operates a leading SaaS platform specializing in online workplace learning and interactive course creation. Their flagship product, Articulate 360, is trusted by millions of course creators worldwide, positioning the company as a market leader in the education technology sector. The website reflects a mature digital presence with comprehensive content, professional branding, and a clear focus on corporate training audiences. Technically, the site is built on WordPress with modern SEO and marketing integrations including Google Tag Manager, Marketo Munchkin, and Visual Website Optimizer. The presence of Osano consent management indicates a commitment to privacy compliance. Performance and mobile optimization are good, supporting a positive user experience. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. WHOIS data is not publicly accessible, likely due to privacy protection, which is common for large enterprises but slightly reduces transparency. Overall, the website is professional, secure, and compliant with privacy regulations, supporting a high trust level. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection contacts to further strengthen trust and compliance.

Promised Land Art Festival is a professionally organized event celebrating digital and traditional art, primarily targeting creative professionals in gaming, film, and advertising industries. The festival is supported and organized by CD PROJEKT RED and local cultural institutions in Łódź, Poland, positioning it as a significant niche event in the creative media sector. The website reflects a high level of digital maturity, utilizing modern web technologies such as Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though improvements in security headers and explicit security policies are recommended. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website presents a trustworthy and professional image, though the lack of WHOIS data for the domain introduces some uncertainty about domain registration status.

Q

Quality Pixels

qualitypixels.pl

41

Quality Pixels is a Polish interactive agency specializing in website design, creation, SEO, and Google Ads campaigns. Established in 2009, the company targets businesses seeking professional digital presence and marketing services. Their website reflects a consistent brand with good content quality and clear navigation, supporting their service offerings effectively. Technically, the site is built on WordPress with common plugins for SEO and multilingual support, and integrates major analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. The site is hosted by cyber_Folks S.A., a reputable registrar and hosting provider. Security-wise, the website uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit privacy or security policies. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent and trustworthy. Overall, the site demonstrates a moderate to good security posture with room for improvement in privacy compliance and security best practices.

L

La Gazette Drouot

gazette-drouot.com

67

La Gazette Drouot is a leading French media outlet specializing in auction news, art market updates, and cultural heritage content. It operates both as a weekly magazine and an online platform, offering comprehensive coverage of auction calendars, results, and featured lots. The website targets collectors, art professionals, and enthusiasts, providing subscription services and advertising opportunities. Technically, the site employs a modern tech stack including Bootstrap, jQuery, and various analytics and marketing tools, hosted behind Cloudflare for performance and security. The site is well-optimized for mobile and SEO, with good content quality and navigation. Security posture is strong with HTTPS and secure forms, though explicit security policies and incident response contacts are absent. Privacy compliance is robust with cookie consent and GDPR-aligned policies. However, the lack of WHOIS data for the domain raises questions about domain registration transparency, though the site content and branding strongly indicate legitimacy. Overall, the site scores well on content, technical implementation, and security, with room for improvement in business credibility and security transparency.

M

Moniteur des Ventes

moniteurdesventes.com

65

Moniteur des Ventes operates a professional online auction platform specializing in live, online, and catalogued auctions of professional equipment, vehicles, and industrial materials primarily targeting French-speaking markets. The platform connects auction houses, public entities, and businesses with buyers, offering a comprehensive auction calendar and account-based bidding services. The website demonstrates a professional and consistent brand presence with clear navigation and relevant content for its target audience. Technically, the website employs a mature technology stack including jQuery, Bootstrap, and various UI and analytics libraries. It integrates secure payment gateways such as Ingenico and Lemonway, and uses Google Analytics and Tag Manager for traffic analysis. The site is mobile-optimized and shows good SEO practices, though accessibility features are basic. Hosting includes Azure Blob Storage for some assets. From a security perspective, the site enforces HTTPS and uses secure payment processors, with a cookie consent mechanism supporting GDPR compliance. However, no explicit security headers or incident response policies are evident, and no direct contact information is provided on the main site. The absence of WHOIS registration data is a notable concern, impacting domain legitimacy and trustworthiness. Overall, the platform presents a solid business and technical foundation but would benefit from enhanced transparency in security policies and domain registration details to improve trust and compliance posture.

D

Drouot Estimations

drouot-estimations.com

57

Drouot Estimations is a French auction house operating under the Drouot group, specializing in art, antiques, jewelry, and collectibles. The website serves as a platform for auction calendars, results, object estimations, and online bidding services, targeting both French and international clients interested in auctions. The site is well-branded and professionally designed, reflecting a medium-sized business with a strong market position in the auction industry. Technically, the website employs modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for sliders and carousels, ensuring a responsive and interactive user experience. Google Tag Manager and Google Analytics are integrated with a cookie consent mechanism, indicating some level of privacy awareness. However, explicit privacy and terms of service pages are not found, which is a compliance gap. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS registration data is a concern, potentially indicating privacy protection or domain registration issues, which slightly lowers trust. Overall, the website is functional, professional, and trustworthy from a user perspective but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve compliance and trustworthiness.

D

Drouot Immobilier

drouot-immobilier.com

60

Drouot Immobilier is a small real estate agency based in Paris 9ème, France, affiliated with the Groupe Drouot. The company specializes in property sales, estimations, research, and valorization services primarily targeting individuals and professionals interested in Paris and the surrounding regions. The website presents a professional and well-structured digital presence with clear navigation, good content quality, and compliance with privacy regulations including GDPR. Technically, the site uses modern JavaScript frameworks and Google Analytics for tracking, with a cookie consent mechanism in place. Security posture is generally good with HTTPS enforced, but lacks explicit security policies or incident response contacts. The domain WHOIS data is missing or unavailable, which raises some concerns about domain legitimacy and registration status, though the website content and branding appear consistent and trustworthy.

G

Grano Oy

emmi.fi

50

Grano Oy operates the EMMi Mediapankki, a comprehensive digital asset management platform designed to help businesses efficiently manage and share their digital materials. The website positions itself as a trusted solution with over 250 brands relying on its services, offering features such as metadata management, user access control, and API integrations. The platform targets businesses seeking streamlined digital asset workflows. Technically, the website is built on WordPress with Elementor and incorporates modern marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Hotjar. It demonstrates strong digital maturity with excellent SEO, mobile optimization, and user experience. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though explicit security headers and policies are not fully detailed. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could enhance its security posture by publishing dedicated security policies and implementing additional HTTP security headers.

P

Puolustusministeriö

defmin.fi

59

Puolustusministeriö is the Finnish Ministry of Defence responsible for national defence policy, international cooperation, and administrative oversight. The website serves as an authoritative government portal providing comprehensive information on defence themes, current news, licensing, and organisational details. It targets Finnish citizens, government officials, and defence sector stakeholders, positioning itself as a key national government entity. Technically, the site employs modern web standards including HTML5, CSS3, jQuery, and FontAwesome, with responsive design and accessibility features ensuring good user experience across devices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting its role as a government information source.

M

Moss

getmoss.com

69

Moss is a technology company offering a SaaS platform focused on corporate spend management, including unlimited corporate credit cards, expense management, and accounts payable automation. The website positions Moss as a modern financial technology provider targeting businesses seeking to optimize their spending processes. The platform aims to accelerate month-end financial closing and streamline corporate expenses. Technically, the website is built using modern frameworks such as React and Next.js, with integrations for analytics and consent management, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and consent management tools but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the professional website and use of reputable third-party services suggest a legitimate business. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

M

Międzynarodowy Festiwal Komiksu i Gier w Łodzi

komiksfestiwal.com

67

The Międzynarodowy Festiwal Komiksu i Gier w Łodzi website represents a well-established cultural event focused on comics and games, primarily targeting creators and enthusiasts in Poland and Central-Eastern Europe. The festival is the largest of its kind in the region, with a history dating back to 2006 for the domain and earlier for the event itself. The site offers multilingual support, event information, contests, and partner links, reflecting a mature digital presence. Technically, the site is built on WordPress with common plugins and tracking tools such as Google Analytics and Facebook Pixel, indicating a standard but effective infrastructure. Security posture is adequate with HTTPS enabled but could be improved by adding DNSSEC and security headers. Privacy compliance is basic but present, with cookie and privacy policies accessible and a consent mechanism implemented. Business credibility is strong due to the festival's reputation, social media presence, and consistent branding. Overall, the site is professional and trustworthy with room for security enhancements.

EC1 Łódź - Miasto Kultury is a well-established cultural and educational institution based in Łódź, Poland, offering a broad range of services including exhibitions, workshops, film screenings, and educational programs. The website serves as a comprehensive portal for visitors, schools, and cultural enthusiasts, providing detailed information about events, offers, and the institution's mission. The site is built on TYPO3 CMS and integrates modern tracking and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. The domain is long-standing and registered with a reputable registrar, supporting the legitimacy of the institution. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, positioning EC1 Łódź as a credible and trusted cultural hub.

M

MuseumNext

museumnext.com

49

MuseumNext is a professional organization providing virtual conferences and online learning content tailored for museum professionals worldwide. The website positions itself as a leading platform for museum industry professional development, offering virtual events, season passes, and a blog with relevant articles. The site is well-branded, with trust signals including logos of leading museums and testimonials. Technically, the site is built on WordPress with Gravity Forms for data collection and integrates Google Tag Manager and LinkedIn Insight for analytics and marketing. The site is accessible, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing or unavailable, which slightly reduces trust but the professional presentation and content quality mitigate concerns. Overall, the site is a credible and valuable resource for its target audience.

M

Motor Agency

motor.ee

40

Motor Agency is a specialized exhibition design and production company based in Estonia, founded in 2014. They focus on creating immersive experiences for museums, expos, and showrooms by integrating multimedia and virtual reality technologies. Their market position is that of a niche, innovative agency with recognized awards and international partnerships. The website is built on Concrete CMS with modern frontend technologies like Bootstrap 5 and jQuery, and it demonstrates good mobile optimization and user experience. However, the site lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS and no exposed sensitive data, but the absence of security headers and incident response information suggests room for improvement. Overall, the business presents a professional and trustworthy image but should enhance privacy compliance and security transparency to strengthen its digital maturity.

E

Economybookings

economybookings.com

72

Economybookings is an established online car rental aggregator platform offering price comparison and booking services for over 175,000 vehicles across 20,000 locations worldwide. The company targets global consumers seeking affordable and convenient car rental options, supported by multilingual customer service and a large network of trusted suppliers. The website demonstrates a mature digital presence with modern technologies such as React and Next.js, integrated analytics, and compliance tools like Cookiebot for privacy management. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or registration inconsistencies. Overall, the platform presents a professional and trustworthy user experience with room for improvement in transparency and contactability.

L

Logotrade OÜ

logotrade.ee

46

Logotrade OÜ is a well-established Estonian company specializing in promotional products, including advertising gifts, business gifts, and branded merchandise. With over 20 years of experience and a strong client base exceeding 4000 customers, Logotrade positions itself as a leading provider in the promotional retail sector in Estonia and Europe. The company offers a comprehensive range of services including promotional gifts, advertising services, and advertising design, supported by professional expertise and strategic marketing insights. The website reflects a mature business with consistent branding, clear communication, and strong trust indicators such as customer testimonials and industry memberships. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Segment Analytics, integrated with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, well-structured, and uses HTTPS with good SSL configuration. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site demonstrates good practices including secure forms, privacy policies, and cookie consent. However, there is room for improvement by implementing additional security headers and publishing a formal security or vulnerability disclosure policy. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, Logotrade's website is professional, secure, and compliant, supporting its business credibility and customer trust. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include enhancing security headers, formalizing security policies, and continuous monitoring of third-party scripts to maintain a robust security posture.

Copix is a newly established Estonian digital printing company specializing in a wide range of printing services including labels, packaging, interior decoration prints, and book printing. The website is professionally designed using WordPress and Bootstrap, featuring a modern and responsive layout with clear navigation and multiple contact channels. The company targets businesses, schools, publishers, designers, and individual customers, positioning itself as a regional printing service provider with an online ordering platform. The technical infrastructure includes common marketing and analytics tools such as Google Analytics, Facebook Pixel, and Adform tracking, integrated via Google Tag Manager. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, which are recommended for improvement. The domain is newly registered in 2024, consistent with the business launch, and shows no suspicious registration patterns. Overall, the website is functional, trustworthy, and business credible, though it would benefit from enhanced privacy and security policies.

K

Kartra

krtra.com

67

Kartra is a technology company offering an all-in-one marketing platform designed to streamline marketing efforts through automated email, sales funnels, landing pages, and forms. The company targets businesses and marketers seeking integrated marketing automation solutions and operates a SaaS business model. The website is professionally designed, SEO optimized, and uses modern marketing and tracking technologies, indicating a mature digital presence. Technically, the site is built on WordPress with Cloudflare DNS and CDN services, and integrates multiple analytics and advertising tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Taboola. Security posture is good with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the provided content. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

D

Doping

doping.agency

55

Doping is a results-driven digital marketing agency specializing in Google Ads management and growth strategies for e-commerce, B2B, and B2C companies primarily in Estonia. The company emphasizes a 90-day Growth Sprint™ methodology to deliver measurable sales growth and ROI improvements. Their website showcases strong client testimonials, case studies, and a clear service offering including campaign optimization, landing page creation, and training programs. Technically, the site is built on Webflow with modern tracking and analytics tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some advanced security headers and published policies. The absence of WHOIS data for the domain raises concerns about registration transparency, though the professional presentation and active business presence mitigate some risk. Overall, the site is credible and well-structured, but could improve privacy compliance and domain legitimacy disclosures.

E

Easy Web Soutions

easyweb.ee

49

EasyWeb is a small Estonian technology service provider specializing in WordPress website creation, management, SEO, marketing, UX, and design services targeted primarily at small businesses. The company presents a professional and user-friendly website with clear service offerings and client testimonials, positioning itself as a reliable local partner for digital presence needs. Technically, the website is built on WordPress with modern tools such as GSAP for animations, Facebook Pixel for tracking, and Google Analytics for analytics, hosted likely by Elkdata OÜ as indicated by the WHOIS and nameserver data. The site is mobile-optimized and performs well with fast loading times and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and a published security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration and hosting details align well with the business claims, supporting legitimacy and trustworthiness.

R

www.RigaCamping.lv

rigacamping.lv

43

RigaCamping.lv is a small hospitality business providing camping accommodations in Riga, Latvia. The website offers information about camping services including tent and motorhome rentals, secure camping spots with electricity, and an online reservation system that provides a discount for bookings made through the site. The target audience consists primarily of tourists and campers visiting Riga and nearby areas. The business operates locally with a clear focus on outdoor accommodation services. Technically, the website is built using standard HTML5, CSS (W3.CSS), and JavaScript, integrating Google Analytics and Twitter widgets for tracking and social media presence. The site is mobile optimized with a moderate performance profile and basic SEO and accessibility features. However, it lacks advanced security headers and privacy compliance mechanisms such as cookie consent banners and privacy policies. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. Nevertheless, it lacks important security headers like Content Security Policy and HSTS, and there is no visible security or incident response policy. The embedded reservation form collects user data but its security posture is unknown. The site uses Google Analytics and Tag Manager, indicating moderate user tracking without clear privacy compliance disclosures. Overall, the website is functional and professional for a small local hospitality business but has notable gaps in privacy compliance and security best practices. Strategic improvements in security headers, privacy policies, and incident response information would enhance trust and compliance. The domain WHOIS data is consistent with the business location and shows no suspicious patterns, supporting the legitimacy of the site.

H

Helsingin Osuuskauppa Elanto

hok-elanto.fi

51

HOK-Elanto is Finland's largest regional cooperative within the S-ryhmä group, operating a broad network of over 400 retail outlets, restaurants, and service stations across the Helsinki metropolitan area and surrounding municipalities. The company serves over 700,000 customer-owners and employs nearly 7,000 people, positioning itself as a significant regional employer and retail service provider. The website reflects a mature digital presence with clear branding, comprehensive service information, and active engagement channels including social media and customer service portals. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, supported by third-party services like Google Tag Manager for analytics and Usercentrics for consent management, indicating a commitment to privacy compliance and user experience. Hosting appears to be managed via a specialized Finnish cloud provider, ensuring regional performance and reliability. The site is mobile-optimized and SEO-friendly, with structured data and meta tags enhancing discoverability. From a security perspective, the site enforces HTTPS and integrates consent mechanisms, though it lacks explicit security headers which could be improved. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the domain's legitimacy, showing consistent registration details aligned with the business identity and a long operational history. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, HOK-Elanto's website demonstrates a solid digital infrastructure and trustworthy business representation. Strategic improvements in security headers and accessibility could further enhance the site's robustness and user inclusivity.

S

SOK

s-kaupat.fi

68

S-kaupat.fi is the leading online grocery store in Finland, operated under the S-ryhmä cooperative group and managed by SOK. The platform consolidates multiple grocery brands such as Prisma, S-market, Alepa, Sale, and Herkku, offering customers a wide selection of products with various delivery options including home delivery and pick-up. The website emphasizes customer benefits like bonus points and integrates a mobile app for enhanced shopping convenience. Technically, the site is built on modern frameworks including Next.js and React, with content managed via Contentful CMS. It employs industry-standard security practices such as HTTPS, security headers, and a cookie consent mechanism powered by Usercentrics. While the site lacks a dedicated security policy or incident response contact, it maintains a strong security posture overall. The domain registration details align well with the business identity, reinforcing legitimacy. Overall, the site presents a professional, user-friendly, and secure e-commerce experience tailored for Finnish consumers.

S

Suomen Osuuskauppojen Keskuskunta

alepakorttelitoive.fi

62

The website alepakorttelitoive.fi serves as a customer engagement platform for Alepa stores in Finland, allowing customers to submit product or service wishes to tailor local store assortments. The site is operated by Suomen Osuuskauppojen Keskuskunta, a large Finnish retail cooperative group, which aligns with the domain registration data and business focus. The platform is designed with modern web technologies including Next.js and integrates privacy and cookie consent management via Usercentrics, alongside Google Tag Manager for analytics. From a technical perspective, the site demonstrates a moderate to good level of digital maturity with responsive design and basic accessibility features. Hosting appears to be on AWS infrastructure, inferred from DNS nameservers. However, there is room for improvement in security headers and explicit security policy disclosures. The site uses HTTPS and secure form inputs, with a clear data retention policy for phone numbers collected via the form. Security posture is generally sound with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through linked comprehensive privacy policies and cookie consent mechanisms, reflecting GDPR adherence. The absence of direct company contact emails is noted, but the presence of a contact form and optional phone number input with automatic deletion supports privacy best practices. Overall, the website is trustworthy and professionally maintained, with a strong alignment between WHOIS data and business identity. Strategic recommendations include enhancing security headers, publishing explicit security policies, and expanding contact information transparency to further improve trust and compliance.

S

Sotsiaalkindlustusamet

tarkvanem.ee

46

Tarkvanem.ee is a government-affiliated Estonian website operated by Sotsiaalkindlustusamet, providing comprehensive parenting information and resources targeted at parents of children of all ages. The site offers educational content on child development, parenting styles, health, and safety, supported by tests, videos, and expert advice. It holds a strong market position as a trusted public information portal in Estonia. Technically, the website is built on WordPress and leverages modern analytics and marketing tools such as Google Analytics, Matomo, Hotjar, and Facebook Pixel, alongside SEO optimization via Yoast. The site is mobile-optimized and accessible with good navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is limited but includes a verified company email and a contact form. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

S

Stirling Brandworks

stirlingbrandworks.com

62

Stirling Brandworks is a specialized branding, marketing, and technology agency that offers a comprehensive suite of services including strategy, creative, marketing, UX/UI, and technology solutions. The company positions itself as a passionate and diverse team dedicated to helping brands grow and realize their potential. Their market presence is supported by a professional website with clear navigation and strong branding consistency. Technically, the website is built on modern frameworks such as React and Next.js, hosted on WPEngine, and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and HubSpot Forms. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure; however, the absence of security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not negate the professional appearance and functionality of the site. Overall, the website demonstrates a mature digital presence with room for enhanced security and privacy compliance.

N

Noranet

noranet.io

45

Noranet is a small Estonian-based company specializing in Internet of Things (IoT) solutions for both enterprises and private individuals. Their offerings range from smart monitoring and consumption management in residential buildings to digitalization and automation of industrial processes. The company appears to be recently founded in 2023 and operates under the parent company Startup Solutions OÜ. The website is professionally designed using WordPress with the Kadence theme and includes modern web technologies such as Google Tag Manager for analytics and marketing. Technically, the website demonstrates moderate performance and good mobile optimization, with proper SEO meta tags and structured data. However, there is room for improvement in accessibility and security best practices, as no advanced security headers or DNSSEC are implemented. The domain registration data aligns well with the business claims, showing consistency and legitimacy. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Analytics usage is moderate, relying on Google Tag Manager, which may track user behavior without explicit user consent. Overall, Noranet presents a credible and professional business presence with a solid technical foundation but requires enhancements in privacy compliance and security transparency to strengthen trust and regulatory adherence.

C

CENOS

cenos-platform.com

51

CENOS is a specialized software company providing accessible simulation tools tailored for practical engineers in industries such as induction heating, radio frequency, and wireless charging. Established in 2016, the company offers a SaaS model with a focus on intuitive use and efficient engineering processes, supported by strong customer testimonials from reputable industrial clients. The website demonstrates a professional and consistent brand presence with excellent content quality and user experience. Technically, the site is built on WordPress with modern frameworks and integrates Google Analytics and Trustpilot for marketing and feedback. Security posture is good with HTTPS enabled and domain protections, but lacks some advanced security headers and published security policies. Privacy compliance is partial, with cookie consent implemented but no explicit privacy or terms of service pages found. Overall, the site is trustworthy and well-positioned in its niche, though improvements in privacy and security transparency are recommended.

C

ConvexityShares

convexityshares.com

44

ConvexityShares is a small ETF issuer based in the USA, founded in 2020, currently without active products in the market. The company operates under the parent company Teucrium and targets investors interested in exchange-traded funds. The website provides basic business information, tax package support resources, and contact options primarily through a contact form and physical address. The digital infrastructure employs modern web technologies including Google Tag Manager and Twitter tracking pixels, indicating moderate digital maturity. However, the site lacks comprehensive privacy and cookie policies, which impacts privacy compliance ratings. From a security perspective, the website benefits from HTTPS encryption and domain transfer protection, enhancing trustworthiness. Nonetheless, it lacks advanced security headers and explicit incident response contacts, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected during analysis. The website is accessible without any WAF or blocking mechanisms, allowing full content inspection. Overall, ConvexityShares presents a basic but functional online presence consistent with a small financial services business. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and regulatory alignment. The company’s partnership with tax package support services adds value to its investor audience.

O

Online Solution 360 GmbH

saveality.net

59

Saveality, operated by Online Solution 360 GmbH, is a specialized provider of cyber security and privacy solutions based in Germany. Founded in 2018, the company offers a range of services including secure remote desktop environments, multi-encryption data storage, end-to-end encrypted email and communication services, TOR/Onion web services, bulletproof hosting, penetration testing, secure mobile phone solutions, IoT protection, and cryptocurrency cold storage. The business targets clients requiring high confidentiality and privacy protection, positioning itself as a niche player in the cyber security market. The parent company is Online Solution Int Ltd. based in the UK. Technically, the website is built on WordPress and uses common web technologies such as jQuery, Google Analytics, and Google Tag Manager. Hosting and DNS services are managed via Cloudflare. The site implements HTTPS with a good SSL configuration but lacks DNSSEC and advanced security headers. Performance is moderate with good mobile optimization. Privacy compliance is basic with a cookie consent banner and a privacy policy hosted externally on adsafety.net. Security posture is adequate but could be improved by enabling DNSSEC, adding security headers, publishing a security policy, and providing a vulnerability disclosure mechanism. No critical vulnerabilities or exposed sensitive data were detected. Contact information is clearly presented, including phone numbers, emails, and physical addresses, enhancing business credibility. Overall, Saveality presents a professional and trustworthy front with room for improvement in security best practices and privacy transparency. Strategic recommendations include enhancing domain security, publishing detailed security and incident response policies, and improving privacy compliance disclosures.

S

SMEunited

smeunited.eu

72

SMEunited is a prominent non-profit association representing crafts and small and medium-sized enterprises (SMEs) across Europe, with a membership base spanning over 30 countries and encompassing more than 12 million enterprises. The organization focuses on advocacy, policy representation, and providing a unified voice for SMEs at the European level. Their website reflects a professional and consistent brand image, offering comprehensive information about their activities, publications, news, and events. Technically, the website employs modern tools such as Google Analytics, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policy disclosures and incident response contacts. Overall, the website is accessible, well-structured, and compliant with privacy regulations, presenting a trustworthy digital presence for the organization.

I

Imeline Ajalugu – ajalugu kogu maailmast

imelineajalugu.ee

54

Imeline Ajalugu is a prominent media publication focused on history, recognized as the largest history magazine in Scandinavia. It offers historical content both online and in print, targeting history enthusiasts and readers interested in global historical topics. The website is built on a modern React and Next.js technology stack, incorporating Google Tag Manager and a consent management platform to handle user privacy preferences. The site demonstrates good design quality, mobile optimization, and basic accessibility features, providing a generally positive user experience. Security measures such as HTTPS and security headers are properly implemented, although explicit privacy and terms of service policies are not found in the provided content. The domain registration is privacy protected, which is common for media entities but limits transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.

Ä

Äripäev AS

imelineteadus.ee

55

Imeline Teadus is a leading Scandinavian popular science media publication operated by Äripäev AS, offering both digital and print content. The website demonstrates a mature digital presence with a modern tech stack based on React and Next.js, complemented by privacy and consent management tools. The security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. The business model revolves around subscription-based content delivery, supported by advertising and marketing partnerships. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

A

AS Äripäev

personaliuudised.ee

55

Personaliuudised is a leading Estonian digital media portal specializing in personnel management news, including labor law, payroll, recruitment, training, and employee relations. Owned by AS Äripäev, the site targets HR professionals and employers in Estonia, offering comprehensive news, podcasts, videos, and newsletters. The platform is well-established with a consistent brand presence and a professional digital footprint. Technically, the website leverages modern frameworks such as React and Next.js, ensuring a responsive and performant user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent management. Overall, the site demonstrates high business credibility and technical maturity, suitable for its professional audience.

A

AS Äripäev

palgauudised.ee

55

Palgauudised.ee is a specialized Estonian media portal operated by AS Äripäev, focusing on payroll, labor law, taxation, and work organization topics. It serves professionals seeking up-to-date information, practical tools, and educational resources such as webinars and conferences. The website employs a subscription-based business model with tiered access to content and services. Technically, the site is built on modern web frameworks including Next.js and React, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance via a consent management SDK. Contact information and legal policies are clearly presented, enhancing trust and transparency. Overall, Palgauudised.ee demonstrates a mature digital presence with a solid market position in the Estonian media landscape.

A

AS Äripäev

foundme.io

59

FoundME is a specialized media portal operated under AS Äripäev, focusing on news, opinions, podcasts, and radio shows related to the Estonian and international start-up ecosystem. The website targets entrepreneurs, investors, and the start-up community by providing curated content and subscription-based access to premium materials. Technically, the site is built on modern web technologies including React and Next.js, ensuring good mobile responsiveness and SEO optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although no explicit security policy or vulnerability disclosure page is present. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site presents a professional and trustworthy digital presence with clear contact information and partner affiliations.

Ä

Äripäeva Teabevara ja Nõuandekeskus

teabevara.ee

51

Äripäeva Teabevara ja Nõuandekeskus is a professional Estonian business information service operated under Zone Media OÜ. The website offers licensed access to a continuously updated knowledge base and expert advice center targeting business professionals and specialists in Estonia. The platform integrates various content types including documents, audio, and video to support informed decision-making. Technically, the site is built on modern frameworks such as Next.js and React, hosted behind Cloudflare, ensuring good performance and security. The security posture is strong with HTTPS, security headers, and consent management, although explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve transparency in contact and security disclosures.

K

KiVa

kivaschool.nl

51

KiVa is an established educational program focused on promoting social safety and positive group dynamics in schools, primarily in the Netherlands. The website presents a comprehensive and scientifically backed anti-bullying program, supported by certified trainers and a large network of schools and teachers. The digital infrastructure leverages modern web technologies including jQuery, Bootstrap, Google Maps API, and tracking tools such as Google Analytics and Facebook Pixel, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-positioned in the education sector.

Lemonway is a French licensed payment institution specializing in providing modular and compliant payment solutions tailored for marketplaces and crowdfunding platforms. Established since 2012 and trusted by over 400 marketplaces including major clients like Decathlon and SNCF Connect & Tech, Lemonway offers a comprehensive suite of services including Pay-In, Identification (KYC), Wallet management, Pay-Out, and an intuitive Dashboard. Their API-centric approach enables seamless integration and control over payment flows, supporting multiple currencies and payment methods. The company emphasizes security, compliance, and user experience, backed by ACPR licensing and PCI DSS compliance. Technically, the website leverages modern frameworks such as Next.js and React, with robust analytics and tracking tools implemented responsibly with user consent. Security posture is strong with HTTPS, security headers, and secure forms, although explicit security policies and incident response details are not publicly disclosed. WHOIS data is missing or obscured, likely due to privacy protection, which slightly impacts trust but is common in regulated financial sectors. Overall, Lemonway presents a professional, secure, and mature digital presence aligned with its business objectives.

O

Online Solution (supported by SAVEALITY)

ano-phone.de

59

ANO-PHONE is a German-based small technology business specializing in secure, encrypted Android smartphones with integrated private VPN services. The company targets privacy-conscious consumers seeking enhanced mobile security and anonymity. Their product offers hardware encryption, secure communication channels, and control without backdoors or remote access. The website is built on WordPress with WooCommerce, featuring good content quality and a professional design. Technical infrastructure includes Cloudflare DNS and common analytics and advertising tools. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are lacking. Privacy compliance is partial, with cookie consent implemented but no dedicated privacy policy page found. Contact information is limited to an email address, with no phone or physical address provided. Overall, the domain and website appear legitimate and consistent with the business claims.

O

Online Solution 360 GmbH

ano-phone.com

55

ANO-PHONE is a specialized provider of secure encrypted smartphones integrated with private VPN services, targeting privacy-conscious users and security-focused consumers. The company operates an e-commerce platform selling purified Android-based smartphones with hardware encryption, secure communication tools, and cryptocurrency wallet support. The business is positioned as a niche player in the technology sector, emphasizing privacy and security. The website is professionally designed, mobile-optimized, and includes essential business and contact information, although phone numbers and physical addresses are not explicitly listed. Technically, the site uses WordPress with WooCommerce, Google Analytics, and Cloudflare DNS, delivering moderate performance and good SEO optimization. Security posture is solid with HTTPS and client transfer protection on the domain, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is supported by a cookie consent mechanism and a privacy policy indicating GDPR adherence. Overall, the website and domain registration data indicate a legitimate and trustworthy business presence.

O

Online Solution 360 GmbH

securecommerce.eu

64

SecureCommerce, operated by Online Solution 360 GmbH, is a specialized cybersecurity service provider focused on protecting online stores and e-commerce platforms. The company offers managed firewall, DDoS protection, malware scanning, and monitoring services tailored to popular e-commerce systems such as Magento, WooCommerce, and Shopware. Their market position is that of a niche provider delivering Security-as-a-Service solutions to online merchants primarily in Germany. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. Contact information and cookie consent mechanisms are well implemented, though privacy and terms policies are missing. Technically, the site uses reputable hosting via OVH SAS and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with room for improvement in security headers and published policies. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

N

Noatum Logistics

noatumlogistics.com

63

Noatum Logistics operates as a global transport and logistics solutions provider, positioned among the top 50 freight forwarders worldwide. Their services encompass air, ocean, road, and rail freight, along with customs brokerage, warehousing, and value supply chain services. The website reflects a professional and consistent brand presence targeting businesses requiring comprehensive logistics solutions. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and infrastructure appear credible. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and security best practices.