Security Directory

D

Duvel Moortgat

duvelmoortgat.be

71

Duvel Moortgat is a historic, fourth-generation family-owned brewing company founded in 1871, recognized globally for its high-quality specialty beers and multiple iconic brands. The company emphasizes tradition, quality, and sustainability, operating 13 breweries worldwide and targeting beer consumers, partners, and employees. The website reflects a mature digital presence with multilingual support, clear branding, and comprehensive corporate responsibility content. Technically, the site uses modern web technologies including Google Tag Manager and a cookie consent framework, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though the absence of visible security headers and a public security policy suggests room for improvement. WHOIS data is unavailable, which is unusual for a well-established brand, indicating possible privacy protection or registrar issues. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could enhance transparency in security and contact information.

G

GUN PRODUCTIONS

gutterdammerung.com

54

Gutterdämmerung.com is the official website for a niche entertainment project combining rock music, film, and live immersive experiences. The site promotes the Gutterdämmerung concept created by visual artist Bjorn Tagemose, featuring legendary rock artists. The business operates primarily in the media sector, targeting rock music fans and live event attendees. The website content is rich with artist information, multimedia, and event details, supporting fan engagement through newsletters and contests. Technically, the site uses standard web technologies including jQuery, Google Analytics, YouTube API, and MailChimp for marketing. Hosting is provided by One.com, with a domain registered since 2014, consistent with the business timeline. Security posture is moderate with HTTPS implied but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in privacy and security practices.

B

Barefoot Luxury

barefootluxury.be

52

Barefoot Luxury is a niche real estate and hospitality company specializing in luxury villas for sale on São Vicente island, Cabo Verde. The company offers 36 private villas blending natural beauty with modern comfort, targeting affluent investors and lifestyle buyers. The website reflects a strong market position within the luxury real estate sector, emphasizing exclusivity, privacy, and a unique lifestyle experience. Technically, the site is built on WordPress with Elementor and Gravity Forms, hosted by Combell nv, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with the business goals.

F

Fosbury & Sons

fosburyandsons.com

50

Fosbury & Sons operates as a premium coworking and office space provider primarily serving the Brussels and Groot-Bijgaarden regions, with additional presence in Amsterdam. The company targets a broad audience including startups, entrepreneurs, and established companies seeking flexible workspaces, meeting rooms, and event spaces. Their market position is that of a high-quality, human-centric workspace provider emphasizing community and collaboration. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics, hosted with Cloudflare DNS services, and is optimized for mobile and SEO. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and additional security headers could be implemented. Privacy compliance is strong with clear cookie consent mechanisms and comprehensive privacy and terms policies. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure program is evident. Overall, the website is professional, trustworthy, and well maintained, with room for improvement in security transparency and DNS security.

E

EnlightED

enlighted.education

67

EnlightED is a globally oriented educational conference platform focused on the intersection of education, technology, and innovation. The website serves as a hub for event information, speaker details, and agenda for their annual conferences. It is supported by reputable partners such as Fundación Telefónica, IE University, South Summit, and Fundación La Caixa, indicating a strong market position in the education sector. The platform targets educators, technology professionals, and innovators in education, offering hybrid event editions and a variety of talks and lectures. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integrations for Google Tag Manager and OneTrust for cookie consent. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Accessibility features are basic but present. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site employs HTTPS and cookie consent mechanisms but lacks visible security headers and published privacy or terms of service policies. No contact information for security incidents or vulnerability disclosures are found. WHOIS data is not publicly available, likely due to privacy protection, but the presence of trusted partners supports legitimacy. Overall, the security posture is good but could be improved with additional transparency and security best practices. The overall risk is moderate with recommendations to publish privacy and terms policies, implement security headers, and provide clear contact channels for security and privacy concerns to enhance trust and compliance.

P

ProFuturo

profuturo.education

56

ProFuturo is a well-established global digital education program supported by Fundación Telefónica and Fundación la Caixa, focused on reducing educational inequality by providing quality digital education to children and teachers in vulnerable environments. The website reflects a mature digital presence with multilingual support, a proprietary educational platform, and extensive educational content. Technically, the site is built on WordPress with modern tracking and consent tools, showing good performance and mobile optimization. Security posture is solid with HTTPS and bot protection, though improvements in DNS security and security headers are recommended. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its non-profit educational mission.

T

Telefónica México

telefonica.com.mx

51

Telefónica México is a major telecommunications company providing innovative connectivity and telecom solutions to businesses and consumers in Mexico. The website reflects a strong market position with clear branding and comprehensive content tailored to its audience. The company leverages WordPress CMS with modern SEO and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is good with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

W

Wanna Marketing

wannamarketing.es

50

Wanna Marketing is a small marketing agency based in Málaga, Spain, specializing in web design, client acquisition campaigns, graphic design, and content creation. The company positions itself as a strategic and innovative partner for businesses seeking tailored marketing solutions. It holds a recognized position in the Spanish independent media agency rankings, indicating a credible market presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, with performance optimizations via WP Rocket and GDPR compliance mechanisms in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit privacy policies would enhance trust. Overall, the site is professional, well-structured, and user-friendly, targeting businesses in Málaga and surrounding regions.

F

FlexiSystems s.r.o.

edituj.cz

33

FlexiSystems s.r.o. operates the website flexisite.cz, specializing in delivering modern, custom web solutions including complex web projects, e-commerce platforms, and visual editing content management systems. The company targets businesses requiring tailored web development services primarily within the Czech Republic. The website demonstrates a professional design with clear navigation and relevant content, supporting its position as a specialized technology provider. Technically, the site employs common JavaScript libraries such as jQuery and Slick Carousel, integrates Google Tag Manager for analytics, and uses a custom CMS with visual editing capabilities. Mobile optimization and SEO practices are adequately addressed, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and documented policies. The absence of WHOIS data limits domain trust verification, but the presence of clear company contact details and client logos supports business credibility. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

S

SIMPLO s.r.o.

simplo.cz

49

SIMPLO s.r.o. is a Czech Republic based custom software development studio specializing in bespoke web development, e-shops, and web applications. They emphasize tailored solutions built on proprietary CMS and e-commerce platforms, serving a primarily Czech-speaking business clientele. The company demonstrates strong market positioning with long-term client relationships and notable projects such as the Úřad pro ochranu osobních údajů and Salming ČR e-shop. Technically, the website leverages modern AMP technology for fast, mobile-optimized performance and integrates tracking tools like Google Tag Manager and Leady. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and policies are absent. Privacy compliance is partially addressed with privacy and cookie policies present but lacking a consent mechanism. WHOIS data is unavailable, which impacts domain trustworthiness assessment. Overall, the site is professional, performant, and credible, but could improve transparency in security and privacy practices.

Y

YouGov

yougov.co.uk

66

YouGov is a well-established UK-based market research and data analytics company founded in 2000. It provides public opinion polling, market research, and data analytics services to a broad audience including businesses, media, and political organizations. The company holds a strong market position with a large user base and international presence. The website reflects a mature digital infrastructure with modern technologies such as Angular, AWS Cloudfront CDN, and multiple analytics and marketing tools integrated for performance and user insights. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms implemented via OneTrust. Security posture is strong, leveraging HTTPS, security headers, and monitoring tools like New Relic, though a dedicated security policy and incident response contact are not publicly found. Overall, the website is professional, trustworthy, and technically sound, supporting the company's credibility and business operations.

Kantar Worldpanel operates as a leading global provider of consumer panel research and consumer behavior insights, offering services such as retail surveys and shopper research. The website content reflects a professional and consistent brand presence targeting businesses seeking market research data. Technically, the site employs modern JavaScript libraries like MooTools and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance, though no major CMS or hosting provider is explicitly identified. Security posture is moderate, with HTTPS implied but no explicit security headers detected, and privacy compliance is partial with a cookie consent mechanism but no visible privacy policy page. Overall, the domain WHOIS data is unavailable, which reduces trust but the website content aligns with the known Kantar brand. Strategic recommendations include enhancing privacy disclosures, improving security headers, and publishing clear contact and incident response information.

R

Redwall OÜ

redwall.ee

58

Redwall OÜ is a well-established Estonian web agency with over 13 years of experience, specializing in full-service web solutions including design, development, maintenance, and consulting. The company targets businesses and organizations seeking professional and user-centric digital presence. Their market position is solid within the local Estonian market, supported by a consistent brand and a comprehensive portfolio of services. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket, lazy loading, and deferred scripts. The site is mobile-optimized and accessible, integrating advanced analytics and marketing tools with GDPR-compliant consent mechanisms. Security posture is strong with HTTPS enforced, CAPTCHA on forms, and no visible vulnerabilities, though explicit security policies and incident response documentation are absent. Overall, the website reflects a professional, trustworthy, and technically mature digital presence.

L

Lumi Capital OÜ

luminamai.lt

43

Lumi Namai is a Lithuanian real estate rental business specializing in modern apartments located in the 'Naujasis Skanseno' quarter of Vilnius. The company offers a range of 1 to 4-room apartments fully furnished with kitchen appliances and storage solutions. The website is professionally designed using Joomla CMS and integrates modern technologies such as Google Maps for location visualization, Google reCAPTCHA for form security, and GDPR-compliant cookie consent mechanisms. Social media presence is established on Facebook and Instagram, enhancing customer engagement. The domain is newly registered in 2024, consistent with the business launch timeline, and the WHOIS data aligns with the company identity.

L

Lumi Capital OÜ

lumimajas.lv

50

Lumi Majas, operated by Lumi Capital OÜ, is a regional real estate rental service specializing in long-term apartment and commercial space leasing primarily in Latvia, with partner sites in Estonia and Lithuania. The website provides detailed rental options, terms, and contact mechanisms targeting individuals seeking flexible and long-term housing solutions. The business model focuses on providing accessible rental properties with additional services to enhance tenant experience. Technically, the website is built on Joomla CMS with modern front-end frameworks and integrates Google reCAPTCHA and cookie consent mechanisms to ensure user privacy and security. The site demonstrates good digital maturity with multi-language support and social media integration. Security posture is solid with HTTPS enforcement and spam protection on forms, though it lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though improvements in security headers and transparency could enhance its posture further.

T

Telema AS

telema.lt

43

Telema AS is a well-established technology company specializing in Electronic Data Interchange (EDI) services, facilitating automated and accurate electronic document exchange between businesses. With over 25 years in the market and a strong presence in Lithuania and the Baltic region, Telema serves thousands of stores and suppliers, positioning itself as a trusted partner in business process automation and ERP integration. The website reflects a mature digital presence with comprehensive service descriptions, client testimonials, and a network of certified software partners. Technically, the site is built on WordPress with modern libraries and tools, including robust analytics and marketing integrations. Security posture is strong, supported by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Privacy compliance is well addressed with Cookiebot consent management and clear privacy policies. Overall, the site projects professionalism, trustworthiness, and technical competence.

T

Telema AS

telema.lv

46

Telema AS is a technology company specializing in Electronic Data Interchange (EDI) and supply chain optimization solutions, targeting businesses seeking to automate and improve their trading document workflows. The company holds a strong regional presence in the Baltics with multilingual websites and certified partners, positioning itself as a reliable and trusted provider in its niche. The website demonstrates a mature digital infrastructure built on WordPress with modern front-end libraries and comprehensive marketing and analytics integrations. Security posture is robust, supported by ISO 27001 certification and HTTPS enforcement, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well managed through Cookiebot and clear privacy policies. Overall, the website reflects a professional, trustworthy, and business-focused digital presence.

T

Telema AS

telema.ee

42

Telema AS is a well-established Estonian technology company specializing in Electronic Data Interchange (EDI) and e-invoicing services, primarily serving the Baltic region. The company positions itself as a market leader and standard developer with a strong focus on seamless and automated business document exchange. Their services cater to businesses seeking efficient and reliable data exchange solutions, supported by a network of certified software partners and global roaming capabilities. The website reflects a mature digital presence with multi-language support and regional domains. Technically, the site is built on WordPress with modern front-end libraries and integrates advanced marketing and analytics tools, including consent management for GDPR compliance. Security posture is strong, evidenced by ISO 27001 certification and HTTPS enforcement, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

X

xMoney

utrust.com

72

xMoney is a financial technology company offering a comprehensive payment ecosystem that empowers businesses to accept global payments, manage finances, and issue branded cards. The platform targets merchants and enterprises across Europe and beyond, providing services such as payments, recurring billing, marketplaces, invoicing, and crypto payment acceptance. The company positions itself as a licensed and compliant entity with certifications including PCI DSS Level 1 and MiCA compliance, regulated by the Bank of Romania. The website reflects a mature digital presence with professional design, clear navigation, and extensive product information. Technically, xMoney leverages modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, and Bing Ads for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security practices are strong, with HTTPS enforced, advanced fraud prevention powered by AI, and compliance with payment security standards. However, explicit security headers and incident response disclosures could be improved. The security posture is robust but slightly diminished by the absence of WHOIS registration data, which raises questions about domain legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, xMoney presents a trustworthy and professional payment platform with strong technical and security foundations. Strategic recommendations include enhancing visible security headers, publishing vulnerability disclosure and incident response information, and clarifying domain registration details to improve trust and compliance transparency.

B

BCS itera

crmlahendused.ee

42

BCS itera is an Estonian technology company specializing in providing modern CRM and ERP solutions, including Microsoft Business Central and customer insights services. The company targets businesses seeking to manage customer journeys and sales processes effectively. The website reflects a professional B2B service provider with a clear focus on CRM-related offerings and digital transformation. The presence of a Finnish language partner site indicates regional market expansion. Technically, the website is built on WordPress with Elementor, integrating multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, and MonsterInsights. The site is served over HTTPS with a good SSL configuration, but lacks some security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the website demonstrates moderate digital maturity with room for improvement in privacy compliance and security best practices.

H

HRM4Baltics

hrm4baltics.com

51

HRM4Baltics is a technology company offering a modern HRM and payroll management solution targeted at medium to large enterprises primarily in the Baltic region. The company provides a comprehensive software platform that automates personnel and payroll processes across Estonia, Latvia, and Lithuania, emphasizing integration, automation, and user experience. The website demonstrates a strong market position with over 100 trusted clients and multilingual support, reflecting regional focus and business maturity. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket, Google Fonts, and integration with analytics tools like Google Analytics and Microsoft Clarity. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph metadata enhancing discoverability. However, some security best practices like DNSSEC and security headers are missing, and privacy compliance elements such as privacy and cookie policies are not present. From a security perspective, the site uses HTTPS with anonymized IP tracking in analytics, but lacks explicit security headers and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is recent but consistent with the business age and shows no suspicious patterns. Overall, the security posture is moderate but could be improved with additional policies and technical controls. The overall risk assessment indicates a professionally managed website with good technical and business credibility but with gaps in privacy compliance and security policy transparency. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

B

Business Central

businesscentral.ee

42

Business Central is a technology company specializing in Microsoft Dynamics 365 Business Central ERP solutions, targeting medium and large enterprises primarily in Estonia. The company positions itself as a market leader with a comprehensive ERP offering recognized by Forbes as the best ERP in 2024. Their services include ERP implementation, support processes, and consulting, supported by a professional and content-rich website. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Google Fonts, Microsoft Clarity, and Google Tag Manager for analytics. Hosting is provided by Zone Media OÜ, a reputable Estonian hosting provider. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

C

Cult Pens

cultpens.com

71

Cult Pens is a well-established UK-based e-commerce retailer specializing in pens and pencils, boasting a wide product range of over 24,000 items. The website positions itself as a trusted online pen shop offering secure ordering, expert knowledge, and excellent customer service with free UK delivery and worldwide shipping. Technically, the site is built on the Shopify platform, leveraging modern JavaScript libraries such as jQuery and Owl Carousel, and integrates third-party services including Klevu for search, Trustpilot for reviews, and OneTrust for cookie consent management. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security-wise, the site uses HTTPS with a domain status of clientTransferProhibited, indicating domain transfer protection. However, explicit security headers are not fully implemented, and no public security or incident response policies are found. Privacy compliance is partially addressed through cookie consent mechanisms, but no explicit privacy or terms of service pages were detected in the provided content. Overall, the website is professional and trustworthy but could improve transparency around privacy and security policies.

F

Funky Pigeon

funkypigeon.com

70

Funky Pigeon is a UK-based e-commerce retailer specializing in personalized greeting cards, gifts, and flowers. The company operates under the parent company WH Smith PLC, positioning itself as a significant player in the UK retail market for personalized gifting solutions. The website offers a broad range of products tailored for various occasions, targeting consumers seeking unique and personal gift options. Technically, the site is built using modern web technologies including React and Next.js, with integrations for customer data platforms and marketing analytics, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS, employs standard security headers, and provides comprehensive privacy and cookie policies with consent mechanisms, indicating a strong commitment to user data protection. However, the absence of WHOIS registration data is a notable anomaly, though the overall site professionalism and parent company association mitigate concerns. Strategic recommendations include publishing explicit security policies and incident response contacts, enhancing accessibility, and maintaining vigilance on third-party scripts to sustain security posture.

R

Rahva Raamat

rahvaraamat.ee

56

Rahvaraamat.ee is the leading Estonian bookstore chain offering a comprehensive selection of books and media products through both online and physical retail channels. The company is well-established with a domain age since 2010 and operates under Zone Media OÜ. Their website is built on modern technologies such as Next.js and React, providing a responsive and user-friendly experience. The integration of Cookiebot ensures GDPR compliance with a detailed cookie consent mechanism. Security posture is strong with HTTPS enforced and appropriate security headers in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates a mature digital presence with extensive analytics and advertising integrations, supporting a robust e-commerce business model.

C

Coolbet

coolbet.se

64

Coolbet is an online gambling platform offering casino games, sports betting, and poker services primarily targeting the Finnish market. The website is professionally designed with consistent branding and uses modern web technologies including React and third-party services for geolocation compliance and analytics. The platform operates under multiple licenses and employs geolocation restrictions to comply with regulatory requirements. Security posture is generally good with HTTPS enforced and error monitoring via Sentry, but lacks explicit security headers and detailed privacy or cookie policies. The absence of WHOIS data reduces domain transparency and trustworthiness, although the website content and technology usage indicate a legitimate business. Strategic recommendations include enhancing privacy compliance, publishing clear contact and security policies, and improving security header implementation.

C

Coolbet

coolbet.mx

59

Coolbet is a multi-jurisdictional online gambling operator offering casino games, poker, and sports betting services primarily targeting regulated markets including Mexico. The platform leverages modern web technologies such as React and integrates third-party services for geolocation compliance and betting functionalities. While the website demonstrates good technical implementation and security posture with HTTPS and security headers, it lacks visible privacy and cookie policies, incident response documentation, and explicit contact information, which are critical for compliance and user trust. The WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and transparency would enhance overall trust and regulatory adherence.

C

Coolbet

coolbet.ca

62

Coolbet operates as an online gambling platform offering sports betting, casino games, and poker services across multiple regulated markets including Canada, Estonia, Malta, and Sweden. The website demonstrates a modern technical infrastructure leveraging React, third-party integrations such as GeoComply for geolocation compliance, Playtech for poker, and BetRadar for sports data. The platform is designed with a professional and consistent branding approach, targeting online gamblers in regulated jurisdictions. Security posture is generally good with HTTPS enforced and error tracking via Sentry, though explicit security headers and privacy policies are not evident in the provided content. The absence of WHOIS data for the domain www.coolbet.com is a notable gap, reducing transparency and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.

V

Vejle Idrætshøjskole

vih.dk

67

Vejle Idrætshøjskole is a Danish educational institution specializing in sports-focused high school courses, targeting young people in sabbatical years or summer courses. The website presents a professional and modern digital presence built on React and Next.js, with good mobile optimization and SEO practices. The site implements a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance and user privacy awareness. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security and incident response policies are not publicly visible. WHOIS data is unavailable, which is typical for Danish domains, but no suspicious indicators are found. Overall, the site reflects a trustworthy and well-managed educational service with moderate to good digital maturity.

P

POMPdeLUX FI Oy

pompdelux.com

70

POMPdeLUX FI Oy operates a professional e-commerce platform specializing in Scandinavian children's clothing, targeting parents and caregivers seeking quality kidswear. The company has established a solid market presence since its domain registration in 2011, offering seasonal collections through a well-branded and user-friendly Shopify-based website. The site demonstrates a mature digital infrastructure with integration of modern marketing and analytics tools such as Klaviyo and Facebook Pixel, ensuring effective customer engagement and data-driven marketing strategies. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website reflects a trustworthy and professional retail business with room for improvement in explicit security transparency and incident readiness.

E

Estonian Defence and Aerospace Industry Association

defence.ee

42

The Estonian Defence and Aerospace Industry Association is a medium-sized, essential government-related entity representing over 130 companies in Estonia's defence, aerospace, and security sectors. The association focuses on creating market opportunities, advocacy, and fostering cooperation among its members. The website is built on WordPress and uses standard analytics and marketing tools such as Google Analytics and Mailchimp. The technical infrastructure is modern but shows some server-side PHP warnings that could impact stability and security. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is available but limited to email and physical address, with no phone numbers or incident response contacts published. The website is professionally designed with good navigation and mobile optimization, supporting the association's credibility and trustworthiness.

I

Intuit

intuitoffice.ee

44

Intuit is an Estonian company specializing in the design, manufacturing, and retail of sustainable and functional office furniture. Their product range includes sofas, chairs, workstations, acoustic booths, and other office-related furniture solutions. The company emphasizes eco-friendly practices, evidenced by their EU Ecolabel certification, and offers flexible rental services for office furniture. The website is built on WordPress, leveraging modern technologies such as Google Tag Manager, reCAPTCHA, and a CDN for optimized image delivery. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and professional content presentation. However, there are gaps in privacy compliance, as no explicit privacy or cookie policies were found, and no consent mechanisms are implemented. Security posture is generally good with HTTPS enabled and secure form handling, but could be improved by enabling DNSSEC and adding security headers. Overall, the website and business appear legitimate and professional, with room for improvement in privacy and security best practices.

Lao Brewery Co,Ltd is a leading beverage manufacturer in Laos, known primarily for its flagship brand Beerlao. Established in 1973 as a joint venture between the Lao Government and Carlsberg Group, the company has expanded its portfolio to include beer, drinking water, carbonated soft drinks (as the PepsiCo bottler), snacks, and wine. The company enjoys a strong market position domestically and has received international recognition for product quality. The website reflects a professional and consistent brand image, targeting consumers and visitors interested in Lao beverages and brewery experiences. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Flickity, and Google APIs, hosted on DNS servers without DNSSEC enabled. The site is mobile optimized with good SEO and accessibility features, though some security headers could be improved. Compliance with privacy and cookie policies is evident, with GDPR considerations addressed. The WHOIS data confirms the domain's legitimacy and long-standing presence, matching the business claims. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but improvements such as enabling DNSSEC and adding security headers are recommended. No incident response or security policy pages were found, indicating an area for enhancement. Overall, the website is trustworthy and professionally maintained, supporting the company's market credibility.

L

Luminor Bank AS

luminor.lv

46

Luminor Bank AS operates a comprehensive banking website targeting private individuals and businesses in Latvia, offering a wide range of financial services including loans, savings, insurance, and internet banking. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and Google analytics tools integrated, alongside a robust cookie consent mechanism powered by OneTrust. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. However, explicit incident response contact details and vulnerability disclosure mechanisms are not found, representing an area for improvement. Overall, the website reflects a mature digital presence suitable for a large financial institution with high trustworthiness and good user experience.

Y

Yaga

yaga.co.za

62

Yaga is a South African online marketplace specializing in preloved and new fashion items, providing a platform for users to buy and sell clothing safely. The website targets consumers interested in sustainable fashion and sellers looking to monetize their preloved items. The platform integrates secure payment methods and multiple delivery partners, enhancing user trust and convenience. Technically, Yaga employs modern web technologies including React, Next.js, and Material-UI, with integrations for analytics and marketing tools such as Google Tag Manager, TikTok Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses secure payment gateways, but lacks explicit security headers and published privacy or terms policies, which are recommended for compliance and trust. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security policies would strengthen its posture.

L

Leanest OÜ

leanest.ee

40

Leanest OÜ is an Estonian technology company specializing in digital transformation solutions for manufacturing and industrial sectors. Their offerings include production optimization software, AI-driven quality control, and workforce planning tools. The company positions itself as a leader in AI applications for industrial quality assurance and production efficiency within the Baltic region. The website reflects a professional and consistent brand image with detailed product descriptions and a clear target audience of manufacturing and service sector businesses. Technically, the website is built on WordPress with modern JavaScript and uses common marketing and analytics tools such as Google Tag Manager and LinkedIn Insight. The site is mobile-optimized and presents good SEO practices, although accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and secure form handling but lacks explicit security headers and privacy compliance documentation such as privacy and cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, Leanest demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security hardening. The domain registration data supports the legitimacy of the business, and the company maintains active social media profiles and partner relationships that reinforce its market position.

AS Farmi Piimatööstus operates as an Estonian dairy product manufacturer with a well-established online presence since at least 2010. The website serves as a platform to showcase their products, recipes, and company information, targeting consumers interested in dairy goods. The company maintains active engagement through social media channels and provides clear contact details, reinforcing its market position as a reputable local manufacturer. Technically, the website is built on the Voog CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site employs HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security policies, which could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. No vulnerability disclosure or incident response information is provided, indicating room for maturity in security governance. Overall, the website is professional and trustworthy with a solid business foundation. Strategic improvements in security policies, privacy transparency, and accessibility would enhance compliance and user trust, supporting long-term digital resilience.

Q

QATestLab

qatestlab.com

65

QATestLab is an independent software testing and QA services provider established in 2010, targeting software development companies and businesses seeking reliable quality assurance solutions. The company offers a variety of software testing types and solutions aimed at improving software quality. The website reflects a professional B2B service model with a consistent brand presence and clear business description. The technical infrastructure includes multiple modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Visual Website Optimizer, indicating a mature digital marketing and performance measurement approach. Hosting and domain registration are stable and consistent with the business profile. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is limited due to absence of explicit privacy and cookie policies, though a cookie consent mechanism is present. Overall, the website is well-designed, user-friendly, and trustworthy, but could improve transparency and security practices to align with best industry standards.

H

Hutten

hutten.eu

68

Hutten is a well-established Dutch catering and hospitality company with a history dating back to 1929. The company provides culinary services including business catering, event catering, and healthcare catering across the Netherlands. Their business model focuses on delivering high-quality, sustainable food and hospitality experiences with a strong emphasis on guest satisfaction and social impact. The website reflects a professional and consistent brand image targeting corporate clients, event organizers, and healthcare institutions. Technically, the website employs modern web technologies such as jQuery, Magnific Popup, Google Tag Manager, and Cookiebot for cookie consent management. Hosting assets on DigitalOcean CDN suggests a reliable infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and cookie consent implemented. However, the absence of security headers and visible privacy policy or terms of service pages indicates room for improvement in compliance and security best practices. No WHOIS registrant data is publicly available due to EURid privacy policies, but the domain and website content appear legitimate and consistent with the company's Dutch origin. Overall, Hutten's digital presence is professional and trustworthy, but enhancing transparency around privacy, security policies, and incident response would strengthen their compliance and security posture.

I

Infovara OÜ

infovara.ee

49

Infovara OÜ is an Estonian business intelligence and analytics consulting company specializing in providing comprehensive BI solutions including consulting, software implementation, and training. The company leverages leading BI platforms such as Qlik and Jedox to serve a diverse range of sectors including transportation, finance, manufacturing, healthcare, media, retail, energy, and government. Infovara positions itself as a trusted expert in the Estonian market with over 15 years of experience and a strong partnership with Helmes, a larger IT services company. The website is professionally designed, content-rich, and targets Estonian business leaders seeking smarter decision-making tools. Technically, the site is built on WordPress with modern frameworks and security practices, including HTTPS, security headers, and Google reCAPTCHA on forms. Analytics and marketing tools like Google Tag Manager and Facebook Pixel are used with GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website demonstrates a mature digital presence with good security posture and compliance, supporting the company's credibility and market position.

B

Baltic Industrial OÜ

balticindustrial.com

48

Baltic Industrial OÜ is an established service provider in the Baltic region specializing in repair, diagnostics, and maintenance solutions primarily for the energy sector. With over 20 years of experience and a professional team, the company positions itself as a trusted partner for businesses requiring comprehensive industrial maintenance services. The website reflects this positioning with clear business descriptions and a professional design, targeting companies in need of industrial repair and maintenance in Estonia and neighboring countries. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Hosting details are not explicitly disclosed, but DNS servers suggest regional hosting providers. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and important security headers, and no explicit security or incident response policies are published. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could pose compliance risks under GDPR. Overall, Baltic Industrial demonstrates a solid business and technical foundation but should prioritize enhancing privacy compliance and security best practices to reduce risk and improve trustworthiness. Strategic improvements in these areas will strengthen their digital maturity and regulatory adherence.

C

CYBERTEC PostgreSQL

cybertec.at

68

CYBERTEC PostgreSQL is a specialized technology company providing professional PostgreSQL services, support, training, and software products. The company targets enterprises and organizations seeking scalable and reliable PostgreSQL solutions, including migration, clustering, tuning, and consulting. Their market position is that of an established PostgreSQL expert with a comprehensive portfolio of services and products. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and performance optimizations, ensuring fast loading and good accessibility. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, although some security headers could be improved. The absence of WHOIS data reduces domain transparency and trustworthiness, but the website content and branding indicate a legitimate business. Overall, the risk is moderate with recommendations to enhance domain registration transparency and security headers.

L

Laomaailm

laomaailm.ee

43

Laomaailm is an established Estonian company specializing in warehouse and industrial storage solutions with over 30 years of market presence. The company offers a broad range of products including shelving, lifting equipment, industrial stairs, and rental services, targeting B2B customers in manufacturing and logistics sectors. The website reflects a mature business with consistent branding and multilingual support, indicating a focus on regional and international clients. Technically, the site is built on WordPress with WooCommerce and enhanced by popular plugins such as Yoast SEO and WPML for multilingual capabilities. The infrastructure includes Google Tag Manager and Analytics for tracking, and the site is secured with HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. Security posture is solid but could be improved by adding explicit security headers and incident response information. Overall, the website is professional, user-friendly, and trustworthy, supporting the company's market position and business credibility.

D

Digient

digient.in

63

Digient is a medium-sized Indian technology company specializing in B2B iGaming software, platforms, and solutions. With nearly two decades of experience, they provide customizable, scalable iGaming platforms, custom game development, hosting, payment integrations, and compliance services. Their website reflects a professional digital presence built on WordPress with modern plugins and SEO best practices. The company targets iGaming operators seeking fast and secure technology solutions to accelerate their market launch and growth. Technically, the website is well-structured, mobile-optimized, and uses HTTPS with a valid SSL certificate. However, it lacks explicit privacy and terms of service pages, and no security headers were detected, indicating room for improvement in security posture. Cookie consent is implemented, showing some privacy compliance awareness. Social media presence on Facebook, LinkedIn, and Twitter supports their business credibility. Overall, the site is functional and professional but could enhance trust and compliance by publishing comprehensive privacy, security, and incident response policies.

L

Luna Park Sydney

lunaparksydney.com

65

Luna Park Sydney is a well-established amusement and theme park located in Sydney, Australia, with a domain registered since 1999. The website offers comprehensive information about rides, ticketing options, immersive experiences, group bookings, and events, targeting families, tourists, and educational groups. The technical infrastructure is built on Adobe Experience Manager with integration of multiple modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and TikTok Pixel. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and CSRF protections, though explicit security headers and cookie consent mechanisms are lacking, which could be improved for better compliance and security. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website scores well in content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

A

addCar

addcar.com

55

addCar Rental operates an international online car rental service offering vehicle bookings across Europe, the USA, the Middle East, and other countries. The company targets travelers seeking affordable and reliable car rentals with services including airport pickup, insurance protection, flexible cancellations, and 24/7 support. The website reflects a medium-sized business with a consistent brand presence and recognition such as the 2024 booking.com Traveller Review Award. Technically, the site uses modern frameworks like Angular and Bootstrap, integrates Google Analytics and Tag Manager for tracking, and provides a responsive, well-structured user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website and business presence. Overall, the site scores well on content quality and business credibility but should address WHOIS transparency and security header implementation to improve trust and compliance.

L

Levstal Group

levstal.com

48

Levstal Group is a well-established Estonian company specializing in steel structures, metal engineering, and marine infrastructure services. With over three decades of experience, the company serves a broad European industrial client base, delivering high-quality fabrication and engineering solutions. Their business model focuses on B2B project-based contracts with a strong emphasis on quality and compliance, supported by multiple industry certifications. Technically, the website is built on WordPress with modern JavaScript libraries and analytics tools, demonstrating a mature digital presence with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Levstal Group presents a professional, trustworthy, and technically sound online presence aligned with their business operations.

C

Citadele

citadele.ee

57

Citadele is a well-established banking institution operating in Estonia, providing a broad range of retail banking services including loans, deposits, insurance, and payment solutions tailored to individual customers. The website reflects a mature digital presence with comprehensive content, including loan calculators and detailed product offerings, targeting private banking customers. The company maintains a consistent brand image and integrates social media and partner links effectively. Technically, the site uses modern JavaScript libraries such as jQuery and Bootstrap, and is likely powered by OctoberCMS, ensuring a responsive and user-friendly experience. Security is robust with HTTPS enforced, secure cookie consent mechanisms, and standard security headers, although explicit security policies and incident response information are not publicly available. Overall, the site demonstrates good compliance with privacy regulations and provides clear contact information, supporting a trustworthy user experience.

D

Digital Privacy Corporation

tyk.io

79

Tyk.io is a mature technology company specializing in API management platforms and API gateway solutions. Founded in 2012 and operated by Digital Privacy Corporation in the US, the company targets developers and enterprises seeking scalable and secure API management. The website reflects a professional and consistent brand presence with a focus on technical excellence and user experience. The technical infrastructure leverages modern web technologies including WordPress CMS, Cloudflare DNS, Google Tag Manager, and advanced lazy loading scripts, indicating a high level of digital maturity. Security posture is solid with HTTPS and domain transfer protections, though there is room for improvement in DNSSEC adoption and explicit security policy disclosures. Privacy compliance is currently basic, lacking visible privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and well-positioned in the API management market, but could enhance transparency and compliance to further strengthen user trust and regulatory adherence.