Medium-risk security reports
90,188 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
48,051–48,100 of 90,188
E-commerce
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The domain beba.lv currently hosts a Shopify placeholder page indicating that the store does not exist. The website content is minimal and serves as a redirect or landing page for Shopify services, offering links to start new stores or explore other Shopify stores. There is no active business content, contact information, or policies present on the site. The domain WHOIS data could not be retrieved due to query limits, preventing verification of registration details and legitimacy. Technically, the site uses Shopify's platform and includes jQuery 2.0.3, but lacks security headers and visible SSL configuration details. Overall, the site is inactive and does not represent an operational business.
GUMI.LVgumi.lv
Manufacturing · Latvia
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
GUMI.LV is a professional e-commerce platform specializing in metal furniture, warehouse equipment, and loading technology primarily serving businesses and industrial clients in Latvia and the Baltic region. The website offers a broad catalog of products including shelving systems, metal cabinets, loading equipment, cold storage solutions, and related services such as installation and design. The company appears to have regional subsidiaries in Lithuania and Estonia, indicating a multi-country presence. Technically, the website uses a modern tech stack with jQuery, Owl Carousel, and EcomCart CMS, integrated with marketing and analytics tools like Facebook Pixel, TikTok Pixel, and Mailchimp. The site is mobile-optimized and provides a cookie consent mechanism, reflecting some privacy compliance efforts. However, no explicit privacy policy or terms of service were found in the provided content. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but security headers and incident response policies are not explicitly published. WHOIS data could not be retrieved due to query limits, limiting domain trust verification. Overall, the site is professional and trustworthy but would benefit from enhanced transparency on privacy and security policies.
- SIA Meraka
meraka.lv
Real Estate · Latvia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
SIA Meraka operates as an innovative and client-focused real estate agency based in Latvia, specializing in sales, purchases, and rentals of residential and commercial properties. The company positions itself as a modern and trustworthy partner for clients seeking their ideal property, emphasizing personalized service and market expertise. Their website reflects a professional image with clear navigation, multilingual support, and integrated contact mechanisms including a secure contact form with captcha. Technically, the site leverages modern JavaScript libraries, CDN hosting, and analytics tools, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and captcha protection, though the absence of explicit security headers and privacy policies suggests room for improvement. The lack of accessible WHOIS data limits full domain legitimacy verification, but the website content and contact details support a credible business presence. Overall, the site is well-designed and functional, serving its target audience effectively.
Vārmes mežniecībavarmesmeznieciba.lv
Real Estate · Latvia
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Vārmes mežniecība is a small Latvian company specializing in practical forest management services. Their website presents a clear business focus on forest property acquisition, owner consulting, timber procurement, wood material sales, young forest care, and forest renewal. The company targets individuals and entities concerned with forest management, positioning itself as a practical and accessible service provider in the local market. The website is built using the Framer platform, indicating a modern but simple technical infrastructure. Hosting is via Framer's content delivery network, with minimal external dependencies. Security posture is basic; HTTPS is assumed but no advanced security headers or policies are detected. Privacy and cookie policies are absent, which is a compliance gap. Contact information is clearly presented, enhancing business credibility. Overall, the site is safe, professional, and suitable for general audiences.
Transport Management Software Cloudexcloudex.eu
Transportation
67Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Cloudex is a cloud-based transport management software solution targeting businesses in the transportation and logistics sectors. The website positions itself as a cutting-edge SaaS platform designed to meet evolving business needs in transport management. The digital infrastructure is built on WordPress with modern SEO and user experience optimizations, including mobile responsiveness and structured data for enhanced search visibility. Security measures include HTTPS enforcement, Google reCAPTCHA for bot mitigation, and a cookie consent mechanism via CookieHub. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which are important for compliance and trust. Overall, the website presents a professional and functional business presence with room for improvement in privacy and security transparency.
Skaidu Briketesbriquetteswholesale.com
Energy · Latvia
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Skaidu Briketes is a Latvian company specializing in the manufacture and sale of high-quality birch wood chip briquettes for heating purposes. Established in 2003, the company has built a reputation for producing eco-friendly, additive-free briquettes that are tightly compressed for efficient burning. Their market presence extends beyond Latvia to wholesale customers in several European countries. The website offers detailed product information, pricing, delivery options, and leasing services through a partner, demonstrating a mature business model focused on direct-to-consumer and wholesale sales. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Maps API, and Google reCAPTCHA to provide a responsive and interactive user experience. The site is secured with HTTPS and implements anti-spam measures on forms. However, it lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. Analytics and advertising tools such as Google Analytics and Facebook Pixel are used, indicating moderate user tracking. From a security perspective, the site shows good baseline practices but could improve by adding security headers and formalizing privacy and incident response policies. The absence of WHOIS data due to query limits restricts domain legitimacy verification, but the website content and business information appear consistent and trustworthy. Overall, the site is professional, user-friendly, and serves its business purpose effectively. Recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear incident response contacts to strengthen compliance and trust. These steps will improve the site's security posture and regulatory adherence, supporting long-term business credibility.
Meridian School of Englishmeridianenglish.com
Education
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Meridian School of English operates a professional online platform offering English language courses targeted at children aged 5 to 13. The company positions itself as a trusted and accredited provider with British-qualified teachers, emphasizing interactive and engaging learning experiences. The website is well-designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the site leverages WordPress with Elementor, uses modern performance and SEO tools, and integrates analytics and marketing pixels for user tracking and retargeting. Security posture is generally good with HTTPS and performance optimizations, though explicit security headers and a public security policy are absent. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and certifications. Privacy compliance is partial, with cookie consent implemented but no clear privacy policy found in the provided content.
Other
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.vikking.lv appears to be built on the Wix platform, as indicated by multiple Wix-specific scripts and resources. However, the content is minimal and mostly technical, with no visible business descriptions, contact information, or privacy policies. The WHOIS data is unavailable due to query limits, preventing extraction of domain registration details. This lack of information and minimal content suggests the site may be under development, blocked, or protected by security mechanisms limiting access. The technical infrastructure relies on Wix hosting and standard polyfills, but no advanced frameworks or analytics are detected. Security posture is weak due to absence of visible HTTPS confirmation, security headers, or privacy compliance indicators. Overall, the site lacks trust signals and business credibility, resulting in a low risk and quality score.
LIVIN Ventspilslivinventspils.lv
Government · Latvia
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
LIVIN Ventspils is a government-supported platform designed to assist prospective and new residents of Ventspils, Latvia, by providing comprehensive information about living, working, studying, and investing in the city. The website serves as a bridge connecting employers and job seekers, offering a specialist database, job listings, and community news. It is multilingual, primarily in Latvian, with English and Russian versions available. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a responsive and user-friendly experience. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, although some security headers could be enhanced. Privacy compliance is well addressed with accessible policies and GDPR consent. Overall, the site presents a professional and trustworthy digital presence for the Ventspils community and stakeholders.
TCK Ltdtargalewindpark.com
Energy · Latvia
50Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Targale Windpark is a renewable energy project based in Latvia, representing the largest wind park in the country with 14 turbines and a total capacity of 58.8 MW. The park was inaugurated in September 2022 and produces approximately 155 GWh annually, powering over 50,000 households. The project is owned by TCK Ltd, acquired by the energy group Utilitas, and uses turbines manufactured by Vestas. The website provides detailed project timelines, environmental assessments, and investment information, targeting general public and energy stakeholders. Technically, the site is built on WordPress with common plugins and integrates Google Maps for location display. It is mobile optimized and has good SEO practices but lacks privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No contact emails or phone numbers are explicitly provided on the homepage. The domain registration is consistent with the business timeline and shows no suspicious patterns.
Brandmartbrandmart.lv
Retail · Latvia
58Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Brandmart is a Latvian retail company specializing in discounted brand name American and European clothing for women, men, and children. The company operates physical stores in Riga and maintains an online presence showcasing new inventory weekly. Their market position focuses on providing authentic designer styles at affordable prices, targeting a broad family audience. Technically, the website is modern, mobile-optimized, and fast-loading, utilizing JavaScript modules and Google Fonts, with embedded Google Maps for store locations. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable due to query limits, but the website's content and contact information suggest legitimacy. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.
Other
57Medium
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website tukumadarbi.lv is currently inaccessible or blocked, presenting only an empty HTML page with no metadata, content, or visible elements. The WHOIS lookup failed due to a daily query limit, preventing extraction of domain registration details. This lack of accessible information and content severely limits the ability to assess the business or its digital presence. Technically, the site shows no evidence of HTTPS, security headers, or modern web technologies, indicating a minimal or non-existent digital infrastructure. Security posture is weak due to absence of standard protections and policies. Overall, the site appears inactive or improperly configured, posing a high risk for trust and legitimacy. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, adding business contact information, and improving website content and technical implementation to establish credibility and security.
E-commerce
69Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The domain greensun.lv currently hosts a Shopify placeholder page indicating that the store is unavailable. The website lacks any actual business content, contact information, or policies. It appears to be an expired or inactive ecommerce store hosted on Shopify's platform. The technical infrastructure is minimal, relying on Shopify's hosting and jQuery 2.0.3 library. No security headers or SSL configuration details were available from the provided data. The absence of privacy, cookie policies, and contact details indicates poor compliance and business credibility. Overall, the site is not operational and does not provide any meaningful service or content.
AlenMed Promotionalenmedpromotion.com
Healthcare · Latvia
53Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
AlenMed Promotion is a medium-sized company specializing in the marketing and distribution of pharmaceutical products, primarily operating in Latvia and Belarus. The company positions itself as an international team of experts providing comprehensive business solutions, market entry strategies, and risk management for pharmaceutical manufacturers. Their website is professionally designed, multilingual, and provides clear contact information and detailed business descriptions. Technically, the site is built on the Bitrix CMS platform, uses modern JavaScript libraries, and integrates Google reCAPTCHA and analytics tools to enhance security and track user interactions. Security posture is good with HTTPS enabled and no visible vulnerabilities, although some security headers are missing and no explicit security policy or incident response contacts are published. Privacy compliance is strong with detailed cookie consent mechanisms and a comprehensive privacy policy. Overall, the website reflects a credible and professional business with a solid digital presence.
- Error
soberway.eu
Other
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website soberway.eu currently serves only a Wix default error page indicating that the domain is not connected to any active website. There is no business content, contact information, or policies available, which suggests the domain is parked or inactive. The technical infrastructure is based on Wix platform technologies including AngularJS and jQuery, but no custom or business-specific implementations are present. Security posture is minimal with no visible security headers or SSL configuration details in the provided data. The lack of privacy and cookie policies, as well as absence of business legitimacy indicators, results in a very low trust and credibility score. Overall, the site is non-functional from a business or security perspective and appears to be a placeholder.
Lidojošie Eņģeļilidojosie-engeli.lv
Non-profit · Latvia
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Lidojošie Eņģeļi is a Latvian non-profit charity organization dedicated to providing assistance to people in need regardless of age, gender, or social status. The organization focuses on creating positive social change through various projects and events, relying on donations and community support. The website clearly communicates its mission and provides multiple contact channels including email, phone, physical address, and a contact form, enhancing accessibility for stakeholders. Social media presence on Facebook and TikTok supports community engagement. Technically, the website is built using Hostinger Website Builder and the Astro framework, hosted on Hostinger infrastructure. It uses modern web fonts and CDN-hosted assets, with good mobile optimization and moderate performance. SEO practices are adequate with proper meta tags and Open Graph data. However, security headers are missing, and no advanced analytics or tracking scripts are detected, indicating a minimal tracking footprint. From a security perspective, the site uses HTTPS with good SSL configuration and secure form validation. The absence of privacy and terms of service pages, as well as lack of security.txt or vulnerability disclosure information, suggests room for improvement in compliance and transparency. No WAF or blocking mechanisms are detected, and the content is safe for general audiences with no adult or explicit material. Overall, the website presents a trustworthy and professional image for a small Latvian charity organization. The lack of WHOIS data limits domain legitimacy verification, but the website content and contact details support its authenticity. Strategic recommendations include adding privacy and terms policies, implementing security headers, and publishing vulnerability disclosure information to enhance trust and compliance.
Biedrība TEVbiedribatev.lv
Non-profit · Latvia
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Biedrība TEV is a Latvian charitable non-profit organization dedicated to providing humanitarian aid to Ukraine, including support for civilians, military personnel, medics, and refugees in Latvia. The organization operates donation campaigns and projects focused on relief efforts and rehabilitation. The website is professionally designed with clear navigation and multilingual support, targeting donors and supporters interested in Ukraine humanitarian aid. Technically, the site uses a Mozello CMS platform with jQuery and various plugins, hosted on Amazon Cloudfront CDN, offering moderate performance and good mobile optimization. Security posture is moderate with HTTPS likely enabled, cookie consent implemented, but lacks visible advanced security headers or incident response information. WHOIS data is unavailable due to query limits, but the domain appears legitimate and consistent with the business profile. Overall, the website is trustworthy and functional, serving its non-profit mission effectively.
Termovelatermovela.lv
Retail · Latvia
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Termovela.lv is an e-commerce retail website specializing in thermal clothing for men, women, and children, primarily targeting the Latvian market. The website offers a variety of thermal wear products from well-known brands such as Viking, Kari Traa, and Odlo. The business operates on the Shopify platform, leveraging its robust e-commerce infrastructure to provide a seamless shopping experience. The site includes comprehensive privacy, cookie, and terms of service policies, indicating a commitment to regulatory compliance and customer trust. Technically, the website utilizes modern web technologies including Shopify Liquid templates, Google Tag Manager, Facebook Pixel, and lazy loading for images to optimize performance. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Security posture is strong with HTTPS enforced and hCaptcha implemented on forms to prevent abuse. However, explicit security headers and incident response information are not clearly published. Overall, the website presents a professional and trustworthy front for a small retail business. The lack of WHOIS data limits full domain legitimacy verification, but the use of Shopify and presence of standard compliance policies support a positive risk assessment. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure and incident response contacts, and improving accessibility compliance. This assessment positions Termovela.lv as a credible and secure online retailer with room for incremental security and compliance enhancements to further strengthen customer trust and regulatory adherence.
- TThis store is unavailable
coss.lv
Other
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website at coss.lv is currently inaccessible, presenting a 500 error page with a message indicating the store is unavailable. There is no accessible content, metadata, or structured data to analyze, and no contact or business information is provided. The WHOIS lookup failed due to query limits, preventing extraction of domain registration details. This lack of data and website unavailability severely limits any meaningful business or security analysis. The site appears inactive or possibly suspended, which negatively impacts trust and credibility assessments. From a technical perspective, no technologies, scripts, or security measures are detectable, indicating a minimal or non-operational digital presence. Security posture is poor due to lack of HTTPS and security headers, and privacy compliance cannot be assessed. Overall, the site presents a high risk due to unavailability and lack of transparency.
- AAstra velo
astravelo.lv
Retail · Latvia
69Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Astra velo is a specialized bicycle retail company operating primarily in Riga, Latvia, offering a wide range of bicycles, accessories, equipment, and apparel. The website positions itself as one of the newest and largest specialized bicycle stores in the region, targeting general consumers interested in cycling products. The business model is e-commerce focused, supported by a Magento 2 platform with integrated marketing and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The site demonstrates good digital maturity with GDPR compliance and cookie consent mechanisms in place. Technically, the website uses a modern Magento 2 stack with RequireJS, jQuery, and various third-party modules for GDPR and tracking. The site is mobile-optimized and has good SEO practices, although accessibility features could be enhanced. Security posture is solid with HTTPS enforced and reCAPTCHA on forms, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-structured for its retail purpose. However, the absence of WHOIS data due to query limits restricts full domain legitimacy assessment. There is no evidence of security incident response or vulnerability disclosure policies, which could be improved to enhance trust. The content is safe for general audiences with no adult or questionable material. Strategic recommendations include implementing comprehensive security headers, publishing security and incident response policies, enhancing accessibility, and conducting regular security audits to maintain a strong security posture.
SIA ZELT BIOzelt.bio
Retail · Latvia
67Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
SIA ZELT BIO operates the largest single-variety organic sea buckthorn garden in Latvia, offering a range of high-quality sea buckthorn products aimed at nutrition, beauty, and health markets. The company maintains an e-commerce platform with subscription options, experience tours, and events, targeting general consumers interested in organic and health-related products. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a trustworthy online retail presence. Technically, the site leverages modern web technologies including Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA Enterprise for bot protection, reflecting a moderate to good digital maturity level. Security posture is adequate with HTTPS enforced and anti-bot measures in place, though additional security headers and explicit security policies could enhance protection. Privacy compliance is basic but present, with cookie consent and a privacy policy in Latvian. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious indicators are found. Overall, the site presents a low-risk profile with good business credibility and technical implementation.
NAPROKAT.LVnaprokat.lv
Transportation · Latvia
50Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Naprokat.lv is a small, young car rental company based in Riga, Latvia, offering a variety of popular car brands such as Audi, BMW, Mercedes-Benz, and Volvo with automatic transmissions. The business model focuses on convenient online booking without prepayment and delivery services within Riga, Jurmala, and Riga airport. The website is professionally designed with good content quality and clear navigation, supporting Russian, Latvian, and English languages to cater to a broad audience. Technical infrastructure leverages common frontend libraries like Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is moderate, with HTTPS usage implied but lacking visible security headers and advanced protections. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website presents a credible and functional business presence with room for security and compliance improvements.
- Турагенство Maks
maks.lv
Hospitality · Latvia
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Турагенство Maks is a small Latvian travel agency specializing in offering competitive tour packages, visa processing for Russia, Ukraine, and Belarus, wedding arrangements abroad, excursions, extreme tourism, and VIP travel services. The website is primarily in Russian, targeting Russian-speaking tourists interested in diverse travel experiences. The company maintains partnerships with several travel-related organizations and provides multiple contact channels including phone, email, and online forms. Technically, the website is built on the Tilda CMS platform, utilizing jQuery and various Tilda-specific scripts for animations, forms, and social sharing. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Cookie consent is implemented via a banner, but no explicit privacy or terms of service pages were found. From a security perspective, the site uses HTTPS and includes CAPTCHA on forms, but lacks visible security headers such as Content-Security-Policy or HSTS. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the security posture is moderate with room for improvement in headers and policy transparency. The overall risk is moderate; the site appears legitimate and functional but would benefit from enhanced security practices and clearer privacy compliance documentation.
SIA "Magrus"terveteskemperi.lv
Transportation · Latvia
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
TērvetesKemperi.lv is a Latvian small business specializing in campervan rentals, targeting travelers who want to explore nature with the comfort of a mobile home. The company operates under the legal entity SIA "Magrus" and maintains a professional online presence with a well-structured WordPress website using WooCommerce for e-commerce capabilities. The site is optimized for SEO with Yoast and integrates Google Analytics for visitor tracking. Social media presence on Facebook and Instagram supports customer engagement. Technically, the website is built on a modern CMS platform with a reputable theme and plugins, offering good mobile responsiveness and moderate performance. Security posture is adequate with HTTPS enabled and nonce usage in WooCommerce, but lacks advanced security headers and visible privacy compliance mechanisms. WHOIS data is unavailable due to query limits, limiting domain registration transparency. Overall, the site is functional and trustworthy for its niche but would benefit from enhanced privacy and security practices.
Autoskola KABATAautoskolakabata.lv
Transportation · Latvia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Autoskola KABATA is a Latvian driving school focused on providing transparent and affordable driver education services without hidden fees or transfer charges. The website presents basic but relevant information targeting individuals seeking driving lessons in Latvia. Technically, the site uses Mozello CMS and is hosted via AWS Cloudfront CDN, employing common JavaScript libraries such as jQuery and Fancybox. The site is mobile optimized and uses HTTPS, but lacks advanced security headers and privacy policies, indicating room for improvement in compliance and security posture. No WHOIS data was available due to query limits, limiting domain legitimacy verification. Overall, the site is functional but minimalistic, with moderate trustworthiness and basic content quality.
- Creo dizains
creodizains.com
Other · Latvia
68Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Creo dizains is a small Latvian graphic design service provider specializing in logo and packaging design, with over 130 clients. The website is professionally designed using the Squarespace platform, featuring modern design elements and good mobile optimization. The technical infrastructure includes Google Analytics for tracking and Weglot for multilingual support. Security posture is strong with HTTPS and HSTS enabled, but lacks published security policies or incident response information. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and social media presence support a credible business. Strategic recommendations include publishing terms of service, security policies, and improving business contact transparency.
SHS Estate, SIAshsestate.lv
Real Estate · Latvia
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
SHS Estate, SIA is a Latvian real estate company specializing in commercial and residential property transactions, including leasing and sales primarily in Riga and Jūrmala. The company offers comprehensive services such as market research, client consulting, and property positioning. The website reflects a small-sized business with a clear focus on the Latvian real estate market. Technically, the website is built on the Tilda CMS platform, utilizing standard web technologies including jQuery and Google Analytics for tracking. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security-wise, the website uses HTTPS and basic client-side validation but lacks advanced security headers and explicit security policies. Privacy compliance is partially addressed with a cookie consent banner but no visible privacy policy or terms of service pages. Contact information is prominently displayed, including phone numbers, emails, and a contact form, enhancing business credibility. WHOIS data could not be retrieved due to query limits, limiting domain registration verification. Overall, the website is functional, professional, and safe, but could improve in privacy and security transparency.
- SSiberian Heath International LLC
eu.siberianhealth.com
Retail · Russia
72Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Siberian Wellness (Siberian Health) is a well-established international company specializing in natural health and beauty products. With over 28 years of experience and operations in more than 60 countries, the company offers a broad portfolio of over 300 original products. Their business model includes direct sales and an e-commerce platform, targeting consumers interested in wellness and natural products globally. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on modern frameworks such as Vue.js and Nuxt.js, ensuring good performance and mobile optimization. The infrastructure appears robust, though the hosting provider is not explicitly identified beyond the domain registrar. SEO and accessibility are well addressed, contributing to a positive user experience. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks some advanced security headers and DNSSEC, which are recommended for enhanced security. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent mechanisms are missing. No incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy and professional, with minor areas for security and privacy enhancement. The domain registration data supports the legitimacy of the business, showing a long-standing presence consistent with the company's claims.
Fotogrāfs Sergejs Hudabašjanshudabash.com
Other · Latvia
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Fotogrāfs Sergejs Hudabašjans is a small photography business based in Latvia, specializing in food, event, wedding, product, interior, and urban photography along with video services. The website serves as a portfolio and contact point for potential clients, showcasing a variety of photographic works. The business appears to be locally focused with a clear service offering and a consistent brand presentation. Technically, the website is built on WordPress using Elementor and several JavaScript libraries such as jQuery, Fancybox, and Jarallax. It employs Google Analytics and Google Tag Manager for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Hosting appears to be through NameCheap, consistent with the domain registrar information. From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and important security headers, which could improve its security posture. There are no visible privacy or cookie policies, nor incident response or security policies, indicating gaps in compliance and security transparency. Contact information is limited but includes a WhatsApp phone number and a contact form. Overall, the website is functional and professional for a small photography business but would benefit from enhanced privacy compliance, improved security headers, and clearer contact and policy disclosures to strengthen trust and security posture.
Widen legalrer.legal
Other · Estonia
75Medium
NIS2 52 · GDPR 80
NIS2 52 · GDPR 80
Widen legal is a professional legal services firm established in 2023, operating primarily in the Baltic region (Estonia, Latvia, Lithuania). The company offers a broad range of legal services including corporate law, employment law, tax, public procurement, dispute resolution, and more. The firm positions itself as a client-friendly, fast, and optimized legal solutions provider, targeting businesses and individuals requiring legal expertise in multiple sectors. The website reflects a medium-sized firm with a strong regional presence and a comprehensive service portfolio. Technically, the website is built on WordPress CMS, utilizing modern plugins such as Forminator for forms and TranslatePress for multilingual support. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and uses HTTPS with a valid SSL certificate. SEO and accessibility are adequately addressed with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS but lacks DNSSEC and security headers, which are recommended for enhanced protection. Cookie consent is implemented via CookieYes, indicating some level of privacy compliance, though no explicit privacy policy or terms of service were found in the provided content. Contact information is comprehensive, including emails, phone numbers, and LinkedIn profiles for key personnel. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security best practices and privacy documentation. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security headers, DNSSEC, and privacy policy publication would enhance the firm's digital trust and compliance posture.
Manufacturing · Latvia
66Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Izolacijas.lv is the official SOPREMA solutions representative in Latvia, specializing in high-quality waterproofing, thermal insulation, green roofs, and terrace systems. The company targets construction professionals and private clients in Latvia, offering innovative and sustainable building solutions. The website reflects a professional business with clear navigation and a focus on product categories and services. Technically, the site uses modern web technologies including Google Analytics, service workers for PWA support, and a CMS platform (Multiscreensite). Security posture is moderate with HTTPS enabled but lacks visible security headers and privacy/cookie policies. Contact information is limited to a phone number with no email or detailed business registration data visible. Overall, the site is trustworthy and business credible but would benefit from enhanced privacy compliance and security best practices.
- Saal Digital Fotoservice GmbH
saal-digital.lv
Retail · Latvia
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Saal Digital Fotoservice GmbH operates a professional e-commerce platform specializing in high-quality photo products such as photo books, wall art, prints, and calendars. The company targets professional photographers and quality-conscious consumers, offering a broad product range with a strong emphasis on craftsmanship and fast delivery. The website is well-designed, mobile-optimized, and integrates modern technologies including TYPO3 CMS, Google Tag Manager, Facebook Pixel, and Usercentrics for consent management. Despite the lack of WHOIS data due to query limits, the website's content, branding, and customer testimonials indicate a reputable and established business with a history dating back to 1981. Security posture is good with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, the site presents a professional and trustworthy digital presence with moderate tracking and advertising transparency.
Security Verificationcvn.lv
Other
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website cvn.lv is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 invisible challenge, indicating the presence of a Web Application Firewall (WAF) or bot mitigation system. This prevents direct access to any business-related content, contact information, or policies. The lack of WHOIS data due to query limits further restricts the ability to verify domain registration details or legitimacy. Technically, the site uses modern libraries such as Bootstrap 5.3.3 and Google reCAPTCHA, but no CMS or hosting details are discernible. Security posture is limited to bot protection with no visible security headers or HTTPS verification in the provided data. Privacy and compliance features are absent from the accessible content. Overall, the site appears to be in a protective mode, limiting transparency and usability.
Alpenheat Baltija, SIA "Elia group"alpenheat.lv
Retail · Latvia
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Alpenheat Baltija, operated by SIA Elia group, is a specialized retailer based in Latvia offering a range of heated footwear dryers, insoles, clothing, and accessories primarily targeting consumers in cold climates seeking comfort and warmth. The website is built on the Mozello CMS platform and leverages modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics. Hosting and content delivery are managed via Amazon Cloudfront CDN, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of advanced security headers and detailed security policies suggests room for improvement. The lack of WHOIS data due to query limits restricts full domain trust analysis, but the visible business information and contact details support legitimacy. Overall, the site presents a professional and trustworthy e-commerce platform with moderate risk and good compliance indicators.
- Rīgas Sv. Franciska Romas katoļu draudze
franciskadraudze.lv
Non-profit · Latvia
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Rīgas Sv. Franciska Romas katoļu draudze is a local Roman Catholic parish church located in Riga, Latvia, serving the Latvian-speaking Catholic community. The website provides information about the church, its community groups, events, and donation options. It is positioned as a small non-profit religious organization within the Archdiocese of Riga. Technically, the site is built on WordPress using Elementor and integrates donation functionality via GiveWP. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and explicit privacy policies. WHOIS data is unavailable due to query limits, limiting domain trust analysis. Overall, the site is professional, trustworthy, and safe for general audiences.
- W
Other
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website emmi.lv currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The visible metadata reveals the use of outdated content management systems, specifically Joomla 1.5 and WordPress 2.5, which are no longer supported and pose significant security risks. There is no accessible business or contact information, privacy or cookie policies, or terms of service, limiting the ability to assess the company's legitimacy or compliance posture. The lack of WHOIS data due to query limits further restricts domain registration insights. Overall, the site appears to be either under maintenance, protected by aggressive security controls, or minimally maintained with poor content quality and technical implementation.
ROWL darbnīcarowldarbnica.lv
Retail · Latvia
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ROWL darbnīca is a small Latvian business specializing in wooden products, including laser cutting and engraving services. The company offers a variety of handcrafted wooden items such as gifts, decorations, and custom orders, targeting local consumers interested in artisan woodwork. The website is built on the Tilda CMS platform and integrates e-commerce features with Stripe payment processing. It demonstrates a moderate level of digital maturity with good design, mobile optimization, and basic SEO. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS data limits full trust verification, but the website content and social media presence support legitimacy. Overall, the site provides a professional and user-friendly experience suitable for its market niche.
AT.PIFE®atpife.com
Retail · Latvia
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
AT.PIFE® is a small Latvian-based business specializing in family-oriented hat designs and graphic design services, operating an e-commerce platform to retail their products. The company holds an EU registered trademark, indicating a formal business presence and brand protection. Their market position is niche, focusing on unique hat designs and related apparel, supported by a consistent branding strategy and active social media engagement. Technically, the website is built on the Mozello CMS platform, leveraging modern JavaScript libraries and Amazon Cloudfront CDN for hosting, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, but lacks important security headers and privacy compliance mechanisms such as cookie consent and privacy policy. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and trademark registration support the business's authenticity. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.
Hallgruppenhallgruppen.lv
Manufacturing · Latvia
57Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Hallgruppen is a Latvia-based company specializing in tent halls, metal constructions, and building projects, serving various industries such as logistics, manufacturing, agriculture, sports, and events. The company operates a professional website built on WordPress, featuring a comprehensive product catalog and regional presence across multiple European countries. The site employs modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. The absence of WHOIS data limits domain trust verification, but the website's professional design, active social media presence, and detailed cookie disclosures indicate a legitimate business. Overall, the site demonstrates good technical maturity and business credibility with room for improvement in privacy compliance and security best practices.
Artis Uljanovsartisuljanovs.com
Other
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.artisuljanovs.com is currently in maintenance mode, displaying a placeholder page with minimal content and no active business information. The site appears to be built on WordPress, utilizing standard plugins and jQuery libraries, but lacks any visible contact, privacy, or legal information. The absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. Technically, the site uses HTTPS and standard web technologies but lacks advanced security headers and privacy compliance features. The login form is present but does not show anti-CSRF protections. Overall, the website's security posture is basic, with room for significant improvements in security best practices and compliance. The lack of business information and policies reduces trustworthiness and business credibility.
Taler Dev Group (SIA)riga.art
Other · Latvia
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Art Gallery Riga is a small, niche art gallery business based in Latvia, operated by Taler Dev Group (SIA). The website serves as a simple informational landing page promoting art and culture in Riga, with contact details and a Facebook social media link. The business appears recently established in 2022 and targets a general audience interested in art. The business model focuses on cultural promotion and art exhibitions, positioning itself locally within the art community. Technically, the website is a static HTML/CSS site hosted behind Cloudflare with HTTPS enabled, ensuring basic security and performance. The site uses minimal technologies and includes a Cloudflare Insights beacon for minimal analytics. Mobile optimization and accessibility are basic but functional. No CMS or advanced frameworks are detected, indicating low technical complexity. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks advanced security headers and formal privacy or cookie policies. No forms or data collection mechanisms are present, reducing attack surface. The WHOIS data shows privacy protection typical for small businesses, with no suspicious patterns. Overall security posture is moderate but could be improved with additional headers and compliance documentation. The overall risk is low given the limited scope and content of the site, but improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.
SIA Emtekoemteko.com
Healthcare · Latvia
51Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
SIA Emteko operates as a wholesale distributor of pharmaceutical products and cosmetics within the European market, primarily targeting distributors and retailers. The company appears to be a small-sized entity founded in 2013, with a stable domain registration and a website primarily in Latvian. The website is built on WordPress, utilizing Bootstrap 4 and Google Fonts, and incorporates Google Tag Manager for analytics. While the technical infrastructure is moderately modern and the site is mobile-optimized, there is a lack of comprehensive privacy and cookie policies, as well as absence of explicit contact information and security disclosures. The security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers.
- RRedirecting...
eusti.net
Other · Finland
55Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website eusti.net currently serves as a minimal redirect or parked domain page with no accessible business content or user-facing information. The domain is registered through GoDaddy.com, LLC since November 2021 and uses ParkLogic DNS servers, which are commonly associated with domain monetization or parking services. There is no visible privacy policy, cookie policy, terms of service, or contact information on the site, indicating the absence of an active business presence or customer engagement mechanisms. The site content is limited to an obfuscated JavaScript redirect script, which prevents meaningful content access and suggests the domain is not currently used for a legitimate business website. From a technical perspective, the site lacks modern web standards such as HTTPS enforcement, security headers, and accessibility features. The obfuscated redirect script raises concerns about transparency and user trust. No analytics or tracking services are clearly identified, and no social media or external business links are present. The domain's WHOIS data is consistent and transparent, showing no privacy protection, but the domain age and DNS setup align with a parked domain rather than an operational business. Security posture is weak due to the lack of HTTPS and security headers, and the presence of obfuscated JavaScript could pose risks if malicious. No compliance or incident response information is available, and the site does not demonstrate GDPR or other privacy regulation adherence. Overall, the site represents a low-trust, low-content domain with minimal business credibility or security maturity.
Seobrothers LVseobrotherslv.com
Technology
66Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Seobrothers LV is a professional SEO company specializing in the iGaming niche, offering comprehensive SEO and marketing services to grow websites, outperform competitors, and generate profit. The company has a strong market position supported by awards and media recognition. Technically, the website is built on WordPress with modern SEO tools like Yoast SEO and hosted on AWS infrastructure, indicating a mature digital presence. Security posture is good with HTTPS enforced and domain locks in place, though improvements are recommended in security headers and DNSSEC implementation. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and well-managed business with a solid technical foundation.
- Tūrisma aģentūra KOLUMBS
bizness.kolumbs.lv
Hospitality · Latvia
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Tūrisma aģentūra KOLUMBS is a Latvian travel agency specializing in charter trips, last minute travel offers, flight tickets, hotel bookings, and related travel services. The company targets Latvian-speaking leisure and business travelers and maintains a professional online presence with recognized industry certifications such as IATA and ALTA memberships. The website is built on Joomla CMS and integrates multiple modern web technologies and marketing tools, including Google Analytics, Facebook Pixel, Hotjar, and Tawk.to live chat, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced but could be improved by adding standard security headers like Content-Security-Policy and X-Frame-Options. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website is well-structured, mobile-optimized, and trustworthy, though WHOIS data is unavailable due to query limits, which slightly limits domain legitimacy verification.
Sia "VV Baltic"vvbaltic.eu
Manufacturing · Latvia
58Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
vvBaltic is a Latvian manufacturing company specializing in glazed steel, PVC, and aluminum structures with over 20 years of industry experience. The company leverages Swiss technology from JANSEN to produce high-quality steel profile windows, doors, partition walls, and facades, targeting architects, construction firms, and building owners. The website reflects a professional and consistent brand presence with clear business offerings and contact channels. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and cookie consent. Performance optimizations are in place via WP Rocket, and the site is mobile-friendly with good SEO practices. However, some security headers are missing, and Google Analytics is not fully configured, indicating room for technical improvements. From a security perspective, the site uses HTTPS with strong SSL configuration and enforces cookie consent with granular options. No critical vulnerabilities or exposed sensitive data were found. However, the absence of explicit security policies and incident response contacts suggests a moderate security maturity level. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained. Strategic improvements in security headers, analytics configuration, and incident response documentation would enhance the security posture and compliance further.
Orient.lvorient.lv
Technology · Latvia
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Orient.lv is a Latvian-based electronics e-commerce store specializing in Arduino boards, electronic components, sensors, and solar panel accessories. The website also provides educational content such as Arduino tutorials and promotes outdoor activities like cycling and water tourism routes. The business targets hobbyists, students, educators, and outdoor enthusiasts primarily within Latvia. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality, utilizing common web technologies such as jQuery and Font Awesome. The site is secured with HTTPS and uses Google Analytics for visitor tracking, though it lacks visible privacy and cookie policies, which is a compliance gap. Security posture is moderate with no evident vulnerabilities but missing security headers and incident response information. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website presents as a small, niche retailer with a good user experience but requires improvements in privacy compliance and security best practices.
- GedKan
gedkan.eu
E-commerce · Latvia
51Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
GedKan is a specialized e-commerce business offering quality materials for candle, soap, bath bomb, and diffuser making. The website targets hobbyists and small businesses in the crafting sector, providing a wide range of products including waxes, wicks, dyes, molds, fragrance oils, and accessories. The business operates primarily in Latvia and uses PrestaShop CMS with Elementor for content management and page building. The site is well-structured with good navigation and product categorization, supporting a positive user experience.
Domino’s Pizzadominospizza.lv
Retail · Latvia
62Medium
NIS2 22 · GDPR 10
NIS2 22 · GDPR 10
Domino’s Pizza Latvia website provides an online platform for ordering pizza and related food items with delivery service focused on Riga. The site features a professional design, clear navigation, and detailed product listings including promotions and combos. The technical infrastructure leverages modern web technologies such as Google Maps API, reCAPTCHA v3, Google Tag Manager, and Facebook Pixel, indicating a mature digital presence. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and cookie policies are missing, which impacts compliance. The absence of WHOIS data limits domain legitimacy verification, but branding and content strongly suggest a legitimate franchise operation. Overall, the site is functional, secure, and user-friendly but would benefit from enhanced privacy compliance and incident response transparency.
- IIK WESTART
lex112.com
Real Estate · Latvia
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Lex112 is a Latvian-based legal assistance service specializing in quick legal help, contract templates, and educational resources primarily related to real estate and legal matters. The company operates a WordPress-based website with WooCommerce and Elementor, targeting individuals and businesses in Latvia seeking legal and real estate services. The business appears to be newly established in 2024, with transparent registration details and a clear physical address in Riga. The website offers multilingual support in Latvian, English, and Russian, enhancing accessibility for a broader audience. Technically, the site uses modern web technologies but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security posture. The domain is secured with HTTPS and has a clientTransferProhibited status, which are positive trust indicators. However, the very recent domain registration suggests the business is new and may require further validation for long-term trust. Overall, the website is functional with basic content quality and moderate professionalism but would benefit from enhanced security and privacy features.