Medium-risk security reports
90,188 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,193001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
49,001–49,050 of 90,188
- Schüco
schueco.lv
Manufacturing · Latvia
74Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Schüco is a globally recognized manufacturer and provider of advanced building envelope solutions, including windows, doors, facades, and building automation systems. The company targets architects, fabricators, investors, and other building professionals, offering a comprehensive portfolio of products and digital solutions to support the entire building lifecycle. Schüco operates under the OTTO FUCHS Group umbrella, indicating a strong corporate backing and market presence. Technically, the website is built on modern web standards with a CoreMedia CMS backend, leveraging JavaScript and jQuery for interactivity. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a clear navigation structure. Privacy and cookie policies are prominently presented with user consent mechanisms, reflecting compliance with GDPR and related regulations. From a security perspective, the site uses HTTPS and includes cookie consent but lacks visible security headers in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is unusual but does not detract from the legitimacy of the site given the professional content and branding consistency. Overall, Schüco's website demonstrates a mature digital presence with strong business credibility, good privacy compliance, and a solid technical foundation. Strategic improvements in security header implementation and WHOIS transparency could further enhance trust and security posture.
REGOVEIKALS.LVregoveikals.lv
Retail · Latvia
64Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
REGOVEIKALS.LV is an established Latvian e-commerce retailer specializing in a broad range of products including clothing, footwear, accessories, garden machinery, heating and ventilation equipment, electrical installation supplies, and various tools. The website targets consumers and businesses within Latvia, offering a comprehensive online shopping experience with features such as wishlists, product comparisons, and quick views. The business model is focused on retail e-commerce, positioning itself as a regional player in the Latvian market.
Smart Car Rentsmartcarrent.lv
Transportation · Latvia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Smart Car Rent is a small transportation business based in Riga, Latvia, specializing in short-term car rental services. Their offerings include rental of new vehicles, chauffeur services, airport pick-up, and wedding car rentals. The company targets individuals and businesses seeking convenient and competitively priced car rental solutions in the Latvian market. The website is professionally designed with good content quality and clear navigation, supporting multiple languages and featuring social media integration. Technically, the site employs modern web technologies such as jQuery, Bootstrap, Google Fonts, and integrates Google Maps, Google Analytics, and Facebook Pixel for enhanced user experience and marketing. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, though improvements are recommended in security headers and vulnerability disclosure. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the site demonstrates moderate trustworthiness and business credibility, though WHOIS data is unavailable due to query limits, limiting full domain legitimacy assessment.
- OCT Composites
carbontrophies.com
Manufacturing · Latvia
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
OCT Composites operates the website carbontrophies.com, specializing in manufacturing high-quality carbon fiber trophies and composite parts primarily for sports and racing events. The company positions itself as a high-end manufacturer with a global client base, leveraging 15 years of experience in fiber parts production. Their business model includes custom design trophies, laser engraved plates, and an online shop for related parts, targeting sports event organizers and enthusiasts. Technically, the website is built on Joomla CMS with a modern frontend stack including jQuery, Bootstrap, and Owl Carousel. The site is moderately performant, mobile-optimized, and has a professional design with clear navigation. However, accessibility and SEO optimizations are basic. Hosting details are limited but the domain registrar is reputable. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and important security headers. There are no visible privacy or cookie policies, nor incident response contacts, indicating compliance and security posture gaps. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance improvements, and better transparency on data protection and incident response to reduce risk and build trust.
Education · Latvia
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Rīgas Tehniskās jaunrades nams "Annas 2" is a Latvian educational institution dedicated to fostering technical creativity and innovation among youth in Riga. The organization provides workshops, courses, and events aimed at developing technical skills and supporting young innovators. The website reflects a medium-sized educational entity with a clear focus on youth and technical education. Technically, the website is built on WordPress using the Divi theme, leveraging modern web fonts and standard web technologies. While the site is accessible and well-structured, it lacks advanced security headers and detailed WHOIS data is unavailable due to query limits. Privacy and cookie policies are present, indicating awareness of GDPR compliance. Overall, the security posture is moderate with room for improvement in security best practices. The website is safe for general audiences and does not contain any adult or questionable content.
SCC Logiscclogi.lv
Manufacturing · Latvia
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SCC Logi is a Latvian company specializing in the manufacturing and sale of windows and balcony doors, offering products under recognized quality brands such as Brugmann and Rehau. The website targets Latvian consumers and businesses interested in these products, providing an online catalog and shopping cart functionality. The business appears to be a small-sized manufacturer or supplier with a localized market focus. Technically, the website employs modern JavaScript libraries including Vue.js, Google Analytics, and Hotjar for user tracking and analytics. The site is mobile-optimized with a responsive design and basic SEO and accessibility features. However, no CMS or hosting provider information is discernible from the content. Performance is moderate, and the site uses HTTPS, but lacks advanced security headers. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected, but security headers are missing, and no forms with explicit security controls were found. The WHOIS data could not be retrieved due to query limits, limiting domain trust assessment. Overall, the website is professional and functional with moderate security and privacy compliance. The lack of WHOIS transparency and absence of detailed contact information slightly reduce trustworthiness. Strategic improvements in security headers, incident response information, and enhanced privacy disclosures are recommended to strengthen the security posture and business credibility.
- AS PATA Strenči
patastrenci.lv
Real Estate · Latvia
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
AS PATA Strenči is a well-established forestry company in Latvia with over 70 years of experience, specializing in timber stand procurement and forest management services. The company targets forest owners and logging enterprises across Latvia, offering direct cooperation with wood processors to ensure competitive pricing without intermediaries. The website reflects a professional and consistent brand image, emphasizing expertise and economic benefits for clients. Technically, the site is built on a modern React and Next.js framework, incorporating Google Tag Manager for analytics, and is optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS and privacy policies in place, though it lacks some advanced security headers and incident response disclosures. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility in the forestry sector.
- LLatvijas Permakultūras biedrība
permakultura.lv
Other · Latvia
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.permakultura.lv represents the Latvian Permaculture Association, a small non-profit organization dedicated to promoting permaculture principles and sustainable living practices in Latvia. The site offers educational content, community projects, events, and initiatives aimed at ecological and ethical stewardship of land and society. It serves as a hub for practitioners and enthusiasts to learn and collaborate. Technically, the website is built on the Weebly platform, utilizing standard web technologies including jQuery, Google Analytics, and Facebook Pixel for tracking and marketing purposes. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and some modern security headers. The presence of multiple third-party marketing scripts indicates active engagement in outreach but also raises privacy considerations. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but it lacks explicit security policies, incident response contacts, and cookie consent mechanisms required for full GDPR compliance. The WHOIS data is unavailable due to query limits, but no suspicious indicators were found in the content or linked domains. Overall, the site appears legitimate and trustworthy as a community-driven educational platform. The risk assessment is moderate with recommendations to enhance security headers, update outdated libraries, implement cookie consent, and provide clearer contact and policy information to improve trust and compliance.
- SIA LIINI.LV
liini.lv
Retail · Latvia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
LIINI.LV is a small Latvian retail business specializing in handcrafted linen curtains and bed linens. The company emphasizes natural materials, personalized service including free consultations with fabric samples and window measurements, and delivery both locally and internationally. The website reflects a niche artisan market position with a focus on quality and customer experience. Technically, the site is built on the Tilda CMS platform, utilizing standard web technologies such as jQuery and integrates marketing tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enforced and secure form handling, but lacks important security headers and visible privacy/cookie policies, which are compliance gaps. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the website is professional and trustworthy for its business scope but would benefit from enhanced security and privacy compliance measures.
Other
56Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website urbejs.lv presents minimal content primarily focused on displaying advertisements and related search results through embedded iframes and Google Adsense scripts. There is no clear business description, contact information, or company identity visible on the site, which limits the ability to assess its market position or services. The site includes basic privacy and legal pages but lacks comprehensive GDPR compliance indicators or cookie consent mechanisms. Technically, the site uses standard JavaScript and Google advertising technologies but does not reveal any advanced frameworks or CMS platforms. Security posture is weak due to the absence of visible security headers and unknown SSL status. The lack of WHOIS data due to query limits further reduces trustworthiness and domain legitimacy assessment. Overall, the site appears to be a low-content placeholder with advertising focus and limited business credibility.
Baltic Banknotebalticbanknote.lv
Other · Latvia
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Baltic Banknote is a Latvian company specializing in secure printing services of various types and complexity. The website presents a professional and clean design built on the Webflow platform, targeting a general audience interested in secure printing solutions. The site is multilingual, supporting Latvian, English, and Russian languages, indicating a regional focus with some international reach. The business model appears service-oriented, focusing on secure printing products without explicit e-commerce or direct sales features on the homepage. Technically, the site uses modern web technologies including Google Analytics for tracking and WebFont Loader for typography, hosted on Webflow's CDN infrastructure. Performance and mobile optimization are moderate to good, with basic accessibility features. Security posture is average; HTTPS is used but no security headers were detected, and no privacy or cookie policies are present, which may impact GDPR compliance. No contact emails, phone numbers, or physical addresses are explicitly provided on the homepage, limiting direct communication channels. WHOIS data could not be retrieved due to query limits, restricting domain legitimacy assessment. Overall, the site is functional and professional but would benefit from enhanced security practices, privacy compliance, and more transparent contact information.
EMI Skārdnieksemiskardnieks.lv
Other · Latvia
59Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
EMI Skārdnieks is a small, stable, and growing Latvian company specializing in roofing and custom sheet metal fabrication services. With 8 years of experience, they offer a range of services including roofing installation, gutters, window sills, chimneys, and roof cleaning. The company is a member of the Latvian Artisans Chamber (LAK), indicating a level of professional recognition. Their website is built on WordPress using the Avada theme and Fusion Builder, featuring a professional design and clear navigation. Contact options include phone, email, and a contact form protected by Google reCAPTCHA. However, the site lacks visible privacy and cookie policies, which may impact GDPR compliance.
Woodpro UKwoodpro.co.uk
Retail · United Kingdom
60Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Woodpro UK is a medium-sized retail business specializing in bespoke garden buildings including summer houses, log cabins, gazebos, garden offices, and garages. They provide a unique 3D configurator tool allowing customers to design custom garden buildings, positioning themselves as a leading supplier in their niche. The website is built on WordPress with WooCommerce, leveraging modern web technologies and third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. The WHOIS lookup for the 'www' subdomain failed due to domain naming rules, but the main domain is active and consistent with a legitimate business. Overall, the site demonstrates a professional online presence with good content quality and user experience.
SIA "PLASTIKA"plastika.lv
Manufacturing · Latvia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
SIA "PLASTIKA" is a Latvian manufacturing company specializing in custom plastic and rubber product production. With over 25 years in the industry, the company offers a full production cycle including mold and casting form creation, focusing on quality and customer-specific requirements. The website presents a professional and consistent brand image, targeting business clients needing tailored manufacturing solutions. Technically, the site is built on the Mozello CMS platform, hosted via Amazon Cloudfront, and uses common libraries such as jQuery and fancybox. Google Analytics and Tag Manager are employed for user tracking, though privacy and cookie policies are absent, indicating room for compliance improvement. Security posture is moderate with HTTPS enabled but lacking security headers and formal incident response information. Overall, the site is functional, mobile-optimized, and content-rich for its business purpose but would benefit from enhanced privacy and security practices.
Tālmācības vidusskola Rīgas 1. vidusskolavidusskola.com
Education · Latvia
67Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Vidusskola.com operates as a Latvian distance learning high school providing online education from 1st through 12th grade. The institution targets students of various ages, including adults, offering flexible learning options such as self-paced video lessons and live teacher sessions. The website positions itself as a leading provider in the Latvian market for remote education, emphasizing free education for high-achieving students and accelerated learning programs. The business model revolves around online course delivery, student registration via web forms, and marketing through digital channels.
Other
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.rewico.lv is a small business site built on the Wix platform, utilizing standard Wix hosting and technologies such as Google Analytics and Google Tag Manager for visitor tracking. The site content is minimal in the provided HTML, with no visible business descriptions, contact information, or privacy policies. The technical infrastructure is typical for Wix-hosted sites, with moderate performance and basic mobile optimization. Security posture is basic with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS data due to query limits restricts domain legitimacy assessment. Overall, the site appears to be a small-scale business presence with room for improvement in transparency, compliance, and security.
- BBohnenkamp AG
bohnenkamp.lv
Transportation · Latvia
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Bohnenkamp AG is a well-established European supplier specializing in tires and wheels for agricultural, industrial, construction, and special machinery markets. Founded in 1950 and operating in Latvia as part of the Bohnenkamp Group, the company offers a broad portfolio of products including tires, tubes, rims, axles, and wheels. The website reflects a mature digital presence with clear business information, multiple product categories, and active social media engagement. Technically, the site is built on the Bitrix CMS platform and integrates several analytics and marketing tools such as Google Analytics, Yandex Metrika, Facebook Pixel, and Tawk.to chat support. Security posture is moderate with HTTPS usage and CAPTCHA on forms, but lacks visible advanced security headers and published security policies. Privacy compliance is addressed with cookie consent and a privacy policy page in Latvian. Overall, the site is professional, trustworthy, and serves a B2B audience in the transportation and manufacturing sectors.
Manufacturing · Latvia
70Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
Heidelberg Materials SBC Latvia SIA is a medium-sized company specializing in metal structure design, manufacturing, installation, and general construction services with over 20 years of experience. The company is part of the Heidelberg Materials group and holds the EN 1090 EXC4 certification, indicating high standards in steel construction. The website is professionally designed using Drupal 10 CMS and provides comprehensive information about the company's services and sustainability efforts. Technically, the site uses modern web technologies and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and explicit security policies could enhance protection. Overall, the website reflects a credible and professional business presence in the Latvian construction sector.
Sensoriumneredzamapasaule.lv
Hospitality · Latvia
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Sensorium is a niche experiential museum located in Riga, Latvia, specializing in sensory experiences conducted in complete darkness. The business targets a broad audience including tourists, schools, corporate clients, and families, offering guided tours, corporate team-building events, and educational programs. The website is professionally designed using modern web technologies such as Framer, and integrates analytics tools like Google Analytics and Facebook Pixel to monitor user engagement. Social media presence is strong with official accounts on Facebook, Instagram, YouTube, and TikTok, enhancing brand visibility and trust. However, the absence of WHOIS data limits verification of domain legitimacy. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy disclosures, which are recommended for compliance and user trust. Overall, the website presents a credible and engaging digital front for the business, though improvements in privacy compliance and security best practices are advised.
SKCskc.lv
Manufacturing · Latvia
57Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SKC is a Latvian small business specializing in manufacturing and retail of modular construction systems and advertising stands. The website presents a professional and consistent brand image targeting businesses and construction sector clients in Latvia. The company offers a range of products including modular constructions, advertising stands, aluminum profiles, and various construction-related partitions and cabins. The digital infrastructure is built on WordPress with Elementor, leveraging modern web technologies and plugins to provide a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing. The absence of WHOIS data limits full domain trust verification, but the website's contact information and content suggest legitimacy. Overall, the site is well-structured, safe, and compliant with privacy regulations.
- FFabryka Kabli ELPAR Sp. z o.o.
elpar.pl
Energy · Poland
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Fabryka Kabli ELPAR Sp. z o.o. is a well-established Polish manufacturer specializing in the production of various types of cables including electroenergetic, control, signaling, special, safe, halogen-free, railway, and mining cables. Founded in 2000, the company targets industrial clients primarily in the energy and transportation sectors. Their website reflects a medium-sized enterprise with a professional online presence and multilingual support, indicating a focus on both domestic and international markets. The business model centers on manufacturing and direct sales, supported by a career portal and active social media channels.
Viesu nams "Villa Avoti"villaavoti.com
Hospitality · Latvia
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Villa Avoti is a small hospitality business operating a guest house near Matiņa lake in Sigulda, Latvia. The website presents a professional and user-friendly interface with multilingual support and integrated booking functionality. The business offers accommodation with amenities such as sauna, pool, and picnic areas, targeting tourists and visitors seeking relaxation and family gatherings. The domain is registered with Wix.com Ltd. and the hosting and technical infrastructure leverage modern JavaScript libraries and booking APIs. Security posture is adequate with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and security headers are absent. Privacy and cookie policies are present with consent mechanisms, but no explicit security or incident response policies are published. Overall, the website is trustworthy, well-maintained, and compliant with basic privacy regulations.
- 深深圳华大智造科技股份有限公司
en.mgi-tech.com
Technology · China
63Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
深圳华大智造科技股份有限公司是一家专注于生命科学与生物技术领域的高科技企业,致力于研发、生产和销售基因测序仪器设备及相关试剂耗材。公司秉承“创新智造引领生命科技”的理念,服务精准医疗、精准农业和精准健康等行业,市场定位为生命科技核心工具的领先制造商。网站内容丰富,涵盖产品中心、技术应用、资源中心及服务支持,面向专业科研机构和行业客户。技术基础包括使用jQuery、Swiper.js、Font Awesome等前端技术,托管于阿里云,集成Google Tag Manager进行数据分析和用户行为追踪。网站设计专业,导航清晰,移动端优化良好,内容质量较高。
- SSecurity Verification
svc.lv
Other
66Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website svc.lv currently serves only as a security verification page implementing Google reCAPTCHA v3 to prevent automated access. No business-related content, contact information, or policies are present, indicating that the site is either under protection or not publicly accessible. The lack of WHOIS data due to query limits further restricts the ability to verify domain ownership or legitimacy. Technically, the site uses Bootstrap for styling and Google reCAPTCHA for bot mitigation, but lacks visible security headers or HTTPS confirmation in the provided data. Overall, the site’s security posture is minimal, with key improvements needed in transparency, policy disclosure, and security hardening. The current risk assessment is high due to the inability to verify legitimacy and the presence of a blocking mechanism.
- Nacionālā elektronisko plašsaziņas līdzekļu padome
neplpadome.lv
Government · Latvia
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The Nacionālā elektronisko plašsaziņas līdzekļu padome (NEPLP) is an independent autonomous government institution in Latvia responsible for representing public interests in the electronic media sector. The website serves as an official portal providing regulatory information, media registries, reports, and public communications. It targets Latvian citizens, media professionals, and government stakeholders. The site is built on Drupal CMS and employs modern web technologies with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly documented. WHOIS data is unavailable due to query limits, but the domain and content strongly indicate legitimacy as a government entity. Overall, the site is professional, trustworthy, and safe for general audiences.
- KKafejnīca Trinat
trinat.lv
Hospitality · Latvia
56Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Kafejnīca Trinat is a small hospitality business operating a cafe in Riga, Latvia, specializing in home-style cooking since 2017. The website presents a professional and consistent brand image with clear contact information, social media presence, and a dedicated mobile app, positioning it as a local favorite for cozy dining experiences. The technical infrastructure is modern, leveraging React and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of WHOIS data limits full domain legitimacy verification, but the overall digital footprint suggests a trustworthy and legitimate business. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response policies to improve compliance and trust.
ĪLE auto SIAile-auto.lv
Transportation · Latvia
53Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
ĪLE auto SIA is an established automotive dealership and service provider in Latvia, founded in 1993. The company is the official representative for Subaru and GWM brands and a service partner for Volkswagen. Their business model focuses on new and used car sales, vehicle servicing, repairs, and spare parts sales, targeting general automotive customers in Latvia. The website reflects a professional presence with clear branding and relevant content tailored to their market segment. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and FontAwesome, alongside Google Tag Manager for analytics and marketing. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. HTTPS is enabled, ensuring secure communications. From a security perspective, the site demonstrates good baseline practices including HTTPS and cookie consent mechanisms. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic but present, with accessible privacy and cookie policies. Overall, the website presents a low-risk profile with a solid business credibility and moderate technical maturity. The absence of WHOIS data limits full domain legitimacy verification, but the visible business information and content quality support trustworthiness. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and compliance standing.
Allažu pamatskolaallazupamatskola.lv
Education · Latvia
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Allažu pamatskola is a local educational institution in Latvia providing primary and preschool education. The website serves as an information portal for students, parents, and staff, offering details on educational programs, schedules, events, and contact information. The site is built on WordPress and uses common web technologies such as jQuery and FontAwesome. It features a cookie consent banner indicating compliance with privacy regulations. Security posture is moderate with HTTPS enabled but lacks advanced security headers and policies. WHOIS data is unavailable due to query limits, limiting full domain trust assessment. Overall, the website is professional, informative, and trustworthy for its intended audience.
- Chemi Group Holding
chemigroup.lv
Manufacturing · Latvia
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Chemi Group Holding is a Latvian scientific production commercial company specializing in the development and manufacture of professional cleaning, washing, and disinfection products suitable for both professional and household use. The company emphasizes high-quality products and customer service, targeting a broad audience including food industry enterprises, households, offices, educational and medical institutions, hospitality, transport, and private individuals. The website is built on Joomla CMS with VirtueMart e-commerce, featuring a modern design, clear navigation, and mobile optimization. It integrates Google Analytics and Tag Manager for user tracking and marketing insights. Security measures include CSRF tokens in forms and a cookie consent mechanism, but lack advanced HTTP security headers and explicit privacy policies, indicating room for improvement in security posture and privacy compliance. WHOIS data was unavailable due to query limits, limiting domain trust analysis. Overall, the website presents a professional and trustworthy business with a moderate technical and security maturity level.
Veikals Košumskosums.lv
Retail · Latvia
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Veikals Košums is a small retail and e-commerce business based in Riga, Latvia, specializing in women's dresses and accessories. The company operates both a physical store and an online Shopify-powered website, targeting women seeking fashionable dresses in sizes M to XXL. The business emphasizes personalized customer service and hosts events to engage its community. Technically, the website is built on Shopify with modern web technologies and includes tracking via Facebook Pixel and Shopify Analytics. Security posture is generally good with HTTPS enforced, though explicit security headers and cookie consent mechanisms are missing. WHOIS data is unavailable due to query limits, but the website presents consistent branding and contact information, supporting legitimacy. Overall, the site is professional, user-friendly, and compliant with basic privacy requirements.
Hospitality · Latvia
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website spbar.lv represents a local food delivery business based in Riga, Latvia, specializing in sushi and pizza delivery with a focus on quick service and free delivery in specific districts such as Bolderāja. The site is built on the Tilda CMS platform and uses modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The business model is straightforward, targeting local residents seeking convenient food delivery options. The website content is well-structured, visually consistent, and mobile-optimized, providing a good user experience. From a technical perspective, the site leverages Tilda's hosting and CDN infrastructure, ensuring moderate performance and good mobile responsiveness. However, the site lacks advanced security headers and explicit privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data due to query limits restricts the ability to fully verify domain legitimacy and registration details. Security posture is moderate with HTTPS implied but no visible security headers or vulnerability disclosures. Tracking technologies are in use, but privacy compliance is minimal, with no GDPR-related disclosures or consent mechanisms evident. Contact information is clearly presented, including a phone number and physical address, but no company emails or security incident contacts are provided. Overall, the website is functional and professional for its business purpose but would benefit from enhanced security practices, privacy compliance improvements, and transparent domain registration information to increase trust and reduce risk.
Astieks Komfort OÜastieks.com
Retail · Estonia
57Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Astieks Komfort OÜ operates a professional website focused on luxury home decoration, kitchen furniture, and interior design services primarily in Estonia. The company is an official dealer of SieMatic kitchens and has been active in the luxury furniture industry since 2005. Their business model combines retail of high-end furniture and accessories with design consultancy and project realization. The website is well-structured, multilingual, and provides clear contact channels including phone, email, and a contact form. Social media presence on Facebook and Instagram supports brand visibility. Technically, the website is built on WordPress using WooCommerce for e-commerce functionality and Elementor for page building. The tech stack includes modern libraries such as jQuery and Vue.js, and SEO is enhanced by Yoast SEO plugin. The site is mobile optimized and performs moderately well. However, some security best practices like enabling DNSSEC and security headers are missing. The domain is secured with HTTPS and has a clientTransferProhibited status, indicating good domain management. Security posture is adequate but could be improved by adding security headers and explicit incident response information. Privacy compliance is basic with GDPR and cookie policies present but lacking a consent mechanism. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professional, serving a niche luxury retail and design market. Recommendations include enhancing DNS security with DNSSEC, implementing security headers, adding cookie consent mechanisms, and publishing terms of service and security policies to improve compliance and trust.
Transportation · Latvia
61Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.veloosta.lv represents a small local business based in Alūksne, Latvia, specializing in the rental of electric vehicles and recreational transport such as electric scooters, bicycles, gokarts, and water transport. The business targets local customers and tourists seeking eco-friendly and fun transportation options. The site is primarily in Latvian and offers clear navigation to catalogues, galleries, and contact information. The business model is straightforward rental service with a focus on electric and family-friendly vehicles. Technically, the website uses a simple tech stack including jQuery and FontAwesome for UI elements. It does not appear to use a CMS or advanced frameworks. The site is mobile optimized with responsive design and includes SEO-friendly meta tags and Open Graph data. Performance is moderate with video content on the homepage. No analytics or tracking scripts were detected, indicating a privacy-conscious approach or limited digital marketing. From a security perspective, HTTPS is implied by canonical URLs but no explicit security headers were detected in the provided data. There is no visible cookie consent mechanism, which may impact GDPR compliance. Privacy policy and terms of service pages exist, but no incident response or security policy information is published. No WHOIS data was available due to query limits, limiting domain trust analysis. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional, professional, and suitable for its local rental business purpose. Security posture is basic and could be improved with standard headers and privacy compliance enhancements. The lack of WHOIS data reduces confidence in domain legitimacy but the site content and contact details support a legitimate small business presence.
Gaismas pamatskolagaismasskola.lv
Education · Latvia
61Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Gaismas pamatskola is a specialized educational institution in Latvia focused on providing basic and professional education programs for students with intellectual disabilities. The website reflects a small-sized educational entity with a clear mission to support this niche audience through various educational and support programs. The site is built on WordPress and uses common plugins for social sharing and cookie consent, indicating a moderate level of digital maturity. The technical infrastructure is standard for educational websites, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. The absence of WHOIS data limits full verification of domain legitimacy, but the website content and structure suggest a trustworthy and professional organization. Overall, the site is safe, well-structured, and compliant with basic privacy regulations, though improvements in security practices and contact transparency are recommended.
SIA Multi Sensorsmulti-sensors.com
Manufacturing · Latvia
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
SIA Multi Sensors is a small Latvian company specializing in the distribution and official representation of industrial sensor and safety products, including brands such as Pulsotronic and Pizzato. The company targets industrial and commercial customers primarily in Latvia and Russia, offering products like inductive sensors, photo sensors, safety switches, emergency stop buttons, and rubber safety barriers. The website reflects a focused business model with clear product offerings and regional representation. Technically, the website is built on the Wix platform, leveraging standard Wix technologies and Google Analytics for visitor tracking. The site is moderately optimized for mobile devices and provides basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, impacting the overall risk profile. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and clarifying domain registration status to improve credibility and compliance.
- AAF / Dinair
dinair.lv
Other · Latvia
75Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
AAF / Dinair is a Latvian company specializing in air filtration solutions, offering services such as analysis, optimization, and monitoring to help organizations save time and money. The website is built on TYPO3 CMS with Bootstrap framework, indicating a moderate level of technical maturity. The content is professional and targeted towards business customers in Latvia, positioning the company as a regional provider of industrial air filtration solutions. Security posture is moderate with no detected security headers or explicit policies, and the absence of WHOIS data limits full trust assessment. Privacy and cookie policies are missing, which impacts compliance and trust. Overall, the website is functional and professional but would benefit from enhanced security and compliance features.
- Char Champs
charchamps.com
Energy · Latvia
67Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
Char Champs is a Latvian-based charcoal manufacturing and wholesale business operating under the parent company SIA Burtnieks. The company offers high-quality charcoal products primarily targeting the local market. Their website is professionally designed using the Wix platform, featuring clear branding and relevant business information such as physical address and phone contact. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Technically, the website uses modern web technologies provided by Wix and enforces HTTPS, but lacks important security headers and privacy compliance documentation. There are no detected analytics or tracking mechanisms, indicating minimal user tracking. Overall, the site presents a moderate security posture with room for improvement in privacy and domain legitimacy verification.
Nordic CLTnordicclt.com
Manufacturing
70Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Nordic CLT operates as a supplier of environmentally friendly building products, specializing in Cross Laminated Timber (CLT), Glued Laminated Timber (Glulam), and CNC services. The company positions itself as a first choice supplier within the timber manufacturing sector, targeting construction professionals and environmentally conscious builders. The website is built on the Wix platform, leveraging standard Wix technologies and Google Fonts, providing a moderate level of performance and mobile optimization. However, the site lacks comprehensive privacy, cookie, and terms of service policies, as well as contact and incident response information, which impacts its overall trustworthiness and compliance posture. The domain WHOIS data is unavailable, raising concerns about domain registration legitimacy. Security posture is moderate with HTTPS enabled but missing advanced security headers. Overall, the site is accessible and safe but requires improvements in privacy compliance and business credibility to enhance trust and security.
Other
60Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website yourworldmap.eu is a parked domain page primarily serving as a placeholder indicating the domain is for sale. It lacks any substantive business content, contact information, or services beyond domain resale. The technical infrastructure relies on basic HTML and JavaScript with third-party advertising scripts from Google Adsense and Youseasky, served via Amazon Cloudfront CDN. The site is accessible without any WAF or security challenges but does not implement advanced security headers or privacy compliance mechanisms. The security posture is minimal, with no forms or sensitive data exposure but also no evident best practices. Overall, the site presents a low-risk profile but also low trustworthiness due to lack of business presence and transparency.
TENAX PANELtenaxpanel.lv
Manufacturing · Latvia
54Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
TENAX PANEL is a Latvian manufacturing company specializing in sandwich panels, targeting businesses in construction and related industries. The website is built on WordPress with a moderate level of digital maturity, employing common plugins such as Yoast SEO and Contact Form 7, and includes multilingual support. The technical infrastructure is standard for SME business websites, with moderate performance and good mobile optimization. Security posture is average; while HTTPS is presumably enabled, no security headers were detected and no explicit security policies are published. Privacy compliance is limited, with no visible privacy or terms of service pages, though a cookie consent mechanism is present. Overall, the website presents a professional business front but lacks some critical compliance and security disclosures.
- SSIA Sigulda adventures
smartbike.rent
Transportation · Latvia
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Sigulda Adventures is a small Latvian company specializing in electric fat tire bicycle rentals under the Smartbike brand, targeting tourists and locals who want to explore the hilly terrain of Sigulda with ease. The website is professionally designed, mobile-optimized, and provides clear information about products, pricing, and contact details. The technical infrastructure leverages modern web technologies including Google Fonts, Google Maps API, Facebook Pixel, and Google Analytics, hosted on DigitalOcean. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, though no terms of service or incident response information is publicly available. Overall, the website is trustworthy and legitimate, with consistent WHOIS data and a domain age appropriate for the business history.
Non-profit · Latvia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.akka-laa.lv represents AKKA/LAA, a Latvian non-profit organization focused on copyright and communication consultancy for authors and rights holders. The site provides comprehensive information about copyright management, licensing, royalty collection, and author support services. The content is primarily in Latvian and targets authors, users of authors' works, and rights holders within Latvia. The website is well-structured with clear navigation and a professional design, reflecting a mature digital presence for a non-profit entity. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with HTTPS enabled ensuring secure communication. The site is mobile optimized and includes a cookie consent mechanism indicating GDPR compliance awareness. However, there is no evidence of advanced security headers or explicit security policies, which could be improved to enhance the security posture. From a security perspective, no vulnerabilities or WAF blocking mechanisms were detected. The site enforces HTTPS and uses cookie consent banners, but lacks visible contact information for incident response or detailed security policies. The absence of WHOIS data due to query limits restricts full domain legitimacy verification, but the website content and domain name strongly suggest a legitimate organization. Overall, the website presents a trustworthy and professional front for AKKA/LAA, with room for improvement in security headers, contact transparency, and WHOIS data availability. Strategic recommendations include implementing security headers, publishing explicit security and privacy policies, and providing clear contact channels for security incidents.
SIA “Cement Trade”cement.lv
Manufacturing · Latvia
50Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Cement Trade SIA is a Latvian company specializing in the supply of high-strength cement products, notably CEM I 52.5 R and CEM I 52.5 N, targeting construction projects with elevated durability requirements such as railway and bridge structures. The company operates through a network of over 20 factories across Latvia, positioning itself as a key local supplier in the manufacturing sector. The website content is primarily in Latvian with a Russian language option, reflecting its regional focus. Technically, the website employs a variety of modern JavaScript libraries and frameworks including jQuery, Bootstrap 4, Google Maps API, and others to provide interactive features such as contact forms and map integration. The site is moderately optimized for mobile devices and performance but lacks advanced SEO and accessibility features. The website is currently in a development or staging phase as indicated by the header message. From a security perspective, the site uses HTTPS (assumed from external Google APIs usage), includes a GDPR-compliant privacy and cookie policy with consent mechanisms, and employs secure form submission practices. However, it lacks visible HTTP security headers such as CSP or HSTS, and no vulnerability disclosure or incident response information is provided. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website presents a basic but functional digital presence for Cement Trade SIA, with clear contact information and compliance with privacy regulations. Security posture is moderate with room for improvement in headers and transparency. The lack of WHOIS data and terms of service reduces trustworthiness slightly. Strategic improvements in security, transparency, and content quality would enhance the company's online credibility and risk posture.
- Saules Traktori
saulestraktori.lv
Transportation · Latvia
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Saules Traktori is a small Latvian company specializing in construction equipment rental services including mini excavators, universal excavators, 26-ton excavators, dump trucks, trucks with manipulators, and loaders. They also provide earthworks and bulk cargo transportation services. The website is built on the Wix platform and integrates Google Analytics and Google Tag Manager for tracking. The site is moderately optimized for mobile devices and has basic SEO features such as meta and Open Graph tags. Security posture is basic with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No contact emails or phone numbers were found in the provided content, which may affect user trust and compliance. WHOIS data could not be retrieved due to query limits, limiting domain trust analysis. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.
- KKERMI-RADIATORI
kermi-radiatori.lv
Energy · Latvia
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
KERMI-RADIATORI is a Latvian-based small business specializing in the sale of German-manufactured steel heating radiators under the Kermi brand. The website serves as an e-commerce platform offering detailed product information, pricing, and online ordering with delivery across Latvia. The company emphasizes quality and innovation, highlighting certifications such as RAL and ISO standards, and positions itself as a reputable player in the European heating equipment market. The site targets Latvian customers seeking reliable heating solutions with a focus on comfort and efficiency. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern JavaScript libraries such as jQuery, Swiper.js, and GSAP for enhanced user experience. It implements Google reCAPTCHA v3 for form security and supports multilingual content. The site is mobile-optimized and demonstrates good SEO practices with proper metadata and structured data. From a security perspective, the site uses HTTPS and basic anti-spam measures but lacks advanced security headers and dedicated security or incident response policies. No WHOIS data was retrievable due to query limits, limiting domain registration trust analysis. Overall, the site shows a moderate security posture with room for improvement in transparency and vulnerability management. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.
PaySpacepayspacelv.com
Finance · Latvia
74Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
PaySpace is a specialized payment service provider focusing on high-risk merchant accounts, serving industries such as online gambling, adult services, crypto merchants, and online dating. Established in 2009 and operating from Latvia, the company offers a comprehensive suite of payment processing solutions including fraud and chargeback prevention, multi-currency support, and customized merchant account services. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of high-risk merchants. Technically, the website is built on WordPress and leverages modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and HubSpot. It uses Cloudflare for DNS and CDN services, ensuring good performance and security. However, some security headers are missing, and DNSSEC is not enabled, which are areas for improvement. The site enforces HTTPS and uses reCAPTCHA for form security. From a security standpoint, the site demonstrates a moderate security posture with good SSL configuration and domain protection but lacks explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The business credibility is strong, supported by consistent WHOIS data and trust indicators such as PCI DSS compliance mentions. Overall, PaySpace presents a trustworthy and professional platform for high-risk payment processing, with recommendations to enhance DNS security and HTTP headers to further strengthen its security posture.
CrestWave technologies LLCcrestwavetech.com
Technology · Russia
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
CrestWave technologies is an international technology company specializing in integrating mobile and payment services at the intersection of financial and telecom sectors. Founded in 2016, it operates globally with offices in Russia, Latvia, Kenya, and Hong Kong, serving telecom operators, financial institutions, and businesses requiring advanced mobile and payment solutions. Their key offerings include messaging platforms, payment gateways, telecom routing agents, and mobile application development, positioning them as a mid-sized B2B technology provider with a solid market presence. Technically, the website employs modern JavaScript libraries such as jQuery and particles.js, uses Google Fonts, and follows HTML5 Boilerplate standards, indicating moderate digital maturity. The site is mobile-optimized with good design and navigation, though SEO and accessibility features are basic. No CMS or hosting provider details are evident, and performance is moderate. From a security perspective, the domain is registered consistently with no privacy protection, but lacks DNSSEC and HTTP security headers, which are recommended for enhanced security. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, CrestWave technologies presents a professional and trustworthy business front with room for improvement in security posture and privacy compliance. Strategic enhancements in these areas would strengthen their risk management and regulatory adherence.
UPB ASupb.lv
Manufacturing · Latvia
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
UPB AS is a leading industrial group based in Latvia, specializing in technologically complex building construction, including design, production of building materials such as glass, metal, and concrete structures, as well as energy and machinery solutions. The company has over 30 years of experience and a strong export focus primarily targeting Scandinavian markets. Their business model integrates design, manufacturing, and construction services, positioning them as a major player in the Baltic construction and manufacturing sectors. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components, CountUp.js for animated counters, and integrates major marketing and analytics tools including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile optimized, accessible, and SEO friendly, with a professional design and clear navigation structure. From a security perspective, the site uses HTTPS and implements cookie consent with default denial for ad and analytics storage, reflecting good privacy practices. However, no explicit security headers were detected in the provided data, and there is no visible security policy or incident response information. The absence of WHOIS data due to query limits limits domain trust verification, but the website content and business information appear legitimate and professional. Overall, the website presents a strong business credibility and digital maturity with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.
SIA "My Wooden House"tavadarzamaja.lv
Real Estate · Latvia
51Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
SIA "My Wooden House" operates the website tavadarzamaja.lv, specializing in the design, manufacture, and sale of wooden garden houses, sheds, garages, garden furniture, and children's outdoor products. The company targets homeowners and garden enthusiasts primarily in Latvia, offering both standard and custom projects with delivery and installation services. The website reflects a small but established business with over 10 years of experience and a presence on social media platforms such as Facebook and Instagram. Technically, the site uses modern JavaScript libraries including Vue.js, jQuery, and Slick Carousel, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Cookie consent and privacy policies are implemented in compliance with GDPR, presented in Latvian language. Security posture is adequate with HTTPS enforced but lacks some recommended security headers and explicit incident response information. WHOIS data could not be retrieved due to query limits, limiting full domain trust verification. Overall, the website is professional, user-friendly, and trustworthy for its business scope.
- EEfTEN Capital
duntes.lv
Real Estate · Latvia
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
EfTEN Capital is a Latvian-based real estate investment company managing multiple real estate funds and a diverse portfolio of commercial and residential properties primarily in the Baltic region. The website presents a professional and consistent brand image targeting investors and commercial tenants, offering detailed information about their funds, portfolio, and news updates. The company appears to be well-established with a large portfolio and multiple funds under management. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, Flickity carousel, and a cookie consent mechanism, indicating a moderate to good level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible security headers, published security policies, or vulnerability disclosure mechanisms. WHOIS data could not be retrieved due to query limits, limiting domain registration trust verification. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but could improve security transparency and WHOIS availability.