Security Directory

G

Graanul Invest

graanulinvest.ee

0

Graanul Invest is a leading global producer of biomass and bioenergy products, with a strong market position as the largest pellet producer in Europe. The company focuses on sustainable renewable energy solutions, leveraging wood waste to produce environmentally friendly fuels and energy. Their website reflects a mature enterprise with comprehensive content, certifications, and a clear commitment to sustainability. Technically, the site is built on WordPress using modern libraries like jQuery and Bootstrap, with good SEO practices and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site projects high professionalism and trustworthiness, supporting the company's strong business credibility.

4

4Room

4room.ee

0

4Room is an Estonian manufacturer and retailer specializing in tailor-made design lighting products such as pendant lamps, ceiling lamps, and fabric shades. The company targets customers seeking high-quality, design-oriented lighting solutions, positioning itself as a niche player with a focus on Estonian design aesthetics. The website is professionally designed with good mobile optimization and clear navigation, supporting the business model of online retail and custom manufacturing. Technically, the site uses a ShopRoller CMS platform with common JavaScript libraries and tracking tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and terms of service present, but no cookie consent mechanism is implemented. Overall, the website is trustworthy and functional, though improvements in security and privacy transparency are recommended.

The website www.transpordiamet.ee is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to the site's content. As a result, no business, contact, or policy information is available for analysis. The site appears to be protected by Cloudflare's security services, indicating an intent to mitigate automated access or attacks. Without access to the actual website content, it is not possible to assess the company's market position, services, or compliance posture. The technical infrastructure relies on Cloudflare's platform for security and performance, but no further details can be extracted. The security posture cannot be fully evaluated due to lack of accessible data, but the presence of a WAF challenge suggests a baseline security measure is in place. Overall, the risk assessment is limited by the lack of accessible information, and strategic recommendations focus on enabling secure but accessible content delivery and publishing clear compliance and contact information.

D

Dzingel AS

dzingel.ee

0

Hotel Dzingel is a medium-sized hospitality business based in Tallinn, Estonia, operating since 2010. The company offers accommodation, dining, and conference services targeting both business and leisure travelers. The website is professionally designed with multilingual support and clear navigation, reflecting a mature digital presence. Technically, the site is built on WordPress with modern SEO and consent management tools, ensuring GDPR compliance and user privacy. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and headers could be improved. Overall, the website and domain registration data indicate a legitimate and trustworthy business with moderate tracking and advertising practices.

S

Snowhound

snowhound.eu

0

Snowhound is a technology company specializing in software development, consulting, and training services primarily targeting businesses and organizations. Their market position is that of a trusted software development partner focused on delivering quality solutions that simplify and optimize client operations. The company operates mainly in Estonia with offices in Tartu and Tallinn. The website presents a professional and consistent brand image with detailed case studies and client testimonials, indicating a strong business credibility. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It employs modern web technologies including lazy loading for images and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. Hosting details are not explicitly disclosed. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and security headers which are recommended best practices. Privacy compliance is partial, with a cookie consent banner present but no privacy policy or terms of service pages found, representing a compliance gap. Overall, the website is professional and trustworthy with good business and technical foundations. The main risks relate to privacy compliance and security policy transparency. Addressing these gaps would enhance trust and regulatory adherence.

V

Valge Klaar

valgeklaar.ee

0

Valge Klaar is a reputable Estonian company operating as an official Apple reseller, service partner, and trainer. Their website demonstrates a strong market position with a comprehensive e-commerce platform offering Apple products, accessories, and business leasing solutions. The company targets both retail consumers and business clients, providing trade-in programs and tailored business services such as SmartDeal leasing. The website content is well-structured, professionally designed, and localized in Estonian with multi-language support.

The website riigikogu.ee represents the Estonian Parliament, a government entity. However, the current accessible content is limited to a Cloudflare security challenge page, preventing access to substantive website content. This limits the ability to analyze business descriptions, policies, or contact information. The domain is well-established since 2010 and registered through an Estonian registrar, consistent with its government status. The technical infrastructure includes Cloudflare's security and analytics services, indicating a modern approach to web security and performance. The security posture is difficult to fully assess due to the blocking challenge, but the use of Cloudflare Turnstile suggests proactive bot mitigation. Overall, the site is legitimate but currently inaccessible for detailed analysis.

T

Trigon Capital

trigoncapital.com

0

Trigon Capital is a well-established investment management group based in Estonia, managing over EUR 1 billion in assets with a focus on Central and Eastern Europe. The company operates as a holding entity with subsidiaries including AS Trigon Asset Management and the Luka Fund, emphasizing sustainable growth and regional expansion. Their website reflects a professional and consistent brand image, targeting investors and corporate partners interested in the regional market. Technically, the site is built on WordPress with modern libraries such as AnyChart for data visualization and Usercentrics for cookie consent, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks explicit security headers and published security policies. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website is trustworthy and professional, though improvements in security transparency and policy disclosures are recommended.

The website fraktal.ee currently serves only a 404 Page Not Found error page with no substantive content or business information. The domain is registered since 2010 under Edicy OÜ, which is consistent with the hosting provider and CMS platform (Voog) used. However, the lack of accessible content, contact details, and policies significantly limits the website's utility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with minimal optimization and no advanced frameworks or analytics. Security posture is weak, with only a basic Content-Security-Policy header present and no evidence of HTTPS enforcement. Privacy compliance is absent, with no privacy or cookie policies detected. Overall, the site appears inactive or misconfigured, presenting a high risk for users seeking information or services.

ByteLife Solutions OÜ is an established Estonian IT infrastructure company specializing in providing comprehensive IT infrastructure solutions including cloud services, network and server infrastructure, security, and log management. The company positions itself as a pioneer in the Estonian market with strong partnerships with major technology vendors such as Cisco, Dell/EMC, Nutanix, VMware, and Fortinet. Their services target government agencies, financial institutions, healthcare, telecommunications, and energy sectors, emphasizing flexibility and comprehensive lifecycle management of IT services. Technically, the website is built on WordPress with modern frontend technologies like Tailwind CSS and integrates analytics and customer engagement tools such as Google Analytics and Zoho SalesIQ. The site is well-optimized for mobile and accessibility, with fast performance and good SEO practices. However, explicit privacy and cookie policies are missing, which is a compliance gap. From a security perspective, ByteLife demonstrates maturity with ISO 9001 and ISO 27001 certifications and HTTPS enforcement. There is room for improvement in publishing security headers, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS registration data reduces domain trustworthiness, but the professional presentation and business information support legitimacy. Overall, ByteLife Solutions presents a professional and credible IT service provider with strong market positioning in Estonia and the Baltics. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

T

Telia Eesti AS

emt.ee

0

Telia Eesti AS operates as a leading telecommunications provider in Estonia, offering a comprehensive suite of services including mobile telephony, internet connectivity, television, and IT solutions tailored for both private individuals and businesses. The website reflects a mature digital presence with clear navigation, professional design, and extensive service information, targeting a broad audience within Estonia. The company benefits from its affiliation with the larger Telia Company, reinforcing its market position and credibility. Technically, the website employs modern web technologies such as React, integrates advanced consent management via Cookiebot, and utilizes Google Tag Manager for analytics. The infrastructure supports mobile optimization and accessibility, ensuring a positive user experience across devices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, implements robust security headers, and manages user consent effectively. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly detailed, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, compliance with GDPR, and trustworthy business practices. The risk profile is low, with recommendations focusing on enhancing transparency around security and data protection policies to further strengthen user trust.

Lennuliiklusteeninduse AS operates as the national air navigation service provider in Estonia, ensuring safe and efficient air traffic management within Estonian and European airspace. The organization offers core services including air traffic control, aeronautical information services, technical system management, and ongoing development activities to modernize aviation infrastructure. The website reflects a mature digital presence built on Drupal 10, with multilingual support and integration of modern APIs such as Google Maps and Facebook SDK for enhanced user engagement. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the domain registration and website content align well, indicating a trustworthy and established entity in the transportation sector.

The website www.rara.ee is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page requiring human verification via Turnstile captcha. This security mechanism blocks access to the actual website content, preventing extraction of business, contact, or policy information. The visible page only indicates that the site is protected by Cloudflare's security services. Due to this, no meaningful business or security posture assessment can be performed. The technical infrastructure relies on Cloudflare's challenge platform and insights beacon, indicating a focus on security and performance, but no further details are available. The lack of accessible content and metadata results in a low trust and quality assessment. It is recommended to gain direct access to the unblocked website for a comprehensive evaluation.

R

Reimann Retked OÜ

retked.ee

0

Reimann Retked OÜ is a small Estonian company specializing in organizing active and educational nature trips throughout the year. Their offerings include rafting, sea kayaking, snowshoeing, and adventure park activities, targeting nature enthusiasts of all ages. The company holds an eco-label certification (EHE), enhancing its credibility in eco-tourism. The website is built on WordPress using the Enfold theme and integrates popular plugins such as The Events Calendar and Yoast SEO, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

The website elering.ee is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, preventing direct content analysis. The domain is registered since 2010 with a reputable registrar, indicating an established presence likely related to the energy sector in Estonia. The site uses Cloudflare services for security and performance, but no business or contact information is exposed on the challenge page. Due to the content block, no privacy, cookie, or security policies are detectable, and no contact details or structured data are available. This limits the ability to assess the website's digital maturity or security posture fully. The domain registration data suggests legitimacy and consistency with a medium-sized energy business.

B

Bikeep

bikeep.com

0

Bikeep is a medium-sized Estonian company founded in 2012, specializing in smart micromobility infrastructure including commercial bike racks, smart bike lockers, and e-scooter stations. The company targets municipalities, transit companies, commercial and residential properties, positioning itself as a global leader in smart bike parking and charging solutions. The website is built on WordPress with modern plugins and tracking tools, optimized for performance and mobile use. Security posture is good with HTTPS and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is partial with cookie consent but no explicit privacy policy found. Business credibility is high with clear company information, testimonials, and references. Overall, the website is professional and trustworthy but could improve privacy and security transparency.

M

Merko

merko.ee

0

Merko is a well-established Estonian construction and real estate development company with a strong regional presence in the Baltics and Norway. The company offers comprehensive construction services including building, infrastructure, and material production, serving clients seeking residential and commercial properties. Their website reflects a mature digital presence with multi-language support, detailed project portfolios, and integration of modern analytics and marketing tools. The technical infrastructure is based on WordPress CMS with common industry-standard technologies and good mobile optimization. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing trust and compliance. Overall, Merko demonstrates a professional and credible online presence aligned with their business operations.

R

Reach-U

reach-u.com

0

Reach-U is a technology company specializing in location-based solutions for telecommunications, security, and smart city sectors. With a claimed 30 years of experience and operations across 34 countries, they serve a large subscriber base globally. The website is professionally designed, hosted on the Weebly platform, and incorporates standard analytics and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and transparency. Security posture is generally good with HTTPS and cookie consent, but outdated libraries and missing security headers suggest room for improvement. Contact information is limited, and no explicit security or incident response policies are published.

The domain eas.ee is currently protected by Cloudflare's security mechanisms, specifically a Turnstile human verification challenge, which blocks access to the actual website content. Due to this, no business-related content, policies, or contact information is accessible for analysis. The domain is registered since 2010 with an Estonian registrar, indicating a legitimate and established registration. The website relies heavily on Cloudflare for security and performance, but no further technical or business details are available from the accessible content.

K

Kiirlugemiskool OÜ

kiirlugemine.ee

0

Kiirlugemiskool OÜ is an Estonian education company specializing in speed reading, memory training, concentration, and self-management courses. Established since 2000, it offers both public and in-house training services targeting individuals and organizations seeking cognitive and personal development. The website presents a professional and user-friendly interface with clear navigation and relevant content about their services and trainers. Technically, the site uses legacy JavaScript libraries and standard web technologies but lacks modern security headers and privacy policies, indicating room for improvement in security and compliance. Contact information is clearly provided, including phone numbers, email, and physical address, enhancing business credibility. Overall, the site is functional and trustworthy but would benefit from updated security practices and privacy compliance enhancements.

N

Novian Group

andmevara.ee

0

Novian Group is a well-established IT services and solutions provider operating primarily in Estonia and the Baltic region, with subsidiaries in Lithuania, Norway, and Rwanda. The company specializes in IT infrastructure management, software development, digitization, and e-government solutions, serving both enterprise and public sector clients. Their market position is strong, supported by over 30 years of experience and a broad portfolio of services tailored to complex IT needs. The website reflects a mature digital presence with multilingual support and comprehensive service descriptions. Technically, the site is built on WordPress with modern plugins and libraries, optimized for performance and SEO. Security posture is solid with HTTPS, cookie consent management, and use of reCAPTCHA, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates professionalism, compliance with GDPR, and effective use of analytics and marketing tools, positioning Novian as a credible and trustworthy technology partner.

M

Maxima

maxima.ee

0

Maxima is a large retail grocery chain operating in Estonia, offering over 2000 promotional deals weekly to its customers. The website is professionally designed with good content quality and clear navigation, targeting retail consumers seeking affordable daily groceries. Technically, the site employs modern web technologies including JavaScript, CSS, Google Tag Manager, and Cookiebot for cookie consent management. The site is served over HTTPS with no detected WAF or blocking mechanisms, indicating reliable hosting and security infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks visible security policies and incident response contacts. Privacy compliance is partially addressed via Cookiebot consent but lacks a publicly accessible privacy policy or terms of service pages. Overall, the site demonstrates moderate to good digital maturity with room for improvement in privacy transparency and security documentation.

A

AS Pocopay

pocopay.com

0

AS Pocopay is a small Estonian financial services company operating as a licensed European payment institution. It offers modern payment services including current accounts, MasterCard cards, and a mobile app. The company has a 10-year history and is regulated by the Estonian Financial Supervision and Resolution Authority. The website clearly communicates the upcoming closure of payment services as of June 5, 2024, reflecting a significant business transition. Technically, the website is built on WordPress, hosted on AWS infrastructure, and uses standard JavaScript libraries such as jQuery and Picturefill. The site is mobile optimized and has good design and navigation, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy and cookie policy present but no consent mechanism or detailed GDPR compliance statements. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

R

RRK Logistics Parks Rental Warehouses Logistics Services

rrk.ee

0

RRK Logistics Parks Rental Warehouses Logistics Services operates a professional website offering rental warehouse and logistics park spaces primarily in Estonia. The company positions itself as the largest provider of warehouse and production spaces, targeting businesses requiring logistics and storage solutions. The website is multilingual, supporting Estonian, English, and Russian, enhancing accessibility to a broader audience. The business appears medium-sized with a domain age consistent with an established presence since 2010. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and Yoast SEO for optimization. Google Analytics and Google reCAPTCHA are integrated for analytics and security. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and implements invisible reCAPTCHA on forms, indicating attention to bot mitigation. However, no security headers were detected, and there is a lack of published privacy, cookie, or security policies, which are important for compliance and trust. No contact emails or phone numbers were found in the provided content, limiting direct communication channels. Overall, the website is professional and functional but has gaps in privacy compliance and security best practices. Strategic improvements in policy publication, security headers, and contact transparency would enhance trust and compliance.

E

Estonian Convention Bureau

ecb.ee

0

The Estonian Convention Bureau operates as a national partner facilitating conferences, meetings, and corporate events within Estonia. It provides comprehensive resources including venue listings, supplier directories, event calendars, and group activity suggestions, targeting event planners and corporate clients. The website is professionally designed with consistent branding and good content quality, reflecting a focused hospitality industry presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates tools such as Yoast SEO, Tawk.to live chat, and AddToAny sharing, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though improvements are recommended in security headers and fixing minor PHP warnings. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism and trustworthiness, supported by consistent WHOIS data and active social media engagement.

E

Eesti Geoloogia Selts

egeos.ee

0

Eesti Geoloogia Selts is an established Estonian geological society with a domain registered since 2010. The website serves as an informational portal for society members and the geology community in Estonia, providing details about the society, its members, activities, projects, and events. The site is built on the Voog CMS platform and uses standard web technologies including HTML5, CSS3, and JavaScript libraries such as jQuery. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy and cookie policies. Social media presence on Facebook and LinkedIn supports community engagement. Overall, the website is professional and consistent with its non-profit educational mission but would benefit from enhanced privacy compliance and security best practices.

B

Baltika Group

baltikagroup.com

0

Baltika Group is a well-established Estonian fashion company with a history dating back to 1928. The company manages the Ivo Nikkolo brand across multiple markets, focusing on premium women's fashion with original designs and high-quality European fabrics. The website reflects a professional retail business with clear branding and consistent messaging. Technically, the site is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks several important security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. The WHOIS data is incomplete, lacking registrar and registrant details, which slightly reduces trust but does not negate the legitimacy of the business as presented on the site. Overall, the site is functional, professional, and credible but could benefit from enhanced security and privacy compliance measures.

M

Modera

modera.ee

0

Modera is an established software company founded in 2003, specializing in providing digital solutions for the automotive industry. Their offerings include automotive CRM, website builders, e-commerce platforms, and dealer management systems designed to streamline car sales and enhance customer experience. The company targets manufacturers, importers, and dealerships across 15 countries and collaborates with over 30 automotive brands. The website is professionally designed, multilingual, and optimized for modern web standards, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and integrates various marketing and analytics tools such as Google Tag Manager and LinkedIn Insight. Security posture is generally good with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service policies found. Contact is primarily via web forms, with no direct emails or phone numbers published. Overall, Modera presents a credible and professional business with room for improvement in transparency of privacy and security policies.

E

Eesti Evangeelne Luterlik Kirik

eelk.ee

0

The Eesti Evangeelne Luterlik Kirik (Estonian Evangelical Lutheran Church) operates a well-structured official website providing comprehensive information about the church's history, organization, clergy, and community activities. The site targets church members and the Estonian public, offering religious content, news, and contact details. The website is built on WordPress with Bootstrap and includes integrations such as Google Analytics and Facebook SDK for user engagement and tracking. While the site is professionally designed with good navigation and mobile optimization, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain is well-established since 2010, registered through a reputable Estonian registrar, aligning with the church's official status. Overall, the website is credible and functional but would benefit from enhanced privacy compliance and security hardening.

P

Pro Kapital Eesti AS

prokapital.com

0

Pro Kapital Eesti AS operates as a leading real estate development company in the Baltic States, with a history dating back to 1994. The company focuses on developing residential and business quarters, emphasizing timeless design and quality. It is publicly listed on the Tallinn Stock Exchange, indicating a medium-sized enterprise with a solid market position. The website reflects a professional digital presence built on WordPress, incorporating modern tracking and consent management tools. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS registration data is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the company demonstrates a credible business model with clear contact information and a well-structured website.

I

Inspired Universal McCann

inspired.ee

0

Inspired Universal McCann is the leading media agency in Estonia and the Baltic region, specializing in comprehensive marketing strategies and media services. Their offerings include communication strategy, brand management, market research, media planning and buying, digital media solutions, material production, analytics, and media training. The company positions itself as the number one media agency in Estonia, targeting businesses seeking expert media and marketing support. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, leveraging modern web technologies such as jQuery and Presto Player for video content. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO features. SSL is properly configured, ensuring secure connections. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance and user trust. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered with a reputable Estonian registrar since 2010, consistent with the company's claims, supporting legitimacy. Overall, the website presents a credible and professional media agency with a solid technical foundation but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

S

Statistikaamet

stat.ee

0

Statistikaamet is the official national statistics agency of Estonia, providing comprehensive statistical data and analysis to the public, researchers, and policymakers. The website is well-branded, consistent, and primarily serves the Estonian audience with content in the Estonian language. It operates as a government entity with a medium-sized organizational footprint, founded in 2010, and maintains a professional online presence. The technical infrastructure is based on Drupal 10 CMS, leveraging modern JavaScript libraries such as Highcharts and Moment.js for interactive data visualization. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance characteristics. Cookie consent mechanisms are implemented with GDPR compliance in mind, including an opt-in banner. Security posture is solid with HTTPS enforced and cookie consent in place, though there is room for improvement by enabling DNSSEC, adding security headers, and publishing explicit security policies or vulnerability disclosure information. No WAF or blocking mechanisms were detected, and WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is trustworthy and professional, with a strong focus on privacy compliance and user experience. Strategic recommendations include enhancing DNS security, improving security headers, and formalizing incident response and vulnerability disclosure processes to further strengthen security and compliance.

D

Delfi Meedia AS

epl.ee

0

Eesti Päevaleht, operated by Delfi Meedia AS, is a leading Estonian news media outlet offering comprehensive news, opinion, and cultural content. The website demonstrates a mature digital presence with a modern tech stack including Nuxt.js and Vue.js, supported by reputable advertising and analytics providers. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

B

BDO Eesti

bdo.ee

0

BDO Eesti is a prominent professional services firm specializing in accounting, auditing, tax planning, payroll, and business consulting services primarily for Estonian and international clients. The company leverages its affiliation with the global BDO network to provide comprehensive and reliable financial and consulting solutions. The website reflects a mature digital presence with detailed service descriptions, a professional design, and multilingual support, targeting business clients seeking expert financial services. Technically, the site is built on modern frameworks like React and Kentico CMS, hosted on Azure infrastructure, and employs advanced analytics tools with privacy-conscious configurations. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible digital asset for BDO Eesti.

L

LVL UP OÜ

levelup.ee

0

LVL UP OÜ operates the website levelup.ee as a digital recruitment agency specializing in fast and efficient talent acquisition for Estonian businesses. The company leverages digital marketing, social media, and recruitment software to identify and attract candidates aligned with client needs. The website presents a professional and modern digital presence with clear branding and multimedia content to engage visitors. Technically, the site is built on WordPress with Elementor and Yoast SEO, supported by Cloudflare DNS and CDN services, ensuring good performance and SEO readiness. Security posture is solid with HTTPS and bot protection scripts, though explicit security headers are not fully evident. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Contact information is available primarily via email and contact forms, with social media integration enhancing trust. Overall, the site is credible and well-positioned in its niche but would benefit from enhanced privacy and security disclosures.