Security Directory

S

Sabiedrības integrācijas fonds

vietagimenei.lv

0

The website vietagimenei. lv serves as an official informational portal for the Latvian government-backed project promoting family-friendly environments in municipalities and workplaces.

L

LATAKKO SIA

latakko.eu

0

Latakko is a leading wholesaler of tires and auto wheels in the Baltic States with over 30 years of industry experience. As part of the Nordic Tyre Group, it offers a broad assortment of premium and budget tire brands, supported by extensive logistics capabilities including the largest warehouse in Northern Europe. The company targets wholesale buyers and partners in the transportation sector, providing product, logistics, and marketing services. The website is professionally designed, mobile-optimized, and multilingual, reflecting a mature digital presence. Technically, the site is built on WordPress with WooCommerce and WPML for multilingual support. It uses modern web technologies including Bootstrap 5 and Google reCAPTCHA for form security. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper meta tags and structured navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, security headers are missing and there is no published security or incident response policy. Privacy compliance is partially met with privacy and cookie policies present, but lacking an explicit cookie consent mechanism. Business credibility is high with clear company information, VAT and registration numbers, and active social media channels. Overall, the website represents a trustworthy and professional business with room for improvement in security transparency and privacy compliance.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

E

Efumo

efumo.lv

0

Efumo is a Latvian-based IT services company specializing in the development and maintenance of internet shops, websites, mobile applications, and IT systems. The company targets businesses seeking modern, responsive, and integrated digital solutions. Their market position is that of a small but established regional player with a portfolio of notable clients and a professional online presence. Technically, the website is built on WordPress with Yoast SEO, uses modern web technologies, and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS, secure cookies, and several security headers, but lacks full HSTS enforcement and email security measures like DMARC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security policy transparency.

C

CODEART, SIA

codeart.lv

0

CODEART, SIA is a Latvian-based IT service provider specializing in the design, development, and maintenance of modern business IT systems, websites, and portals. With over 18 years of industry experience, the company targets Latvian businesses seeking high-quality and scalable digital solutions. The website reflects a professional and consistent brand image, offering a range of corporate IT services including web design, frontend development, and user experience planning. The company maintains a moderate market position as an established local player with a clear focus on quality and client satisfaction. Technically, the website employs modern TLS protocols and integrates multiple third-party tools such as Google Analytics, Microsoft Clarity, and Pipedrive LeadBooster for marketing and analytics purposes. However, the site suffers from slow load times and lacks some advanced security headers and policies, which could be improved to enhance security posture. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Contact information is clearly provided, supporting business credibility. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to align with best practices.

S

SIA "Žurnāls Santa"

santa.lv

0

Santa.lv is the largest lifestyle portal in Latvia, offering a wide range of content including health, entertainment, culture, and personal stories. The website supports a subscription model (Santa+) alongside advertising revenue, targeting Latvian-speaking audiences interested in lifestyle topics. The business is well-established with consistent domain registration and a strong market position in the Latvian media sector. Technically, the website employs modern tracking and advertising technologies such as Google Tag Manager, Facebook SDK, and Gemius analytics, hosted behind Cloudflare DNS services. However, the site suffers from significant security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts user trust and security posture. Security-wise, the lack of HTTPS, missing security headers, and no DNSSEC or domain protection locks expose the site to potential risks. Privacy and cookie policies are present and appear GDPR compliant, reflecting a good level of privacy awareness. The site is accessible without WAF or blocking mechanisms, but performance is slow with a large page size and long load times. Overall, Santa.lv is a reputable media portal with excellent content quality and business credibility but requires urgent improvements in security infrastructure to protect users and enhance trust. Strategic focus should be on implementing HTTPS, improving page performance, and adopting security best practices.

N

NBS Rekrutēšanas un atlases centrs

klustikaravirs.lv

0

The website klustikaravirs.lv serves as the official recruitment platform for the Latvian National Armed Forces, providing comprehensive information and application options for various military service types including professional service, national defense service, and specialized military education. The site targets Latvian citizens aged 18 to 60 interested in serving their country, positioning itself as a trusted government resource with strong public confidence. Technically, the site is built on Drupal 10, employs Matomo for privacy-conscious analytics, and offers a responsive, accessible user experience. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines user trust and data protection. Additionally, DNS and email security configurations could be enhanced with DNSSEC and DMARC records. Privacy and cookie policies are present with consent mechanisms, but no terms of service or security policies are published. Overall, the site is functional and professional but requires urgent security improvements to align with best practices.

Z

ZAUDĒTAIS SAPNIS PAR BRĪVĪBU

sapnisparbrivibu.lv

0

The website sapnisparbrivibu.lv serves as an informational platform related to the Latvian War Museum, focusing on the historical narrative of Latvian soldiers issued by the Swedish government to the Soviet Union. The site targets visitors interested in Latvian military history and related educational content. The business model is primarily informational, with no evident commercial transactions or services. The website is small in scale and localized to Latvia. Technically, the site is built using React and Material-UI, indicating a modern frontend framework. However, the absence of a valid SSL certificate and HTTPS support critically undermines the site's security and trustworthiness. Performance is moderate with a page load time of approximately 3.1 seconds, and mobile optimization is basic. SEO and accessibility features are minimal. From a security perspective, the site lacks fundamental protections such as HTTPS, DMARC, DNSSEC, and proper SSL configurations. While HSTS is enabled, it is ineffective without HTTPS. No security policies, incident response contacts, or vulnerability disclosures are present. These gaps expose the site to potential risks and reduce user trust. Overall, the website's risk profile is elevated due to missing security controls and privacy compliance. Strategic recommendations include immediate implementation of HTTPS, addition of privacy and cookie policies, and enhancement of security headers. Improving contact transparency and adding trust signals would also benefit business credibility and user confidence.

B

BORN

born.lv

0

BORN is a Latvian-based small technology company specializing in full-service website and e-commerce development, UI/UX design, and programming. Established in 2013, it serves a diverse client base including educational institutions, healthcare providers, and municipal organizations. The company presents a professional online presence with a portfolio of completed projects and active social media channels. Technically, the website is built on WordPress with modern JavaScript libraries and optimized for mobile devices, though performance is moderate with a page load time near 5 seconds. Security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, which is a critical vulnerability. Privacy compliance is basic with a cookie consent banner and privacy policy present, but no terms of service or security policies are found. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

L

Latvijas Reklāmas asociācija

lra.lv

0

Latvijas Reklāmas asociācija (LRA) is a Latvian non-profit organization representing advertisers, media, and agencies. The website serves as an informational portal providing member services, industry statistics, educational seminars, and ethical guidelines. The target audience includes advertising professionals and media stakeholders in Latvia. The organization maintains an active online presence with social media integration and contact channels. Technically, the website uses common web technologies such as jQuery, Bootstrap, and Google Analytics but suffers from slow performance and lacks modern security implementations. Critically, the site does not have a valid SSL certificate, exposing visitors to security risks and undermining trust. The absence of privacy and cookie policies indicates a gap in compliance with data protection regulations. Overall, the website is functional and professional in content but requires significant improvements in security and privacy compliance to meet modern standards.

I

Inbokss Ltd.

inbox.eu

0

Inbox.eu is a privacy and security oriented email and cloud storage service provider based in Latvia, operating since 2001. The company offers both business domain email solutions and personal email accounts with features such as spam filtering, data encryption, and synced contacts and calendar. With over 20 years of experience and processing over 21 million emails weekly, Inbox.eu positions itself as a trusted provider in the privacy-focused email market. The website is professionally designed, multilingual, and targets users seeking secure and private email services. Technically, the site uses standard web technologies including JavaScript, Google Tag Manager, and Facebook Pixel for analytics and marketing. However, the website currently lacks a valid SSL certificate and does not support modern TLS protocols, which significantly impacts its security posture. DNS records are well configured with SPF and DMARC policies, but DNSSEC and CAA records are absent. Incident response contact is available via DMARC abuse email. Privacy and terms of service policies are present and appear comprehensive, but no cookie consent mechanism was detected. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in SSL/TLS security to protect user data and trust.

S

SIA "Laba Sēta"

labaseta.lv

0

SIA "Laba Sēta" is a Latvian small manufacturing business specializing in the production and installation of concrete products, fences, gates, and related territory landscaping services. The company offers a comprehensive range of products including concrete fence posts, gates, PVC fences, and gate automation solutions. Their market position is that of a local specialized manufacturer and installer serving residential and commercial customers. The website is built on WordPress using common plugins and themes, with moderate digital maturity evidenced by the use of Google Analytics and Tag Manager. However, the site lacks a valid SSL certificate, which severely impacts security posture and user trust. No privacy or terms of service pages were found, though a cookie consent banner is present. Contact information is clearly provided, supporting business credibility. Overall, the website is functional and professionally designed but requires significant security improvements.

S

SIA IMPROVEMENT

improvement.lv

0

SIA IMPROVEMENT is a Latvian small business specializing in landscaping, paving, road construction, and bulk material delivery services. Founded in 2018, the company positions itself as a reliable local specialist offering quality full-cycle paving stone installation, greening, and construction services. The website is professionally designed using WordPress and Elementor, providing clear navigation and multilingual support. Contact information is prominently displayed, including multiple phone numbers, emails, and physical addresses in Riga, Latvia. Social media presence on Facebook and Instagram supports brand visibility. Technically, the website uses a modern WordPress stack with WooCommerce and Elementor plugins, but performance is hindered by a large page size and slow load times. Security posture is basic with a valid SSL certificate but lacks advanced security headers and HSTS enforcement. No explicit privacy, cookie, or terms of service policies are found, indicating gaps in compliance. Tracking is moderate via Google Tag Manager and reCAPTCHA. Overall, the site is functional and credible for its business scope but requires improvements in security best practices, privacy compliance, and performance optimization to enhance trust and user experience.

E

E-COMMERCE BROKER SIA

finlat.lv

0

Finlat.lv is a Latvian-based credit comparison and brokerage platform operated by E-COMMERCE BROKER SIA, founded in 2021. The platform offers a wide range of financial services including consumer loans, mortgage-backed loans, auto loans, business loans, refinancing, and credit consolidation. It serves individuals and businesses in Latvia, providing a convenient one-application process to access multiple lenders. The website is well-structured with clear navigation, client testimonials, and partner logos enhancing its credibility. Technically, it is built on WordPress with Elementor and uses modern web technologies, but lacks a valid SSL certificate, which is a critical security concern. The absence of a cookie consent mechanism also poses potential GDPR compliance issues. The platform integrates several analytics and marketing tools such as Google Analytics, Yandex Metrica, and Facebook Pixel, indicating moderate user tracking. Overall, the business appears legitimate with consistent WHOIS data and transparent contact information, but needs to address security and privacy compliance gaps to improve trust and security posture.

S

SIA Toode

toode.lv

0

SIA Toode is a medium-sized manufacturing company based in Latvia specializing in steel roofing and wall profiles, rainwater drainage systems, and related construction materials. The company has a regional presence with partner sites in Estonia, Lithuania, and Finland, positioning itself as a key player in the Baltic and Nordic construction materials market. Their website reflects a professional business with clear product offerings and a focus on construction professionals and building owners. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Cookiebot for tracking and compliance. However, performance is somewhat slow, and accessibility is basic. Security posture is adequate with HTTPS and SPF/DMARC records but lacks advanced SSL features such as HSTS and OCSP stapling, and no security headers are detected. Privacy compliance is supported by a privacy policy and cookie consent mechanism, though no incident response or security policy is visible. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in security headers, SSL configuration, and incident response transparency would enhance the site's security and trustworthiness.

L

LU Matemātikas un informātikas institūts

latnet.lv

0

The website latnet.lv represents the academic network laboratory of the University of Latvia's Institute of Mathematics and Computer Science, operating under the brand SigmaNet. It provides domain registration, email hosting, and internet connectivity services primarily targeting academic institutions and educational organizations in Latvia. The organization has a long-standing history dating back to 1993, positioning itself as a trusted academic network operator with a medium-sized operational scale. The website content is well-structured, informative, and consistent with the institutional identity, offering clear contact information and social media presence. From a technical perspective, the site uses legacy JavaScript libraries such as jQuery 1.9.1 and jQuery UI 1.12.0, integrates Google Maps API for location display, and employs parallax effects for visual enhancement. The hosting is managed by SigmaNet itself, reflecting an in-house academic infrastructure. Performance is moderate with basic mobile optimization and accessibility features. SEO is basic but sufficient for the target audience. Security posture is a significant concern due to the absence of HTTPS/SSL certificate, exposing users to potential data interception risks. Although SPF and DMARC DNS records are configured correctly, the lack of DNSSEC and CAA records reduces DNS security. No security policies or incident response contacts are published, and no cookie consent mechanism is implemented, which may impact GDPR compliance. The site uses Google Analytics for user tracking without visible consent banners. Overall, the website is credible and trustworthy from a business perspective but requires urgent security improvements to protect user data and comply with modern security standards. Strategic recommendations include implementing HTTPS, enhancing DNS security, publishing security policies, and introducing privacy compliance mechanisms.

The website www.1a.lv is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page blocking access. As a result, no actual website content, business information, or contact details are available for analysis. The domain is registered and active with DNS hosted on Cloudflare, but the SSL/TLS configuration is invalid or missing, resulting in no HTTPS support. The DNS records show standard configurations including SPF and DMARC for email protection. The website performance is moderate based on DNS resolution and load time data, but the lack of accessible content severely limits the ability to assess the business or technical maturity. Security posture is weak due to missing HTTPS and security headers, and no privacy or cookie policies are found. Overall, the site is currently not usable for end users due to the WAF block, and the trustworthiness and professionalism cannot be evaluated beyond domain legitimacy.

G

GRIMEX SIA

grimex.lv

0

GRIMEX SIA is a Latvian company offering a diverse range of services including web development, advertising, rental of offices, warehouses, equipment, and professional workers, as well as sales agency services. The company targets businesses looking to expand or operate in Latvia and Scandinavia, positioning itself as a versatile business partner with a 5-year presence in the Scandinavian market. The website content is basic and marketing-focused, with limited detailed business information and no visible privacy or cookie policies. Technically, the website is built on WordPress with Yoast SEO and uses common marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel. However, the site suffers from a lack of a valid SSL certificate and does not serve content over HTTPS, which is a critical security shortfall. Performance is slow, and mobile optimization and accessibility are basic. SEO is reasonably well implemented through meta tags and structured data. From a security perspective, the site has some positive configurations such as SPF and DMARC DNS records and HSTS header enabled, but the absence of a valid SSL certificate and modern TLS protocols severely undermines the security posture. No security policies, incident response contacts, or vulnerability disclosures are present, and domain registration lacks protection locks, which could pose risks. Overall, the website presents moderate business credibility but has significant security and privacy compliance gaps. Strategic improvements in SSL deployment, privacy policy publication, and security best practices are recommended to enhance trust and compliance.

G

GRIMEX SIA

seotips4u.com

0

SEO TIPS FOR YOU, operated by GRIMEX SIA, is a small Latvian digital agency specializing in SEO and web design services. The company offers a mix of free educational content and professional services aimed at helping beginners and small businesses improve their online presence and search engine rankings. Their service portfolio includes SEO audits, web development, website design, ecommerce solutions, and logo design. The website is built on WordPress with WooCommerce and Elementor, reflecting a modern and flexible technical infrastructure. However, the absence of a valid SSL certificate is a significant security concern, exposing users to potential risks and impacting trust. The site implements GDPR-compliant cookie consent mechanisms, demonstrating awareness of privacy regulations. Overall, the business appears legitimate and consistent with its WHOIS registration data, but it should prioritize securing its website with HTTPS to enhance security and user trust.

The website trodo.lv is currently inaccessible to general users due to a Cloudflare Web Application Firewall (WAF) challenge page requiring human verification. This prevents access to any substantive business content, contact information, or policies. The domain is registered and active with DNS and mail configurations indicating use of Microsoft Outlook mail protection and Google-related services. The SSL certificate is valid but short-lived, and no advanced security headers or DNSSEC are enabled. The lack of visible privacy or cookie policies and absence of contact details limit the ability to assess compliance and business credibility. Overall, the site appears to be protected by Cloudflare but lacks publicly accessible content for full evaluation.

Z

ZAAO

zaao.lv

0

ZAAO is a Latvian waste management company providing comprehensive services including collection, sorting, transportation, and disposal of various waste types in an environmentally friendly manner. The company targets private individuals, businesses, farmers, and public event organizers within its regional operational area. The website reflects a medium-sized enterprise with a clear business model focused on waste management and recycling services. Technically, the site is built on WordPress with Elementor, hosted on Google Cloud infrastructure, and uses modern web technologies and analytics tools. However, the absence of a valid SSL certificate significantly impacts the security posture, exposing users to potential risks. While cookie consent and privacy policies are well implemented, the lack of HTTPS and security headers are critical vulnerabilities. Overall, the domain registration is consistent and trustworthy, but security improvements are urgently needed to protect user data and enhance trust.

D

Dateks

dateks.lv

0

Dateks.lv operates as a medium-sized e-commerce retailer based in Latvia, specializing in a broad range of technology and consumer electronics products. The website offers extensive product categories including computers, components, office equipment, and home appliances, targeting both consumers and businesses in the Baltic region. The company maintains partnerships with major technology brands such as Asus, Dell, Intel, Lenovo, and Nvidia, reinforcing its market position as a reputable regional retailer. From a technical perspective, the website employs modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. However, the site suffers from slow performance due to a large page size and numerous resources. Mobile optimization is good, but accessibility features are basic. The lack of a valid SSL certificate is a critical security shortfall, impacting user trust and data protection. Security posture reveals several vulnerabilities including missing DMARC, DNSSEC, and CAA records, and no domain protection locks, which collectively increase risk exposure. While HSTS is enabled, the absence of a valid SSL certificate and other security best practices lowers the overall security score. Privacy and cookie policies are present and GDPR compliant, with clear contact information provided. Overall, Dateks.lv presents a professional and content-rich e-commerce platform with moderate technical maturity and security posture. Strategic improvements in SSL/TLS implementation, email security, and DNS hardening are recommended to enhance trust and compliance.

M

MakeCommerce

makecommerce.lv

0

MakeCommerce is a leading e-commerce payment service provider in the Baltic region, trusted by over 6500 clients. The company offers a comprehensive suite of payment and delivery solutions including internet banking payments, card payments, Apple Pay, Google Pay, POS terminals, and delivery integrations with major logistics providers. Their business model focuses on simplifying payment acceptance for online and physical stores with a single integration. The website targets e-commerce businesses in Latvia and neighboring countries, positioning itself as a reliable and customer-focused partner.

U

Unifiedpost

rekini.lv

0

Rekini.lv operates as a Latvian digital invoicing and payment platform affiliated with Unifiedpost. It provides services for invoice receipt, payment, and invoice preparation via a partner platform Banqup. The website targets businesses and individuals in Latvia requiring invoicing solutions. Technically, the site uses a modern frontend stack including jQuery, Bootstrap, and multiple tracking and analytics services, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security. The security posture is weak due to missing HTTPS, absence of DMARC, DNSSEC, and domain protection locks. Privacy compliance is basic with a cookie consent modal and privacy policy present but no terms of service or incident response information. Overall, the site is functional but requires urgent security improvements to protect user data and enhance trust.

A

AS Kredītinformācijas Birojs

kib.lv

0

AS Kredītinformācijas Birojs is a Latvian credit information bureau providing credit data and reporting services to individuals and businesses. The company is positioned as a trusted entity in the Latvian financial sector, supported by ISO 27001 certification and memberships in recognized organizations such as Creditinfo and the Latvian Chamber of Commerce (LTRK). Their services focus on promoting responsible lending and credit transparency. Technically, the website is built on WordPress with common libraries like jQuery and uses Cookiebot for GDPR-compliant cookie consent. The site is moderately performant and mobile-optimized, though page load times could be improved. Security posture is adequate with HTTPS and SPF/DMARC email protections, but lacks advanced SSL features like HSTS and OCSP stapling. Privacy policies and terms of service are clearly presented and GDPR compliant. Overall, the website reflects a professional and credible business with room for technical and security enhancements.

SEB.lv is the official website of SEB bank in Latvia, a major financial institution offering comprehensive banking services to private individuals, businesses, and large enterprises. The website provides extensive information on daily banking, loans, investments, insurance, and private banking, supported by a professional and well-structured Drupal-based platform. Multilingual support and clear navigation enhance user experience. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. DNS configurations show good email security practices with SPF and DMARC policies in place. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting strong privacy awareness. Overall, the site demonstrates a mature digital presence but requires urgent remediation of its SSL/TLS configuration to meet modern security standards.

J

JSC Credit Information Bureau

manakreditvesture.lv

0

JSC Credit Information Bureau (KIB) operates the website manakreditvesture.lv, providing credit information and risk management services in Latvia. As part of the global Creditinfo Group and backed by major Latvian banks, it offers individuals and companies access to credit reports, credit scores, dispute management, and profile monitoring. The business model includes free and subscription-based services, targeting Latvian consumers and financial institutions. The website is built on a modern React and Gatsby stack, offering a good user experience and clear navigation, though performance is somewhat slow. Security posture is weak due to the absence of a valid SSL certificate and lack of security headers, which poses a significant risk. Privacy compliance is basic but present, with a privacy policy aligned with GDPR. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional but requires urgent security improvements to protect user data and build trust.

C

CREDITREFORM Rating SIA

crediweb.lv

0

CrediWeb.lv is a Latvian-based business information platform operated by CREDITREFORM Rating SIA, providing comprehensive credit and business reports for companies primarily in Latvia, Europe, and China. The platform targets businesses and registered users seeking detailed company and private person credit information, offering services such as company reports, family trees, monitoring, and foreign credit reports. The website demonstrates a professional design with consistent branding and clear navigation, supporting multiple languages and user authentication methods including bank link authentication. Technically, the site uses modern JavaScript libraries like jQuery, Flatpickr, Tippy.js, and Chart.js, and integrates Google Tag Manager for analytics. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts user security and trust. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. WHOIS data confirms the domain is actively maintained and consistent with the business's Latvian operations, though domain protection locks are not enabled. Overall, while the business model and content quality are strong, the security posture requires urgent improvement to protect users and enhance credibility.

JauniAuto.lv is a Latvian automotive news website providing up-to-date articles, reviews, and industry news targeted at Latvian-speaking automotive enthusiasts. The site operates primarily as an advertising-supported media platform, featuring a range of automotive content with a consistent brand presentation. Technically, the website is built on WordPress and uses common web technologies such as jQuery and Google Analytics, but suffers from slow performance and lacks modern security configurations. The absence of a valid SSL certificate and HTTPS support is a critical security gap, exposing users to potential risks. Additionally, the site lacks privacy and cookie policies, which raises compliance concerns under GDPR regulations. Business credibility is moderate due to the lack of explicit contact information and security policies, although the domain registration data aligns well with the website's purpose and location.

P

PK MEŽS SIA

pkmezs.lv

0

SIA PK Mežs is a Latvian small-sized company specializing in forestry and wood processing services, primarily serving the Zemgale region. The company offers forest and forest stand purchasing, forestry services, wood processing, and forest property valuation. The website is professionally designed with good content quality and clear navigation, targeting forest owners and sellers. Technically, the site uses a modern tech stack including jQuery, Usercentrics for cookie consent, Google Analytics, and Snowplow for analytics, hosted on Businessmedia.lv infrastructure. However, the website lacks a valid SSL certificate and HTTPS support, which is a critical security vulnerability. Privacy compliance is basic with a privacy policy and cookie consent but no GDPR-specific indicators or terms of service. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional but requires urgent security improvements.

A

Attollo Brokers

octa24.lv

0

OCTA24.lv is an online insurance brokerage platform focused on providing vehicle owners in Latvia with an easy-to-use OCTA insurance calculator and policy purchase service. The website offers comprehensive information about mandatory vehicle liability insurance, including FAQs, news, and related insurance products like KASKO. The business operates under Attollo Brokers, a recognized insurance intermediary in Latvia, positioning itself as a convenient digital channel for insurance comparison and purchase. Technically, the site uses an older technology stack with Apache and PHP 5.5.9, integrating jQuery and FancyBox for UI components. Despite functional content and structured data, the absence of a valid SSL certificate and outdated server software significantly weaken the security posture. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are found. Overall, the site is functional and informative but requires urgent security upgrades to protect user data and improve trust.

I

iAuto.lv

iauto.lv

0

iAuto.lv is a Latvian automotive news portal providing a wide range of content including automotive news, sports, forums, classifieds, and user-generated content. The site targets Latvian-speaking automotive enthusiasts and general audiences interested in vehicles and related topics. It operates primarily as an advertising-supported media platform with additional services such as classifieds and insurance calculators. Technically, the site uses a custom or unknown CMS with technologies including nginx, jQuery, Font Awesome, Google Tag Manager, and Gemius analytics. Hosting is supported by Cloudflare DNS and a dedicated IP. However, the site lacks a valid SSL/TLS certificate and does not support modern TLS protocols, which significantly impacts its security posture. Cookie consent mechanisms are implemented, supporting GDPR compliance to a basic degree. The absence of explicit contact information and security policies reduces business credibility somewhat. Overall, the site is functional with good content quality but requires urgent security improvements to protect users and enhance trust.

A

Akciju sabiedrība “Olpha”

olpha.eu

0

Olpha is a leading pharmaceutical manufacturer based in Latvia with a strong regional presence across more than 60 markets. The company offers a broad portfolio of pharmaceutical products, active pharmaceutical ingredients, and contract manufacturing services. Their website reflects a mature digital presence built on WordPress with multilingual support and advanced accessibility features, demonstrating a commitment to inclusivity and user experience. The site is professionally designed with clear navigation and comprehensive content tailored to healthcare professionals, business partners, and the general public. Security posture is solid with HTTPS enabled and SPF/DMARC email protections, though improvements in HTTPS hardening and DNS security are recommended. Privacy and cookie policies are well implemented and GDPR compliant. Overall, Olpha presents a trustworthy and credible business with a modern digital infrastructure.

A

Akciju sabiedrība “Olpha”

olainfarm.com

0

Olpha is a well-established Latvian pharmaceutical company with over 50 years of experience and a strong regional presence across more than 60 markets. The company specializes in manufacturing a wide range of pharmaceutical products including active ingredients, finished dosage forms, and nutritional supplements. Their business model includes contract manufacturing and licensing, supported by a large team of specialists. The website reflects a mature digital presence with multilingual support, comprehensive accessibility features, and professional branding. Technically, the site is built on WordPress with modern plugins and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS and no critical vulnerabilities detected, though improvements in email security and SSL configurations are recommended. Overall, Olpha demonstrates a credible and professional online presence aligned with its business stature.

A

Akciju sabiedrība “Olpha”

olpha.lv

0

Olpha is a leading pharmaceutical manufacturer based in Latvia, serving over 60 markets with a broad portfolio of pharmaceutical products, active ingredients, and nutritional supplements. The company operates through multiple subsidiaries across Eastern Europe and Central Asia, emphasizing contract manufacturing and pharmaceutical co-development. Their website reflects a mature digital presence with multilingual support, professional design, and a strong focus on accessibility, ensuring compliance with WCAG 2.1 AA standards. Technically, the site is built on WordPress with modern plugins and tracking tools, although performance could be improved due to high resource count and page size. Security posture is adequate with HTTPS and modern TLS protocols, but lacks some advanced configurations such as HSTS, DNSSEC, and DMARC, which are recommended for enhanced protection. Privacy compliance is strong with clear policies and consent mechanisms. Overall, Olpha presents a trustworthy and professional online presence aligned with its business stature.

S

SIA SkanaGaisma.lv

skanagaisma.lv

0

SkanaGaisma.lv is a Latvian company specializing in the rental of sound and lighting equipment, stages, tents, and event furniture, providing full technical support for events across Latvia since 2012. The company targets event organizers, private individuals, and businesses, offering a comprehensive range of services from sound and lighting to live streaming and stage setups. Their market position is strong within the local event rental sector, supported by a professional website and active social media presence. Technically, the website is built on OpenCart with a modern theme and integrates popular analytics and marketing tools, though performance is somewhat slow. Security is adequate with HTTPS and strong cipher suites but lacks advanced configurations like HSTS and DMARC, which are recommended for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy, with clear contact information and positive customer testimonials.

Istabai Ltd operates a smart heating system business focused on providing homeowners with remote heating control, home security features, and energy-saving automation. The company targets environmentally conscious consumers seeking convenience and cost savings through smart home technology. The website presents a professional and consistent brand image with clear product offerings and starter kits. However, the technical infrastructure shows signs of aging with AngularJS and jQuery usage, and the lack of a valid SSL certificate significantly undermines security and user trust. Advertising and analytics tools are integrated, but privacy compliance is lacking due to missing privacy and cookie policies. Overall, the business appears legitimate and established in Latvia with a niche market position in smart home energy solutions.

D

Draugiem Group

ideabits.com

0

Draugiem Group is an established technology company based in Latvia, operating since 2006 with a portfolio of successful brands and investments. The company positions itself as a tech group where ideas are transformed into reality, targeting technology professionals, investors, and potential employees. The website reflects a professional and consistent brand image with clear navigation and relevant content about the company’s story, brands, career opportunities, and news. Technically, the site uses modern web technologies including React, Google Fonts, and tracking tools such as Facebook Pixel and Google Tag Manager. However, the site suffers from a critical security issue due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism implemented via OneTrust. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

Z

Zip.lv

zip.lv

0

Zip.lv is a well-established Latvian online classified ads platform, operating since 2008, offering a wide range of categories including transport, real estate, jobs, and various goods and services. The website targets Latvian-speaking users seeking a centralized marketplace for buying, selling, and exchanging items and services. It maintains a consistent brand presence and provides clear contact information and comprehensive privacy and cookie policies, demonstrating good compliance with GDPR requirements. Technically, the site utilizes a variety of modern web technologies and third-party services such as jQuery, Google Fonts, FontAwesome, Google Analytics, Facebook SDK, and Stripe for payments. It is hosted behind Cloudflare, indicating a robust hosting infrastructure. However, the site suffers from a critical security issue: the absence of a valid SSL certificate and lack of HTTPS support, which severely impacts its security posture and user trust. The security posture is weak due to missing HTTPS, no HSTS, no security headers, and no DMARC or DNSSEC configurations. Despite this, the site employs a detailed consent management platform with extensive vendor disclosures, reflecting a strong commitment to privacy compliance and transparency. The site integrates numerous advertising and analytics vendors, indicating extensive user tracking and data collection practices. Overall, while the business and privacy compliance aspects are strong, the lack of HTTPS and related security measures present a significant risk. Addressing these security gaps is critical to improving user trust and safeguarding data. The site’s performance is slow, likely due to large page size and numerous resources, suggesting opportunities for optimization.

G

Grey Willow Technologies

gwillow.eu

0

Grey Willow Technologies is a small cybersecurity consulting firm based in Latvia, specializing in incident response, strategic readiness, technical assurance, and managed security services. The company positions itself as a trusted cybersecurity consultant helping organizations mitigate threats and recover from security incidents. The website is built on WordPress using Elementor and integrates Google Analytics for user tracking. However, the site lacks a valid SSL certificate, serving content over HTTP, which poses a significant security risk. No privacy or cookie policies are present, and no explicit security or incident response policies are disclosed. Contact information including email, phone, and physical address is clearly provided, along with a LinkedIn social media presence.

S

SIA "Juridiskā koledža"

jk.lv

0

Juridiskā koledža is a Latvian educational institution specializing in legal and related professional studies. The website presents a comprehensive offering of study programs, courses, and international cooperation such as ERASMUS. The institution positions itself as a provider of qualified specialists with practical and theoretical knowledge for the labor market in Latvia and abroad. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, but suffers from slow performance and lacks a valid SSL certificate, which impacts security and user trust. Security posture is weak due to missing HTTPS, lack of security headers, and absence of DMARC records, although SPF is correctly configured. Privacy compliance is minimal with no visible privacy or cookie policies or consent mechanisms. Contact information and certifications are clearly presented, supporting business credibility. Overall, the site is functional but requires significant improvements in security and privacy to meet modern standards.

V

Vidzemes Augstskola

va.lv

0

Vidzemes Augstskola is a regional higher education institution in Latvia offering a range of academic programs including bachelor, master, doctoral, and lifelong learning courses. The website serves students, staff, alumni, and cooperation partners with information on study processes, events, and services. The institution maintains an active online presence with regular news and event updates, supported by social media channels. Technically, the website is built on Joomla CMS using the Helix Ultimate framework and hosted behind Cloudflare, but critically lacks a valid SSL certificate, resulting in no HTTPS support. This is a significant security risk that undermines user trust and data protection. The site implements cookie consent mechanisms and has comprehensive privacy policies, indicating good privacy compliance. However, the absence of HTTPS and modern TLS protocols severely impacts the overall security posture. Strategic improvements in SSL/TLS deployment and security headers are essential to enhance the site's security and trustworthiness.

C

CERT.LV

dnsmuris.lv

0

The website dnsmuris.lv is operated by CERT.LV in cooperation with NIC.LV to provide a free DNS firewall service aimed at protecting Latvian internet users from cyber threats such as phishing and malware. The service is positioned as a national cybersecurity initiative with a focus on individual and organizational users in Latvia. The website content is primarily in Latvian and provides detailed instructions on configuring DNS settings to use the firewall service. Technically, the site uses jQuery and Semantic UI frameworks but suffers from slow load times and lacks a valid SSL certificate, resulting in no HTTPS support. Security posture is weakened by the absence of DNSSEC and CAA records, although email security policies like SPF and DMARC are properly configured. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. Overall, the site is trustworthy and professional but requires critical improvements in SSL/TLS deployment and DNS security to enhance user trust and security.

G

GIGN.lv - Team Fortress 2 / Counter strike community portal

gign.lv

0

GIGN.lv operates as a niche community portal primarily serving gamers interested in Team Fortress 2 and Counter Strike series. The site offers game servers, forums, file downloads, and social interaction features targeting a small, dedicated gaming audience mainly in Latvia. The business model revolves around community engagement and hosting gaming-related content and services. Technically, the site uses legacy JavaScript libraries like jQuery 1.4.2, integrates Google Adsense for monetization, and employs Cloudflare for DNS and likely CDN services. Performance is slow with a large page size and many resources, and mobile optimization is basic. Security posture is moderate with a valid SSL certificate and proper email authentication records (SPF, DMARC), but lacks modern security headers, HSTS, DNSSEC, and CAA records. No privacy or cookie policies are present, indicating compliance gaps. Overall, the site is functional but dated, with room for modernization and improved security and privacy practices.

S

SIA MUDIA

andelemandele.lv

0

Andele Mandele is a prominent Latvian e-commerce platform specializing in a wide range of products including fashion, home goods, and transport-related items. It serves as a marketplace and community portal with extensive user engagement features such as forums, events, and blogs. The platform is well-established in the Latvian market, targeting local and Baltic consumers with a medium-sized business footprint. Technically, the website employs modern web technologies including Vue.js, Google services, and multiple advertising and analytics integrations, demonstrating a mature digital infrastructure. Security-wise, the site uses strong TLS protocols, has a strict DMARC policy, and implements a comprehensive consent management platform ensuring GDPR compliance. However, there are areas for improvement such as enabling HSTS, OCSP stapling, and DNSSEC to enhance security further. No explicit security policy or incident response information is publicly available, which could be addressed to improve trust. Overall, the platform shows a high level of professionalism and trustworthiness with extensive advertising and tracking practices managed transparently through user consent mechanisms.

Serveris.lv, operated by SIA Datateks, is a Latvian hosting service provider established in 2002, offering web hosting, virtual servers, SSL certificates, and server rental services. The company targets Latvian businesses and individuals requiring reliable and professional hosting solutions with 24/7 technical support. Their market position is solid within the local telecommunications sector, supported by long-term customer relationships and positive testimonials. Technically, the website runs on Apache with PHP 5.6.40, uses common JavaScript libraries like jQuery, and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent. The SSL certificate is valid but lacks modern TLS protocol support, and security headers are minimal. No explicit privacy or security policies are published, though cookie consent is implemented. Contact information is clearly provided, including phone, email, WhatsApp, and Skype.

B

Blue Bridge Technologies SIA

bluebridge.lv

0

Blue Bridge Technologies SIA is a Latvian IT company specializing in healthcare and health insurance IT solutions. Their offerings include the SmartMedical system for healthcare providers, insurance claims processing solutions, and a patient portal called Piearsta.lv. The company serves healthcare institutions, insurance companies, medical practices, and patients, positioning itself as a key regional player with a solid client base including major insurance companies and healthcare providers. The website content is primarily in Latvian and targets both B2B and B2C audiences in the healthcare and insurance sectors. Technically, the website runs on Apache with jQuery 1.8.2 and uses Cloudflare DNS services. The SSL certificate is valid but lacks modern TLS protocol support, and DNSSEC and CAA records are not implemented, indicating room for security improvements. The site includes a cookie consent mechanism but lacks visible privacy policy and terms of service pages, which could impact compliance and user trust. Social media presence includes Facebook, LinkedIn, YouTube, and legacy Google+ links. Overall, the website is professionally designed with good content relevance and navigation clarity, but technical and security enhancements are recommended.

B

Blue Bridge Technologies

smartmedical.lv

0

SmartMedical, developed by Blue Bridge Technologies, is a specialized healthcare IT platform serving Latvian medical professionals and institutions since 2007. It offers comprehensive patient registration, appointment scheduling, billing, and data exchange services integrated with national health systems and insurance providers. The platform holds a strong market position with over 550 healthcare clients including major hospitals and clinics. Technically, the website is built on WordPress with modern SEO and tracking tools, hosted behind Cloudflare DNS. Security posture is solid with HSTS and secure cookies, but lacks modern TLS protocol support and explicit vulnerability disclosure. Privacy compliance is well addressed with GDPR-aligned cookie consent and a detailed privacy policy. Overall, the site reflects a mature healthcare IT business with good digital presence and security hygiene.

S

SIA Blue Bridge Technologies

piearsta.lv

0

Piearsta.lv is an established Latvian healthcare portal operated by SIA Blue Bridge Technologies, providing an online platform for patients to book appointments with doctors and specialists, including options for remote consultations. The portal integrates with the SmartMedical healthcare management system, positioning itself as a convenient and accessible service for patients and healthcare providers. The website supports Latvian and English languages and emphasizes user convenience and accessibility. Technically, the site uses Apache server, JavaScript libraries including jQuery, and integrates third-party services such as Cookiebot for consent management, Google Analytics, and Facebook SDK for tracking and marketing. Security measures include a valid SSL certificate and several HTTP security headers; however, modern TLS protocols are not enabled, which is a notable gap. The site demonstrates good privacy and cookie policy compliance with GDPR considerations but lacks explicit published security and incident response policies. Overall, the portal shows a mature digital presence with room for security enhancements and improved transparency in security governance.

P

Profesora Skrides Sirds Veselības Klīnika

skride.lv

0

Profesora Skrides Sirds Veselības Klīnika is a specialized cardiology healthcare provider based in Latvia, offering a wide range of cardiovascular and related medical services. The clinic positions itself as a multidisciplinary center with experienced specialists, targeting Latvian residents seeking high-quality heart and vascular care. The website supports multilingual content in Latvian and English and provides clear contact and appointment booking options, including online scheduling through a partner platform. The business model focuses on direct healthcare services supplemented by e-commerce offerings such as gift cards and subscriptions.