Security Directory

B

Baltic Innovation Agency

bia.ee

0

Baltic Innovation Agency is a small Estonian innovation management company established in 2010, focused on connecting ideas, people, and funding to foster innovation in the Baltic region. Their key services include innovation consulting, analysis, management, and funding support, targeting startups, clusters, smart cities, and green deal initiatives. The website is built on WordPress with modern plugins and SEO tools, showing good digital maturity and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal privacy/cookie policies, indicating room for compliance improvement. Overall, the site is professional and trustworthy, with clear contact information and partner affiliations, but should enhance privacy compliance and security transparency to reduce risk.

T

The FinTechers

thefintechers.com

0

The FinTechers is a fintech accelerator focused on supporting Central and Eastern European fintech founders to grow rapidly and build impactful companies. The website presents a clear value proposition emphasizing mentorship, regulatory support, investment opportunities, and access to a collaborative ecosystem. The business is positioned as a specialized accelerator backed by StartupYard and DEPO Ventures, with strong trust signals from industry testimonials. Technically, the site is built on WordPress using the Enfold theme and related plugins, delivering a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and protection. WHOIS data indicates a very new domain consistent with the startup's founding year, though the creation date appears to be in the future, likely a data anomaly. Overall, the website is professional, credible, and well-targeted but could improve privacy and security practices.

E

EUDIS Business Accelerator

eudis-business-accelerator.eu

0

EUDIS Business Accelerator is a specialized EU-wide programme designed to empower start-ups and scale-ups in the defence innovation sector. Backed by the European Commission, it offers tailored coaching, seed funding, networking, and access to testing facilities over an 8-month period. The website reflects a professional and well-structured digital presence, leveraging modern technologies such as Drupal 11 and Bootstrap, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site demonstrates high professionalism and trustworthiness, with strong compliance to privacy regulations and clear business focus on the European defence ecosystem.

Giras Tech is a Chile-based small business specializing in organizing immersive group travel experiences focused on technology and innovation sectors. Their website presents a professional and modern WordPress-based platform using the Kadence theme and blocks, featuring multimedia content and partner logos to build trust. The business targets technology enthusiasts and professionals seeking unique networking and learning opportunities through curated trips. Technically, the site is hosted on GreenGeeks, uses HTTPS with a valid SSL certificate, and incorporates modern web technologies such as HTML5 video backgrounds and carousel galleries. However, the site lacks explicit privacy and cookie policies, and no direct contact emails or phone numbers are provided, relying solely on a contact form. Security posture is generally good with no obvious vulnerabilities or exposed sensitive data, but DNSSEC is not enabled and security headers are missing. WHOIS data shows privacy protection consistent with a new business domain registered in 2023. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

S

Skaala

skaala.org

0

Skaala is a small Estonian investment company focused on creating meaningful, long-term value through private equity, real assets, and impact-driven projects. The company has roots dating back to 2005 with founders experienced in successful tech ventures and operates with a professional team led by four partners. The website reflects a modern, well-structured digital presence built on WordPress with advanced SVG animations and integration of Google Analytics for user insights. Security posture is adequate with HTTPS and domain transfer protection, but lacks explicit security headers and privacy compliance documentation such as privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, Skaala presents as a legitimate and professional investment firm with room for improvement in privacy and security transparency.

K

Krulli kvartal

krulli.co

0

Krulli kvartal is a community-oriented urban development project based in Tallinn, Estonia, focused on creating a human-centered, inclusive, and sustainable urban space. The website showcases rental spaces, event venues, and community activities, targeting local residents, creatives, and startups. The project emphasizes collaboration and cultural engagement within the Kalamaja district. Technically, the website is built on a modern stack using Next.js and Strapi CMS, hosted on DigitalOcean, with good performance and mobile optimization. Security posture is strong with HTTPS and security headers, but lacks explicit privacy and cookie policies, which impacts privacy compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and incident response disclosures.

V

Valencia Innovation Capital

valenciainnovationcapital.com

0

Valencia Innovation Capital is a municipal platform launched by the Innovation Department of the Valencia City Council to foster a dynamic, diverse, and creative city ecosystem. It aims to unite all stakeholders in Valencia's innovation and technological entrepreneurship ecosystem to collaboratively drive political and economic transformation towards a sustainable and technologically advanced future. The website is built on WordPress using modern plugins and frameworks, featuring multilingual support and active event programming. Security posture is solid with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though DNSSEC is not enabled and security headers are not evident. The domain is newly registered in 2024, consistent with the initiative's launch. Overall, the site demonstrates good technical maturity, privacy compliance, and business credibility.

N

Nucleate Bio, Inc.

nucleate.org

0

Nucleate Bio, Inc. operates a globally recognized, student-led organization dedicated to empowering biotech leaders and innovators. The organization offers educational programs, venture acceleration through its Activator program, and fosters a global community of bio-entrepreneurs. Supported by leading biotech companies and world-class advisors, Nucleate positions itself as a key player in the biotech innovation ecosystem. Technically, the website is built on WordPress with modern SEO and analytics tools, delivering a professional and responsive user experience. Security posture is solid with HTTPS and no evident vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a credible and trustworthy organization with room for improvement in privacy and security transparency.

S

Startup World Cup

startupworldcup.io

0

Startup World Cup operates as a global conference and competition platform that connects top startups, venture capitalists, entrepreneurs, and leading tech CEOs worldwide. The website presents a professional and consistent brand image, targeting the startup ecosystem and investment community. The business model centers on event hosting and competitive showcasing of startups, positioning itself as a key player in the global startup event market. Technically, the website is built on the Wix platform, leveraging Wix's hosting and content management capabilities. It integrates common analytics tools such as Google Analytics, Google Tag Manager, and Yandex Metrika for user tracking and marketing insights. The site is mobile-optimized and demonstrates moderate performance, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS effectively, ensuring encrypted communications. However, the absence of security headers and lack of visible privacy or cookie policies indicate room for improvement in security best practices and compliance. The WHOIS data is unavailable or privacy-protected, which is common for event websites but slightly reduces transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, clearer contact information, and improved security headers to strengthen trust and regulatory adherence.

F

Foras Ventures LTD

forasventures.com

0

Foras Ventures LTD is a UK-based company focused on driving investment and talent to the UK market, leveraging Scotland as a launchpad for global growth. Their business model centers on providing immersive international programmes, event management, and connecting startups, investors, corporates, governments, and academia to foster global expansion. The company targets founders, investors, venture builders, ecosystem leaders, and government agencies, positioning itself as a niche facilitator for UK market entry and international scaling. Technically, the website is built using modern web technologies with a clean and professional design. It uses HTTPS with good SSL configuration and is hosted via GoDaddy. The site integrates marketing tools such as HubSpot forms and event platforms like Luma. Performance and mobile optimization are moderate to good, though accessibility and SEO could be improved. From a security perspective, the site employs standard security headers and domain registration protections but lacks DNSSEC and visible security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Overall, the website presents a professional and trustworthy front for a newly founded company. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing detailed security and incident response policies, and providing explicit contact information to enhance trust and compliance.

P

Polish-Estonian Chamber of Commerce (POLESTCC)

polestcc.org

0

The Polish-Estonian Chamber of Commerce (POLESTCC) is a small, specialized business association established in 2020 to foster economic exchange and cooperation between Poland and Estonia. It serves entrepreneurs and companies operating or planning to operate in these countries by providing networking opportunities, business representation, and support for international development. The website reflects a professional and consistent brand image with clear business descriptions and active social media engagement. Technically, the site is built on WordPress with a modern theme and plugins, offering good SEO and mobile optimization. Security posture is solid with HTTPS, CAPTCHA on contact forms, and GDPR-compliant consent mechanisms, though DNSSEC is not enabled and some security headers are missing. Overall, the domain registration details align well with the business identity, supporting legitimacy. The site is accessible without WAF or blocking mechanisms, enabling full analysis.

I

Icebreaker.vc

icebreaker.vc

0

Icebreaker.vc is a Nordic early-stage venture capital firm focused on supporting over 100 startup teams from idea to seed stage and beyond, primarily in Estonia, Finland, and Sweden. Founded in 2017, the firm invests up to 1.5 million euros in initial funding rounds, positioning itself as a key player in the regional startup ecosystem. The website reflects a professional and consistent brand image, targeting startup founders and investors with clear calls to action such as applying for funding and investing with the firm. Technically, the website is built on the Webflow platform, utilizing modern web technologies including GSAP for animations and jQuery for DOM manipulation. Hosting is via Amazon Cloudfront CDN, ensuring fast load times and good mobile responsiveness. SEO and accessibility are adequately addressed, though accessibility could be improved further. Analytics are implemented using Umami, a privacy-focused analytics tool, indicating a moderate approach to user tracking. From a security perspective, the site enforces HTTPS with excellent SSL configuration and does not expose sensitive data or use vulnerable libraries. However, it lacks several security headers that could enhance protection against common web attacks. There is no visible cookie consent mechanism, which is a compliance gap given the EU funding and GDPR applicability. Incident response contact details and a vulnerability disclosure policy are also absent, limiting transparency in security management. Overall, Icebreaker.vc presents a trustworthy and credible online presence with a solid technical foundation and good business clarity. To further strengthen its security posture and compliance, the firm should implement security headers, add cookie consent, and publish clear incident response and vulnerability disclosure information.

The domain eis.ee is registered since 2010 under Zone Media OÜ, an Estonian registrar, indicating a legitimate and mature domain. However, the website content is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks access to any business or informational content. This prevents extraction of any privacy policies, contact information, or business descriptions. The technical infrastructure relies on Cloudflare security services, including Turnstile captcha and Cloudflare Insights for analytics. Due to the blocking, the website's security posture cannot be fully assessed, but the presence of Cloudflare WAF indicates a baseline security measure. Overall, the site lacks visible content and compliance disclosures, resulting in a low AI score and limited trustworthiness assessment.

H

Health Founders

healthfounders.ee

0

Health Founders is a specialized health technology accelerator based in Estonia, focused on supporting and accelerating healthtech startups through a dedicated program, expert mentoring, and access to a global investor network. The organization positions itself as the first vertical healthtech accelerator in the Baltics, leveraging Estonia's advanced digital health ecosystem. The website reflects a professional and consistent brand image with clear information about its services, partners, and mentors. Technically, the site is built on WordPress with modern plugins and integrates analytics tools such as Google Analytics and Plausible. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks published security policies and headers. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is credible and well-positioned but should improve compliance and security transparency.

T

Thinking in Billions – 21 May 2025

thinkinginbillions.eu

0

Thinking in Billions is a specialized event focused on fostering innovation through government-led regulatory sandboxes and legal experimentation frameworks. The event is closely tied to Estonian government entities and Latitude59, positioning it as a niche but credible platform for collaboration between public and private sectors in technology and defense innovation. The website is built on a modern WordPress platform using Elementor, with integration of Google Analytics and Tag Manager for tracking. While the site is professionally designed and mobile-optimized, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but security headers and incident response information are missing. Overall, the site is legitimate and consistent with its stated purpose but would benefit from enhanced privacy compliance and security transparency.

H

Hoperfy

hoperfy.com

0

Hoperfy is a small technology company specializing in a white-label event hotel booking platform designed to help event organizers monetize hotel bookings made by their international visitors. The platform offers a 50/50 revenue-sharing model and subscription upgrades with advanced analytics and flight booking capabilities. The website is professionally designed, mobile-optimized, and provides clear business information and customer testimonials, positioning Hoperfy as a niche player in the hospitality technology sector. Technically, the site uses modern JavaScript libraries, integrates Google Tag Manager and reCAPTCHA for security and analytics, and is hosted with reputable providers including GoDaddy and Cloudflare. Security posture is good with HTTPS and form protections, but lacks published security policies and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and credible but could improve transparency and security practices.

F

Fienta

fienta.com

0

Fienta is an established Finnish online event ticketing platform founded in 2017, offering services such as event page creation, registration forms, ticket sales, and payment processing. The platform targets event organizers and ticket buyers primarily in Finland and holds a strong market position with positive user ratings. Technically, the website leverages modern technologies including Laravel, Cloudflare, Google Tag Manager, Intercom, and Cookiebot, indicating a mature digital infrastructure. The site is hosted behind Cloudflare DNS and CDN services, ensuring reliable performance and security. Security posture is strong with HTTPS enforced, CSRF protection, and clientTransferProhibited domain status, although DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism via Cookiebot and a clear cookie policy, supporting GDPR adherence. However, explicit contact information, terms of service, and security policies are not readily found, which could be improved to enhance trust and compliance. Overall, the website is professional, secure, and compliant, with minor areas for enhancement in security headers and transparency.

K

Kodulehe tegemine OÜ

disain.ee

0

Kodulehe tegemine OÜ operates a professional web design and development studio based in Estonia, specializing in website creation, e-commerce solutions, SEO optimization, and graphic design services. The company targets businesses and organizations primarily in Europe and the USA, offering a comprehensive suite of digital services including website maintenance, analysis, and branding. Their market position is that of a trusted, experienced small business with nearly two decades of industry presence and a strong portfolio of satisfied clients. Technically, the website is built on WordPress with modern frameworks like Uikit, integrates Google services such as reCAPTCHA and Tag Manager, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and CAPTCHA usage, but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance and security improvements. Overall, the site is accessible without WAF or blocking, and the domain registration is consistent and legitimate. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing explicit contact information to improve trust and compliance.

The website prominion.net currently serves only a default Apache HTTP server test page powered by CentOS, indicating that the site is either under construction, misconfigured, or abandoned. There is no actual business content, branding, or contact information available, which severely limits the ability to assess the company's operations or market position. The domain was registered in 2020 through a registrar entity, with no privacy protection, but no registrant business details are provided. Technically, the site uses Apache on CentOS with Bootstrap CSS, but lacks modern web features, security headers, and HTTPS enforcement. From a security perspective, the absence of HTTPS and exposure of a default server page represent significant vulnerabilities and poor security posture. Privacy compliance is non-existent, with no policies or consent mechanisms detected. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility.

The website represents the Estonian Association of Architectural and Consulting Engineering Companies (EKEL), a professional industry association founded in 2015. It serves as a platform for member representation, training, news dissemination, and advocacy within the Estonian construction and architectural consulting sector. The site targets industry professionals and stakeholders in Estonia and Europe, positioning itself as a key national association with European affiliations such as EFCA. The business model is focused on membership services and sector development rather than commercial sales. Technically, the website is built on Joomla CMS using Bootstrap and jQuery, with Google Analytics and Google Tag Manager integrated for visitor tracking. The site is mobile responsive and has a moderate performance profile. However, it lacks advanced accessibility features and comprehensive SEO optimizations. The hosting is provided by Zone Media OÜ, a known Estonian registrar and hosting provider. From a security perspective, the site uses HTTPS (implied by WHOIS domain status and no HTTP-only indications) but lacks visible security headers and does not provide privacy or cookie policies, nor a cookie consent mechanism. No contact information or incident response channels are visible, which limits transparency and user trust. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and functional but requires improvements in privacy compliance, security headers, and transparency of contact information to enhance trust and regulatory adherence. Strategic recommendations include publishing privacy and cookie policies, implementing consent mechanisms, adding security headers, and providing clear contact details for security incidents.

Overwolf operates as a leading technology platform empowering players, developers, and creators to enhance gaming experiences through user-generated content (UGC). The company provides tools and services for building overlay apps, mods, game servers, and monetization solutions, positioning itself as a central ecosystem in the gaming industry. Their market position is reinforced by partnerships with major brands and a large active user base. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, comprehensive analytics, and strong mobile optimization. Security posture is robust, with HTTPS enforcement, security headers, and no visible vulnerabilities, although incident response contact details could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Overwolf presents a professional, trustworthy, and technically sound online presence.

A

Actual Reports OÜ

pdfmake.com

0

PDFMake.com is a specialized online platform offering a suite of PDF editing tools including watermarking, encryption, decryption, and optimization. The service targets users and businesses needing straightforward PDF manipulation capabilities, supported by an API for scalable integration. The website is professionally designed with consistent branding and clear navigation, hosted on AWS infrastructure with HTTPS enabled. However, it lacks published privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate with HTTPS and domain transfer protection but missing key security headers and incident response disclosures. Analytics are implemented via Google Tag Manager, indicating moderate user tracking without clear privacy compliance disclosures. Overall, the domain registration is consistent and legitimate, supporting the business claims.

A

Actual Reports OÜ

printoutdesigner.com

0

Printout Designer, operated by Actual Reports OÜ, is a specialized SaaS provider offering automated invoice, packing slip, and label generation services tailored for ecommerce platforms. The company targets online retailers seeking to streamline order processing and improve operational efficiency. Their solution integrates with major ecommerce platforms such as Shopify, BigCommerce, WooCommerce, Ecwid, and Shift4Shop, positioning them as a niche productivity tool within the ecommerce sector. The website content is professionally presented, with clear descriptions, pricing tiers, and customer testimonials that reinforce trust and credibility. Technically, the website employs modern web technologies including jQuery and Font Awesome, and is hosted on Amazon AWS infrastructure as inferred from DNS records. The site uses HTTPS with a valid SSL certificate, ensuring secure communications. Google Analytics and Google Tag Manager are used for user tracking and analytics. The site is moderately optimized for performance and mobile responsiveness, though accessibility features are basic. No CMS is explicitly detected, suggesting a custom or lightweight framework. From a security perspective, the domain registration is consistent and transparent, with no privacy protection masking registrant details. The domain is aged appropriately for the business maturity. However, DNSSEC is not enabled, and no security headers are detected in the HTML content, which are areas for improvement. No explicit security policies or incident response contacts are published, and no cookie consent mechanism is present, which may impact GDPR compliance. Overall, the security posture is adequate but could be enhanced with additional best practices. The overall risk assessment indicates a trustworthy and professional ecommerce SaaS provider with minor gaps in security and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing security and incident response policies, and adding cookie consent mechanisms to improve compliance and user trust.

P

PDF Generator API

pdfgeneratorapi.com

0

PDF Generator API is a technology company specializing in providing an API service that automates PDF document creation from templates and JSON data. Their platform targets developers and businesses seeking to integrate PDF generation capabilities into their applications, offering a browser-based drag-and-drop editor for template management. The company appears to be a small-sized entity founded around 2017, with a focused niche in document automation technology. Technically, the website leverages modern web technologies including Next.js and React, supported by analytics and monitoring tools such as Mixpanel, Google Analytics 4, RudderStack, and Bugsnag. Hosting is likely on Amazon AWS infrastructure, indicated by the DNS servers. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO practices in place. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism with granular user options, reflecting some privacy compliance efforts. However, the absence of DNSSEC, security headers, explicit privacy policy, terms of service, and contact information for security or incident response reduces the overall security posture. No WAF or blocking mechanisms were detected, and the domain registration is consistent and legitimate. Overall, the website presents a professional and functional service with room for improvement in privacy transparency, security hardening, and contact availability. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing comprehensive privacy and security policies, and providing clear contact channels for incident response.

E

Erply

erply.com

0

Erply is a well-established enterprise providing cloud-based retail POS and inventory management software solutions globally. Their platform supports retail businesses, franchises, and warehouses with a comprehensive suite of tools including employee scheduling, customer communication, BI dashboards, and payment processing. The website demonstrates a mature digital presence with excellent content quality, clear navigation, and mobile optimization. Technically, Erply leverages modern web technologies and AWS infrastructure, ensuring fast performance and scalability. Security posture is strong with HTTPS enforcement, domain protection statuses, and cookie consent mechanisms, although DNSSEC is not enabled and incident response contacts are not explicitly provided. Overall, Erply presents a trustworthy and professional online presence aligned with their business model and market position.

O

Ouman Group

oumangroup.com

0

Ouman Group is a Finnish-based company specializing in innovative HVAC products and building automation solutions. Their offerings include OEM thermostats, programmable controllers, wireless sensors, and cloud-based solutions aimed at optimizing energy efficiency and comfort in residential and commercial buildings. The company targets OEM partners, contractors, housing companies, and municipalities, positioning itself as a leader in sustainable building technology. Technically, the website is built on Webflow CMS and integrates modern analytics and marketing tools such as Google Tag Manager, HubSpot, and Leadfeeder, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and privacy compliance, though the absence of explicit security headers and a published security policy indicates room for improvement. The missing WHOIS registration data is a notable concern for domain legitimacy, but the professional website content and certifications mitigate some risk. Overall, Ouman presents a credible and professional online presence with a focus on innovation and sustainability in the energy sector.

E

Elevator Startups

elevatorstartups.com

0

Elevator Startups is a growth hacking and angel investment company based in Estonia, focused on accelerating startups and businesses at various stages through tailored programs such as business idea validation, product development, and scaling. Their approach emphasizes active mentorship, experimental sprints, and cultivating agility to drive transformative growth. The website is professionally designed using modern web technologies including Webflow, Google Tag Manager, and Facebook Pixel, indicating a moderate to advanced digital maturity. Security posture is strong with HTTPS enabled and no visible vulnerabilities, but lacks publicly available privacy and cookie policies, which impacts compliance. The absence of WHOIS registration data is a significant concern for domain legitimacy and trustworthiness. Overall, the website presents a credible business front but requires improvements in privacy compliance and domain registration transparency to enhance trust and security.

W

Workflows OÜ

workflows.ee

0

Workflows OÜ, operating under the ADM Workflows brand, is a medium-sized Estonian technology company specializing in the sales, implementation, and hosting of Atlassian products. They provide comprehensive services including consultation, license sales, cloud hosting, and user support, targeting businesses seeking to optimize their project management and IT workflows. The company holds recognized certifications such as Atlassian Gold Solution Partner and AWS hosting capabilities, positioning them strongly in the Atlassian ecosystem. Technically, the website is built on WordPress with modern SEO and analytics tools like Yoast SEO and Google Analytics. The site is mobile-optimized with good navigation and content quality, although some accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. From a security and compliance perspective, the site does not display privacy or cookie policies, nor incident response or security policy documentation, which are areas for improvement. Contact information is clearly provided, enhancing business credibility. The WHOIS data aligns well with the website content, confirming legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

Webhotellit.com is a Finnish web hosting service provider that merged with Domainhotelli in May 2022. The website serves primarily as an informational landing page announcing this merger and redirecting users to Domainhotelli, which is positioned as a fast-growing and affordable hosting provider in Finland. The business targets Finnish customers seeking web hosting and domain registration services, with a focus on WordPress-optimized hosting and ease of use. The domain has a long history dating back to 2000, supporting the business's credibility and market presence. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager for analytics, and Iubenda for cookie consent management. The site is mobile optimized and includes SEO best practices such as canonical URLs and Open Graph metadata. However, the CMS or platform is not explicitly identified, suggesting a custom or proprietary solution. Performance is moderate with basic accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. DNSSEC is not enabled, representing a minor security gap. No forms or sensitive data collection are present on the landing page, reducing immediate risk exposure. WHOIS data is consistent and legitimate, with no privacy protection masking registrant details. Overall, the website is functional and trustworthy as an informational portal for the merger, but lacks comprehensive privacy, security, and contact documentation. Strategic improvements include publishing privacy and security policies, enabling DNSSEC, and providing clear contact information to enhance trust and compliance.

S

Sinulaen

sinulaen.ee

0

Sinulaen.ee is an Estonian loan comparison portal providing consumers with independent and up-to-date information on various loan products including quick loans, small loans, auto loans, and refinancing options. The website serves as a platform to compare loan offers from multiple providers, facilitating informed financial decisions for its users. The business operates primarily in the Estonian market and targets individuals seeking consumer loans with a user-friendly online experience. Technically, the site is built on WordPress with common plugins for SEO, multilingual support, and loan comparison functionalities. It integrates multiple third-party analytics and advertising services, including Google Analytics, Yandex Metrika, and Google Adsense, and uses affiliate links to monetize loan referrals. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. Overall, the site is professional, content-rich, and trustworthy, with room for improvement in security best practices and privacy policy comprehensiveness.

S

Swiss-Belhotel International

swiss-belhotel.com

0

Swiss-Belhotel International operates a global hospitality business offering hotel and resort accommodations primarily across Asia-Pacific and the Middle East. The company targets both business and leisure travelers, providing direct booking options with exclusive rates and loyalty benefits. The website reflects a mature digital presence with multilingual support and integrated marketing tools. Technically, the site employs modern web technologies including service workers, multiple analytics platforms, and a cookie consent mechanism, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and some security best practices observed, though explicit security headers and incident response policies are not evident. The absence of WHOIS data reduces domain trustworthiness but the professional site design and content mitigate concerns. Overall, the site presents a low risk profile with room for improvement in transparency and security documentation.

K

Kopi Kenangan

kopikenangan.com

0

Kopi Kenangan is a prominent and fast-growing grab-and-go coffee chain based in Indonesia, founded in 2017. The company focuses on delivering high-quality coffee products using fresh local ingredients, supported by a mobile app that facilitates ordering and loyalty programs. The brand has received notable recognition including Halal certification and a World Branding Award, reinforcing its market position in the Indonesian retail coffee sector. Technically, the website is built on Squarespace, leveraging modern web technologies and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS enforced and domain locking, though improvements like enabling DNSSEC and HSTS are recommended. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website presents a professional and trustworthy image but should enhance privacy and security disclosures to align with best practices.

I

Internetowy Dom Mediowy Net S.A.

idmnet.pl

0

Internetowy Dom Mediowy Net S.A. is a Polish technology company specializing in programmatic advertising solutions aimed at increasing advertising revenues for media publishers. As part of the larger Grupa ZPR Media, it leverages advanced technology and business consultancy to serve both internal and external publishing clients. The website reflects a professional and modern digital presence with a focus on programmatic advertising, premium ad inventory, and local media services. The company targets media publishers and advertising agencies, operating on a commission-based business model that aligns its success with that of its clients. Technically, the website employs a mix of legacy and modern JavaScript libraries such as jQuery 2.2.4, alongside marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Eloqua. The site is mobile-optimized with responsive design elements and uses multiple CDN-hosted assets for performance. SEO and accessibility are basic but adequate. No CMS is explicitly identified. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a long-established domain registered to a Polish company matching the website's identity. Overall, the website presents a credible and professional business front with good content quality and technical implementation. Security posture is adequate but could be enhanced with additional headers and published policies. Privacy compliance is basic but present. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing accessibility features to strengthen trust and compliance.

A

AVAR VISUALS OÜ

avar.ee

0

AVAR VISUALS OÜ operates the website avar.ee, providing specialized services in virtual tours, 3D visualizations, and virtual reality solutions primarily targeting businesses in real estate, hospitality, education, and event management sectors. The company has a solid market presence with over 300 projects completed and more than 4 years of experience, positioning itself as a trusted niche service provider in Estonia. The website showcases a professional design with clear navigation, multimedia content including embedded Matterport virtual tours, and client testimonials enhancing credibility. Technically, the website is built on WordPress 6.8.1 with Bootstrap 4.3.1 and jQuery 3.7.1, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Mouseflow. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Hosting and domain registration are consistent and transparent, with the domain registered since 2012 by Zone Media OÜ. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms, which poses a compliance risk under GDPR. Overall, the website is professional and trustworthy with strong business credibility and technical implementation but requires improvements in privacy compliance and security policy transparency to enhance its security posture and regulatory adherence.

T

The Hackett Group®

thehackettgroup.com

0

The Hackett Group® is an enterprise-level consulting firm specializing in generative AI (Gen AI) solutions and digital transformation services. The company positions itself as a market leader with proprietary platforms such as AI XPLR™ and strategic acquisitions including LeewayHertz, Spend Matters™, and ZBrain™. Their services span business benchmarking, executive advisory, market intelligence, and technology implementation, targeting businesses aiming to leverage AI for breakthrough performance. The website reflects a mature digital presence with rich content, multimedia integration, and comprehensive navigation, indicating a high level of digital maturity. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Tag Manager, Hotjar, Microsoft Clarity, and Zoominfo. The site is mobile-optimized and performs moderately well, with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not fully documented. Privacy compliance is basic, with cookie consent but no visible privacy policy or terms of service in the provided content. Overall, the security posture is good but could be improved by adding explicit security policies, incident response information, and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is a notable concern, suggesting either privacy protection or data unavailability, which impacts domain legitimacy assessment. Despite this, the professional website content and business information support a credible business presence. Strategic recommendations include enhancing transparency on privacy and security policies, implementing additional security headers, publishing incident response and vulnerability disclosure information, and verifying domain registration details to improve trust and compliance.

S

Spend Matters LLC

techmatch.app

0

TechMatch, operated by Spend Matters LLC, is a procurement technology platform offering a suite of modules focused on sourcing automation, demand orchestration, spend analytics, supplier and risk management, and related procurement processes. The platform targets procurement professionals and enterprises seeking to optimize sourcing and procurement workflows through technology and data-driven insights. The website demonstrates a professional and consistent brand presence aligned with Spend Matters, a known entity in procurement research and technology. The technical infrastructure leverages modern web technologies including React, Dash, and Bootstrap, with integration of a live chat support widget (Chatra). Performance and mobile optimization are adequate, though accessibility features could be improved. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is partially met with clear privacy and terms policies hosted on the parent domain, but no cookie consent mechanism is present. Overall, the site is trustworthy and well-positioned in its niche, with room for enhancements in privacy and security transparency.

S

Symantra

symantra.eu

0

Symantra is a Brussels-based technology agency specializing in CRM solutions for B2B enterprises and associations, community and member platforms, AI solutions, and complex integrations. Their offerings include digital transformation services, e-learning platforms, and tailor-made partner portals, positioning them as a niche provider in the European association and public affairs sectors. The website is built on the Wix platform with integrated HubSpot marketing and analytics tools, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and some security best practices implemented, though explicit security headers and privacy policies are absent. The lack of WHOIS data raises some concerns about domain registration transparency, but the site content and business information appear professional and consistent. Overall, the website demonstrates a solid business presence with room for improvement in privacy compliance and security transparency.

V

Visionest Institute

xn--unistustetandja-itba.ee

0

The website 'Unistuste Tööandja' is operated by Visionest Institute, focusing on promoting employer branding through competitions and conferences primarily targeted at Estonian employers and HR professionals. The business operates in a niche sector related to employer branding and event organization, with a small company size and domain age consistent with its founding in 2018. The website uses WordPress with the Divi theme and integrates common marketing and analytics tools such as Google Analytics, HubSpot, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile optimized and presents a professional design, though content depth is basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a privacy policy linked externally and cookie consent implemented via HubSpot. Overall, the site is trustworthy with moderate risk, suitable for its business scope.

V

Visionest Institute

visionest.institute

0

Visionest Institute is an Estonian education and training organization formed by the merger of Marketingi Instituut, Invicta, and Director. It offers a variety of training courses and development programs targeting both businesses and individual learners, positioning itself as a reputable provider in the Estonian market. The website is professionally designed, mobile-optimized, and uses modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Facebook Pixel to engage and track visitors. The technical infrastructure is based on WordPress with WooCommerce, supported by performance optimization via WP Rocket. Security posture is solid with HTTPS enabled and domain transfer protection, though some security headers and DNSSEC are missing. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy in Estonian. No explicit security policy or incident response contacts were found, indicating room for improvement in transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

vDesignly

vdisain.ee

0

vDesignly operates as a small Estonian web design and development company, focusing on creating custom digital solutions to elevate web standards. The company leverages WordPress as its CMS platform, enhanced by popular plugins such as Yoast SEO and Google Tag Manager for SEO and analytics. The website demonstrates a good level of technical maturity with HTTPS enabled and reCAPTCHA implemented to secure forms. However, the absence of explicit privacy and cookie policies, as well as contact information, indicates gaps in privacy compliance and user trust facilitation. Security posture is generally sound but could be improved by adding security headers and formal incident response contacts. Overall, the site is professional and functional but would benefit from enhanced transparency and compliance documentation.

P

Puratos

puratos.com.br

0

Puratos is a global enterprise specializing in manufacturing and supplying ingredients for bakery, confectionery, and chocolate sectors. The website targets professional bakers, confectioners, and chocolatiers, offering products to improve recipe quality. The company maintains a strong global presence with multiple localized domains and uses Adobe Experience Manager as its CMS platform. The site integrates advanced marketing and optimization tools such as Google Tag Manager and Visual Website Optimizer, indicating a mature digital marketing strategy. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks explicit security headers and published privacy or cookie policies. Contact information and incident response details are not readily available, which may impact user trust and compliance. Overall, the website is professional and functional but could improve transparency and compliance documentation.

P

Puratos

puratos.in

0

Puratos India operates as a dedicated supplier of bakery, pastry, and chocolate ingredients targeting professional bakers, pastry chefs, and chocolatiers. The website reflects a global brand presence with localized content and multiple language versions, indicating a mature international business model focused on B2B manufacturing and ingredient supply. The technical infrastructure is built on Adobe Experience Manager CMS, leveraging modern web technologies and analytics tools such as Visual Website Optimizer and Google Tag Manager. The site demonstrates good design quality, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks comprehensive security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is professional and credible but would benefit from enhanced privacy and security transparency.

P

Puratos

puratos.ee

0

Puratos is an established international company specializing in bakery, patisserie, and chocolate ingredients and solutions, targeting professional bakers and chocolatiers. The website reflects a mature digital presence with localized content for Estonia, leveraging modern technologies such as Adobe Experience Manager and React components. Security posture is solid with HTTPS and secure login mechanisms, though some improvements in security headers and visible privacy policies are recommended. The business credibility is high, supported by consistent WHOIS data and professional content. Overall, the site is functional, well-branded, and serves its B2B audience effectively.

P

Puratos

puratos-konding.hr

0

Puratos-konding.hr is a regional Croatian website for Puratos, a global leader in bakery, patisserie, and chocolate ingredients. The site provides product information, recipes, and company commitments tailored to Croatian customers. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and common web technologies such as Google Tag Manager and FontAwesome. The website is well-branded, mobile-optimized, and offers a good user experience with clear navigation and relevant content. However, explicit privacy and cookie policies are not found, and contact information is not clearly presented, which impacts privacy compliance and user trust. Security posture is moderate with HTTPS usage but lacks visible security headers and incident response contacts. The domain registration is consistent with the Puratos Group's global presence, registered through a reputable Croatian registrar, and the domain age aligns with a regional site launch. Overall, the website is professional and credible but would benefit from enhanced privacy compliance and security transparency.

P

Puratos

puratos.at

0

Puratos.at is the Austrian localized website of Puratos, a large international manufacturer specializing in bakery, patisserie, and chocolate products. The company offers a broad portfolio of innovative ingredients and solutions aimed at professional customers in the food manufacturing sector. The website is well-structured, professionally designed, and provides extensive product information, recipes, and sustainability commitments, targeting B2B clients in Austria. Technically, the site is built on Adobe Experience Manager with modern frontend technologies and includes GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment, but the website content and structure strongly indicate a legitimate and professional business presence.

P

Puratos

puratos.lv

0

Puratos is a well-established international supplier specializing in raw materials for the bakery, pastry, chocolate, and dairy industries, targeting manufacturers and catering service providers primarily in Latvia through this localized website. The site offers product catalogs, recipes, and an e-commerce platform called 'Mans Puratos' for registered customers. Technically, the website is built on Adobe Experience Manager CMS with React components and uses modern web technologies including Google Tag Manager for analytics. The security posture is solid with HTTPS and OAuth2-based authentication, but lacks explicit security headers and visible security policies. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Overall, the website is professional and credible but could improve transparency and compliance aspects.