Security Directory

L

Luminor Bank AS

luminor.lv

0

Luminor Bank AS operates a comprehensive banking website targeting private individuals and businesses in Latvia, offering a wide range of financial services including loans, savings, insurance, and internet banking. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and Google analytics tools integrated, alongside a robust cookie consent mechanism powered by OneTrust. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. However, explicit incident response contact details and vulnerability disclosure mechanisms are not found, representing an area for improvement. Overall, the website reflects a mature digital presence suitable for a large financial institution with high trustworthiness and good user experience.

21CC Triatloniklubi is a local Estonian triathlon club offering training and competition services primarily targeting adults and youth interested in triathlon sports. The website serves as an informational portal with basic navigation and content focused on club activities, training schedules, and competitions. The technical infrastructure is based on older JavaScript libraries such as MooTools and Slimbox, with a custom CMS platform inferred from URL structures. Google Analytics is used for visitor tracking, but no privacy or cookie policies are present, indicating limited privacy compliance. Security posture is basic with HTTPS enabled but lacking important security headers and policies. Overall, the site is functional but lacks modern security and privacy best practices.

H

Huonekaluliike Masku

masku.com

0

Huonekaluliike Masku operates as a Finnish furniture retailer offering products both online and in physical stores. The website content is professionally designed with a modern CSS framework and is mobile optimized, targeting Finnish consumers interested in home furniture. However, the absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and consistent branding. The technical infrastructure suggests use of a headless CMS (Storyblok) and modern frontend technologies, but lacks visible analytics or tracking scripts in the provided content. Security posture is weak due to missing security headers, lack of privacy and cookie policies, and no explicit contact information for security or business inquiries. Overall, the website functions well for user experience but requires improvements in security, compliance, and transparency to enhance trust and reduce risk.

Y

Yaga

yaga.co.za

0

Yaga is a South African online marketplace specializing in preloved and new fashion items, providing a platform for users to buy and sell clothing safely. The website targets consumers interested in sustainable fashion and sellers looking to monetize their preloved items. The platform integrates secure payment methods and multiple delivery partners, enhancing user trust and convenience. Technically, Yaga employs modern web technologies including React, Next.js, and Material-UI, with integrations for analytics and marketing tools such as Google Tag Manager, TikTok Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses secure payment gateways, but lacks explicit security headers and published privacy or terms policies, which are recommended for compliance and trust. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security policies would strengthen its posture.

L

Leanest OÜ

leanest.ee

0

Leanest OÜ is an Estonian technology company specializing in digital transformation solutions for manufacturing and industrial sectors. Their offerings include production optimization software, AI-driven quality control, and workforce planning tools. The company positions itself as a leader in AI applications for industrial quality assurance and production efficiency within the Baltic region. The website reflects a professional and consistent brand image with detailed product descriptions and a clear target audience of manufacturing and service sector businesses. Technically, the website is built on WordPress with modern JavaScript and uses common marketing and analytics tools such as Google Tag Manager and LinkedIn Insight. The site is mobile-optimized and presents good SEO practices, although accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and secure form handling but lacks explicit security headers and privacy compliance documentation such as privacy and cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, Leanest demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security hardening. The domain registration data supports the legitimacy of the business, and the company maintains active social media profiles and partner relationships that reinforce its market position.

AS Farmi Piimatööstus operates as an Estonian dairy product manufacturer with a well-established online presence since at least 2010. The website serves as a platform to showcase their products, recipes, and company information, targeting consumers interested in dairy goods. The company maintains active engagement through social media channels and provides clear contact details, reinforcing its market position as a reputable local manufacturer. Technically, the website is built on the Voog CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site employs HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and formal security policies, which could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. No vulnerability disclosure or incident response information is provided, indicating room for maturity in security governance. Overall, the website is professional and trustworthy with a solid business foundation. Strategic improvements in security policies, privacy transparency, and accessibility would enhance compliance and user trust, supporting long-term digital resilience.

Q

QATestLab

qatestlab.com

0

QATestLab is an independent software testing and QA services provider established in 2010, targeting software development companies and businesses seeking reliable quality assurance solutions. The company offers a variety of software testing types and solutions aimed at improving software quality. The website reflects a professional B2B service model with a consistent brand presence and clear business description. The technical infrastructure includes multiple modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Visual Website Optimizer, indicating a mature digital marketing and performance measurement approach. Hosting and domain registration are stable and consistent with the business profile. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is limited due to absence of explicit privacy and cookie policies, though a cookie consent mechanism is present. Overall, the website is well-designed, user-friendly, and trustworthy, but could improve transparency and security practices to align with best industry standards.

The website g5advisory.com is currently inaccessible due to a Cloudflare 523 error indicating that the origin web server is unreachable. This prevents access to any substantive website content, metadata, or business information. The domain is registered with NameCheap, Inc. since 2017 and uses Cloudflare DNS services without DNSSEC enabled. The lack of accessible content and security headers limits the ability to fully assess the technical and security posture of the site. No privacy, cookie, or terms of service policies are found, nor any contact information or forms. The website appears to be a small business or advisory service based on domain age and naming, but no further business details are available. Overall, the site currently exhibits poor content quality, minimal technical implementation, and limited security posture due to the origin server being unreachable.

H

Hutten

hutten.eu

0

Hutten is a well-established Dutch catering and hospitality company with a history dating back to 1929. The company provides culinary services including business catering, event catering, and healthcare catering across the Netherlands. Their business model focuses on delivering high-quality, sustainable food and hospitality experiences with a strong emphasis on guest satisfaction and social impact. The website reflects a professional and consistent brand image targeting corporate clients, event organizers, and healthcare institutions. Technically, the website employs modern web technologies such as jQuery, Magnific Popup, Google Tag Manager, and Cookiebot for cookie consent management. Hosting assets on DigitalOcean CDN suggests a reliable infrastructure. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and cookie consent implemented. However, the absence of security headers and visible privacy policy or terms of service pages indicates room for improvement in compliance and security best practices. No WHOIS registrant data is publicly available due to EURid privacy policies, but the domain and website content appear legitimate and consistent with the company's Dutch origin. Overall, Hutten's digital presence is professional and trustworthy, but enhancing transparency around privacy, security policies, and incident response would strengthen their compliance and security posture.

BIND is a small Estonian digital product development agency specializing in designing, building, and launching custom multimedia and digital products including mobile-optimized websites, e-commerce solutions, browser extensions, embedded systems, and mobile apps. The company has an established market presence since 2011 with a credible client base and positive testimonials. Technically, the website is built on WordPress with modern frontend technologies and SEO optimization, delivering a good user experience with mobile responsiveness and moderate performance. Security posture is solid with HTTPS and secure form handling, though it lacks some advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

The website nickyclarke.com is currently inaccessible beyond a security verification page that employs Google reCAPTCHA invisible v3 to block automated access. This prevents extraction of meaningful business or content data. The domain is long-established, registered since 1998 with 123-Reg Limited, indicating legitimacy and stability. However, the lack of visible content, policies, or contact information severely limits the ability to assess the business model, services, or market position. Technically, the site uses modern Bootstrap CSS and Google reCAPTCHA for bot mitigation but lacks visible security headers and DNSSEC, which are recommended for enhanced security. The security posture is moderate due to the presence of reCAPTCHA but incomplete without other best practices. Overall, the site scores low on content quality, privacy compliance, and business credibility due to blocked content and missing information.