Security Directory

D

Digital Zombies Kft.

digital-zombies.com

54

Digital Zombies Kft. is a specialized TYPO3 development agency founded in 2018, serving primarily digital agencies and enterprises in the DACH region and North America. They offer expert TYPO3 upgrades, migrations, white-label development, architecture consulting, and long-term support. The company holds official TYPO3 Consultant Partner status and has received industry recognition including award nominations. Their website demonstrates a mature digital presence with comprehensive service descriptions, client testimonials, and case studies. Technically, the site is built on TYPO3 CMS with integrations of other technologies like Shopware, Magento, and Symfony, and employs modern web standards ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS domain registration data is a notable gap, slightly reducing trust from a domain transparency perspective. Overall, Digital Zombies presents as a credible, professional, and technically competent agency with a solid market position in TYPO3 services.

K

Kraken MMA & Fitness Ltd

kraken-mma.com

54

Kraken MMA & Fitness Ltd operates a specialized martial arts and fitness training facility based in Bedford, UK. The company offers a variety of classes including Mixed Martial Arts, Brazilian Jiu Jitsu, wrestling, kickboxing, and fitness programs for both juniors and adults. Their business model focuses on local community engagement through memberships, trial offers, and structured class schedules. The website reflects a consistent brand identity and provides clear navigation and contact options, supporting a positive user experience. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It employs modern web technologies including HTTPS, Google Analytics, and Google reCAPTCHA for form security. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but lacks important security headers which could enhance protection against common web threats. Privacy compliance is partial; while privacy and terms pages exist, there is no cookie consent mechanism, which is a GDPR compliance gap. The absence of WHOIS data for the domain is a concern, as it reduces transparency and trustworthiness, though the website content and company information appear legitimate. Overall, Kraken MMA & Fitness Ltd presents a professional and trustworthy online presence with room for improvement in security hardening and privacy compliance. Addressing these areas will strengthen their digital maturity and customer trust.

T

The Huguenot Museum

huguenotmuseum.org

47

The Huguenot Museum is a small non-profit organization based in the United Kingdom dedicated to preserving and sharing the history of the Huguenots. The museum offers exhibitions, educational programs, and special events to engage a general audience interested in cultural heritage and history. The website is professionally designed using WordPress and integrates various plugins including WooCommerce for e-commerce capabilities and ModesBrowser for interactive content. The museum maintains an active social media presence and provides clear contact information including phone and physical address. Technically, the website uses modern web technologies and is mobile optimized with good accessibility features. However, there are gaps in privacy compliance as no privacy or cookie policies are found, and no consent mechanism is implemented. Security posture is moderate with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and security headers. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security practices.

A

Adore Recruitment

adore-recruitment.co.uk

39

Adore Recruitment is a UK-based independent recruitment consultancy established in 2012, specializing in permanent, contract, and temporary staffing solutions across multiple sectors including sales, marketing, administration, industrial, engineering, and hospitality. The company positions itself as a client-focused agency with sector-specific expertise, supported by strong trust indicators such as ISO 9001 certification, REC membership, and positive client testimonials. Their market position is reinforced by recognition as a top recruitment agency in Basildon, UK. Technically, the website is built on WordPress using the Avada theme and integrates modern SEO and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and no exposed sensitive data, though additional security headers and published security policies would enhance their stance. Privacy compliance is a notable gap due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

D

Deepwater Corrosion Services Inc.

stoprust.com

60

Deepwater Corrosion Services Inc. is a specialized engineering and manufacturing company focused on corrosion control solutions, including cathodic protection, anode systems, inspection, and anti-corrosion products. The company serves industrial clients primarily in the energy sector, with a strong presence in offshore oil and gas, wind energy, docks, and terminals. Their market position is that of an established leader with award-winning engineering and global operations. Technically, the website employs modern web technologies, including Bootstrap, Flickity, and multiple analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and bot protection via Cloudflare Turnstile, though some security headers and explicit policies are missing. The WHOIS data is notably absent, which slightly reduces trust but the website content and contact information strongly support legitimacy. Overall, the site is professional, content-rich, and trustworthy, with minor areas for security and compliance improvement.

C

Cherry Estates Ltd

cherry-estates.co.uk

51

Cherry Estates Ltd is a specialist building maintenance contractor based in Amesbury, UK, providing commercial cleaning, landscape maintenance, and building refurbishment services primarily for apartment and office blocks. The company targets property management firms, estate agents, and housing associations, positioning itself as a trusted regional service provider with CHAS accreditation as a key trust signal. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on WordPress using a modern stack including WPBakery Page Builder, Yoast SEO, and Contact Form 7. It is hosted by a UK-based hosting provider and employs HTTPS with Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and explicit security policy documentation. From a security perspective, the site enforces HTTPS and cookie consent, uses reCAPTCHA, and avoids exposing sensitive data. However, it could improve by implementing additional security headers and publishing incident response contacts. No vulnerabilities or suspicious patterns were detected. Privacy compliance is good with clear privacy and cookie policies linked externally. Overall, the website is trustworthy, professionally maintained, and suitable for its business purpose. Strategic improvements in security policy transparency and technical security headers would enhance its posture further.

Additive Studios is a London-based award-winning post-production studio specializing in CGI, creative retouching, and high-resolution image compositing for advertising. Their portfolio demonstrates expertise in combining photographic and CGI media to create detailed and innovative visuals, including augmented reality applications. The company targets advertising agencies, art directors, and brands seeking premium post-production services. Technically, the website is built on a custom portfolio platform with integrations such as Google Analytics and Adobe Typekit fonts, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced, but lacks important security headers and privacy compliance elements such as a privacy policy and cookie consent. The domain is well-established since 2012, consistent with the business claims, and shows no suspicious registration patterns. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices to improve compliance and user trust.

L

London Ear Centre

londonearcentre.com

58

London Ear Centre is a specialist audiology and ear care provider operating multiple clinics across London, including Marylebone, Canary Wharf, Battersea, and Orpington. The company offers a comprehensive range of services such as hearing diagnostics, tinnitus management, balance rehabilitation, auditory implants, and ear care including microsuction. The website reflects a professional healthcare service with clear contact information, multiple accreditations, and a consistent brand presence. Technically, the site is built on WordPress with modern performance optimizations and SEO practices, though some security headers and DNSSEC could be improved. The security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some advanced security policies and vulnerability disclosure mechanisms. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy policy found. Overall, the site is trustworthy and well-positioned in the healthcare audiology market in London.

C

Commission Air

commissionair.co.uk

59

Commission Air is a UK-based aerial photography and time lapse service provider with over 35 years of industry experience. The company offers high-resolution aerial images and videos using helicopters and drones, primarily serving the construction, media, and real estate sectors. Their nationwide coverage and use of advanced equipment position them as a reputable service provider in their niche. The website is built on WordPress using the Enfold theme and integrates modern analytics and consent management tools, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and security policy pages indicates room for improvement. The lack of WHOIS data due to domain registration errors raises concerns about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the site provides a positive user experience with clear contact information and comprehensive privacy compliance.

Winding Snake Productions is a small, creatively driven 2D animation studio and non-profit media education organization based in South Wales, UK. The company focuses on original storytelling and reinvests profits into creative development and audience engagement. Their market position is that of a niche, community-focused studio with a strong emphasis on education and collaboration. Technically, the website employs modern web technologies including jQuery, Google Analytics, and Font Awesome, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, though the website content and branding are professional and trustworthy. Overall, the site presents a positive image but would benefit from enhanced security and privacy compliance measures.

T

Ten Town Limited

tentown.co.uk

61

Ten Town Limited operates a specialized educational platform focused on building strong numeracy skills for early years children up to age 20. The company offers a subscription-based model tailored for schools and parents, providing interactive learning resources including stories, songs, and activities. The website reflects a well-established business with a domain registered since 2011, supported by multi-award recognition and certifications such as Cyber Essentials. The target audience includes early years educators, parents, and young children primarily in the United Kingdom. Technically, the site is built on WordPress with WooCommerce for e-commerce functionality, enhanced by Yoast SEO and CookieFirst for privacy compliance. The site demonstrates good mobile optimization, SEO, and user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and SSL certificates in place, though security headers could be improved. Privacy compliance is strong with visible policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-positioned in the early years education market.

E

Ecopak International Limited

ecopakinternational.com

43

Ecopak International Limited operates as a global manufacturer specializing in polythene products with joint venture factories in China and Vietnam. Their product range includes various types of polythene bags, can liners, carrier bags, disposable gloves, and cleaning wipes. The company targets wholesalers, distributors, retailers, and the food service industry worldwide, exporting over 100 containers monthly. The website content is straightforward and business-focused, presenting their manufacturing expertise and product offerings clearly. From a technical perspective, the website employs legacy JavaScript libraries such as jQuery 1.11.1 and uses Google Analytics for visitor tracking. The site lacks modern security headers and visible HTTPS enforcement in the provided data, which raises concerns about secure communications. Mobile optimization and accessibility are basic, and SEO practices appear minimal. No CMS or hosting provider information is discernible from the content. Security posture is weak due to the absence of HTTPS confirmation, missing security headers, and lack of privacy or cookie policies. The WHOIS data is notably absent, with the domain appearing unregistered or WHOIS information unavailable, which is inconsistent with the active website presence and business claims. This discrepancy reduces trust and raises legitimacy concerns. Overall, while the business content is relevant and the website functional, significant improvements in security, privacy compliance, and transparency are recommended to enhance trustworthiness and protect user data.

D

D&M Planning Limited

dm-planning.co.uk

49

D&M Planning Limited is a small, established UK-based consultancy specializing in chartered town planning services primarily in Surrey and surrounding counties. The company offers a broad range of planning-related services including application preparation, appeals, site feasibility, and development advice. The website reflects a professional and trustworthy business with clear branding, client testimonials, and recognized certifications such as RTPI membership. Technically, the site is built on Drupal CMS with legacy jQuery and integrates Google Analytics and Tag Manager for user tracking. The site is mobile optimized and SEO friendly but lacks some modern security headers. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though WHOIS data is unavailable due to domain registration issues, which introduces some legitimacy concerns. Overall, the website is well-maintained and suitable for its target audience of property developers and individuals seeking planning consultancy.

N

Norse Care

norsecare.co.uk

72

Norse Care is a well-established healthcare provider specializing in residential and respite care services in Norfolk and Suffolk, UK. The company positions itself as Norfolk's largest care home provider, offering person-centred care including specialist dementia and short-term respite care. Their business model includes both self-funded and local authority-funded care options, targeting residents and their families seeking compassionate and dignified care. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content relevant to their audience. Technically, the website is built on WordPress using the Divi theme and incorporates modern plugins such as Yoast SEO and Contact Form 7. It integrates Google Analytics and Google Tag Manager for analytics and marketing purposes, and uses Google Maps API for location services. Hosting is provided by a UK-based registrar and hosting company, LCN, indicating a local and reliable infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs GDPR-compliant cookie consent mechanisms. While explicit security headers are not fully detected, no critical vulnerabilities or exposed sensitive data were found. The absence of a dedicated security policy or incident response page suggests room for improvement in transparency and preparedness. The WHOIS data shows a consistent and legitimate domain registration dating back to 2010, supporting the business's credibility. Overall, Norse Care's website presents a trustworthy and professional front for their healthcare services, with solid technical foundations and compliance with privacy regulations. Strategic enhancements in security headers, accessibility, and incident response transparency would further strengthen their security posture and user trust.

B

Beauty of Bedford

beautyofbedford.co.uk

57

Beauty of Bedford is a well-established beauty salon located in Bedford, UK, specializing in a variety of beauty treatments with a strong emphasis on Dermalogica skincare products. The business has a solid local market presence, supported by multiple Dermalogica awards and certifications, indicating a reputable and trusted service provider. Their website reflects a professional image with clear service offerings and contact information, targeting modern women seeking effective beauty treatments. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and integrated with Google Analytics and a Timely booking widget, demonstrating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data due to domain registration issues slightly reduces trust but does not negate the overall legitimacy of the business. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and clarifying incident response contacts to strengthen compliance and security posture.

G

Guthrie Douglas

guthriedouglas.com

51

Guthrie Douglas Limited is a UK-based specialist engineering company focused on designing and supplying bespoke technical shading systems and specialist blinds for architectural projects. Their market position is that of a niche provider catering primarily to architects and designers seeking energy-efficient and aesthetically pleasing shading solutions for complex glass structures. The website reflects a professional and well-branded presence with detailed product and project information, targeting B2B customers in the real estate and architectural sectors. Technically, the website is built on WordPress CMS and leverages a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools such as Matomo, Google Analytics, and Visual Website Optimizer. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses asynchronous loading of scripts to improve performance and security. However, it lacks explicit security headers and does not provide visible incident response or security policy information. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness and should be investigated further. Overall, the website is professional and trustworthy in appearance, with comprehensive business and contact information. The main risk lies in the missing WHOIS data and the lack of some security best practices. Strategic recommendations include implementing security headers, adding incident response information, and enhancing privacy compliance mechanisms.

N

Norfolk Drain Services Ltd

norfolkdrainservices.co.uk

49

Norfolk Drain Services Ltd is a small, family-run business specializing in domestic and commercial drainage solutions in Norwich and the surrounding Norfolk area. Their services include drain maintenance, installation, repairs, cleaning, and CCTV surveys. The company positions itself as a reliable and professional local expert with a strong reputation, supported by customer testimonials and a trusted trader badge. The website is built on the SilverStripe CMS platform and employs common web technologies such as jQuery and Google Analytics for tracking. The site is well-structured with clear navigation and professional content, targeting homeowners and businesses needing drainage services. However, the WHOIS data for the domain is unavailable due to a domain registration error from Nominet UK, which raises questions about the domain's registration legitimacy, although the website content itself appears legitimate and professional. Security posture is moderate with no visible HTTPS confirmation or security headers, and privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is functional and trustworthy from a business perspective but would benefit from improved security and compliance measures.

B

Brain Research UK

brainresearchuk.org.uk

60

Brain Research UK is a UK-based non-profit organization dedicated to funding world-class brain research focused on neurological conditions such as Alzheimer's, motor neuron disease, stroke, and brain tumors. The organization positions itself as a leading national funder with a clear mission to improve lives affected by neurological disorders. Their website offers comprehensive information about their research priorities, fundraising activities, and community engagement, targeting donors, researchers, patients, and the general public. Technically, the website is built on the Webflow platform, leveraging modern analytics tools including Google Analytics, Microsoft Clarity, and Facebook Pixel, with integration of Shopify for e-commerce. The site is well-optimized for mobile devices, has good SEO practices, and demonstrates a high level of digital maturity. The presence of privacy and terms policies, along with consent mechanisms, indicates attention to privacy compliance. From a security perspective, the site enforces HTTPS and anonymizes IP addresses in analytics, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data query failed due to an invalid query on the www subdomain, but the website's trust signals and charity registrations support its legitimacy. Overall, Brain Research UK presents a professional, trustworthy, and secure online presence appropriate for a healthcare non-profit. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen their security posture and trustworthiness.

M

Metrovets

metrovets.co.uk

50

Metrovets is a small independent veterinary practice located in Longbenton, Newcastle, specializing in small animal care. Founded in 2008 and under new ownership since January 2026, the practice offers personalized veterinary services including health plans and pet prescriptions. The website presents a professional and user-friendly interface with clear contact details and service descriptions, targeting local pet owners. Technically, the site uses modern frameworks such as Bootstrap and integrates Google Analytics and Tag Manager for tracking, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and incident response information. The WHOIS data is unavailable due to domain registration errors, which raises some concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and well-maintained but would benefit from enhanced security policies and clearer domain registration transparency.

R

Resonate Cloud Services Limited

resonateservices.co.uk

72

Resonate Cloud Services Limited operates as a managed business services and solutions provider based in the United Kingdom. The company focuses on assisting businesses that are stretched thin in managing IT, cybersecurity, and compliance by offering expert managed IT services, cybersecurity guidance, and compliance support. Their market position is that of a niche managed services provider targeting small to medium-sized businesses seeking modern workplace solutions. The website content is professional and clearly communicates their value proposition and key services. Technically, the website is hosted on the Google Sites platform and utilizes Google Analytics, Google Tag Manager, and Zoho SalesIQ for analytics and customer engagement. The site is mobile-optimized with good navigation and basic SEO practices. Performance is moderate, and accessibility features are basic. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site enforces HTTPS but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic, with privacy and cookie policies present but lacking explicit consent mechanisms. No incident response or security policy pages were found. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security headers, improved privacy compliance, and clearer incident response information. The absence of WHOIS data due to domain query errors limits full trust verification, but the site content and contact details mitigate some concerns.

D

Doogheno

doogheno.com

64

Doogheno is a specialized consultancy focused on Revenue Operations for B2B technology companies. They provide services that redesign commercial systems to enable predictable growth, covering sales, marketing, and customer success processes. The company positions itself as a HubSpot Solutions Partner with over 30 years of technology experience, targeting technology businesses seeking scalable revenue engines. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins and tracking tools, including Google Analytics, Facebook Pixel, and HubSpot integrations. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

C

c j heating and gas specialist ltd

cjheating.co.uk

59

CJ Heating and Gas Specialist Ltd is a small, local UK-based company specializing in gas heating, plumbing, and boiler services. Established in 2014, the company serves Mirfield, Dewsbury, Huddersfield, and surrounding areas, positioning itself as a reliable and rapid-response service provider with a strong reputation evidenced by 5-star customer reviews and Gas Safe registration. The website reflects a professional business with clear service offerings including installation, repairs, and emergency call-outs. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, WPBakery Page Builder, and Yoast SEO, ensuring good SEO and mobile responsiveness. The site integrates Google Analytics and Google Ads for tracking and marketing purposes, with a cookie consent mechanism in place, indicating a basic level of privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and employs anti-spam measures via CleanTalk. However, some security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the business claims, showing a domain registered since 2014 with a reputable registrar. Overall, CJ Heating demonstrates a solid digital presence with good business credibility and a secure, compliant website. Strategic improvements in security headers and enhanced privacy disclosures could further strengthen their posture.

Eddolls Carpets is a well-established luxury flooring retailer based in Alresford, Hampshire, UK, with approximately 90 years of experience. The company specializes in carpets, bespoke rugs, stair runners, and plant fibre flooring, targeting consumers and businesses seeking high-quality flooring solutions in the local area. The website reflects a professional retail business with clear branding and consistent messaging. The digital presence is built on WordPress using Elementor and enhanced with SEO tools like Rank Math. The site is moderately performant and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and Google Analytics configured for privacy, but lacks advanced security headers and formal privacy or cookie policies. The domain registration is consistent with the business claims, indicating legitimacy and trustworthiness. Overall, the website is professional and credible but could improve privacy compliance and security practices.

G

Gulf Research Center

grc.net

48

The Gulf Research Center (GRC) is a well-established non-profit research organization founded in 2000, focusing on strategic issues in the Gulf region including GCC countries, Iran, Iraq, and Yemen. It offers consultancy, executive training, fellowship programs, and publishes research and analysis to a global audience. The website reflects a professional and consistent brand with comprehensive content and global presence. Technically, the site uses modern web technologies such as WordPress, Bootstrap, jQuery, and integrates analytics and marketing tools like Google Analytics, Tag Manager, Mailchimp, and AddThis. Security posture is moderate with HTTPS enforced and cookie consent implemented; however, a hidden credential capture script poses a potential risk. WHOIS data is missing, which impacts domain legitimacy assessment. Overall, the site is trustworthy but would benefit from enhanced security practices and WHOIS transparency.

Allen Diesels Limited is a UK-based company specializing in medium speed diesel engines with a heritage linked to Rolls-Royce Power Engineering Ltd. They provide new engine builds, spares, retrofits, and service support globally, emphasizing continuity and customer satisfaction. The website reflects a small but established business with consistent branding and clear contact information. Technically, the site uses standard web technologies including jQuery and Google Analytics, but lacks advanced CMS or frameworks. Security posture is moderate with no visible security headers or DNSSEC, and privacy compliance is limited due to the absence of a privacy policy page. Overall, the site is professional and trustworthy but could improve in security and compliance areas.

W

Walking Women

walkingwomen.com

50

Walking Women is a specialized travel company offering guided walking and activity holidays exclusively for women, primarily in the UK and Europe, with some worldwide destinations. The company emphasizes small group experiences and personalized service, positioning itself as a niche operator in the hospitality sector. The website is professionally designed, content-rich, and well-structured, targeting women interested in outdoor walking adventures. Technically, the site is built on WordPress with modern plugins and tracking tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though it lacks a publicly stated security policy or incident response details. The absence of WHOIS registration data raises some legitimacy concerns, but the overall professionalism and trust indicators on the site mitigate these. Strategic recommendations include publishing security and incident response policies and verifying domain registration details to enhance trust.

I

Icon Solutions

iconsolutions.com

70

Icon Solutions is a well-established fintech company specializing in payments technology and consultancy services, with over 16 years of experience. Their flagship product, the Icon Payments Framework (IPF), is trusted by major global banks such as Citi, NatWest, UBS, and BNP Paribas. The company positions itself as a leader enabling banks to independently accelerate payments transformation with advanced, modular technology and expert consultancy. The website reflects a mature business with strong market positioning and a clear focus on financial institutions as their target audience. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics, Google Tag Manager, and Lottie animations for enhanced user experience. The site is mobile-optimized, accessible, and performs moderately well. Security best practices are observed with HTTPS enforcement, ISO 27001 certification, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts are published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the company's claimed history and business sector, enhancing trustworthiness. Privacy compliance is well addressed with clear policies and consent banners. Overall, the website demonstrates professionalism, credibility, and a solid security foundation. Strategic recommendations include enabling DNSSEC, publishing a security.txt file for vulnerability disclosure, adding explicit Content-Security-Policy headers, and providing clear incident response contact information to further enhance security transparency and compliance.

S

Susan Anand

mylondonnotary.com

38

The website www.mylondonnotary.com represents a small, professional notary public service based in London, operated by Susan Anand, a qualified notary since 2006. The business offers a range of document legalisation, apostille, and notary services with a focus on fast, reliable processing including next-day options. The site targets individuals and businesses requiring authenticated documents for international use, positioning itself as a trusted local expert with over 20 years of experience and positive customer reviews. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Maps API, and Google Analytics, providing a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA v3 on the contact form, though some security headers are missing and no explicit security or incident response policies are published. The absence of WHOIS domain registration data is a notable anomaly, raising questions about domain legitimacy despite the professional appearance and content of the site. Overall, the website is well-structured and trustworthy from a user perspective but would benefit from improved transparency in domain registration and enhanced privacy compliance mechanisms.

B

Barrett Steel Limited

barrettsteel.com

73

Barrett Steel Limited operates as the UK's largest independent steel stockholder and supplier, offering a wide range of steel products and value-added services such as cutting, drilling, and profiling. The company targets industrial sectors including construction, engineering, and manufacturing, positioning itself as a market leader in steel supply within the UK. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product and service information. Technically, the site is built on ASP.NET WebForms with integrations of Google Analytics, Google Tag Manager, and OneTrust for privacy compliance, indicating a moderate to advanced digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and missing WHOIS domain registration data slightly reduce trustworthiness. Overall, Barrett Steel's online presence is professional and trustworthy, supporting its business credibility and market position.

J

Jackson-Stops

jackson-stops.co.uk

68

Jackson-Stops is a national UK-based real estate agency specializing in property sales, lettings, valuations, and related services. The website presents a professional and comprehensive platform for property seekers and sellers, featuring a user account system, property search, and detailed listings. The technical infrastructure leverages modern web technologies including JavaScript frameworks, Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site is mobile optimized and includes GDPR-compliant privacy and cookie policies with opt-in consent mechanisms. Security posture is strong with HTTPS enforced and CSRF protections in forms, though some security headers are not explicitly detected. WHOIS data is unavailable due to querying the 'www' subdomain instead of the base domain, but the website's professionalism and branding indicate a legitimate business. Overall, the site is well-structured, secure, and compliant, serving a large audience in the UK real estate market.

D

Dudley Associates Ltd

dudleyassociates.com

54

Dudley Associates Ltd is a UK-based precision toolmaking and plastic injection moulding manufacturer with over 35 years of experience. The company offers a comprehensive range of services including product design, in-house toolmaking, prototype development, assembly, and secondary services. Positioned as a reliable and quality-focused manufacturer, Dudley Associates serves clients across the UK and Europe, emphasizing high standards and certifications such as ISO 9001 and membership in Made In Britain and GTMA. The website reflects a professional and well-structured digital presence with clear service offerings and customer testimonials that reinforce trust. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager, Google Analytics, and CleanTalk for spam protection. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is generally good with HTTPS enforced and anti-spam measures in place; however, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy verification. Despite this, the website content and certifications suggest a legitimate business operation. Overall, the site scores well on content quality, technical implementation, and business credibility but should address privacy compliance and security header implementation to enhance trust and compliance. Strategic recommendations include implementing comprehensive security headers, establishing a cookie consent mechanism to comply with GDPR, publishing explicit security and incident response policies, and verifying domain registration details to improve trustworthiness.

W

William Edwards

williamedwards.co.uk

58

William Edwards is a specialized English manufacturer and retailer of fine bone china based in Stoke-on-Trent, Staffordshire. The company offers bespoke and signature collections targeting both business clients and consumers interested in high-quality ceramic products. Their website reflects a professional and consistent brand image with clear navigation and relevant content focused on their manufacturing expertise and product offerings. Technically, the site uses a modern technology stack including jQuery, Google Analytics, Facebook Pixel, and reCAPTCHA, running on the CS-Cart platform. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and anti-bot measures, but lacks some advanced security headers and explicit security policies. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. The WHOIS data is unavailable due to a domain registration error, which impacts domain legitimacy verification but does not detract from the website's operational professionalism.

Bonds Worldwide Express Ltd is a small UK-based courier service established in 1982, specializing in same day, overnight, and international deliveries. The company operates from Birmingham International Airport and offers bespoke delivery solutions including technical courier services and covert surveillance. Their market position is that of a specialized regional logistics provider targeting businesses and individuals requiring urgent and secure deliveries. Technically, the website runs on WordPress with common JavaScript libraries and Google Analytics for tracking. The site is accessible and functional but lacks advanced mobile optimization and accessibility features. Security posture is moderate with no visible HTTPS confirmation or security headers in the provided data, and no privacy or cookie policies are published, indicating compliance gaps. The WHOIS data is unavailable due to domain naming rules errors, which limits trust verification of domain registration details. Overall, the website is safe, professional but basic in design and content quality, with moderate trustworthiness based on available information.

T

The Beck Company Limited

thebeckco.com

51

The Beck Company Limited is a UK-based specialist supplier of copper tubes, fittings, and plumbing sundries established in 1976. The company positions itself as a trusted provider with a broad stock range and expertise, targeting plumbing professionals and contractors. The website reflects a professional business presence with clear product categories and contact information, supported by recognized certifications such as ISO9001, ISO14001, and OHSAS18001. Technically, the site uses a legacy tech stack including jQuery 1.11.0 and Google Analytics, with a CMS identified as Web Wizard 2. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and modern frameworks. Security posture is moderate with HTTPS usage implied but no visible security headers or vulnerability disclosures. The absence of privacy and cookie policies indicates compliance gaps, and the WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures.

K

Kadesh & Associates

kadeshdc.com

51

Kadesh & Associates is a bipartisan federal advocacy and lobbying firm positioned among the top 15 in its sector, specializing in congressional strategy, federal funding, and government relations. The website presents a professional image with clear descriptions of services and a focus on Washington, D.C. clientele including government agencies and private sector clients seeking federal advocacy. The firm leverages bipartisan expertise and longstanding relationships within Congress and federal agencies to deliver results. Technically, the website employs modern web technologies including Google Analytics and Tag Manager for tracking, uses web fonts for branding consistency, and is mobile optimized with good navigation clarity. However, there is no detected CMS or advanced frameworks, indicating a relatively straightforward static or custom-built site. Performance is moderate with no blocking or WAF detected, but accessibility features are basic. From a security perspective, the site uses HTTPS (implied by external script URLs), but lacks visible security headers and formal privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS registration data is a significant red flag, suggesting either a lookup anomaly or domain registration issue, which impacts overall trustworthiness. No incident response or vulnerability disclosure information is provided. Overall, the site is professional and functional but would benefit from improved privacy compliance, security hardening, and clarification of domain registration legitimacy to enhance trust and reduce risk.

T

Town of Northport, Maine

northportmaine.org

62

The Town of Northport, Maine operates an official municipal website serving its residents and visitors with comprehensive information about local government departments, services, ordinances, and community events. The site is positioned as a trusted local government resource with a clear focus on accessibility and community engagement. The business model is typical for a municipal government entity, providing public information and services online. Technically, the website is built on WordPress using the Genesis Framework and several plugins including Yoast SEO and Smart Slider 3. It employs Google Analytics and Google Tag Manager for visitor tracking. Hosting and domain registration are managed through GoDaddy, with standard domain protections in place. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced security. No explicit security or incident response policies are published, representing an area for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is a professionally maintained government portal with high trustworthiness and good content quality. Strategic improvements in privacy compliance and security hardening would enhance its risk posture and user trust.

V

Vanderbilt University

vanderbilt.edu

62

Vanderbilt University is a prestigious private research university located in Nashville, Tennessee, offering a broad spectrum of undergraduate, graduate, and professional programs. The institution serves a diverse audience including prospective students, current students, faculty, staff, alumni, and the wider community. It maintains a strong market position nationally with a focus on academic excellence, research, and student life. The website reflects this with comprehensive information on admissions, academics, campus life, and athletics, supported by a professional and consistent brand presence. Technically, the website is built on WordPress and leverages modern analytics and marketing tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Hotjar. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a moderate performance profile. Security is robust with HTTPS enforced, secure forms, and cookie consent mechanisms in place, although there is room for improvement in publishing explicit security policies and incident response information. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through detailed privacy and cookie policies and a consent management platform. However, the absence of WHOIS data due to .edu domain restrictions limits domain registration transparency. Overall, the site demonstrates high trustworthiness and professionalism. Strategically, Vanderbilt University should consider enhancing its security transparency by publishing dedicated security and incident response policies and establishing a vulnerability disclosure program. Regular audits of third-party scripts and continuous monitoring of security headers will further strengthen its security posture. These steps will reinforce trust and compliance in an increasingly regulated digital environment.

S

SUNY Purchase

purchase.edu

67

SUNY Purchase is a public liberal arts and sciences college with a strong emphasis on arts conservatories, uniquely combining professional arts training with a comprehensive liberal arts curriculum. Positioned as a top 10 public liberal arts college, it serves a diverse student body in Westchester County, New York. The website reflects a mature digital presence with rich content, clear navigation, and a professional design aligned with its educational mission. Technically, the site uses a modern CMS (LiveWhale), Bootstrap framework, and integrates multiple analytics and marketing tools, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. Privacy compliance is basic with a privacy policy present but no explicit cookie consent mechanism detected. Overall, the domain and website are trustworthy and professionally managed, consistent with a reputable educational institution.

A

American Society of Travel Advisors

asta.org

69

The American Society of Travel Advisors (ASTA) is a well-established non-profit professional association founded in 1931, serving as a leading global advocate for travel advisors. The organization provides education, resources, advocacy, and networking opportunities to support and grow the travel industry. ASTA positions itself as a trusted voice championing ethical and traveler-friendly practices, with a strong emphasis on member benefits and professional development. The website reflects this mission with comprehensive content, clear navigation, and a professional design tailored to travel advisors and industry stakeholders. Technically, the website is built on a mature ASP.NET framework with Telerik UI components, integrating modern analytics and marketing tools such as Google Analytics, HubSpot, and social media pixels. The site demonstrates good mobile optimization and accessibility features, although some improvements in security headers and accessibility compliance could be made. Hosting appears to leverage Azure services, and the site employs HTTPS with a good SSL configuration. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, indicating awareness of privacy compliance such as GDPR. However, explicit security policies and incident response contacts are not found, suggesting areas for enhancement. The WHOIS data is privacy protected, which is common and justified for non-profit organizations. Overall, the site presents a high level of trustworthiness and professionalism, with no signs of malicious activity or content blocking. Strategically, ASTA should focus on publishing detailed security policies, implementing additional security headers, and establishing a vulnerability disclosure program to further strengthen its security posture and trust with members and visitors.

A

American Composites Manufacturers Association

acmanet.org

64

The American Composites Manufacturers Association (ACMA) is a well-established industry association representing the North American supply chain for fiber reinforced polymer composites. Founded in 2002, ACMA provides advocacy, education, certification, events, and market intelligence services to manufacturers, suppliers, and distributors in the composites sector. The website reflects a mature digital presence with comprehensive content tailored to industry professionals and stakeholders. Technically, the site is built on WordPress with modern libraries and performance optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS enforcement and domain transfer protections, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site demonstrates high business credibility and professionalism, serving as a trusted resource in its industry.

P

Port Jobs

portjobs.org

44

Port Jobs is a workforce development organization focused on preparing workers for the Port of Seattle economy, including aviation, transportation, logistics, and construction sectors. The website positions itself as a community partner building career pathways, targeting workers and communities in the Seattle area. The business is small-sized, established since 1998, and operates primarily in the transportation sector. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, with Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

M

Medical Library Association (MLA)

mlanet.org

63

The Medical Library Association (MLA) is a well-established global nonprofit organization serving over 400 institutions and 3,000 professionals in the health information field. The website reflects a mature digital presence with a focus on education, community engagement, and professional development for medical librarians and health information specialists. The organization leverages a modern WordPress-based infrastructure with integrated learning management and community platforms, supporting a robust member experience. Technically, the site employs a comprehensive tech stack including BuddyBoss for community features, LearnDash for LMS capabilities, WooCommerce for e-commerce functions, and Google services for analytics and tag management. The site is well-optimized for mobile devices and SEO, with good performance and accessibility standards, although some accessibility improvements could be made. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Cookie consent and privacy policies demonstrate GDPR compliance. However, there is no publicly available security policy, incident response contact, or vulnerability disclosure mechanism, which are areas for improvement to enhance trust and security posture. Overall, the website is professional, trustworthy, and aligned with the organization's mission. The lack of WHOIS data due to privacy protection is typical for nonprofits and does not detract from legitimacy. Strategic recommendations include publishing a security policy, adding vulnerability disclosure information, and improving accessibility compliance to further strengthen the site’s security and user trust.

R

REKOR11

albionguesthouse.co.uk

59

REKOR11 operates as an e-commerce platform focused on selling branded merchandise, primarily T-shirts and apparel, with a gaming and entertainment theme. The website leverages the TeePublic platform infrastructure, providing a marketplace for artists and designers. The business targets a general audience, primarily in Indonesia, and offers a range of products with a focus on stable access and user experience. The market position is niche with moderate trust signals including Better Business Bureau accreditation and customer reviews. Technically, the website uses modern web technologies including Google Analytics, Datadog RUM for monitoring, and Cloudinary for image hosting. The platform appears to be built on Ruby on Rails, with good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility and security headers. Security posture is adequate with HTTPS enforced and CSRF protections in place, but lacks important security headers and cookie consent mechanisms. No critical vulnerabilities were detected in the content, but the absence of a security policy or incident response contacts is a gap. Privacy compliance is basic with a privacy policy present but no explicit cookie consent. Overall, the domain WHOIS data is unavailable and indicates registration issues, which raises concerns about domain legitimacy. However, the website content is accessible and professional. Strategic recommendations include improving security headers, implementing cookie consent, publishing security policies, and addressing WHOIS inconsistencies to enhance trust and compliance.

M

MCS Cleaning Services

midlandcleaningservices.co.uk

48

MCS Cleaning Services is a UK-based commercial and B2B cleaning service provider established since 2013. The company offers a broad range of cleaning services including office, factory, hygiene, janitorial supplies, window cleaning, builder/deep cleans, and grounds maintenance. They hold recognized certifications such as ISO 9001 and ISO 14001 and are members of BICSc, indicating a commitment to quality and environmental standards. The website presents a professional image with clear service offerings and client references, targeting commercial clients in the UK market. Technically, the website is built on WordPress using modern Gutenberg blocks and integrates Google Analytics for visitor tracking. It is mobile-optimized and SEO-friendly with structured data enhancing search visibility. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. The WHOIS data is unavailable due to domain registration issues, which raises some concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and functional but would benefit from improved security transparency and domain registration clarity.

G

Glendale

glendale-services.co.uk

58

Glendale is a UK-based multi-award winning landscaping and grounds maintenance contractor serving both private and public sectors. The company offers a comprehensive range of services including grounds maintenance, tree management, landscaping, winter maintenance, and woodland management. The website reflects a mature business with detailed service descriptions, partner and subsidiary links, and a focus on apprenticeships and sustainability. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security policies and advanced security headers. WHOIS data is unavailable due to domain registration errors, which raises some concerns about domain legitimacy, though the website content and structure suggest a legitimate and established business. Overall, the site scores well on business credibility and technical implementation but should improve privacy compliance and security transparency.

M

McMahan Winstead & Richardson Lobbyists

mmwlobbyists.com

39

McMahan Winstead & Richardson Lobbyists is a well-established Tennessee-based government relations and lobbying firm offering a comprehensive suite of services including legislative drafting, bill monitoring, advocacy, consulting, procurement, and PAC management. The firm positions itself as a leading lobbying powerhouse in Tennessee with a strong track record of client successes and industry recognition. Their target audience includes nonprofits, corporations, and businesses seeking effective legislative advocacy within Tennessee. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integrations for Google Analytics and FontAwesome, reflecting a modern and professional digital presence. The site is mobile-optimized and SEO-friendly, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is consistent with the business claims, enhancing trustworthiness. Strategic improvements in privacy compliance and security headers would strengthen the firm's digital trust and compliance standing.

A

American Board of Internal Medicine

abim.org

63

The American Board of Internal Medicine (ABIM) operates a professional website focused on certifying and supporting internists and subspecialists. The site offers certification, maintenance of certification (MOC), exam resources, and guidance to ensure excellent patient care. The organization is positioned as a key authority in the healthcare certification sector in the United States, targeting medical professionals seeking board certification and credentialing. The website demonstrates a professional design with consistent branding and relevant content tailored to its audience. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, YouTube iframe API, and FontAwesome icons. The site is mobile optimized and shows moderate performance. However, no CMS or hosting provider information was detected. SEO and accessibility are basic to good, with room for improvement in accessibility features. From a security perspective, the website enforces HTTPS and uses standard tracking scripts but lacks visible security headers and a security.txt file for vulnerability disclosure. No sensitive data exposure or vulnerabilities were detected in the provided content. Privacy compliance is limited, with no explicit privacy or cookie policies found in the analyzed content, which could be improved to meet GDPR and other regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy disclosures, security headers, and contact information visibility. The lack of WHOIS data limits domain trust analysis, but the website content and structure indicate a legitimate and established organization.

D

Delta Regional Authority

dra.gov

71

The Delta Regional Authority (DRA) is a U.S. federal-state partnership established in 2000 to promote economic development and improve quality of life in the Mississippi Delta region. The website serves as the official digital presence for the agency, providing information on its mission, programs, states served, and contact resources. The DRA operates as a government entity focused on regional collaboration, grant funding, and workforce development. The site targets residents, businesses, and government stakeholders within the Delta region. Technically, the website is built on WordPress using the Elementor page builder, with modern web technologies such as jQuery and Font Awesome. It integrates Google Analytics for visitor tracking and employs a mega menu for navigation. The site is mobile optimized and accessible, with good SEO practices evident in metadata and structured data.

I

Ithaca College

ithaca.edu

65

Ithaca College is a well-established higher education institution in the USA offering a broad range of undergraduate and graduate academic programs. The website reflects a strong market position with a focus on student engagement, academic excellence, and community involvement. The institution leverages modern web technologies and multiple analytics and marketing tools to optimize user experience and outreach. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. The absence of WHOIS data is typical for .edu domains but limits domain registration transparency. Overall, the website is professional, trustworthy, and well-optimized for its audience.

S

Silicon Valley Community Foundation

siliconvalleycf.org

63

Silicon Valley Community Foundation (SVCF) is a large, well-established nonprofit organization focused on philanthropic solutions and community impact in the Silicon Valley region. The foundation engages donors, nonprofits, corporations, and advisors to deliver systemic changes and support key community initiatives such as housing, early childhood development, and financial stability. The website reflects a professional and comprehensive digital presence with clear branding and extensive content relevant to its mission. Technically, the website employs modern web technologies including Bootstrap, GSAP, and Google Analytics, with a cookie consent mechanism powered by CookieYes. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The WHOIS data is unavailable or privacy protected, which is common for organizations of this type. Despite this, the website's structured data, social media presence, and content quality support its legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the site demonstrates a mature digital infrastructure and a trustworthy online presence suitable for a major nonprofit foundation.