Security Directory

P

Property Plus Lettings

propertypluslettings.com

67

Property Plus Lettings is a small, local real estate letting agency specializing in residential lettings in the Brighton & Hove area of the United Kingdom. The website presents a professional image with clear navigation, relevant content, and active social media presence. Key services include property lettings, management, valuations, and maintenance support. The business holds recognized industry certifications such as TDS, The Property Ombudsman, and Safeagent, enhancing its trustworthiness. Technically, the website is built on the Homeflow CMS platform and uses common web technologies including jQuery, Google Tag Manager, and Google Analytics. The site is mobile optimized and performs moderately well, though it uses an outdated version of jQuery which poses a security risk. Security headers are minimal, with an empty Content-Security-Policy header, but HTTPS is enforced. Security posture is adequate but could be improved by updating libraries, enhancing security headers, and adding incident response information. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms. However, WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and reduces overall trust. Overall, the website is functional and professional but should address technical and security improvements and verify domain registration to strengthen trust and compliance.

S

Stoupe Cross Farm Holidays

stoupecrossfarmholidays.co.uk

59

Stoupe Cross Farm Holidays operates a family-run caravan and holiday park near Whitby, UK, offering caravan holidays, holiday homes for sale, cottages for rent, and seasonal tourer pitches. The business targets families and holidaymakers seeking a seaside vacation with proximity to local attractions such as Whitby Abbey and Saltwick Bay. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Google Analytics, and service workers for PWA support. However, the WHOIS data indicates domain registration issues, which may suggest the domain is a subdomain or alias, though the website content and contact details support legitimacy. Security posture is good with HTTPS and no visible vulnerabilities, but lacks explicit security headers and privacy compliance documentation. Overall, the site is trustworthy and functional but would benefit from improved privacy and security disclosures.

W

Wild Futures

wildfutures.org

63

Wild Futures is a UK-based non-profit organization focused on the protection and welfare of primates worldwide, operating The Monkey Sanctuary and engaging in conservation, education, and advocacy. The website reflects a mature digital presence with clear branding, comprehensive content, and multiple engagement channels including donations, adoptions, and volunteering. Technically, the site is built on WordPress with Elementor and WooCommerce, leveraging Cloudflare for CDN and security. It employs modern web technologies and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and consent management, though improvements such as DNSSEC and additional security headers are recommended. Privacy compliance is strong with clear policies and GDPR-aligned consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned within its niche.

D

DRAX

uk.com

50

DRAX Executive is a leadership advisory and executive search firm specializing in supporting high-growth companies and private equity investors. The company partners with premier private equity firms to deliver leadership solutions both pre- and post-deal, focusing on services such as deal origination, leadership mobilization, succession planning, executive search, and interim leadership. The business is positioned as a trusted talent partner within the professional services and finance sectors, with a long-standing domain registration dating back to 2001 and a partnership with The LCap Group. The website reflects a professional and consistent brand image, targeting private equity and corporate leadership audiences.

Ten Green Bottles is a small hospitality and retail business located in Brighton, UK, specializing in wine sales, tastings, and a bar experience featuring artisan and biodynamic wines alongside snacks and small plates. The company targets wine enthusiasts and local customers seeking quality and unique wine experiences. Their website is professionally designed, mobile-optimized, and integrates modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. Payment processing for gift vouchers is handled via Square, indicating a partnership with a reputable payment provider. However, the absence of WHOIS registration data raises concerns about domain legitimacy or privacy protection usage. The website lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but missing security headers and policies reduce overall security maturity. Contact information is clearly presented, supporting customer engagement. Overall, the site is functional and professional but would benefit from improved transparency and security practices.

F

Fab Flowers Ltd

fabflowers.co.uk

49

Fab Flowers Ltd operates as a small local florist business based in Harrow, Greater London, specializing in fresh and artificial flower arrangements for various events including birthdays, weddings, funerals, and business functions. The website presents basic but relevant content focused on their floral services and local delivery within the M25 area. The business model is retail-oriented, targeting local customers seeking floral arrangements with a straightforward ordering process primarily via phone contact. The market position is that of a local service provider with a modest online presence and limited digital sophistication. Technically, the website employs basic web technologies with a simple CSS stylesheet and Google Analytics for visitor tracking. There is no evidence of a CMS or advanced frameworks, and no structured data or Open Graph metadata is present. The site appears to have moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. The WHOIS lookup failed due to domain naming issues, limiting verification of domain legitimacy. From a security perspective, the site shows minimal security best practices and lacks incident response or vulnerability disclosure information. The absence of privacy and cookie policies raises compliance concerns, especially regarding GDPR. No forms or email contacts are provided, reducing attack surface but also limiting user engagement options. Overall, the risk is moderate given the small business scope but improvements in security and compliance are recommended. Strategically, Fab Flowers Ltd should prioritize implementing HTTPS, adding privacy and cookie policies, and improving security headers to enhance trust and compliance. Establishing clear contact channels including email and incident response contacts would improve business credibility an…

W

Wolf Brewery

wolfbrewery.com

64

Wolf Brewery is a small, established brewery based in Norfolk, UK, specializing in the production and retail of high-quality real ales and craft beers. The company has been operating since 1995 and offers a range of products including cask ales, bottled beers, gift packs, and merchandise through both a physical shop and an online storefront. The website reflects a well-branded and consistent presence targeting consumers and trade customers interested in traditional and craft beers. Technically, the website employs modern JavaScript libraries, Google Analytics, and an Ecwid e-commerce platform, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS with a good SSL configuration, enhancing user trust and security. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration transparency. Security posture is generally good with secure forms and cookie consent mechanisms, but lacks explicit security policies or incident response information. Privacy compliance is basic, with no dedicated privacy or terms of service pages detected. Overall, the website is professional and trustworthy from a business and user experience perspective but would benefit from improved transparency and compliance documentation.

B

Brudepikene AS

brudepikene.no

63

Brudepikene AS is a Norwegian small business specializing in wedding planning services and bridal retail, including a bridal salon and an online store. The company targets engaged couples and wedding planners in Norway, offering comprehensive wedding planning packages and consultations. Their market position is that of a local specialized provider in Drammen, Norway, with a professional and consistent brand presence. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, Facebook Pixel, and Weglot for translations. The site is well-optimized for mobile and SEO, with good performance and accessibility at a basic level. Security posture is strong with HTTPS enforced, HSTS enabled, and cookie consent mechanisms in place, although privacy and terms of service pages are missing, representing compliance gaps. The WHOIS data is not publicly available due to Norid's privacy policies for .no domains, which is standard and not suspicious. Overall, the website is professional, trustworthy, and safe for general audiences.

MKG&Partners is a boutique leadership services firm based in Istanbul, Turkey, specializing in executive search and leadership consulting for corporate clients. The company positions itself as Turkey's first national retained search practice focusing on executive and non-executive leadership placements. The website presents a professional image with detailed service descriptions, team profiles, and partner affiliations, indicating a well-established business in the leadership consulting sector. Technically, the website uses standard modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and user experience. However, the absence of privacy and cookie policies suggests compliance gaps, and the login modal lacks visible security features. The WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is functional and professional but could improve in privacy compliance and security posture.

K

kelioniumanija.lt

kelioniumanija.lt

42

kelioniumanija.lt is a Lithuanian travel and lifestyle blog providing articles, guides, and tips focused on travel destinations both in Lithuania and internationally. The site targets travel enthusiasts and general audiences interested in exploring the world. It operates on a WordPress platform with a modern theme and SEO plugin, indicating a moderate level of digital maturity. The website is hosted behind Cloudflare DNS and uses HTTPS with Google Analytics for visitor tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is accessible, professionally designed, and content-rich but would benefit from enhanced privacy and security practices.

S

Spurling Cannon

spurlingcannon.co.uk

48

Spurling Cannon is a well-established Chartered Certified Accountants firm based in Kent, United Kingdom, founded in 2003. The company offers bespoke and personalized accounting services to individuals, businesses, and not-for-profit organizations across the UK and Europe. Their market position is strong as one of the largest independent firms in the region, with a comprehensive range of services including personal and business accounting, payroll, tax, company formation, and startup support. The website reflects a professional and trustworthy brand with positive customer reviews and clear contact information. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as Google reCAPTCHA v3 for bot protection and Google Analytics for visitor tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR principles. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a good security posture but could benefit from enhanced transparency and security best practices. The overall risk assessment is low, with the website presenting a credible and professional front for the business. Strategic recommendations include publishing a privacy policy and terms of service, implementing additional security headers, and establishing a formal vulnerability disclosure process to further enhance trust and compliance.

K

Knowledge Change Action

kca.training

57

Knowledge Change Action (KCA) is a UK-based training and development consultancy specializing in trauma-informed practice. They provide a broad range of services including in-person training, leadership development, consultancy, e-learning, and event management. The company is positioned as a pioneer in trauma-informed practice in the UK, trusted by over 200 local authorities and serving thousands of participants annually. Their website reflects a professional and consistent brand with comprehensive content tailored to leaders and practitioners in education, social care, health, and justice sectors. Technically, the site is built on WordPress with modern plugins for SEO and analytics, demonstrating a moderate to good digital maturity. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, though the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site is trustworthy and well-maintained, but enhancing privacy compliance and security best practices would strengthen their risk profile.

N

National Grain and Feed Association

ngfa.org

56

The National Grain and Feed Association (NGFA) is a well-established industry association representing approximately 700 companies across the U.S. grain and feed sectors. Founded in 1896, NGFA provides advocacy, education, arbitration, and networking services to its members, positioning itself as a key voice in agricultural transportation and trade. The website reflects a mature digital presence with comprehensive content tailored to industry professionals and stakeholders. Technically, the site is built on WordPress with modern plugins and tools, offering good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS data is a notable transparency gap, slightly reducing trustworthiness. Overall, NGFA's website is professional, trustworthy, and serves its business purpose effectively.

G

G11 Financial Management Ltd

g11financial.co.uk

57

The Financial Centre, operated by G11 Financial Management Ltd, is a UK-based commercial insurance and financial advisory firm established since 2005. They specialize in tailored insurance solutions for SMEs and individuals across the UK, offering services including commercial insurance, protection, mortgages, and wills. The company is FCA authorized and regulated, reinforcing its credibility in the financial services sector. The website presents a professional and consistent brand image with clear service offerings and a user-friendly interface. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and Google Analytics for tracking, with embedded contact forms via third-party services. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies could be enhanced. No critical vulnerabilities or suspicious content were detected, and the domain registration is consistent and legitimate. Overall, the website reflects a mature digital presence suitable for its business model and target audience.

Newcastle University is a prestigious UK-based research-led university, ranked among the world's top 150 and a founding member of the Russell Group. It offers higher education and research services targeting students, academics, and researchers globally. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its academic stature. The university leverages modern web technologies including TerminalFOUR CMS, Google Analytics, HubSpot, and Cloudflare for performance, analytics, and security. Security posture is strong with HTTPS enforcement, security headers, and bot detection mechanisms in place. Privacy compliance is robust, featuring detailed privacy and cookie policies with user consent mechanisms and a designated Data Protection Officer contact. However, public security policies and vulnerability disclosure mechanisms are not evident, representing an area for improvement. Overall, the website is trustworthy, professionally maintained, and aligned with the university's reputation.

C

Campion Homes

campionhomes.com

67

Campion Homes is a well-established, award-winning family-owned home builder specializing in new build homes across central Scotland. With over 35 years of experience, the company offers thoughtfully designed residential developments and emphasizes quality, energy efficiency, and customer satisfaction. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site leverages modern technologies including ASP.NET Core, Umbraco CMS, Google Analytics, and CookieScript for privacy compliance. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms integrated with Google Consent Mode, though the absence of explicit HTTP security headers suggests room for improvement. The lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the professional presentation, certifications, and contact details support the company's credibility. Overall, the site is safe, professional, and compliant with privacy regulations, targeting home buyers in Scotland.

R

Reel Solutions

reelsolutions.co.uk

59

Reel Solutions is a UK-based small media consultancy and service provider specializing in cinema and film programming, education, event cinema promotion, distribution, and business planning. Established in 2006, the company targets cinema operators, film festivals, and young filmmakers, offering a range of services including training through the BFI Film Academy scheme and large-scale live music film projects. The website reflects a professional and consistent brand with clear service offerings and a strong presence in the UK cinema sector. Technically, the site is built on WordPress with common plugins for SEO, analytics, and cookie consent, showing moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the use of an outdated jQuery version and lack of security headers present potential risks. The absence of WHOIS data due to domain naming rules errors reduces domain trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, privacy compliance, and business credibility, with recommendations to update technical components and enhance security practices.

M

McCullagh Machinery

mccullaghmachinery.com

42

McCullagh Machinery is a well-established company specializing in the sale of premium quality farm and plant machinery across Ireland and the UK. Operating since 2005, the company offers a wide range of new and used agricultural equipment including tractors, diggers, handlers, trailers, and attachments. Their physical presence in Bellanaleck, Co Fermanagh, and active social media engagement reinforce their market position as a reputable machinery dealer. The website reflects a professional business model focused on retail and servicing of agricultural machinery with finance options available to customers. Technically, the website is built on WordPress with modern UIkit framework and SEO optimization via Yoast plugin. It integrates Google Analytics with consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting appears to leverage Azure Blob Storage for media assets, and the domain is registered with eNom, LLC since 2005, showing consistency and legitimacy. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer lock enabled. However, it lacks critical compliance documents such as privacy and cookie policies, and no explicit security or incident response policies are published. There is no security.txt or vulnerability disclosure mechanism, which are recommended for transparency and security maturity. The use of Google Analytics is evident, but privacy compliance is weak due to missing policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency. Strategic improvements in these areas would reduce risk and improve customer trust.

A

A & M Nottingham Ltd

aandmnottinghamltd.co.uk

42

A & M Nottingham Ltd is a small local garage business based in Colwick, Nottingham, specializing in servicing and maintenance of Ford, Peugeot, Toyota, and Lexus vehicles. The company targets local domestic and commercial clients offering a range of automotive services including diagnostics, MOT repairs, and tyre services. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website uses a traditional tech stack including jQuery, Bootstrap 3, and Google Analytics, with some outdated components and moderate performance. Security posture is moderate but weakened by the use of an insecure HTTP form submission endpoint and lack of security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable due to domain registration issues, which raises concerns about domain legitimacy despite the accessible and professional website content. Overall, the website is functional and credible for its business purpose but requires improvements in security and compliance to enhance trust and protect user data.

W

Westside Day Nursery Ltd.

westsidedaynursery.co.uk

59

Westside Day Nursery Ltd. operates a network of five nurseries in East Hull, UK, providing trusted childcare and early years education for children from birth to age five. The company emphasizes individualized care, inclusivity, and developmental support, supported by recognized accreditations and positive parent testimonials. The website is professionally designed with clear navigation and relevant content targeting parents seeking childcare services in the Hull area. Technically, the site employs modern JavaScript libraries, Google Analytics, and reCAPTCHA for form security, indicating a moderate level of digital maturity. However, some security best practices such as security headers and cookie consent mechanisms are missing or minimal. The WHOIS data is unavailable due to domain registration errors, which slightly impacts trust but does not detract from the legitimacy suggested by the website content and contact information. Overall, the site presents a secure, professional, and trustworthy online presence for a small education sector business.

P

Power Factors

powerfactors.com

65

Power Factors is a specialized company offering a comprehensive renewable energy management software suite called Unity, designed to optimize renewable energy assets across their lifecycle. The company positions itself as a leader in the renewable energy software market, serving a global customer base with advanced solutions including SCADA, power plant control, energy management, and asset performance management. Their offerings are enhanced by AI-driven tools such as Unity REMI, which provide actionable insights and operational efficiencies. Technically, the website is built on HubSpot CMS and integrates modern analytics and marketing technologies with a strong focus on privacy compliance and user experience. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and policies are not fully disclosed. The lack of WHOIS data for the domain raises some concerns about domain registration transparency, but the professional presentation and business indicators suggest legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in security disclosures and domain registration transparency.

P

Power Factors

inaccess.com

65

Power Factors is a medium-sized company specializing in renewable energy management software, offering a comprehensive suite called Unity that supports the entire asset lifecycle for renewable energy assets. Their market position is strong with over 600 global customers and backing from significant investors like Vista Equity Partners and Mubadala. The company targets renewable energy asset owners and operators, providing software and hardware solutions to optimize energy production and management. Technically, the website is built on the HubSpot CMS platform, utilizing modern marketing and analytics tools such as Google Analytics, LinkedIn Insight, and Demandbase. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Performance is moderate, with good accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR compliance. However, explicit security headers and published security policies are lacking, and no vulnerability disclosure or incident response information is available. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and external references support a credible business presence. Overall, the website demonstrates a mature digital presence with strong business credibility but would benefit from enhanced security transparency and domain registration verification.

B

Bateman's Barn Weddings

batemansbarn.co.uk

41

Bateman's Barn Weddings is a small hospitality business located in Suffolk, UK, historically providing wedding venue services, bed and breakfast accommodation, and conference hosting. The website announces the cessation of wedding services and a strategic pivot towards nature conservation and land stewardship. The business targets couples seeking unique wedding venues and local community members interested in heritage and conservation. The website is professionally designed, mobile-optimized, and includes social media integration, but lacks formal privacy, cookie, and terms of service policies. Technically, the site uses Bootstrap, jQuery, and Google Analytics, with HTTPS enabled but missing security headers. WHOIS data is incomplete and indicates domain registration issues, which lowers trust but does not negate the legitimacy of the business based on website content. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

G

Gowanda Harley-Davidson®

gowandaharley.com

69

Gowanda Harley-Davidson® operates as a specialized retail dealership focused on Harley-Davidson motorcycles, parts, service, and financing in Gowanda, New York. The company targets motorcycle enthusiasts and potential buyers in the local and regional market, offering new, used, and certified pre-owned motorcycles alongside apparel and licensing products. The website reflects a well-established business with a domain age dating back to 1997, consistent with its market presence and longevity. Technically, the website leverages a modern technology stack including Room 58 CMS, jQuery, Google Analytics, Tealium, and various marketing and tracking tools. Hosting is provided via AWS infrastructure with CDN support from Cloudfront, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect forms. However, DNSSEC is not enabled, and some security headers are missing or not explicitly set, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well handled with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a solid business credibility and trustworthy online presence with good content quality and user experience. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing a formal security policy or incident response contact to further strengthen trust and compliance.

L

Liam Connolly (Roadfreight) Ltd

liamconnolly.co.uk

57

Liam Connolly (Roadfreight) Ltd is a well-established logistics company operating since 1981, providing comprehensive road freight, pallet distribution, warehousing, and express delivery services across Ireland and the UK. The company emphasizes reliability, sustainability with carbon-neutral operations since 2024, and strong network partnerships such as UPN and TPN. Their market position is supported by positive customer reviews and recognized certifications. Technically, the website is built with modern web technologies including JavaScript, Tailwind CSS, and integrates Google Analytics for tracking. Hosting leverages AWS services for media delivery and backend functions. The site is mobile-optimized, fast-loading, and well-structured for SEO and accessibility. Security posture is good with HTTPS enforced and secure form handling, though the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website presents a professional and trustworthy front for the business, but the domain WHOIS data is unavailable due to an invalid domain name error, indicating the domain might be a subdomain or alias. This discrepancy slightly reduces trustworthiness but does not negate the legitimacy of the business. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding a security.txt file.

Monster Trax Studio is a professional audio production studio based in Nottinghamshire, UK, offering a wide range of services including recording, mixing, mastering, audio restoration, and more. The business targets artists, bands, podcasters, and composers, positioning itself as a trusted local studio with decades of experience and a strong reputation evidenced by 5-star client reviews. The website is built on WordPress with a modern theme and integrates Google Analytics for visitor tracking. Hosting is provided by Hostinger, a reputable provider. Security posture is generally good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is basic with privacy and cookie policies present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, supporting the business's credibility and client engagement.

S

Soveral

alexandrasoveral.co.uk

60

Alexandra Soveral operates a niche luxury skincare brand focused on organic, natural, and bespoke skincare products and treatments. The business targets consumers seeking high-quality, hand-blended skincare solutions and personalized consultations. The website is built on the Create.net platform, leveraging modern JavaScript libraries and Google Analytics for user tracking. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data for the domain is unavailable due to a registration error, which is inconsistent with the active website presence and may warrant further investigation. Overall, the business appears credible with strong branding and trust indicators.

R

Rockingham Cars

rockinghamcars.co.uk

46

Rockingham Cars is a well-established automotive dealership based in Corby, Northamptonshire, specializing in new and used car sales, servicing, and motability offers. The company has a strong regional presence with over 40 years of experience and partnerships with major manufacturers such as Fiat, Mazda, and Abarth. Their website reflects a professional and customer-focused approach, providing rich content, interactive search features, and multiple contact channels including phone and social media. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security measures include HTTPS, CAPTCHA, and cookie consent mechanisms, though explicit security policies and WHOIS data are lacking. Overall, the site presents a trustworthy and functional digital presence for the business.

T

The Grove

counselling.org

54

The Grove Practice is a specialized education provider focused on continuing professional development (CPD) for mental health professionals including therapists, psychotherapists, and counsellors. Their offerings include live and self-study courses, webinars, and conferences primarily delivered online or in London. The website is well-structured, professionally designed, and optimized for SEO, targeting a UK-based audience with a strong emphasis on inclusivity and community. Technically, the site leverages WordPress with modern plugins and integrates Google Analytics, Facebook SDK, and anti-spam measures such as reCAPTCHA and SpamKill. Security posture is solid with HTTPS and form protections, though explicit security headers could be improved. The absence of publicly available WHOIS data limits domain legitimacy verification, but the professional content and branding suggest a legitimate business. Privacy policy and terms of service pages were not detected, indicating an area for compliance improvement.

E

Elektro Henschel GmbH

elektro-henschel.de

58

Elektro Henschel GmbH is a small German company specializing in electrical installation, energy-saving solutions, and smart home technologies. The company positions itself as a regional expert offering comprehensive consulting, installation, and maintenance services. Their website reflects a professional and consistent brand image, targeting both private and commercial customers interested in modern electrical solutions and energy efficiency. The business model focuses on service delivery combined with product offerings from well-known manufacturers. Technically, the website is built on TYPO3 CMS with a moderate performance profile and good mobile optimization. The use of older JavaScript libraries like jQuery 1.8.3 suggests some technical debt, but overall the site is functional and well-structured. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and incident response information indicates room for improvement. Privacy compliance is good, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy and professional, with clear contact information and no signs of suspicious activity.

N

N2O

n2o.co.uk

65

N2O is an award-winning brand experience marketing agency established in 1999, specializing in delivering scalable, measurable, and impactful brand experiences and events. The company targets brands seeking experiential, retail, social media, and travel marketing services, positioning itself as a creative agency blending cultural intelligence and human insight to create engaging experiences. The website reflects a professional and consistent brand image with strong trust indicators including multiple industry awards and client testimonials. Technically, the website is built on the Webflow platform, utilizing modern technologies such as Google Tag Manager, Google Analytics, Vimeo for video content, and cookie consent management tools. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enforced and use of Cloudflare Turnstile captcha on forms, though explicit security headers are not detected. The WHOIS data for the domain is unavailable due to a domain naming rules error from Nominet UK, which raises concerns about domain legitimacy or configuration. Despite this, the website content and business information appear credible and professional. Privacy and cookie policies are present and indicate GDPR compliance. Contact information is primarily via web forms, with no direct emails or phone numbers explicitly provided. Overall, the website presents a mature digital presence with strong business credibility and good security practices, but the lack of WHOIS data and direct contact details suggest areas for further verification and improvement.

S

Simarco International Ltd

simarco.com

57

Simarco International Ltd is a UK-based independent logistics and freight operator with nearly three decades of experience. The company offers a comprehensive range of logistics services including air, ocean, and road freight, warehousing, customs clearance, and supply chain management. Positioned as a leading UK logistics provider, Simarco serves clients worldwide with tailored and flexible solutions. The website reflects a professional and well-established business with clear branding, extensive service descriptions, and active engagement through case studies and news updates. Technically, the site is built on WordPress with modern plugins and technologies, ensuring good performance, mobile optimization, and SEO. Security measures include HTTPS, Google reCAPTCHA, and standard WordPress security practices, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user data protection. WHOIS data is incomplete, lacking registrar and creation date information, which slightly impacts trust but does not detract from the overall legitimacy given the professional presentation and contact transparency.

Central Power Limited is a UK-based high voltage electrical engineering company specializing in the design and construction of electrical power infrastructure for high voltage customers and renewable generation schemes. The company positions itself as one of the UK's leading high voltage engineering firms, offering a range of services including installation of high voltage systems, substation maintenance, regeneration, power loss support, civil works, and network protection. The website reflects a professional business presence targeting UK organizations requiring specialized electrical engineering services. Technically, the website employs a modern frontend stack including jQuery, Bootstrap, Slick Carousel, and Google Analytics for tracking. It implements a cookie consent mechanism indicating some level of privacy compliance. The site is mobile optimized with good navigation and content quality, although SEO and accessibility features are basic. No CMS or hosting provider details are evident from the data. From a security perspective, the site uses HTTPS and includes cookie consent but lacks visible security headers such as CSP or HSTS. The contact form does not show explicit anti-CSRF protections. No dedicated security policy or incident response contacts are found, which suggests room for improvement in security posture. The WHOIS data is unavailable due to a domain naming rules error, limiting domain legitimacy verification. Overall, the website is professional and trustworthy in appearance but would benefit from enhanced security controls, clearer privacy compliance, and resolution of WHOIS data issues to improve trust and compliance posture.

I

Irish World Heritage Centre

iwhc.com

48

The Irish World Heritage Centre (IWHC) is a well-established cultural and community venue based in Manchester, UK, serving the Irish community and broader audiences with event hosting, cultural activities, and hospitality services. The website reflects a professional and consistent brand presence, offering clear information about services such as venue hire, events, a bar, cafe, and retail shop. The domain age and WHOIS data support the legitimacy and stability of the organization. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common plugins for navigation, forms, and analytics. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers, privacy compliance, and incident response documentation would strengthen the site. The website is safe for general audiences, with no adult or explicit content. Contact information is comprehensive and clearly presented, supporting business credibility. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent mechanisms, and publishing detailed security and incident response policies to improve trust and compliance.

G

Global 4

global4.co.uk

64

Global 4 is a well-established Managed Service Provider based in Horsham, West Sussex, UK, offering a comprehensive suite of IT and technology services including managed IT support, cyber security, Microsoft 365 solutions, hosted telephony, business connectivity, mobile, and energy solutions. The company positions itself as a trusted partner for businesses across West Sussex, Surrey, and the wider UK, boasting a high Trustpilot rating of 4.9 out of 5 from over 2,000 reviews, reflecting strong customer satisfaction and market credibility. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, demonstrating a mature digital presence and good technical infrastructure. Security-wise, the site enforces HTTPS and uses reputable third-party security and analytics scripts, though it could improve by explicitly implementing security headers and publishing a dedicated security policy. Overall, the website is professional, user-friendly, and compliant with privacy regulations, though the WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which is unusual but does not currently impact the site's legitimacy. Strategic recommendations include enhancing security headers, maintaining compliance documentation, and monitoring domain registration status.

S

Seaford Properties

seafordproperties.co.uk

60

Seaford Properties is a small, family-run independent estate agency located in Seaford, East Sussex, UK. The company specializes in property sales, valuations, conveyancing, and marketing services, targeting local homeowners and buyers. The website reflects a well-established local business with strong community ties, multiple industry awards, and a focus on customer service. The digital presence is professional, with clear navigation, good content quality, and active social media engagement. Technically, the website employs a modern but somewhat dated tech stack including Bootstrap 3.4.1 and jQuery 3.4.1, integrated with Google Tag Manager, Google Analytics, and Google reCAPTCHA v3 for security. The site is mobile-optimized and includes cookie consent mechanisms, demonstrating compliance with privacy regulations. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and includes bot protection via reCAPTCHA. However, security headers are not explicitly detected, and no vulnerability disclosure or incident response information is published. No exposed sensitive data or vulnerabilities are evident in the HTML content. The WHOIS data is unavailable due to a domain naming rules error, which reduces confidence in domain registration transparency but does not detract from the website's professional appearance. Overall, the website presents a trustworthy and credible business with good privacy compliance and a solid security posture. Strategic improvements in security headers, incident response transparency, and WHOIS registration clarity would enhance trust and resilience.

B

BOGNOR REGIS GOLF CLUB

bognorgolfclub.co.uk

56

Bognor Regis Golf Club operates as a private members’ golf club located in Sussex, United Kingdom, offering a scenic and challenging golf experience with facilities such as a clubhouse, pro shop, and swing studio. The club targets golf enthusiasts, members, and visitors, providing membership options and visitor tee time bookings. The website is professionally designed with clear navigation and relevant content, reflecting a well-established local golf club with a community focus. Technically, the site uses modern web technologies including jQuery, Bootstrap, FontAwesome, and Google Analytics, hosted partially on Microsoft Azure Blob Storage. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit cookie consent mechanisms. The WHOIS data is unavailable due to domain naming rules errors, raising concerns about domain registration legitimacy, though the website content itself appears legitimate and professional. Overall, the site scores well on content quality and business credibility but should improve security headers and privacy compliance.

D

Design Central (Bath) Ltd

dc-activ.com

57

ImpactXP is a UK-based technology company offering an AI-driven commercial leadership platform designed for consumer packaged goods (CPG) brands and retailers. Their integrated system combines marketing, data analytics, and immersive research tools to enable collaborative category development and commercial strategy execution. The company positions itself as an innovative leader with a comprehensive suite of modules including PlanogramXP, RangeXP, ShopperXP, EngageXP, and ResearchXP, complemented by a creative services team. The website reflects a professional and modern digital presence with strong branding and clear messaging targeting enterprise and medium-sized CPG clients. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses reputable third-party services such as Google Analytics and reCAPTCHA for analytics and security. Hosting and DNS are managed via Dreamscape Networks and Cloudflare respectively, ensuring reliable performance and security. The site is mobile-optimized, SEO-friendly, and implements GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and integrates CAPTCHA to protect forms. However, it lacks some advanced security headers and does not publish a formal security policy or incident response contacts, which could be improved. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong with clear policies and consent management. Overall, ImpactXP presents a trustworthy and professional online presence with a solid technical foundation and good privacy practices. Strategic recommendations include enhancing DNS security with DNSSEC, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

T

TGM

tgm.co.uk

57

TGM is a UK-based family-operated business specializing in commercial roofing and drainage maintenance, founded in 1997. The company holds a strong market position as a premier specialist partner for working at height, offering a range of services including roof maintenance, reactive repairs, fall protection systems, gutter and drain cleaning, and lightning surge protection. Their national contracts and advanced surveying capabilities underscore their technical maturity and operational scale. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and Google Analytics for performance and user insights. Hosting and domain registration via Cloudflare provide robust infrastructure support. The site is mobile-optimized and SEO-friendly, with a comprehensive cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the business history, enhancing trustworthiness. Overall, TGM's digital presence reflects a professional and credible business with good security posture and privacy compliance. Strategic improvements in security policy transparency and security headers would further strengthen their security maturity and trust.

C

Clínica Veterinária Absolut Pets Lda.

absolutpets.com

66

Clínica Veterinária Absolut Pets Lda. operates a veterinary clinic located in Odivelas, Portugal, offering a wide range of veterinary services including general and specialty consultations, diagnostic exams, grooming, pet shop products, and teleconsultations. The clinic targets pet owners in the local region and positions itself as a professional and trusted provider of animal healthcare services. The website is well-structured, professionally designed, and provides clear contact information including phone and WhatsApp links. The business model focuses on direct veterinary care and pet wellness products, serving a small local market segment. Technically, the website employs modern analytics tools such as Google Analytics and PostHog, uses Google Tag Manager, and implements cookie consent mechanisms compliant with GDPR. The site is hosted on a CDN platform and uses service workers to enhance user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, but the website content and business information appear consistent and professional. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in transparency and domain registration clarity.

A

Atlantic Language Services

atlanticlanguages.co.uk

62

Atlantic Language Services is a professional language services provider based in Plymouth, UK, specializing in translation, interpreting, transcription, proofreading, certification, and voiceover services. The company serves local, national, and international clients, positioning itself as a trusted expert in linguistics. Their website reflects a small-sized business with consistent branding and a clear focus on quality and client service. Technically, the website is built on the MultiScreenSite platform, leveraging modern web technologies including jQuery, Google Analytics, and Snowplow for analytics, and Mapbox for geolocation services. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is adequate with HTTPS enforced and use of reCAPTCHA on forms, but lacks some security headers and explicit security policies. Privacy compliance is basic but includes cookie consent and links to privacy and terms pages hosted on a partner domain. WHOIS data is unavailable due to domain naming rules error, limiting domain registration trust verification. Overall, the site is professional and trustworthy but could improve in security transparency and WHOIS data availability.

A

Access Audio Visual

accessav.co.uk

46

Access Audio Visual is a well-established AV solutions provider based in Scotland, offering design, supply, installation, maintenance, consultancy, and subcontracting services primarily across Scotland and the UK. With over 30 years of industry experience and certifications such as ISO 9001:2015 and SafeContractor approval, the company targets sectors including churches, hospitality, corporate spaces, and visitor attractions. Their website reflects a professional and trustworthy business with comprehensive service descriptions, client testimonials, and portfolio showcases. Technically, the site is built on WordPress using the Avada theme, integrates modern SEO and analytics tools, and demonstrates good mobile optimization and performance. Security posture is solid with HTTPS and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with a privacy policy and cookie consent, but lacks explicit incident response or security policy disclosures. Overall, the domain registration is consistent and trustworthy, supporting the company's legitimacy.

M

Mitra AI

mitrai.com

71

Mitra AI is a technology-focused company specializing in AI-first legacy modernization solutions, targeting businesses seeking to modernize their legacy systems with AI capabilities. The website positions Mitra AI as an expert partner in this niche, offering platform solutions such as novolingoai. The company appears to be established since 2011, consistent with the domain registration data. Technically, the website is built using Framer, a modern design and hosting platform, and incorporates Google Analytics for user tracking. The site demonstrates good design quality, mobile optimization, and basic SEO practices, though accessibility features are basic. Security-wise, the site uses HTTPS but lacks DNSSEC and security headers, indicating room for improvement in security posture. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

BSI Group, officially known as The British Standards Institution, is a globally recognized leader in standards development, certification, training, and consulting services. The organization focuses on helping businesses improve performance and achieve excellence, with a strong emphasis on sustainability. Their market position is reinforced by a long history of 125 years and a comprehensive portfolio of services including standards, assessment, certification, and software tools. The website reflects a professional and enterprise-grade digital presence, targeting businesses and organizations seeking compliance and quality assurance solutions. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Optimizely, and Salesforce Web-to-Case for customer engagement. The site is well-optimized for mobile devices, has good SEO practices, and integrates multiple marketing and analytics tools with user consent mechanisms. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, uses CAPTCHA on forms, and implements cookie consent via OneTrust. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of a public vulnerability disclosure policy is noted as an area for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations such as GDPR. The missing WHOIS data is unusual but does not detract significantly from the site's legitimacy given the organization's reputation and branding. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving incident response contact visibility.

B

Bruce Head

brucehead.com

51

Bruce Head is a UK-based commercial photographer specializing in product, food, location, and lifestyle photography, operating from a purpose-built studio and lifestyle location. The website serves as a professional portfolio showcasing case studies and photographic work, targeting commercial clients in need of high-quality digital photography and video services. The business operates in the media sector with a small company size and a focused niche market position. Technically, the website employs a moderate technology stack including jQuery, Cookiebot for cookie consent management, Google Analytics for visitor tracking, and layout libraries such as Packery. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. However, the use of an outdated jQuery version and lack of visible security headers indicate areas for technical improvement. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism with granular options, including CSRF token cookies for security. However, the absence of explicit privacy policy and terms of service pages, missing WHOIS data, and lack of advanced security headers reduce the overall security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a small commercial photography business but would benefit from enhanced security practices, clearer privacy documentation, and updated technical components to improve compliance and trustworthiness.

S

Scotec Lifts Ltd

scotecliftsltd.co.uk

60

Scotec Lifts Ltd is a small, established lift company based in Scotland, specializing in commercial lift installation, maintenance, repair, and modernization services. Founded in 2002, the company serves clients primarily in Glasgow, Edinburgh, and Central Scotland. The website reflects a professional business with clear contact information, social media presence, and service offerings. Technically, the site is built on the Duda platform, utilizing modern JavaScript libraries and analytics tools, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security policies and incident response details. The WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness. Overall, the website is functional, professional, and safe for general audiences.

S

Sporting Events UK

sportingeventsuk.com

47

Sporting Events UK is a website focused on providing listings and registration services for running and sporting events, primarily targeting runners and sports enthusiasts. The site offers event information and registration capabilities, positioning itself as a niche platform within the sports event domain. The business model appears to be centered on event promotion and participant engagement, though detailed business information is not available. Technically, the website employs modern JavaScript frameworks such as Vue.js and Bootstrap, integrates YouTube for media content, and uses Google Analytics for tracking. Hosting is via Amazon CloudFront CDN, suggesting a scalable infrastructure. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is basic, with no detected security headers or incident response information, and WHOIS data is unavailable, raising concerns about domain legitimacy. Overall, the site is accessible and functional but requires significant improvements in security, compliance, and business transparency to enhance trust and professionalism.

W

Woodstone UK

woodstoneuk.com

59

Woodstone UK is a small, family-run retail business specializing in reclaimed wood and stone flooring products, as well as visual merchandising props. Established in 1995, the company positions itself as a leading supplier in the UK market for natural stone and wood flooring, catering to both residential and commercial customers. Their product range includes reclaimed wood flooring, new engineered wood flooring, and reclaimed stone, supported by a showroom and a yard open by appointment. The business also services visual merchandising needs for high street brands, indicating a diversified revenue stream. Technically, the website is built on the Create.net CMS platform and employs modern JavaScript libraries such as jQuery and Google Analytics for tracking. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be improved. Security-wise, the site uses HTTPS with a valid SSL certificate but lacks important security headers and published privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data for the domain is missing, which raises some concerns about domain legitimacy and registration transparency. However, the website content, social media presence, and business certifications like The Truly Reclaimed Standard support the legitimacy of the business. Overall, the site demonstrates a good business and technical foundation but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

S

Sphinax Info Systems

sphinaxinfosystems.com

43

Sphinax Info Systems is a Chennai-based software solution company with over 9 years of experience providing customized ERP solutions, SAP implementation, web and mobile application development, IT infrastructure management, and HR management software. The company targets businesses in Chennai and India seeking comprehensive IT and ERP services. Their market position is that of an established local player with a reputed client base and a focus on client satisfaction and social responsibility. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various third-party integrations such as Google Analytics and Tawk.to live chat. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no published security or incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is professional and trustworthy but could improve security and privacy practices.

C

Cleaning Fresh - E and D Cleaning Services

cleaningfresh.com

47

Cleaning Fresh - E and D Cleaning Services is a small UK-based company providing a wide range of professional cleaning and property maintenance services across Greater London. Their offerings include domestic cleaning, tenancy cleaning, carpet and upholstery cleaning, office cleaning, gardening, and rubbish removal. The company targets both residential and corporate clients, positioning itself as a reliable and affordable service provider with a strong local presence and positive client testimonials. The website is well-structured, professionally designed, and includes clear contact information and social media links, supporting customer engagement and trust. Technically, the website employs a modern tech stack including Bootstrap, jQuery, FontAwesome, Owl Carousel, and Revolution Slider, with Google Analytics integrated for user tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and a cookie consent mechanism, which are critical for GDPR compliance and enhanced security posture. The WHOIS data for the domain is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about the domain's registration legitimacy. This inconsistency impacts the overall trustworthiness of the domain despite the professional website content. No incident response or security policy information is provided, and no vulnerability disclosure or data protection officer contact details are found. Overall, the website presents a professional and trustworthy front for the cleaning business but should address security header implementation, privacy compliance improvements, and clarify domain registration legitimacy to strengthen its security posture and business credibility.