Security Directory

G

Google LLC

google.com

68

Google Drive is a cloud storage and collaboration platform operated by Google LLC, a subsidiary of Alphabet Inc. It provides users with secure online file storage, sharing, and access across devices. The service is a market leader in cloud productivity tools, targeting a broad audience from individual users to enterprises. The website analyzed is a Google Drive folder page in German, reflecting Google's global reach and localization efforts. Technically, the site leverages Google's robust infrastructure, including Google APIs, Closure Library, and Google Fonts, hosted on Google Cloud. The site demonstrates excellent performance, mobile optimization, and accessibility features, consistent with Google's high standards for user experience and technical implementation. Security-wise, the site enforces HTTPS, employs comprehensive security headers, and follows best practices to protect user data and privacy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, although no explicit privacy or cookie policies were found on this specific folder page, which is typical for such subpages. Overall, the domain and site are highly trustworthy, with no signs of malicious activity or content blocking. The site is safe for general audiences and aligns with Google's reputation for security and compliance.

A

Adams & Page Ltd

adamsandpage.co.uk

48

Adams & Page Ltd is a longstanding tyre and wheel alignment service provider based in High Wycombe, UK, with a history dating back to 1928. The company offers a comprehensive range of tyre products and vehicle services including ADAS recalibration, wheel alignment, and puncture repair, targeting vehicle owners in Buckinghamshire and surrounding areas. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, and integrates cookie consent and Google Analytics with user consent controls, indicating a moderate level of digital maturity. Security posture is moderate; while HTTPS is presumably enabled, no explicit security headers were detected, and no incident response or security policies are published. The WHOIS data is unavailable due to a domain naming rules error, which raises some concerns about domain registration legitimacy, though the website content itself appears trustworthy and professional. Overall, the site is functional, user-friendly, and compliant with basic privacy standards but could improve in security transparency and domain registration clarity.

B

Bucks County Workforce Development Board

bucksworks.org

41

The Bucks County Workforce Development Board website serves as an informational portal for workforce development activities in Bucks County, Pennsylvania. It targets employers, job seekers, and local stakeholders by providing labor market data, resources, and updates on initiatives and board meetings. The site is built on WordPress using the Customify theme and incorporates standard web technologies such as Google Fonts and Font Awesome. The design is professional and consistent with government branding, offering a good user experience with mobile optimization and clear navigation. However, the site lacks critical privacy and cookie policies, and no direct contact emails or phone numbers are provided, which limits user engagement and trust. Security-wise, HTTPS is enabled but the absence of security headers and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is incomplete and malformed, reducing domain trustworthiness despite the legitimate appearance of the website content.

D

Durham-Ellis Pecan Company

durhams.com

54

Durham-Ellis Pecan Company is a medium-sized retail and manufacturing business specializing in pecans and other nut products, based in Comanche, Texas. The company operates a large processing facility and offers a variety of products through retail, wholesale, fundraising, and corporate gift channels. Their website reflects a consistent brand with a focus on product offerings and customer engagement. Technically, the site is built on the CIMcloud ecommerce platform, leveraging modern JavaScript frameworks, Bootstrap, and Amazon Cloudfront CDN for hosting. Google Analytics and Constant Contact are used for analytics and marketing. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and formal policies. The absence of public WHOIS data reduces domain trust but the website content and contact information support legitimacy. Overall, the site is professional and functional with room for improvement in privacy and security disclosures.

E

Etills Limited

etills.com

62

Etills Limited operates a professional e-commerce website specializing in manufacturing and selling water tanks, rainwater harvesting systems, disabled and mobility products, garden planters, and AdBlue products. The company targets both industry clients and the general public, positioning itself as a niche manufacturer with a medium-sized market presence. The website is built on the Shopify platform, leveraging modern web technologies and third-party analytics tools to support its online sales and marketing efforts. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but lacks important security headers and visible privacy or cookie policies. Contact information is not explicitly provided, which may affect customer trust and compliance with privacy regulations. Overall, the site is functional and professionally designed but requires improvements in transparency, security best practices, and compliance documentation to enhance trustworthiness and regulatory adherence.

F

Fussenegger Holzbau GmbH

fussenegger-holzbau.at

47

Fussenegger Holzbau GmbH is a well-established Austrian company specializing in ecological timber construction, offering a comprehensive range of services including wood construction, window and door manufacturing, and general contracting. With a history dating back to 1840 and expansion into the Swiss market, the company serves architects, planners, private homeowners, and public sector clients. The website reflects a professional digital presence built on WordPress with modern technologies and good SEO practices. Security posture is adequate with HTTPS and privacy compliance, though improvements in security headers and incident response documentation are recommended. Overall, the website is trustworthy and well-aligned with the company's business profile.

F

F. SACCHETTI Sàrl

sacchettimetal.ch

45

F. SACCHETTI Sàrl is a small family-owned business specializing in metal construction services in Switzerland, operating since 1988. The company offers key services including balustrades, stairs, covered areas, doors, and gates, and also acts as a training provider for apprentices, ensuring skilled labor for the future. The website reflects a consistent brand image and provides clear contact information, targeting clients seeking quality metal construction solutions. Technically, the site is built on WordPress using the Avada theme, with standard web technologies such as jQuery and FontAwesome. The site is moderately optimized for mobile and SEO, with room for improvement in accessibility and performance. Security posture is basic with HTTPS enabled but lacks security headers and formal security policies. A minor PHP warning is present, indicating a configuration issue. Privacy compliance is limited, with no privacy policy or terms of service found, though a cookie consent banner is implemented. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures.

K

kottmann+gurzeler ag

kgplatten.ch

39

kottmann+gurzeler ag is a well-established Swiss company specializing in tile and stone flooring and wall coverings, with over 55 years of experience serving the Aargau region and surrounding areas. Their business model focuses on providing expert installation services, product supply, and consultation for residential and commercial projects, including new builds, renovations, and repairs. The company maintains a professional online presence with a WordPress-based website featuring a showroom and detailed service descriptions, targeting homeowners and builders in Switzerland. Technically, the website is built on a modern WordPress platform with popular plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user interaction capabilities. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and formal privacy and cookie policies, which are areas for improvement. Performance is moderate, with standard use of external resources like Google Fonts. From a security perspective, the site benefits from HTTPS encryption and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers, incident response contacts, and vulnerability disclosure mechanisms indicates a moderate security posture. Privacy compliance is weak due to missing policies and consent mechanisms, which could pose regulatory risks. Overall, the website reflects a credible and professional small business with a solid market position in its niche. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, adding incident response information, and maintaining regular updates to plugins and core software to strengthen security and compliance.

Nippak Tour is a specialized travel agency based in Foz do Iguaçu, Brazil, with over 35 years of experience serving Japanese tourists. The company offers Japanese language guided tours, inbound attendant services, and comprehensive travel planning focused on Iguassu Falls and surrounding attractions. Their market position is that of a trusted niche provider catering to Japanese-speaking visitors, emphasizing safety and customer satisfaction. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, with moderate performance and good mobile optimization. However, SEO and accessibility features are basic. Security posture is moderate; HTTPS is used but no explicit security headers or vulnerability disclosures are present. Privacy and cookie policies are absent, indicating compliance gaps. Contact information and social media presence are clear, supporting business credibility. Overall, the site is safe and professional but would benefit from enhanced security and privacy compliance measures.

I

Irabele Móveis Planejados

irabelemoveis.com.br

54

Irabele Móveis Planejados is a small Brazilian company specializing in custom furniture design and installation, primarily serving residential and commercial clients in Camboriú, SC. The company emphasizes quality, personalization, and interior design expertise, with over 10 years of experience. Their website is professionally designed using WordPress and Elementor, featuring a portfolio, customer testimonials, and integrated contact options including a WhatsApp widget. The business maintains a consistent brand presence and targets local customers seeking tailored furniture solutions. Technically, the website leverages modern web technologies and plugins to deliver a responsive and visually appealing experience. While SSL is properly configured, the site lacks some security headers and a dedicated cookie consent mechanism, which are areas for improvement. Privacy policy information is present but linked externally via the WhatsApp widget, indicating partial compliance with GDPR. From a security perspective, the site shows good practices such as HTTPS usage and CAPTCHA on forms but would benefit from enhanced security headers and published incident response policies. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, safe, and professionally maintained, suitable for its business scope. Strategic recommendations include implementing comprehensive privacy and cookie policies on the domain, adding security headers, and publishing security and incident response information to enhance trust and compliance.

M

MooiRivier Mall

mooiriviermall.co.za

38

MooiRivier Mall is a retail shopping center located in Potchefstroom, South Africa, offering a variety of stores, leasing, advertising, and event opportunities. The mall emphasizes a family-friendly environment with a scenic riverfront and community engagement. It is owned and managed by Attacq Ltd, a registered property practitioner, which adds credibility and stability to its operations. The website reflects a medium-sized retail business targeting local shoppers and families. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, with integration of Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation. However, some accessibility features are basic, and performance is moderate. The absence of certain security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS with anonymized IP tracking via Google Tag Manager, but lacks explicit security policies, incident response contacts, and cookie consent banners. WHOIS data is unavailable due to privacy protection, which is common for commercial properties but limits domain trust verification. Overall, the security posture is adequate but could be enhanced by implementing recommended headers and privacy controls. The overall risk assessment is low to moderate, with no signs of malicious content or vulnerabilities detected. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, publishing incident response information, and enhancing contact transparency to build greater user trust and regulatory adherence.

U

Ukwazi Mining Services

ukwazi.com

55

Ukwazi Mining Services is a South African-based multi-disciplinary mining consultancy and operations service provider established in 2004. The company offers integrated project management, mining engineering, ESG solutions, technical studies, financial valuations, and project implementation services. They also provide niche contract mining and civil works through their women in mining initiative, Tsebokgadi, and are exclusive distributors of K-Tec ADT pull scrapers in sub-Saharan Africa. The website reflects a professional and consistent brand presence targeting mining industry stakeholders in the region. Technically, the site is built on WordPress with modern tools like Google Tag Manager and Microsoft Clarity, showing moderate performance and good SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is missing, raising concerns about domain registration legitimacy, which impacts trustworthiness. Overall, the site is functional and professional but would benefit from improved security and compliance transparency.

O

ODC - Office Design Contracts | Quality workmanship is what sets us apart

od.co.za

36

The website www.od.co.za represents a business focused on office design contracts, emphasizing quality workmanship. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with standard web technologies and Google Fonts integration. However, the site lacks critical business and compliance information such as privacy policies, cookie consent mechanisms, and contact details, which limits its transparency and user trust. The WHOIS data is unavailable or indicates the domain is not registered, which raises concerns about the legitimacy and ownership of the domain. Security posture is minimal with no detected security headers or SSL configuration details, suggesting potential vulnerabilities or misconfigurations. Overall, the site is accessible without WAF or blocking mechanisms but requires significant improvements in security, compliance, and business transparency to enhance trust and reduce risk.

B

Blakes Maphanga

blakes.co.za

43

Blakes Maphanga is a South African law firm specializing in various legal services including property law, litigation, insurance claims, banking law, and corporate law. The firm targets a diverse client base including banking institutions, corporate entities, and individuals. Their website reflects a professional and client-focused approach with clear service descriptions and contact information. Technically, the site is built on WordPress using the Divi theme, incorporating standard web technologies such as jQuery and Google Fonts. The site is accessible, mobile-optimized, and performs moderately well. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is privacy protected, which is typical for professional firms, and the domain is actively maintained. Overall, the website presents a credible and trustworthy business presence with room for improvement in compliance and security transparency.

L

LECO Corporation

lecoafrica.co.za

65

LECO Corporation is a well-established manufacturer of analytical, laboratory, and scientific instruments, serving a global market since 1936. Their product portfolio includes elemental analysis, thermal analysis, mass spectrometry, and metallography instruments, complemented by consumables, mobile labs, and comprehensive training and support services. The company targets scientific and industrial laboratories worldwide, positioning itself as a trusted leader with a broad international presence. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies such as jQuery, Google Tag Manager, and Vimeo for multimedia content. Hosting appears to be on DigitalOcean infrastructure, with good performance and mobile optimization. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS with strong security headers and does not expose sensitive data. However, it lacks a visible cookie consent mechanism and published vulnerability disclosure or incident response contacts. The absence of WHOIS data for the domain reduces domain registration trust, though the website content and branding strongly support legitimacy. Overall, LECO's digital presence reflects a professional and credible business with room for improvement in privacy compliance and transparency regarding security disclosures. The risk level is moderate with no critical vulnerabilities detected.

KARESİ is a medium-sized Turkish manufacturing company established in 1983, specializing in integrated production across petrochemical raw materials, textile manufacturing, renewable energy, and recycling sectors. The company presents a professional and modern web presence with multimedia content and a focus on sustainability. The technical infrastructure leverages modern front-end technologies such as Bootstrap, jQuery, and fullPage.js, ensuring good mobile optimization and user experience. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and detailed security policies. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a legitimate and established business with room for improvement in security and privacy transparency.

Cranfield Solutions Ltd is a UK-based specialist in plastic injection moulding manufacturing services, established in 2004. The company serves technical industries including renewable energy, electronics, medical, automotive, and defence, offering a comprehensive suite of services from design to quality assurance. Their market position is that of a trusted, precise, and cost-effective manufacturing partner for businesses requiring high-quality plastic components. Technically, the website is built on WordPress with modern optimizations such as lazy loading, Google Fonts, and Google reCAPTCHA v3 for form security. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Hosting and domain registration are stable and consistent with the business profile. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and provides cookie consent mechanisms aligned with GDPR. However, it lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture. Overall, the website presents a professional and trustworthy digital presence with good compliance and security hygiene. Strategic improvements in security headers, accessibility, and formal security documentation would enhance their posture further.

Construction Profiles Ltd is a UK-based specialist company focusing on roof and wall cladding solutions for the construction industry. The company emphasizes quality delivery and strong project planning, supported by good supplier relationships. The website is built on WordPress using popular plugins such as LayerSlider and Revolution Slider, indicating a moderate level of digital maturity. The site is professionally designed with good navigation and mobile responsiveness, targeting construction professionals and developers. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data due to domain naming rules violation introduces some trust concerns. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

S

St Davids Cross Hotel

stdavidscrosshotel.co.uk

51

St Davids Cross Hotel operates as a local hospitality business providing accommodation, dining, and event services in St. Davids, Pembrokeshire, UK. The website presents a professional and consistent brand image with clear contact details and service descriptions, targeting general audiences including tourists and local visitors. The business model focuses on hotel room bookings, bar and restaurant services, and function room rentals. Technically, the website is built on an older version of the concrete5 CMS with common JavaScript libraries such as jQuery and Flexslider, delivering moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking modern security headers and running outdated software, which poses potential risks. Privacy compliance is weak due to absence of privacy and cookie policies, and no GDPR indicators are present. Overall, the site is functional and trustworthy but requires improvements in security and compliance to reduce risk and enhance user trust.

M

Magic Torch Ltd

magictorch.com

45

Magic Torch Ltd is a UK-based creative agency specializing in illustration and motion design services. The company presents a professional portfolio showcasing work across various sectors including science, music, automotive, and lifestyle. The website is built on WordPress using the Blocksy theme and includes standard plugins such as Contact Form 7 for communication. The domain is well-established, created in 1998, which supports the company's credibility and market presence. From a technical perspective, the website employs modern web technologies and is mobile-optimized with good SEO practices. However, there is room for improvement in accessibility and security hardening, particularly the implementation of security headers and DNSSEC. The site uses HTTPS with a valid SSL certificate, ensuring encrypted communications. Security posture is moderate; while HTTPS is enforced and domain transfer protection is enabled, the absence of security headers and explicit security policies reduces the overall security maturity. Privacy compliance is weak due to the lack of visible privacy and cookie policies, which could expose the company to regulatory risks under GDPR. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

W

Wychanger Barton

wychanger.com

48

Wychanger Barton operates as a UK-based e-commerce retailer specializing in equestrian essentials, pet supplies, and livestock products. The website presents a professional and well-structured platform targeting equestrian enthusiasts and pet owners, offering a wide range of branded products. The company positions itself as a leading UK equestrian brand retailer with a comprehensive product catalog and active social media presence. Technically, the website employs modern web technologies including jQuery, Google Fonts, Google Analytics, Facebook Pixel, and PayPal SDK for secure payments. The site is mobile-optimized and includes accessibility features, though these could be enhanced further. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and incident response information. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. However, the absence of WHOIS registration data is a significant concern, reducing overall trustworthiness despite the professional appearance and operational indicators. Strategic recommendations include verifying domain registration, enhancing security headers, and publishing incident response contacts to improve trust and compliance.

TCI Cables Ltd is a specialist manufacturer of high-quality audio and video cables and related accessories based in the United Kingdom. The company focuses on producing reference standard cables for Hi-Fi and AV systems, including mains cables, interconnects, speaker cables, digital leads, and energy absorbing supports branded as TCI Podiums and True-Pucs. With over 30 years of award-winning design experience, TCI targets audiophiles, dealers, and enthusiasts seeking premium audio components. The website reflects a professional and consistent brand image with clear product categorization and contact information. Technically, the website is built on WordPress using Elementor and related modern web technologies. It employs HTTPS with a good SSL configuration and uses SEO plugins like Rank Math. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site benefits from HTTPS but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. No forms or data collection mechanisms were found on the homepage, reducing immediate data protection risks. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business information appear credible. Overall, the website presents a trustworthy and professional front for a niche manufacturing business but should improve compliance documentation and verify domain registration details to enhance trust and security posture.

M

Memoria Funeral Plans Limited

memoria.org.uk

51

Memoria Funeral Plans Limited operates a professional UK-based website offering prepaid funeral plans and funeral arrangement services. The company positions itself as a value-driven funeral provider with multiple 5-star ratings and FCA regulation, targeting UK residents seeking transparent and affordable funeral solutions. The website is built on WordPress with Elementor, integrating modern analytics and marketing tools, and demonstrates good digital maturity with responsive design and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a trustworthy and compliant business with strong customer trust signals.

K

Kingsley Bathrooms

kingsleybphc.co.uk

65

Kingsley Bathrooms operates a well-established e-commerce platform specializing in plumbing, heating, and bathroom products targeted at trade professionals and DIY customers across the UK. The company leverages the Shopify platform to provide a seamless shopping experience with fast delivery and competitive pricing. Their market position is supported by a broad product range, trade account benefits, and a professional online presence. Technically, the website is built on a modern, secure, and performant infrastructure using Shopify's ecosystem, including Shopify Payments and integrated chat support. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, although explicit security policies and incident response information are absent. Privacy compliance is basic but present, with cookie consent mechanisms and privacy policies available. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its business model and audience.

Interplan is a well-established Scottish company specializing in the design, manufacture, and installation of bespoke commercial washroom solutions. With a domain age of over 20 years and a clear market position as Scotland’s leading washroom supplier, the company targets UK contractors and commercial clients. Their website reflects a professional B2B business model offering a broad range of products and services including toilet cubicles, IPS ducting, vanities, and washroom refurbishment. The site is well-structured with clear navigation and multiple user engagement points such as sample orders, brochure downloads, and enquiry forms.

I

Illingworths

illingworths.co.uk

57

Illingworths is a UK-based insurance and financial services provider established in 1999, offering a broad range of insurance products including home, motor, travel, and business insurance, alongside financial services such as pensions, investments, and life assurance. The company positions itself as a trusted, customer-focused service provider with a strong emphasis on personal advice and professional service. The website reflects this with clear service offerings and positive customer reviews embedded from Google. Technically, the site is built on WordPress using common plugins like Slider Revolution and Contact Form 7, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

Glenfield Group is a small, family-run business specializing in air conditioning services including installation, maintenance, and consultancy, primarily serving Leicester and the Midlands region in the UK. The company has over 25 years of industry experience and holds certifications such as REFCOM, FGAS, and ISO 9001, positioning it as a trusted regional service provider. Their website reflects a professional image with clear service offerings and client endorsements, targeting a diverse audience including homeowners, commercial businesses, and contractors. Technically, the website is built on WordPress using the Impreza theme, leveraging modern web technologies such as jQuery and Google Analytics. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features. Performance is moderate, and hosting details are partially known via the registrar information. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and visible privacy or cookie policies, which are critical for GDPR compliance and user trust. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

D

DynaGrid Construction

icdrilling.com

54

Independence Contract Drilling (ICD), operating under the name DynaGrid Construction, is a specialized provider of drilling services to the oil and gas sector in the United States. The company emphasizes operational excellence, innovation, and safety, leveraging advanced technologies and a skilled workforce to deliver efficient drilling solutions. Their market position is that of a trusted leader focused on US unconventional resource plays, serving industry professionals and clients seeking reliable drilling services. Technically, the website is built on WordPress using the Divi theme and builder, incorporating modern web technologies such as jQuery, Google Fonts, and Google Maps API. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks some recommended security headers and a cookie consent mechanism, which could impact GDPR compliance. No visible vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, though the professional web presence and consistent business information mitigate major concerns. Overall, ICD presents a professional and trustworthy digital presence aligned with its business goals. Strategic improvements in security headers, privacy compliance, and transparency around incident response would enhance their security posture and regulatory adherence.

A

Abshar Restaurant

abshar.co.uk

56

Abshar Restaurant is a small hospitality business specializing in authentic Persian cuisine located in Croydon, UK. The website presents a professional and visually appealing interface built on the Squarespace platform, offering services including dine-in, takeaway, delivery, and table booking through a partner domain. The technical infrastructure is modern and mobile-optimized, leveraging Squarespace CMS, Google Fonts, and Google Maps API. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are important for compliance and trust. The domain WHOIS data is unavailable due to registration issues with Nominet UK, which raises concerns about domain legitimacy but does not directly impact the business operations visible on the website. Overall, the website is functional and trustworthy from a user perspective but would benefit from enhanced security and compliance documentation.

C

Chamberlain Commercial UK Ltd

chamberlaincommercial.com

48

Chamberlain Commercial UK Ltd is a specialized commercial property consultancy focused on the North West London market. The company offers a broad range of services including property acquisitions, disposals, investment advisory, development planning, and property management. Led by an experienced principal with over 20 years in the industry, the firm positions itself as a trusted local expert for businesses and investors seeking commercial real estate solutions. The website reflects a professional and consistent brand image with clear service offerings and client engagement channels. Technically, the website is built on WordPress using popular plugins such as Slider Revolution, WPBakery Page Builder, and Contact Form 7. It employs modern web technologies including jQuery and Google Fonts, and is optimized for mobile devices with good SEO practices. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and secure forms but lacks some recommended security headers and explicit incident response or security policy disclosures. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, though the website content and contact information appear authentic and professional. Privacy and cookie policies are present, but a cookie consent mechanism is missing, which could be improved for GDPR compliance. Overall, the website presents a credible and professional commercial real estate consultancy with a solid digital presence. Strategic improvements in security posture, privacy compliance, and domain registration transparency would enhance trust and reduce risk.

V

Volition Capital

volitioncapital.com

71

Volition Capital is a Boston-based growth equity firm specializing in partnering with founder-owned, capital-efficient businesses to accelerate growth and scale market-leading companies. The firm positions itself as highly selective, emphasizing deep partnerships with companies that have proven potential to lead their markets. The website reflects a professional and consistent brand image, targeting founders and investors in the growth equity space. Technically, the site is built on WordPress with modern web technologies, including Gravity Forms for data collection and New Relic for performance and security monitoring. The site is well-optimized for SEO, mobile-friendly, and accessible, providing a positive user experience. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates a mature digital presence suitable for a finance firm, though the lack of WHOIS data slightly reduces transparency. Strategic recommendations include publishing a dedicated security policy and incident response contact, and enhancing accessibility features further.

L

Liskow & Lewis, APLC

liskow.com

69

Liskow & Lewis, APLC is a well-established law firm specializing in energy, maritime, and commercial law. The firm positions itself as a leader in energy law with a future-focused approach emphasizing environmental, social, and governance aspects. Their market position is strong, supported by professional content, recognized rankings, and a robust digital presence including blogs and social media engagement. Technically, the website is built on WordPress with modern SEO and user experience optimizations, leveraging technologies such as Yoast SEO, Algolia search, and Google Tag Manager. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

W

Western Oregon University

wou.edu

58

Western Oregon University (WOU) is a public higher education institution positioned as an affordable and diverse university in Oregon. The website serves prospective and current students with information about academic programs and student support services. The institution targets students seeking career-focused education in a supportive community environment. The website's business model is centered on public education delivery with a focus on accessibility and affordability. Technically, the website is built on WordPress using the Divi Builder theme and Bootstrap framework, hosted likely on Amazon AWS infrastructure. It employs modern web technologies and integrates multiple third-party analytics and marketing tools, including Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing approach. Security-wise, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security or incident response policies. Privacy compliance is limited, with no detected privacy or cookie policies or consent mechanisms, which could be improved to meet regulatory standards. Overall, the domain registration data is consistent with the university's identity, showing a long-term registration and no privacy protection, enhancing trust. The website is professional, well-branded, and safe for general audiences.

T

Team Management Services

teammanagementservices.co.nz

65

Team Management Services is a New Zealand-based company specializing in facilitating organisational development workshops focused on team development, leadership, and strategic planning. The website presents a professional image with clear service offerings and client testimonials, targeting organizations seeking to improve team and leadership capabilities. Technically, the site uses ASP.NET WebForms with Telerik UI components, jQuery, Bootstrap, and integrates Google Analytics and a cookie consent mechanism. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit privacy policy, terms of service, and security headers. WHOIS data is unavailable, which raises some concerns about domain legitimacy, though the website content and presentation suggest a legitimate business. Overall, the site is accessible, well-structured, and provides a good user experience.

D

Fine Art Merchandise for visitor attractions, galleries and retail

doricmor.com

52

Doricmor.com is a small business specializing in the production of high-quality fine art merchandise and Giclee prints targeted at visitor attractions, galleries, gift shops, framers, hospitality, and professional artists. The company emphasizes personalized service, small product runs, and quality manufacturing based in Scotland. The website presents a professional and well-structured front-end built on modern technologies such as Vue.js and Vuetify, with integration of Google Analytics for visitor tracking. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, raises concerns about transparency and compliance. Security posture is moderate but could be improved by implementing standard security headers and clearly published security policies. Overall, the site is functional and professional but would benefit from enhanced compliance and trust signals.

L

Little Sutton Picture Framing

mobilepictureframing.co.uk

48

Little Sutton Picture Framing is a small local business based in Cheshire, UK, specializing in bespoke picture framing services. The website presents a professional and consistent brand image targeting local customers seeking custom framing solutions. The business model is retail-focused with a clear service offering and a website built on WordPress using Elementor and WP Rocket for performance optimization. The domain is relatively new, registered in 2022, consistent with a small startup or local business. Technically, the website is moderately optimized with good mobile responsiveness and SEO practices, but lacks advanced accessibility features and some security best practices. Security posture is basic with HTTPS enabled but missing key security headers and no visible incident response or security policy information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance measures.

K

Kuala Lumpur Kepong Berhad

klk.com.my

65

Kuala Lumpur Kepong Berhad (KLK) is a well-established Malaysian conglomerate with a core focus on plantations, resource-based manufacturing, and property development. The company is publicly listed on Bursa Malaysia with a significant market capitalization, reflecting its strong market position. The website effectively communicates the company's diversified business segments and sustainability initiatives, targeting investors, partners, and job seekers. Technically, the site is built on WordPress with a modern theme and plugins, offering good SEO and mobile optimization. Security posture is solid with HTTPS and client transfer protection, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is robust, featuring comprehensive policies and a consent mechanism. Overall, the website reflects a professional and trustworthy corporate presence with room for technical security enhancements.

T

The Gilberd School

gilberd.com

65

The Gilberd School is a well-established secondary educational institution in Essex, UK, with a rich history dating back to 1912. The website serves students, parents, and staff by providing comprehensive information on admissions, academic development, personal development, and school governance. It is positioned as a high-performing, non-selective academy under the Alpha Trust umbrella. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, and Google Fonts, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or registration issues, but the website content and branding strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

T

Tom Harrington Films

tomharringtonfilms.co.uk

42

Tom Harrington Films is a UK-based wedding videography business specializing in award-winning, story-led wedding films. The company emphasizes creating timeless, documentary-style wedding films that capture authentic moments. With over 20 years of experience and a selective booking approach, the business targets engaged couples seeking premium videography services. The website is built on WordPress using the Divi theme, with a moderate technical infrastructure and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. Overall, the website presents a professional and trustworthy image but would benefit from enhanced compliance and security features.

Winding Snake Productions is a small, creatively driven 2D animation studio and non-profit media education organization based in South Wales, UK. The company focuses on original storytelling and reinvests profits into creative development and audience engagement. Their market position is that of a niche, community-focused studio with a strong emphasis on education and collaboration. Technically, the website employs modern web technologies including jQuery, Google Analytics, and Font Awesome, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, though the website content and branding are professional and trustworthy. Overall, the site presents a positive image but would benefit from enhanced security and privacy compliance measures.

L

London Gastroenterology LLP

londongastro.co.uk

48

London Gastroenterology LLP operates a professional private healthcare website focused on gastroenterology and liver disorders, staffed by leading teaching hospital consultants in London. The business targets patients seeking specialized digestive health services and offers a range of diagnostic and treatment options including endoscopy and breath tests. The website is built on the Webflow platform, leveraging modern web technologies and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and secure form handling, but lacks important security headers and published privacy or security policies, which are critical for compliance and trust. The absence of WHOIS data and domain registration irregularities pose a risk to domain legitimacy, although the website content and branding appear professional and trustworthy. Overall, the site is functional and credible but would benefit from enhanced security and compliance measures to reduce risk and improve user trust.

G

Guthrie Douglas

guthriedouglas.com

51

Guthrie Douglas Limited is a UK-based specialist engineering company focused on designing and supplying bespoke technical shading systems and specialist blinds for architectural projects. Their market position is that of a niche provider catering primarily to architects and designers seeking energy-efficient and aesthetically pleasing shading solutions for complex glass structures. The website reflects a professional and well-branded presence with detailed product and project information, targeting B2B customers in the real estate and architectural sectors. Technically, the website is built on WordPress CMS and leverages a modern technology stack including jQuery, Bootstrap, and various analytics and marketing tools such as Matomo, Google Analytics, and Visual Website Optimizer. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses asynchronous loading of scripts to improve performance and security. However, it lacks explicit security headers and does not provide visible incident response or security policy information. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness and should be investigated further. Overall, the website is professional and trustworthy in appearance, with comprehensive business and contact information. The main risk lies in the missing WHOIS data and the lack of some security best practices. Strategic recommendations include implementing security headers, adding incident response information, and enhancing privacy compliance mechanisms.

G

Gull Law Chambers

gulllaw.com

49

Gull Law Chambers is a UK-based legal services provider established in 2010, offering expert legal advice and representation. The firm positions itself as a trusted legal partner with a focus on maintaining high standards and client confidence. Their website reflects a professional and consistent brand image, targeting individuals and businesses seeking legal solutions. The company maintains a small-sized operation with a clear presence in the legal sector, supported by accreditation such as the SRA Digital Badge. Technically, the website is built on WordPress using the Betheme theme, incorporating common plugins like Contact Form 7 and CookieAdmin Pro for consent management. Hosting is provided by NameCheap, consistent with the domain registration. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The technical infrastructure is modern but could benefit from enhanced security headers and DNSSEC implementation. From a security perspective, the site uses HTTPS and has implemented a cookie consent mechanism compliant with GDPR. However, advanced security headers like Content-Security-Policy and X-Content-Type-Options are missing, and DNSSEC is not enabled, representing areas for improvement. No incident response or vulnerability disclosure policies are published, which could be enhanced to improve trust and readiness. Overall, the security posture is adequate but could be strengthened. The overall risk assessment indicates a legitimate and professional business with a well-maintained website. Strategic recommendations include enabling DNSSEC, adding comprehensive security headers, publishing incident response policies, and enhancing accessibility and SEO. These improvements would bolster the firm's digital maturity, security posture, and compliance, thereby increasing client trust and operational resilience.

S

South West Growers Show Ltd

swgs.co.uk

59

The South West Growers Show website represents a well-established horticultural trade event organizer based in the South West of the United Kingdom. The business focuses on connecting growers, suppliers, and industry professionals through an annual trade show, celebrating 50 years of operation. The website provides detailed event information, exhibitor resources, and news updates, targeting growers, plant buyers, and related industry stakeholders. The business model centers on event management and trade facilitation within the horticultural sector, positioning itself as a leading regional event. Technically, the website is built on WordPress using the Divi theme, leveraging modern web fonts and media libraries. The site is accessible, mobile-optimized, and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. Security posture is moderate with HTTPS enabled but lacks comprehensive security headers and incident response disclosures. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. The WHOIS data for the domain is unavailable due to a Nominet UK naming rules error, which is unusual and reduces domain registration trustworthiness. Despite this, the website content and business information appear legitimate and professional. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory adherence.

R

Resonate Cloud Services Limited

resonateservices.co.uk

72

Resonate Cloud Services Limited operates as a managed business services and solutions provider based in the United Kingdom. The company focuses on assisting businesses that are stretched thin in managing IT, cybersecurity, and compliance by offering expert managed IT services, cybersecurity guidance, and compliance support. Their market position is that of a niche managed services provider targeting small to medium-sized businesses seeking modern workplace solutions. The website content is professional and clearly communicates their value proposition and key services. Technically, the website is hosted on the Google Sites platform and utilizes Google Analytics, Google Tag Manager, and Zoho SalesIQ for analytics and customer engagement. The site is mobile-optimized with good navigation and basic SEO practices. Performance is moderate, and accessibility features are basic. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site enforces HTTPS but lacks several important security headers such as Content-Security-Policy and X-Frame-Options. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic, with privacy and cookie policies present but lacking explicit consent mechanisms. No incident response or security policy pages were found. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security headers, improved privacy compliance, and clearer incident response information. The absence of WHOIS data due to domain query errors limits full trust verification, but the site content and contact details mitigate some concerns.

Bridgend Motorcycle Training Centre Ltd is a small, established motorcycle training business located in Bridgend, South Wales. The company offers a range of motorcycle training courses including Compulsory Basic Training (CBT), advanced rider training, refresher lessons, and test preparation. Additionally, they provide motorcycle breakdown and recovery services, accompanied touring services in partnership with New Style Motorcycle Tours, and act as an authorized dealer for AJS motorcycles. The website is built on the Yola platform and features clear navigation and relevant content targeted at learner and experienced motorcyclists in the region. Contact information and booking options are prominently displayed, enhancing user accessibility. Technically, the website uses standard web technologies including jQuery, Google Fonts, and Google Maps integration. The site is mobile optimized with a responsive design and moderate performance. However, there is a lack of advanced security headers and no visible SSL/HTTPS verification in the provided data, which could impact user trust and security posture. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and other data protection regulations. From a security perspective, no major vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trustworthiness. Analytics and tracking scripts are present, but privacy compliance is minimal. Overall, the site presents a professional front for its business but requires improvements in security and compliance to enhance trust and protect user data. Strategically, the business should prioritize establishing clear privacy and cookie policies, securing the website with HTTPS and security headers, and verifying domain registration details to improve legitimacy. Enhancing incident response contact information…

C&H Carpets & Flooring LTD is a small, established retail business specializing in quality flooring products including carpets, vinyl, LVT, laminate, and wood flooring, with expert fitting services across Somerset, UK. The company emphasizes customer convenience through free home visits and sample deliveries, positioning itself as a trusted local flooring specialist. The website reflects a professional and consistent brand image with clear service offerings and customer trust signals such as reviews and a cookie consent mechanism. Technically, the website is built using modern web technologies, likely hosted via Heart Internet Limited, and shows good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is basic but present, with a privacy policy and cookie consent banner. Overall, the website is trustworthy and well-maintained, supporting the business's credibility and customer engagement.

S

Safetynet IT

safetynet-it.com

59

Safetynet IT is a well-established Managed Service Provider (MSP) based in South Manchester, UK, offering a range of IT solutions including managed IT services, cloud solutions, cybersecurity, on-site infrastructure management, performance auditing, and telephony. The company targets businesses across multiple sectors such as legal, healthcare, and logistics, providing tailored IT consultancy and support to enhance operational efficiency. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. No explicit security policies or incident response information are published, which could be enhanced to improve trust and compliance. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

Smartcom Solutions Limited is a UK-based manufacturing company specializing in sheet metal fabrication services including 3D design, laser cutting, fabrication, welding, and powder coating. The company targets B2B clients such as automotive manufacturers, network providers, and supply chain businesses, positioning itself as a reliable partner focused on quality and service. The website reflects a professional and consistent brand image with clear contact information and customer testimonials from reputable partners. Technically, the website is built on a custom CMS platform with modern front-end technologies and supports HTTPS, but lacks advanced security headers and privacy compliance features. The absence of WHOIS data and domain registration errors raise concerns about domain legitimacy, though the website content and business information appear credible. Overall, the site demonstrates moderate digital maturity with room for improvement in privacy, security policies, and mobile optimization.

A

Axway

axway.com

76

Axway is an established enterprise technology company specializing in data integration, API management, managed file transfer, and B2B integration solutions. The company targets large enterprises seeking to unlock and manage their data for new digital experiences and market opportunities. Axway positions itself as a key player in the hybrid integration platform market, offering comprehensive services to global customers. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Tag Manager and Cookiebot for consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. The presence of extensive third-party marketing and analytics tools indicates a data-driven approach to customer engagement. From a security perspective, the website enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms aligned with GDPR requirements. However, there is no publicly available dedicated security policy or incident response contact information, which could be improved to enhance transparency and trust. Overall, the website is professional, content-rich, and trustworthy. The main risk factor is the absence of WHOIS data, which limits domain registration verification. This discrepancy should be investigated further to confirm domain legitimacy. Strategic recommendations include publishing explicit security and incident response policies and considering a vulnerability disclosure program to strengthen security posture and stakeholder confidence.