Security Directory

E

Extra Petite

extrapetite.com

63

Extra Petite is a niche fashion and lifestyle blog focused on petite sizing, offering fashion tips, outfit ideas, motherhood content, and travel diaries. The website targets petite women interested in style and lifestyle content, leveraging affiliate marketing and sponsored posts as its primary business model. The site maintains a professional design with consistent branding and a strong social media presence across Instagram, Facebook, Pinterest, and YouTube. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and affiliate integration, optimized for mobile and performance. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance of the site.

V

Vennture

vennture.org.uk

56

Vennture is a UK-based charitable organization focused on providing social support services to individuals, families, and vulnerable groups in Herefordshire. Their mission centers on compassionate assistance and community engagement, supported by a medium-sized operational structure and active volunteer involvement. The website reflects a professional and well-branded digital presence, leveraging WordPress with modern plugins and frameworks to deliver a responsive and accessible user experience. Security measures include HTTPS enforcement and cookie consent management, though there is room for improvement in security headers and incident response transparency. Overall, the site demonstrates strong business credibility and privacy compliance, with minor technical and WHOIS data limitations.

P

Principal Forensic Services (PFS) Ltd

principalforensicservices.com

46

Principal Forensic Services (PFS) Ltd is a UK-based independent forensic science company established following the closure of the UK's Forensic Science Service. The company is led by experts with over 300 years of combined experience, providing expert witness services and forensic consultancy to solicitors, police forces, companies, and private individuals. Their market position is strong within the forensic science sector, offering a comprehensive range of forensic disciplines and bespoke training services. The website is professionally designed, well-structured, and targets legal and law enforcement professionals as well as private clients. Technically, the website is built on WordPress using the Pro Cornerstone theme and employs modern technologies such as Yoast SEO and Google reCAPTCHA for spam protection. The site is mobile-optimized with good SEO practices and moderate performance. However, some security best practices such as security headers are missing, and there is no cookie consent mechanism, which could be improved. From a security perspective, the site uses HTTPS and reCAPTCHA, which are positive indicators. The absence of security headers and lack of published security or incident response policies are areas for improvement. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency, although the professional nature of the site and consistent branding support legitimacy. Overall, the website presents a credible and professional business with room for technical and security enhancements. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and resolving WHOIS transparency issues to enhance trust and compliance.

I

IPNLF

ipnlf.org

48

IPNLF is a non-profit organization dedicated to supporting and developing responsible one-by-one tuna fisheries globally. The organization collaborates with small-scale fisheries, industry leaders, and various stakeholders to promote sustainable fishing practices, reduce environmental impact, and improve livelihoods in coastal communities. Their market position is that of a global advocate and leader in sustainable tuna fisheries, offering services ranging from practical projects to policy advocacy and market engagement. Technically, the website is built on WordPress with modern plugins and tracking tools, hosted on DigitalOcean, and shows moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy and security transparency.

D

DRAX

uk.com

50

DRAX Executive is a leadership advisory and executive search firm specializing in supporting high-growth companies and private equity investors. The company partners with premier private equity firms to deliver leadership solutions both pre- and post-deal, focusing on services such as deal origination, leadership mobilization, succession planning, executive search, and interim leadership. The business is positioned as a trusted talent partner within the professional services and finance sectors, with a long-standing domain registration dating back to 2001 and a partnership with The LCap Group. The website reflects a professional and consistent brand image, targeting private equity and corporate leadership audiences.

T

Tickitape

tickitape.co.uk

45

Tickitape is a UK-based manufacturer specializing in self-adhesive tapes serving over 15,000 businesses globally. Established in 1972, the company offers a broad product range tailored to multiple industries including construction, agriculture, glazing, and events. Their business model focuses on manufacturing, distribution, and bespoke private-label solutions, positioning them as a trusted supplier in their sector. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks published security policies and advanced security headers. The absence of WHOIS data due to domain registration issues is a notable anomaly that impacts domain trustworthiness. Overall, the site is professional and credible but would benefit from enhanced transparency on security and incident response.

T

Town of Northport, Maine

northportmaine.org

62

The Town of Northport, Maine operates an official municipal website serving its residents and visitors with comprehensive information about local government departments, services, ordinances, and community events. The site is positioned as a trusted local government resource with a clear focus on accessibility and community engagement. The business model is typical for a municipal government entity, providing public information and services online. Technically, the website is built on WordPress using the Genesis Framework and several plugins including Yoast SEO and Smart Slider 3. It employs Google Analytics and Google Tag Manager for visitor tracking. Hosting and domain registration are managed through GoDaddy, with standard domain protections in place. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and security headers, which are recommended for enhanced security. No explicit security or incident response policies are published, representing an area for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is a professionally maintained government portal with high trustworthiness and good content quality. Strategic improvements in privacy compliance and security hardening would enhance its risk posture and user trust.

G

Glendale

glendale-services.co.uk

58

Glendale is a UK-based multi-award winning landscaping and grounds maintenance contractor serving both private and public sectors. The company offers a comprehensive range of services including grounds maintenance, tree management, landscaping, winter maintenance, and woodland management. The website reflects a mature business with detailed service descriptions, partner and subsidiary links, and a focus on apprenticeships and sustainability. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security policies and advanced security headers. WHOIS data is unavailable due to domain registration errors, which raises some concerns about domain legitimacy, though the website content and structure suggest a legitimate and established business. Overall, the site scores well on business credibility and technical implementation but should improve privacy compliance and security transparency.

C

Cole Hire Van Hire London

colehire.co.uk

46

Cole Hire Van Hire London is a small, established vehicle rental company specializing in self-drive refrigerated and Luton van hire services primarily serving London and surrounding areas. The company offers a diverse fleet tailored to commercial and private clients, emphasizing flexibility and professional service. The website is built on WordPress with a modern, responsive design and includes SEO optimizations and social media integration, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and explicit cookie consent mechanisms. Overall, the website presents a trustworthy and professional image with room for improvement in privacy and security transparency.

E

Elmscot

elmscot.co.uk

54

Elmscot is a private nursery and early years education provider operating multiple nurseries in the Cheshire countryside, UK. The company emphasizes outdoor-led learning combined with traditional nursery education, targeting parents seeking high-quality childcare and early education. The website reflects a well-established business with multiple national awards and strong parent recommendations, positioning Elmscot as a reputable player in the nursery education sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, enhanced by performance tools like WP Rocket. It uses HTTPS and integrates Google Analytics for visitor tracking. The site is mobile-optimized and accessible, with a professional design and clear navigation. Security posture is good with HTTPS and hCaptcha on forms, but lacks visible security headers and explicit cookie consent mechanisms. The WHOIS data is unavailable due to a domain naming rules violation error, which is unusual and slightly reduces trustworthiness. However, the active and professional website content mitigates this concern. Overall, Elmscot presents a trustworthy and professional online presence with minor improvements recommended in privacy compliance and security headers to enhance user trust and regulatory adherence.

B

Bexhill Caring Community

bexhillcaringcommunity.org

39

Bexhill Caring Community is a small, established non-profit organization dedicated to providing a variety of support services to the elderly, housebound, and lonely individuals in the Bexhill area since 1965. Their services include volunteer befriending, home library services, equipment aids, domiciliary care, and community transport options. The organization relies heavily on volunteers and community support, positioning itself as a trusted local charity with a strong community focus. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and GiveWP for donations, integrating Stripe for secure payment processing. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and secure payment integration, but lacks important security headers and cookie consent mechanisms, which are recommended for GDPR compliance. WHOIS data is unavailable due to a malformed query, limiting domain trust verification. Overall, the website is professional, trustworthy, and serves its community purpose effectively, but could improve in privacy compliance and security best practices.

R

Royal Forestry Society

rfs.org.uk

57

The Royal Forestry Society (RFS) is a well-established UK-based educational charity dedicated to inspiring passion and excellence in woodland management. The organization offers a range of services including educational programs, events, grants, publications, and a membership model supported by an online store. The website reflects a professional and consistent brand presence targeting forestry professionals, educators, students, and conservation enthusiasts. The domain age and WHOIS data support the legitimacy and long-standing nature of the organization. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Ecwid for e-commerce functionality. It employs Google Analytics and Tag Manager for analytics and tracking, alongside a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent for privacy compliance. While some security headers are not explicitly visible in the HTML, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and security culture.

S

Serck Heat Transfer Ltd

serck-group.com

42

Serck Heat Transfer Ltd operates the website www.engine-cooling.com, specializing in the design and manufacture of engine cooling systems and cooling packs for a variety of industries including automotive, motorsport, agricultural, construction, heavy equipment, industrial machinery, and military applications. The company has a long history dating back to 1907 and positions itself as a reliable manufacturer with a broad product range including radiators, oil coolers, charge air coolers, and exhaust gas coolers. The website reflects a professional business presence with detailed product and technical information targeting industrial and commercial vehicle manufacturers and motorsport teams. Technically, the website is built on WordPress 6.7.6 with common plugins such as Yoast SEO, WPBakery Page Builder, LayerSlider, and Contact Form 7. It uses modern web technologies including jQuery and Google services like Tag Manager, Analytics, and reCAPTCHA for security and tracking. The site is mobile optimized and has good SEO practices, although accessibility features are basic. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS with a good SSL configuration and employs Google reCAPTCHA on forms to mitigate spam. However, it lacks explicit security headers and does not provide visible privacy, cookie, or terms of service policies, which are important for compliance and user trust. No vulnerabilities or suspicious content were detected. The WHOIS data for the domain is unavailable or missing, which reduces the domain trust score and raises questions about registration transparency. Overall, the website is professional and trustworthy in terms of content and business representation but would benefit from improved privacy compliance, security header implementation, and WHOIS transparency to enhance trust and security posture.

Meddserve is a French-language website focused on digital communication and content marketing, emphasizing the use of AI and micro-community engagement strategies. The site appears to serve as an informational or consultancy platform targeting businesses and marketers interested in modern digital marketing techniques. Technically, the site is built on WordPress with SEO and performance optimization plugins, uses HTTPS with a Content-Security-Policy header, and shows moderate performance and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy. The site lacks privacy, cookie, and terms of service policies, as well as contact information, which negatively impacts trust and compliance. Security posture is decent but could be improved with additional headers and visible policies. Overall, the site is functional and content-rich but lacks critical trust and compliance elements.

R

Razak & Co

razakandcompany.co.uk

45

Razak & Co is a small, established accounting firm based in Newcastle, UK, offering a comprehensive range of financial services including accounting, auditing, business support, payroll, and taxation. The company has a strong local presence with over 25 years of experience and a professional team. Their website reflects a professional and consistent brand image, targeting SMEs, sole traders, partnerships, and limited companies. The business model focuses on providing tailored accountancy solutions to a diverse client base in the finance sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Slick Slider, and Google Fonts. The site is mobile-optimized with good SEO practices implemented via the Yoast SEO plugin. Performance is moderate, and accessibility is basic but functional. The site uses Google Analytics for user tracking and includes social sharing features. However, there is no visible privacy or cookie policy, which is a compliance gap. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a formal vulnerability disclosure policy. The WHOIS data for the domain is unavailable due to a domain registration error, which raises concerns about domain legitimacy despite the professional website content. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website presents a trustworthy and professional front for a small accounting firm but should address privacy compliance and security header implementation. The domain registration inconsistency warrants further investigation to ensure legitimacy and trustworthiness.

L

Lounges

thelounges.co.uk

62

Lounges is a UK-based hospitality business operating a chain of café bars offering all-day food and drink with a community focus. The website showcases their services, menus, locations, and promotional events with a strong emphasis on user experience and brand consistency. Technically, the site uses modern frameworks such as Astro and WordPress CMS components, supported by robust SEO and accessibility features. The security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the site is mature, professional, and trustworthy, targeting a general audience with a mature focus due to alcohol promotion.

R

Rafael Micro

rafaelmicro.com

42

Rafael Micro is a medium-sized technology company specializing in radio frequency integrated circuit (RFIC) design, holding a significant share of the global TV receiver market. Their website presents a professional image with clear business focus on RFIC technology and related products such as IoT connectivity, optical networking, satellite communication, and set-top box receivers. The company targets technology manufacturers and telecommunications sectors. Technically, the website is built on WordPress using Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from improved transparency in domain registration and enhanced privacy and security disclosures.

H

Hospices of Hope

hospicesofhope.co.uk

61

Hospices of Hope is a UK-based charitable organization dedicated to providing specialist hospice care for patients with terminal or life-limiting illnesses, primarily supporting partners in South and East Europe. The organization operates through donations, fundraising events, charity shops, and medical supplies distribution, with a strong presence in the UK, Scotland, and North America. Their website reflects a mature digital presence with clear branding, comprehensive content, and active engagement channels including social media and newsletters. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience across devices. Security posture is solid with HTTPS and consent-based tracking, though some security headers could be improved. Overall, the site demonstrates high legitimacy and trustworthiness consistent with a well-established non-profit charity.

O

O'Neal Steel

onealsteel.com

62

O'Neal Steel is a well-established metal service center and industrial metal supplier with over 104 years of history, operating primarily in the United States. The company offers a wide range of metal products including aluminum, carbon and alloy steel, stainless steel, hot rolled, and cold-finished products, complemented by value-added processing services. Their market position is strong as part of the largest family-owned metal service center group in the USA, with 19 locations across the eastern half of the country. The business targets industrial and manufacturing customers requiring metal supply and custom processing solutions. Technically, the website is built on WordPress with a modern tech stack including SEO and analytics tools, and it demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS, cookie consent mechanisms, and bot protection, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations. The lack of WHOIS data is a minor concern but likely due to privacy protection. Strategic recommendations include enhancing security headers and publishing a formal security policy.

B

Business Mind Sp. z o.o.

businessmind.pl

38

Business Mind Sp. z o.o. is a Polish accounting and payroll service provider established in 2010, offering comprehensive financial support including accounting, payroll, tax advisory, and business intelligence services. The company targets small and medium enterprises, including foreign capital companies, and positions itself as a trusted partner with over 15 years of experience. Their website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions. Technically, the site runs on WordPress with modern plugins and analytics tools, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy and compliant with GDPR cookie consent requirements, though explicit privacy and terms of service pages were not found in the provided content.

E

Europrojekt Gdańsk S.A.

europrojekt.pl

42

Europrojekt Gdańsk S.A. is a well-established Polish design and consulting firm specializing in infrastructure projects such as roads, bridges, tunnels, and railways. With over 25 years of experience and more than 1100 projects completed, the company serves a broad client base primarily in Poland but also internationally through strategic partnerships. Their business model focuses on comprehensive project design and consulting services, targeting infrastructure investors and public sector clients. The website reflects a professional image with consistent branding and relevant content tailored to their industry. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, and various plugins enhancing functionality and SEO. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enabled and privacy compliance evident through a comprehensive privacy policy and cookie consent mechanism. However, there is room for improvement in security headers and incident response transparency. WHOIS data is not publicly available, indicating privacy protection, which is justified for this business type. Overall, the website and business present a trustworthy and credible profile with moderate technical sophistication and good compliance practices.

C

C Kristoffersen Fargehandel AS

c-kristoffersen.no

51

C Kristoffersen Fargehandel AS operates a modern paint retail business with over 160 years of experience spanning six generations. The company offers a wide range of products and professional services including interior and exterior painting, flooring, wallpaper, curtain tailoring, and sun shading solutions. Positioned as a trusted local retailer in Norway, the company targets both consumers and professional craftsmen. The website reflects a professional digital presence with multimedia content, social media integration, and a cookie consent mechanism, indicating awareness of privacy regulations. However, the absence of WHOIS data and explicit privacy and terms of service pages limits transparency and compliance completeness. Technically, the site is built on WordPress with modern frameworks and SEO optimization, but lacks some security headers and explicit incident response information. Overall, the business appears legitimate and well-established, but could improve its security posture and privacy disclosures.

V

Vellenes fellesorganisasjon

velnett.no

52

Vellenes fellesorganisasjon (VFO) is a Norwegian nationwide non-profit organization dedicated to supporting neighborhood associations, local community groups, and similar entities. The organization provides advisory services, favorable insurance options, and acts as a national voice for local voluntary initiatives. The website is built on WordPress using modern plugins such as Yoast SEO and Gutenberg blocks, indicating a contemporary digital infrastructure. The site is well-structured, mobile-optimized, and uses HTTPS with a valid SSL certificate, ensuring secure communications. However, the absence of explicit privacy and cookie policies, security headers, and contact information reduces the overall compliance and security posture. No signs of WAF or content blocking were detected, and the domain age of over 13 years supports the legitimacy of the organization.

Nordic Protection is a Norwegian company specializing in manufacturing and retailing protective eyewear with prescription lenses, operating since 1999. The website presents a professional product catalog with clear navigation and consistent branding, targeting industrial and professional users requiring safety glasses. The company holds the Miljøfyrtårn environmental certification, indicating commitment to sustainability. Technically, the website is built on WordPress 6.9.5, utilizing jQuery and Yoast SEO for enhanced search engine optimization. Google Analytics is implemented with IP anonymization, reflecting some privacy awareness. However, the site lacks explicit privacy and cookie policies, and no contact emails or phone numbers are visible on the homepage, which may affect user trust and compliance. Security headers are not detected, suggesting room for improvement in security posture. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

U

Utstillingsplassen

upl.no

56

Utstillingsplassen is a well-established Norwegian real estate company with a history dating back to 1852. It is positioned as the largest real estate company in the inland region of Norway, offering property management, leasing, residential and commercial development, and sustainability-focused projects. The website reflects a professional business with clear branding and a focus on trust and sustainability. Technically, the site is built on WordPress using modern plugins and themes, with good SEO and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. Overall, the site is credible and trustworthy with room for improvement in privacy compliance and security transparency.

T

The California Wellness Foundation

calwellness.org

54

The California Wellness Foundation is a well-established non-profit organization dedicated to advancing health and wellness in California through grantmaking and strategic community initiatives. The website reflects a professional and consistent brand presence, targeting non-profit organizations, community groups, and health advocates. Their business model centers on funding and empowering community health projects, positioning them as a key player in the California wellness sector. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google reCAPTCHA v3, Google Tag Manager, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. Performance is moderate, with asynchronous loading of scripts to improve user experience. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks some recommended security headers and a public security or incident response policy. Privacy compliance is good with a comprehensive privacy policy and terms of service, though the absence of a cookie consent banner is a minor compliance gap. WHOIS data is unavailable due to privacy protection, which is justified for this non-profit entity. Overall, the site presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers, cookie consent, and public security policies would enhance their security posture and compliance standing.

N

Newlife the Charity for Disabled Children

newlifecharity.co.uk

67

Newlife Charity is a UK-based non-profit organization dedicated to supporting disabled children and their families by providing specialist equipment, play opportunities, and nursing support. The charity operates through donations, fundraising, retail, and volunteer engagement, positioning itself as a trusted and established entity within the UK charitable sector. The website reflects a professional and user-friendly digital presence with clear navigation, comprehensive content, and strong branding consistency. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google Site Kit, ensuring good SEO and analytics integration. The site is mobile-optimized and performs well, with accessibility features in place. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although some security headers are missing which could be improved. The WHOIS data for the domain is unavailable due to a registration error indicating the domain name contains too many parts, which is unusual but does not appear to affect the legitimacy of the website. No contact emails or phone numbers are explicitly listed on the homepage, but social media channels and official charity registration details provide trust signals. Overall, the website demonstrates a strong commitment to privacy, accessibility, and user experience, with minor technical and security improvements recommended to enhance trust and compliance further.

A

APILayer

apilayer.com

70

APILayer operates a comprehensive API marketplace offering over 40 production-ready APIs spanning finance, geolocation, weather, data, and AI services. The platform targets developers, startups, and enterprises, providing a unified account and single API key for seamless integration and scaling. With a strong market position supported by a large developer base and consistent branding, APILayer demonstrates a mature business model focused on developer productivity and API accessibility. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, enhanced by SEO tools such as Yoast and analytics integrations including Google Analytics and Facebook Pixel. The site is well-optimized for performance, mobile responsiveness, and accessibility, hosted behind Cloudflare CDN services ensuring fast and reliable delivery. From a security perspective, APILayer enforces HTTPS with good SSL configuration and avoids exposing sensitive data. However, there is room for improvement by enabling DNSSEC, implementing comprehensive security headers, and publishing explicit security policies and incident response contacts. Privacy compliance is well addressed through clear privacy and cookie policies linked to the parent company domain, with GDPR considerations evident. Overall, APILayer presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing DNS security, formalizing security policies, and expanding transparency around vulnerability disclosures to further strengthen trust and compliance.

A

Arginta

arginta.lt

37

Arginta is a Lithuanian engineering and construction company specializing in municipal water, wastewater, and sludge treatment infrastructure. Established in 1991, it has over 30 years of experience and a portfolio of more than 130 projects, positioning itself as a leading player in the energy and environmental engineering sector in Lithuania. The company emphasizes FIDIC compliance, efficiency, and long-term sustainable solutions. Their services range from consulting and design to project development, construction, equipment installation, and ongoing operation and maintenance. The website is professionally designed, multilingual, and provides comprehensive information about their expertise and projects.

K

kelioniumanija.lt

kelioniumanija.lt

42

kelioniumanija.lt is a Lithuanian travel and lifestyle blog providing articles, guides, and tips focused on travel destinations both in Lithuania and internationally. The site targets travel enthusiasts and general audiences interested in exploring the world. It operates on a WordPress platform with a modern theme and SEO plugin, indicating a moderate level of digital maturity. The website is hosted behind Cloudflare DNS and uses HTTPS with Google Analytics for visitor tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is accessible, professionally designed, and content-rich but would benefit from enhanced privacy and security practices.

U

UAB Indema

indema.lt

42

UAB Indema is a Lithuanian construction and real estate development company with over 12 years of experience. The company focuses on construction project management, general contracting, engineering solutions, and real estate development, serving both local and international clients. Their website is professionally designed using WordPress and Elementor, featuring clear navigation, responsive design, and SEO optimization. The site includes GDPR-compliant cookie consent mechanisms and integrates Google Analytics and reCAPTCHA for security and analytics. Security posture is good with HTTPS and basic security best practices, though there is room for improvement in security policy transparency and HTTP headers. WHOIS data shows some inconsistencies, notably a domain creation date in the future, which may be a data error but slightly impacts trust. Overall, the website is safe, professional, and trustworthy, with clear contact information and business legitimacy.

U

UAB „Marijampolės nekilnojamojo turto agentūra“

mnta.lt

39

UAB „Marijampolės nekilnojamojo turto agentūra“ operates a professional website offering comprehensive valuation services for real estate, movable assets, and businesses primarily in Lithuania. The company is positioned as an established local player with certifications recognized by Lithuanian regulatory bodies and acceptance by major banks. The website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are missing. The WHOIS data presents inconsistencies, notably a domain creation date in the future, which requires verification. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations.

S

Staticus

staticus.lt

53

Staticus is a well-established full-service façade engineering company operating primarily in Northern Europe, with over 20 years of experience. The company offers comprehensive façade solutions including design, production, installation, and maintenance, positioning itself as one of the largest façade contractors in Europe. Their business model focuses on delivering sustainable and benchmark-setting projects to clients in the construction and real estate sectors. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern plugins and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and MailerLite. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though there is room for improvement in DNS security and explicit incident response disclosures. Overall, the site is trustworthy, compliant with GDPR, and demonstrates a strong business credibility.

W

Wasing Estate

wasing.co.uk

61

Wasing Estate is a niche rural estate business in the United Kingdom offering a diverse range of services including weddings, events, wellbeing workshops, wild swimming and sauna experiences, organic farming, fisheries, and marina facilities. The website presents a professional and well-structured digital presence with good SEO and mobile optimization, targeting individuals and groups interested in unique event venues and wellbeing retreats in a rural English setting. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and CookieYes for consent management, and it leverages Google Tag Manager and TikTok Analytics for marketing and tracking purposes. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The WHOIS data is unavailable due to domain naming rules violations, which raises some concerns about domain registration transparency but does not detract from the website's operational professionalism. Overall, the site scores well in content quality and business credibility but should address privacy policy visibility and WHOIS transparency to enhance trust.

R

ResourceiT

resourceit.net

56

ResourceiT is a UK-based, award-winning channel marketing agency specializing in content creation, demand generation, and training services for IT businesses. Established in 2003, the company has built a strong market position with over 7,000 projects delivered and partnerships with leading technology vendors such as Microsoft and Logitech. Their website reflects a professional and consistent brand image, targeting B2B technology companies seeking to grow their channel presence and lead generation capabilities. Technically, the site is built on WordPress with modern frameworks and integrates multiple marketing and analytics tools, demonstrating digital maturity and good performance. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not publicly disclosed. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy page. Overall, the website is trustworthy and professional, with room for improvement in privacy and security transparency.

B

Boothroyd & Company

boothroyd.co.uk

48

Boothroyd & Company is an independent estate and letting agency based in Kenilworth, Warwickshire, specializing in residential property sales, lettings, and management. The company positions itself as a trusted local expert with multiple customer service awards, targeting property buyers, sellers, landlords, and tenants in the local area. Their business model focuses on personalized service and local market knowledge, supported by a professional website showcasing their services and customer testimonials. Technically, the website is built on WordPress using popular plugins such as PropertyHive and Contact Form 7, with integrations for Google Analytics and Google reCAPTCHA to enhance user experience and security. The site demonstrates good SEO practices and mobile optimization, although some accessibility features could be improved. Performance is moderate, with modern web technologies employed. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies indicates a compliance gap with GDPR and related regulations. WHOIS data for the domain is unavailable due to a domain naming rules error, which limits the ability to fully verify domain legitimacy. Overall, the website presents a professional and trustworthy front for a small local real estate business, but improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and security posture.

A

Alsecure Group Ltd

alsecure.com

52

Alsecure Group Ltd is a family-owned UK-based security company established in 1968, specializing in electronic security systems and security guarding services primarily in the North-West of England. The company offers a comprehensive range of services including installation, monitoring, and maintenance of intruder alarms, fire systems, CCTV, and access control, alongside manned guarding, mobile patrols, keyholding, and alarm response. Their market position is supported by accreditations such as SafeContractor, SSAIB registration, and employing SIA licensed officers, which enhances their credibility in the security sector. Technically, the website is built on WordPress using the Enfold theme and integrates modern web technologies including jQuery and Yoast SEO for optimization. The site is mobile responsive and well-structured, providing a good user experience. However, some technical improvements such as implementing security headers and a cookie consent mechanism could enhance security and privacy compliance. From a security perspective, the website uses HTTPS and does not expose sensitive data or vulnerable libraries. Certifications and accreditations are clearly displayed, reinforcing trust. The absence of incident response and vulnerability disclosure policies, along with missing WHOIS domain registration data, are notable gaps that could impact trustworthiness. Overall, the website presents a professional and trustworthy image for a small UK security services provider, but the lack of domain WHOIS data and privacy compliance mechanisms suggest areas for improvement. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and verifying domain registration details to strengthen legitimacy and compliance.

R

Rapid9 Signs

rapid9signs.com

44

Rapid9 Signs is a small, specialist signage and display printing company based in Newcastle upon Tyne, UK. The company offers a comprehensive range of services including large format digital printing, property marketing signage, retail and business signage, cut vinyl, safety and directional signage, vehicle livery, office signage, and design services. Their market position is that of a local expert providing end-to-end signage solutions with professional installation. The website is built on WordPress and uses common web technologies such as jQuery and Modernizr, with SEO optimization via Yoast plugin. The site is mobile-optimized and provides clear navigation and business contact information. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and cookie consent mechanisms. No incident response or vulnerability disclosure information is present, indicating room for improvement in security transparency and compliance. Overall, the website presents a professional business front but would benefit from enhanced security practices and verified domain registration.

K

Knowledge Change Action

kca.training

57

Knowledge Change Action (KCA) is a UK-based training and development consultancy specializing in trauma-informed practice. They provide a broad range of services including in-person training, leadership development, consultancy, e-learning, and event management. The company is positioned as a pioneer in trauma-informed practice in the UK, trusted by over 200 local authorities and serving thousands of participants annually. Their website reflects a professional and consistent brand with comprehensive content tailored to leaders and practitioners in education, social care, health, and justice sectors. Technically, the site is built on WordPress with modern plugins for SEO and analytics, demonstrating a moderate to good digital maturity. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, though the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site is trustworthy and well-maintained, but enhancing privacy compliance and security best practices would strengthen their risk profile.

P

Possum

possum.co.uk

55

Possum is a UK-based company specializing in assistive technology and telecare solutions aimed at enhancing the lives of individuals with disabilities, elderly people, and care homes. Their product portfolio includes GPS devices, telecare equipment, and solutions tailored for conditions such as dementia, epilepsy, and learning disabilities. The website is professionally designed using WordPress and Elementor, with good SEO practices and moderate performance. The technical infrastructure leverages modern web technologies and integrates Google Analytics for user insights. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. The domain WHOIS data is unavailable due to domain naming rules violations, which raises some concerns about domain registration legitimacy but does not detract from the professional presentation and business credibility of the site. Overall, the website is a reliable digital presence for a medium-sized healthcare technology provider.

R

Regina Miracle International (Holdings) Limited

reginamiracleholdings.com

45

Regina Miracle International (Holdings) Limited is a well-established Hong Kong-based manufacturer specializing in intimate wear and related product categories, operating under a unique Innovative Design Manufacturing (IDM) business model. The company is publicly listed and positions itself as a global leader with a strong focus on innovation, design, and manufacturing excellence. Their website reflects a professional corporate presence with detailed investor relations and sustainability information. Technically, the site is built on WordPress with a modern tech stack including jQuery, various carousel libraries, and Google reCAPTCHA for form security. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is credible and trustworthy, supporting the company's market position and business model.

P

PM Results

pmresults.co.uk

40

PM Results is a UK-based consultancy specializing in Future of Work and Project Management services, targeting small and medium businesses. The company offers consultancy, training, mentoring, and publishes books related to remote work and project management. The website is built on WordPress using the Divi theme and several plugins including Yoast SEO and Google Analytics for tracking. The site is professionally designed with good navigation and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable due to domain naming rules violation, which reduces domain trustworthiness. Overall, the site is functional and professional but would benefit from improved privacy disclosures and security transparency.

P

Pave Fix Ltd

pavefix.co.uk

48

Pave Fix Ltd is a UK-based small manufacturing company specializing in advanced epoxy resin products tailored for the building trade. Their product line includes the Pointfix epoxy jointing compound, designed to be mess-free and easy to apply, targeting construction professionals and contractors. The company has maintained a consistent online presence since 2013, with a website built on WordPress using the Avada theme and enhanced by Yoast SEO for search optimization. Social media engagement is evident through Facebook, Twitter (X), and YouTube channels, supporting their market outreach. Technically, the website employs modern web technologies including jQuery and Google Analytics for user tracking. Hosting is provided by Krystal Hosting Ltd, a reputable UK hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are well implemented, but there is room for improvement in security headers and explicit privacy documentation. From a security perspective, the site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism, indicating awareness of privacy compliance. However, the absence of explicit privacy policies, terms of service, and incident response contacts suggests gaps in comprehensive security and compliance posture. No critical vulnerabilities or suspicious activities were detected in the analyzed content. Overall, Pave Fix Ltd presents a professional and trustworthy online presence consistent with a specialized manufacturing business. Strategic enhancements in security policies, privacy documentation, and security headers would strengthen their compliance and trustworthiness further.

R

Reel Solutions

reelsolutions.co.uk

59

Reel Solutions is a UK-based small media consultancy and service provider specializing in cinema and film programming, education, event cinema promotion, distribution, and business planning. Established in 2006, the company targets cinema operators, film festivals, and young filmmakers, offering a range of services including training through the BFI Film Academy scheme and large-scale live music film projects. The website reflects a professional and consistent brand with clear service offerings and a strong presence in the UK cinema sector. Technically, the site is built on WordPress with common plugins for SEO, analytics, and cookie consent, showing moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the use of an outdated jQuery version and lack of security headers present potential risks. The absence of WHOIS data due to domain naming rules errors reduces domain trustworthiness, though the website content and business information appear legitimate and professional. Overall, the site scores well on content quality, privacy compliance, and business credibility, with recommendations to update technical components and enhance security practices.

M

McCullagh Machinery

mccullaghmachinery.com

42

McCullagh Machinery is a well-established company specializing in the sale of premium quality farm and plant machinery across Ireland and the UK. Operating since 2005, the company offers a wide range of new and used agricultural equipment including tractors, diggers, handlers, trailers, and attachments. Their physical presence in Bellanaleck, Co Fermanagh, and active social media engagement reinforce their market position as a reputable machinery dealer. The website reflects a professional business model focused on retail and servicing of agricultural machinery with finance options available to customers. Technically, the website is built on WordPress with modern UIkit framework and SEO optimization via Yoast plugin. It integrates Google Analytics with consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting appears to leverage Azure Blob Storage for media assets, and the domain is registered with eNom, LLC since 2005, showing consistency and legitimacy. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer lock enabled. However, it lacks critical compliance documents such as privacy and cookie policies, and no explicit security or incident response policies are published. There is no security.txt or vulnerability disclosure mechanism, which are recommended for transparency and security maturity. The use of Google Analytics is evident, but privacy compliance is weak due to missing policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency. Strategic improvements in these areas would reduce risk and improve customer trust.

C

Cutless Bearings for Marine, Pump Applications | Exalto UK

exalto.co.uk

47

Exalto UK Ltd is a manufacturer specializing in high-quality rubber-lined and composite cutlass bearings for the marine and pump industries. Established in 2000, the company holds reputable certifications such as the ABS PDA certification, positioning itself as a trusted supplier with a medium-sized operation based in the United Kingdom. Their website reflects a professional business model focused on manufacturing and direct sales to industry professionals. The digital infrastructure is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. However, there is room for improvement in accessibility and performance optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and explicit security policies. Privacy compliance is minimal, with no cookie consent mechanism or GDPR indicators visible. Overall, the website is trustworthy and professional, but could enhance its privacy and security transparency to better align with compliance standards.

S

Saunders Metals Ltd

saundersmetals.co.uk

68

Saunders Metals Ltd is a well-established scrap metal recycling company based in Swindon, UK, with a history dating back to 1979. The company offers a range of services including scrap metal purchasing, vehicle recovery, and recycling of catalytic converters and car batteries. They provide next day payment and handle all necessary DVLA paperwork, positioning themselves as a convenient and reliable local service provider. The website reflects a professional and consistent brand image with clear contact details and trust indicators such as SecureTrust certification and DVLA compliance logos. Technically, the website is built on WordPress with modern plugins and integrations including Yoast SEO, Google Tag Manager, and reCAPTCHA, indicating a mature digital infrastructure. The site is mobile optimized, uses HTTPS, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics, though some improvements in security headers and accessibility could be made. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, secure forms, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. Overall, the website and business present a low-risk profile with strong business credibility and compliance posture. The main limitation is the lack of WHOIS data due to a domain query error, which slightly reduces confidence in domain legitimacy verification. Strategic recommendations include improving security headers, publishing security policies, and enhancing accessibility compliance to further strengthen trust and security posture.

P

Printmarshall Creative

printmarshall.co.uk

45

Printmarshall Creative is a small UK-based business specializing in graphic design and printing services, including business cards, brochures, leaflets, wedding items, and promotional gifts. The company targets local businesses and individuals in Peterborough and surrounding areas, positioning itself as a reliable partner for print projects of various scales. The website is professionally designed using WordPress with SEO optimization and social media integration, reflecting a moderate level of digital maturity. Technically, the site employs common web technologies and plugins but lacks some advanced security headers and explicit privacy documentation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response information are recommended. Overall, the site is trustworthy and safe for general audiences, but the domain WHOIS data is unavailable due to registration issues, which slightly impacts the trust assessment.

M

McGarry Memorials (Manchester) Ltd

memorialsmanchester.com

53

McGarry Memorials (Manchester) Ltd is a longstanding family-run business specializing in memorial masonry services in Manchester, UK. Established in 1919, the company offers a range of services including new memorials, inscriptions, cleaning, renovations, and cremation products. The website reflects a professional and consistent brand image with clear service offerings and a focus on quality and customer service. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and WPBakery Page Builder, hosted via IONOS SE. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers. No privacy policy or terms of service pages were found, indicating room for compliance improvement. Overall, the domain registration data supports the legitimacy of the business with consistent information and no privacy protection masking registrant details.

S

Steel Technologies LLC

steeltechnologies.com

47

Steel Technologies LLC is a large manufacturing company specializing in steel production, value-added processing, and logistics services with a broad geographic footprint across North America. The company positions itself as a world-class steel supplier with extensive capabilities and a strong supply chain, targeting industrial customers primarily in the United States and Mexico. Their business model focuses on delivering cost-saving advantages through strategically located facilities and comprehensive customer support, including 24/7 internet access and vendor managed inventory. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Tag Manager, and Google Analytics integrated for tracking and analytics. The site is mobile optimized with good SEO practices and a professional design. Hosting details are not explicitly identified, but the site uses HTTPS with excellent SSL configuration, ensuring secure communications. From a security perspective, the site employs HTTPS and secure customer portal redirection but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS registration data is a concern, although the website content and certifications support the legitimacy of the business. Overall, the website presents a professional and trustworthy front for Steel Technologies LLC, with room for improvement in privacy compliance and security header implementation. The missing WHOIS data warrants further investigation to confirm domain registration legitimacy.