Jersey security reports

S

Signtech

signtech.je

57

Signtech is a medium-sized signage manufacturer based in the Channel Islands, offering a comprehensive range of signage and branding products and services. Their website reflects a professional and consistent brand presence, targeting businesses and organizations in the region. The technical infrastructure is built on WordPress with modern plugins and technologies, supporting a good user experience and mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but missing privacy and terms of service pages. Overall, the domain registration and WHOIS data support the legitimacy of the business. Strategic improvements in privacy documentation and security headers would enhance trust and compliance.

G

Good Moves Limited

goodmoves.je

53

Good Moves Limited is a well-established local business in Jersey specializing in home and office removals, storage solutions, and crate hire services. With over 25 years of experience, the company targets both residential and commercial clients, positioning itself as a trusted expert in the relocation and storage industry. The website clearly communicates their services and expertise, supported by a consistent brand presence and active social media channels.

A

Adapt Design and Advertising Limited

adaptdesign.com

45

Adapt Design and Advertising Limited is a small creative agency based in Jersey, Channel Islands, specializing in design, advertising, brand identity, print, and website development. Established in 1997, the company serves startups, large businesses, and marketing teams with a comprehensive suite of creative services. Their market position is strengthened by a long-standing local presence and referrals extending beyond Jersey. The website reflects a professional and consistent brand image with extensive service offerings and client testimonials, indicating a trustworthy and credible business. Technically, the website employs common industry tools such as Google Analytics, Google Tag Manager, jQuery, Owl Carousel, and Revolution Slider. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. However, no CMS or hosting provider details are evident, and some modern security best practices like security headers are missing. From a security perspective, the website uses HTTPS (implied by external scripts loaded over HTTPS), but lacks visible security headers and explicit incident response or security policy information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts trustworthiness. Privacy and cookie policies exist but lack active consent mechanisms, indicating partial GDPR compliance. Overall, the website presents a professional and content-rich experience with moderate technical maturity and some security gaps. The missing WHOIS data and limited security policies suggest areas for improvement to enhance trust and compliance. Strategic recommendations include implementing security headers, enforcing cookie consent, clarifying domain registration details, and enhancing incident response readiness.

S

Salty Dog Bar & Bistro

saltydogbistro.com

58

Salty Dog Bar & Bistro is a well-established hospitality business located in Jersey, offering a coastal dining experience with a focus on authentic Jersey produce and global fusion cuisine. The website reflects a mature business with over 25 years of local presence, providing services including brunch, lunch, dinner, take away, gift cards, and table reservations. The site is professionally designed with clear navigation and strong branding consistency, targeting a general audience interested in dining and social experiences. Technically, the website is built on WordPress using Elementor and several popular plugins for SEO, marketing, and social media integration. Hosting is provided by Bluehost Inc., and the domain is long-standing and consistent with the business claims. Security posture is good with HTTPS enabled and some security headers present, though improvements are recommended such as enabling DNSSEC and adding a security.txt file. Privacy compliance is strong with comprehensive policies and a cookie consent mechanism. Overall, the website is trustworthy, professional, and well-positioned in the hospitality market.

T

Total Solutions Group (TSG) Jersey

tsg.je

61

Total Solutions Group (TSG) Jersey is a leading information management and technology services provider based in Jersey, serving clients across the Channel Islands, UK, Gibraltar, Mauritius, and South Africa. The company offers a broad range of services including document management, scanner hardware support, robotic process automation, GDPR consultancy, and information security. Their market position is strong regionally, supported by partnerships with recognized technology providers such as Kofax and Mitratech. The website reflects a professional business model focused on B2B services with clear contact channels and trust indicators such as Cyber Essentials certification. Technically, the website is built on WordPress using modern plugins like WPBakery Page Builder and LayerSlider. It employs HTTPS with good SSL configuration and includes responsive design elements for mobile optimization. However, some technical improvements are recommended, including the implementation of security headers and proper configuration of analytics tools. The website's performance is moderate with basic SEO and accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. The presence of Cyber Essentials certification indicates a commitment to security standards. However, the absence of security headers and lack of an incident response or vulnerability disclosure policy are areas for improvement. Privacy compliance is partially met with privacy and cookie policies present, but the lack of a cookie consent mechanism reduces compliance confidence. Overall, the website is trustworthy, professional, and well-positioned in its market niche. Strategic recommendations include enhancing security headers, implementing cookie consent, configuring analytics properly, and publishing explicit security and incident response policies to strengthen compliance and trust.

C

CSS Ship Services

css-shipservices.com

47

CSS Ship Services is a specialized offshore maritime recruitment company headquartered in Jersey, Channel Islands. Established in 2013, it offers recruitment and placement services across sectors such as ROV, seismic, survey, and maritime operations. The company targets both job seekers and maritime companies, providing a global network of personnel and emphasizing quality and client satisfaction. The website reflects a professional and consistent brand with clear navigation and relevant content tailored to its niche market. Technically, the site uses modern JavaScript frameworks and tools, including Vite, Alpine.js, and integrates Google Analytics and Klaviyo for marketing and analytics. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and CSRF protection on forms, but lacks DNSSEC and security headers. Privacy compliance is partial, with a basic privacy policy but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

J

Jersey Business

jerseybusiness.je

72

Jersey Business is a local business support organization providing free, independent, and confidential advice and support to businesses in Jersey. The website offers a comprehensive range of services including guides, funding opportunities, events, and news targeted at businesses at all stages of their journey. The technical infrastructure is modern, leveraging React, Umbraco CMS, and various JavaScript libraries to deliver a responsive and interactive user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not present, which could be improved. Overall, the website demonstrates a professional and trustworthy presence with good content quality and user experience.

D

Digital Jersey

digital.je

69

Digital Jersey is a prominent technology hub based in Jersey, focused on fostering the growth of the island's digital industries. It provides strategic support, digital skills training, and community engagement initiatives to nurture innovation and attract inward investment. The organization positions itself as a central player in Jersey's digital ecosystem, offering membership programs and hosting events to connect digital entrepreneurs and businesses. The website infrastructure is built on WordPress, leveraging modern technologies such as Google Tag Manager, HubSpot, Algolia search, and Cookiebot for consent management. The site is well-optimized for mobile devices, features comprehensive SEO metadata, and integrates various analytics and marketing tools to monitor and enhance user engagement. Security posture is strong with HTTPS enforced, use of reCAPTCHA for form protection, and a robust cookie consent mechanism. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. Overall, Digital Jersey presents a trustworthy and professional digital presence with a solid technical foundation and compliance posture. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining vigilance on third-party scripts to sustain security and trust.

S

States Assembly

statesassembly.je

71

The States Assembly website serves as the official digital presence of Jersey's elected parliament, providing comprehensive legislative information, updates on assembly business, scrutiny reports, and public engagement tools such as petitions and newsletters. The site targets residents of Jersey and stakeholders interested in governmental affairs, positioning itself as a transparent and authoritative source of parliamentary information. Technically, the website leverages modern web technologies including Kentico CMS, jQuery, Chart.js, and Google Tag Manager, ensuring a responsive and accessible user experience across devices. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data, though explicit security headers and incident response policies could be improved. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its audience.

C

Comité Des Connétables

comite.je

67

The Comité Des Connétables website serves as the official online presence for the administrative body representing the 12 parishes of Jersey. It provides comprehensive information about parish governance, officers, and related committees, including data protection and freedom of information resources. The site targets residents and officials within Jersey, offering both informational content and links to online services relevant to parish administration. Technically, the website is built on WordPress with modern libraries such as jQuery, DataTables, and Swiper, ensuring a responsive and accessible user experience. SEO is well-implemented with Yoast SEO plugin integration and proper meta tags. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and implements a cookie consent mechanism compliant with GDPR. However, it lacks some advanced security headers and a dedicated security policy or vulnerability disclosure page. Overall, the site is trustworthy, professionally maintained, and aligned with its governmental role.

S

States of Jersey

gov.je

71

The Government of Jersey website serves as the official digital portal for the States of Jersey, providing comprehensive information and public services to residents and visitors of the island. It offers a wide range of services including tax filing, job listings, consultations, news updates, and access to government departments. The site is well-positioned as the authoritative source for government-related information in Jersey, targeting a broad audience that includes citizens, businesses, and tourists. Technically, the website leverages a mature infrastructure based on Microsoft SharePoint, enhanced with modern web technologies such as jQuery, Bootstrap, and Google Tag Manager. It integrates multiple third-party services for analytics, cookie consent management, and performance monitoring. The site demonstrates good mobile optimization, accessibility features, and SEO practices, reflecting a solid digital maturity. From a security perspective, the site enforces HTTPS, employs CSRF protection, and uses a cookie consent mechanism compliant with GDPR. However, it lacks publicly available dedicated security policies or incident response information, which could be improved to enhance transparency and trust. No critical vulnerabilities or security issues were detected in the content analyzed. Overall, the website presents a trustworthy and professional government portal with strong compliance to privacy and accessibility standards. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and enhancing security headers to further strengthen the security posture.

J

Jacksons (CI) Limited Trading as Van Mossel Jacksons

jacksonsci.com

58

Van Mossel Jacksons is a well-established automotive dealership based in Jersey, representing a portfolio of premium automotive brands including Aston Martin, Audi, Bentley, BMW, Jaguar, Land Rover, Mercedes-Benz, MINI, Porsche, Smart, Volkswagen, and Volvo. The company operates as part of the larger Van Mossel Automotive Group, which has a strong European presence and a 77-year heritage. The website reflects a professional and customer-focused business model, offering new and used car sales, servicing, finance, and other automotive-related services. The target audience primarily consists of car buyers and owners in Jersey and Guernsey seeking premium vehicles and related services. Technically, the website employs modern frontend technologies such as Alpine.js, integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and Cookiebot for privacy compliance. The site is hosted on Amazon CloudFront CDN, ensuring good performance and availability. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Contact information is clearly presented, enhancing business credibility. Overall, the website demonstrates a mature digital presence aligned with the company's market position and business objectives.

M

MasonBreese

masonbreese.com

51

MasonBreese is a professional management consultancy specializing in change and transformation services, including strategic change programmes, digital and cultural integrations, and business transformations. Positioned as a trusted advisor, the company serves clients primarily in Jersey and has a regional presence in Switzerland. Their key services include change management, data automation, coaching, and training, supported by a team of over 50 expert consultants. The website reflects a strong market position with clear branding, professional content, and trust indicators such as B Corp certification and numerous professional qualifications. Technically, the website is built on WordPress and leverages modern technologies such as jQuery, Google Tag Manager, and Google reCAPTCHA for analytics and security. The site is mobile-optimized with good SEO practices and moderate performance. However, some improvements in accessibility and security headers could enhance the technical posture. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms, indicating a good baseline security posture. There is no visible security policy or incident response information, which could be areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, MasonBreese presents a credible and professional online presence with strong business credibility and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen trust and compliance.

R

Rossborough Insurance

rossborough.co.uk

50

Rossborough Insurance is a well-established insurance brokerage operating primarily in the Channel Islands and Isle of Man, offering a broad range of personal and business insurance products. As a subsidiary of Gallagher, it benefits from strong market positioning and trust signals such as regulatory compliance and chartered broker status. The website reflects a professional and consistent brand image with clear navigation and comprehensive service information tailored to local residents. Technically, the site leverages modern web technologies including ASP.NET, jQuery, and integrates third-party services for analytics, customer feedback, and consent management. Security posture is strong with HTTPS enforcement, anti-CSRF measures, and bot management via Cloudflare, though explicit security policies and incident response details are not published. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates a mature digital presence with good user experience and trustworthiness.

A

Appleby

applebyglobal.com

61

Appleby is a prominent international offshore law firm with a large global presence, comprising over 500 staff including 80 partners across 10 offices. The firm specializes in providing expert legal advice in corporate, dispute resolution, property, regulatory, and private client and trusts sectors. Their integrated service model includes corporate administration through Appleby Global Services, enhancing their comprehensive client offerings. The website reflects a mature digital infrastructure with WordPress CMS, modern analytics, and accessibility tools, supporting a professional and user-friendly experience. Security posture is strong with HTTPS, cookie consent mechanisms, and no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high business credibility and compliance with privacy regulations, positioning Appleby as a trusted leader in offshore legal services.