New Zealand security reports

The website foggydalefarm.co.nz is currently inaccessible due to rate limiting or blocking mechanisms, as evidenced by the minimal HTML content displaying only 'local_rate_limited'. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered since 2015 under a New Zealand registrar with standard domain protection statuses, indicating a legitimate registration consistent with a small business farm entity. However, no metadata, contact details, or policy documents are available for review. The lack of accessible content severely limits the ability to assess the company's digital maturity, security posture, or compliance status. Given the blocking, the overall AI score is low, reflecting the inability to perform a comprehensive analysis.

G

G & J Joinery

gjjoinery.co.nz

51

G & J Joinery is a small, local master joiner business based in Glen Eden, Auckland, New Zealand, specializing in high-quality timber joinery for residential, commercial, architectural, and heritage projects. The company emphasizes craftsmanship, customer satisfaction, and guarantees their joinery work for 15 years, positioning themselves as a trusted provider with over 50 years of collective experience. Their website reflects a professional and consistent brand image targeting local clients seeking bespoke timber joinery solutions. Technically, the website is built on the Rocketspark CMS platform, utilizing jQuery, Vue.js, and Typekit fonts, hosted with Cloudfront CDN. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious or minimal tracking approach. From a security perspective, the site uses HTTPS and does not expose sensitive data, but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear genuine and professional. Overall, the website presents a trustworthy and professional business front but would benefit from improved privacy compliance, enhanced security headers, and verification of domain registration to strengthen trust and security posture.

E

eDIY Software

ediy.co.nz

51

eDIY Software is a New Zealand-based small business specializing in web design, ecommerce software, and web hosting services primarily targeting small to medium businesses and organizations within New Zealand. The company offers a proprietary CMS and ecommerce platform with features such as Bitcoin payment integration, bulk email marketing, and custom web development. Their market position is that of a local, established provider with over two decades of domain presence and a focus on affordable, DIY website solutions. Technically, the website uses Bootstrap and custom JavaScript, with a proprietary CMS platform. Hosting is provided by Dreamscape Networks International Pte Ltd (Crazy Domains), a known NZ registrar and hosting provider. The site performance is moderate with basic mobile optimization and accessibility. Analytics are handled via a self-hosted Matomo instance, indicating some privacy consideration, though no cookie consent or privacy policies are present. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies is a compliance gap, especially for GDPR. The domain WHOIS data is consistent with a legitimate business, with a long registration history and no privacy protection. Overall, the website is professional and trustworthy but would benefit from improved security headers, privacy compliance, and enhanced mobile and accessibility features. Strategic improvements in these areas would strengthen the company's digital maturity and customer trust.

W

Whites Powersports

whitespowersports.com

69

Whites Powersports operates as a medium-sized retail and distribution company specializing in powersports products and accessories, primarily serving the New Zealand market. The company leverages a Shopify-based e-commerce platform to showcase and sell multiple brands, targeting powersports enthusiasts and retail partners. The website demonstrates a professional design with consistent branding and clear navigation, supporting a positive user experience. Technical infrastructure is modern, utilizing Shopify's hosting and content delivery network, with integration of analytics and marketing tools such as Google Analytics and Shopify Pixels. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data and lack of visible contact or security policies slightly diminish the overall trustworthiness. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers could be improved. Overall, the site presents a secure and compliant e-commerce presence with room for enhanced transparency and security documentation.

A

Asian Family Services

asianfamilyservices.nz

67

Asian Family Services is a New Zealand-based non-profit organization dedicated to providing culturally tailored mental health, gambling harm minimisation, and wellbeing support services to Asian communities nationwide. Established in 2015, the organization operates multiple branches and offers multilingual support including English, Mandarin, Cantonese, Korean, Japanese, Thai, Vietnamese, and Hindi. The website reflects a professional and community-focused service provider with clear contact information, leadership visibility, and active social media presence. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Google reCAPTCHA, and integrates multiple analytics and tracking pixels including Google Analytics, TikTok, and Facebook. Hosting and DNS are managed via reputable providers including Dreamscape Networks and Cloudflare, ensuring good performance and security. The site is mobile optimized and accessible with a clear navigation structure. Security posture is solid with HTTPS enforced and use of CAPTCHA on forms, though improvements are recommended in implementing security headers and publishing formal security policies. Privacy compliance is basic with a privacy policy and cookie consent banner present, but GDPR compliance is not explicitly indicated. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively. Strategic recommendations include enhancing security headers, formalizing security and incident response policies, and improving privacy compliance transparency.

Lukas Mollberg's website serves as a personal professional platform highlighting his expertise as a writer and author specializing in online gaming and gambling. The site positions him as a niche content creator with a background in semi-professional online poker, targeting potential partners interested in his writing services. The business model is centered on personal branding and professional content creation, with a small-scale operation based in New Zealand. Technically, the website is built on WordPress, utilizing standard themes and jQuery libraries. Hosting is provided by GoDaddy. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No advanced frameworks or platforms beyond WordPress are detected. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. There are no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies indicates compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the website is functional and professional but would benefit from enhanced security measures and privacy compliance to improve trust and reduce risk. The content is safe for general audiences, with no adult or explicit material detected.

P

Problem Gambling Foundation of New Zealand

pgf.nz

69

The Problem Gambling Foundation of New Zealand operates a professional, well-structured website providing free, confidential counselling and support services for individuals and families affected by gambling harm. The organization holds a strong market position as a national non-profit entity with subsidiaries focused on cultural support. The website demonstrates a mature digital infrastructure utilizing modern web technologies, including JavaScript modules, HTMX, and integrated chat support via Zoho SalesIQ. Analytics and marketing tools such as Google Tag Manager and Facebook Pixel are employed with evident privacy compliance. Security posture is robust with HTTPS enforcement and CAPTCHA protections, though some security headers could be improved. Overall, the site is trustworthy, accessible, and user-friendly, targeting a broad audience in New Zealand seeking gambling harm support.

C

Coface

coface.co.nz

64

Coface New Zealand operates as a key regional branch of the global Coface group, specializing in trade credit insurance, debt collection, and business information services. The company supports businesses in managing credit risk and facilitating trade, leveraging over 75 years of industry experience and a presence in approximately 200 markets worldwide. Their website reflects a professional and comprehensive digital presence tailored to business clients seeking risk mitigation solutions. Technically, the site is built on a modern stack with Ibexa CMS, integrates consent management via Didomi, and uses Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear cookie consent and privacy policy adherence. Overall, the site demonstrates high professionalism and trustworthiness, though WHOIS data is unavailable due to registry restrictions, which is typical for .nz domains. Strategic recommendations include publishing explicit security policies and incident response information to enhance transparency and trust.

R

Russell Hobbs

russellhobbs.co.nz

62

Russell Hobbs New Zealand operates an e-commerce website specializing in home and kitchen appliances such as kettles, toasters, irons, and cookware. The brand has a long-standing history of over 65 years and targets general consumers in New Zealand. The website demonstrates a moderate level of digital maturity with integration of modern JavaScript libraries, Google Tag Manager for analytics, and Google reCAPTCHA for bot protection. The technical infrastructure is sound with HTTPS enforced and CSRF tokens implemented for AJAX requests, indicating attention to security best practices. However, the absence of explicit privacy and cookie policies, as well as lack of security headers, suggests room for improvement in privacy compliance and security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

J

JBL

jbl.co.nz

68

The website www.jbl.co.nz serves as the official New Zealand online store for JBL, a globally recognized audio brand. It offers a wide range of premium audio products including speakers, headphones, professional audio equipment, and home audio systems. The site targets general consumers and professional users in New Zealand, positioning itself as a trusted retail channel for JBL products. The business model is primarily e-commerce retail with additional support and product registration services. The website demonstrates consistent branding and good content quality, supporting JBL's market presence in the region. From a technical perspective, the site leverages modern web technologies including JavaScript, jQuery, Google Tag Manager, and Salesforce Commerce Cloud (Demandware) as its CMS platform. It integrates marketing and analytics tools such as Monetate and Bazaarvoice, alongside a robust cookie consent mechanism via OneTrust, indicating a mature digital infrastructure. The site is mobile optimized with good SEO and accessibility basics, though some improvements in accessibility could be made. Security posture is moderate; HTTPS is implied and cookie consent is implemented, but explicit security headers and policies are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain legitimacy verification, but the site content and branding strongly suggest a legitimate official presence. Privacy compliance is good with cookie consent, though no explicit privacy policy or terms of service pages were found in the analyzed content. Overall, the website is a professional, well-structured e-commerce platform with a solid business reputation and adequate technical implementation. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and improving accessibility features to further strengthen trust and compliance.

The website ecohotwater.co.nz is currently inaccessible to visitors, returning a 403 Forbidden error page. This indicates that access is restricted or blocked, preventing any meaningful content or business information from being displayed. The domain is registered in New Zealand since 2019 with a reputable registrar, Freeparking Limited, and hosted on SiteGround. However, the lack of accessible content, absence of privacy, cookie, and terms of service policies, and no visible contact information significantly limit the ability to assess the business or its digital maturity. The technical infrastructure appears basic with standard HTML and CSS usage and Google Fonts integration, but no advanced frameworks or analytics are detected. Security posture is minimal with no security headers or incident response information published. Overall, the site shows poor content quality and low trustworthiness due to blocked access and missing compliance elements.

The website djostore.co.nz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any substantive content or business information. The domain WHOIS data is suspicious, showing a creation date in the future (June 2025), which raises concerns about the legitimacy or data accuracy. No privacy, cookie, or terms of service policies are present, nor is there any contact information or business details visible. The site relies on Cloudflare for security and hosting but lacks visible security headers or SSL configuration details. Due to the WAF block and lack of content, a comprehensive analysis of the business, technical infrastructure, and security posture is not possible.

G

Group Voyagers, Inc

avalonwaterways.co.nz

64

Avalon Waterways is a specialized river cruise operator focusing on premium suite ships offering panoramic views primarily in Europe and Asia. The company is positioned as a medium-sized player in the transportation and hospitality sectors, operating under the parent company Group Voyagers, Inc. Their website reflects a professional and consistent brand image with a clear focus on travel services. Technically, the site employs modern web technologies including Angular, Google Tag Manager, and Osano for consent management, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not published. The absence of WHOIS data for the domain is a concern but is somewhat mitigated by the professional presentation and known parent company association. Overall, the website is trustworthy and well-constructed, serving its target audience effectively.

B

Blackpearl Group Limited

pearldiver.io

65

Pearl Diver, operated by Blackpearl Group Limited, is a New Zealand-based B2B SaaS company specializing in intent data and prospect identification solutions for marketers and sales teams. The platform leverages real-time buyer signals beyond traditional ad platforms to improve targeting accuracy, reduce wasted ad spend, and increase conversion rates. The company is well-positioned in the marketing technology sector with a strong user base and positive market reputation, supported by numerous customer testimonials and G2 reviews. Technically, the website is built on Webflow CMS and integrates advanced marketing and analytics tools such as HubSpot, Microsoft Clarity, and Google Tag Manager. The site demonstrates excellent design quality, mobile optimization, and SEO practices, ensuring a smooth user experience and effective digital presence. Security-wise, the site enforces HTTPS and uses controlled third-party scripts, though it lacks some advanced security headers and a published security policy. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR and CCPA considerations. However, the WHOIS data is privacy protected, limiting transparency on domain registration details, though this is common and justified for commercial SaaS providers. Overall, Pearl Diver presents a professional, trustworthy, and technically mature online presence with minor recommendations to enhance security headers and incident response transparency. The business is credible and well-aligned with its market claims, making it a reliable partner for marketers seeking intent data solutions.

H

Hail

hail.to

63

Hail is a New Zealand-based technology company offering a digital content consolidation platform that integrates websites, publications, AI chatbots, integrations, and email campaigns. The website is professionally designed using WordPress and Elementor, targeting sectors such as schools, sports clubs, and community organizations. The platform emphasizes long-term support and ease of digital content management. Technically, the website employs modern web technologies and analytics tools like Google Analytics and Microsoft Clarity, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and some sanitization libraries but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve transparency and security documentation.

H

Holidu GmbH

holidu.co.nz

67

Holidu GmbH operates a professional online vacation rental platform specializing in holiday homes, cottages, villas, and apartments primarily targeting holiday travelers in New Zealand and Europe. The platform offers verified accommodation listings with features such as free cancellation, family and pet-friendly options, and a mobile app to enhance user experience. The company holds a strong market position as a specialist aggregator in the hospitality sector. Technically, the website uses modern web technologies including React and Tailwind CSS, supported by Google Analytics and Tag Manager for data insights. The site is well optimized for mobile and SEO, providing a smooth user experience. Security posture is solid with HTTPS enforced, standard security headers, and no visible vulnerabilities. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. WHOIS data for the domain is not publicly available due to .nz registry policies, but the website's professional presentation and known company affiliation support its legitimacy. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility.

Mercedes-Benz New Zealand Limited operates the official Mercedes-Benz passenger car website for New Zealand, offering a comprehensive range of luxury vehicles including electric and hybrid models. The company is positioned as a premium automotive brand with a strong market presence supported by authorized dealerships and financial services. The website reflects a mature digital infrastructure leveraging modern technologies such as Vue.js, Adobe Experience Manager, and advanced analytics tools including Google Analytics 360 and Datadog RUM. Security posture is robust with HTTPS enforcement, comprehensive security headers, and privacy compliance aligned with GDPR and New Zealand Privacy Act standards. The absence of WHOIS data for the domain suggests it is a subdomain or alias under a broader Mercedes-Benz domain strategy, but the website content and branding strongly affirm legitimacy. Overall, the site provides a professional, secure, and user-friendly experience tailored to New Zealand consumers interested in luxury vehicles.

A

Assemble

assemble.me

48

Assemble is a New Zealand-based SaaS company founded in 2008 that provides specialized software solutions for the film industry, focusing on audience building, website creation, and integrated marketing tools for filmmakers and distributors. The platform offers a CMS and CRM tailored for films, including features such as blogs, trailers, and online stores. The website reflects a niche market position with professional content and a clear value proposition targeting film professionals. Technically, the website uses a proprietary CMS with a tech stack including jQuery, Modernizr, Shadowbox.js, and integrates Google Analytics, Google Tag Manager, and New Relic for performance monitoring. Hosting and DNS are managed via Cloudflare, providing CDN and DNS services. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain, indicating some domain security awareness. However, DNSSEC is not enabled, and security headers are minimal, suggesting room for improvement. No privacy or cookie policies are present, which is a compliance gap. No contact information or incident response details are provided, limiting transparency. Overall, the website is professional and trustworthy with a solid business foundation but lacks in privacy compliance and advanced security practices. Strategic improvements in these areas would enhance user trust and regulatory adherence.

M

Milked

milked.film

52

Milked.film is a professionally presented documentary film website focused on exposing issues within New Zealand's dairy industry. The site targets a general audience interested in environmental and agricultural topics, leveraging social media and educational content to raise awareness. Technically, the site uses a modern tech stack including jQuery, Modernizr, and New Relic for monitoring, hosted on a platform powered by Assemble CMS. The website is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is moderate with HTTPS enforced but missing security headers and DNSSEC. Privacy compliance is basic with a privacy policy linked via the CMS provider but no cookie consent mechanism. Business credibility is supported by consistent branding and social media presence but limited direct contact information. Overall, the site is safe, trustworthy, and well-suited for its niche documentary purpose.

T

Thermomix NZ

thermomix.co.nz

64

Thermomix NZ operates a professional e-commerce platform specializing in advanced kitchen appliances, primarily the Thermomix® product line. The company leverages a consultant network and offers in-home cooking demos, enhancing customer engagement and support. The website is well-positioned in the New Zealand market as a leading retailer of smart kitchen appliances, supported by a loyalty rewards program and accessory sales. Technically, the site is built on Shopify, utilizing modern web technologies and integrations with major analytics and marketing platforms such as Google Analytics, Facebook Pixel, TikTok Pixel, Klaviyo, and Hotjar. The infrastructure includes Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is strong with HTTPS enforced and standard security headers likely managed by Shopify, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good with clear privacy and cookie policies and consent mechanisms in place. Business credibility is supported by consistent domain registration data, professional content, and trust indicators like customer reviews and consultant support. Overall, the website demonstrates a mature digital presence with solid security and privacy practices, suitable for its retail business model.

R

Registrant of reelup.io

reelup.io

68

ReelUp is a specialized SaaS company offering shoppable video solutions primarily targeting Shopify merchants and online retailers. Their platform enables e-commerce businesses to convert social media videos into interactive, shoppable content, enhancing customer engagement and boosting sales. The company is relatively new, founded in 2022, and operates from New Zealand. Their market position is niche but well integrated within the Shopify ecosystem, leveraging third-party tools like Judge.me for reviews and Microsoft Clarity for analytics. Technically, the website is built on Shopify using the Dawn theme, incorporating modern technologies such as React 18 and jQuery. The infrastructure is hosted on Shopify's CDN with Cloudflare DNS, ensuring good performance and mobile optimization. Analytics and marketing tools are well integrated, including Google Tag Manager and Microsoft Clarity, providing moderate user tracking capabilities. From a security perspective, the site enforces HTTPS and uses standard security practices, though it lacks DNSSEC and explicit security headers like CSP. There is no visible security policy or incident response contact, which are areas for improvement. Privacy compliance is basic, with no explicit privacy or cookie policies found on the homepage, though a cookie consent mechanism is implied. Overall, the website presents a professional and trustworthy front with good business credibility and technical maturity. The risk profile is low, but improvements in privacy transparency and security hardening are recommended to enhance trust and compliance.

K

Klim Type Foundry

klim.co.nz

61

Klim Type Foundry is a well-established independent typeface design studio based in Wellington, New Zealand, founded in 2004. The company specializes in designing and selling a wide range of fonts online and providing custom typographic services to an international clientele. Their website reflects a strong market position within the niche of typography and font design, targeting graphic designers and creative professionals globally. The business model is primarily e-commerce combined with bespoke design services, supported by a professional and content-rich website that showcases their font collections and design philosophy. Technically, the website is built using modern web technologies including Gatsby and React, hosted on AWS infrastructure, and optimized for performance and mobile responsiveness. The site employs Google Analytics for visitor tracking and Imgix for image optimization, indicating a mature digital infrastructure. SEO and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks DNSSEC and security headers which are recommended for enhanced protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; a comprehensive privacy policy is present, but cookie consent mechanisms and detailed data retention policies are absent. Contact information is limited to a contact form, with no direct emails or phone numbers published. Overall, Klim Type Foundry presents a low-risk profile with a professional online presence and solid business credibility. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen their security posture and regulatory compliance.

C

CloudCannon

cloudcannon.com

71

CloudCannon is a New Zealand-based technology company founded in 2009, offering a Git-powered Jamstack CMS platform designed for marketers and developers. The platform enables teams to manage static websites with visual editing capabilities, integrating tightly with Git workflows and supporting multiple static site generators. Positioned as a niche leader in the Jamstack CMS market, CloudCannon targets digital agencies, enterprises, and development teams seeking scalable, secure, and performant website management solutions. The website demonstrates excellent content quality, professional design, and clear navigation, reflecting a mature and trustworthy business. Technically, the site leverages modern JavaScript libraries, Google Analytics, and Cloudflare DNS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, CloudCannon presents a credible and professional online presence with room to enhance privacy and security transparency.

S

Silverstripe Limited

silverstripe.org

66

Silverstripe Limited operates the Silverstripe CMS, an open-source content management system and framework designed for developers, marketers, authors, and IT managers. The company positions itself as a provider of flexible, extensible, and secure CMS solutions with enterprise-level support and a strong global community. Their website reflects a mature digital presence with comprehensive content, active community engagement, and regular updates on security and software releases. Technically, the site leverages modern web technologies including SilverStripe CMS, Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a responsive and user-friendly experience. Security practices include HTTPS enforcement and published security advisories, although explicit security headers and incident response contacts are not evident. Overall, the website is professional, trustworthy, and well-structured, supporting Silverstripe's market position as a reliable open-source CMS provider.

Miele For Life is a dedicated membership loyalty website targeting existing Miele appliance owners in New Zealand, offering exclusive benefits such as discounts, events, and customer care. The website is built on WordPress with modern technologies including Bootstrap, jQuery, Google Tag Manager, and reCAPTCHA, hosted behind Akamai CDN infrastructure. The site demonstrates good digital maturity with mobile optimization, SEO best practices, and a clear content structure focused on recipes, offers, and member engagement. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though minor issues such as missing DNSSEC and a broken GTM script fetch exist. Privacy compliance is well addressed with a cookie consent mechanism and clear links to privacy and terms pages. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate and professional brand presence.

M

Miele

miele.co.nz

61

Miele New Zealand operates a professional and well-branded website focused on retailing premium domestic appliances and providing customer support services. The site targets domestic customers in New Zealand with offerings including product shopping, event bookings, and online self-service. The business is positioned as a premium appliance brand with a strong market presence. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and LiveChat for customer engagement, with a cookie consent mechanism ensuring privacy compliance. The site is accessible, uses HTTPS, and includes privacy and terms of use pages, though explicit security headers are not detected. Security posture is solid but could be improved with additional headers and published incident response contacts. Overall, the website is trustworthy, professional, and safe for general audiences.

F

Formthotics

formthotics.com

64

Formthotics is a healthcare-focused company specializing in custom thermoformable medical orthotic insoles, targeting healthcare professionals, clinicians, sports retailers, and patients. The company leverages over 40 years of foot science expertise to provide clinically proven orthotic solutions that enhance patient comfort and performance. Their business model includes product manufacturing, distribution, and professional training services. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, but lack some advanced security headers and explicit security policies. The security posture is generally good with no visible vulnerabilities or exposed sensitive data, but the absence of privacy policy and terms of service pages represents a compliance gap. The WHOIS data is missing, which raises concerns about domain registration transparency and legitimacy. Overall, the site is trustworthy and professional but would benefit from improved compliance documentation and domain registration verification. Strategic recommendations include implementing comprehensive privacy and terms policies, enhancing security headers, providing incident response contacts, and verifying domain registration details to improve trust and compliance.

I

InvestNow

investnow.co.nz

71

InvestNow is a New Zealand-based online investment platform established in 2014, providing retail investors with direct access to KiwiSaver, managed funds, and term deposits. The company targets self-directed investors seeking a streamlined digital experience for managing their investment portfolios. The website reflects a mature and professional business with consistent branding and comprehensive service offerings tailored to the New Zealand market. Technically, the site is built on WordPress using the Avada theme, integrating modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Facebook Pixel, indicating a digitally mature infrastructure. Security posture is solid with HTTPS enforced, anti-spam measures in place, and no exposed sensitive data detected, although some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, InvestNow presents a trustworthy and professional online presence with good technical and security practices.

SSLTrust is a specialized online provider of SSL/TLS certificates and web security products, targeting businesses and website owners primarily in New Zealand. The company positions itself as the number one provider with local New Zealand support, offering a broad range of certificate types including standard, business, wildcard, EV, multi-domain, email, code signing, and automation certificates. Their business model focuses on reselling trusted SSL brands such as Comodo, Sectigo, and RapidSSL, complemented by additional web security services like malware scanning. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, styled with Tailwind CSS, and integrates Google Tag Manager for analytics. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and modern JavaScript frameworks but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain www.ssltrust.co.nz raises concerns about domain registration legitimacy, although the website content and branding appear professional and consistent with a legitimate business. Overall, the site demonstrates a good security posture and technical maturity but would benefit from enhanced privacy compliance and transparency.

L

Logical Solutions

logicalsolutions.co.nz

52

Logical Solutions is a New Zealand-based IT services company with over 15 years of experience providing comprehensive IT sales, managed services, cloud hosting, cybersecurity, and AI-enhanced business automation solutions. Their market position is that of a trusted regional provider focused on quality, dependability, and leveraging modern technologies such as Microsoft 365 automation and private AI platforms. The website demonstrates a mature digital presence with professional design, clear navigation, and detailed service offerings tailored to businesses of all sizes in New Zealand and Australia. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for mobile and SEO, though some security headers and cookie consent mechanisms are missing. Security posture is good with HTTPS enforced and secure forms, but could be improved with additional headers and incident response disclosures. Overall, the risk is moderate due to missing WHOIS data, but the business credibility and website quality are high, supporting trust in the company.

F

Flick

flick.nz

55

Flick is a New Zealand-based pest control company specializing in residential and commercial pest management solutions. Established in 2020, the company presents itself as a professional service provider with a clear focus on the New Zealand market. The website is well-designed, mobile-optimized, and uses modern web technologies including WordPress and Yoast SEO to enhance visibility and user experience. The technical infrastructure includes standard analytics tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. From a security perspective, the website employs HTTPS and shows no signs of exposed sensitive data or vulnerabilities. However, the absence of DNSSEC and certain security headers suggests room for improvement in hardening the domain and web server security. Privacy compliance is currently lacking, with no visible privacy or cookie policies, which could pose regulatory risks especially under GDPR or similar frameworks. Contact information is available primarily via phone and contact forms, but no direct email addresses or incident response contacts are provided. Overall, Flick demonstrates a solid business presence with a good technical foundation and professional branding. To enhance trust and compliance, it is recommended to publish comprehensive privacy and cookie policies, implement additional security headers, and provide clear incident response contacts. These steps will improve the security posture and regulatory compliance, thereby reducing risk and enhancing customer confidence.

F

Flick

flick-anticimex.co.nz

55

Flick is a New Zealand-based pest control company specializing in residential and commercial pest control solutions. Established in 2020, the company positions itself as a reliable local service provider with a professional online presence. The website is built on WordPress, utilizing modern SEO tools such as Yoast SEO and integrates Google Analytics and Tag Manager for marketing and analytics purposes. The site is mobile-optimized and offers clear navigation and contact options including phone and contact forms. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, Flick presents a trustworthy business with room for improvement in security and privacy transparency.

L

Lifull Connect

trovit.co.nz

64

Trovit New Zealand operates as a classified search engine specializing in aggregating ads for property, used cars, and jobs from thousands of websites. It is part of the Lifull Connect group, a recognized global player in classified search services. The website targets a general audience in New Zealand seeking convenient access to classified listings across multiple verticals. The business model centers on providing a unified search platform to simplify user access to diverse classified ads, leveraging partnerships and data aggregation.

A

ArchiPro Limited

archipro.co.nz

71

ArchiPro Limited operates a leading New Zealand online platform dedicated to architecture, building, and design. The website serves as a comprehensive directory connecting homeowners, architects, designers, and suppliers, offering access to thousands of projects, products, and professionals. The platform is well-positioned in the local market with a strong brand presence and extensive content including inspirational images and educational articles. Technically, the site leverages modern web technologies such as Remix, Tailwind CSS, and integrates multiple marketing and analytics tools including Google Tag Manager, Facebook Pixel, and HubSpot. The site is hosted behind Cloudflare DNS and uses HTTPS, ensuring secure connections. However, some security best practices like DNSSEC and security headers are not enabled. Privacy compliance is limited as no explicit privacy or cookie policies or consent mechanisms were found in the analyzed content. Overall, the website is professional, content-rich, and trustworthy, but could improve in privacy and security transparency.

S

Schindler Lifts NZ Ltd

schindler.co.nz

73

Schindler Lifts NZ Ltd operates a professional and comprehensive website focused on the manufacturing and servicing of elevators, escalators, and moving walks in New Zealand. The company is positioned as a leading provider in the vertical transportation sector, supported by its parent company, Schindler Group. The website offers detailed product information, modernisation solutions, digital services, and career opportunities, targeting building owners, facility managers, and architects. The digital infrastructure is built on Adobe Experience Manager with integrations of HubSpot, Adobe Analytics, and Google Analytics, reflecting a mature digital presence. Security posture is strong with HTTPS, Content Security Policy, and no visible vulnerabilities, although explicit security policies and incident response information are absent. Privacy compliance is well addressed with a clear privacy notice and cookie consent mechanism. The absence of WHOIS data for the subdomain www.schindler.co.nz introduces some uncertainty in domain legitimacy verification, but the overall professional presentation and linkage to the parent company support trustworthiness.

L

Lutra

lutra.com.au

53

Lutra is a specialized company providing engineering and software services focused on water and wastewater treatment plants and operations. Their market position is that of a niche provider offering both software solutions like Infrastructure Data and process engineering services for water and wastewater treatment. The company targets councils, water authorities, and infrastructure operators primarily in New Zealand and Australia. Technically, the website is built on a modern stack including SilverStripe CMS, Google Tag Manager, Microsoft Clarity, and Vimeo integrations, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though formal security policies and incident response contacts are absent. Privacy compliance is basic with cookie consent and a privacy policy present but no GDPR-specific indicators. Overall, the website is professional, trustworthy, and well-branded, supporting a medium-sized business in the energy sector.

L

Lutra

lutra.com

63

Lutra is a specialized company providing engineering and software services focused on water and wastewater treatment plants. Their market position is that of a niche B2B service provider primarily serving municipal and industrial clients in New Zealand and Australia. The company offers a range of services including process engineering, software solutions (Infrastructure Data), optimization, commissioning support, and training. Their website reflects a professional and consistent brand image with clear business messaging and relevant client logos, indicating a trusted presence in their sector. Technically, the website uses modern web technologies including Google Tag Manager, Microsoft Clarity, and SilverStripe CMS. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. However, there is room for improvement in security headers and explicit security policy disclosures. The website uses HTTPS with a strong SSL configuration, but lacks some advanced security headers. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic, with privacy and cookie policies present and a consent mechanism implemented. However, the absence of WHOIS data for the domain is a notable concern, reducing trustworthiness and requiring further investigation. No incident response or vulnerability disclosure information is available. Overall, Lutra presents a credible and professional business website with solid technical foundations but could enhance trust and security by addressing WHOIS transparency, adding security headers, and publishing comprehensive security and incident response policies.

J

JouwWeb B.V.

webador.nz

65

Webador is a well-established website builder platform operated by JouwWeb B.V., founded in 2009 and headquartered in Eindhoven, Netherlands. The platform targets small business owners and individuals in New Zealand and globally, offering AI-powered website creation, domain registration, and e-commerce capabilities. The website demonstrates a professional, user-friendly design with strong branding and trust signals such as high Trustpilot ratings and active social media presence. Technically, the site employs modern JavaScript frameworks, Google Analytics 4, and performance monitoring tools, ensuring fast load times and mobile responsiveness. Security posture is strong with HTTPS enforced, nonce-based script security, and cookie consent mechanisms, though some security headers could be more explicitly declared. Privacy compliance is robust with clear policies and GDPR adherence. Overall, Webador presents a credible, secure, and mature digital presence suitable for its target market.

J

Jaguar New Zealand

jaguar.co.nz

63

Jaguar New Zealand operates as the official regional website for Jaguar, a premium luxury automotive brand with a history dating back to 1935. The website serves as a digital showroom and information portal for Jaguar vehicles in New Zealand, targeting car buyers and enthusiasts. It offers vehicle configuration, sales information, and after-sales services, positioning itself as a key player in the luxury transportation sector within the region. Technically, the site employs modern web technologies including Nuxt.js for server-side rendering and uses CDN-hosted assets to optimize content delivery. The design is professional and mobile-optimized, providing a good user experience. Security posture is moderate; while HTTPS is implied, explicit security headers and privacy policies are absent in the provided content, indicating room for improvement in compliance and security best practices. The absence of WHOIS data for the domain www.jaguar.co.nz limits the ability to fully verify domain legitimacy, though the website content aligns with Jaguar Land Rover's global branding. Overall, the site is functional and credible but would benefit from enhanced privacy, security, and transparency measures.

A

Airbnb

airbnb.co.nz

67

Airbnb is a globally recognized online marketplace specializing in peer-to-peer lodging, holiday rentals, and unique travel experiences. The website targets travelers and hosts worldwide, offering millions of listings across over 220 countries and regions. It operates as a large enterprise under the parent company Airbnb, Inc., with a strong market position as a leader in the hospitality industry. The site features a professional design, consistent branding, and a comprehensive service offering that caters to diverse travel needs. Technically, the website leverages modern web technologies including React, Google Tag Manager, and mapping APIs such as Google Maps and Mapbox. The infrastructure supports fast loading times, excellent mobile optimization, and good accessibility features. The use of structured data and SEO best practices enhances search engine visibility and user experience. From a security perspective, Airbnb employs HTTPS with strong SSL configuration and multiple security headers to protect users. There is no evidence of exposed sensitive data or vulnerable libraries in the provided content. However, explicit privacy and cookie policies were not detected in the analyzed HTML snippet, indicating an area for improvement in transparency and compliance. The domain WHOIS data is not publicly available, likely due to privacy protection, which is justified for a company of this scale. Overall, Airbnb's website demonstrates a high level of professionalism, security, and technical maturity. The main risks relate to the visibility of privacy compliance information and incident response contacts. Strategic recommendations include enhancing privacy disclosures, publishing security policies, and maintaining continuous security monitoring to uphold trust and compliance.

N

New Zealand Tech Alliance

techalliance.nz

53

The New Zealand Tech Alliance is a coalition of over 20 independent technology associations and more than 1000 member organizations representing over 100,000 employees in New Zealand's tech sector. Coordinated by NZTech, it serves as a unified voice to promote and advance the technology ecosystem in New Zealand. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a good user experience and mobile optimization. However, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

D

Digital Identity NZ

digitaltrusthui.co.nz

55

Digital Trust Hui Taumata is a New Zealand-based annual conference focused on digital identity and trust ecosystems, co-created by NZTech and Digital Identity New Zealand (DINZ). The website serves as an information hub for the event, providing details on partnership opportunities, news updates, photo galleries, and registration. The target audience includes stakeholders in New Zealand's digital identity and trust sectors. The business operates as an event organizer and ecosystem facilitator with a strong local market position as a leading digital trust conversation platform.

T

Trust Alliance New Zealand

trustalliance.co.nz

43

Trust Alliance New Zealand operates as a membership consortium focused on creating a trusted and verifiable data sharing ecosystem for New Zealand's primary sector including producers, growers, exporters, and retailers. The website presents a professional image with clear messaging about its mission to enable secure data sharing and compliance with evolving global standards. The business model centers on collaboration and data interoperability projects such as the Digital Wallet and Digital Farm Environment Plan. The target audience is primarily New Zealand agricultural stakeholders and related service providers.

D

Digital Identity New Zealand

digitalidentity.nz

49

Digital Identity New Zealand is a membership-funded organization established in 2018, focused on advancing digital identity and trust ecosystems within New Zealand. The organization provides a platform for collaboration, knowledge sharing, and advocacy through events such as the Digital Trust Hui Taumata, working groups, and educational resources. Their market position is that of a leading entity in the digital identity space in New Zealand, targeting businesses and organizations interested in digital identity innovation and trust economy development. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Owl Carousel. It integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. From a security perspective, the site uses HTTPS and secure login forms but lacks DNSSEC and important security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but located at an unusual URL and no cookie consent mechanism detected. No incident response or security policy documents are published. Overall, the website is professional and trustworthy with a good business credibility score. However, improvements in privacy compliance, security headers, and DNS security would strengthen its security posture and regulatory adherence.

K

Kelsey Judson

redirectify.app

73

Redirectify is a specialized Shopify app developed by Kelsey Judson, designed to help Shopify store owners efficiently manage 301 redirects and fix 404 errors. The app offers features such as live 404 tracking, rule-based automation, live path suggestions, and bulk CSV uploads, targeting e-commerce merchants seeking to improve customer experience and SEO. The app is positioned as a niche solution within the Shopify ecosystem, with a subscription pricing model and positive user feedback indicating strong market acceptance. Technically, the app listing is hosted on Shopify's official app store domain, leveraging modern web technologies including Tailwind CSS, Stimulus JS, and integration with analytics and error monitoring tools like Google Tag Manager and Bugsnag. The website demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and employs nonce attributes in scripts, indicating adherence to security best practices. However, explicit security headers are not detected, and no visible cookie consent mechanism is present, suggesting areas for improvement in privacy compliance and security hardening. Overall, the website and app present a trustworthy and professional offering with a high legitimacy score, minimal security risks, and a clear business focus. Strategic recommendations include enhancing privacy compliance with a cookie consent banner, publishing detailed security policies, and implementing additional security headers to further strengthen the security posture.

Thryv New Zealand operates a professional and well-structured website offering a comprehensive marketing and sales platform tailored for small businesses in New Zealand. The company provides a suite of services including local listings management, reputation management, social media tools, CRM, invoicing, and AI-powered automation solutions. The website demonstrates a mature technical infrastructure built on WordPress with modern JavaScript libraries and SEO optimizations, indicating a solid digital maturity. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, although the absence of explicit privacy and cookie policies suggests room for compliance improvement. The lack of WHOIS data for the domain www.thryv.co.nz is a notable concern, potentially indicating registration issues or privacy protection, which should be further investigated. Overall, the website is trustworthy and professional, targeting small business customers with a clear value proposition.

M

MSC Cruises Australia & New Zealand

msccruises.co.nz

75

MSC Cruises Australia & New Zealand operates a professional and well-branded website offering cruise holidays primarily in the Mediterranean, Caribbean, Emirates, and worldwide. The site targets general consumers interested in cruise vacations, providing detailed information on cruise deals, destinations, ships, excursions, and onboard experiences. The business is positioned as a major player in the cruise industry with a strong regional presence and is a subsidiary of MSC Cruises S.A., a global cruise corporation. The website demonstrates a good level of digital maturity with modern technologies and marketing integrations.

IAG NZ is a major insurance provider in New Zealand, operating multiple well-known insurance brands such as State, AMI, NZI, NAC, Lantern, Swann, and Lumley. The company positions itself as a trusted insurer with a strong financial strength rating (AA) and adherence to fair insurance practices. The website is professionally designed, mobile-optimized, and built on Adobe Experience Manager, leveraging modern web technologies and CDN services for performance and reliability. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is good with a comprehensive privacy policy, though a cookie consent mechanism is not evident. Contact is primarily via web forms, with no direct emails or phone numbers visible on the homepage. WHOIS data is not publicly available, likely due to privacy protection, which is justified for this type of enterprise. Overall, the website reflects a mature, credible insurance business with strong trust indicators and technical maturity.

L

Lantern Insurance

lanterninsurance.co.nz

62

Lantern Insurance is a New Zealand-based insurance provider offering a range of insurance products including home, contents, car, small business, motorcycle, boat insurance, and roadside assistance. It operates as a division of IAG New Zealand Ltd, a well-established insurance group with a strong financial rating (AA). The website is professionally designed, leveraging Adobe Experience Manager CMS and modern web technologies, providing a good user experience with clear navigation and mobile optimization. The business targets New Zealand residents seeking insurance coverage with a focus on premium products underwritten by NZI. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and privacy compliance are recommended. The absence of WHOIS data for the domain is a notable anomaly but does not detract significantly from the overall trust due to the strong brand association. Overall, the website is a credible and professional digital presence for Lantern Insurance.

L

Lumley Insurance

lumley.co.nz

63

Lumley Insurance is a New Zealand-based general insurer backed by IAG New Zealand Limited, the largest general insurer in Australia and New Zealand. The company offers a broad range of insurance products including transport, construction, marine, property, casualty, and personal lines insurance. Lumley operates primarily through a network of independent brokers and corporate partnerships, targeting business customers and insurance intermediaries. The website reflects a professional and consistent brand presence with clear trust indicators such as membership in the Insurance Council of New Zealand and adherence to the Fair Insurance Code. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding explicit security headers and a cookie consent mechanism. Privacy compliance is basic, with a privacy policy present but no cookie banner or GDPR-specific disclosures. WHOIS data is not publicly available, likely due to privacy protection, which is justified for this type of business. Overall, the website is trustworthy, professional, and well-maintained, suitable for its target audience.