United Kingdom security reports

S

Stump n Grind Limited

stumpngrind.co.uk

53

Stump n Grind Limited is a small, local tree services provider operating in Birmingham, Solihull, and surrounding areas in the West Midlands, UK. The company offers professional services including stump grinding, site clearance, fencing, tree work, and groundwork. The website is built on the Wix platform and presents a professional appearance with relevant content and clear navigation. However, the domain WHOIS data indicates a registration issue with Nominet UK, suggesting the domain name 'www.stumpngrind.co.uk' is invalid under current naming rules, which raises some legitimacy concerns. Despite this, the website is accessible and functional, hosted on Wix's infrastructure.

Berrymans Bakery is a small, established UK-based bakery specializing in traditional Cornish pasties made by hand using local ingredients. The business has a long history of over 50 years and serves both retail customers and trade clients. Their website supports online sales through a partner domain and provides information about their products and company history. Technically, the website is built on WordPress using common plugins and libraries such as jQuery, Modernizr, and Contact Form 7. The site is hosted on a green hosting provider, indicating environmental awareness. Security posture is moderate with HTTPS enabled but lacks visible security headers and privacy compliance mechanisms. No privacy or cookie policies are present, which is a compliance gap. The site is free from WAF blocking or content restrictions and contains no adult or questionable content, making it safe for general audiences. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

S

Sibbalds Limited

sibbald.co.uk

61

Sibbalds Limited is a professional accountancy and business advisory firm based in Derby, UK, serving owner-managed businesses across England. The company offers a broad range of services including accountancy, audit, taxation, business advisory, and outsourced services. Their market position is that of a well-established regional firm with a strong focus on client relationships and business growth support. The website reflects a mature digital presence with modern design, clear navigation, and comprehensive service descriptions. Technically, the site is built on WordPress using the Bricks Builder framework, with good SEO and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-suited for its target audience of SMEs and family businesses.

M

Michael Finn & Company, reliable accountants in West Sussex

michaelfinn.co.uk

54

Michael Finn & Company is a small, local accounting and tax advisory firm based in West Sussex, United Kingdom. The company offers a range of professional services including accounts preparation, taxation advice, and business advisory services targeted primarily at local businesses and individuals. The website presents a professional image with clear descriptions of services and contact information, positioning the firm as a reliable local accounting partner. The business appears to have been founded around 2018, with a consistent branding approach and good content quality. Technically, the website is built on WordPress using the Divi theme, incorporating standard SEO plugins and Google services such as Analytics, Tag Manager, and reCAPTCHA for form security. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility features. However, there is room for improvement in security headers and explicit privacy and cookie policies. From a security perspective, the site uses HTTPS and includes Google reCAPTCHA to protect forms, but lacks visible security headers and formal security or incident response policies. The absence of WHOIS data for the www subdomain raises some concerns about domain registration clarity, though the main domain likely exists and is legitimate. Overall, the security posture is moderate but could be enhanced with better policy disclosures and technical hardening. The overall risk assessment is moderate with no critical vulnerabilities detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, clarifying domain registration details, and enhancing accessibility and compliance disclosures to improve trust and regulatory adherence.

T

Trioworld

quality-films.co.uk

71

Trioworld is a global manufacturer and supplier specializing in high-performance polyethylene film packaging solutions, with a strong emphasis on sustainability and circular economy principles. The company targets business customers in the packaging and manufacturing sectors, positioning itself as a leading global supplier with a comprehensive portfolio. The website reflects a professional and consistent brand image, supported by modern web technologies and a clear focus on B2B services. Technically, the website is built using modern JavaScript frameworks such as Vue.js and integrates multiple analytics and marketing tools including Google Tag Manager, Bing Ads, and Cookiebot for consent management. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements a robust cookie consent mechanism with granular user controls. However, explicit security headers are not detected, and there is no visible security policy or incident response contact information. The absence of WHOIS data and domain registration inconsistencies raise some concerns about domain legitimacy, although the website content and branding appear trustworthy. Overall, the website presents a solid digital presence for Trioworld, but improvements in transparency regarding security policies, contact information, and domain registration details are recommended to enhance trust and compliance.

U

USIC Group

usic.co.uk

44

USIC Group is a UK-based IT and telecommunications company with over 20 years of experience providing integrated business solutions including VOIP voice services, data connectivity, mobile contract consolidation, and managed IT support. The company positions itself as a reliable ISP and managed service provider, targeting business clients seeking comprehensive IT and telecom services. The website is built on a modern WordPress platform using Elementor and various plugins, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though security headers and incident response policies could be improved. Overall, the website and business appear legitimate and professional, with clear contact information and compliance policies in place.

B

BAM Agency

bamuk.com

56

BAM Agency is a UK-based experiential marketing and promotional staffing agency specializing in youth and student marketing. With over 25 years of experience, the company offers a comprehensive suite of services including experiential marketing, event staffing, digital marketing, brand insights, and youth marketing. The website presents a professional and engaging digital presence, leveraging WordPress with Themify Ultra theme and integrating modern marketing tools such as Iubenda for cookie compliance and Instagram feeds for social proof. However, the absence of visible contact emails, phone numbers, and privacy policy pages slightly detracts from the overall trustworthiness. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy.

E

Elm Surfacing Ltd

elmsurfacing.com

57

Elm Surfacing Ltd is a UK-based company specializing in road surfacing, highway maintenance, hand lay reinstatement, machine lay surfacing, and road marking services primarily serving the South East, London, and Home Counties regions. Established since 1995, the company has built a solid reputation and a loyal customer base. Their website reflects a professional service provider with a clear focus on civil engineering and construction sectors. The company targets public, private, and construction clients requiring comprehensive road surfacing solutions. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, Slider Revolution, and Contact Form 7 with Google reCAPTCHA v3 for spam protection. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and implements reCAPTCHA, but no explicit security headers were detected. Privacy and cookie policies are missing, indicating compliance gaps with GDPR and other privacy regulations. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, although the website content and professional presentation suggest a legitimate business. Overall, the website is functional, professional, and trustworthy from a business perspective but requires improvements in privacy compliance, security headers, and domain registration transparency to enhance trust and security posture.

Thoughtbubble Ltd is a UK-based full service web agency specializing in web design, development, hosting, and online marketing services. The company targets businesses seeking professional digital presence and marketing solutions, positioning itself as an established player in the creative media sector since 1997. The website demonstrates a professional design with clear navigation and a focus on showcasing recent projects and partnerships, particularly with awards platforms. Technically, the site uses modern web technologies such as jQuery, Google Fonts, and responsive grid CSS, though some legacy elements like the older Google Analytics script are present. Security posture is moderate with cookie consent implemented but lacks visible security headers or explicit incident response policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Privacy compliance is basic but present, with GDPR-aligned cookie and privacy policies. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer business contact information.

S

Savile Row Company

savilerowco.com

64

Savile Row Company operates as a luxury menswear e-commerce retailer, specializing in high-quality tailored clothing and accessories. The company targets affluent male customers seeking premium fashion products. The website is built on the Shopify platform, leveraging Cloudflare for DNS and CDN services, and integrates marketing and analytics tools such as Google Tag Manager and Bing Ads. The digital infrastructure reflects a moderate level of technical maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and Cloudflare protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which could pose regulatory risks. Overall, the website presents a professional and trustworthy front but would benefit from improvements in privacy and security transparency.

Abstract Office Interiors Ltd is a small UK-based company specializing in office refurbishment, interior design, and industrial unit fit outs primarily serving Essex, London, and surrounding counties. Their website presents a professional image with clear descriptions of services and a focus on commercial office spaces. The company targets businesses seeking turnkey office design and refurbishment solutions. Technically, the website is built on WordPress using the Divi theme and related plugins, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal privacy or terms policies. WHOIS data is unavailable due to a query error, which slightly reduces trustworthiness from a domain registration perspective. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance documentation.

E

Elite Fine Foods

elitefinefoods.co.uk

69

Elite Fine Foods is a UK-based wholesale foodservice supplier specializing in next day delivery of fresh meats, seafood, produce, and catering essentials to professional kitchens and foodservice outlets. The company operates multiple depots across England and Wales and offers an online ordering platform called MyElite, enhancing customer convenience and operational efficiency. The website reflects a medium-sized regional business with a strong focus on quality, flexibility, and customer service. Technically, the site uses modern web technologies including service workers, CDN hosting, and integrated analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are lacking. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, the website is professional, trustworthy, and well-structured, though WHOIS data is unavailable due to domain naming rules error, limiting domain registration verification.

H

Hollywood Travel

hollywoodtravel.co.uk

58

Hollywood Travel is a family-run coach travel company based in Birmingham, UK, offering a range of services including coach holidays, day trips, school trips, private hire, corporate hire, and airport transfers. The company emphasizes local and nationwide travel with over three decades of experience, positioning itself as a trusted small business in the transportation sector. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern JavaScript libraries, Cookiebot for consent management, and Google Analytics for visitor tracking. The site is hosted on a CDN platform likely associated with the Mono CMS, providing moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and bot protection via hCaptcha; however, explicit security headers are missing, and no public security policy or incident response information is available. Privacy compliance is well addressed with a visible cookie consent mechanism and a privacy policy page. The lack of WHOIS data due to domain registration issues limits full trust verification of the domain, though the website content and contact details appear legitimate. Overall, the site is functional, secure, and compliant with privacy regulations, suitable for its business purpose.

M

Murray Birrell

murraybirrell.co.uk

62

Murray Birrell is a well-established UK-based chartered building surveying firm with over 30 years of industry experience. The company offers a comprehensive range of specialist surveying and consultancy services primarily targeting property owners, developers, landlords, and tenants in London and Kent. Their market position is supported by multiple industry certifications and positive client testimonials, reflecting a strong reputation in the real estate sector. Technically, the website is built on a modern WordPress platform using Elementor and Slider Revolution, with good SEO and mobile optimization. Security posture is solid with HTTPS and security headers in place, though formal security policies and cookie consent mechanisms are lacking. Overall, the site presents a professional and trustworthy digital presence aligned with the company's business model and market claims.

C

Chepstow Plant International

chepstowplant.com

58

Chepstow Plant International is a UK-based company specializing in providing equipment and services for the earthmoving, quarrying, and civil engineering sectors. Founded in 1995, it has established itself as a trusted leader with a modern and sustainable mobile plant fleet. The company targets businesses and professionals in the construction and infrastructure industries, offering comprehensive solutions including earthworks, mineral extraction, and civil infrastructure maintenance. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on WordPress and leverages modern web technologies such as Typekit fonts, Google Tag Manager, and analytics tools. It is hosted likely on Pressidium infrastructure, with good mobile optimization and moderate performance. SEO practices are well implemented with proper meta tags and structured data. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and has cookie consent mechanisms in place, but lacks DNSSEC and security headers. There is no visible security policy, incident response information, or vulnerability disclosure mechanism. The WHOIS data raises concerns due to an inconsistent domain creation date in the future, which conflicts with the company's stated founding year, impacting trustworthiness. No privacy policy or terms of service pages were found, indicating compliance gaps. Overall, the website is professional and functional with good content quality and technical implementation. Security posture and privacy compliance require enhancements. The domain registration inconsistency is a notable risk factor. Strategic recommendations include enabling DNSSEC, publishing privacy and security policies, adding security headers, and clarifying domain registration details to improve trust and compliance.

C

Charles Milnes & Company Ltd

charlesmilnes.co.uk

44

Charles Milnes & Company Ltd is a specialized insurance brokerage firm focused on media, technology, production, and professional services sectors. With over 20 years of experience, the company offers tailored insurance solutions including cyberliability, production insurance, and professional indemnity. Their market position is that of a trusted niche broker with a strong client base and FCA authorization, emphasizing personalized and knowledgeable service. The website is built on a modern WordPress platform with Jetpack and Mapbox integrations, demonstrating a good level of digital maturity. The site is well-designed, mobile-optimized, and provides clear navigation and rich content relevant to their target audience. Technical implementation is solid, though there is room for improvement in security headers and cookie consent mechanisms. Security posture is generally good with HTTPS enforced and secure form handling, but lacks explicit security policies and incident response contacts. The absence of WHOIS data due to domain registration errors introduces some uncertainty about domain legitimacy, though the website content and business information appear professional and credible. Overall, the risk assessment is moderate with recommendations to enhance security headers, implement cookie consent for GDPR compliance, and clarify domain registration details to improve trust and compliance.

V

Vaughan Limited

vaughandesigns.com

56

Vaughan Designs is a medium-sized retail company specializing in high-quality lighting, furniture, lampshades, and textiles, targeting interior design professionals and retail customers internationally. The company operates flagship showrooms in London and New York and offers trade accounts and project planning tools. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses modern web technologies including JavaScript, jQuery, Google Tag Manager, and cookie consent mechanisms, with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response information is noted. The lack of WHOIS data for the domain is a concern for domain legitimacy and should be investigated further. Overall, the website presents a trustworthy and professional digital presence with moderate risk due to missing domain registration transparency.

C

CRO Software Consultancy Ltd

crosoft.co.uk

42

CRO Software Consultancy Ltd is a small UK-based technology company specializing in software consultancy, small website design, and hosting services since 1993. The website presents a basic but clear overview of the company's offerings targeted at small businesses and individuals seeking web design and hosting solutions. The digital infrastructure is simple, relying on basic HTML and CSS without advanced frameworks or CMS platforms. Hosting is provided by Ionos SE, a reputable registrar and hosting provider. The website lacks modern security features such as HTTPS and security headers, and no privacy or cookie policies are published, indicating a low level of privacy compliance. Social media presence is limited to a Twitter link, and no direct contact emails or phone numbers are provided on the homepage, which may hinder user engagement and trust. Overall, the website is functional but basic, with moderate navigation clarity and content relevance.

Tabs FM Ltd is a UK-based company specializing in advanced Computerized Maintenance Management System (CMMS) and Computer-Aided Facilities Management (CAFM) software solutions. Their products target facilities, estates, and service management sectors, offering modular, scalable software with a focus on compliance, health and safety, maintenance, and asset management. The company serves a diverse clientele including NHS Trusts, educational institutions, charities, and commercial enterprises, positioning itself as a trusted partner with recognized industry standards such as SFG20 integration. Technically, the website employs a mature technology stack including jQuery, Font Awesome, and Google Tag Manager, alongside a cookie consent management system ensuring GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. However, some legacy JavaScript libraries are used, and security headers are not explicitly detected, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security policies or incident response contacts. The absence of WHOIS data raises questions about domain registration transparency, though the website content and business information suggest legitimacy. No critical vulnerabilities or exposed sensitive data were found in the content analyzed. Overall, Tabs FM presents a professional and credible online presence with good content quality and privacy compliance. Strategic improvements in security headers, domain registration transparency, and incident response readiness would enhance their security posture and trustworthiness.

A

Allied Worldwide LTD

alliedworldwide.com

71

Allied Worldwide LTD operates as a global IT managed services, outsourcing, and resourcing provider, positioning itself as a strategic partner to enterprises seeking cost-efficient IT solutions. The company emphasizes innovation, scalability, and future-ready capabilities, supported by industry recognition and a professional digital presence. The website reflects a medium-sized technology business with a consistent brand and good content quality, targeting enterprise clients primarily in the UK and globally. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, with SEO optimization via Yoast and analytics integration through Google Analytics and HubSpot. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and social media presence suggest a legitimate business. Privacy and terms of service policies are not explicitly found, indicating room for compliance improvement. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

T

TruTac

trutac.co.uk

61

TruTac is a UK-based business specializing in fleet compliance and tachograph management solutions, offering a suite of software and hardware products designed to simplify regulatory compliance for transport companies. The company operates under the parent organization Microlise Limited and holds several certifications including Cyber Essentials and the Queen's Award, reinforcing its market credibility. Their product portfolio includes digital tachograph analysis, driver compliance verification, real-time fleet management, and mobile vehicle inspection tools, targeting fleet operators and compliance officers. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for data insights, while implementing GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data was not retrievable due to querying the subdomain rather than the domain, but the website's trust signals and business information support legitimacy. Overall, TruTac presents a mature digital presence with solid business and security practices.

T

TAD Architects

tadarchitects.co.uk

54

TAD Architects is a well-established architectural practice based in the UK, serving the Yorkshire and East Midlands regions for over 25 years. They offer integrated architectural, project management, and building surveying services, targeting clients ranging from private homeowners to large institutional projects such as hospitals. The company holds reputable certifications including RIBA Chartered Practice and Cyber Essentials, underscoring their commitment to quality and compliance. The website reflects a professional business presence with clear service descriptions and client testimonials, positioning them as a trusted regional leader in their sector. Technically, the website employs standard web technologies such as jQuery, Slick Carousel, and Google Maps API, with basic mobile optimization and SEO practices. While the site is accessible and functional, it lacks advanced security headers and a comprehensive privacy policy, which are areas for improvement. The cookie policy and consent mechanism are present, indicating some attention to privacy compliance. From a security perspective, the absence of WHOIS data due to an invalid query on the 'www' subdomain limits domain registration trust verification. No WAF or blocking mechanisms are detected, and no critical vulnerabilities are apparent in the site content or scripts. However, the lack of security headers and privacy documentation suggests moderate security maturity. Overall, the website and business demonstrate a solid professional presence with room for enhancement in privacy compliance and security best practices. Strategic improvements in these areas would strengthen trust and regulatory adherence, supporting continued business growth and client confidence.

W

Woodgate and Clark Limited

woodgate-clark.co.uk

65

Woodgate and Clark Limited is a well-established loss adjusting company based in England, offering a broad range of insurance-related services including commercial major loss, property, liability, and specialist claims management. The company positions itself as trusted and secure with over half a century of experience, serving insurance companies, brokers, and commercial clients. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the site is built on Drupal 10 with modern web standards, including mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security policy documentation is absent. The WHOIS lookup failed due to domain naming rules, indicating a possible misconfiguration or use of a subdomain, which slightly impacts trust but does not detract from the professional presentation and business legitimacy evident on the site.

C

CTS Security

cts-security.co.uk

55

CTS Security is a well-established security company based in Norfolk, UK, specializing in the installation and maintenance of intruder alarms, fire alarms, CCTV, and access control systems. With over 50 years of experience, the company serves a diverse clientele including commercial, domestic, and public sector customers across East Anglia and beyond. The website reflects a professional and trustworthy business with clear service offerings and client endorsements. Technically, the website employs modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LiveChat, indicating a mature digital presence. Security-wise, the site uses HTTPS and secure forms but lacks explicit security headers and published security policies, which could be improved. The WHOIS data is unavailable due to domain naming rules violations, which introduces some uncertainty about domain legitimacy, though the website content itself is consistent and professional. Overall, the site presents a solid business with room for enhanced security transparency and compliance documentation.

B

Bronte Carpets

brontecarpets.co.uk

52

Bronte Carpets is a well-established bespoke carpet manufacturer and retailer based in West Yorkshire, UK, with a history dating back to 1982. The company specializes in custom made luxury carpets and rugs, emphasizing quality, natural wool materials, and personalized services such as premium dye matching and made-to-shape carpets. Their market position is that of a niche, quality-focused manufacturer serving homeowners and interior designers seeking bespoke flooring solutions. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins like Yoast SEO and Cookie Law Info for SEO and privacy compliance. The site demonstrates good mobile optimization and a moderate performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the security posture is good but could be enhanced by adding explicit security policies and incident response information. Privacy compliance is strong with clear privacy and cookie policies. The website content is professional, relevant, and safe for general audiences. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include implementing additional HTTP security headers, publishing a security policy or incident response plan, and considering a security.txt file for vulnerability disclosures to further enhance trust and security maturity.

M

Multipulse Electronics Ltd

multipulse.com

54

Multipulse Electronics Ltd is a specialist provider of electronic communication systems and engineering solutions primarily serving the rail and transport sectors in the United Kingdom. Their services include maintenance and supply of GSM-R, wi-fi, RETB, energy metering, passenger information systems, and remote monitoring controls. The company positions itself as a niche B2B service provider with a focus on technical expertise and project management within transportation technology. The website content is professional and well-structured, targeting industry professionals and organizations requiring specialized communication and engineering services. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies and plugins, though performance is moderate and mobile optimization is basic. Security posture is adequate with HTTPS and reCAPTCHA usage but lacks important security headers and advanced privacy consent mechanisms. WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site scores well on content quality and business credibility but should improve security and privacy compliance to enhance trust and reduce risk.

Koris365 is a UK-based IT Managed Service Provider established in 2020, offering technology solutions to help customers achieve better outcomes. The website presents a professional and consistent brand image with a focus on IT managed services targeted at UK businesses. The technical infrastructure is built on WordPress using modern page builders and SEO plugins, hosted likely on WPEngine, with SSL/TLS enabled ensuring secure communications. Cookie consent is implemented via Cookiebot with an opt-out mechanism, reflecting a basic level of privacy compliance. Security posture is moderate with HTTPS enforced and use of Google reCAPTCHA, but lacks DNSSEC and security headers, and no explicit privacy or security policies are published. Overall, the site is functional, professional, and trustworthy but could improve in privacy transparency and security hardening.

C

Callund Consulting Ltd.

callund.com

48

Callund Consulting Ltd. is a UK-based independent consulting firm specializing in actuarial, economic, and policy advice related to pensions and social security reform. Founded in 1975, the company serves governments, social institutions, and enterprises primarily in frontier markets, often supported by international donors. Their expertise spans actuarial advice, policy development, capital markets, IT, and insurance consulting, with a strong international footprint across more than 50 countries. The website reflects a professional consulting business with clear service offerings and a focus on sustainable social security systems. Technically, the website is built on WordPress using the Divi theme and includes common plugins such as Contact Form 7 and a cookie notice plugin. The site is accessible, mobile-optimized, and includes a cookie consent mechanism. However, the technology stack is somewhat dated (e.g., jQuery 1.12.4) and lacks advanced security headers. Performance is moderate, and SEO and accessibility are basic but functional. From a security perspective, the site enforces HTTPS and uses nonce tokens in forms, but lacks visible security headers like CSP or HSTS. The WHOIS data for the domain is missing, indicating potential domain expiration or privacy protection, which raises concerns about domain legitimacy. No explicit security or incident response policies are published, and no vulnerability disclosure mechanisms are present. Overall, while the business content and presentation are professional and credible, the missing WHOIS data and limited security policies reduce trustworthiness. Strategic improvements in domain registration transparency, security headers, and privacy documentation are recommended to enhance the security posture and compliance.

H

Hindmarch & Co Ltd

hindmarch.org

62

Hindmarch & Co Ltd is a well-established family-owned automotive dealership operating since 1972, specializing in used car sales and servicing with a strong focus on Peugeot vehicles. The company operates in Lincolnshire with locations in Grantham and Stamford, offering a comprehensive range of services including vehicle sales, servicing, MOT, finance brokering, and petrol forecourt operations. Their market position is that of a trusted local dealer with over 50 years of experience and a reputation for quality and customer care. Technically, the website is built on a custom automotive dealer CMS platform by Autoweb Design, utilizing modern web technologies such as jQuery, Google Tag Manager, and responsive design frameworks. The site demonstrates good mobile optimization, clear navigation, and a professional design. Performance is moderate with standard use of asynchronous scripts and lazy loading for images. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, along with a cookie consent mechanism that aligns with GDPR requirements. However, some additional security headers are missing, and there is no visible security.txt or incident response information published. The absence of WHOIS data limits domain registration trust verification, but the website content and business disclosures strongly indicate legitimacy. Overall, the website presents a professional and trustworthy front for the business, with good compliance and security practices, though improvements in security headers and transparency around incident response would enhance their posture. The domain WHOIS data gap is a notable concern but likely due to technical issues rather than malicious intent.

D

Darke Group Ltd

darkegroup.co.uk

42

Darke Group Ltd is a UK-based company specializing in bespoke steel fabrications and complex architectural metalwork, serving architects, designers, contractors, and developers. The company offers a comprehensive range of services including structural steelwork, architectural metalwork, steel boats, staircases, balconies, handrails, and balustrades. Established in 2009, Darke Group holds a strong market position as a leading UK provider in its sector, supported by accreditations and client testimonials. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using common plugins such as Slider Revolution and Contact Form 7. It employs modern JavaScript libraries like jQuery and integrates Google Analytics and Tag Manager for user tracking. Hosting is provided by Fasthosts Internet Ltd, a reputable registrar. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and an incident response contact. There is no cookie consent mechanism despite having a cookie policy, which may affect GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is adequate but could be improved with additional headers and formal incident response procedures. The overall risk assessment indicates a trustworthy and professional business website with minor compliance and security gaps. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, establishing an incident response contact, and maintaining up-to-date software to enhance security and compliance posture.

H

Hoburne

hoburne.com

61

Hoburne operates a professional and well-structured website focused on self-catering holidays and holiday home ownership across UK holiday parks. The company offers a variety of accommodation options including luxury lodges, caravans, and touring pitches, targeting holidaymakers and prospective holiday home buyers. The website demonstrates a solid market position within the UK hospitality sector, with clear branding and consistent content quality. Technically, the site is built on Silverstripe CMS 6.1 and integrates modern technologies such as Google Tag Manager, Cookiebot for consent management, and Feefo for customer reviews. The site is mobile-optimized and shows good SEO and accessibility practices. Security is robust with HTTPS enforced and bot detection via Cloudflare, although some security headers are missing and no explicit security policy or incident response contacts are published. The security posture is generally strong, with comprehensive cookie consent and privacy policies that indicate GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, Hoburne's website is professional and trustworthy from a user perspective, but the lack of WHOIS data and some missing security best practices suggest areas for improvement to enhance trust and compliance.

H

hargreaves-cycles

hargreaves-cycles.co.uk

47

Hargreaves Cycles is a well-established UK-based retail business specializing in bicycles and cycling-related products and services. The company offers a broad range of bicycles including mountain, road, electric, BMX, and children's bikes, along with customer services such as a cycle workshop, financing options, and participation in the Cycle To Work Scheme. The website reflects a medium-sized retail operation with a consistent brand presence and a focus on quality bicycle brands. Technically, the website is built on WordPress with WooCommerce, utilizing modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly with structured data implemented. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. Overall, the website is professional and trustworthy, but could enhance privacy compliance and security transparency.

S

Scottish Rowing

scottish-rowing.org.uk

47

Scottish Rowing serves as the official governing body for rowing in Scotland, overseeing the sport's governance, development, and promotion across the country. The organization supports approximately 28 affiliated clubs and a membership base of around 2,500 individuals. Their services include organizing competitions, supporting coaching and volunteer efforts, and providing resources related to safety and wellbeing. The website reflects a well-structured, community-focused non-profit entity with a clear mission to develop rowing in Scotland. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery and FontAwesome. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. However, some improvements could be made in accessibility and the implementation of security headers. The site uses HTTPS with a valid SSL configuration, ensuring secure communications. From a security perspective, the website shows a solid baseline with HTTPS and CSRF token usage, but lacks advanced security headers and a cookie consent mechanism, which are important for compliance and protection. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the queried www subdomain is due to an invalid query rather than a security concern, as the main domain likely exists and is properly registered. Overall, Scottish Rowing's website is trustworthy and professional, serving its community effectively. Strategic recommendations include enhancing privacy compliance with cookie consent, adding security headers, publishing incident response and security policies, and clarifying WHOIS information by querying the correct domain. These steps will strengthen the site's security posture and regulatory compliance while maintaining user trust.

M

Match Lighting Studio

matchlightingstudio.com

44

Match Lighting Studio is a specialized architectural lighting design firm operating primarily in the UK and Spain. Founded in 2015, the company offers creative lighting solutions for residential, retail, commercial, and public realm projects. Their market position is that of a niche service provider with a focused client base including architects and property developers. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with Bootstrap and jQuery, hosted likely via Kualo, and employs HTTPS with Google Analytics for tracking. However, it lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with no DNSSEC and missing security headers, though HTTPS is enforced. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.

T

Tigerlily Training Ltd

tigerlilytraining.co.uk

48

Tigerlily Training Ltd is a well-established UK-based provider of specialist first aid training courses for individuals and businesses. Founded in 2010, the company offers a wide range of accredited courses including First Aid at Work, Paediatric First Aid, Mental Health First Aid, Fire Marshal training, and Food Hygiene. Their business model focuses on delivering training both at their venues across the UK and in-house at client workplaces, targeting a broad audience from individuals to corporate clients. The website demonstrates a strong market position supported by extensive customer reviews and active social media engagement. Technically, the website employs a modern JavaScript stack including jQuery, Knockout.js, and various UI libraries for a responsive and interactive user experience. It integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook SDK, and LiveChat, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS with a good SSL configuration and includes several security best practices such as secure forms and no exposed sensitive data. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, Tigerlily Training Ltd presents a trustworthy, professional, and secure online presence with a comprehensive offering in the education sector. The website quality, business credibility, and security posture are strong, with minor recommendations for security header enhancements and ongoing third-party script audits to maintain security integrity.

A

Apollo Engineering Consultants Limited

apollo-oe.com

51

Apollo Engineering Consultants Limited is a professional energy advisory and engineering consultancy focused on enabling clients to achieve net zero ambitions across various energy sectors including oil and gas, hydrogen, nuclear, and offshore renewables. The company offers a broad range of services including engineering consultancy, technical placements, project management consultancy, and digital applications. Their market position is strong with a clear emphasis on sustainability and decarbonisation, supported by a medium-sized, Scotland-based operation. The website reflects a professional and modern digital presence with comprehensive content and clear navigation. Technically, the website is built on WordPress with modern plugins and tracking technologies such as Gravity Forms, Google Tag Manager, Microsoft Clarity, and LinkedIn Insight. The site employs HTTPS with good security practices including reCAPTCHA on forms and a granular cookie consent mechanism. Performance and mobile optimization are good, and SEO best practices are followed. Security posture is solid with HTTPS and secure form handling, though there is room for improvement by adding security headers and publishing a formal security policy and incident response contacts. Privacy compliance is well addressed with comprehensive privacy and cookie policies, and GDPR compliance is evident. Overall, the website and business present a low risk profile with strong trust indicators, professional content, and no signs of malicious activity. The WHOIS data is limited due to TLD restrictions but does not raise concerns. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security.

C

Caledonian Electrical Services Ltd

caledonianelectrical.com

63

Caledonian Electrical Services Ltd is a small, trusted electrical contracting company operating primarily in Glasgow and Central Scotland. Established in 2010, the company offers a broad range of electrical services across domestic, commercial, and industrial sectors, including consumer unit upgrades, rewires, electrical inspections, lighting, EV charger installations, and specialist electrical works. The company holds key industry certifications such as NICEIC and SafeContractor approvals, enhancing its market credibility and trustworthiness. The website reflects a professional and consistent brand image, targeting local clients seeking reliable electrical services. Technically, the website is built using the Canva Website Builder platform, employing modern web technologies such as JavaScript and CSS. It is hosted under a domain registered with IONOS SE, with HTTPS enabled and basic security headers implemented. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. There is no evidence of analytics or tracking scripts, indicating a minimal user tracking approach. From a security perspective, the website benefits from HTTPS and domain transfer protection but lacks DNSSEC and comprehensive security headers. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as incident response contacts, indicates compliance gaps with GDPR and best security practices. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration history. Overall, the website presents a low-risk profile with good business credibility but would benefit from enhanced privacy compliance and security policy disclosures to improve trust and regulatory adherence.

D

Dunbia

dunbia.com

59

Dunbia is a well-established family-owned food manufacturing company specializing in meat products such as beef, lamb, burgers, and further processed meats. Operating primarily in the UK and Ireland, Dunbia serves a broad market including retailers, food service, and agriculture sectors. The company is a division of Dawn Meats, reflecting a strong market position and extensive operational scale. Their website demonstrates a professional digital presence with clear branding, comprehensive product information, and active social media engagement. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools, showing a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers could enhance protection. Overall, Dunbia presents a credible, trustworthy business with a solid online presence and compliance with privacy regulations.

I

ICR Scotland

icrscotland.co.uk

56

ICR Scotland is a specialist provider of EPoS solutions focused on the retail and hospitality sectors in the United Kingdom. Founded in 2016, the company offers a range of software and hardware products, including ICRTouch EPoS systems, remote management tools, loyalty software, and wireless ordering solutions. Their market position is strengthened by authorized partnerships and a clear focus on sector-specific needs. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on WordPress using the Elementor page builder and the GeneratePress theme, hosted by GoDaddy.com, LLC. It employs modern web technologies such as jQuery and Google reCAPTCHA v3 for form security. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks important security headers which could enhance protection against common web attacks. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which is a notable gap given GDPR requirements. Contact information is available primarily through forms, with no direct emails or phone numbers published. Overall, the website presents a low risk profile with a legitimate domain registration consistent with the business history. Strategic improvements in privacy compliance and security headers would strengthen the security posture and regulatory adherence, enhancing trust and user confidence.

F

Filpumps

filpumps.co.uk

48

Filpumps is a Scottish engineering specialist with over 35 years of experience, focusing on pump systems and fluid solutions for water, wastewater, and industrial applications. Their services include borehole drilling, water treatment, pump and tank specialist services, and engineering support, targeting homes, farms, and industrial sectors primarily in Scotland. The company operates an online shop for pumps and related products, reinforcing their business model of combining service and product sales. The website is professionally designed with consistent branding and clear navigation, reflecting a medium-sized enterprise with a strong local market position. Technically, the website is built on WordPress with WooCommerce and leverages modern marketing and analytics tools such as Google Analytics, Microsoft Clarity, HubSpot, and MailerLite. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security-wise, the site uses HTTPS with valid SSL certificates and employs reCAPTCHA for form protection. However, it lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The security posture is solid but could be enhanced by implementing security headers, publishing incident response and vulnerability disclosure policies, and improving privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security best practices. Strategically, Filpumps should focus on improving privacy and cookie policy disclosures, implementing security headers, and formalizing incident response procedures to strengthen compliance and trust. Continued investment in technical modernization and accessibility will support sustained growth and market leadership.

I

Industrial Paint & Powder Ltd

indpaintandpowder.co.uk

55

Industrial Paint & Powder Ltd is a well-established supplier of industrial coatings, including wet paint systems, powder coatings, colour matching, and technical support services primarily serving businesses across Scotland. With over 60 years of industry experience and ISO 9001 certification, the company positions itself as a trusted partner in the manufacturing and finishing sectors. Their website reflects a professional and consistent brand image, targeting industrial and commercial clients seeking reliable coating solutions. The technical infrastructure is modern and leverages Webflow CMS, Google Fonts, and jQuery, hosted on a reputable platform with HTTPS enabled. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although performance is moderate. There are no detected tracking or advertising scripts, indicating a focus on straightforward business communication rather than marketing automation. From a security perspective, the website benefits from HTTPS and absence of exposed sensitive data or vulnerable libraries. However, it lacks security headers and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms, which could expose the company to regulatory risks. Overall, the website is credible and trustworthy with strong business credibility and technical implementation but requires enhancements in privacy compliance and security best practices to reduce risk and improve user trust.

C

Crow Wood Golf Club

crowwoodgolfclub.co.uk

46

Crow Wood Golf Club is a well-established local golf club and community hub located near Glasgow, UK, founded in 2006. The club offers golf membership, a driving range, food and drink services, and event hosting, targeting local golfers and community members. The website reflects a professional and consistent brand presence with good content quality and clear business focus. Technically, the site is built on WordPress using modern themes and plugins such as BeTheme and Slider Revolution, with integrations for Google Analytics and Facebook Pixel for marketing and tracking purposes. The site is hosted by Ionos SE and uses HTTPS with a valid SSL certificate, ensuring secure communications. Security posture is moderate with room for improvement, particularly in implementing security headers and publishing security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. Business credibility is strong given the domain age, consistent WHOIS data, and social media presence. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

C

Coleman Building Company LLP

colemanbuilding.co.uk

45

Coleman Building Company LLP is a well-established high-end building contractor based in Hampshire, UK, with a history dating back to 1977. The company specializes in bespoke new builds, extensions, and refurbishment projects, targeting clients seeking luxury residential construction services. Their website reflects a professional and consistent brand image, showcasing key team members and client testimonials that reinforce their market position. Technically, the website is built on WordPress using Elementor, with modern libraries such as jQuery and Swiper.js. Hosting is provided by GoDaddy, and the site uses HTTPS with a good SSL configuration. However, there is room for improvement in security headers and privacy compliance, as no cookie consent mechanism or security policies are published. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks some best practices such as security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the site is secure but could enhance its posture by adopting additional security controls and privacy compliance features. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and maintaining regular updates to plugins and themes to mitigate vulnerabilities.

M

Millars Shoe Store Ltd

millarsshoestore.com

66

Millars Shoe Store Ltd operates an e-commerce platform specializing in footwear, offering a seasonal collection of shoes with free delivery. The company targets a general audience in the United Kingdom and has been in operation since 2012. The website is built on the Shopify platform, leveraging various marketing and analytics tools such as Google Analytics, Facebook Pixel, Microsoft Clarity, Klaviyo, and Judge.me for customer reviews. The business model focuses on online retail with a strong emphasis on customer engagement and marketing integration. Technically, the website demonstrates a moderate to good level of digital maturity, utilizing a modern e-commerce CMS (Shopify) and integrating multiple third-party services for analytics and marketing. The site is hosted on SiteGround, with performance and mobile optimization rated as good. SEO and accessibility are basic to good, with room for improvement in accessibility compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and domain locking mechanisms to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and there is no visible security.txt or vulnerability disclosure policy. The site implements CAPTCHA on forms and respects user consent for tracking, but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Overall, the website is professionally designed and trustworthy for general e-commerce use, but improvements in privacy compliance documentation and security transparency are recommended to enhance user trust and regulatory adherence.

T

The Headshot Guy

theheadshotguy.co.uk

49

The Headshot Guy is a UK-based professional photography service specializing in corporate and individual headshots, offering services across London and the wider UK. The company emphasizes efficiency, minimal disruption, and guaranteed results, targeting corporate clients and professionals seeking to enhance their personal and team branding through high-quality headshots. The website is built on WordPress with modern SEO and GDPR compliance tools, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS and cookie consent mechanisms in place, though explicit privacy and terms policies are missing. The domain WHOIS data is unavailable or indicates registration issues, which raises concerns about domain legitimacy despite the professional appearance of the website. Overall, the business presents a credible and focused service offering with room for improvement in transparency and security best practices.

Carole Nash UK is a leading specialist insurance broker focused on motorbike and classic car insurance in the United Kingdom. The company offers a broad range of insurance products including motorbike, classic car, car, van, travel, motorhome, and campervan insurance. The website demonstrates a strong market position supported by FCA regulation, extensive customer testimonials, and integration with Trustpilot for customer reviews. The business targets UK motorbike and classic car owners seeking tailored insurance solutions. Technically, the website is built on the Sitefinity CMS platform and employs modern technologies such as Adobe DTM, Google Tag Manager, and Trustpilot widgets, ensuring a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or query limitations, but the website's content and trust signals support its legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for its target audience.

S

Scottish Business Centre

scottishbusinesscentre.com

43

Scottish Business Centre is a specialized business transfer agency operating in Scotland, focusing on the sale and valuation of hotels, guest houses, and pubs. The company targets business buyers and sellers within the hospitality and real estate sectors, offering valuation and advisory services to facilitate business transfers. The website reflects a professional and consistent brand image, supporting the company's market position as an experienced niche player since 2017. Technically, the site is built on WordPress using Elementor and Yoast SEO, with integrations for Google Analytics and Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, though some security headers are missing and should be added to enhance protection. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or recent domain registration, which slightly impacts trustworthiness. Overall, the site is well-designed, user-friendly, and compliant with privacy norms, but domain legitimacy verification is recommended.

4

4 Aces

4acesltd.com

61

4 Aces is a UK-based company specializing in the consolidation and supply of food and beverage packaging solutions nationwide. The company positions itself as a leading consolidator in this sector, offering a wide range of products including hot and cold cups, vending cups, food service packaging, accessories, bespoke packaging, and sustainable CUPkind products. The website reflects a professional B2B business model targeting food and beverage businesses across the UK. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Tag Manager. The site is mobile-optimized and performs moderately well, with good navigation and content relevance. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no privacy policy or terms of service pages found. WHOIS data confirms a long-standing domain registration consistent with the business age and no privacy protection, indicating transparency. Overall, the website is trustworthy and professional but could improve in privacy and security policy disclosures.

M

Morris Marshall & Poole

morrismarshall.co.uk

61

Morris Marshall & Poole is a regional estate agency specializing in residential and commercial property sales and lettings across Mid Wales and Shropshire. The company offers a broad range of services including RICS valuations, property auctions, agricultural property services, and planning advice. Their market position is strengthened by membership in The Guild of Property Professionals and multiple office locations, providing extensive regional coverage and national exposure. The website reflects a professional and trustworthy business with clear service offerings and customer engagement features such as reviews and valuation requests. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Maps API, and Google reCAPTCHA for security. Analytics and marketing tools like Google Tag Manager and Google Analytics are integrated with appropriate cookie consent mechanisms, indicating good privacy compliance. Security posture is solid with HTTPS and form protections, though some security headers are missing and no explicit incident response contacts are provided. The WHOIS data is unavailable due to a domain registration error, which is a concern for domain legitimacy but does not detract from the professional presentation and business credibility of the website. Overall, the site is well-structured, accessible, and secure, serving its target audience effectively.

S

Scollen & Wright Funeral Service Ltd

scollenandwright.co.uk

57

Scollen & Wright Funeral Service Ltd is a small, family-owned funeral service provider based in Sunderland, UK, with over 30 years of local business history. The company offers funeral arrangement services, funeral plans, and memorial items, targeting local families in need of compassionate funeral care. Their website reflects a professional and consistent brand image, emphasizing their independent and family-run nature. The business positions itself as a trusted local service with clear contact channels and a focus on personalized support during difficult times. Technically, the website is built on WordPress using the Divi theme and several popular plugins for SEO, performance, and security, including Google reCAPTCHA and cookie consent mechanisms. The site is mobile-optimized and provides good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and anti-spam measures, though it lacks some advanced security headers. Privacy compliance is addressed with a GDPR cookie banner and a privacy policy page. However, WHOIS data is unavailable due to domain registration errors, which slightly impacts trust verification. Overall, the website is professional, secure, and compliant, serving its niche effectively.