United Kingdom security reports

W

Water Hygiene Systems

waterhs.co.uk

54

Water Hygiene Systems Limited is a specialist UK-based company providing comprehensive water hygiene, legionella risk assessment, water treatment, and water quality testing services. The company targets businesses and organizations requiring compliance with water safety standards, primarily in SE England. Their website demonstrates a professional presence with clear service offerings, certifications, and contact information. Technically, the site is built on WordPress with modern plugins and includes SEO optimization and mobile responsiveness. Security posture is solid with HTTPS and CAPTCHA-protected forms, though it lacks some security headers and cookie consent mechanisms. WHOIS data for the www subdomain is unavailable due to domain naming rules, but the main domain is active and legitimate. Overall, the company presents a trustworthy and credible digital footprint.

B

Braintree Youth Project Charity

braintreeyouth.org.uk

57

Braintree Youth Project Charity is a small, community-focused non-profit organization based in Braintree, UK, providing a safe and welcoming environment for youth aged 11-18. The charity offers a variety of free sessions including drop-ins, debate clubs, and parent-led home education, alongside organized trips and residentials. The website reflects a clear mission and target audience with consistent branding and relevant content. Technically, the site is built on Squarespace, leveraging its platform and libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The WHOIS data is unavailable or incorrectly queried, which reduces domain registration trust but the presence of charity registration numbers and contact details supports legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

A

Agile

agilesolutions.co.uk

70

Agile is a UK-based consulting firm specializing in data, cloud, and AI services aimed at driving business transformation. Established in 2006, Agile has built a strong market position with a medium-sized business model focused on delivering data strategy, governance, integration, and monetization services. The company partners with leading technology providers such as Microsoft, AWS, Snowflake, and Informatica, serving a global client base including notable organizations like BAE, BBC, and Natwest. Technically, the website is built on WordPress using modern frameworks like Elementor and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, Agile presents a professional and trustworthy online presence with opportunities to enhance security and privacy transparency.

H

Henlee Resourcing

henlee.co.uk

58

Henlee Resourcing is a specialized HR recruitment agency based in Swindon, UK, with a strong local market presence and a focus on human resources roles. Established in 2010, the company offers tailored recruitment solutions, candidate support, and community engagement through CIPD affiliations and events. The website reflects a professional and consistent brand image targeting HR professionals and clients seeking recruitment services. Technically, the site is built on WordPress with modern libraries and frameworks, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and Content Security Policy headers, though additional security headers and incident response policies could enhance protection. Privacy compliance is adequate with clear privacy and cookie policies, but lacks explicit consent mechanisms. Overall, the site is trustworthy, well-maintained, and free from suspicious indicators.

C

CC Aqua Blasting Ltd

ccaquablasting.com

54

CC Aqua Blasting Ltd is a UK-based specialist company providing vapour blasting, engine parts restoration, PVD stripping, electroplating preparation, and machined surface finishing services. Established in 2009, the company operates with a niche focus on high-quality surface preparation and bespoke emblem manufacturing, targeting industrial and restoration clients. The website reflects a small but professional business with clear service offerings and contact information. Technically, the website is built on WordPress with SEO and styling plugins, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies, though no personal data collection or tracking is evident. Overall, the domain registration is consistent with the business history, indicating legitimacy and trustworthiness.

K

Kentskitchen

kentskitchen.co.uk

53

Kentskitchen is a UK-focused online gambling affiliate and information website specializing in detailed reviews and guides about Peachy Casino, a UK Gambling Commission licensed online casino. The site provides comprehensive content covering licensing, game selection, bonuses, payment methods, mobile experience, customer support, and responsible gambling tools. Technically, the site is built on WordPress with modern SEO and mobile optimization, delivering a fast and user-friendly experience. Security posture is good with HTTPS and SSL encryption, though explicit security headers and incident response policies are absent. The WHOIS data shows inconsistencies with a future domain creation date, which raises some trust concerns. Overall, the site is professional and trustworthy for its niche audience but would benefit from improved transparency and compliance features.

Cottee Flowers is a commercial florist specializing in high-quality floral displays for retail clients and offices primarily in London's west end. The business positions itself as a premium supplier with notable awards from the Chelsea Flower Show, enhancing its market credibility. The website is professionally designed using Squarespace, featuring good mobile optimization and clear navigation. However, the absence of privacy and cookie policies, as well as lack of explicit contact information, limits its compliance and user trust. The domain WHOIS data is missing, which raises questions about domain registration transparency, though the website content and hosting platform suggest legitimacy. Security posture is generally good with HTTPS and HSTS enabled, but additional security headers and policies are recommended.

R

Ray Corporation Ltd

ray-corporation.com

39

Ray Corporation Ltd presents itself as a UK-registered company specializing in telecommunications, particularly VoIP wholesale services, alongside software development and export-import consultancy. The website content is accessible and provides basic information about the company’s services and contact details. However, the technical infrastructure is outdated, relying on deprecated Flash technology and lacking modern security features such as HTTPS and security headers. The absence of privacy and cookie policies further weakens compliance posture. Critically, WHOIS data for the domain is missing, indicating potential domain registration issues that severely impact trustworthiness. Overall, while the business claims a long history and diverse service offerings, the digital presence and security posture require significant improvements to meet modern standards.

S

Storewithus Self Storage Bridgend

storewithus.co.uk

63

Storewithus Self Storage Bridgend operates a professional self storage and flexible office space business serving Bridgend and surrounding areas in the UK. The company offers indoor and outdoor storage units, container storage, caravan and motorhome storage, along with free van hire and insurance. Their market position is that of the largest and best value self storage provider in Bridgend, supported by customer testimonials and CaSSOA Platinum certification. The website is well designed with clear navigation and good content quality, targeting domestic and business customers seeking storage solutions. Technically, the site uses modern web technologies including service workers and integrates Google Analytics and Trustpilot for analytics and reputation management. Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and policies are missing. Privacy compliance is basic with a cookie notification but no clear privacy or terms pages. WHOIS data is unavailable due to domain naming errors, which lowers trustworthiness from a domain registration perspective. Overall, the site is professional and trustworthy in content but would benefit from improved compliance and security disclosures.

Belazu Ingredient Company operates a professional e-commerce platform specializing in premium Mediterranean and Middle Eastern food ingredients targeted at chefs and home cooks. The company has a well-established online presence with a domain registered since 2000, indicating a mature business. Their website offers a broad product range, free UK shipping over £50, and a dedicated trade site for business customers, positioning them as a niche premium supplier in the food retail sector. Technically, the website is built on the BigCommerce platform using the Stencil framework, integrating modern analytics and marketing tools such as Google Tag Manager, TikTok Pixel, Facebook Pixel, Hotjar, and Klaviyo. The site demonstrates good mobile optimization, clear navigation, and a professional design, supporting a positive user experience and effective e-commerce functionality. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. However, the absence of a published security policy or incident response contact is noted. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in DNS security and HTTP security headers would enhance the security posture further. The site is suitable for general audiences with no adult or questionable content detected.

Firing Line Museum is a specialized non-profit institution dedicated to preserving and showcasing over 300 years of Welsh military history, including notable battles and recent military service. The museum offers educational programs, genealogy research, volunteer opportunities, and an online shop, positioning itself as a niche cultural heritage site with a strong community focus. The website is built on WordPress with WooCommerce, leveraging modern themes and plugins to provide a functional and visually appealing user experience. Social media integration and accreditation badges enhance trust and engagement. Security posture is solid with HTTPS and secure forms, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

T

The SOFII Foundation

sofii.org

61

The SOFII Foundation operates a comprehensive online platform dedicated to fundraising innovation and inspiration, targeting fundraising professionals globally. Established in 2005 and based in the UK, SOFII provides extensive resources including case studies, articles, workshops, and multilingual content to support and educate fundraisers. The organization maintains strong partnerships with reputable entities such as Blackbaud and CIOF, enhancing its credibility and reach. Technically, the website is built on Craft CMS and leverages modern web technologies including jQuery, Slick Carousel, Google Tag Manager, and MailChimp for marketing and analytics. Hosting is provided by Media Temple, and the site demonstrates good mobile optimization and SEO practices. While performance is moderate, the site is well-structured and accessible with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized transfers or updates. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating potential areas for enhancement. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. No critical vulnerabilities or suspicious content were identified. Overall, SOFII presents a high-quality, trustworthy, and professional online presence with a strong focus on supporting the fundraising community. Strategic improvements in security hardening and accessibility could further strengthen its position and user trust.

A

Armour Environmental Services Limited

armourpest.co.uk

42

Armourpest is a UK-based pest control service provider specializing in domestic and commercial pest management across Essex and London. The company is well-established since 2008 and holds memberships in recognized industry bodies such as the NPTA and BPCA, which supports its market credibility. Their key services include heat treatment, bird proofing, and general pest control, targeting both residential and commercial clients. The website reflects a professional business with clear contact information and a consistent brand presence. Technically, the website uses modern web technologies including Google Tag Manager, Google Analytics, and a Django-based CMS hosted on DigitalOcean. The site is mobile-optimized and features interactive elements like slick carousels and forms protected by CSRF tokens. However, some SEO and accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and implements CSRF protection on forms, but lacks visible security headers and does not provide a privacy or cookie policy, which are important for GDPR compliance. There is no incident response or vulnerability disclosure information available, which could be improved to enhance trust and security posture. Overall, Armourpest presents a trustworthy and professional online presence with room for improvement in privacy compliance and security best practices. Addressing these gaps would strengthen their digital maturity and reduce potential risks.

C

Cave Direct

cavedirect.com

68

Cave Direct is a well-established family-owned business specializing in the import and wholesale distribution of speciality and craft beers across the UK. With over 40 years of experience, the company focuses on Belgian, German, and modern craft beers from the UK, US, and Scandinavia, serving both on and off-trade markets. Their website reflects a professional e-commerce platform built on Symphony Commerce, leveraging modern web technologies and Cloudflare for DNS and CDN services. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its target audience. From a security perspective, the website employs HTTPS with a good SSL configuration and uses Cloudflare DNS, enhancing its security posture. However, there is room for improvement in explicitly publishing security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of DNSSEC and some advanced security headers suggests potential areas for strengthening the security framework. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR requirements. Overall, the domain registration data aligns well with the business claims, showing a consistent and legitimate presence since 2000. The website content is alcohol-related, targeting a mature audience, and contains no adult or explicit content. The site demonstrates good business credibility and technical implementation, with minor gaps in security policy transparency. Strategic recommendations include enabling DNSSEC, publishing a formal security policy and incident response contacts, implementing a vulnerability disclosure program, and enhancing security headers to improve trust and compliance. These steps will bolster the company's security posture and reinforce customer confidence in their digital presence.

Integrity UK Ltd is a UK-based brand enhancement consultancy specializing in brand development, employee engagement, and customer experience. The company serves businesses seeking to align their brand vision across all touchpoints, with a portfolio including notable clients such as Volkswagen UK and AXA XL. The website is professionally designed using Joomla CMS and incorporates modern JavaScript libraries and Google Analytics for tracking. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS enabled and secure form handling, but absence of security headers and incident response information are areas for improvement. Overall, the website and business appear legitimate and trustworthy, though WHOIS data for the exact domain queried is unavailable due to domain naming rules, which is typical for subdomains.

D

DeNovo Healthcare Ltd

denovohealthcare.com

57

DeNovo Healthcare Ltd is a UK-based healthcare company established in 2007, specializing in providing innovative prosthetic and orthotic products and services. The company targets healthcare professionals and patients, offering bespoke products and a patient-centered approach. Their market position is that of a small but established supplier with a focus on quality and innovation. The website is built on the Ekm ecommerce platform, utilizing modern JavaScript libraries such as Splide.js and integrates marketing tools like Mailchimp and Google Analytics. The technical infrastructure is moderately performant with good mobile optimization but could benefit from enhanced accessibility and SEO improvements. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected. The absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and content of the website. Overall, the site demonstrates a good level of business credibility and privacy compliance but requires verification of domain registration and enhancement of security best practices.

Ginseng Tang Ltd operates the Ginseng Tang Acupuncture Clinic, a small healthcare business specializing in acupuncture and traditional Chinese medicine services in the West Midlands, UK. The clinic has a strong local presence with over 20 years of establishment and offers a variety of treatments including pain relief, emotional health support, and herbal remedies. The website reflects a professional service with clear business information, customer testimonials, and recognized certifications from reputable acupuncture organizations. Technically, the website is built on the Weebly/EditMySite platform using common web technologies such as jQuery and Google Analytics. It includes integrated booking and social media widgets enhancing user engagement. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy policies, which are areas for improvement. The WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not negate the legitimacy suggested by the website content. Overall, the site is well-structured, user-friendly, and trustworthy for its target audience.

The website techarb.co.uk currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the full website content is blocked by a Web Application Firewall or similar security mechanism. Due to this, no business content, contact information, or policies are accessible for analysis. The domain is registered since 2007 under Cloud Next Ltd, a UK registrar, which suggests a legitimate and established domain. The technical infrastructure includes Bootstrap for styling and Google reCAPTCHA for bot protection, but no further technologies or CMS are detectable. Security posture is limited to the presence of reCAPTCHA, with no visible security headers or HTTPS enforcement details. Overall, the website cannot be fully assessed due to the blocking mechanism, resulting in a low AI score and limited insights.

Arrans is a UK-based small professional services firm specializing in insolvency, business recovery, and accounting services since 2001. The company is led by a licensed Insolvency Practitioner with over 20 years of experience, positioning itself as a trusted local expert in Tamworth. The website reflects a professional image with clear service offerings and trust signals such as certifications and links to authoritative bodies. Technically, the site is built on WordPress using Themify Builder, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Analytics are implemented via Google Analytics and Tag Manager, indicating moderate user tracking. Overall, the site is credible and trustworthy but could improve privacy compliance and security best practices.

CDR Group is a UK-based software company specializing in Geographic Information Systems (GIS), offering a comprehensive range of services including MapInfo software sales, training, development, data capture, scanning, and consultancy. The company positions itself as a leading one-stop-shop for GIS users in the UK, supported by certifications such as ISO 9001 and partnerships with Ordnance Survey and other industry bodies. Their target audience includes local governments and businesses requiring advanced location intelligence solutions. Technically, the website employs standard web technologies including Google Analytics for tracking, but lacks advanced security headers and privacy policies, indicating room for improvement in compliance and security posture. The WHOIS data is unavailable due to domain naming rules violations, which raises some concerns about domain legitimacy, although the website content and business information appear professional and consistent. Overall, the site demonstrates good content quality and business credibility but requires enhancements in privacy compliance and security best practices.

L

LawnHopper

lawnhopper.co.uk

41

LawnHopper is a UK-based lawn care specialist company with over 25 years of experience providing professional lawn treatment services including scarification, aeration, weed and moss control, seeding, and fertilising. The company operates a pay-as-you-go business model serving residential and commercial customers across the UK. The website is built on WordPress using modern plugins and technologies such as Google reCAPTCHA and Cookie Law Info to ensure security and privacy compliance. The site is well-designed, mobile-optimized, and provides clear navigation and relevant content. Security posture is good with HTTPS enforced and anti-bot measures in place, though additional security headers and published security policies could enhance trust. WHOIS data is unavailable due to an erroneous lookup on the subdomain, which slightly reduces domain trustworthiness. Overall, the website presents a professional and trustworthy front for the business with minor areas for improvement in security and transparency.

S

Smart Auto Services

smartautoservices.co.uk

50

Smart Auto Services is a small UK-based automotive repair and maintenance business specializing in MOT testing, servicing, and various car repairs. The company targets local customers in regions such as Deeside, Chester, Mold, Wirral, and Flintshire. The website is built on WordPress using the Divi theme and includes a scheduling plugin for appointments. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website presents a professional image but would benefit from enhanced security and compliance features.

R

Rock Management Services

rms.ltd

69

Rock Management Services Ltd. is a UK-based company offering comprehensive business support services to organizations aiming to remain lean and focus on their core operations. Their service portfolio includes administrative support across HR, IT, finance, compliance, and consulting, positioning them as a trusted outsourcing partner with a proven track record and senior experienced personnel. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, Slider Revolution, and Google Analytics integrations, indicating a mature digital infrastructure. The site is mobile-optimized and employs cookie consent mechanisms, demonstrating awareness of privacy regulations. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and includes cookie consent banners but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable due to a domain naming error, which is unusual but does not appear to affect the legitimacy of the website. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance.

C

CCL Solutions Group

evidencetalks.com

71

CCL Solutions Group is a UK-based leader in digital forensics, cyber security, and investigative services, serving law enforcement, corporate, legal, and regulatory sectors worldwide. The company offers a broad range of accredited services, proprietary forensic tools, and consultancy and training solutions. Their market position is strong, supported by multiple ISO certifications and industry accreditations such as CREST and Cyber Essentials. The website reflects a professional and comprehensive digital presence with clear navigation, detailed service descriptions, and strong trust indicators including client logos and certifications. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries like jQuery and Google Tag Manager for analytics and marketing. Cookie consent is managed via CookieYes with a full consent mechanism, and security is enhanced by Cloudflare Turnstile captcha on forms. The site is mobile-optimized, fast-loading, and accessible with good SEO practices. However, explicit security headers are not detected, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Security posture is solid with HTTPS enforced, no exposed sensitive data, and adherence to multiple security frameworks. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The absence of an incident response contact or security.txt file is a minor gap. Overall, the site demonstrates a mature security culture and professional digital maturity. The main risk factor is the lack of WHOIS domain registration data, which could indicate privacy protection or a registration anomaly. This should be investigated further to confirm legitimacy. Strategic recommendations include adding security headers, publishing incident response information, and implementing a security.txt file to enhance transparency and trust.

C

Camozzi Automation UK

camozzi.co.uk

63

Camozzi Automation UK is a well-established B2B industrial automation company specializing in pneumatic, electric actuation, and fluid control solutions. As part of the global Camozzi Automation Group founded in 1964, the UK branch offers a comprehensive range of products and services including technical support, bespoke panel builds, and training. The company targets OEMs, end-users, distributors, and industrial teams across the UK, positioning itself as a reliable partner with local stockholding and expert knowledge. The website is built on the Webflow platform, leveraging modern technologies such as Google Fonts, Swiper.js, and Google Analytics 4. It demonstrates excellent design quality, mobile responsiveness, and SEO optimization. The technical infrastructure is robust, hosted on Amazon CloudFront CDN, and includes secure HTTPS connections with no visible vulnerabilities or exposed sensitive data. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers like CSP and X-Frame-Options are not detected and should be implemented. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a professional, trustworthy industrial automation business with a mature digital presence. The main risk is the lack of WHOIS data due to domain registration issues, which should be investigated further to ensure domain legitimacy and ownership clarity.

Shoreline (UK) Ltd. is a specialized manufacturer of refrigeration equipment serving marine and medical markets. Their product lines include 12/24 Volt DC fridges and freezers for yachts, canal boats, motorhomes, and trucks, as well as medical refrigeration units for hospitals, clinics, laboratories, and veterinary surgeries. Established in 1996, the company emphasizes UK-based manufacturing and quality standards. The website reflects a focused business model targeting niche markets with clear contact information and separate dedicated domains for their marine and medical divisions. Technically, the website uses standard HTML, CSS, and Adobe Typekit fonts but lacks advanced frameworks or CMS indications. The site is accessible without WAF or blocking mechanisms but shows limited mobile optimization and basic SEO. Security posture is weak due to missing HTTPS confirmation, lack of security headers, and absence of privacy or cookie policies. WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site is professional but requires improvements in security, compliance, and technical modernization.

S

Select Interiors NE Ltd

selectinteriors.net

49

Select Interiors NE Ltd is a small UK-based company specializing in the design and manufacture of high-quality kitchen, bedroom, and study cabinetry for both trade and retail customers. Established in 2009, the company emphasizes craftsmanship, bespoke design, and customer service including project management. Their website reflects a professional and consistent brand presence with clear contact channels and social media engagement. Technically, the site is built on WordPress with common plugins and is hosted behind Cloudflare DNS, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain locks, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is addressed with clear policies and cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

FHP

fhp.co.uk

49

FHP is a professional commercial estate agency operating primarily in Nottingham, Derby, Birmingham, and the Midlands. They offer a comprehensive range of services including property search, sales and lettings, acquisitions, valuations, business rates consultancy, rent reviews, lease renewals, development consultancy, expert witness services, EPCs, and property management. The company positions itself as a leading regional player with a strong focus on commercial real estate sectors such as retail, office, industrial, student accommodation, education, land, investment, and compulsory purchase. The website is well-maintained, professionally designed, and provides clear contact information and social media presence, enhancing business credibility.

S

Steer Automotive Group

mgcannon.com

54

Steer Automotive Group is a leading UK automotive repair business specializing in accident repairs and additional vehicle services such as alloy wheel repair and paintless dent removal. The company emphasizes sustainability, having achieved carbon-neutral status in accordance with PAS2060, and operates a network of repair centers across the UK. The website is professionally designed, mobile-optimized, and built on the HubSpot CMS platform, integrating modern marketing and analytics tools. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data for the exact domain is unavailable due to it being a subdomain, but the business information and website content indicate legitimacy and trustworthiness. Overall, the website provides a positive user experience with clear navigation and relevant content for its target audience of vehicle owners in the UK.

S

SCALA Consulting: Supply Chain and Logistics Consultancy

scalagroup.co.uk

60

SCALA Consulting is a UK-based international consultancy specializing in supply chain and logistics services. The company offers a broad range of consulting services including supply chain strategy, logistics network optimization, procurement, warehouse design, transport optimization, and sustainability. The website presents a professional image with clear service offerings and client case studies, targeting businesses seeking expert supply chain consultancy. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern web technologies and Google Analytics for tracking. The site is mobile optimized and has good SEO practices. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and terms of service pages. WHOIS data is unavailable due to an invalid query format, which slightly reduces trust. Overall, the site is professional and credible but could improve privacy compliance and security transparency.

pb Digital Limited is a UK-based creative design agency specializing in advertising, brand strategy, content creation, project management, and print management services. With over fifteen years of experience, the company serves a diverse client base including notable brands such as BT and BT Wholesale. The website presents a professional image with detailed service descriptions, client portfolios, and team information, targeting businesses seeking comprehensive creative solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Fonts, with good mobile optimization and user experience. However, the absence of explicit security headers and unclear SSL status indicate areas for security improvement. The WHOIS data for the domain is unavailable and indicates the domain is not registered due to naming rules violation, which raises concerns about domain legitimacy despite the professional website content. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the website scores well on business credibility and content quality but requires enhancements in security posture and privacy compliance to improve trustworthiness and risk profile.

Sanderson Plc is a specialist recruitment consultancy focused on the Insurance, Life & Pensions, and Wealth Management sectors, with a strong market presence in the UK financial services industry. The website highlights the strategic acquisition of Highams to expand their capabilities and service offerings. The company provides a range of recruitment services including permanent and contract placements, RPO, MSP, and executive search. The site is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins and integrations such as HubSpot for analytics and messaging, Google Tag Manager, and CookieYes for consent management. Security measures include HTTPS, Google reCAPTCHA Enterprise, and cookie consent mechanisms, although explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is missing or unavailable, which slightly reduces trustworthiness but is mitigated by the professional content and business legitimacy evident on the site. Overall, the website demonstrates a strong security posture, good privacy compliance, and a credible business presence in the financial recruitment sector.

P

Perk

clicktravel.com

65

Perk operates a specialist platform branded as 'Click Travel, Powered by Perk', targeting UK-based companies and the public sector to facilitate business travel booking, management, and reporting. The website presents a professional and modern digital presence, leveraging technologies such as Astro framework, Storyblok CMS, and various analytics and marketing tools including Google Tag Manager, Datadog RUM, and Usercentrics for consent management. Despite the professional front-end and user experience, the absence of WHOIS registration data for the domain www.perk.com raises concerns about domain legitimacy and ownership transparency. The website is secured with HTTPS and employs consent mechanisms, but lacks visible privacy policies, terms of service, and direct contact information, which are critical for compliance and user trust. Overall, the platform appears functional and targeted, but verification of domain registration and enhanced transparency in privacy and contact details are recommended.

Peter Scott Printers Ltd is a UK-based printing services company established in 1960, specializing in high-quality and cost-effective printing solutions with rapid lead times. The company targets businesses and individuals within the UK market, positioning itself as a trusted and experienced print specialist. The website reflects a professional business model focused on manufacturing and printing services, supported by consistent branding and clear contact information. Technically, the website is built on WordPress using the Salient theme and integrates several modern marketing and analytics tools such as Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and Mailchimp. The site is secured with HTTPS and shows moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with SSL enabled but lacks comprehensive security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is safe and suitable for general audiences with no adult or questionable content detected.

C

CACI

caci.co.uk

76

CACI is an established enterprise technology company specializing in connecting data, technology, and human insight to deliver scalable, innovative solutions that drive business transformation and operational excellence. The company targets business and government clients seeking advanced data analytics, AI, and technology consulting services. The website demonstrates a mature digital presence with professional design, comprehensive navigation, and strong SEO implementation. Technically, the site is built on WordPress with modern libraries and includes cookie consent and analytics integrations, reflecting a good level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though improvements are recommended in security headers and explicit security policies. WHOIS data for the exact domain queried is unavailable due to it being a subdomain, which slightly impacts trust but does not detract from the overall legitimacy given the professional content and branding. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing direct contact information for security and privacy inquiries.

T

Troika Systems

troika-systems.com

63

Troika Systems is a well-established company founded in 2003, specializing in precision quality control tools and software for the printing industry, particularly anilox, gravure, and flexo printing. Their product portfolio includes advanced 3D scanning devices and inspection software designed to improve print quality and operational efficiency. The company maintains a strong market position supported by industry partnerships and award-winning products. Technically, the website is built on a modern WordPress platform with WooCommerce and Elementor, leveraging SEO and analytics tools such as Rank Math and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Meridian Geoscience

meridiangeoscience.co.uk

58

Meridian Geoscience is a small UK-based geotechnical and environmental consulting business that is currently closed for new business. The principal, Richard Lote, is transitioning to a part-time role at Tweddell and Slater Ltd Consulting Engineers, continuing to provide specialized services. The website is hosted on Google Sites and provides minimal but professional content focused on informing visitors of the business status and contact details. The technical infrastructure relies on Google services, with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and policies. Privacy compliance is weak due to absence of privacy and terms of service pages. Overall, the website serves as a basic informational portal rather than a full-service business site.

G

Geevor Tin Mine Museum

geevor.com

59

Geevor Tin Mine Museum operates as a well-established heritage and tourism attraction in Cornwall, UK, focusing on the history of tin mining. The website reflects a professional, family-friendly business model with strong community and educational engagement. It holds multiple awards and is a registered charity, reinforcing its credibility and market position. The digital infrastructure is based on WordPress with WooCommerce and Yoast SEO, providing a modern and SEO-optimized platform. Performance and mobile optimization are good, supporting a positive user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong with clear policies and GDPR-aligned consent. Overall, the site is trustworthy and professionally managed, though it lacks explicit security and incident response disclosures.

C

Coleman Bros Ltd

colemanbros.co.uk

40

Coleman Bros Ltd is a small UK-based wholesale supplier specializing in sundries and wallpapers for the decorating trade, with over 60 years of business history. The company targets professional decorators and trade customers, positioning itself as an established supplier in the retail sector. The website content reflects this business focus, providing contact information and a clear description of services. Technically, the website employs modern frontend technologies including Bootstrap, Font Awesome, and Google Maps API, indicating a moderate level of digital maturity. The site is mobile optimized and has good SEO fundamentals but lacks advanced accessibility features. Security posture is moderate with no explicit security headers detected and no visible SSL configuration details; privacy and cookie policies are absent, indicating compliance gaps. The WHOIS data is unavailable due to domain registration errors, raising questions about domain legitimacy despite the professional website content. Overall, the website is functional and business-appropriate but requires improvements in security, privacy compliance, and domain registration clarity.

Sealing Systems (Scotland) Ltd is a small Scottish distributor specializing in mechanical seals and related industrial products, primarily serving chemical, pharmaceutical, petrochemical, marine, and offshore industries. The company holds sole distributor status for Flowserve Fluid Sealing Division products in Scotland and offers additional services including authorized distribution of packing, gaskets, industrial coatings, and o-rings. Their market position is focused and niche, targeting industrial clients requiring specialized sealing solutions. Technically, the website is basic and outdated, relying on legacy technologies such as Flash, lacking modern web standards like responsive design and accessibility features. There is no evidence of a CMS or modern frameworks, and performance is likely slow. SEO and metadata are minimal, and no analytics or tracking technologies are detected. From a security perspective, the site lacks HTTPS enforcement and security headers, exposing it to potential risks. No privacy, cookie, or terms of service policies are present, indicating poor privacy compliance. The WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the security posture is weak, with recommendations to modernize the site, implement HTTPS, and add privacy and security policies. The overall risk assessment suggests moderate business credibility but significant technical and security deficiencies. Strategic improvements in security, privacy compliance, and technical modernization are essential to enhance trust and operational resilience.

J

J W Wishart Plumbing & Heating Ltd

wishartplumbing.co.uk

59

J W Wishart Plumbing & Heating Ltd is a small, family-run plumbing and heating service provider based in Kirkcaldy, Fife, Scotland. Established in 1926, the company offers a comprehensive range of services including boiler replacements, repairs, bathroom installations, central heating installations, and general plumbing work. The business targets residential customers in Fife, Edinburgh, and surrounding areas, maintaining a strong local reputation bolstered by Gas Safe registration and trusted trader reviews. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the website is built on the Mono platform and utilizes modern web technologies such as jQuery, hCaptcha for bot protection, Google Analytics for visitor tracking, and Cookiebot for GDPR-compliant cookie consent management. The site is mobile-optimized with good SEO practices and moderate performance. Hosting appears to be managed by Thomson Directories Ltd. While HTTPS is enforced, the site lacks some advanced security headers which could enhance its security posture. From a security perspective, the website demonstrates good practices including encrypted connections and a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and preparedness. Privacy compliance is well addressed with a visible privacy policy and cookie management, supporting GDPR adherence. Overall, the website presents a trustworthy and professional image suitable for its local service business model. The lack of WHOIS data limits domain age verification, but business registration details and consistent content support legitimacy. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining regular audits of third-party scri…

M

Morton Fraser MacRoberts LLP

macroberts.com

76

Morton Fraser MacRoberts LLP (MFMac) is a leading Scottish law firm providing expert legal services to businesses, the public sector, and individuals. The firm is well-positioned in the Scottish legal market, recognized by prestigious legal directories such as Chambers and Partners and Legal 500. Their services span multiple sectors including energy, real estate, public sector, manufacturing, and healthcare. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. Technically, the website leverages modern technologies including Umbraco CMS, Google Tag Manager, Microsoft Application Insights, Hotjar, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced, security headers present, and use of reCAPTCHA on forms. Privacy compliance is well addressed with detailed policies and consent mechanisms. The WHOIS data is unavailable, which limits transparency on domain registration details. However, the website content and business information strongly indicate legitimacy and professionalism. No critical security vulnerabilities or compliance gaps were detected. Overall, the site demonstrates a mature digital infrastructure suitable for a large professional services firm.

C

Cairn o' Mohr

cairnomohr.com

61

Cairn o' Mohr is a small Scottish winery established in 1987, specializing in the production and sale of fruit wines, ciders, and related beverages made from locally sourced ingredients. The company operates an e-commerce platform, offers winery tours, and runs a wine club subscription service, targeting consumers interested in artisanal Scottish wines and cider. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp, and is mobile optimized with moderate performance. However, the absence of explicit privacy and cookie policies, lack of security headers, and missing WHOIS domain registration data reduce the overall trust and security posture. No WAF or blocking mechanisms were detected, and the site is fully accessible.

C

C R Encapsulation Limited

creltd.co.uk

60

CRE Marine is a specialized engineering company focused on designing and manufacturing subsea electrical and fiber optic connectivity products. Their offerings include metal shell connectors, penetrators, strain terminations, junction boxes, and cables designed for extreme underwater environments. The company serves industrial clients requiring robust subsea solutions, positioning itself as a trusted provider with extensive inventory and bespoke engineering capabilities. CRE Marine is part of the Trexon Engineering Products Group, indicating a strong corporate backing and market presence. Technically, the website demonstrates a mature digital infrastructure with modern JavaScript libraries, Google reCAPTCHA integration for form security, and a cookie consent mechanism aligned with privacy regulations. Hosting assets on Amazon S3 and use of Google Tag Manager reflect a contemporary approach to performance and analytics. The site is mobile-optimized with good SEO and accessibility basics, though some advanced security headers are missing. Security posture is solid with HTTPS enforced and anti-bot measures on forms. However, the absence of key security headers and lack of published incident response or vulnerability disclosure policies indicate areas for improvement. The missing WHOIS data reduces domain trustworthiness, though the professional content and company registration details mitigate concerns. Overall, CRE Marine presents a professional, trustworthy online presence suitable for its industrial clientele. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance.

I

Integrated Process Control & Engineering Ltd.

ipce.co.uk

50

Integrated Process Control & Engineering Ltd. (IPCE) is a Northern Ireland based company established in 1982, specializing in electrical engineering and industrial automation solutions. The company serves industrial and manufacturing clients across the UK, Ireland, Europe, America, and the Middle East, offering services including electrical engineering, control panel manufacturing, SCADA and PLC systems, IT networking, maintenance, and project management. IPCE positions itself as a trusted provider with blue chip clients and a strong history of over 30 years in the sector. Technically, the website employs legacy technologies such as jQuery 1.4.2 and Google Analytics, with a moderate performance and basic mobile optimization. The site lacks modern security headers and privacy disclosures, indicating room for improvement in compliance and security posture. The WHOIS data query failed due to an incorrect lookup on the www subdomain, limiting domain registration insights. Security-wise, the site uses HTTPS (assumed from external Google Analytics usage), but the outdated JavaScript library and absence of security headers reduce its security maturity. No privacy or cookie policies were found, which is a compliance gap under GDPR. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy but requires updates to its technical stack and privacy/security practices. The overall risk is moderate with recommendations to upgrade libraries, implement security headers, add privacy and cookie policies, and correct WHOIS queries for better domain transparency.

L

LJ Machine Tools

ljmt.co.uk

49

LJ Machine Tools is a small UK-based business specializing in supplying high-quality bolts, power tools, fixings, and fasteners primarily serving tradespeople and contractors in Lurgan. The website currently serves as a placeholder announcing a new website launch in 2025, with minimal content and contact information limited to an email and phone number. The technical infrastructure is based on WordPress with a coming soon plugin, incorporating standard web fonts and Google Analytics for visitor tracking. Security posture is basic with no advanced headers or policies visible, and the domain WHOIS data is unavailable due to a domain registration error indicating the domain name is invalid per Nominet UK rules. This inconsistency raises concerns about domain legitimacy despite the professional appearance of the website content. Overall, the website is safe, with no adult or questionable content detected, but lacks comprehensive privacy and security features.

J

J&H Meynells

meynells.co.uk

50

J&H Meynells is a longstanding family-run retail business specializing in pet and garden supplies with physical stores located in Richmond and Barnard Castle, UK. The company emphasizes knowledgeable staff, local sourcing, and a broad product range for pet owners and gardeners. The website serves as an informational and marketing platform featuring product highlights, special offers, newsletters, and photo galleries. The business targets local customers seeking personalized service and quality products. Technically, the website is built using Mobirise with Bootstrap and jQuery, incorporating Google Fonts and Statcounter analytics. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, it lacks advanced accessibility features and comprehensive SEO optimization. The site uses HTTPS for embedded content but does not explicitly confirm SSL enforcement site-wide. From a security perspective, the website shows basic security hygiene but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No forms collecting sensitive data are present, reducing immediate risk exposure. The WHOIS lookup failed due to domain registration issues, which raises concerns about domain legitimacy despite the website's professional appearance and consistent business information. Overall, the website is functional and trustworthy from a business perspective but requires improvements in privacy compliance, security best practices, and domain registration legitimacy to enhance trust and reduce risk.

F

Four Seasons Florists

fourseasonsflorists.co.uk

50

Four Seasons Florists is a well-established local florist business based in Aberdeen, UK, with over 50 years of experience. The company offers a wide range of floral arrangements, gifts, and delivery services including same day delivery. Their website is built on the Prestashop platform and integrates modern technologies such as Google reCAPTCHA and Google Analytics. The site is professionally designed with good content quality and clear navigation, targeting consumers seeking floral gifts for various occasions. Security posture is solid with HTTPS and secure forms, though some security headers and privacy compliance features could be improved. Overall, the business demonstrates credibility and trustworthiness with clear contact information and consistent domain registration data.

M

Mercer Care Ltd

mercercare.co.uk

49

Mercer Care Ltd operates Bramhall Residential Care Home, a family-run care facility in Lincolnshire, UK, providing residential and respite care services for elderly residents since 1998. The business emphasizes family values, community integration, and quality care, holding a Good rating from the Care Quality Commission. The website reflects a professional and consistent brand image targeting elderly individuals and their families seeking trusted care services. Technically, the website employs modern web technologies including JavaScript, CSS, and SVG graphics, with responsive design and good SEO practices. The site is served over HTTPS with a cookie consent mechanism, though it lacks explicit security headers and advanced accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good SSL configuration and basic security best practices but would benefit from enhanced security headers and a published security policy. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, which slightly reduces transparency but does not undermine the evident legitimacy of the business. Overall, the site is secure, professional, and compliant with privacy regulations. The overall risk is low, with recommendations to improve security headers, publish incident response and vulnerability disclosure policies, and enhance accessibility to further strengthen trust and compliance.

E

Elaines Flowers

elainesflowers.co.im

49

Elaines Flowers is a well-established local florist business based in Peel, Isle of Man, with over 29 years of experience. The company specializes in fresh flower arrangements and offers same-day delivery services island-wide. Their business model focuses on direct sourcing from growers and auctions, cutting out middlemen to provide quality floral products. The website reflects a professional retail e-commerce platform targeting local residents and businesses, with additional worldwide delivery through a partner network. Technically, the site uses modern frameworks such as Bootstrap and jQuery, and integrates Google Analytics for tracking. The design is responsive and user-friendly, with clear navigation and product presentation. Security posture is adequate with HTTPS and CSRF protection, but lacks some security headers and cookie consent mechanisms, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.