United Kingdom security reports

P

Petrolab Limited

petrolab.co.uk

41

Petrolab Limited is a specialized UK-based laboratory offering mineralogical and petrographic analysis services primarily to the mining, construction, and real estate sectors. Their expertise includes automated mineralogy, optical microscopy, sample preparation, and screening tests such as Mundic and IS465. The company has a niche market position with a strong regional presence and a history dating back to 1991. The website is built on WordPress with WooCommerce and the Divi theme, reflecting a moderate level of digital maturity with good content quality and user experience. Security posture is adequate with HTTPS enforced and use of security plugins, but lacks some advanced security headers and formal security policies. Privacy compliance is basic, with no visible cookie consent or GDPR-specific disclosures. Overall, the website is professional and trustworthy, though the absence of WHOIS data due to domain registration issues introduces some uncertainty about domain legitimacy.

F

FlexEJ Ltd

flexej.co.uk

50

FlexEJ Ltd is a UK-based specialist company focused on the design, engineering, manufacturing, and pressure fabrication of pipe expansion joints and related products. With operations in the UK and Europe, including a subsidiary in the UAE, FlexEJ serves industrial clients primarily in the HVAC and commercial heating sectors. Their product portfolio includes metal and rubber expansion bellows, packaged plate heat exchangers, buffer vessels, and other pressure vessel solutions. The website reflects a medium-sized manufacturing business with a professional online presence and e-commerce capabilities. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and third-party services such as Google Tag Manager and Zoho SalesIQ for analytics and customer engagement. The site is mobile-optimized with good SEO and accessibility features, although some improvements in security headers and performance tuning could be beneficial. From a security standpoint, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, the WHOIS lookup for the domain 'www.flexej.co.uk' failed due to an invalid domain format, which raises concerns about domain registration consistency. This discrepancy likely stems from querying the subdomain rather than the root domain. The website content and contact information strongly indicate a legitimate business. Overall, the website presents a trustworthy and professional image with moderate technical maturity and good privacy compliance. Strategic recommendations include enhancing security headers, verifying domain registration details, and establishing a vulnerability disclosure policy to further strengthen trust and security posture.

Arnold Plant Hire Ltd is a well-established UK-based company specializing in nationwide hire of waste and recycling plant machinery, including loading shovels, telescopic handlers, and JCB Teletruks. With over 25 years of experience and a large fleet exceeding 500 machines, the company targets businesses in waste management, construction, and related sectors. Their business model focuses on flexible hire agreements ranging from short-term to long-term contracts, supported by a parent company, Westgate Group, and several partner sites. The website reflects a professional and consistent brand presence with clear service offerings and trust indicators such as certifications and client statistics. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Google Analytics for tracking. It is hosted by Zen Internet Limited and employs HTTPS with a valid SSL certificate, ensuring secure communications. However, the site lacks some security best practices such as security headers and published security policies. Privacy compliance is partially addressed with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security and privacy transparency.

Vowles Parks is a family-owned business operating six residential and holiday parks in the South West of England and South Wales, targeting retired and semi-retired individuals as well as families seeking holiday retreats. The company offers luxury park home living with a focus on peaceful, affordable, and high-specification homes. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with modern technologies including jQuery, Google Fonts, Google Maps API, and HubSpot marketing and analytics tools. Cookie consent is managed via Cookiebot, ensuring compliance with cookie regulations. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and there is no visible security policy or incident response information. The domain registration is consistent with the business claims, showing a long-established presence since 2008. Overall, the website demonstrates a solid security posture and good privacy compliance, though improvements could be made by publishing explicit security policies and enhancing security headers. The business credibility is high with clear contact information and trust indicators such as testimonials and professional marketing tools.

H

HYQUIP Limited

hyquip.co.uk

50

HYQUIP Limited is a UK-based industrial supplier specializing in fluid power components and integrated fluid power solutions. Established in 2001, the company serves a global market with a broad portfolio of brands and products, targeting industrial buyers, engineers, and manufacturers. The website reflects a mature B2B e-commerce platform built on PrestaShop, featuring extensive product categorization and a professional design optimized for desktop and mobile users. The company demonstrates digital maturity with the use of modern analytics and tracking tools such as Google Analytics and Tag Manager, alongside reCAPTCHA for form security. Security posture is generally good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published security policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

CRS Concrete Remedial System

concreteremedials.com

45

Concrete Remedial Systems Limited (CRS) is a UK-based small business specializing in concrete repair, renovation, and waterproofing services for residential and commercial properties. With over 30 years of industry experience, CRS positions itself as a trusted contractor in the London and South East regions. Their website clearly communicates their key services including leak sealing, structural repairs, and protective coatings, supported by client testimonials and a Trustpilot presence, enhancing their market credibility. Technically, the website is built on WordPress with modern tools such as Google Tag Manager and Yoast SEO, indicating a moderate level of digital maturity. The site is mobile-optimized and well-structured, though performance is moderate rather than fast. Security posture is adequate with HTTPS enforced and secure form handling, but lacks advanced security headers and DNSSEC, which could be improved. From a security and compliance perspective, the site lacks a cookie consent mechanism and detailed privacy or security policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided, representing a gap in transparency and preparedness. The domain registration data is consistent and supports the legitimacy of the business. Overall, CRS presents a professional and trustworthy online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen their risk posture and customer confidence.

C

CSN IT Solutions

csn-solutions.co.uk

66

CSN IT Solutions is a UK-based IT services provider specializing in managed IT services, cybersecurity, cloud solutions, and customer support primarily targeting small to medium enterprises in Cheltenham, Gloucestershire, and across the UK. The company positions itself as a trusted local IT partner with a focus on proactive support and tailored IT solutions. The website content is professional and well-structured, showcasing client testimonials and partnerships with recognized technology vendors, enhancing its market credibility. Technically, the website is built on the Webflow platform using modern web technologies such as jQuery and Google Fonts. It is mobile-optimized with good design quality and user experience. However, some technical improvements are recommended, including the implementation of security headers and cookie consent mechanisms to improve privacy compliance and security posture. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of security headers and incident response information indicates room for improvement in security best practices. The WHOIS data for the domain is unavailable due to a registration error, which raises concerns about domain legitimacy and trustworthiness despite the professional website presentation. Overall, the website presents a credible IT service business but should address domain registration legitimacy and enhance privacy and security features to strengthen trust and compliance.

Printed Systems Limited is a UK-based contract electronics manufacturer specializing in PCB and LED assembly with over 25 years of industry experience. Operating from a sizable facility in Hertfordshire, the company offers end-to-end manufacturing services from prototype to full production, emphasizing quality, reliability, and long-term customer partnerships. Their market position is that of a trusted, established UK specialist serving diverse sectors including security, medical, telecoms, and retail. Technically, the website employs modern front-end libraries such as jQuery and AOS for animations, uses Google Fonts and Adobe Typekit for typography, and demonstrates good mobile optimization and SEO practices. However, there is room for improvement in accessibility and security header implementation. The site is fully accessible without WAF or blocking mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data due to an invalid domain query reduces domain trustworthiness, though the website content and business information appear professional and credible. Overall, the website presents a solid business front with good technical implementation and moderate security posture. Strategic improvements in security headers, privacy compliance, and WHOIS domain validation would enhance trust and compliance.

P

Pittaway Special Coatings Limited

ilumitex.co.uk

42

Pittaway Special Coatings Limited operates the Ilumitex® brand, providing innovative decorative dry flake spray paint systems for interior walls, targeting both residential and commercial markets. The company emphasizes durability, environmental friendliness, and bespoke color customization, positioning itself as a niche manufacturer with a strong UK presence. The website reflects a professional and consistent brand image with clear business contact information and case studies demonstrating product longevity. Technically, the website employs modern frontend technologies including Bootstrap 5.3.7, Animate.css, and Google Tag Manager for analytics. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate with no detected WAF or blocking mechanisms. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are recommended for GDPR compliance and enhanced security posture. WHOIS data is unavailable due to domain naming query issues, but the website content and contact details support legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security headers, privacy compliance, and WHOIS transparency. Strategic enhancements in these areas would strengthen the company's security posture and regulatory adherence.

Kymco UK Ltd operates as the official UK presence of KYMCO, a Taiwanese manufacturer specializing in scooters, motorcycles, ATVs, and mobility products. Established in 1963, KYMCO has grown into a major global player with extensive distribution networks. The website serves consumers and dealers in the UK market, offering product ranges and dealer locator services. Technically, the site is built on the DealerWebs CMS platform, utilizing modern web technologies including Bootstrap and FontAwesome, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and a cookie consent mechanism is implemented, but explicit security headers are not detected, and no dedicated security or incident response policies are published. The WHOIS data for the domain is unavailable due to a domain registration error, which raises concerns about domain legitimacy despite the professional appearance and consistent branding. Overall, the website is functional, trustworthy in content, but would benefit from enhanced security practices and domain registration verification.

5

5 Star Catering Equipment Hire Ltd

5starhire.co.uk

54

5 Star Catering Equipment Hire Ltd is a small UK-based business specializing in the rental and hire of catering equipment, serving primarily the Warrington area. Their website, built on the Wix platform, offers a basic but functional online presence showcasing their range of catering-related products such as crockery, cutlery, glassware, and refrigeration equipment. The business targets local catering professionals and event organizers needing temporary equipment solutions. Technically, the website leverages Wix's infrastructure and standard web technologies but lacks advanced SEO, accessibility, and privacy features. Security posture is minimal with no detected security headers or privacy policies, and the WHOIS data is incomplete, raising some concerns about domain registration legitimacy. Overall, the site is operational but would benefit from enhanced security, compliance, and trust-building measures.

W

Windoworld 21 Limited

windoworld.co.uk

58

Windoworld 21 Limited is a small UK-based company specializing in the fabrication and installation of PVCu and aluminium windows and doors, serving residential, trade, and commercial customers primarily in Leicester, England. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as HTML5, CSS, and JavaScript. The site presents a professional appearance with good content relevance and user experience, though it lacks comprehensive privacy and cookie policies. Security posture is moderate, with no advanced security headers detected and no visible vulnerabilities, but the absence of privacy compliance documentation and WHOIS data issues reduce overall trust. The domain WHOIS lookup failed due to domain naming rules, indicating potential misconfiguration or subdomain usage rather than a fully registered domain, which impacts legitimacy assessment.

T

TW Electronics

twelectronics.co.uk

61

TW Electronics is a UK-based company specializing in the development and manufacturing of high-quality remote control solutions. The website positions the company as a leader in this niche market, targeting businesses requiring innovative remote control products. The digital presence is built on the Wix platform, indicating a moderate level of technical infrastructure with standard web technologies and moderate performance. The site is mobile-optimized and provides a professional user experience, although it lacks comprehensive privacy and security disclosures. Security posture is basic with HTTPS enabled but missing advanced security headers and policies. The absence of WHOIS data and domain registration details raises concerns about domain legitimacy, though the website content itself appears professional and business-focused. Overall, the site demonstrates a functional business presence but requires improvements in compliance, security transparency, and domain legitimacy verification.

Romiley Joinery Ltd is a small UK-based manufacturing business specializing in purpose made joinery products with over 30 years of experience. The company operates a WordPress-based website using the Avada theme, indicating a moderate level of digital maturity. The site includes Google Tag Manager for analytics but lacks visible privacy, cookie, or terms of service policies, which impacts privacy compliance. Security posture is basic with HTTPS enabled but no detected security headers or explicit security policies. Overall, the website is functional and moderately professional but would benefit from enhanced privacy and security measures to improve trust and compliance.

Plastribution is a UK-based leading distributor of plastics raw materials, specializing in standard and performance polymers, sustainable materials, and additives. The company serves diverse industries such as automotive, packaging, construction, and electronics, leveraging local market expertise and strong customer relationships. Their digital presence includes a professional WordPress-based website with modern SEO and performance optimizations. The site offers market insights, a customer service platform (Plastribution+), and sustainability-focused product portfolios. Technically, the website uses Elementor, Yoast SEO, WP Rocket, and jQuery, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy and cookie policies are absent, representing compliance gaps. Overall, the website is trustworthy and professionally maintained, but could improve privacy compliance and security transparency.

Plumb Polymers Ltd. is a UK-based recycling company specializing in plastic and cardboard recycling services with over 25 years of experience. The company operates primarily in Sheffield with national coverage, offering services such as collection, processing, and production of recycled materials including Eco Bubble Wrap. Their market position is that of a trusted local recycler with a professional online presence and clear business credentials. The website is built on WordPress using modern plugins and technologies, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published security policies. Overall, the website reflects a legitimate, professional business with clear contact information and compliance with privacy regulations.

A

Anglia Culinary Suppliers Ltd

acsnorwich.com

63

Anglia Culinary Suppliers Ltd is a well-established regional foodservice distributor based in East Anglia, UK, founded in 2002. The company supplies a broad range of frozen, chilled, and ambient products to professional caterers including hotels, pubs, restaurants, care homes, hospitals, nurseries, and educational institutions. Their market position is that of a trusted local supplier emphasizing quality service and a varied product range. The website reflects a professional business model focused on wholesale foodservice supply with clear contact details and company information. Technically, the site is built on the DotNetNuke CMS platform, hosted by Rackspace, and uses common web technologies such as jQuery and Bootstrap Lite. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and suitable for its business purpose.

C

Calm Digital Solutions Ltd.

calmdigital.com

57

Calm Digital Solutions Ltd. is a UK-based digital agency specializing in bespoke web design, software development, digital marketing, and branding services. The company targets businesses seeking high-end, UX-centric digital products and services, positioning itself as an experienced regional player with over 20 years in the industry. The website reflects a professional and consistent brand image with clear service offerings and strong partner affiliations. Technically, the website employs modern tracking and marketing technologies including Google Tag Manager, Google Analytics, Klaviyo, and Lead Forensics. The site is mobile-optimized, well-structured, and SEO-friendly, providing a good user experience. However, some technical improvements such as implementing security headers and publishing a dedicated security policy could enhance the overall infrastructure. From a security perspective, the site uses HTTPS and a cookie consent mechanism, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, Calm Digital demonstrates a solid digital presence with room for improvement in security transparency and domain registration clarity. Strategic enhancements in these areas would strengthen trust and compliance.

E

EICC

eicc.co.uk

61

The Edinburgh International Conference Centre (EICC) is a well-established multi-purpose venue located in central Edinburgh, Scotland, specializing in hosting conferences, exhibitions, and large-scale events. The website presents a professional and comprehensive digital presence, emphasizing sustainability, inclusivity, and a strong commitment to delivering impactful events. The venue is positioned as a leading player in the hospitality and events sector within the UK, supported by multiple certifications and awards that reinforce its credibility and market standing. The target audience includes event organizers, delegates, and visitors seeking a high-quality venue with modern facilities and sustainable practices. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Google Maps API, alongside a responsive design optimized for mobile devices. The site demonstrates good SEO and accessibility practices, with clear navigation and rich multimedia content enhancing user experience. Security posture is strong with HTTPS enforced and no exposed sensitive data, although some security headers could be improved for enhanced protection. From a security and compliance perspective, the site lacks explicit security policy or incident response contact information, which could be areas for improvement. The WHOIS data for the domain is unavailable due to a domain naming rules violation error, likely caused by querying the subdomain 'www.eicc.co.uk' instead of the registered domain 'eicc.co.uk'. This absence of WHOIS data reduces the ability to fully verify domain registration legitimacy but does not detract from the professional nature of the website content. Overall, the EICC website is a high-quality, trustworthy platform that effectively supports the business objectives of the venue. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, and …

Old Pulteney Whisky operates a professionally designed e-commerce website focused on retailing premium single malt Scotch whisky. The brand emphasizes its heritage and maritime influence, targeting adult whisky enthusiasts globally. The website leverages Shopify's platform and integrates marketing and analytics tools such as Klaviyo and Facebook Pixel to optimize customer engagement and sales. Age verification and privacy compliance mechanisms are implemented to meet regulatory requirements. The domain registration data aligns well with the brand's claims, supporting its legitimacy and long-standing market presence.

S

Setanta Construction

setantaconstruction.com

59

Setanta Construction is a medium-sized UK-based construction company specializing in bespoke timber frame homes and off-site modular construction. The company emphasizes energy-efficient, award-winning homes with over 60 years of experience, targeting architects, developers, housing associations, and local authorities. Their website is built on Shopify, leveraging modern e-commerce technologies and third-party integrations for enhanced user experience and analytics. While the site is professionally designed and content-rich, it lacks explicit privacy and cookie policies, which impacts compliance posture. Security is generally good with HTTPS and secure checkout, but could be improved by adding explicit security headers and vulnerability disclosures. The absence of WHOIS data reduces domain trustworthiness, though the business presence and content suggest legitimacy.

A

Amp Commercial Ltd

ampcommercial.com

65

Amp Commercial Ltd is a small UK-based company specializing in commercial property investment and asset management services across England, Wales, and Northern Ireland. Their website presents a professional image with clear navigation and detailed service offerings including property management, business rates consultancy, and professional services such as rent reviews and lease renewals. The company targets commercial property investors and asset owners within their regional market. Technically, the website is built using modern web standards with a CMS identified as MyWebsite and integrates IONOS SiteAnalytics for user behavior tracking. The site is mobile-optimized and includes privacy and cookie policies compliant with GDPR requirements. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. WHOIS data is unavailable, which raises concerns about domain registration transparency, but the website content and contact information appear legitimate and consistent with a professional business. Overall, the site scores well in content quality and privacy compliance but would benefit from enhanced security disclosures and domain registration transparency.

F

Fred J Malcolm

fredjmalcolm.com

63

Fred J Malcolm Ltd is a well-established jewellery retailer based in Belfast, Northern Ireland, with a history dating back to 1926. The company specializes in diamond engagement rings, wedding and eternity rings, and a variety of jewellery and dress rings. Their business model focuses on retail sales through physical showrooms complemented by an informative and visually appealing website. The company maintains a strong local market presence and targets consumers seeking high-quality diamond jewellery. The website features comprehensive product categories and emphasizes customer experience and heritage. Technically, the website employs a modern technology stack including jQuery, Fancybox, Google Analytics, Google Tag Manager, and CookieYes for consent management. The site is mobile optimized with good SEO practices and a moderate performance profile. Accessibility is basic but functional. The website uses HTTPS exclusively, ensuring secure communications. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. However, it lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS domain registration data is a concern, potentially indicating privacy protection or data unavailability, which slightly reduces trustworthiness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but improvements in security transparency and WHOIS data clarity are recommended to enhance trust and compliance.

Alphega Pharmacy operates a large network of over 1,300 independent pharmacies across the UK, providing community healthcare services including prescription ordering, pharmacy locator, online medicine shop, and professional pharmacy services. The website is built on WordPress using Elementor and integrates Google Tag Manager and OneTrust for analytics and cookie consent. The site is well-structured, mobile-optimized, and presents professional healthcare content targeted at UK pharmacy customers. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and a published security policy are absent. WHOIS data is unavailable due to a domain naming rules error, which is unusual and warrants further investigation. Overall, the website is trustworthy and functional but could improve transparency and security practices.

T

The Mulberry Bush

themulberry-bush.com

58

The Mulberry Bush is a small UK-based retail business specializing in paper crafting, wedding stationery, and related crafting supplies. It operates both an online e-commerce platform and a physical store located in Thatcham, Berkshire. The company also offers workshops and events to engage its crafting community. The website is professionally designed with clear navigation and a consistent brand presence, targeting hobbyists, crafters, and wedding planners. Technically, the site uses modern JavaScript libraries and integrates Google services for analytics and reCAPTCHA for form security. Payment processing is securely handled via PayPal SDK. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear authentic and professional. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Security posture is good with HTTPS and secure payment, but explicit security headers are not detected, and no incident response or vulnerability disclosure information is provided.

A

Andrews Removals Sheffield

andrewsremovals.com

57

Andrews Removals Sheffield is a well-established local removals and storage company serving Sheffield and surrounding areas since 2001. The company offers a comprehensive range of services including house removals, office removals, packing, storage, and house clearance. Their market position is that of a trusted, customer-focused service provider with positive customer reviews and a professional online presence. Technically, the website is built on WordPress using Elementor and Astra theme, with integrations for Google Analytics and GDPR cookie consent. The infrastructure is modern and adequate for their business needs, hosted with GoDaddy and using Cloudflare DNS. Security posture is good with HTTPS enabled and anti-spam measures in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the website is professional, trustworthy, and safe for general audiences.

Edward Sexton is a prestigious bespoke tailoring business located on Savile Row, London, with a heritage dating back to 1969. The company specializes in classic menswear and ladies tailoring, blending traditional craftsmanship with a modern English eccentricity. The website serves as an e-commerce platform hosted on Shopify, targeting affluent customers seeking luxury custom tailoring services. The site is professionally designed with excellent content quality and clear branding, reflecting the company's market position as a high-end tailor. Technically, the website leverages a mature Shopify infrastructure with integrations including Google Analytics, Facebook Pixel, and various marketing and consent management tools. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response information are not published. Overall, the website presents a trustworthy and professional digital presence consistent with the luxury tailoring industry. The absence of WHOIS data for the domain is due to domain registration constraints but does not detract significantly from the site's legitimacy. Strategic recommendations include publishing explicit security and incident response policies and enhancing direct contact information visibility to improve trust and compliance. This assessment indicates a well-maintained, secure, and privacy-conscious website suitable for its target market, with room for improvement in transparency and security documentation.

Our Dogs Publishing operates a specialized media platform focused on the pedigree dog show community in the United Kingdom. The website offers a weekly newspaper, online membership with archives, show reports, breed notes, and advertising services. It targets dog breeders, exhibitors, and enthusiasts, positioning itself as a key information source within this niche market. The business model relies on subscriptions, advertising, and e-commerce sales of dog-related books and products. Technically, the site uses a traditional web stack with jQuery, Google Analytics, Facebook Pixel, and consent management tools, indicating moderate digital maturity. Mobile optimization is basic but functional with a dedicated mobile site redirect. Security posture is adequate with HTTPS and a Content Security Policy, though the use of 'unsafe-inline' reduces CSP effectiveness. No explicit security or incident response policies are published, and WHOIS data extraction failed due to querying a subdomain rather than the registered domain, slightly impacting trust. Overall, the site is professional, content-rich, and compliant with privacy regulations, serving a general audience safely.

W

WN Properties

wnproperties.co.uk

50

WN Properties is a small independent real estate agency specializing in residential sales, lettings, and property management in South West Essex, UK. The website presents a professional image with clear business information, comprehensive property search functionality, and active social media presence. The business targets local home buyers, sellers, renters, and landlords, positioning itself as a trusted local expert with a strong client rating and certifications such as Client Money Protection. Technically, the website is built on Joomla CMS and uses modern JavaScript libraries to enhance user experience. It is mobile-optimized and provides good SEO and accessibility features. Security posture is generally good with HTTPS enforced and secure forms, but lacks some security headers and formal security policies. The WHOIS data is unavailable due to domain registration errors, which raises some legitimacy concerns, though the website content and business information appear consistent and professional. Overall, the site scores well on content quality, privacy compliance, and business credibility but could improve in security best practices and domain registration transparency.

T

Trilogy Hair Salon York

hairsalonyork.co.uk

56

Trilogy Hair Salon York is a luxury hair salon located in York city centre, operated by a team of experienced stylists with over 30 years of combined expertise. The business offers a range of hair services including cuts, colour, balayage, bridal hair, and styling, targeting a general audience seeking professional and high-quality hair care. The website presents a professional and consistent brand image with clear navigation and relevant content, supporting its market position as a premium local salon. Technically, the website employs modern web technologies including Google reCAPTCHA for bot protection, Google Tag Manager for analytics, and a booking widget from Vagaro. The site is mobile-optimized, uses HTTPS, and includes cookie consent mechanisms, reflecting a moderate to good level of digital maturity. However, there is room for improvement in security headers and explicit security policy disclosures. From a security perspective, the site benefits from HTTPS encryption and bot mitigation but lacks visible security headers and detailed incident response information. The absence of WHOIS data due to domain registration errors raises concerns about domain legitimacy, although the website content and contact information appear trustworthy. Overall, the security posture is moderate with recommendations to enhance header policies and transparency. The overall risk assessment suggests the website is functional and professional but requires verification of domain registration legitimacy and improvements in security best practices. Strategic recommendations include implementing comprehensive security headers, publishing incident response policies, and conducting regular third-party script audits to strengthen trust and compliance.

M

MEWPS Scotland Ltd

mewpsscotland.co.uk

56

MEWPS Scotland Ltd is a specialist company based in Scotland providing powered access solutions including sales, leasing, servicing, LOLER inspections, and IPAF accredited training. The company targets businesses and professionals requiring safe and compliant access equipment and training services. The website is built on WordPress with a professional design and clear navigation, supporting a good user experience and mobile optimization. The technical infrastructure includes common WordPress plugins such as Slider Revolution and Contact Form 7, with Google Analytics implemented for visitor tracking. Security posture is adequate with HTTPS enforced but lacks some security headers and cookie consent mechanisms. The WHOIS data for the domain is unavailable due to an invalid domain name registration error, which impacts trust from a domain registration perspective. Overall, the website is professional and trustworthy from a content and business standpoint but would benefit from improved security headers and privacy compliance enhancements.

ScrubVac Cleaning Equipment Ltd operates a specialized e-commerce platform focused on supplying Nilfisk cleaning equipment, spare parts, and accessories. Established in 2001, the company targets commercial, industrial, and domestic customers seeking high-quality cleaning solutions. The website reflects a niche market position with clear branding and a comprehensive product catalog. Technically, the site is built on WordPress with WooCommerce, leveraging modern plugins for SEO, anti-spam, and cookie compliance, indicating a mature digital infrastructure. Security measures include HTTPS, Google reCAPTCHA, and CleanTalk anti-spam, though some security headers are not explicitly detected, suggesting room for improvement. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a professional and trustworthy online presence with moderate to good performance and user experience.

A

AquAid UK

aquaid.co.uk

44

AquAid UK operates as a leading supplier of bottled water coolers and water dispensers in the United Kingdom, targeting businesses and consumers seeking quality water dispensing solutions. The website presents a professional and consistent brand image with clear business focus and relevant product offerings. Technically, the site is built on WordPress using the Divi theme, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Lead Forensics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks comprehensive security headers and formal security policies. The absence of privacy and cookie policies, along with missing WHOIS registration data, introduces compliance and legitimacy concerns that should be addressed to enhance trust and regulatory adherence. Overall, the site is functional and business-appropriate but would benefit from improved transparency and security hardening.

N

New Directions West Lothian

ndwl.org.uk

58

New Directions West Lothian is a small non-profit organization dedicated to providing person-centred care and support, particularly for individuals with learning disabilities. The website is hosted on the Squarespace platform and uses standard templates and scripts, reflecting a basic but functional digital presence. The content highlights positive outcomes from recent Care Inspectorate evaluations and staff surveys, indicating a focus on quality care and staff satisfaction. However, the website lacks comprehensive business contact information, privacy policies, and terms of service, which limits transparency and user trust. Technically, the site benefits from HTTPS and cookie consent mechanisms but lacks advanced security headers and analytics integrations. The WHOIS data is unavailable or privacy-protected, which is common for small organizations but reduces domain transparency. Overall, the website is safe and suitable for a general audience but would benefit from enhanced privacy, security, and business information disclosures to improve credibility and compliance.

M

McCalls Jewellery

mccallsjewellers.co.uk

48

McCalls Jewellery is a specialist retailer based in Aberdeen, Scotland, focusing on antique, vintage, and bespoke jewellery including engagement rings, earrings, necklaces, and watches. The business operates both a physical store and an e-commerce website, offering personal consultations and additional services such as gold buying, valuations, and repairs. The website is well-branded and targets consumers interested in high-quality, pre-owned jewellery with a rich history and meaning. Technically, the website leverages modern web technologies including Craft CMS, Google Analytics, Facebook Pixel, and htmx for dynamic content. The site is mobile-optimized with good SEO practices and structured data markup enhancing search engine visibility. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks explicit security headers and a published privacy or cookie policy, which are important for GDPR compliance. The absence of WHOIS data due to a domain naming rules error reduces domain trustworthiness, although the website content and business information appear legitimate and professional. Overall, McCalls Jewellery presents a trustworthy and professional online presence with a solid business model in retail jewellery. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance its security posture and trustworthiness further.

Permag Ltd is a small UK-based manufacturing company specializing in the production and supply of strip wound magnetic cores since 1982. The company serves the transformer industry and other industrial magnetics sectors, offering flexible order quantities, worldwide delivery, and technical support. Their website presents a professional but basic digital presence with product images and clear contact information. However, the absence of WHOIS registration data for the domain www.permag.net raises concerns about domain legitimacy and registration status, which conflicts with the company's claimed long operational history. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking but lacks visible HTTPS enforcement and security headers, indicating a weak security posture. Privacy and cookie policies are missing, reducing compliance with data protection regulations. Overall, the site is safe for general audiences and business-focused but requires improvements in security, privacy compliance, and domain registration transparency.

Duff Christmas Tree Farm is a small family-run business based in Central Scotland specializing in the retail and wholesale of British grown Christmas trees. The company offers a unique 'Cut Your Own Christmas Tree' experience, attracting both local consumers and commercial customers across the UK. Their business model combines agricultural production with experiential retail, emphasizing sustainability and environmental stewardship. The website reflects a consistent brand image and provides clear contact information and social media presence, supporting customer engagement and trust. Technically, the website is built on the Squarespace platform, leveraging its CMS and hosting services. It incorporates multimedia content such as Vimeo videos and uses modern web fonts and scripts. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features could be improved, and explicit security headers are not evident in the provided data. From a security perspective, the site uses HTTPS and includes a cookie consent banner, indicating basic compliance with privacy regulations. The absence of a privacy policy and terms of service pages represents a compliance gap. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying the 'www' subdomain rather than the base domain, limiting domain registration insights. Overall, the site appears legitimate and trustworthy but could enhance compliance and security posture. Strategically, Duff Christmas Tree Farm should focus on publishing comprehensive privacy and terms policies, implementing additional security headers, and improving accessibility to strengthen trust and regulatory compliance. Regular WHOIS monitoring and domain verification are recommended to ensure domain legitimacy and prevent potential misuse.

P

Pennine Dental

penninedental.co.uk

47

Pennine Dental is a small healthcare business specializing in cosmetic and general dentistry services, including dental implants, serving the Huddersfield and Yorkshire region. The website is professionally designed using WordPress with Themify Ultra theme and integrates Google Analytics and Google Reviews for analytics and social proof. The business maintains an active social media presence on Facebook, Twitter, and Instagram. Security posture is generally good with HTTPS enabled and no exposed sensitive data, but lacks some security headers and incident response information. Privacy and cookie policies exist but are placeholders without active consent mechanisms, indicating room for compliance improvement. WHOIS data is unavailable due to domain lookup errors, which slightly impacts trust but the website content and external signals support legitimacy.

C

CosTech Dental Lab

costech.co.uk

66

CosTech Dental Lab is a UK-based dental laboratory specializing in dental prosthetics and related services, operating since 2006. The company targets dental professionals and clinics, offering B2B dental lab services. The website is professionally designed using WordPress with WooCommerce and Elementor, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good performance and accessibility at a basic level. Security posture is solid with HTTPS, security headers, and no exposed sensitive data, though it lacks explicit security policies and incident response contacts. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is trustworthy and professional, with room for improvement in privacy and security transparency.

B

Bagshaws LLP

bagshaws.com

51

Bagshaws LLP is a well-established UK-based firm specializing in rural property, livestock, and machinery auctioneering, with a history dating back to 1871. The company offers a broad range of professional services including chartered surveying, property sales and lettings, and farm office services, targeting farmers, landowners, and rural clients primarily in Derbyshire and Staffordshire. The website reflects a mature digital presence with comprehensive service descriptions and strong branding consistency. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and PropertyHive, integrating Google Analytics and reCAPTCHA for analytics and security. The site is mobile-optimized and demonstrates good SEO and accessibility practices. However, the absence of WHOIS data and lack of visible security headers are notable gaps in transparency and security hardening. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but the lack of a published security policy or incident response contacts limits the site's security maturity. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear cookie and privacy policies aligned with GDPR requirements. Overall, the site presents a professional and trustworthy business front but would benefit from improved domain transparency and enhanced security disclosures to strengthen trust and compliance.

A

Andrew Bingham Independent Funeral Service

andrewbingham.co.uk

49

Andrew Bingham Independent Funeral Service is a small, family-run funeral director business based in Suffolk, UK, offering a comprehensive range of funeral-related services including planning, vehicles, coffins, green funerals, and bereavement support. The company positions itself as the only independent family-run funeral service in Stowmarket and Mid Suffolk, emphasizing personalized care and 24/7 availability. The website reflects a professional and compassionate approach, targeting individuals and families in need of funeral services. Technically, the website employs modern JavaScript libraries such as jQuery, Owl Carousel, and AOS for animations, alongside Google Tag Manager and Analytics for tracking, with a cookie consent mechanism ensuring GDPR compliance. Security measures include HTTPS enforcement and Google reCAPTCHA on the contact form, though some security headers are missing. Overall, the site is well-structured, mobile-optimized, and provides clear contact information and trust signals such as industry certifications. However, WHOIS data is unavailable due to domain naming issues, which slightly impacts trust analysis but does not detract from the website's professional presentation.

T

The Stanwick Hotel

thestanwickhotel.co.uk

60

The Stanwick Hotel is a hospitality business located in Stanwick, Northamptonshire, UK, offering guest accommodation, a bar and gastro restaurant, and facilities for weddings, civil ceremonies, and business events. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and includes integrations with Google Analytics and Facebook Pixel for marketing and analytics purposes. The site presents a professional and consistent brand image with good content quality and user experience, targeting general consumers and event organizers. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data due to domain naming rules issues introduces some uncertainty about domain registration legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy, security, and compliance features.

The Stanneylands website represents a boutique hotel and restaurant located in Wilmslow, Cheshire, offering accommodation, dining, and event hosting services. The business is positioned as a quality hospitality provider with a focus on a charming country-house experience, targeting leisure and business travelers as well as local diners and event organizers. The site is linked to the parent company JW Lees, a well-established brewery and hospitality group. Technically, the website is built using modern web technologies including Next.js and React, with integration of Google Tag Manager and analytics tools. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and appropriate security headers present, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and well-maintained, though WHOIS data is unavailable due to a query error on the subdomain. Strategic recommendations include publishing a security policy, vulnerability disclosure, and incident response contacts to enhance transparency and trust.

P

Phillip Mann

phillipmann.com

58

Phillip Mann is a well-established local estate agency operating primarily in the UK regions of Newhaven, Peacehaven, and Seaford. The company offers a broad range of real estate services including property sales, lettings, auctions, and additional services such as mortgage and conveyancing advice. The website reflects a mature business with over 30 years of experience and multiple branch locations, supported by recognized industry certifications and trust indicators. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, reCAPTCHA v3, and Bootstrap, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and bot protection in place, though some improvements are recommended such as adding security headers and publishing security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts business credibility. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively.

M

Metaltek Engineering Solutions Limited

metaltek.co.uk

43

Metaltek Engineering Solutions Limited is a UK-based small manufacturing company specializing in CNC machining and turning services. Established over 10 years ago, it serves a diverse range of industries including food production, healthcare, and automation. The company emphasizes quality, timely delivery, and value for money, positioning itself as a reliable subcontract engineering partner. The website reflects a professional business presence with clear contact details and service descriptions. Technically, the site is built on Joomla CMS, utilizing jQuery, Bootstrap, and Google Analytics, but some components like jQuery are outdated, posing potential security risks. The site includes a cookie consent mechanism but lacks comprehensive privacy and security policies. Security posture is moderate with no visible security headers and no WHOIS data available due to domain registration issues, which impacts trustworthiness. Overall, the website is functional and business-appropriate but would benefit from technical and security improvements.

Britannia Property Services operates as a property management and lettings company specializing in student and professional accommodation in Birmingham, UK. Their services include tenancy management, portfolio property management, and property maintenance and refurbishment. The website presents a professional image with clear service offerings and trust indicators such as industry accreditations. However, the domain WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and registration status. Technically, the website uses legacy JavaScript libraries like jQuery 2.0.3 and includes Google reCAPTCHA for form security. The site is mobile optimized and has a moderate performance profile but lacks visible security headers and cookie consent mechanisms, indicating gaps in security and privacy compliance. No social media presence or company emails are publicly listed, limiting direct contact options. From a security perspective, the site shows basic protections but lacks advanced security headers and incident response information. The absence of WHOIS data and privacy policies reduces trustworthiness. Overall, the site is functional and professional but requires improvements in security posture, privacy compliance, and domain registration transparency. Strategic recommendations include implementing comprehensive security headers, enforcing HTTPS, adding cookie consent for GDPR compliance, clarifying domain registration status, and enhancing contact transparency to improve user trust and regulatory compliance.

L

Law & Lewis Joinery of Cambridge

lawandlewis.co.uk

52

Law & Lewis Joinery of Cambridge is a small bespoke timber joinery business targeting customers in Cambridge, UK. The website currently serves as a 'Coming Soon' holding page with minimal content, primarily showcasing an image and a contact email. The business focuses on traditional and reliable timber joinery products tailored to various home styles. The market position appears local and specialized in bespoke joinery services. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, with standard web technologies such as jQuery and FontAwesome. The site is served over HTTPS with a valid SSL certificate, but lacks advanced security headers and comprehensive privacy or cookie policies. Google Analytics is used for visitor tracking, but privacy compliance is minimal. The WHOIS data for the domain is incomplete and indicates a naming rules violation, which raises concerns about domain registration legitimacy. Overall, the website demonstrates basic digital maturity but requires improvements in security, privacy compliance, and business information transparency.

C

Contact IT Solutions Ltd

contactitsolutions.co.uk

58

Contact IT Solutions Ltd is a UK-based national distributor and supplier specializing in structured cabling and networking products. Established in 2009, the company targets UK businesses and IT professionals, positioning itself as a key distributor in the technology sector. The website reflects a professional business model focused on distribution services with a clear UK market focus. Technically, the website is built on the OpenCart platform using the Journal3 theme, incorporating modern web technologies such as Bootstrap and FontAwesome. It employs Google Tag Manager and Google reCAPTCHA for analytics and form security respectively. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Security-wise, the site uses HTTPS with a valid SSL certificate and implements reCAPTCHA to protect forms. However, it lacks important security headers and published security or privacy policies, which are critical for compliance and trust. No direct contact emails or phone numbers are provided, limiting immediate contact options. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

A

AutoSolution Ltd

autosolutionltd.co.uk

62

AutoSolution Ltd is a small, local automotive garage based in Bognor Regis, UK, providing a comprehensive range of vehicle maintenance and repair services including car servicing, diagnostics, MOT testing, and general repairs. The company emphasizes customer service, fair pricing, and convenience with offerings such as free local collection and delivery. The website is professionally designed, mobile-optimized, and provides clear contact information and service descriptions, positioning the business as a trustworthy local service provider. Technically, the website leverages modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Snowplow Analytics for tracking and performance monitoring. It is hosted on a CDN ensuring moderate performance and good mobile responsiveness. However, some security best practices such as security headers are missing, and privacy compliance is basic with only standard cookie notifications and links to third-party privacy policies. Security posture is generally good with HTTPS enforced and CAPTCHA protection on contact forms, but the absence of WHOIS data due to domain registration errors raises concerns about domain legitimacy and ownership transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is functional, secure, and professional but would benefit from enhanced privacy and security policies. Strategically, the business should verify and correct domain registration issues to improve trustworthiness, implement additional security headers, and enhance privacy compliance to align with GDPR and other regulations. These steps will strengthen the company’s digital presence and customer confidence.

Chill Out Spa is a well-established spa business located within the Knowsley Hall estate in Liverpool, offering a wide range of spa days, treatments, and beauty services. The company targets consumers seeking wellness and relaxation experiences, with a strong local market presence supported by multiple awards and a professional online presence. The website is built on WordPress with WooCommerce and Gravity Forms, integrating modern JavaScript libraries and analytics tools to support e-commerce and customer engagement. Security posture is solid with HTTPS enforced and secure form handling, though additional HTTP security headers and a published security policy would enhance protection. The absence of WHOIS data is due to a domain query format issue rather than a legitimacy concern. Overall, the website demonstrates good digital maturity, compliance with privacy regulations, and a trustworthy business image.