United Kingdom security reports

T

Thai Golf Holidays

thaigolfholidays.co.uk

39

Thai Golf Holidays is a UK-based travel service specializing in golf holiday packages in Thailand, offering flights, hotels, golf course bookings, and transfers. The website positions itself as a niche provider for golf enthusiasts seeking quality and value in Thailand's extensive golf offerings. The business has been established since 2006, indicating a mature presence in the market. Technically, the site is built on WordPress using a variety of plugins including Yoast SEO and Pootle Page Builder, providing a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security measures.

Eskbank Chiropractic is a small, family-run healthcare provider specializing in chiropractic care since 2000, serving the Eskbank and Dalkeith area in the United Kingdom. The business has expanded regionally with a partner site in Melrose, indicating growth and a stable market position. Their services include professional chiropractic treatment, initial consultations, and x-ray facilities, with an emphasis on patient convenience and care quality. The website is built on Squarespace, leveraging modern web technologies and providing a mobile-optimized experience with clear navigation and professional branding. However, the absence of privacy and cookie policies and the lack of security headers indicate areas for compliance and security improvement. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the site presents a trustworthy healthcare service but requires enhancements in security posture and regulatory compliance.

T

Three Daws

threedaws.co.uk

45

Three Daws is a historic riverside inn located in Gravesend, Kent, UK, offering hospitality services including a pub, food menus, event hosting, and function room hire. The business targets local residents and visitors seeking a welcoming atmosphere with real ales, fine wines, and community events. The website reflects a small hospitality business with a consistent brand and active social media presence. Technically, the site is built on WordPress using common plugins such as WPBakery Page Builder, Contact Form 7, and Events Calendar Pro. It employs HTTPS with Google reCAPTCHA for form security but lacks some security headers and explicit cookie consent mechanisms. The WHOIS data is unavailable due to domain registration issues, which raises concerns about domain legitimacy but does not detract from the apparent authenticity of the business. Overall, the site is functional, moderately optimized, and suitable for mature audiences due to its alcohol-related content.

N

Niplast

niplast.com

70

Niplast is a UK-based manufacturer specializing in bespoke industrial bulk liquid plastic storage tanks designed for water, chemicals, acids, and other liquids. The company positions itself as a leading manufacturer within the UK market, targeting industrial and commercial customers requiring reliable storage solutions. The website reflects a professional business presence with clear branding and relevant content focused on their manufacturing services. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Elementor, indicating a moderate level of digital maturity. The inclusion of Google Tag Manager and reCAPTCHA suggests awareness of analytics and security best practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS enabled, but the lack of security headers and explicit privacy policies indicates room for improvement. Overall, the website is functional and professional but would benefit from enhanced compliance and transparency measures.

A

ASB (Engineers) Ltd

asbspraycentre.co.uk

55

ASB (Engineers) Ltd is a small, established company based in Glasgow, Scotland, specializing in the hire and servicing of paint spraying equipment and related products since 1957. The company offers a comprehensive range of equipment including airless and turbine sprayers, high pressure washers, and stocks spare parts and accessories. Their market position is that of a trusted local business with a strong emphasis on customer service and quality equipment. The website is built on WordPress using common plugins such as Yoast SEO and Beaver Builder, with Google Analytics and Tag Manager integrated for tracking. The site is well-structured, mobile-optimized, and professionally designed, providing clear contact information and service descriptions. However, the absence of privacy and cookie policies indicates compliance gaps with data protection regulations. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but security headers are missing and no incident response or vulnerability disclosure information is provided. WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness but the website content and contact details appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

L

Lennoxautoservices

lennoxautoservices.co.uk

54

Lennoxautoservices is a small UK-based automotive service provider offering vehicle maintenance and repair services. The website is built on the Wix platform and targets local customers seeking automotive services. The technical infrastructure relies on Wix hosting and standard web technologies, with moderate performance and basic mobile optimization. Security posture is weak due to lack of visible HTTPS verification, absence of security headers, and missing privacy and cookie policies. The domain WHOIS data is unavailable and indicates the domain is invalid under Nominet UK rules, which raises concerns about domain legitimacy or possible misconfiguration. Overall, the website provides basic business information but lacks critical security and compliance features.

Blake Printers Ltd is a small, established local printing company based in Northumberland, UK, with a history dating back to 1976. The company offers a broad range of print services including litho and digital printing, business stationery, promotional materials, and in-house graphic design. Their target market is local businesses in the North East and North West of England seeking affordable and professional print solutions. The website reflects a basic but functional digital presence hosted on the Weebly platform, with standard web technologies and moderate performance. Contact information and a privacy policy are provided, though cookie consent mechanisms and advanced security policies are lacking. The WHOIS data for the domain is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional appearance of the website content.

I

Ian Mitchell Distribution Limited

ianmitchelldistribution.com

55

Ian Mitchell Distribution Limited is a UK-based family-owned manufacturer and distributor of cleaning chemicals and lubricants serving multiple industrial sectors including food, transport, engineering, and agriculture. Established in 1987, the company emphasizes quality, bespoke product development, and comprehensive distribution capabilities across the UK. The website is built on a modern WordPress platform using WooCommerce and Elementor, with SEO optimization via Yoast. It features a professional design with good navigation and mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the site presents a credible business but would benefit from enhanced privacy compliance and security best practices.

T

The Base Hair Company

thebasehairco.co.uk

40

The Base Hair Company is a well-established hairdressing salon based in Liverpool, UK, operating since 2001. The business focuses on modern creative hairdressing services including cutting, colouring, and styling, complemented by retail product sales through an online shop. The website reflects a solid local market position with clear service offerings and client testimonials, targeting local consumers seeking quality hair care. Technically, the website is built on WordPress using Elementor and several modern plugins, hosted by GoDaddy. The site is mobile-optimized and presents a professional user experience, though some SEO and accessibility improvements are possible. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal privacy/cookie policies, which are compliance gaps. Overall, the domain registration is consistent with the business history, enhancing trustworthiness.

S

S & D Bookmakers Ltd

sdbet.co.uk

35

S & D Bookmakers Ltd is a well-established independent bookmaker company founded in 1966, operating multiple physical betting shops primarily in the Peterborough area of the UK. The company offers a variety of sports betting services including football, horse racing, tennis, rugby, and cricket, supported by a workforce with long-term employee retention. Their website serves as an informational portal with branch locations, betting guides, and contact details, reflecting a local retail business model focused on customer service and responsible gambling. The presence of multiple gambling regulatory and responsible gambling certifications underscores their compliance with UK gambling laws. Technically, the website is built on WordPress with common plugins such as Yoast SEO and MasterSlider, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS lookup for the domain 'www.sdbet.co.uk' failed due to domain naming rules, suggesting the registered domain is likely 'sdbet.co.uk' without the 'www' prefix. This discrepancy should be clarified to ensure domain registration transparency. Overall, the website is professional, trustworthy, and targeted at adult bettors, with clear contact information and responsible gambling messaging. However, the absence of privacy and cookie policies and incomplete WHOIS data reduce the privacy compliance and domain legitimacy scores. Strategic improvements in security headers, privacy disclosures, and domain registration clarity would enhance the site's security and compliance posture.

M

MacWilliam Demolition Ltd

macwilliamdemolition.co.uk

64

MacWilliam Demolition Ltd is a small, established demolition and asbestos removal company based in North Lanarkshire, Scotland, with a family history dating back to 1922. The company offers a range of services including demolition, clearance, plant and machinery hire, and asbestos removal, targeting commercial, industrial, and local authority clients. Their market position is that of a trusted local specialist with multiple industry certifications and memberships. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies such as jQuery, Google Tag Manager, Cookiebot for consent management, and Snowplow Analytics for user behavior tracking. The site is mobile optimized and SEO friendly, with good content quality and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published policies. The WHOIS data is unavailable due to domain naming rules violation, which raises some concerns about domain registration legitimacy, but the website content and business information appear professional and consistent with a legitimate small business. Overall, the site scores well in content, technical implementation, security, and privacy compliance, with minor penalties related to WHOIS data and security policy transparency.

T

The Flame

the-flame.co.uk

54

The Flame is a small, not-for-profit organization based in Coventry, UK, specializing in mindfulness, holistic health, and wellness services. With over 30 years of experience, it offers meditation, yoga, and Qi Gong classes aimed at improving mental, physical, emotional, and spiritual well-being. The website is built on the Wix platform, featuring multimedia content and structured data to enhance search visibility. However, the domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy. The site lacks explicit privacy and cookie policies, and no direct contact emails or phone numbers are found, which impacts trust and compliance. Technically, the site uses modern web technologies but lacks security headers and detailed security policies.

M

Midland Tube & Fabrications Limited

midlandtubeandfabrications.co.uk

55

Midland Tube & Fabrications Limited is a UK-based small manufacturing business specializing in bespoke pipework fabrication services. The company targets industrial and commercial clients requiring specialized pipework solutions. The website presents a professional image with clear contact information and structured data indicating the company's location and services. Technically, the site is built on WordPress using the Gutenberg editor, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data due to domain registration issues introduces some uncertainty about domain legitimacy, though the website content and presentation suggest a legitimate business. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance features.

H

Helexco Company Ltd

helexco.eu

46

Helexco Company Ltd is a well-established maritime safety equipment and ship services provider with over 40 years of experience, operating primarily in the UK and Greece. Their offerings include calibration gases, gas detection equipment and training, antifouling systems, oil mist detection, and smart monitoring solutions tailored for the shipping industry. The company targets maritime operators and safety professionals, positioning itself as a trusted supplier with long-term partnerships and a solid market presence. Technically, the website is built on WordPress with common plugins such as WPBakery, Slider Revolution, and Contact Form 7, integrating Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile use, with good SEO practices and structured data markup enhancing search visibility. From a security perspective, the site uses HTTPS and employs Google reCAPTCHA on forms, but lacks some recommended security headers and may be running outdated WordPress and plugin versions, which could pose risks. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected, which is a GDPR compliance gap. Overall, the website is professional and trustworthy with a good business credibility score. However, improvements in security headers, software updates, and privacy compliance mechanisms are recommended to enhance the security posture and regulatory adherence.

C

Cards n Candy

ccballoons.co.uk

48

Cards n Candy is a small, locally established retail business based in Wirral, UK, specializing in party supplies including balloons, cards, gifts, and party accessories. The company has been operating for over 16 years, run by a husband and wife team, and targets local customers seeking party decorations and gifts. The website reflects a well-structured retail storefront with clear product categories and customer engagement through testimonials and social media integration. Technically, the website is built on WordPress with popular plugins for page building, spam protection, and SEO, hosted by Krystal Hosting Ltd, a reputable UK provider. Performance and mobile optimization are adequate for a small business site. Security posture is moderate with HTTPS enabled and anti-spam measures, but lacks advanced security headers and explicit incident response policies. Privacy and cookie policies exist but are hosted externally and lack consent mechanisms, indicating partial GDPR compliance. Overall, the site is trustworthy and professional for its business scope but could improve security and privacy practices.

A

A & D Door Systems Ltd

addoorsystems.co.uk

43

A & D Door Systems Ltd is a well-established family-owned business specializing in the installation, repair, and maintenance of industrial and commercial doors, roller shutters, and security systems across the UK. With over 25 years of experience, the company offers a comprehensive range of products and services including emergency 24/7 repair, multi-site contracts, and tailored maintenance plans. Their market position is strengthened by strong customer loyalty, certifications, and a focus on quality and service. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating modern technologies such as Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS with good SSL configuration but lacks some security headers that could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a comprehensive privacy policy present but no visible cookie consent mechanism. Contact information is clear and comprehensive, supporting business credibility. Overall, the website presents a professional and trustworthy front for the business, though improvements in security headers and privacy compliance would enhance its posture. The WHOIS data is unavailable due to querying the 'www' subdomain, but the website content and business information indicate legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, and enhancing incident response transparency.

A

Academic Day Nursery

twinkletotsdaynursery.co.uk

62

Academic Day Nursery is a small, well-established childcare provider located in Stoke Newington, London, serving families with children aged 6 months to 5 years. The nursery has a good reputation supported by an Ofsted 'Good' rating and offers a range of childcare services including baby, toddler, and preschool rooms, outdoor activities, and government funding options. The website is professionally designed with clear navigation and contact information, targeting local parents seeking quality childcare. Technically, the site uses modern JavaScript libraries and analytics tools, hosted likely via Yell.com's platform, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and CAPTCHA-protected forms, but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable due to domain registration constraints, which slightly reduces trustworthiness from a domain perspective but does not detract from the business legitimacy evident on the site. Overall, the site is safe, professional, and trustworthy for its intended audience.

D

Disappearing Ink » Professional Laser Aesthetics

disappearing-ink.co.uk

42

Disappearing Ink is a small UK-based professional laser aesthetics service provider with a domain registered since 2010. The website is built on WordPress using WPBakery Page Builder and UIkit framework, indicating a moderate level of technical maturity. The site integrates Facebook SDK for social media but lacks visible privacy, cookie, or terms of service policies, which impacts its compliance posture. Security headers are not detected, and no explicit contact information is found in the analyzed content, suggesting areas for improvement in transparency and security. Overall, the business appears legitimate with a stable domain history but would benefit from enhanced privacy and security practices.

I

IRS

irsscotland.com

63

IRS Construction is a UK-based company specializing in external wall insulation and building cladding services. Positioned as an industry leader within the UK construction sector, the company targets property developers, owners, and construction professionals seeking specialized cladding and insulation solutions. The website is professionally designed using the Wix platform, featuring clear branding and contact information, including a UK phone number and physical address in Airdrie. Structured data is implemented to enhance search engine visibility and provide business details. Technically, the website leverages Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. However, the absence of privacy and cookie policies, as well as the lack of security headers, indicates room for improvement in compliance and security practices. The WHOIS lookup failed due to domain naming rules violations, limiting the ability to verify domain registration details and reducing trustworthiness from a domain legitimacy perspective. Overall, the site is safe, professional, and functional but would benefit from enhanced privacy compliance and security hardening.

Intergears Ltd is a well-established automotive service provider specializing in gearbox, axle, differential, and clutch reconditioning with over 35 years of experience. The company operates primarily in the West Midlands and Black Country region of the UK, targeting both public and trade customers. Their business model focuses on quality service backed by warranties and free collection options, positioning them as a trusted local specialist in their niche market. The website reflects a professional and consistent brand presence with clear service offerings and customer testimonials reinforcing trust. Technically, the website is built on WordPress using the Enfold theme, integrating modern technologies such as Google Tag Manager and Yoast SEO for analytics and search optimization. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security headers and detailed security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid for a small business website, with room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with clear policies and consent mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy. The website is safe for general audiences with no adult or questionable content. Strategically, the company should focus on enhancing security best practices, adding incident response information, and maintaining up-to-date technical components to sustain trust and compliance in the evolving digital landscape.

P

Paragon Global Brands

communisis.com

62

Paragon Global Brands is a prominent global outsourced services provider specializing in retail execution solutions that help brands succeed at critical consumer touchpoints. The company operates worldwide with expert teams that create integrated multi-agency ecosystems supported by data platforms to streamline retail processes, reduce costs, and improve brand compliance. Their offerings include strategy, design, procurement, fulfillment, and AI-driven insights, positioning them as a leader in retail services. The website reflects a mature digital presence built on Drupal 10, incorporating modern technologies such as Cookiebot for consent management and Cloudflare Insights for analytics. The site is well-optimized for mobile and accessibility, with professional design and clear navigation. Security posture is strong with HTTPS and consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is privacy protected, typical for corporate domains, and does not raise immediate concerns. Overall, the website and business demonstrate high professionalism and trustworthiness, with room for improvement in transparency and security policy disclosures.

D

Douglas Land Surveys Ltd

douglas-land-surveys.co.uk

61

Douglas Land Surveys Ltd is a well-established land surveying company based in Dundee, Scotland, with over 25 years of experience. The company offers a comprehensive range of surveying services including topographic surveys, 3D laser scanning, hydrographic surveys, volumetric works, boundary resolution, and title deed preparation. Their client base includes individual property owners and large-scale developments such as wind farms and hydroelectric schemes, primarily serving the Scottish mainland, islands, and parts of northern England and Ireland. The business model focuses on providing professional, reliable, and timely surveying services with a strong emphasis on quality and client satisfaction.

D

Dorset HealthCare University NHS Foundation Trust

dorsethealthcare.nhs.uk

73

Dorset HealthCare University NHS Foundation Trust is a large regional healthcare provider delivering comprehensive mental health and community-based physical health services across Dorset, UK. The organization operates under the NHS framework, serving patients, visitors, carers, and healthcare professionals with a focus on accessibility and quality care. The website reflects a mature digital presence with clear navigation, professional design, and strong trust indicators including an Outstanding CQC rating. Technically, the site is built on Concrete CMS with modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and includes accessibility tools and multilingual support via Google Translate. Security posture is good with HTTPS enforced and cookie consent mechanisms, though explicit security headers and vulnerability disclosure policies are absent. WHOIS data is unavailable due to the domain being a subdomain under nhs.uk, which is consistent with NHS domain management practices. Overall, the site is trustworthy, compliant with GDPR, and well-positioned to serve its audience effectively.

S

Sanderson Decorators Ltd

casanderson.co.uk

47

Sanderson Decorators Ltd is a small, local painting contractor business based in Leicester, United Kingdom, specializing in residential, commercial, and industrial painting and decorating services. The website presents a professional and consistent brand image with a clear focus on its core services and target audience. The domain has been registered since 2001, indicating a well-established presence in the market. Technically, the website uses modern web fonts and iconography, including Google Fonts and Font Awesome, and integrates Google Tag Manager for analytics. However, there is no evidence of advanced frameworks or platforms beyond a proprietary CMS (GYOLCMS v3.8.11). Security posture is limited, with no detected security headers or explicit SSL/TLS configuration details in the provided data. Privacy and cookie policies are absent, which may impact compliance with GDPR and user trust. Overall, the website is functional and relevant but would benefit from enhanced security and privacy practices.

Cars Garage Limited operates as a local automotive repair and servicing business based in Drighlington, West Yorkshire, UK. The company offers a range of car repair and servicing solutions targeting local car owners. The website presents basic business information and services but lacks comprehensive contact details and formal policies. The market position appears focused on local clientele with a small business scale. Technically, the website uses a basic CMS (W4UCMS) and integrates common web technologies such as Google Fonts, Google Analytics, Google Tag Manager, and reCAPTCHA for bot protection. The site is mobile-optimized with moderate performance but lacks advanced frameworks or hosting details. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented; however, no security headers were detected, and privacy compliance is minimal due to missing privacy and cookie policies. The domain WHOIS data indicates the domain is not registered or invalid under Nominet UK rules, raising legitimacy concerns. Overall, the website is functional but requires significant improvements in security, privacy compliance, and business transparency to enhance trust and professionalism.

Circle Health Group is a UK-based healthcare provider group. The website is currently inaccessible beyond a Cloudflare Turnstile captcha challenge, preventing full content analysis. The visible content includes a contact phone number and a prompt to visit the homepage, but no further substantive information is accessible. The domain WHOIS data is unavailable and indicates registration issues, raising concerns about domain legitimacy. The technical infrastructure includes Google Tag Manager and Cloudflare services, but lacks visible security headers or privacy policies. Overall, the website's digital maturity and security posture cannot be fully assessed due to access restrictions.

T

Three Pears Brands | International Fragrance, Skin and Personal Care Supplier

threepears.co.uk

51

Three Pears Brands is a UK-based company specializing in international fragrance, skin, and personal care products. Established in 1973, the company has evolved from a distribution powerhouse into a leading brand partner, focusing on brand licensing, brand management, and manufacturing. They serve major retail partners such as Tesco, Morrisons, Superdrug, and B&M, bridging the gap between world-class intellectual property and retail shelves. The website reflects a mature digital presence with professional design, clear navigation, and modern technology stack including WordPress, WooCommerce, and Elementor. Technically, the website is well-structured, mobile-optimized, and uses secure HTTPS connections. However, it lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and user trust. The WHOIS data for the domain is unavailable due to a domain registration error, which raises some concerns about domain legitimacy despite the professional business presence. Security posture is generally good with HTTPS and no visible vulnerabilities, but improvements are recommended in security headers and privacy compliance. Overall, the website presents a trustworthy and professional business front, but domain registration inconsistencies and missing compliance documents should be addressed to enhance credibility and reduce risk.

Stokes & Sons Security Limited is a long-established, family-run locksmith and security specialist serving Gloucestershire and surrounding areas since 1857. The company offers a comprehensive range of locksmith services including key cutting, master key systems, lock fitting, safe services, and access control systems. Their market position is strong locally, supported by membership in the Master Locksmiths Association and a reputation built over generations. The website reflects a professional and trustworthy business with clear contact information and service descriptions. Technically, the site is built on WordPress using Elementor, with modern JavaScript libraries and responsive design, providing a good user experience across devices. Security posture is solid with HTTPS and secure form inputs, though it lacks some security headers and formal privacy/cookie policies, which are recommended for compliance and trust. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the professional web presence. Overall, the site is functional, professional, and trustworthy but would benefit from improved privacy compliance and domain registration transparency.

Engine Room Technology Ltd is a UK-based full-service digital agency specializing in web design, ecommerce development, hosting, and bespoke automotive website solutions. Established since 1996, the company offers a comprehensive range of services including domain registration, WordPress maintenance, and specialized dealer management systems for automotive clients. Their market position is that of a trusted, experienced provider with a strong portfolio and client support infrastructure. Technically, the website is built on WordPress using the Avada theme, leveraging modern JavaScript libraries, Google reCAPTCHA, and analytics tools, hosted on Hetzner servers. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, security headers, and secure forms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in formal security disclosures and DNS security.

Spirit Hair Design is a small, established hairdressing salon based in Christchurch, UK, operating since 2001. The business offers a comprehensive range of hairdressing services including cuts, colours, wedding packages, and discount schemes targeting students, NHS staff, and children. The website reflects a professional local business with clear contact details and a focus on customer care and quality products. Technically, the site is built using Adobe Muse with a static architecture and includes common web technologies such as jQuery and RequireJS. While the site is accessible and functional, it lacks modern security headers and privacy compliance features. The Facebook SDK is loaded insecurely over HTTP, posing a mixed content risk. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear genuine. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

Myrene Signs Ltd is a UK-based small business specializing in the creation of various signage solutions, including vehicle graphics, banners, engraving, and digital print. Established in 2000, the company leverages both modern technologies and traditional sign writing methods to serve businesses seeking effective branding and signage. Their website reflects a professional and consistent brand image targeting business clients in need of signage services. Technically, the website is built on WordPress using the Total theme and LiteSpeed Cache, hosted by IONOS SE. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is trustworthy and functional but would benefit from enhanced security and compliance measures.

Donview Veterinary Centre is a well-established veterinary service provider operating in Aberdeenshire, UK, with branches in Inverurie and Kintore. The business emphasizes 24-hour veterinary care for pets, horses, and farm animals, leveraging over a century of experience. The website reflects a professional and consistent brand presence, targeting local pet owners and farmers. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Tag Manager, hosted on WP Engine, ensuring reliable performance and moderate loading speeds. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and detailed privacy policies are absent, indicating room for improvement in compliance and security transparency. Overall, the domain registration is consistent with the business claims, showing a long-standing presence without privacy protection, enhancing trustworthiness.

G

Gregory & Seeley Cranleigh

gregory-seeley.co.uk

61

Gregory & Seeley Cranleigh is a small independent optician business located in Cranleigh, United Kingdom, specializing in eye care services and designer eyewear. The company positions itself as a leading local provider with award-winning optometrists and a range of specialized services including dry eye clinics, myopia management, and hearing care. The website is built on WordPress using modern themes and plugins, demonstrating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is generally strong with HTTPS enforced and use of Google reCAPTCHA, though there is room for improvement in security headers and privacy compliance. The absence of WHOIS data due to domain naming rules is a notable anomaly but the website content and contact information suggest a legitimate business. Overall, the site is professional, trustworthy, and serves its target audience effectively.

C. Brumpton Butchers Ltd is a longstanding family-run butcher business operating in Nottingham with physical stores in Cotgrave and West Bridgford. The company emphasizes quality, local sourcing, and traditional recipes, offering a wide range of meat products and home-baked goods. Their website serves primarily as an informational platform showcasing their offerings and contact details, supported by a professional design and embedded promotional video. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile responsiveness. Security posture is solid with HTTPS and anti-spam measures, though it lacks advanced security headers and formal privacy policies, which are areas for improvement. The domain WHOIS data is unavailable due to a registration error, which raises some concerns about domain legitimacy from a technical standpoint but does not detract from the business's apparent authenticity. Overall, the website is functional, professional, and safe for general audiences.

B

B.Kent Electrical Ltd

bkentelectrical.co.uk

49

B Kent Electrical Ltd is a small UK-based electrical contracting company specializing in domestic, commercial, and industrial electrical services. Their market position is that of a local specialist serving Leighton Buzzard, Milton Keynes, Bedford, and surrounding areas. Key services include electrical contracting, testing and inspecting, lighting solutions, fire and security services, and data solutions. The website presents basic but relevant content with certifications from NIC and CHAS, indicating industry compliance and trustworthiness. Technically, the website is built on Joomla CMS with Bootstrap 5 and jQuery libraries, providing a moderately optimized and mobile-friendly experience. However, the site lacks advanced SEO and accessibility features and does not display any analytics or tracking tools. Security-wise, the site includes a CSRF token but lacks visible security headers and explicit HTTPS enforcement details. No privacy or cookie policies are present, which is a compliance gap. The WHOIS lookup failed due to domain registration issues, indicating the domain name is invalid under Nominet UK rules. This raises concerns about the domain's legitimacy or registration status, although the website content appears professional and legitimate. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website scores moderately on content quality and technical implementation but scores low on privacy compliance and domain legitimacy. Strategic improvements in security headers, privacy policies, and domain registration verification are recommended to enhance trust and compliance.

U

Universal Metals

universalmetals.co.uk

48

Universal Metals is a small, family-run scrap metal merchant business operating in the United Kingdom, specifically serving areas such as Crawley, Lancing, and Hastings. The company specializes in recycling both ferrous and non-ferrous metals with a focus on zero waste, positioning itself as a responsible and environmentally conscious local business. Their website reflects a professional and consistent brand image, targeting businesses and individuals seeking scrap metal recycling services in their region. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with no significant issues detected in loading or navigation. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA, but lacks several important security headers and does not provide explicit security or incident response policies. The absence of a privacy policy and terms of service pages indicates gaps in compliance and transparency. Additionally, the domain WHOIS data is unavailable due to a domain registration error, which raises concerns about domain legitimacy despite the website's operational status. Overall, the website presents a trustworthy and professional front for a small local business but would benefit from enhanced security practices, improved privacy compliance, and resolution of domain registration inconsistencies to strengthen its credibility and reduce risk.

Noble Grossart Ltd is a well-established, privately owned merchant bank based in Edinburgh, UK, with a history dating back to 1969. The company specializes in providing independent corporate finance advice, including capital raising, mergers and acquisitions, management buy-outs, corporate restructuring, and debt funding advice. Additionally, through Noble Grossart Investments, the firm invests in unlisted companies with significant growth potential, acting as a strategic and long-term partner. The website reflects a professional and consistent brand image, targeting UK-based companies and institutions seeking financial advisory and investment services. Technically, the website is built using the GoDaddy Website Builder platform, leveraging modern web fonts and service workers for enhanced user experience. The site is hosted by GoDaddy.com, LLC, with HTTPS properly configured, ensuring secure communication. However, the site lacks advanced security headers and privacy-related policies, which are areas for improvement. The website is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. From a security perspective, the site demonstrates a good baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies, as well as missing security headers, reduces the overall security posture and privacy compliance. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust and readiness. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a credible and trustworthy business with a solid market position in the finance sector. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and providing incident response contacts to strengthen security and compliance posture.

B

Be Dazzled Cleaners Ltd

bedazzledcleaners.co.uk

55

Be Dazzled Cleaners Ltd is a small, well-established domestic cleaning company based in Chessington, UK, offering high-end cleaning services including domestic cleaning, turnkey cleaning, and ironing and laundry services. The company targets residential customers in Chessington and surrounding areas, positioning itself as a trusted provider with over a decade of experience. The website reflects a professional and consistent brand image with clear contact information and service descriptions. Technically, the site is built on the MultiScreenSite CMS platform, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and Snowplow. The site is hosted on a static CDN with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers are missing and incident response information is absent. Privacy and cookie policies are present but hosted on a third-party domain (Yell.com). WHOIS data is unavailable due to domain naming rules error, indicating the domain is a subdomain or not directly registered, which slightly reduces trustworthiness from a domain registration perspective. Overall, the website is professional, secure, and user-friendly, suitable for its business purpose.

P

Park Lane Windows

parklanewindows.co.uk

55

Park Lane Windows is a well-established family-run business specializing in the supply and installation of high-quality, energy-efficient windows, doors, conservatories, and home extensions primarily serving Northamptonshire and surrounding counties in the UK. The company holds multiple trust certifications including FENSA registration and Which? Trusted Trader status, reflecting a strong market position and customer trust. Their website effectively showcases their product range and services, targeting homeowners and property owners seeking reliable home improvement solutions. Technically, the website is built on WordPress with Elementor and integrates modern tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, although the absence of a public security policy and incident response information suggests room for improvement. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, with moderate tracking and analytics usage. Strategic recommendations include publishing comprehensive privacy and security policies and enhancing accessibility features to further strengthen compliance and user trust.

The Finchley Vet is a small veterinary clinic based in Finchley, London, providing pet healthcare services to the local community. The website is built on WordPress using the Divi Builder theme and incorporates common web technologies such as Google Fonts, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The domain is registered with a reputable UK registrar since 2015, consistent with the business's operational timeline. The website design and user experience are good, with basic mobile optimization and clear navigation. However, the content quality is basic, lacking comprehensive business and compliance information such as privacy and cookie policies. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks security headers and incident response details. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

P S Bookkeeping & Accountancy is a well-established small business specializing in bookkeeping, payroll, company accounts, VAT, and tax services primarily serving clients in Colchester and the wider UK. Founded in 1988, the company emphasizes personal, reliable, and cost-effective accounting solutions tailored to businesses of all sizes. Their market position is that of a trusted local specialist with a loyal client base and a reputation for quality service. The website reflects this with clear service descriptions and contact information. Technically, the website is built on Drupal 7 with the Foundation CSS framework, utilizing modern JavaScript libraries such as jQuery and integrating Google Analytics and reCAPTCHA for analytics and security. Hosting is via Cloudflare, providing robust SSL/TLS encryption. The site is moderately performant and mobile-optimized, though some technical debt is evident due to the older CMS version. From a security perspective, the site benefits from HTTPS and spam protection via reCAPTCHA, but lacks several recommended security headers and explicit privacy or security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is comprehensive and professional, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and a solid technical foundation. Strategic improvements in privacy compliance and security headers would enhance trust and security posture further.

J

JE Consulting

je-consulting.co.uk

63

JE Consulting is a UK-based marketing consultancy specializing in professional sectors such as accounting, legal, and healthcare. The company offers integrated services including social media management, web design, direct marketing, graphic design, and PR. Positioned as a niche expert, JE Consulting targets professional firms seeking to enhance their market presence with innovative and unified marketing strategies. The website reflects a mature digital presence with comprehensive content, client testimonials, and clear business information, supporting its credibility and market position. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, Google Tag Manager, and reCAPTCHA v3 for form security. The site is mobile-optimized, SEO-friendly, and employs GDPR-compliant cookie consent mechanisms. Performance is moderate with good accessibility and navigation, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and use of reCAPTCHA to prevent spam. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent management. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The WHOIS data is unavailable due to a query error related to the www subdomain, but this does not detract from the legitimacy of the business as evidenced by consistent company information and professional presentation. Strategic recommendations include enhancing security headers and conducting regular security audits to maintain a robust security posture.

A

Ashton Cleaning Services

ashtoncleaning.co.uk

38

Ashton Cleaning Services is a small, established cleaning company based in Exeter, UK, offering a wide range of domestic, commercial, and specialist cleaning services. With over 20 years of industry experience, the company positions itself as a reliable and professional service provider with a strong local presence and a portfolio of high-profile clients. Their service offerings include house cleaning, school cleaning, trauma cleaning, floor restoration, and COVID-19 cleansing among others. The website is built on WordPress using Elementor, hosted via Cloudflare, and employs modern technologies such as Google reCAPTCHA v3 for form security. While the site is well-designed and provides clear contact information and trust signals such as certifications and testimonials, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS and DNSSEC enabled, but could be improved by adding security headers and formal security policies. Overall, the website is professional and trustworthy for its business domain but would benefit from enhanced privacy and security disclosures.

Woodstock Trade is a UK-based small business specializing in plumbing, heating, and bathroom services. The company targets homeowners, trade professionals, and businesses requiring these services. The website is professionally designed using the Squarespace platform, featuring clear navigation and mobile optimization. However, the absence of privacy and cookie policies indicates potential compliance gaps with GDPR and other privacy regulations. Security posture is generally good with HTTPS and HSTS enabled, but additional security headers and policies are recommended. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which raises some concerns about domain registration legitimacy. Overall, the website presents a trustworthy and professional front but would benefit from enhanced privacy compliance and security best practices.

A

Autopak

autopakmachinery.co.uk

62

Autopak Machinery is a UK-based company specializing in the design and manufacture of bespoke bag filling and handling equipment, with over 20 years of industry experience. Their website presents a professional and comprehensive overview of their product range and services, targeting manufacturing companies requiring customized industrial machinery solutions. The company emphasizes technical expertise, customer support, and tailored solutions to meet unique customer requirements. The digital infrastructure is built on WordPress with WooCommerce, enhanced by SEO and analytics tools, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal security policies. The absence of WHOIS data due to domain registration issues slightly impacts trustworthiness, though the website content and business presentation remain credible and professional. Overall, the site is well-structured, mobile-optimized, and provides clear contact channels, supporting a positive user experience.

H

H.D. WHITE LTD SCRAP METAL MERCHANTS - YAPTON BN18

hdwhite.co.uk

48

HD White Ltd operates as a regional scrap metal merchant specializing in scrap cars, yards, and metal recycling services primarily serving the Bognor Regis, Worthing, and Chichester areas in the United Kingdom. The company targets local businesses and individuals requiring metal recycling solutions. The website is professionally designed using WordPress with the Divi theme and includes SEO optimizations and structured data to enhance search visibility. The technical infrastructure includes modern web technologies and integrations such as Google Analytics and reCAPTCHA, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and form protection, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data due to domain registration errors raises concerns about domain legitimacy, though the website content itself appears trustworthy and relevant. Overall, the risk is moderate with recommendations to improve compliance and security transparency.

G

Garnetts Gardens

garnettsgardens.co.uk

49

Garnetts Gardens is a well-established, family-run retail plant nursery located in Hacheston, United Kingdom. Founded in 1994, the business has expanded from a small shed to a comprehensive garden centre offering a farm shop, café, gift area, and caravan site. The website reflects a local community focus with services tailored to gardening enthusiasts and local customers. The business model centers on retail and hospitality services with a strong emphasis on homegrown plants and knowledgeable customer support. Technically, the website is built using the Site.pro website builder platform, incorporating standard JavaScript libraries and Google Fonts. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. The website is accessible without any WAF or security challenges, indicating good availability. From a security perspective, the site uses HTTPS but lacks important security headers and policies such as privacy, cookie, and terms of service documents. There is no evidence of advanced security frameworks or incident response mechanisms. The site collects minimal user data via a simple Google Maps directions form but does not implement consent mechanisms or privacy compliance features. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment suggests a legitimate small business website with moderate technical maturity and some compliance gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and enhancing data protection practices to improve trust and compliance.

H

Hearns Specialised Joinery Ltd

hearnsjoinery.co.uk

58

Hearns Specialised Joinery Ltd is a small, established bespoke joinery business based in Dorking, Surrey, with a history dating back to 1982. The company specializes in custom doors, staircases, windows, and bespoke furniture, targeting homeowners and property owners in Surrey and South West London. Their website reflects a professional and consistent brand image, emphasizing craftsmanship and quality materials. Technically, the website uses modern JavaScript libraries, cookie consent management, and Google Analytics, with good SEO and mobile optimization. Security posture is adequate with HTTPS and consent mechanisms, but lacks explicit security headers and a published security policy. The WHOIS data is unavailable due to domain naming rule violations, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is functional, trustworthy in content, but domain registration issues reduce full trust.

C

City Company Seals

citycoseals.co.uk

50

City Company Seals Ltd is a small UK-based business specializing in manufacturing and retailing a wide range of company seals, brass and wax seals, sealing wax, paper embossers, rubber stamps, and related office stationery. Established in 1973, the company has built a strong reputation with a significant portion of its retail business driven by word-of-mouth and positive customer reviews, including 5-star ratings on Amazon. The website reflects a professional and consistent brand image targeting businesses and individuals requiring official seals and embossers. Technically, the website is built using the RapidWeaver CMS with the Foundation framework and incorporates modern web technologies such as jQuery and Google Tag Manager for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS but lacks important security headers that could enhance protection against common web vulnerabilities. There is no cookie consent mechanism, which may impact privacy compliance. The WHOIS data for the domain is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain registration legitimacy despite the website being active and professional. Overall, the website presents a trustworthy and professional business front with room for improvement in security practices and privacy compliance. The domain registration anomaly should be investigated further to ensure full legitimacy and trustworthiness.

W

Walden Steels Ltd

waldensteels.co.uk

57

Walden Steels Ltd is a small manufacturing business specializing in bespoke steelwork based in Newport, Gwent, United Kingdom. The company targets local businesses and contractors across South Wales, offering high-quality engineering and steel fabrication services. The website reflects a professional presence with clear contact information and a focus on service offerings. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. SEO and structured data are well implemented, enhancing discoverability and brand presentation. Security posture is adequate with HTTPS enabled and basic anti-bot measures, though additional security headers and policies could improve resilience. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website is trustworthy and functional, supporting the company's business objectives effectively.