Energy security reports

T

Total Pump Solutions Ltd.

totalpumpsolutions.co.uk

43

Total Pump Solutions Ltd. is a UK-based independent distributor specializing in pumps and related equipment for HVAC, process, and industrial markets. Established in 2004, the company leverages extensive industry experience and strong manufacturer partnerships to provide competitive pricing, technical expertise, and comprehensive stock availability. Their website reflects a professional business with clear service offerings and a focus on technical knowledge and customer support. Technically, the website uses a modern Bootstrap framework with common JavaScript libraries but lacks advanced analytics or tracking. Security posture is moderate with no visible HTTPS enforcement or security headers, and privacy compliance is limited by the absence of cookie consent mechanisms. Overall, the business appears credible and trustworthy with a solid market position in its niche.

R.J. Blasting (Scotland) Ltd is a specialized drilling and blasting service provider operating primarily in the UK extractives industry, including quarrying, forestry, and opencast coal sectors. The company emphasizes its experienced team of explosive supervisors, shotfirers, drillers, and operators, highlighting a portfolio that includes projects like the Drakelands Tungsten Mine. Their business model focuses on providing comprehensive drilling and blasting solutions, explosives supply, surveying, profiling, and environmental monitoring services to industrial clients. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as JavaScript modules, Typekit fonts, and Google Analytics for tracking. The site is mobile-optimized with a professional design and clear navigation, though some SEO and accessibility features could be enhanced. The hosting and SSL configuration are robust, ensuring secure HTTPS connections. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks advanced security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which introduces some uncertainty about domain registration legitimacy, though the website content and contact information appear legitimate. Overall, the website presents a professional and trustworthy business front with room for improvement in security policies and compliance documentation. The domain registration anomaly warrants further investigation to ensure full legitimacy and trustworthiness.

T

Transmontaigne Partners LLC

transmontaignepartners.com

61

Transmontaigne Partners LLC operates as a leader in essential liquid logistics infrastructure, providing storage, terminaling, transportation, and related services for bulk liquid energy products including renewable fuels and petroleum products since 1995. The company targets businesses involved in energy distribution and marketing, positioning itself as a key player in the energy and transportation sectors. The website is built on WordPress using Elementor, with integration of modern technologies such as Vimeo video embedding and Google Tag Manager for analytics. The site demonstrates good SEO and mobile optimization but lacks visible privacy and cookie policies, which impacts privacy compliance. Security posture is generally good with HTTPS enabled, but absence of security headers and WHOIS registration data reduces trustworthiness. Overall, the site is professional and content-rich, supporting the company's market position, but improvements in compliance and transparency are recommended.

S

Six Star Group

sixstargroup.com

48

Six Star Group is a small UK-based company specializing in home insulation, damp proofing, rendering, and ventilation services primarily in Birmingham and the West Midlands. The company is government-endorsed and registered with the Trustmark scheme, positioning itself as a trusted regional specialist in energy efficiency home improvements. Their website is professionally designed, content-rich, and targets homeowners and landlords seeking to improve home comfort and reduce energy costs. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution. It employs HTTPS and includes tracking technologies like Google Analytics and Facebook Pixel. The site is mobile-optimized and SEO-friendly but lacks some advanced security headers and cookie consent mechanisms. From a security perspective, the site has a good SSL configuration but lacks visible security headers and formal privacy or incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the business information and Trustmark certification provide some trust signals. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the website presents a credible business front with room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, cookie consent, and transparency around domain registration would strengthen trust and compliance.

C

CS Electrical - Electrician Newquay

electriciannewquay.co.uk

42

CS Electrical is a small, locally focused electrical and solar PV installation company based in Cornwall, UK. The company offers a range of services including electrical installations, renewables, solar panel installation, and maintenance. They hold multiple industry certifications such as NICEIC, Part P, MCS, and RECC, which position them as a credible and trustworthy service provider in their market niche. The website is professionally designed using WordPress and Elementor, featuring good SEO practices and structured data to enhance search visibility. Contact options include a phone number and a contact page, with social media presence on Facebook. However, the site lacks explicit privacy and cookie policies, which is a compliance gap.

SFA (Oxford) is a specialized consulting firm providing bespoke market intelligence and research services focused on critical metals, battery materials, green hydrogen, and fuel cells. The company positions itself as a leading value chain consultancy with a strong track record and a global client base including miners, processors, fabricators, end-users, investors, and recyclers. Their offerings include detailed market reports, consulting solutions, and industry events, supported by a professional and content-rich website. Technically, the website employs modern web technologies including Bootstrap, JavaScript libraries, and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and dedicated security or incident response policies, which are areas for improvement. The absence of WHOIS domain registration data raises some concerns about domain legitimacy and registration transparency, although the website content and business information appear professional and trustworthy. Overall, the website demonstrates a mature digital presence with strong content and marketing practices but could enhance its security posture and transparency regarding domain registration to improve trust and compliance.

Peak Electromagnetics Ltd is a specialized service provider operating since 2004, focusing on electromagnetic effects including EMC, lightning, EMP, and non-ionising radiation exposure. Their primary market sectors include Commercial, Defence, Aerospace, and Oil industries. The company positions itself as a niche expert offering consulting and testing services tailored to these critical sectors. The website content reflects a professional and consistent brand image, targeting industry professionals and organizations requiring electromagnetic expertise. Technically, the website is built on the HubSpot CMS platform, leveraging common web technologies such as jQuery, Bootstrap, and FontAwesome. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The presence of HubSpot marketing and analytics tools indicates a moderate level of digital maturity, though no advanced frameworks or custom backend technologies are evident. From a security perspective, the site lacks visible security headers and explicit SSL configuration details, which suggests room for improvement in hardening the web presence. No sensitive data exposure or vulnerable libraries were detected, but the absence of privacy and cookie policies, as well as incident response information, indicates gaps in compliance and security transparency. The WHOIS data is unavailable due to a domain registration error, which negatively impacts trust and legitimacy assessments. Overall, the website is functional and professional but requires enhancements in privacy compliance, security posture, and transparency to improve trustworthiness and regulatory adherence. Strategic improvements in these areas will strengthen the company's digital presence and stakeholder confidence.

Sciencesoft is a UK-based company specializing in advanced 3D reservoir simulation software tailored for the oil exploration and energy sector. Established in 2000, the company offers a suite of products including the Reservoir Simulation Suite and S3analyse, designed to enhance reservoir engineering productivity and decision-making. Their market position is that of a niche software provider with a focus on chemical enhanced oil recovery and reservoir simulation post-processing. The website demonstrates moderate digital maturity, employing modern web technologies such as React and service workers, hosted via GoDaddy's platform and WSImg CDN. However, the site lacks comprehensive privacy and cookie policies, which indicates compliance gaps with GDPR and related regulations. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and enabling DNSSEC. Contact information is limited to a UK phone number and a Twitter social media link, with no company emails or physical addresses disclosed. Overall, the website is professional and trustworthy but would benefit from enhanced privacy, security, and compliance features.

Farrendale Ltd is a UK-based electrical contracting company established in 2001, specializing in domestic electrical services including responsive call outs and planned rewires. The company operates primarily in the Midlands with capacity to serve clients UK-wide. It holds recognized accreditations such as NICEIC approval and Construction Line Gold membership, reinforcing its market credibility. The website is built on WordPress using Elementor, featuring a professional design with clear navigation and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies are absent. Overall, the site reflects a mature business with a solid digital presence and compliance with GDPR requirements.

A

Alecto Recruitment

alectorecruitment.com

55

Alecto Recruitment is a UK-based recruitment agency specializing in technical engineering sectors, founded in 2009. The company serves both large UK Blue-Chip clients and SMEs, offering recruitment and managed services. Their website reflects a professional and consistent brand with a focus on client and candidate service excellence. Technically, the site is built on WordPress with modern plugins and scripts, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and security headers are not evident. No explicit security or incident response policies are published. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

T

TRAVEX ENERGY GMBH

travex-energy.de

54

The website travex-energy.de appears to represent a small business operating in the energy sector in Germany. The domain and content suggest a focus on energy-related services, but the website content is minimal and lacks explicit business descriptions, contact information, or legal policies. The technical infrastructure is based on WordPress CMS with standard Google Fonts integration, but lacks advanced frameworks or performance optimizations. Security posture is weak, with no detected security headers, privacy policies, or incident response information. No WAF or blocking mechanisms are present, indicating accessible content but limited security maturity. Overall, the site presents a low level of digital maturity and trustworthiness, with significant room for improvement in content quality, security, and compliance.

Eco Sustainable Solutions Ltd is a well-established company founded in 1995, specializing in sustainable waste management and renewable energy solutions across Southern England. The company focuses on transforming waste into valuable resources through various recycling services and green energy production, positioning itself as a regional leader in the energy sector. Their website reflects a professional and environmentally conscious brand with clear messaging and strong trust indicators such as environmental impact statistics and project involvement with notable initiatives like The Eden Project and a solar farm. Technically, the website is built on WordPress using Elementor and Gravity Forms, integrating modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and CAPTCHA on forms, but lacks some security headers and formal privacy/cookie policies. The absence of WHOIS data due to a domain naming rules error reduces domain registration trustworthiness, though the website content and business information strongly indicate legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a mature digital presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and verifying domain registration details to enhance trust and compliance.

P

PECO

peco.com

63

PECO is a major energy utility company serving the Philadelphia region, providing electric and gas services to residential and commercial customers. It operates as a subsidiary of Exelon Corporation, a leading energy provider in the United States. The website reflects a professional and consistent brand presence, targeting energy consumers with clear service offerings and customer support resources. The digital infrastructure leverages modern web technologies including Angular and Microsoft Application Insights for telemetry and monitoring, indicating a mature technical environment. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy and cookie policies are present and indicate compliance with GDPR, supporting user trust and regulatory adherence. Overall, the website and business appear legitimate and well-managed, though the absence of WHOIS data limits domain registration transparency.

Shipley Weston is a UK-based electrical services company catering to both government and private sector clients. Their website highlights a broad experience in delivering electrical contracting projects across various service categories, positioning them as a specialized provider in the energy sector. The company targets industrial and governmental clients, offering a holistic approach to electrical contracting. The website is built on the Squarespace platform, leveraging modern web technologies including jQuery and Google Analytics for user tracking. The site is mobile optimized and presents a professional design with clear navigation. However, the absence of a privacy policy, terms of service, and explicit contact information limits the site's compliance and trustworthiness. Security posture is moderate with HTTPS enforced but lacks security headers and published security policies. The WHOIS data indicates a domain registration issue due to invalid domain naming, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but requires improvements in compliance documentation and domain registration clarity.

A

Alpha Electrical Eastern Ltd

alphaelectricalnorwich.co.uk

57

Alpha Electrical Eastern Ltd is a well-established electrical services provider based in Norwich, UK, serving both domestic and commercial clients throughout East Anglia. Founded in 1967, the company offers a comprehensive range of electrical services including emergency call outs, full property rewires, PAT testing, and landlord safety certificates. The business positions itself as a reliable and affordable option with strong local presence and certifications such as NICEIC and CHAS membership, enhancing its credibility in the market. The website infrastructure is built on the MultiScreenSite platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and embedded video content from YouTube and Vimeo. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. Analytics and marketing tools are integrated for user tracking and engagement, though privacy compliance is primarily managed through linked third-party privacy and cookie policies. From a security perspective, the site enforces HTTPS and employs CAPTCHA mechanisms on its contact form to mitigate spam. However, explicit security headers are not evident, and there is no published security or incident response policy, which could be improved to enhance trust and compliance. The WHOIS data for the domain is unavailable and flagged as invalid by the UK registry, which raises concerns about domain registration legitimacy, though the website content and business information appear professional and consistent. Overall, Alpha Electrical Eastern Ltd presents a trustworthy and professional online presence for its electrical services business, with room for improvement in security transparency and domain registration clarity. Strategic recommendations include implementing comprehensive security headers, publishing incident response information, and resolving domain registration inconsistencies to strengthen trust and co…

A

A. L. Cox & Sons Ltd

cox4grain.com

57

A. L. Cox & Sons Ltd is a family-owned corn merchant business operating since 1958, specializing in the trading of combinable crops such as cereals, pulses, and oilseeds. The company operates its own transport fleet with two operating centers and holds a National Operators Licence, positioning itself as a trusted supplier and logistics provider in the agricultural sector. Their services include commodity trading, haulage, and storage programs, targeting agricultural suppliers and buyers. The website reflects a small-sized, established business with consistent branding and good content quality. Technically, the website is built on WordPress 5.3.21 with common libraries such as jQuery and Bootstrap. It employs Cookiebot for cookie consent management, indicating attention to privacy compliance. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and security headers. No hosting provider information was identified, and the domain WHOIS data is missing, which raises some concerns about domain registration transparency. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy policies and cookie policies are present and appear GDPR compliant. However, the absence of contact information and WHOIS data reduces overall trustworthiness. Overall, the website is professional and safe, serving a niche agricultural market. The main risks relate to domain registration opacity and limited security best practices. Strategic improvements in security headers, contact transparency, and WHOIS data clarity are recommended to enhance trust and compliance.

B Safe Electrical Services Ltd is a small, family-owned electrical services company based in Peterborough, UK, with over 40 years of experience. They specialize in domestic and commercial electrical work, including solar panel and EV charging installations. The company positions itself as a trusted local expert with government certifications and a strong community presence. Technically, the website is built on Squarespace, leveraging modern web technologies and Google services, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and HSTS enabled, but lacks some advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the website content and business information appear legitimate and professional. Overall, the site scores well on business credibility and technical implementation but should improve privacy compliance and WHOIS transparency.

M

Mulberry Waste

mulberrywaste.co.uk

42

Mulberry Waste is a UK-based company specializing in hazardous and non-hazardous waste management services, including collection, treatment, recycling, and disposal. The company positions itself as a market leader with a strong commitment to sustainability and advanced technological capabilities. Their website is professionally designed using WordPress and associated plugins, providing clear service descriptions and contact information. Technically, the site is well-implemented with HTTPS and modern web technologies, though some security headers and policies are missing. The WHOIS data is incomplete and indicates domain registration issues, which raises some trust concerns despite the professional web presence. Overall, the website presents a credible business with room for improvement in privacy compliance and security transparency.

R

Red Bull

redbull.com

58

Red Bull is a globally recognized energy drink brand with a strong digital presence focused on sports, entertainment, and lifestyle content. The website serves as a hub for brand-related news, athlete stories, events, and livestreams, targeting a broad audience interested in energy drinks and associated culture. The site demonstrates a mature technical infrastructure using modern web technologies such as StencilJS and Google Tag Manager, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance indicators are limited in the provided content, suggesting room for enhancement in transparency and user consent mechanisms. Overall, the website reflects a professional and trustworthy brand with high-quality content and consistent branding.

The Utility Workers Union of America (UWUA), AFL-CIO, is a well-established labor union representing approximately 45,000 members in the American utility sectors. The website serves as a comprehensive platform for union news, member resources, legislative advocacy, and educational content. The union has a strong market position with a long history dating back to 1946, supported by a domain registered since 2000, reflecting organizational maturity and legitimacy. The site targets utility workers and union members, providing them with tools, updates, and community engagement opportunities. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses popular plugins like Yoast SEO for optimization. It integrates social media feeds and uses Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with a strong SSL configuration and domain registration protections. However, it lacks DNSSEC and security headers, which are recommended to enhance security posture. Privacy compliance is limited due to the absence of explicit privacy and cookie policies and consent mechanisms. No incident response or vulnerability disclosure information is present, which could be improved to bolster trust and compliance. Overall, the UWUA website is a credible and professional platform for its union members and stakeholders. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory adherence.

Balch & Bingham LLP is a well-established law firm with over 100 years of service, specializing in highly regulated industries such as Energy, Environmental, Corporate & Commercial, and Litigation. The firm positions itself as a trusted advisor with a strong national presence and recognized expertise, supported by multiple industry awards and rankings. Their website reflects a professional and polished digital presence, incorporating modern technologies and compliance mechanisms such as GDPR-aligned cookie consent. Technically, the site employs reputable third-party services for analytics, consent management, and user feedback, ensuring a robust infrastructure. Security-wise, the site enforces HTTPS and includes user privacy controls, though it lacks a publicly visible security policy or incident response contacts, which could be improved. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall brand consistency and external trust signals mitigate this concern. Strategic recommendations include enhancing transparency around security policies and incident response, and verifying domain registration details to strengthen trust.

A

Ampcontrol

ampcontrolgroup.com

45

Ampcontrol is a well-established Australian company specializing in electrical, electronic, and control solutions primarily for the energy, infrastructure, and resources sectors. The company positions itself as an innovator driving decarbonisation and net zero initiatives through advanced manufacturing and custom solutions. Their market presence is supported by a domain age of over 15 years and a consistent brand image across digital channels. The website offers comprehensive information on their solutions, services, and sustainability efforts, targeting industry professionals and corporate clients. Technically, the site uses modern analytics and tracking technologies including Google Analytics, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag, hosted on Telstra infrastructure with a CMS identified as ZimpleDigital. The site is mobile-optimized with good SEO practices and a professional design.

R

Rotamac Energy Solutions Limited

rotamac.co.uk

62

Rotamac Energy Solutions Limited is a specialist EP/EPC contractor based in the United Kingdom, focusing on delivering complete power plant solutions in the 1-50MW electrical range. Established in 1997, the company has evolved from used equipment services to providing used and surplus power plant solutions, particularly in biomass and waste-to-energy sectors. Their business model leverages used/surplus equipment to offer significant capital expenditure savings compared to new plant EPC projects. The website presents a professional and comprehensive overview of their services, including valuations, dismantling, consultancy, freight, and EPC services, targeting industrial clients and power plant operators. Technically, the website is built on a modern tech stack with HTML5, CSS3, JavaScript, and utilizes the Machinio ecommerce platform. It features responsive design and basic accessibility features, with good SEO optimization. The site includes structured data (JSON-LD) for enhanced search engine understanding and provides clear contact information and privacy compliance mechanisms. From a security perspective, the site uses HTTPS and has cookie consent mechanisms and a privacy policy indicating GDPR compliance. However, it lacks explicit security headers and does not provide dedicated security or incident response policies. The WHOIS lookup for the domain failed due to domain naming rules, suggesting the domain may be a subdomain or alias, which slightly reduces trustworthiness. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional and trustworthy with good content quality and privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration clarity would enhance the security posture and trustworthiness further.

P

Petrolab Limited

petrolab.co.uk

41

Petrolab Limited is a specialized UK-based laboratory offering mineralogical and petrographic analysis services primarily to the mining, construction, and real estate sectors. Their expertise includes automated mineralogy, optical microscopy, sample preparation, and screening tests such as Mundic and IS465. The company has a niche market position with a strong regional presence and a history dating back to 1991. The website is built on WordPress with WooCommerce and the Divi theme, reflecting a moderate level of digital maturity with good content quality and user experience. Security posture is adequate with HTTPS enforced and use of security plugins, but lacks some advanced security headers and formal security policies. Privacy compliance is basic, with no visible cookie consent or GDPR-specific disclosures. Overall, the website is professional and trustworthy, though the absence of WHOIS data due to domain registration issues introduces some uncertainty about domain legitimacy.

I

Ideal Power Ltd.

idealpower.co.uk

57

Ideal Power Ltd. is a UK-based B2B supplier specializing in power supply products designed for reliability, compliance, and energy efficiency across various industrial and commercial applications. The company positions itself as a trusted partner for design engineers and manufacturers, offering flexible supply options, expert guidance, and bespoke power supply solutions. Their website demonstrates a professional digital presence with clear contact information, structured data, and integration of modern analytics and marketing tools. However, the absence of explicit privacy and cookie policies and the failure to retrieve WHOIS domain registration data introduce some concerns regarding compliance and domain legitimacy. Technically, the site is built on WordPress with common plugins and scripts, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but could be improved by adding explicit security headers and incident response information. Overall, the website is trustworthy and business-focused, serving a specialized energy sector audience.

O

Ocean Scientific International Ltd (OSIL)

osil.com

64

Ocean Scientific International Ltd (OSIL) is a well-established UK-based company specializing in the design and manufacture of integrated environmental monitoring systems, particularly for marine environments. Their expertise spans instrumented oceanographic data buoy platforms, water column and seabed sampling, marine robotics, and calibration services. The company holds reputable certifications such as ISO 9001 and Cyber Essentials, reinforcing their commitment to quality and security. Their website reflects a mature business with a strong market position serving marine, offshore engineering, and environmental sectors globally. Technically, the website is built on WordPress with modern SEO and performance optimizations including Yoast SEO Premium and WP Rocket. It uses Cloudflare DNS and integrates Google Analytics via Google Tag Manager, with a compliant cookie consent mechanism. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and explicit security headers are not detected, which could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a clear privacy policy and cookie consent. Contact information is comprehensive, but no explicit security or incident response policies are published. Overall, OSIL's digital presence is robust, professional, and trustworthy, with minor recommendations to enhance DNS security and security headers. The risk profile is low, and the company demonstrates good security hygiene and compliance practices.

E

Europa Oil & Gas (Holdings) plc

europaoil.com

59

Europa Oil & Gas (Holdings) plc is an AIM-listed exploration and production company specializing in oil and gas assets across West Africa, Atlantic Ireland, and the UK. The company maintains a balanced portfolio including production, appraisal, and exploration assets, supported by onshore UK oil production revenue. The website presents a professional corporate image with investor-focused content, including presentations, reports, and news updates. Technical infrastructure is based on WordPress CMS with common industry plugins such as Yoast SEO and WP Rocket for performance optimization. The site is mobile responsive and moderately optimized for SEO and accessibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are absent. WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and social media presence support a credible business identity.

C

Curtis Insulation

curtisinsulationltd.co.uk

50

Curtis Insulation Ltd is a small, family-run UK-based business specializing in insulation services including thermal, acoustic, sheet metal fabrication, estimating, inspection, and asbestos removal. Founded in 1991, the company has a strong regional presence and a reputation for personalized service. Their website reflects a professional business with clear contact information and service descriptions, targeting organizations requiring insulation solutions across the UK. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which may expose the company to GDPR risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security measures.

N

NorcoGroup

norcoenergy.com

49

NorcoGroup presents itself as a provider of stored energy solutions specializing in critical power systems such as UPS, batteries, generators, and renewable energy solutions with over 30 years of experience. However, the website content is minimal, primarily showing a loading screen with no accessible navigation, contact information, or detailed business content. The lack of WHOIS registration data for the domain www.norcoenergy.com raises significant concerns about the legitimacy and operational status of the website. Technically, the site uses modern JavaScript modules but lacks visible security headers, privacy policies, or cookie consent mechanisms, indicating a low maturity level in digital infrastructure and compliance. The security posture is weak due to missing HTTPS confirmation and absence of security best practices. Overall, the site appears incomplete or improperly deployed, limiting trust and usability.

P

PBS Utility Services Ltd

pbsutilities.co.uk

61

PBS Utility Services Ltd is a specialized service provider in the energy sector, focusing on power line and communication surveys, detailed designs, and construction support services. The company targets district network operators and tier 1 partners, positioning itself as a trusted and accredited utility services provider. Their website reflects a professional and consistent brand image with clear service offerings and multiple industry certifications, including ISO 9001 and Cyber Essentials. Technically, the website is built on the Webflow platform, leveraging modern web technologies and Google services for analytics and security. The site is mobile-optimized and performs well with good SEO practices. Security posture is generally strong with HTTPS and reCAPTCHA usage, but lacks some security headers and explicit incident response information. The WHOIS data is missing due to a domain registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the website presents a credible business front but should address domain registration issues and enhance privacy compliance.

B

Byworth Boilers Limited

byworth.co.uk

72

Byworth Boilers Limited is a UK-based industrial boiler manufacturer specializing in steam and hot water boilers, with over 50 years of industry experience. The company offers a full lifecycle of services including design, manufacturing, installation, servicing, training, and boiler hire. Positioned as a trusted and established player in the energy and manufacturing sectors, Byworth targets industrial clients requiring reliable boiler solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site is built on the nopCommerce platform hosted on Microsoft Azure, utilizing modern web technologies and tracking tools such as Google Analytics, Microsoft Application Insights, and Leadfeeder. The site is mobile-optimized and implements a comprehensive cookie consent mechanism, demonstrating good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and a formal security policy is absent. Overall, the website is trustworthy, well-maintained, and aligned with the company's business claims and domain registration data.

Dovebrace Air Conditioning Ltd is a UK-based family-owned business specializing in the design, installation, and management of air conditioning and related mechanical services. Established in 1985, the company positions itself as an experienced provider offering environmentally sound and efficient solutions to a broad range of clients across the UK. Their website showcases a professional design built on WordPress with the Divi theme, featuring detailed service descriptions and case studies with notable clients such as BBC Scotland and Everton Football Club. The technical infrastructure includes modern SEO tools and Google Analytics for performance monitoring. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. The domain WHOIS data is unavailable due to an invalid domain registration error, which raises some concerns about domain legitimacy but does not directly impact the business credibility as presented on the website. Overall, the company demonstrates a solid market presence with room for improvement in security and compliance documentation.

Allt-Energy Limited is a small Scottish company specializing in run-of-river hydroelectric generation schemes. Their services encompass design, planning, construction, operation, maintenance, and refurbishment of hydropower projects, targeting owners and developers primarily within Scotland. The website reflects a niche market position with affiliations to recognized industry associations, enhancing credibility. Technically, the website uses basic technologies such as jQuery 1.9.1 and lacks modern frameworks or CMS, indicating a modest digital maturity level. Performance and mobile optimization are basic, with no advanced SEO or accessibility features detected. Security posture is weak due to the use of outdated libraries, absence of security headers, and missing HTTPS confirmation in the provided data. Privacy and cookie policies are absent, representing compliance gaps. Contact information is limited to phone and postal address, with no email or contact forms present. Overall, the site is functional but requires improvements in security, compliance, and technical modernization to better support business growth and trust.

H

Hilson Moran

hilsonmoran.com

58

Hilson Moran is an interdisciplinary consultancy specializing in engineering, sustainability, and advisory services for the built environment. The company operates internationally and is part of the Tyréns Group, with a strong focus on progressive design thinking and environmental impact. Their website reflects a professional and modern digital presence, showcasing a broad range of expertise and recent projects. Technically, the site is built on WordPress with modern libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and no exposed sensitive data, though security headers could be improved. The absence of WHOIS data is a notable gap that slightly impacts trustworthiness. Overall, the website and business appear legitimate and well-positioned in their sector.

D

DNV

dnvgl.com

76

DNV is a globally recognized independent assurance and risk management company headquartered in Norway. The company focuses on safeguarding life, property, and the environment by enabling organizations to improve safety and sustainability. Their market position is strong, supported by a professional and comprehensive digital presence that highlights their certifications and global reach. The website targets businesses and organizations seeking certification, risk management, and sustainability advisory services. Technically, the website employs modern technologies such as VideoJS, Brightcove, Google Tag Manager, and Microsoft Application Insights, indicating a mature digital infrastructure. The site is well optimized for mobile and accessibility, with good SEO practices and consent management for privacy compliance. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the website is professional, trustworthy, and aligned with enterprise standards, though the lack of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include publishing a vulnerability disclosure policy, incident response contacts, and continuous auditing of third-party scripts to enhance security and trust.

D

Drillmac International

drillmac.co.uk

55

Drillmac International operates as a specialized supplier of drilling and compressor parts, targeting industrial and commercial customers in the energy sector. The website presents a basic but relevant business description, emphasizing worldwide supply capabilities. The company appears to be a small-sized entity with a focused business model on equipment parts distribution. Technically, the website is built on the Wix platform, leveraging standard Wix scripts and polyfills, with moderate performance and good mobile optimization. However, the site lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal policies. The absence of WHOIS data due to domain registration errors raises concerns about domain legitimacy, although the website content itself appears professional and business-oriented. Overall, the site demonstrates a basic digital presence with room for improvement in security, compliance, and business transparency.

L

LTH Electronics

lth.co.uk

59

LTH Electronics is an established UK-based company specializing in intelligent liquid measurement systems and industrial sensors. With a domain age dating back to 1996, the company presents itself as a reliable provider of precise measurement solutions for demanding industrial applications, particularly in the energy and manufacturing sectors. Their website reflects a professional B2B business model focused on supplying measurement instruments and expert support services including planning and calibration. Technically, the website is built on WordPress CMS, enhanced with SEO tools like Yoast and ElasticPress, and integrates multiple marketing and tracking technologies such as Google Tag Manager, LiveChat, Canddi, and Leadinfo. The site is served over HTTPS with Cloudflare Bot Management cookies detected, indicating a secure hosting environment. The cookie consent mechanism is comprehensive, offering users detailed control over cookie categories, which aligns with GDPR requirements. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional, secure, and trustworthy with good technical implementation and business credibility. Strategic improvements include publishing detailed privacy and security policies, adding security headers, and enhancing accessibility features to further strengthen compliance and user trust.

S

Superwarm

superwarm.co.uk

56

Superwarm is a small, specialized energy sector company based in Edinburgh, UK, providing gas central heating installation, servicing, and repair services. The company positions itself as a leading local expert with accredited certifications such as Gas Safe Register and manufacturer accreditations from Vaillant and Worcester Bosch. Their business model focuses on direct customer engagement with no upfront deposits and fixed price quotes, supported by strong customer testimonials. Technically, the website is built on WordPress using the Divi theme, with integrations of modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile optimized and SEO friendly, though accessibility is basic. Security posture is good with HTTPS enforced but lacks some security headers and cookie consent mechanisms. The WHOIS data is unavailable due to a Nominet error, which raises some concerns about domain registration legitimacy, but the website content and branding strongly support business credibility. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and security best practices.

A

Ausenco

ausenco.com

49

Ausenco is a global engineering, consulting, and project delivery firm specializing in the mining, metals, and industrial sectors. With over 30 years of experience and operations in more than 80 countries, Ausenco offers a comprehensive suite of services including consulting studies, project delivery, asset operations, maintenance solutions, and digital innovations such as AI and environmental planning. The company positions itself as a partner to clients, helping navigate complex mining challenges with sustainable and innovative solutions. Technically, the website is built on Craft CMS and leverages modern JavaScript libraries such as jQuery, Flickity for carousels, and Vanilla LazyLoad for performance optimization. It integrates Google Tag Manager and LinkedIn Insight for analytics and marketing. The site is hosted with Amazon Registrar, indicating likely AWS infrastructure. The website demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and there is a lack of explicit security headers and a published security policy or incident response contact. Privacy compliance is partially met with a privacy policy present, but no visible cookie consent mechanism or GDPR-specific disclosures. The business credibility is high with clear company information, professional content, and strong trust signals. Overall, Ausenco's website reflects a mature, professional organization with a solid digital presence and good security fundamentals. To enhance trust and compliance, it is recommended to enable DNSSEC, implement security headers, provide explicit cookie consent, and publish security and incident response policies.

Gridtrove operates as an e-commerce platform specializing in factory-direct solar equipment sales, including solar panels, batteries, inverters, and energy storage solutions. The company targets homeowners seeking transparent pricing, no credit check financing, and crypto payment options. Their market position emphasizes fast, transparent solar system sizing and a 30-day installation timeline. Technically, the website is built on a modern React and Next.js stack, optimized for performance and mobile responsiveness, with good SEO and accessibility features. Security posture is solid with HTTPS and secure forms, though improvements in security headers and cookie consent are recommended. The absence of WHOIS registration data raises legitimacy concerns, warranting further verification. Overall, Gridtrove presents a professional and trustworthy digital presence with room for enhanced security and compliance measures.

C

C.C. JENSEN

cjc.dk

58

C.C. JENSEN is a specialized company providing oil filtration systems and related services to industrial sectors including marine, mining, wind, and power industries. Their website presents a professional image with detailed information about their products, services, and industry applications, positioning them as clean oil experts focused on reducing wear, downtime, and oil consumption. The technical infrastructure leverages modern JavaScript frameworks, cloud hosting, and multiple analytics and marketing tools, indicating a mature digital presence. Security posture is generally good with HTTPS and cookie consent mechanisms, though explicit privacy policies and security disclosures are absent. The lack of WHOIS data introduces some uncertainty about domain legitimacy, but the website content and technology usage support a credible business operation. Overall, the site is well-designed and functional, but improvements in transparency and contact information would enhance trust and compliance.

W

Wakefield Acoustics

wakefieldacoustics.co.uk

66

Wakefield Acoustics is a UK-based company specializing in industrial noise control solutions, including acoustic enclosures, containers, louvres, and consultancy services. Established in 1999, the company serves industrial clients primarily in the energy and manufacturing sectors, offering design, manufacturing, and installation services to ensure compliant and sustainable operations. The website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to its target audience. Technically, the site is built on WordPress with modern optimization tools like NitroPack and uses standard web technologies such as jQuery and Font Awesome. Performance and mobile optimization are good, contributing to a positive user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and security policies suggests room for improvement. Privacy compliance is limited due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the domain registration data supports the legitimacy of the business, and the partnership with CECO Environmental adds trust. Strategic recommendations include enhancing privacy compliance, publishing security policies, and implementing security headers to strengthen the security posture.

B

Bayford Group

bayford.co.uk

47

The Bayford Group is a well-established UK-based diversified business with over 100 years of history, operating primarily in energy, property, hospitality, and investments. Their website reflects a professional and consistent brand presence, showcasing their key services and business sectors clearly. The company targets business clients and investors interested in these sectors, leveraging a diversified business model with a strong heritage in energy and expanding into green technologies and property investments. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common plugins such as Contact Form 7 and WPBakery Page Builder. The site is mobile-optimized and includes Google Analytics and reCAPTCHA for security and analytics. However, some technical improvements could be made, such as adding security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA on its contact form, which are positive indicators. However, the absence of explicit security headers and incident response information suggests room for improvement in security maturity. No vulnerabilities or suspicious content were detected, and the domain's long history supports legitimacy. Overall, the Bayford Group website presents a credible and professional business presence with moderate technical sophistication and a good security baseline. Strategic enhancements in privacy compliance and security policies would further strengthen their digital trust and regulatory adherence.

B

Beijer Ref UK

hrponline.co.uk

60

Beijer Ref UK is a leading wholesale supplier of premium refrigeration and air conditioning equipment in the United Kingdom. The company positions itself as the UK’s foremost wholesaler in this sector, targeting trade professionals and businesses requiring HVAC solutions. Their business model focuses on providing top brands, expert support, and fast delivery services, catering primarily to the trade market. Founded in 2015, the company has established a strong market presence with a large operational scale. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, indicating a contemporary and maintainable digital infrastructure. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Hosting and domain registration details align with a reputable UK-based business, and the site uses HTTPS with a good SSL configuration. From a security perspective, the website enforces HTTPS and uses deferred loading for third-party scripts like OneSignal. However, it lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options, which could improve protection against certain web attacks. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. No explicit security policy or incident response contact information is provided. Overall, the website presents a professional and trustworthy front with a solid business foundation. Strategic improvements in security headers and privacy consent mechanisms would enhance compliance and user trust. The domain registration data supports the legitimacy of the business, with no suspicious patterns detected.

F

Farming Monthly Ltd

farmingmonthly.co.uk

45

Farming Monthly Ltd operates a well-established UK-based digital and print media platform focused on farming and agriculture news, events, and classifieds. The website serves a professional audience including farmers, landowners, and agricultural professionals, offering comprehensive sector news, event information, and advertising opportunities. The company maintains a consistent brand presence with active social media channels and a digital magazine edition. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. It integrates social media SDKs and streaming content from Spotify, enhancing user engagement. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced, secure form handling, and cookie consent mechanisms in place. However, the absence of explicit security headers and incident response policies suggests opportunities to strengthen defenses and compliance. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the site presents a low-risk profile with professional content and business credibility. The WHOIS data is unavailable due to query errors, but the domain and content consistency support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further solidify trust and resilience.

P

Press Leakage Control Services Ltd

pressleakage.com

45

Press Leakage Control Services Ltd (PLCS Ltd) is a UK-based company specializing in pipeline corrosion protection and leakage control solutions, serving the gas, water, and utilities sectors. With over 40 years of experience, the company positions itself as a world leader and pioneer in its industry, offering durable polymer-based coatings, rapid leakage repair systems, and comprehensive technical support including installation and training. The website reflects a professional B2B service provider with clear contact channels and accreditations, targeting utility companies and industrial clients. Technically, the website is built on WordPress using common plugins such as Slider Revolution and Contact Form 7, with integration of Google Analytics and Tag Manager for user tracking. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. Performance is moderate, and the site uses HTTPS with a valid SSL configuration. From a security perspective, the site implements cookie consent mechanisms and does not expose sensitive data. However, no explicit security policy or incident response information is provided, and security headers are minimal. The absence of WHOIS domain registration data is a notable concern, as it reduces trust in domain legitimacy despite the professional appearance of the site. Overall, the website is safe, professional, and compliant with GDPR privacy requirements. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain registration legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure or incident response policy, and verifying domain registration details to improve trust and compliance.

C

CHASE International Ltd

chaseint.co.uk

63

CHASE International Ltd is a well-established global parts supply specialist founded in 1996, focusing on supplementing purchasing and maintenance teams primarily in the energy and transportation sectors. The company positions itself as a trusted partner with a broad portfolio of industrial brands and certifications including ISO and Cyber certifications. The website reflects a professional business model with clear branding and sector focus. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent, indicating a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. Overall, the site is trustworthy and professional but could improve privacy and security transparency.

W

Wärtsilä

wartsila.com

75

Wärtsilä is a globally recognized leader in innovative technologies and lifecycle solutions for the marine and energy markets, with a strong emphasis on decarbonisation and sustainability. The company serves energy providers and maritime operators worldwide, offering flexible engine power plants, energy storage systems, intelligent optimization technologies, and lifecycle services. Their market position is robust, supported by a professional and comprehensive digital presence. Technically, the website leverages modern frameworks such as Next.js and React, integrates advanced analytics and consent management tools, and demonstrates excellent performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts could be improved. Overall, the website reflects a mature, trustworthy enterprise with a clear commitment to privacy compliance and user experience.

N

NES Fircroft

nesgt.com

75

NES Fircroft is a globally recognized leader in technical and engineering recruitment, providing workforce solutions across multiple sectors including Oil & Gas, Power & Renewables, Chemicals, Construction, Life Sciences, Mining, IT, and Manufacturing. With over 90 years of combined experience, the company supports over 25,000 contractors worldwide and operates numerous offices across Europe, North America, Asia, and other regions. Their business model focuses on contract staffing, permanent hire, employer of record services, and technical consultancy, positioning them as a comprehensive recruitment partner for technical industries. Technically, the website employs modern frameworks such as Bootstrap 5 and integrates advanced analytics and marketing tools including Google Analytics, Microsoft Clarity, and CookieYes for consent management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Hosting and CDN services appear to be provided by WeAreVennture and Akamai, ensuring reliable performance. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and manages cookies with user consent mechanisms. While explicit security headers are not fully visible in the HTML, the presence of bot management and consent tools indicates a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence. However, the WHOIS data is incomplete or unavailable, which introduces some uncertainty regarding domain registration legitimacy. This discrepancy should be further investigated to ensure full trustworthiness.

Cavendish Nuclear, a wholly-owned subsidiary of Babcock International Group, operates as a key player in the nuclear energy, defence, and civil decommissioning sectors. The company provides comprehensive nuclear lifecycle solutions including support for existing reactors, new construction, and advanced nuclear technology development. Their market position is strong within the UK and internationally, supported by strategic contracts and partnerships. Technically, the website is built on WordPress with modern plugins and frameworks, demonstrating good digital maturity and mobile optimization. Security posture is solid with HTTPS and consent management in place, though explicit security policies and incident response details are absent. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall business credibility remains high due to strong branding and professional content.