Manufacturing security reports

P

Pyramid Engineering

pyramidengineeringliverpool.co.uk

54

Pyramid Engineering is a small, family-run business based in Liverpool specializing in welding and fabrication services with over 30 years of experience. The company serves a variety of sectors including recycling, offshore, leisure, retail, transport, communications, and energy. Their website presents a professional image with clear descriptions of their services and a portfolio showcasing their work. Contact information is prominently displayed, facilitating customer engagement. Technically, the website is built using standard HTML5, CSS3, and jQuery libraries, with a focus on usability and mobile responsiveness. The site lacks advanced CMS or backend technologies and does not employ analytics or tracking tools, indicating a straightforward digital presence. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses no visible security headers and lacks HTTPS verification details in the provided data. No forms or sensitive data collection points are present, reducing immediate risk exposure. However, the absence of cookie consent mechanisms and security policies indicates room for improvement in privacy compliance and security posture. Overall, the website is functional and professional but shows gaps in domain legitimacy verification due to WHOIS lookup failure and lacks advanced security and privacy features. Strategic improvements in SSL implementation, security headers, and privacy compliance would enhance trust and reduce risk.

Martin Braun-Gruppe operates the Montana Bakery brand, specializing in chilled and frozen premium topped breads with artisan quality. The company targets food industry professionals, retailers, and food service providers with a broad product range including flat breads, ciabatta, focaccia, pizza bases, and seasonal bakery products. The website reflects a mature digital presence with a modern CMS (TYPO3), integrated analytics, and marketing tools, and a clear focus on privacy compliance and user consent. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the site is professional and trustworthy, supporting the brand's market position as a premium bakery product supplier.

E

EHL Ingredients

ehl-ingredients.co.uk

64

EHL Ingredients is a UK-based global supplier specializing in premium food ingredients and blends, including herbs, spices, blends, seeds, beans, and specialty ranges such as organic and gluten-free products. Their website targets manufacturers, foodservice providers, and wholesalers, positioning themselves as a comprehensive B2B supplier with a broad product portfolio. The site is professionally designed using WordPress with the Kadence theme and includes modern features such as GDPR-compliant cookie consent and anti-spam protections. Social media presence on Instagram, Facebook, and LinkedIn supports their market engagement. Security posture is solid with HTTPS enforced and anti-spam measures, though additional security headers could enhance protection. The WHOIS lookup for the 'www' subdomain failed due to naming rules, but the main domain is operational and legitimate. Overall, the website demonstrates good technical maturity, privacy compliance, and business credibility.

A

Aire Valley Architectural Aluminium Ltd

aire-valley.com

49

Aire Valley Architectural Aluminium Ltd is a well-established UK-based specialist commercial glazing contractor, founded in 2000. The company focuses on the design, manufacture, and installation of high-performance glazed façades, serving the commercial construction and architectural sectors. Their market position is supported by a strong portfolio of projects, certifications, and client testimonials, indicating a reputable and trusted business. The website reflects a professional business model with clear service offerings including windows, doors, and curtain walling solutions. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Tag Manager. The site demonstrates good mobile optimization and moderate performance, with a consistent branding approach. Hosting appears to be via GoDaddy, and the domain is long-established, adding to credibility. Privacy and cookie policies are implemented with a consent mechanism, supporting GDPR compliance. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, security headers are not detected, and no explicit security or incident response policies are published. The domain lacks DNSSEC, which is recommended for enhanced DNS security. Overall, the security posture is good but could be improved with additional headers and published policies. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure program to enhance trust and security maturity.

Rocal Insulating Panels Ltd. is a UK-based manufacturing company with over 30 years of experience specializing in composite doors, uPVC door panels, aluminium windows and doors, and bespoke plastic extrusions. Operating from a large manufacturing facility in North Lincolnshire, they serve a nationwide customer base with a diversified product portfolio and multiple specialist divisions. The website reflects a professional and well-established business with clear branding and trust indicators such as certifications and social media presence. Technically, the website is built on WordPress with modern technologies including jQuery, Bootstrap, and Google Analytics, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. The WHOIS data for the domain 'www.rocal.co.uk' is unavailable and indicates the domain is invalid per Nominet rules, suggesting the main domain might be 'rocal.co.uk' without 'www' or another domain is used. This discrepancy lowers domain registration trustworthiness but does not detract from the professional presentation of the website. Overall, the website is secure, compliant, and credible with minor technical and security enhancements recommended.

V

Velcro IP Holdings LLC

velcro.com

68

Velcro IP Holdings LLC operates the official Velcro brand website, providing a wide range of fastening solutions including hook and loop fasteners for both consumer and industrial applications. The company holds a strong market position as a globally recognized brand with a legacy of innovation and quality. Their website reflects a mature digital presence with comprehensive product information and customer engagement channels. Technically, the site is built on WordPress with modern SEO and privacy compliance tools such as Yoast SEO and OneTrust cookie consent, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and security headers, though the absence of a dedicated security policy and incident response contact suggests room for improvement. The lack of publicly available WHOIS data slightly reduces domain trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing a vulnerability disclosure program to further build trust.

H

Henderson.S.Services Ltd

hendersonsiteservices.co.uk

49

Henderson.S.Services Ltd is a UK-based engineering company specializing in pipework, insulation, fabrication, and installation services across various industrial sectors including chemical, pharmaceutical, food and beverage, and offshore industries. The company emphasizes quality and has longstanding relationships with major blue chip clients. The website is professionally designed using WordPress CMS and incorporates modern web technologies such as Google Tag Manager and CookieScript for analytics and privacy compliance. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and lack of publicly available security policies indicate room for improvement. The WHOIS data is unavailable due to a domain registration error, which raises some concerns about domain legitimacy despite the professional online presence. Overall, the website reflects a credible and established business with moderate technical maturity and privacy compliance.

G

Goonvean Electronics

jadescomponents.co.uk

49

Goonvean Electronics is a UK-based manufacturer specializing in custom coil winding, transformers, inductors, and electro-mechanical assemblies. With over 50 years of industry experience, the company serves global OEMs across diverse sectors including automotive, medical, defence, and communications. The business is positioned as a leading UK coil winding manufacturer with ISO 9001:2015 and ISO 14001 certifications, emphasizing quality and environmental management. The website reflects a professional and comprehensive digital presence, offering detailed product and industry information, supported by modern web technologies and analytics tools. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers are missing. The WHOIS data is unavailable due to domain registration issues, which impacts trustworthiness and business credibility scores. Overall, the site is well-structured and compliant with privacy regulations, but domain legitimacy concerns warrant further verification.

A

Arkote Group

arkote.com

44

Arkote Group is a manufacturing business specializing in cutting knives and related industrial products, serving primarily B2B clients in manufacturing and industrial sectors. The website presents a professional and consistent brand image with clear navigation and relevant product offerings. Technically, the site is built on WordPress using the Divi theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or security policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security and compliance disclosures.

Hair Systems Inc. is a contract manufacturer specializing in the development, manufacturing, and packaging of reactive hair care products such as hair color and bleach powder for the professional beauty industry. The company positions itself as a worldwide leader in customized hair care product solutions. The website content is focused on showcasing their product offerings and certifications, targeting professional beauty companies. Technically, the website is built with basic HTML and CSS, lacks modern frameworks or CMS, and shows signs of dated design with poor mobile optimization and accessibility. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. The WHOIS data is missing or unavailable, raising concerns about domain legitimacy, although the website content and certifications provide some trust signals. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization.

T

Turbo Vacuumentation Limited

turbo-vac.co.uk

42

Turbo Vacuumentation Limited is a UK-based company specializing in the manufacture, supply, and installation of vacuum lifting and handling equipment. They serve industrial and manufacturing sectors with a broad range of products including vacuum gripping systems, crane systems, manual handling equipment, bespoke vacuum lifting solutions, and vacuum components. The company is a trusted UK distributor for J. Schmalz GmbH, emphasizing technical expertise and customer support. Their market position is that of a niche, specialized provider with a longstanding presence since at least 1996. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Email Subscribers Lite, with frontend technologies including jQuery and Bootstrap 3. The site is moderately performant, mobile-optimized, and SEO-friendly. Security measures include HTTPS enforcement and reCAPTCHA on forms, but lack advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security hardening. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent may pose compliance risks, especially under GDPR. The WHOIS lookup for the domain 'www.turbo-vac.co.uk' failed due to domain naming rules, but the website is accessible and professional, suggesting the actual domain is 'turbo-vac.co.uk'. Overall, the website presents a credible and professional business front with solid technical foundations but would benefit from enhanced security headers, privacy compliance improvements, and clearer incident response policies to strengthen trust and regulatory adherence.

C

Conway Packing Services Ltd

conwaypack.co.uk

61

Conway Packing Services Ltd is a UK-based small business specializing in export packing services, particularly for the Ministry of Defence (MoD), defence, and commercial clients. The company offers ISPM15 certified crates, bespoke cases, and compliant export packing solutions. Their market position is that of a niche specialist catering to regulated sectors requiring certified packing services. The website is built on the Wix platform, leveraging Wix's Thunderbolt rendering engine and standard JavaScript polyfills, indicating a moderate level of digital maturity. The site is mobile-optimized and presents professional content relevant to its business domain. Security posture is limited, with no visible security headers or incident response information, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain WHOIS lookup failed due to a naming rules violation, which raises concerns about domain registration legitimacy, although the website content and structured data suggest a legitimate business presence. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

S

SYSPAL Ltd

syspal.com

66

SYSPAL Ltd is a UK-based company specializing in the innovation, design, and manufacture of aluminium and stainless steel equipment tailored for hygiene and quality-oriented industries. The company positions itself as a market leader within this niche manufacturing sector, targeting industrial clients requiring hygienic processing equipment. The website reflects a professional business presence with a focus on industrial manufacturing solutions. Technically, the site is built on the Magento platform, leveraging modern JavaScript libraries and third-party marketing and analytics tools such as Google Analytics, Google Tag Manager, Leady, and Lfeeder. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and visible privacy policies indicates room for improvement. The WHOIS data is missing or unregistered, which raises concerns about domain legitimacy and ownership transparency. Overall, the website presents a moderate risk profile with recommendations to enhance compliance, security headers, and domain registration transparency.

N

Nice-Pak International

nice-pak.co.uk

53

Nice-Pak International operates as a leading manufacturer of wet wipes, serving major brands and retailers globally. The company positions itself as a trusted supplier within the manufacturing sector, focusing on B2B relationships. The website reflects a professional digital presence built on WordPress, leveraging common SEO and cookie compliance tools to ensure regulatory adherence and user experience. The technical infrastructure is modern and includes Google Analytics for performance insights. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly disclosed. The domain WHOIS data is unavailable due to domain registration issues, which introduces some legitimacy concerns that should be addressed. Overall, the website is well-designed, compliant with privacy regulations, and serves its business purpose effectively.

A

ABC Stainless Ltd

abcstainless.co.uk

58

ABC Stainless Ltd is a well-established UK-based specialist in stainless steel fabrication, operating since 1981. The company offers a broad range of bespoke manufacturing and design services, serving diverse industries such as aerospace, pharmaceutical, petrochemical, and food processing. Their market position is strong within the UK, supported by multiple certifications and a reputable client portfolio. The website reflects a professional business with clear service offerings and a focus on quality craftsmanship. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various UI libraries, with good mobile optimization and SEO practices. Security measures include HTTPS and Google reCAPTCHA on forms, though there is room for improvement in security headers and incident response transparency. Overall, the digital presence supports the company's credibility and operational maturity.

F

Fire Security (Sprinkler Installations) Ltd

firesecurity.co.uk

50

Fire Security (Sprinkler Installations) Ltd is a UK-based company specializing in fire sprinkler system installation, maintenance, and related services. Established in 1972, the company serves a diverse range of industries including automotive, pharmaceutical, and retail, with a strong reputation supported by major clients and accreditations to recognized fire safety standards. The website presents a professional image with clear service offerings and contact information, targeting business owners, contractors, and landlords seeking fire protection solutions. Technically, the website is built on WordPress using common frameworks like Bootstrap and UIkit, with SEO optimization and mobile responsiveness. However, the use of an outdated jQuery version and an insecure external script introduces security risks. The security posture is moderate with HTTPS enabled but lacking advanced security headers and cookie consent mechanisms. WHOIS data is unavailable due to domain naming rules, indicating the domain is a subdomain or alias, which slightly reduces trustworthiness. Overall, the website is functional and credible but requires technical and security improvements to enhance compliance and risk posture.

Ashby Trade Sign Supplies Ltd is a well-established UK-based manufacturer and supplier of bespoke and standard aluminium signage systems and components, serving the trade since 1996. The company operates a large manufacturing facility and offers a wide range of services including powder coating, digital printing, CNC routing, and welding. Their market position is strong within the UK signage trade sector, targeting professional sign makers and businesses requiring high-quality signage solutions with rapid turnaround times. Technically, the website is built on modern frameworks such as Next.js and React, hosted likely on Vercel, providing fast performance and excellent mobile optimization. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. The absence of WHOIS domain registration data is a concern for domain legitimacy verification, but the website content and business information are professional and trustworthy. Overall, the site demonstrates a mature digital presence with room for enhanced security transparency and privacy compliance mechanisms.

A

Alexander Cleghorn Limited

alexcleg.co.uk

55

Alexander Cleghorn Limited is a well-established UK-based panel fabricator specializing in bespoke MDF, plywood, melamine sheets, and laminated panel products. Founded in 1958, the company operates a large facility with extensive stock and offers a wide range of services including panel cutting, edge banding, CNC machining, assembly, and delivery. The website reflects a professional and consistent brand presence targeting businesses and industries requiring custom panel products. Technically, the site is built on WordPress using the Divi theme and integrates modern web technologies such as Google Tag Manager, reCAPTCHA, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and anti-bot measures on forms, though additional HTTP security headers and published security policies would enhance trust. The absence of WHOIS data due to a domain registration error is a concern but the website content and business information strongly suggest legitimacy. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations, supporting a medium-sized manufacturing business in the UK.

DAMS is a company specializing in the manufacturing and supply of office furniture and workplace solutions, emphasizing sustainable manufacturing, global procurement, and product innovation. Their website is built on the HubSpot CMS platform, utilizing modern web technologies such as Swiper.js and Typekit fonts, indicating a moderate level of digital maturity. The site design is professional with good navigation and mobile optimization, though content depth is basic. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and privacy compliance documentation. The absence of WHOIS registration data raises concerns about domain legitimacy or recent registration status, impacting overall trust. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and improving transparency with contact and compliance information.

A

Armagard Ltd.

armagard.co.uk

55

Armagard Ltd. is a UK-based manufacturer specializing in high-grade protective enclosures for outdoor digital signage, industrial computers, printers, monitors, servers, and outdoor TVs. With over 30 years of industry experience, the company serves a global market spanning more than 50 countries, targeting manufacturers, retailers, and industrial businesses requiring durable and hygienic protection solutions. Their product portfolio includes waterproof enclosures, industrial cabinets, touchscreen enclosures, printer protection, and intrinsically safe enclosures compliant with ATEX standards. Technically, the website employs modern frameworks such as Bootstrap and integrates analytics and tracking tools including Google Analytics, CrazyEgg, and SalesFootprints. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and secure forms, although some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms in place. The security evaluation reveals no critical vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is noted as an area for improvement. The WHOIS lookup for the 'www' subdomain failed due to naming rules, but the website content and business information strongly indicate legitimacy and an established presence. Overall, Armagard Ltd. presents a trustworthy and professional online presence with robust technical infrastructure and good privacy compliance. Strategic enhancements in security policy transparency and header implementation would further strengthen their security posture.

Custom Profiles Ltd is a UK-based leading independent supplier and stockholder of aluminium extrusions, serving manufacturing industries since 2005. They offer a comprehensive range of services including supply, fabrication, finishing, and stockholding of aluminium profiles, targeting customers across the UK, Europe, and worldwide. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and Contact Form 7, and integrates Google Analytics and Google reCAPTCHA for analytics and security. Security posture is strong with HTTPS enforced and use of CAPTCHA, but lacks some security headers and explicit incident response or security policy disclosures. WHOIS data is missing, raising concerns about domain registration legitimacy, which impacts overall trust. Contact information and social media presence are comprehensive, supporting business credibility. Overall, the website is functional, secure, and business-focused but would benefit from improved privacy compliance and domain registration transparency.

R

Riteweld Engineering

riteweldengineering.co.uk

49

Riteweld Engineering is a well-established family-run business specializing in the design, fabrication, and installation of structural and architectural steel projects primarily serving the Banbury, Oxford, and Northampton regions in the UK. With nearly 40 years of industry experience since its founding in 1983, the company holds a strong regional market position as a leading steel fabricator. Their key services include structural steel fabrication, custom architectural steelwork, 3D visualisation, and steel stockholding, supported by a skilled team and modern 3D modelling technologies. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and CookieYes for consent management. It employs Google reCAPTCHA for form security and integrates analytics tools like Google Analytics and Snitcher for visitor tracking. The site is mobile-optimized with good SEO practices and a professional design, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam and bot attacks. Cookie consent mechanisms are in place, indicating GDPR compliance. However, there is no explicit security policy or incident response information published. The WHOIS data for the domain is unavailable due to a domain naming rules error, which limits verification of domain registration legitimacy. Despite this, the website content and business information appear consistent and trustworthy. Overall, the website demonstrates a solid digital presence with good privacy and security practices, though improvements could be made by publishing formal security policies and enhancing HTTP security headers. The lack of WHOIS data is a notable gap but does not currently detract from the business credibility based on available content.

Birkdale Plastics Limited is a small UK-based manufacturing company specializing in plastic products such as rigid profiles, PVC tubes, flexible PVC, bended tubes, welded seals, and tooling. Founded in 2021, the company provides advisory services guiding customers through tooling design and product suitability. The website is professionally designed using WordPress and the Divi theme, with moderate performance and good mobile optimization. Contact information is clearly presented, enhancing business credibility. However, the site lacks privacy, cookie, and terms of service policies, which are important for compliance and trust. Security posture is adequate with HTTPS enabled but lacks security headers and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and no suspicious domains or external partners were found. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices.

C

Compressortech

compressortech.co.uk

50

Compressortech is a UK-based specialist company focused on compressor technology, offering a wide range of compressors with 99% coverage and OE approval. Their business model centers on supplying OEM quality compressors and remanufacturing services, positioning themselves as a leading provider in the UK market. The website content emphasizes quality, service, and trust, supported by ISO 9001 certification and over 25 years of experience. However, the domain WHOIS data indicates registration issues, which may affect trustworthiness despite the legitimate business content. Technically, the website uses an older CMS (Monstra 3.0.1) and relies on legacy technologies such as jQuery and Bootstrap. The site shows moderate performance and basic mobile optimization but lacks modern security practices such as HTTPS enforcement and security headers. Google Analytics is used for tracking, but no cookie consent mechanism is present, indicating partial privacy compliance. From a security perspective, the absence of HTTPS and security headers lowers the security posture score. No forms or sensitive data collection points were detected, reducing immediate risk exposure. The lack of WHOIS data and domain registration inconsistencies raise concerns about domain legitimacy, which should be addressed to improve trust. Overall, the website is functional with basic business information and moderate technical implementation but requires significant improvements in security, privacy compliance, and domain legitimacy to enhance trust and reduce risk.

A

Air Control Industries Ltd

aircontrolindustries.com

70

Air Control Industries Ltd is a well-established UK-based manufacturer specializing in industrial air movement solutions including fans, air knife systems, and blowers. With over 50 years of engineering excellence since its founding in 1969, the company serves industrial and manufacturing sectors globally. The website reflects a professional B2B business model targeting industrial clients requiring quality air delivery systems. Technically, the site is built on WordPress with Divi theme and WooCommerce, integrating multiple marketing and analytics tools such as HubSpot, Hotjar, and LinkedIn Insight. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible vulnerabilities, but explicit security headers and a vulnerability disclosure policy are absent. The lack of WHOIS data reduces domain trustworthiness, though the website content and branding suggest legitimacy. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is professional and functional but would benefit from enhanced transparency and security practices.

B

Bibby Engineers LTD

bibbyengineers.co.uk

47

Bibby Engineers LTD is a well-established manufacturing company specializing in plastic injection moulding and precision engineering services. With over 75 years of history and a strong presence in Cornwall, UK, the company offers a comprehensive range of services including tool making, secondary operations, product design, and recycling initiatives. Their market position is that of a quality-focused, customer-centric manufacturer serving diverse production volumes from prototypes to mass production. The website reflects a professional and consistent brand image with clear service offerings and a focus on reshoring and sustainability. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and integrations such as PayPal for payments and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced, secure forms, and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with visible cookie consent and privacy policies aligned with GDPR. Overall, the website presents a credible and trustworthy digital presence for the business.

I

Irr Supply Centers, Inc.

irrsupply.com

52

Irr Supply Centers, Inc. is a well-established wholesale distributor specializing in plumbing, heating, cooling, refrigeration, and electrical equipment and supplies. With a strong market presence in Western New York and Pennsylvania, the company serves contractors and businesses with multiple physical locations and a comprehensive product offering. The website reflects a professional business model focused on B2B distribution, supported by online ordering and customer loyalty programs. The company emphasizes service guarantees and customer satisfaction, reinforcing its market position as a leading distributor in its sectors. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Maps API for location services, and Google reCAPTCHA for form security. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. The infrastructure is supported by Network Solutions as the registrar, with HTTPS enabled but lacking advanced DNS security features like DNSSEC. From a security perspective, the site demonstrates basic security hygiene with HTTPS and reCAPTCHA on forms but lacks published privacy, cookie, or security policies. No security headers were detected, and DNSSEC is not enabled, which presents opportunities for improvement. The absence of vulnerability disclosure or incident response information indicates a gap in transparency and readiness. Overall, the security posture is moderate but could be enhanced to meet higher compliance and trust standards. The overall risk assessment suggests a legitimate and trustworthy business with a solid online presence but with room to improve privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response contacts to enhance trust and compliance.

Fixfast is a specialist manufacturer and supplier of fasteners and building components primarily for industrial, commercial, and larger residential buildings. The company focuses on the design, manufacture, and supply of specialist components for walls and roofs, positioning itself as a key player in the building envelope sector. The website reflects a professional and modern digital presence, leveraging Magento CMS with Hyvä themes, Algolia search, and integrated marketing and analytics tools such as HubSpot and Cookiebot. The technical infrastructure is robust, with good mobile optimization, security headers, and HTTPS enforcement, indicating a mature digital setup. Security posture is strong with no evident vulnerabilities, and privacy compliance is well addressed through comprehensive cookie consent mechanisms and a detailed privacy policy. However, the absence of WHOIS registration data raises questions about domain legitimacy, although the website content and technology usage suggest a legitimate business. Overall, the site is professional, secure, and compliant, but would benefit from clearer contact information and terms of service documentation.

iACS is a UK-based specialist company providing advanced HVAC control solutions including Air Handling Unit (AHU) controls, Fan Coil Unit controls, Heat Recovery Systems, Smoke Extract controls, and Retrofit solutions. The company targets commercial and industrial sectors, offering custom panel solutions, integrated automation, and training services. Their market position is supported by over 40 years of experience and thousands of successful projects, positioning them as a trusted provider in the HVAC controls industry. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as Bootstrap, FontAwesome, Google Fonts, and embedded multimedia content including YouTube videos and Google Maps. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Analytics tools like Google Tag Manager and Plausible Analytics are employed for user tracking. From a security perspective, the site uses HTTPS and includes CSRF tokens in scripts, but lacks visible security headers and explicit privacy or cookie policies. No forms are present on the main page, reducing immediate input risks. WHOIS data for the subdomain is unavailable due to Nominet UK naming rules, but the main domain appears legitimate. Overall, the security posture is moderate with room for improvement in policy transparency and header implementation. The overall risk is low given the professional presentation and clear contact information, but the absence of privacy and cookie policies and missing security headers are notable gaps. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

H

HWL Trade Frames

hwlwindows.co.uk

51

HWL Windows Group is a Leeds-based manufacturer specializing in bespoke flush uPVC and aluminium windows and doors, primarily serving trade fitters across the UK. The company has a well-established online presence with a professional website showcasing its Residence Collection and Sheerline product lines, supported by customer testimonials and design tools. The domain is long-standing since 2003, reinforcing business legitimacy. Technically, the website is built on WordPress with common industry plugins and integrates Google Analytics for user tracking. Cookie consent is implemented, but explicit privacy and terms of service policies are not clearly found in the provided content. Security posture is adequate with HTTPS and no obvious vulnerabilities, though security headers and incident response information could be improved. Overall, the site is professional, user-friendly, and trustworthy, targeting trade professionals in the manufacturing sector.

Fourth Dimension is a UK-based small manufacturing business specializing in custom CNC block and panel machining services. Established in 2002, the company leverages over 50 years of combined experience and Anderson 3 axis machinery to deliver precise and flawless machined parts. The website presents a professional image with clear contact information and a focus on quality assurance. Technically, the site is built on the Squarespace platform, utilizing modern web technologies and providing a good user experience with mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the business appears legitimate and trustworthy, but enhancing security and privacy compliance would strengthen its risk profile.

UEI Group is a private investment firm with a focus on operational investments to foster growth and long-term value creation. The company emphasizes family and partnership values and operates through a portfolio of subsidiaries specializing in engraved die manufacturing and decorative foil supply. The website reflects a mature business with a consistent brand and a clear market position in manufacturing and investment sectors. Technically, the site is built on WordPress using the Divi theme and Gravity Forms, with integrations for Google Analytics and Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and some security plugins, but lacks advanced headers and DNSSEC, and no published security or incident response policies were found. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

S

Speed Plastics Limited

speedplastics.co.uk

58

Speed Plastics Limited is a UK-based specialist manufacturer with over 25 years of experience in high frequency welding of flexible plastics including PVC and polyurethane films. The company offers bespoke engineering solutions and manufactures products for sectors such as medical, pharmaceutical, defence, and child learning aids. Their website reflects a professional business-to-business model targeting industrial clients and manufacturers. The company holds ISO 9001:2015 certification, reinforcing their commitment to quality. Technically, the website is built on WordPress using common plugins and technologies such as Revolution Slider and Ninja Forms, with Google Analytics and Tag Manager integrated for tracking. The site is mobile-optimized and provides clear navigation and relevant content. Security posture is moderate with HTTPS enabled and secure forms, but lacks security headers and cookie consent mechanisms. WHOIS data query failed due to querying the subdomain rather than the root domain, which slightly reduces trust but does not negate the legitimacy of the business. Overall, the website is professional, trustworthy, and well-positioned in its niche.

Shimano is a globally recognized manufacturing company specializing in advanced manufacturing technologies and craftsmanship, as reflected on their official corporate website. The site provides corporate information, investor relations, recruitment details, and social activities, targeting a general audience including investors, potential employees, and partners. The website demonstrates a professional and consistent brand presence with good content quality and navigation. Technically, the site employs modern web technologies including jQuery 3.6.0, Google Tag Manager, and Google Consent Mode for analytics and privacy compliance. The site is mobile optimized and shows good SEO practices. However, there is no explicit CMS or hosting provider information detected. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces trust slightly but the corporate branding and content strongly support legitimacy. Overall, the website is a well-maintained corporate portal with moderate technical sophistication and basic privacy compliance. Strategic improvements in security headers, transparency of security policies, and WHOIS data availability would enhance trust and security posture.

E

Engineering Factory Supplies

efsltd.co.uk

45

Engineering Factory Supplies (EFS) is a UK-based industrial and commercial product supplier founded in 1985. The company offers a broad range of products including engineering supplies, hand and power tools, workwear and PPE, janitorial supplies, and fixings and fasteners. Positioned as one of the region's largest independent suppliers, EFS targets industrial and commercial customers primarily in manufacturing sectors. The website is built on WordPress with a moderate technical infrastructure, including jQuery and a custom theme, providing a good user experience with clear navigation and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

A

Aperam

aperam.com

73

Aperam is a global manufacturer specializing in stainless steel, electrical steel, and specialty alloys, serving diverse industrial sectors such as energy, transport, and manufacturing. The company emphasizes sustainability, innovation, and circular economy principles, positioning itself as a leading value creator in its industry. The website reflects a mature digital presence with multilingual support and comprehensive investor relations content. Technically, the site is built on WordPress with modern frameworks and includes SEO and accessibility best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the professional presentation and legitimacy of the business. Overall, the site is well-designed, secure, and compliant, supporting Aperam's corporate image and business objectives.

E

Ebi

easibind.com

49

Ebi is a UK-based creative printed packaging company established in 1996, offering end-to-end sustainable print solutions including packaging, direct mail, and point-of-sale materials. The company positions itself as a full-service partner with in-house design, printing, and assembly capabilities, targeting businesses seeking high-quality and sustainable print products. The website is built on WordPress using the Divi theme and incorporates modern technologies such as Bootstrap and jQuery, with integrations for analytics and marketing tracking. Security posture is adequate with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and additional security headers could improve resilience. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website reflects a professional and credible business with moderate technical maturity and a good security baseline.

I

Intercoat Paints

intercoat-paints.co.uk

68

Intercoat Paints is a well-established UK-based manufacturer specializing in coatings and finishes for wood, metal, and plastic surfaces. With over 50 years of industry experience, the company holds a leading market position in the UK coatings sector, offering a broad range of products including Speedline, Aqualine, and EnviroLac. Their business model focuses on both standard and bespoke coatings, targeting industrial and commercial customers seeking high-quality, durable, and eco-friendly solutions. Technically, the website is built on a modern React and Next.js framework, featuring fast performance, mobile optimization, and good SEO practices. The site integrates third-party services such as Google Analytics, Tawk.to live chat, and Vimeo for video content, alongside a robust cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. It employs Google reCAPTCHA v3 to mitigate bot activity and maintains a cookie consent banner for privacy compliance. However, the absence of a dedicated security policy or incident response page and lack of a security.txt file indicate areas for improvement in transparency and vulnerability management. Overall, the website presents a professional and trustworthy digital presence with comprehensive business information and contact details. The lack of WHOIS data due to domain naming constraints limits domain trust verification, but the site content and business credentials suggest legitimacy. Strategic recommendations include enhancing security transparency, publishing incident response protocols, and maintaining regular audits of third-party scripts to uphold security standards.

T

Tennant Rubber Ltd

tennantrubber.co.uk

54

Tennant Rubber Ltd is a UK-based family-run manufacturing business specializing in rubber and polymer products with over 50 years of industry experience. Their website presents a professional image targeting industrial and commercial sectors such as food, pharmaceuticals, engineering, and construction. The company offers a broad range of services including product supply, fabrication, moulding, extrusion, and hose assemblies. The website is well-structured with clear navigation and contact information, supporting their business credibility. Technically, the website employs modern JavaScript libraries such as jQuery, Google Tag Manager, and the Foundation framework, providing a responsive and user-friendly experience. However, some technical improvements could be made in security headers and SEO optimization. The site includes a cookie consent banner and a privacy policy, indicating awareness of GDPR compliance, though more comprehensive privacy and security policies would strengthen compliance posture. Security-wise, the site uses HTTPS (assumed from external scripts loaded via HTTPS), but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, limiting domain registration trust verification. Overall, the website appears legitimate and professional but could improve transparency and security practices. The overall risk assessment is moderate with recommendations to enhance security headers, provide detailed security and incident response policies, and verify domain registration details. These steps will improve trustworthiness and compliance, supporting Tennant Rubber Ltd's established market position.

D

DHX | Denley Hydraulic Solutions

denleyhydraulics.co.uk

42

DHX | Denley Hydraulic Solutions is a well-established UK-based company specializing in bespoke hydraulic engineering solutions for demanding industrial applications. Founded in 1999 and operating as part of the Kinetic Solutions Group, DHX offers a range of products including hydraulic systems, power units, lubrication systems, cylinders, manifolds, and test rigs. Their market position is strong within the manufacturing and energy sectors, serving clients requiring precision and reliability in harsh environments. The website reflects a professional and consistent brand image, targeting engineering and industrial customers.

M

Mansell Recruitment Group Ltd

mansell.co.uk

49

Mansell Recruitment Group Ltd is a well-established specialist technical job agency based in the United Kingdom, focusing on placing engineering professionals across various disciplines. Founded in 1991, the company has built a strong reputation in the UK engineering recruitment market, offering services to both candidates and clients. Their website reflects a professional and consistent brand image, targeting engineering companies and professionals seeking roles in manufacturing, design, electronics, and related sectors. Technically, the website is built on modern web technologies including Webflow CMS, JavaScript libraries like jQuery, and integrates Google services such as reCAPTCHA and Tag Manager for security and analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms from abuse. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The WHOIS lookup for the queried subdomain failed due to domain naming rules, but this is consistent with querying a subdomain rather than the registered domain. The main domain is presumed legitimate based on website content and business information. Overall, Mansell Recruitment Group presents a credible and professional online presence with a solid business model and market position. Strategic improvements in security headers, privacy compliance, and WHOIS data clarity would further strengthen their digital trustworthiness and compliance posture.

D

Duplo International Ltd

duplointernational.com

71

Duplo International Ltd is a well-established manufacturer and provider of automated print finishing technology, serving the EMEA region from its UK headquarters. The company offers a broad range of print finishing machinery including booklet makers, cutters, creasers, binders, and digital cutting tables, targeting commercial printers and packaging sectors. The website is professionally designed using Drupal 10 CMS and integrates modern marketing and analytics tools such as Google Tag Manager and HubSpot. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. WHOIS data is missing or inaccessible, which raises concerns about domain registration legitimacy but the website content and business presence indicate a legitimate enterprise. Overall, the site is well-structured, mobile-optimized, and trustworthy, with room for improvement in privacy and security transparency.

Contact Packaging Ltd is a well-established family-run business founded in 1980, specializing in the import, manufacture, and distribution of packaging products including adhesive tapes, printed tapes, stretch films, and packaging machinery. They hold a strong market position as the largest importer of Vibac self-adhesive tapes in the UK and maintain a significant stock holding to serve both trade and end users. The company also offers eco-friendly packaging solutions and has an in-house graphics department for custom printed tapes. Technically, the website employs modern JavaScript libraries, Google Analytics, and Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, though security headers and explicit policies could be improved. Privacy compliance is supported by a cookie policy and consent mechanism, but lacks a dedicated privacy policy page and incident response information. Overall, the website and business demonstrate professionalism and trustworthiness, with room for enhanced security and compliance maturity.

A

ASC Engineered Solutions

anvilintl.com

63

ASC Engineered Solutions is a well-established manufacturer and solutions provider specializing in precision-engineered pipe joining products, valves, and related services that support the entire construction project lifecycle. The company targets construction professionals, engineers, and industrial clients, offering a broad portfolio of products including pipe joining systems, fire protection, flow control, support systems, and performance products. Their market position is strong, supported by comprehensive digital tools and a professional online presence. Technically, the website employs modern analytics and marketing technologies such as Google Analytics, Google Tag Manager, HubSpot CTAs, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and SEO, with good performance and accessibility features, although some accessibility aspects could be improved. From a security perspective, the site enforces HTTPS and includes CSRF tokens and cookie consent mechanisms, reflecting good security hygiene. However, explicit security headers and a published security policy or incident response contacts are not evident, representing areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and business information appear legitimate and professional. Overall, ASC Engineered Solutions presents a trustworthy and professional online presence with strong business credibility and technical implementation. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and incident response contacts, and monitoring domain registration details to ensure transparency and trust.

A

American Cement Association

cement.org

64

The American Cement Association (ACA) is a leading industry association representing America's cement manufacturers. The organization focuses on policy advocacy, research, education, market intelligence, and sustainability initiatives to support the cement industry and national infrastructure. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress with modern plugins and tracking tools, including Google Analytics and CookieYes for privacy compliance. Security posture is strong with HTTPS enforced and bot management cookies present, though explicit security headers could be further verified. Privacy compliance is well addressed with a detailed cookie consent mechanism. Overall, the site demonstrates high business credibility and trustworthiness, though WHOIS data is privacy protected, which is typical for such organizations.

Jardine’s Joinery (Wirral) Ltd is a small bespoke joinery manufacturer specializing in high-quality staircases, windows, doors, gates, and conservatories serving the Wirral, Cheshire, and Merseyside regions. The company emphasizes craftsmanship and fine detail, positioning itself as a leading local provider in bespoke joinery. The website is built on WordPress with legacy plugins and scripts, indicating a moderate level of digital maturity but with outdated technology components. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and outdated software versions, exposing the site to potential vulnerabilities. The absence of privacy and cookie policies further reduces compliance with modern data protection standards. Additionally, the domain WHOIS data is missing or indicates no registration, which raises concerns about domain legitimacy despite the active website presence. Overall, the site provides good business information and contact details but requires significant improvements in security, compliance, and technical modernization.

C

CES Quarry Products Ltd

cesquarryproducts.com

62

CES Quarry Products Ltd is a well-established company founded in 1948, specializing in the supply and delivery of quarry products and construction materials throughout Northern Ireland. The company offers a broad range of products including floor screed, quarry and recycled stone, bituminous surfacing products, ready-mix concrete, building mortar, blocks, bricks, and insulation blocks. With 75 years of industry experience, CES positions itself as a trusted and reliable supplier serving construction professionals and related customers. The website reflects a professional and consistent brand image with multiple physical locations and active social media presence, supporting its market position as a regional leader. Technically, the website is built using modern web technologies such as Gatsby and React, ensuring fast performance, mobile optimization, and good SEO practices. The site uses Google Tag Manager for analytics and tracking but lacks a cookie consent mechanism, which may impact GDPR compliance. The absence of WHOIS registration data for the domain is a notable concern, as it conflicts with the company's long business history claim and reduces domain trustworthiness. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide visible incident response or vulnerability disclosure information. The overall security posture is good but could be improved with additional best practices and transparency. Overall, CES Quarry Products Ltd presents a credible and professional online presence with room for improvement in privacy compliance and domain registration transparency. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and verifying domain registration details to enhance trust and compliance.

Gusto Design Ltd is a UK-based industrial design consultancy specializing in product creation, design, and innovation for international markets. The company serves a diverse client base including major brands such as Intel, Boots, and The Body Shop, offering services from initial concept through to production and sustainability evaluation. The website reflects a professional and consistent brand image with detailed descriptions of projects, processes, and activities. Technically, the site uses modern web technologies including Bootstrap and Google Fonts, with Google Analytics integrated for visitor tracking. However, there is no evidence of privacy or cookie policies, and no social media presence is linked. Security posture is moderate but lacks visible HTTPS confirmation and security headers. The WHOIS data for the domain www.gusto.co.uk is missing and indicates the domain is not registered under Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is accessible and informative but requires improvements in security, privacy compliance, and domain registration transparency.

T

The Kinetic Co., Inc.

knifemaker.com

59

The Kinetic Co., Inc. is a well-established U.S.-based manufacturer specializing in industrial machine knives and custom blades serving multiple industries including tissue, nonwovens, wood, metal, and packaging. With over 75 years of experience and an ISO 9001:2015 certified manufacturing facility in Milwaukee, WI, the company positions itself as a premier provider offering fast lead times, custom engineering, and contract manufacturing services. Their target audience primarily includes general buyers and procurement teams in industrial sectors seeking high-quality, precision-engineered cutting solutions. Technically, the website is built on WordPress using Elementor, enhanced with performance optimizations such as lazy loading and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and clear navigation, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, though some security headers and explicit security policies are absent. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the security posture is good but could be improved by adding security headers, incident response information, and comprehensive privacy policies. The absence of WHOIS data for the domain is a concern and warrants further investigation to confirm domain legitimacy. However, the website content and business information are professional and consistent with a legitimate manufacturing company. Strategically, the company should focus on enhancing transparency around privacy and security policies, verifying domain registration details, and continuing to leverage their strong market position and customer trust to maintain competitive advantage.

Devon Oak is a small UK-based company specializing in traditional timber framing, including green oak and softwood frames. They offer services such as timber framing construction, sawing timber with their own Mahoe Sawmill, and transportation of timber and frames. The company targets customers interested in traditional timber buildings, including those who supply their own timber. The website is professionally designed using WordPress, with clear navigation and mobile optimization. Social media presence on Instagram and Facebook supports their market engagement. However, the website lacks formal privacy and cookie policies, which impacts compliance. Technically, the site uses WordPress 6.6.5 with jQuery and Jetpack plugin, and loads Google Fonts. Performance is moderate with good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks security headers and formal vulnerability disclosure mechanisms. No forms collecting sensitive data are present except a search form. The WHOIS query failed due to querying an invalid domain variant ('www.devonoak.co.uk'), but the actual domain 'devonoak.co.uk' appears legitimate. Overall, the site is safe, professional, and trustworthy for its niche market. Strategic improvements include adding privacy and cookie policies, implementing security headers, and enhancing accessibility features to improve compliance and security posture.