Real Estate security reports

M

Meadsway Construction Limited

meadswayconstruction.co.uk

37

Meadsway Construction Limited is a family-run general building contractor operating primarily in Bedfordshire and surrounding counties, with over 55 years of experience. The company offers a broad range of construction services including domestic, commercial, education sector projects, design & build, renovations, and work on listed buildings. Their website reflects a professional and consistent brand presence targeting private and commercial clients in the UK construction sector. Technically, the website is built using Adobe Muse with legacy JavaScript libraries and includes Google Analytics and Tag Manager for tracking. While the site is mobile responsive and well-structured, it lacks modern security headers and privacy compliance documentation. The WHOIS data for the domain is unavailable and indicates domain registration issues, which raises concerns about domain legitimacy despite the professional website content. Overall, the site presents a credible business front but would benefit from improved security and compliance measures.

Burns & Shaw Property Consultants is a small UK-based commercial property consultancy specializing in office, industrial, retail, and development properties. With over 40 years of combined experience, they provide services such as lettings, disposals, acquisitions, development consultancy, and asset management. Their website presents a professional image with clear service descriptions and contact information, targeting commercial landlords, tenants, investors, and developers. Technically, the site is built on WordPress using the Divi theme and includes common plugins like Contact Form 7 and Slider Revolution. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is basic with HTTPS enabled and a cookie consent banner present, but no advanced security headers or policies are detected. The WHOIS data for the domain is unavailable due to domain naming rule violations, raising concerns about domain legitimacy or configuration. Overall, the website is functional and professional but would benefit from improved security practices and clearer domain registration information.

D

Daniel Cobb Estate Agents Ltd

danielcobb.co.uk

66

Daniel Cobb Estate Agents Ltd is a well-established independent real estate agency founded in 1994, specializing in property sales, lettings, and management across central London. The company emphasizes family values such as honesty, support, and trust, and operates multiple offices in key London areas including Kennington, Westminster, and London Bridge. Their service portfolio includes property sales, lettings, property management, valuations, land and developments, and in-house maintenance, positioning them as a leading independent agency in the London property market. Technically, the website is built on Joomla CMS and integrates modern web technologies including Google Analytics, Facebook Pixel, Google Maps API, and Google reCAPTCHA for security. The site is mobile-optimized with good SEO practices and includes cookie consent mechanisms compliant with GDPR. The presence of multiple social media channels and tracking tools indicates a mature digital marketing strategy. From a security perspective, the website enforces HTTPS and uses reCAPTCHA on forms to mitigate spam and abuse. However, some security headers like Content-Security-Policy and X-Frame-Options are not detected, which could be improved to enhance security posture. No vulnerabilities or exposed sensitive data were found in the HTML content. The cookie consent and privacy policies are comprehensive and GDPR compliant. A notable concern is the WHOIS data failure for the domain www.danielcobb.co.uk, which the registry indicates as invalid due to naming rules. This discrepancy suggests possible domain misconfiguration or use of a subdomain, which impacts domain registration trustworthiness. Despite this, the website content, certifications, and social presence strongly support the legitimacy of the business. Overall, the website presents a professional, trustworthy, and user-friendly platform for real estate services in London, with minor technical and security improvements recommended to further st…

G

Gabb & Co Solicitors

gabb.co.uk

64

Gabb & Co Solicitors is a well-established UK law firm founded in 1760, specializing in a broad range of legal services including commercial and residential property, company and commercial law, probate, tax advice, trusts, and wills. The firm serves individuals, businesses, and the agricultural community across the UK, maintaining a reputation for high-quality, approachable legal advice. Their market position is strengthened by longstanding client relationships and regulatory compliance with the Solicitors Regulation Authority. Technically, the website is built on WordPress with modern technologies such as jQuery, Contact Form 7, and Cloudflare Turnstile captcha for security. The site demonstrates good performance, excellent mobile optimization, and solid SEO and accessibility practices. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. From a security perspective, the site enforces HTTPS, uses captchas on forms, and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts. The WHOIS data is unavailable due to a domain query error, but the website's professional presentation and regulatory information support its legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers and transparency around security policies would further enhance trust and compliance.

S

Smart City Locating, LLC

smartcityapartments.com

60

Smart City Locating, LLC is a well-established apartment locating service founded in 2013, operating across nine major U.S. metro markets. The company offers free, personalized apartment search services through licensed local agents, complemented by moving concierge, utility setup, renters insurance, and internet setup services. Their market position is strong, supported by multiple industry awards and recognitions, indicating a reputable and trusted brand in the real estate sector. The website is professionally designed using WordPress and optimized with NitroPack, ensuring fast performance and excellent mobile responsiveness. The technical infrastructure includes extensive use of modern analytics and marketing tools, although privacy compliance mechanisms such as cookie consent and privacy policies are currently lacking. Security posture is solid with HTTPS enforced and domain registration protections in place, but DNSSEC is not enabled, representing a minor security gap. Overall, the site is trustworthy and business credible but would benefit from enhanced privacy compliance and security transparency.

E

Emsleys Solicitors

emsleys.co.uk

63

Emsleys Solicitors is a well-established, award-winning law firm based in Leeds, UK, providing a broad range of legal services including conveyancing, family law, employment law, dispute resolution, and wills & probate. The firm targets individuals and businesses primarily in Yorkshire and surrounding areas, positioning itself as a leading regional legal service provider with a strong reputation evidenced by multiple industry awards and excellent client reviews. Their business model focuses on client-centric, practical legal advice with fixed fee options to enhance transparency and accessibility. Technically, the website is built on a modern stack including Craft CMS, jQuery, Google Tag Manager, and Cookiebot for consent management, complemented by Plausible Analytics for privacy-friendly traffic analysis. The site is well-optimized for mobile and accessibility, with good SEO practices and fast loading performance. The presence of comprehensive metadata, structured data, and social media integration reflects a mature digital presence. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and integrates cookie consent mechanisms, demonstrating adherence to best practices. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers like X-Frame-Options and Content-Security-Policy should be verified and enhanced if missing. The absence of a published incident response or vulnerability disclosure policy is noted. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The WHOIS data could not be retrieved due to querying a subdomain rather than the registered domain, but this does not detract from the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and maintaining up-to-date third-party libraries.

C

Chartwell Land & New Homes

chartwellpropertygroup.com

50

Chartwell Land & New Homes is a UK-based property development company specializing in unlocking land, securing planning permissions, and building bespoke quality homes primarily across Surrey, Sussex, Kent, Hampshire, Buckinghamshire, and Berkshire. The company targets home buyers and property investors seeking bespoke residential properties in these regions. The website presents a professional and well-structured digital presence built on WordPress with the Divi theme and Slider Revolution, indicating a moderate level of digital maturity. SEO practices are supported by Yoast SEO, and Google Fonts and reCAPTCHA are used for enhanced user experience and security. Security posture is generally good with HTTPS enforced and use of reCAPTCHA; however, the absence of security headers and privacy/cookie policies indicates room for improvement. The WHOIS data is unavailable or protected, which reduces domain trustworthiness, though the website content and branding suggest a legitimate business. Overall, the site scores well on content quality and business credibility but needs to address privacy compliance and domain registration transparency to improve trust and security.

K

Kelvin Francis Estate Agents

kelvinfrancis.com

52

Kelvin Francis Estate Agents is a well-established independent real estate agency based in Cardiff, UK, with over 46 years of experience. The company specializes in residential sales, lettings, valuations, and property management, serving Cardiff and surrounding areas through multiple offices. Their market position is strong, supported by multiple industry certifications and awards, reflecting a trusted and reputable brand in the local property market. The website effectively communicates their services and trust signals to their target audience of property buyers, sellers, landlords, and tenants. Technically, the website is built on WordPress using modern plugins and technologies such as WPBakery Page Builder, LayerSlider, Google Maps API, and Google Analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security measures include HTTPS, Google reCAPTCHA v3, and a cookie consent mechanism, although some advanced security headers and DNSSEC are not implemented. The security posture is solid but could be improved by enabling DNSSEC, adding security.txt for vulnerability disclosure, and implementing additional HTTP security headers. Privacy compliance is good with a comprehensive privacy policy and cookie consent banner. Contact information is clearly provided, enhancing business credibility. No signs of malicious content or suspicious domains were detected, and the domain registration data aligns well with the business claims, indicating high legitimacy. Overall, Kelvin Francis Estate Agents presents a professional, trustworthy, and user-friendly online presence with room for security enhancements to further strengthen their digital maturity and compliance posture.

R

Raine & Co

raineandco.com

44

Raine & Co is a well-established real estate and letting agency operating since 1991, serving multiple locations including Potters Bar, Hatfield, St Albans, Mayfair, and surrounding areas. The company emphasizes high service standards, honesty, and professionalism, offering a broad range of services such as residential sales, lettings, auctions, property management, and financial advice. Their market position is supported by multiple office locations, award recognition, and a strong online presence. Technically, the website is built on modern frameworks like Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and explicit privacy compliance. Overall, the website presents a professional and trustworthy image, though the lack of WHOIS data for the domain raises some concerns about domain registration legitimacy. Strategic recommendations include enhancing privacy and cookie policies, adding security headers, and clarifying domain registration details to improve trust and compliance.

Stratton Glass & Windows Ltd is a well-established local home improvement company based in Norfolk, UK, specializing in the supply and installation of premium aluminium and uPVC windows, composite doors, conservatories, and home extensions. With over 40 years of experience, the company positions itself as a trusted partner for homeowners in Norfolk and Suffolk, offering quality products backed by a 10-year insurance-backed warranty and recognized industry certifications such as FENSA and GGF. Their services include a wide range of window and door types, conservatory designs, and roof replacement solutions, targeting residential customers seeking durable and energy-efficient home improvements. Technically, the website is built on ASP.NET WebForms using the Bongo CMS platform, incorporating legacy JavaScript libraries like jQuery 1.4.4 and MooTools, alongside modern tools such as Facebook Pixel for marketing and tracking. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. However, some outdated libraries and missing security headers suggest room for technical modernization and enhanced security hardening. From a security perspective, the website enforces HTTPS, uses captchas on forms, and provides clear privacy and cookie policies, reflecting a mature privacy posture. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the queried subdomain is due to domain naming rules, but the website content and contact information strongly indicate legitimacy and consistency with the business claims. Overall, Stratton Glass & Windows Ltd presents a professional and trustworthy online presence with solid business credibility and a good security posture. Strategic improvements in updating legacy scripts, implementing security headers, and publishing explicit security policies would further enhance their digital maturity and risk management.

D

Deekay Property

deekayproperty.com

60

Deekay Property is a UK-based real estate investment company established in 1972, offering property investment, asset management, and finance services. The website presents a professional image with a consistent brand and clear market positioning focused on the UK property market. The technical infrastructure is based on the Squarespace platform, providing a modern and mobile-optimized experience with good SEO practices. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.

O

Ogilvie Group

ogilvie.co.uk

58

Ogilvie Group is a well-established family-owned business founded in 1946, operating multiple divisions including construction, fleet management, home building, surveying, and IT security solutions. The company holds a strong market position in Scotland as one of the largest privately owned construction firms and has diversified into complementary sectors. Their website reflects a professional and consistent brand image targeting business clients and partners across these industries. Technically, the website is built on WordPress using modern plugins and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and published policies. The absence of WHOIS data due to domain naming query issues slightly impacts domain trust but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain registration transparency.

J

Jackie Stanley Limited

jackie-stanley.co.uk

60

Jackie Stanley Limited operates as a specialized real estate agency focused on the North Cornwall region, providing property sales and client support services. The company positions itself as a trusted local expert with a strong emphasis on personalized service and reliability. The website reflects a professional and well-branded digital presence, targeting home buyers and sellers in the area. Technically, the site is built on WordPress CMS, leveraging popular plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. Google Analytics is integrated with a consent management mechanism, indicating attention to privacy compliance. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected and no public security or incident response policies are available. The WHOIS data is notably missing due to a domain registration error, which raises concerns about domain legitimacy and requires further investigation. Overall, the website is professional, user-friendly, and compliant with privacy regulations, but the domain registration anomaly is a critical point for trust assessment.

We Buy 2 Auction operates as a UK-based online auction platform specializing in monthly auctions and clearance services including container clearances, estate agent services, house clearances, and solicitor services. The company targets individuals and businesses interested in auctioning and purchasing items, particularly in the real estate and clearance sectors. The website is professionally designed with clear navigation and consistent branding, supporting a small-sized business founded in 2016. Technically, the site is built on WordPress using Elementor and AuctionForge plugins, leveraging modern web technologies such as jQuery and Swiper.js. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and secure forms, but lacks some recommended security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

G

Greenfield Estate Agents Limited

greenfield-property.co.uk

51

Greenfield Estate Agents Limited is a well-established real estate agency operating primarily in Surbiton and surrounding areas in the UK. With over 40 years of experience, they specialize in residential sales, lettings, property management, and land & new homes. The company leverages major property portals such as Rightmove and Zoopla to market properties effectively, offering premium listings and featured property adverts. Their website provides comprehensive property search functionality and detailed business information, including multiple contact points and customer testimonials, reinforcing their market credibility. Technically, the website is built on Joomla CMS and utilizes a modern tech stack including jQuery, Bootstrap, and lazy loading for images, ensuring good performance and mobile responsiveness. The site includes multiple interactive forms for property searches and registrations, with autocomplete features powered by third-party APIs. While no advanced security headers were detected, the site uses HTTPS and avoids exposing sensitive data, indicating a moderate security posture. From a security and compliance perspective, the website includes comprehensive privacy and cookie policies with consent mechanisms, indicating GDPR compliance. Certifications such as TPO and CMP are displayed, enhancing trust. However, WHOIS data for the domain is unavailable due to querying the 'www' subdomain, which is not a valid registered domain under Nominet rules. Despite this, the website content and contact information strongly indicate a legitimate and established business. Overall, Greenfield Estate Agents presents a professional and trustworthy online presence with good technical implementation and compliance practices. The main risk area is the lack of visible advanced security headers and the WHOIS data anomaly, which is likely a technical querying issue rather than a legitimacy concern.

C

Caudwell

caudwellcollection.com

56

Caudwell is a luxury real estate developer specializing in high-end residential properties located in prestigious areas such as Mayfair, London, and the Côte d’Azur. The company emphasizes timeless and elegant design, collaborating with renowned architects and designers to create unique residences. The website reflects a strong market position targeting affluent buyers and investors seeking bespoke and legacy real estate projects. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. The site is well-optimized for SEO and mobile devices, offering a professional user experience. Security posture is good with HTTPS and anonymized analytics, though some security headers and explicit policies could be improved. The absence of WHOIS registration data is a notable concern, but the presence of comprehensive contact details, privacy policies, and press coverage supports the business's legitimacy. Overall, the website is professional and trustworthy, with recommendations to enhance security headers and transparency.

Heitman LLC operates as a real estate investment management firm specializing in private equity, private debt, and public equity investment strategies. The company targets institutional and professional investors seeking real estate investment opportunities. The website presents a professional and consistent brand image with multi-language support, reflecting a global presence and a mature business model. The content emphasizes investment excellence and a long history, although the founding year is not explicitly stated. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Swiper.js, and Google Maps API. It integrates marketing and analytics tools including Google Analytics and Pardot, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for compliance and security hardening. The absence of WHOIS data raises some concerns about domain registration transparency, although the website content and references to SEC filings support legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced security headers, privacy compliance improvements, and clearer contact information to strengthen user trust and regulatory adherence.

P

Phillips Solicitors Limited

phillips-law.co.uk

64

Phillips Solicitors Limited is a well-established UK law firm with over 40 years of experience, operating primarily in Hampshire with offices in Basingstoke, Farnborough, and Yateley. The firm offers a broad range of legal services including corporate, commercial, property, family, employment, and immigration law, targeting both businesses and individual clients. Their market position is strengthened by multiple accreditations, client testimonials, and a strong regional presence. Technically, the website is built on WordPress with modern integrations such as HubSpot, Google Analytics, and Trustpilot, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, DNSSEC, and reCAPTCHA protections, although there is room for improvement in HTTP security headers and incident response transparency. Overall, the website demonstrates good privacy compliance and business credibility, making it a trustworthy platform for legal services.

B

Bell Homes

bellhomes.com

48

Bell Homes is a regional property developer specializing in new build housing across Herefordshire and Gloucestershire, UK. The company emphasizes family values and quality living, targeting home buyers including first-time purchasers. Their website showcases current developments, customer testimonials, and detailed property information, reflecting a medium-sized business with a history dating back to 1968. Technically, the site is built on WordPress with Elementor and uses modern SEO and marketing tools such as Google Analytics and Ads. Security measures include HTTPS, reCAPTCHA on forms, and a comprehensive cookie consent mechanism, although explicit security policies and incident response information are not published. The absence of WHOIS data for the domain reduces domain registration trustworthiness, but the website content and social media presence support the company's legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR, with room for improvement in security transparency and domain registration verification.

L

Lee Evans Partnership LLP

lee-evans.co.uk

51

Lee Evans Partnership LLP is a UK-based award-winning architecture, planning, heritage, and interior design practice with offices in Canterbury and London. The company targets clients seeking professional architectural and planning services. Their website reflects a professional and consistent brand image with clear service offerings and a focus on quality design. The business appears to be a small-sized firm founded around 2016, with a solid market position in the real estate and design sector. Technically, the website is built on WordPress CMS using modern technologies such as jQuery, Bootstrap, Google Analytics, and Google Maps API. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are lacking. The security posture is solid but could be improved by adding security headers, publishing security policies, and implementing GDPR-compliant cookie consent. The absence of WHOIS data due to an invalid query limits domain trust verification but the professional website and social media presence support legitimacy. Overall, the site is safe, professional, and trustworthy with room for privacy and security enhancements. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, publishing incident response contacts, and regular security audits to maintain trust and compliance.

G

Gilbert-Ash

gilbert-ash.com

64

Gilbert-Ash is a well-established UK-based construction contractor specializing in construction, refurbishment, and fit out services across multiple sectors including education, healthcare, residential, and hospitality. The company has a strong market presence with a portfolio of landmark projects and recognition as one of the UK's best places to work. Their website reflects a professional and consistent brand image targeting clients and stakeholders in the construction industry. Technically, the website uses modern JavaScript frameworks (Vue.js), integrates Google Analytics and Tag Manager for tracking, and hosts media assets on DigitalOcean Spaces. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided with multiple office phone numbers and social media presence. Overall, the website is trustworthy and professionally maintained, though improvements in security and privacy compliance are recommended.

C

Coverwood

coverwoodlakes.co.uk

61

Coverwood is a diversified small business operating primarily in the Surrey Hills region of the United Kingdom. The company offers a range of services including pedigree Hereford cattle farming, land management, wedding venue hosting, premium mobile catering under 'The Fillet and Bean', holiday cottage rentals, and chartered surveying services. This multi-faceted business model targets local and regional customers interested in agriculture, hospitality, and property consultancy. The website reflects a consistent and professional brand presence with good content quality and clear navigation, supporting its market position as a niche regional provider.

F

Farmtrack

farmtrack.co.uk

50

Farmtrack is a small UK-based chartered surveying firm specializing in property and professional surveying services. The website presents a professional image with clear contact details and company branding. The technical infrastructure is based on WordPress with the Divi theme, leveraging common web technologies such as jQuery and FontAwesome. The site is accessible, mobile-optimized, and performs moderately well. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable due to domain registration issues, which raises some concerns about domain legitimacy despite the professional website content. Overall, the business appears credible but would benefit from improved compliance and security transparency.

E

Elliott Wood

elliottwood.co.uk

69

Elliott Wood is a professional engineering consultancy based in the United Kingdom, specializing in structural engineering, sustainability, digital BIM, development infrastructure, and heritage conservation. The company positions itself as a certified B Corp committed to engineering a better society through innovative and sustainable design solutions. Their website reflects a mature digital presence with comprehensive service descriptions, multimedia content, and multiple contact channels, targeting clients and organizations in the built environment sector. Technically, the website is built on Craft CMS and employs modern web technologies including HTML5, CSS3, JavaScript, and third-party integrations such as Vimeo for video content and Swiper.js for carousels. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism and Google Tag Manager integration for analytics and marketing. From a security perspective, the site enforces HTTPS and uses cookie consent management but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to domain registration anomalies, which may be a result of querying the 'www' subdomain rather than the root domain, but the website itself appears legitimate and professionally maintained. Overall, Elliott Wood's website demonstrates strong business credibility and technical implementation with room for improvement in security transparency and WHOIS data clarity. The risk level is moderate with no critical issues detected.

C

Cheffins

cheffins.co.uk

61

Cheffins is a well-established UK-based firm specializing in property, land, fine art, and farm machinery auctions and advisory services. With over 200 years of history, it holds a strong market position in the real estate and auction sectors, serving a diverse clientele including property buyers, sellers, and investors. The website reflects a professional business model focused on service delivery across multiple specialized sectors. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Hotjar, and Cookiebot for analytics and compliance. The site is well-structured with good navigation and mobile optimization, although some accessibility features could be enhanced. Security posture is solid with HTTPS and cookie consent mechanisms in place, but lacks visible security headers and explicit privacy or security policies. The WHOIS data query failed due to querying the subdomain 'www.cheffins.co.uk' instead of the registered domain, but the active website presence and professional content indicate legitimacy. Overall, the site is trustworthy with moderate to good security and privacy compliance, but could improve transparency and security best practices.

C

Carlain Student Houses

carlainproperty.co.uk

41

Carlain Student Houses operates as a specialist provider of student accommodation in Cheltenham, Gloucestershire, and Oxford. The company focuses on renting quality student houses located near college campuses, targeting students seeking convenient and comfortable living arrangements. Their market position is that of a niche real estate letting agency with a strong local presence and a portfolio of properties tailored to student needs. The website reflects a professional business model centered on property lettings and management services, supported by social media engagement and certifications that enhance trust. Technically, the website employs a moderately modern infrastructure including jQuery, Google Tag Manager, Google Analytics, and Google reCAPTCHA v3 for form security. The CMS appears to be CMS Made Simple, which is a common but somewhat dated platform. The site is mobile-optimized with good navigation and SEO practices, though some technical improvements could be made, such as updating libraries and adding security headers. From a security perspective, the site benefits from HTTPS and anti-bot measures on forms but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data and domain registration details is a notable concern, potentially indicating domain registration irregularities. However, the website content and business information are consistent and professional, mitigating some trust concerns. Overall, the site presents a low to moderate risk profile with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, updating technical components, and clarifying domain registration information to strengthen legitimacy and trust.

Hiltis UK Ltd is a small, family-oriented construction company based in the United Kingdom, specializing in general building work, new builds, extensions, and refurbishment projects primarily in Surrey. The company emphasizes quality craftsmanship, competitive pricing, and customer support, backed by a 6-year insurance guarantee under the JCT building contract. Their website reflects a professional and consistent brand image with clear service descriptions and customer testimonials, targeting residential and commercial property owners seeking reliable construction services. Technically, the website is built on WordPress using the Enfold theme and Avia Framework, incorporating standard web technologies such as jQuery and Google Web Fonts. The site is hosted by Ionos SE and uses HTTPS with a good SSL configuration. Mobile optimization and navigation clarity are good, though some SEO and accessibility features could be improved. The site includes a cookie consent mechanism compliant with GDPR, indicating awareness of privacy regulations. From a security perspective, the website enforces HTTPS and uses cookie consent banners but lacks explicit security headers and up-to-date WordPress core versions, which could expose it to vulnerabilities. No incident response or security policy information is publicly available. No suspicious or malicious content was detected, and the domain registration is consistent with the business history, enhancing trustworthiness. Overall, the website presents a trustworthy and professional image with room for technical and security improvements. Strategic recommendations include implementing security headers, updating WordPress and plugins, publishing security policies, and enhancing SEO and accessibility to strengthen digital maturity and security posture.

Blackstone Mortgage Trust (BXMT) is a publicly traded commercial mortgage REIT specializing in real estate credit investments across North America, Europe, and Australia. Managed by Blackstone Inc., the largest owner of commercial real estate globally, BXMT leverages significant data, resources, and a global platform to underwrite complex transactions and partner with leading sponsors. The website presents comprehensive investor information, financial disclosures, and market positioning that reflect a mature and professional business entity. Technically, the website is built on WordPress with modern SEO and accessibility practices, integrating advanced analytics and monitoring tools such as New Relic and Google Tag Manager. The site is well-optimized for performance and mobile responsiveness, with a clear navigation structure and consistent branding. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. While explicit security policies and incident response contacts are not published, the use of monitoring tools and privacy policies indicates a reasonable security posture. The absence of WHOIS registration data is a concern but is mitigated by the strong brand presence and external references to Blackstone domains. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its investor audience. Strategic recommendations include publishing explicit security policies, incident response contacts, and improving WHOIS transparency to enhance trust further.

C

Commercial Real Estate Development Association

naiop.org

62

The Commercial Real Estate Development Association (CREDA) is a leading professional organization dedicated to advancing commercial real estate development across North America. The association provides a comprehensive suite of services including industry education, advocacy on legislative priorities, research publications, and networking opportunities through events and chapters. CREDA targets commercial real estate professionals such as developers, owners, investors, and industry stakeholders, positioning itself as a key resource and thought leader in the sector. Technically, the CREDA website is built on the EPiServer CMS platform and leverages modern web technologies including jQuery, Google Analytics, Microsoft Application Insights, and various UI libraries for a responsive and user-friendly experience. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate with room for optimization. From a security perspective, the website enforces HTTPS and employs CAPTCHA on forms to mitigate abuse. However, no explicit security headers were detected in the provided data, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR considerations. The WHOIS data is unavailable or privacy-protected, which is common for organizations of this nature. Overall, CREDA presents a professional, trustworthy, and content-rich online presence with a solid technical foundation. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its security posture and user trust.

K

Karpinski Engineering

karpinskieng.com

51

Karpinski Engineering is a well-established professional engineering firm founded in 2004, specializing in mechanical, electrical, plumbing, technology systems, and related consulting services. The company targets organizations and design professionals across healthcare, education, corporate, hospitality, and community sectors. Their website reflects a mature digital presence with a modern design, clear navigation, and mobile optimization. The technical infrastructure leverages Craft CMS and modern frontend libraries such as Swiper.js and Typekit fonts, indicating a contemporary technology stack. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, though there is room for improvement in security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with basic privacy standards, though explicit GDPR compliance and incident response information are lacking.

T

The Tythegston Estate

tythegston.com

42

The Tythegston Estate operates a family-run real estate rental business specializing in cottages and industrial estate properties located in South Wales near the M4 motorway and the coast. The website presents a professional and consistent brand image emphasizing the estate's long family history and high-quality rental properties. The target audience includes individuals and families seeking rural rental homes with convenient transport links. Technically, the website is built on the Concrete5 CMS with the Foundation framework, uses jQuery, and integrates Google Analytics for visitor tracking. The site is served over HTTPS, ensuring secure connections, but lacks some security headers and privacy-related policies. Security posture is moderate with no visible vulnerabilities, but improvements are recommended in privacy compliance and security best practices. The absence of WHOIS data for the domain is a concern and warrants further verification to confirm domain legitimacy. Overall, the website is functional, trustworthy in content, but could improve in compliance and security transparency.

G

Geobear UK

geobear.co.uk

66

Geobear UK is a specialized ground engineering company focused on providing fast, non-disruptive solutions for residential and commercial foundation problems caused by subsidence. The company positions itself as a niche expert in subsidence repair across the UK, targeting homeowners and commercial property owners. Their key services include subsidence repair, residential foundation stabilization, and infrastructure ground engineering. The website reflects a professional and consistent brand image with clear navigation and contact options, supporting their market position. Technically, the website is built on the HubSpot CMS platform, utilizing modern technologies such as Bootstrap for responsive design, Google Tag Manager for analytics management, and Cookiebot for privacy compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Hosting appears to be supported by Cloudflare, enhancing performance and security. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms that comply with GDPR. Security headers are partially detected or implied, and no critical vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is privacy-protected, which is common for businesses of this type, and does not raise immediate trust concerns given the professional website presence. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing explicit security headers, continuous monitoring of third-party scripts, and ensuring robust form security to maintain and improve the security posture.

M

Modus Workspace Ltd.

modusgroup.com

60

Modus Workspace Ltd. is a UK-based medium-sized company specializing in office design, build, and workplace innovation services. Established in 2015, the company positions itself as an expert in creating creative and functional workspaces, targeting businesses seeking modern office solutions. Their website reflects a professional and comprehensive presentation of their services, including consultancy, office fit-out, refurbishment, and relocation. The company leverages modern digital tools such as WordPress CMS, HubSpot forms, and Google Tag Manager to manage content, marketing, and analytics effectively. Security-wise, the website uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, some security headers are missing, and no explicit security or incident response policies are published. The domain registration data aligns well with the business claims, showing a long-term registration without privacy protection, enhancing trust. Overall, the website is well-optimized for SEO, mobile-friendly, and provides multiple contact channels, supporting a high level of business credibility.

Colliers is a leading global real estate services and investment management company, offering a comprehensive range of services including brokerage, property management, and consulting. The website reflects a strong market position with professional branding and extensive regional presence, targeting real estate investors, occupiers, and owners. Technically, the site employs modern technologies such as Google Tag Manager, OneTrust for cookie consent, and Cloudflare for security, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and bot protection mechanisms, although explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates high professionalism and trustworthiness, with minor gaps in publicly available security documentation.

C

CD SURVEYS LTD

cdsurveys.com

56

CD SURVEYS LTD is a professional land surveying and site engineering service provider established in 2001 in the United Kingdom. The company offers a comprehensive range of surveying services including land surveying, site engineering, measured building surveying, 3D laser scanning, and drone survey systems. Their website reflects a well-structured and professional digital presence targeting businesses and professionals in real estate and transportation sectors. The company maintains active social media profiles on Facebook, Twitter (X), LinkedIn, and Instagram, enhancing their market reach and customer engagement. Technically, the website is built on WordPress using Elementor and integrates modern SEO tools like Rank Math. It employs Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is hosted with DNS managed by Cloudflare, ensuring reliable DNS resolution. Performance and mobile optimization are good, though accessibility features are basic. The website uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced security. From a security perspective, the site has no visible security policy, incident response information, or vulnerability disclosure mechanisms. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly presented, but no forms were detected in the analyzed content. The domain WHOIS data is consistent with the business claims, showing a long-standing registration since 2001, which supports the legitimacy of the company. Overall, CD SURVEYS LTD presents a trustworthy and professional online presence with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen their security posture and regulatory compliance, thereby increasing customer trust and reducing risk.

A

Andrews Property Group

andrewsonline.co.uk

70

Andrews Property Group is a well-established real estate agency operating across the South of England, with a history spanning 80 years and ownership by the Andrews Charitable Trust. The company offers a comprehensive suite of property-related services including sales, lettings, mortgages, auctions, and property management, targeting buyers, sellers, renters, and landlords in the UK market. Their website reflects a professional and consistent brand image with clear navigation and detailed service information. Technically, the site is built on Starberry CMS and leverages modern web technologies such as RequireJS, Bootstrap, and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and Microsoft Clarity. Hosting appears to be on Amazon Web Services with Elastic Load Balancing and Cloudflare protection. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data query failed due to an invalid domain format including 'www', but the site is accessible and legitimate. Overall, the website demonstrates a mature digital presence with strong business credibility and privacy compliance.

C

Chartwell Group Limited

chartwell-group.com

60

Chartwell Group Limited is a UK-based luxury renovation, construction, and development company with over two decades of experience, serving an international clientele. The company positions itself as a premium service provider specializing in designing dream homes and high-end property projects. Their website reflects a professional digital presence built on WordPress, enhanced with SEO tools and social media integration, targeting affluent homeowners and property developers. Technically, the site uses modern web technologies including Google Tag Manager and Font Awesome, hosted likely via GoDaddy infrastructure. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the website employs HTTPS but lacks advanced DNS security measures like DNSSEC and does not implement security headers, which could expose it to certain web-based attacks. The absence of privacy and cookie policies indicates compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure mechanisms are present, limiting transparency in security management. The presence of a suspicious external domain in scripts raises minor concerns. Overall, the security posture is moderate but requires improvements to meet best practices. The business credibility is supported by consistent WHOIS data, domain age, and active social media presence. However, the lack of direct contact emails or phone numbers on the homepage reduces immediate trust signals. The website content is relevant and professionally presented, with no adult or questionable content detected, making it safe for general audiences. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear security contact information to enhance trust and compliance.

W

Warren Hughes Ltd

warrenhughes.com

55

Warren Hughes Ltd is a small, family-run bespoke joinery business based in Tiverton, Devon, UK, with over 30 years of experience. They specialize in custom wooden products including staircases, kitchens, timber framed homes, windows, and doors, serving both commercial and residential clients across the UK and internationally. The company emphasizes craftsmanship and has a portfolio including notable commercial projects. The website is built on the Wix platform, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and business information appear professional and trustworthy. Overall, the site presents a credible business but would benefit from improved privacy compliance and security practices.

L

Liberty QS Ltd

libertyqs.com

55

Liberty QS Ltd is a small construction consultancy firm established in 2014, specializing in cost and project consultancy to ensure construction projects are delivered on time and within budget. The website presents a professional image with a clear focus on construction project management services, targeting clients in the construction and real estate sectors. The digital infrastructure is based on WordPress CMS using the Brooklyn theme by United Themes, hosted likely on one.com. The site is moderately optimized for performance and mobile devices, with good SEO practices but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are missing and no explicit security policies are published. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Privacy compliance is minimal, with no privacy or terms of service pages found, though a cookie consent banner is present. Overall, the website is functional and professional but would benefit from improved transparency and security practices.

S

Storewithus Self Storage Bridgend

storewithus.co.uk

63

Storewithus Self Storage Bridgend operates a professional self storage and flexible office space business serving Bridgend and surrounding areas in the UK. The company offers indoor and outdoor storage units, container storage, caravan and motorhome storage, along with free van hire and insurance. Their market position is that of the largest and best value self storage provider in Bridgend, supported by customer testimonials and CaSSOA Platinum certification. The website is well designed with clear navigation and good content quality, targeting domestic and business customers seeking storage solutions. Technically, the site uses modern web technologies including service workers and integrates Google Analytics and Trustpilot for analytics and reputation management. Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and policies are missing. Privacy compliance is basic with a cookie notification but no clear privacy or terms pages. WHOIS data is unavailable due to domain naming errors, which lowers trustworthiness from a domain registration perspective. Overall, the site is professional and trustworthy in content but would benefit from improved compliance and security disclosures.

F

FHP

fhp.co.uk

49

FHP is a professional commercial estate agency operating primarily in Nottingham, Derby, Birmingham, and the Midlands. They offer a comprehensive range of services including property search, sales and lettings, acquisitions, valuations, business rates consultancy, rent reviews, lease renewals, development consultancy, expert witness services, EPCs, and property management. The company positions itself as a leading regional player with a strong focus on commercial real estate sectors such as retail, office, industrial, student accommodation, education, land, investment, and compulsory purchase. The website is well-maintained, professionally designed, and provides clear contact information and social media presence, enhancing business credibility.

S

Surveying Solutions

surveying-solutions.co.uk

57

Surveying Solutions is a small, independent building surveying consultancy offering personalized and professional services. The website is built on the Framer platform and hosted on framerusercontent.com, reflecting a modern but basic technical infrastructure. The site design is professional and content relevant, targeting clients seeking building surveying consultancy. However, the absence of privacy, cookie, and terms of service policies, as well as lack of explicit contact information, limits its compliance and business credibility. The WHOIS data indicates domain registration issues, which raises concerns about domain legitimacy despite the active website presence. Security posture is weak due to missing security headers and unclear SSL configuration. Overall, the website is functional and professional but requires improvements in security, compliance, and transparency to enhance trust and reduce risk.

B

Bouygues UK

bouygues-uk.com

59

Bouygues UK is a prominent construction and property development company operating in the United Kingdom, specializing in sectors such as healthcare, education, residential, and commercial developments. As a subsidiary of the global Bouygues Construction group, it leverages extensive expertise and resources to deliver innovative and sustainable building projects. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency, targeting business and public sector clients. Technically, the site is built on WordPress with modern libraries and plugins enhancing user experience, SEO, and accessibility. The presence of cookie consent mechanisms and privacy policies indicates good privacy compliance. However, the absence of explicit security headers and missing WHOIS data represent areas for improvement in security transparency and trust. Security posture is generally strong with HTTPS enforced and a visible fraud alert to protect users. No critical vulnerabilities or exposed sensitive data were detected. The lack of an incident response contact or vulnerability disclosure policy suggests room for enhancing security readiness. Overall, the website is professional and trustworthy, though the WHOIS inconsistency and minor security header omissions slightly reduce the trust score. Strategic improvements in security transparency and incident response communication would further strengthen the company's digital security stance.

C

Curl la Tourelle Head

cltarchitects.co.uk

51

Curl la Tourelle Head is a UK-based architecture firm specializing in sustainable, innovative, and community-focused design. Their website showcases a portfolio of award-winning projects emphasizing empathy, constraints-driven design, and environmental responsibility. The firm targets clients and communities seeking exemplary architectural solutions that integrate social and environmental considerations. Technically, the website is built on a modern React and Gatsby framework, delivering fast performance and excellent mobile optimization. Security posture is good with HTTPS enabled, but lacks explicit security headers and privacy policies, which are recommended for improvement. Overall, the site is professional and trustworthy, though the WHOIS data indicates domain registration issues that merit further investigation to confirm domain legitimacy.

W

Westcountry Gates & Barriers

westcountrygates.co.uk

43

Westcountry Gates & Barriers is a specialized gate automation company based in Plymouth, Devon, serving residential and commercial customers across Devon and Cornwall. They offer bespoke automatic gates, barriers, and access control systems powered by electric or solar energy. The company is a trading name of Solar Access Systems Ltd, with clear contact details and trust indicators such as Safe Contractor approval and company registration information. The website is professionally designed with good content quality and clear navigation, targeting property owners seeking secure and automated gate solutions. Technically, the website uses a moderately modern technology stack including Bootstrap 3, jQuery, Google Analytics, and Google reCAPTCHA for form security. While the site is mobile responsive and SEO optimized, some technologies are dated and security headers are not detected, which could be improved. The site lacks a cookie consent mechanism and explicit GDPR compliance indicators, though privacy and terms pages exist. Security posture is moderate with use of HTTPS assumed but not confirmed, and no visible security headers. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional website content. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website presents a trustworthy business front with room for improvement in security best practices and privacy compliance. The domain registration inconsistency is a notable risk factor that should be addressed to enhance trust and legitimacy.

B

Bradley Hall

bradleyhall.co.uk

60

Bradley Hall is a well-established real estate business specializing in commercial and residential property services in the North East of the UK. The company offers a broad range of services including estate agency, lettings, auctions, planning, surveying, and property management. Their website reflects a professional brand with over 30 years of experience, targeting property buyers, sellers, and renters. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Maps API, Google Analytics, and Hotjar for enhanced user experience and analytics. Security posture is good with HTTPS and reCAPTCHA implemented, though some security headers and explicit policies are missing. Privacy and cookie policies are present and GDPR compliant. The WHOIS data is unavailable or inconsistent, which raises some concerns about domain registration transparency but does not directly undermine the website's legitimacy. Overall, the site is professional, user-friendly, and trustworthy with room for improvement in security documentation and WHOIS transparency.

G

Galliard Homes Limited

galliardhomes.com

67

Galliard Homes Limited is a well-established UK-based property developer specializing in residential developments, primarily in London and surrounding areas. With over 30 years of experience, the company offers new build homes, luxury apartments, and buy-to-let investment opportunities. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple interactive features such as property search forms and development showcases. The company maintains active social media profiles and provides detailed business and contact information, enhancing trust and transparency. Technically, the website is built on Drupal 11 with modern front-end libraries and integrates various marketing and analytics tools including Google Analytics, HubSpot, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and accessible, though some security best practices like security headers could be improved. The SSL configuration is strong, ensuring secure communications. Security posture is generally good with HTTPS enforced and no visible vulnerabilities in the HTML content. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve security readiness. Overall, the website is professional, trustworthy, and well-suited for its target audience of property buyers and investors. Strategic improvements in domain registration transparency and security headers would further strengthen its security and credibility.

B

Blayze Group

blayzegroup.com

70

Blayze Group is a specialized talent and leadership recruitment consultancy serving the Real Estate, Construction, Infrastructure, and Professional Services sectors globally. The company positions itself as a trusted advisor, focusing on mid to senior leadership roles and providing end-to-end talent solutions including employee development and management strategy enablement. The website reflects a professional and consistent brand with a clear sector focus and client partnerships with leading organizations. Technically, the website is built using modern frameworks such as Next.js and React, with good mobile optimization and moderate performance. The use of Google Fonts and Swiper.js indicates a contemporary tech stack. However, there is no explicit CMS or hosting provider information detected. SEO and accessibility are adequately addressed, though accessibility could be improved. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure information is present, which could be improved to enhance trust and compliance. No WHOIS data was found, which slightly reduces trust but the professional site and client logos mitigate concerns. Overall, the site presents a low risk but would benefit from enhanced privacy compliance, contact transparency, and security best practices to improve trustworthiness and regulatory adherence.

S

Sharps Commercial

sharpscommercial.co.uk

50

Sharps Commercial is a commercial property surveying firm that has merged with Haslams Surveyors LLP as of March 1, 2023, to strengthen their market presence across the Thames Valley region in the UK. The website serves primarily as a merger announcement and redirects visitors to the Haslams Surveyors LLP website for further information. The business model focuses on professional surveying services within the real estate sector, targeting commercial property clients in the Thames Valley area. The site content is minimal but professional, emphasizing the strategic merger and combined market share benefits. Technically, the website is built on the Webflow platform, utilizing Google Fonts and jQuery for frontend functionality. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Hosting is provided by Webflow, and no advanced frameworks or analytics tools are detected. The site performance is moderate, with no evident broken elements or errors. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which reduces its compliance posture. The WHOIS data indicates the domain www.sharpscommercial.co.uk is not registered due to Nominet UK naming rules, suggesting the domain is either parked or transitional. This reduces trustworthiness from a domain registration standpoint. No contact information or incident response details are provided, limiting transparency. However, the site uses HTTPS and does not display any suspicious or vulnerable elements. Overall, the website presents a low-risk profile but has room for improvement in privacy compliance, security best practices, and business transparency. The domain registration inconsistency is a notable concern but is mitigated by the professional content and clear redirect to a legitimate partner site.

Rodgers & Johnston Ltd is a well-established property maintenance company founded in 1968, specializing in multi-trade planned and reactive repairs primarily for housing associations and local authorities in central Scotland. Their services include reactive maintenance, planned maintenance, out-of-hours emergency repairs, medical adaptations, and void works. The company emphasizes personal service, tenant well-being, and holds multiple industry certifications such as ISO 45001, ISO 9001, and ISO 14001, reflecting a commitment to quality and safety. Technically, the website is built on a modern Bootstrap framework with jQuery and other common libraries, providing a responsive and user-friendly experience. However, there is no evidence of advanced analytics or tracking, and no CMS is detected. The site lacks privacy and cookie policies, which indicates gaps in compliance with data protection regulations. Security headers are not evident, and WHOIS data for the domain is missing or invalid, which raises concerns about domain registration legitimacy. From a security perspective, the site shows basic good practices such as no exposed sensitive data and no vulnerable libraries detected. The absence of security headers and privacy policies, however, lowers the overall security posture. The WHOIS inconsistency suggests a need for domain registration verification. Overall, the website is professional and trustworthy in content but requires improvements in security and privacy compliance. The overall risk is moderate with recommendations to implement security headers, privacy and cookie policies, verify domain registration, and establish incident response contacts to enhance trust and compliance.