Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,001–5,050 of 99,069
- Cceilings-and-partitions.com | 521: Web server is down
ceilings-and-partitions.com
Other
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.ceilings-and-partitions.com is currently inaccessible due to a Cloudflare Error 521 indicating the origin web server is down. The WHOIS lookup returned no registration data, suggesting the domain may be unregistered, inactive, or improperly configured. The site lacks any visible business information, contact details, privacy or cookie policies, and contains no content beyond the error message. Technically, the site uses Cloudflare as a CDN and WAF, but the origin server is not responding, resulting in a poor technical and security posture. The absence of HTTPS validation and security headers cannot be confirmed due to lack of access. Overall, the website presents a very low trust and credibility profile with critical issues preventing meaningful analysis.
Other
54Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.safeinteesvalley.org is currently inaccessible, returning a 403 Forbidden error which blocks all content and metadata retrieval. Due to this, no business information, contact details, or technical infrastructure data can be extracted or analyzed. The WHOIS query also failed with a malformed request, providing no registrar, creation, expiry, or registrant details, further limiting trust and legitimacy assessment. The lack of accessible content and WHOIS data suggests either a misconfiguration or intentional restriction of the domain. From a security perspective, the absence of accessible content and metadata prevents evaluation of security headers, SSL configuration, or compliance policies. Overall, the site’s digital maturity and security posture cannot be positively assessed, resulting in a low trust and credibility score.
Wisdom Toothbrushes Limitedwisdom-toothbrushes.com
Retail · United Kingdom
51Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Wisdom Toothbrushes Limited operates a professional e-commerce website specializing in oral care products including manual and power toothbrushes, teeth whitening, gum health, and eco-friendly products. The company targets general consumers in the UK and has a strong market presence supported by over 200 years of brand heritage. The website is well-branded, consistent, and provides comprehensive product ranges and oral health advice. Technically, the site is built on WordPress with WooCommerce, leveraging modern JavaScript frameworks and caching technologies to deliver a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, with clear contact information and active social media engagement.
ServiceCal Ltdservicecal.co.uk
Other · United Kingdom
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
ServiceCal Ltd is a UK-based calibration and repair service provider accredited by UKAS 17025 since 1985. The company offers a broad range of calibration and repair services for various instruments, serving businesses across the UK, particularly in the Northwest and Greater Manchester area. Their business model includes laboratory and on-site calibration, managed services, and nationwide collection and delivery. The website is professionally designed with clear navigation and good content quality, supporting their market position as an established calibration laboratory. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security measures include HTTPS and Google reCAPTCHA, but lack visible security headers and explicit security policies. Privacy compliance is partial, with privacy and cookie policies present but no active consent mechanism. The security posture is moderate; no critical vulnerabilities or exposed sensitive data were detected, but the absence of security headers and incomplete privacy compliance are areas for improvement. The WHOIS lookup failed due to domain naming issues, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website presents a trustworthy and professional business front, but domain registration inconsistencies and some security best practices gaps suggest the need for further verification and enhancements to strengthen trust and compliance.
SAS Internationalsasint.co.uk
Manufacturing · United Kingdom
64Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
SAS International is a well-established British manufacturer specializing in metal ceilings and bespoke architectural metalwork, serving commercial clients across the UK and internationally. The company positions itself as a leader in innovation, acoustic expertise, and quality manufacturing, with a strong portfolio of landmark projects. Their website reflects a mature digital presence with comprehensive product information, legal compliance documentation, and active social media engagement. Technically, the website employs modern JavaScript libraries, tracking tools, and responsive design frameworks such as Bootstrap. It integrates multiple analytics and marketing pixels, including Google Analytics, Facebook Pixel, and Pinterest tracking, indicating a moderate level of user tracking balanced with privacy compliance. The site uses HTTPS with reCAPTCHA v3 for bot protection, though it lacks some advanced security headers and explicit security policies. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, it could improve by publishing a security policy, incident response contacts, and implementing additional HTTP security headers. The domain WHOIS data aligns well with the business claims, showing a long-established domain with consistent registration details, enhancing trustworthiness. Overall, SAS International's website is professional, secure, and compliant with privacy regulations, supporting its market position as a reputable manufacturer. Strategic improvements in security transparency and accessibility could further strengthen its digital maturity and trust.
- SSecurity Verification
acornlabels.co.uk
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.acornlabels.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain is invalid or misconfigured. No business, contact, or policy information is accessible on the site, severely limiting the ability to assess the company's operations or legitimacy. The technical infrastructure shows use of modern libraries such as Bootstrap and Google reCAPTCHA, but no HTTPS or security headers information is available. Overall, the site exhibits a low security posture and poor digital maturity due to the blocking mechanism and lack of transparency.
Mercury Academic Ltdaccurate-solutions.co.uk
Education · United Kingdom
58Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Mercury Academic Ltd is a specialized software provider offering a leading administration system tailored for Oxbridge colleges, with a strong focus on quality, flexibility, and long-term customer collaboration since 1990. Their business model centers on B2B software solutions, consultancy, and training services targeted at academic institutions within Oxford and Cambridge. The website reflects a professional and consistent brand presence, emphasizing their niche market leadership. Technically, the site is built on Joomla CMS using the Helix Ultimate framework, incorporating modern web technologies such as Bootstrap, jQuery, and Google Fonts. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and CSRF protections, though lacking advanced security headers and formal security policies. Privacy compliance is basic, with a cookie consent banner and a privacy policy page, but no explicit GDPR compliance statements or terms of service. Overall, the domain registration is transparent and consistent with the business identity, supporting trustworthiness. The site uses Google Analytics for user tracking at a moderate level. No critical security issues or suspicious content were detected.
- Waterfront Conference Company
waterfrontconferencecompany.com
Transportation
53Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Waterfront Conference Company is a specialized event organizer focusing on transport and infrastructure sectors including planning, rail, energy, and ports. The company targets senior professionals and decision makers, offering conferences, events, and training services. The website reflects a mature business with over 30 years of experience, positioning itself as a leading provider in its niche. Technically, the site is built on WordPress with modern frameworks and libraries such as Bootstrap 5, jQuery, and FontAwesome, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is mobile optimized and SEO friendly with Yoast SEO plugin usage. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and advanced security headers. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. No direct contact emails or phone numbers are published, relying on contact forms for communication. Overall, the site is professional, trustworthy, and business-focused with no signs of malicious or adult content.
- HOME | K Howley Logistics
khowley.co.uk
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.khowley.co.uk appears to be a small-scale or personal site hosted on the Wix platform. The content is minimal and lacks clear business information, contact details, or privacy policies. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain is not properly registered or is invalid. This raises significant concerns about the legitimacy and ownership of the domain. Technically, the site uses standard Wix scripts and polyfills but lacks advanced SEO, accessibility, and security features. No security policies or incident response information are present, and no external business or partner domains are linked. Overall, the site has a weak security posture and poor privacy compliance, with minimal trust indicators.
B2B Marketing Agency | Proctor + Stevensonproctors.co.uk
—
75Medium
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
- SSecurity Verification
yorkhandmade.co.uk
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.yorkhandmade.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism preventing normal content retrieval. The domain WHOIS lookup failed due to the domain name being invalid per Nominet UK naming rules, which further questions the legitimacy or proper configuration of the domain. No business-related content, contact information, or policies are accessible, limiting the ability to assess the company's market position or services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or SSL configuration details in the provided data. Overall, the site’s security posture is minimal beyond bot protection, and the lack of accessible content results in a low trust and credibility score.
- SStuart Jones
stuartjones.co.uk
Manufacturing · United Kingdom
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Stuart Jones is a well-established handmade furniture manufacturer based in Sussex, United Kingdom, with over 40 years of experience specializing in upholstered headboards and a distinctive range of furniture. The company targets consumers and businesses seeking quality handcrafted furniture, positioning itself as a specialist with a strong reputation for craftsmanship and quality. The website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. However, the site lacks key compliance documents such as privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is generally good with HTTPS enabled, but the absence of security headers and incident response information suggests room for improvement. Overall, the domain age and WHOIS data strongly support the legitimacy of the business, and the presence of verified contact information and social media links enhance credibility.
- Wwww.lemin.co.uk
lemin.co.uk
—
52Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Newman Business Solutionshbbm.co.uk
Technology · United Kingdom
73Medium
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
Newman Business Solutions is a UK-based business systems consultancy specializing in print and document management, IT solutions and support, telecoms, visual display systems, and speech processing technologies. The company targets businesses primarily in the South East of the UK, offering integrated workplace technologies and tailored business process improvements. Their market position is that of an established regional supplier with over 40 years of industry experience, supported by positive customer reviews and a professional online presence. Technically, the website is built on WordPress with modern plugins such as WPBakery, Slider Revolution, and Yoast SEO, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS with no visible security vulnerabilities in the front-end code. However, some security headers are missing, and privacy compliance documentation is not evident. From a security perspective, the site enforces HTTPS and uses anti-spam measures but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data for the exact domain queried is unavailable due to a naming rules error, which raises some concerns about domain registration legitimacy, though the website content itself appears professional and trustworthy. Overall, the website presents a solid business offering with good technical implementation but should improve privacy compliance and security header implementation. The domain registration anomaly should be investigated further to ensure full legitimacy and trustworthiness.
- EE.John Spratley Limited t/a Spratley's of Mortimer
spratleys.co.uk
Transportation · United Kingdom
62Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Spratley's of Mortimer is a well-established, family-run automotive service and sales business located in Mortimer near Reading, Berkshire. The company specializes in car servicing, MOT testing, repairs, and used car sales, with a particular focus on Vauxhall vehicles. Their market position is that of a trusted local garage with over 60 years of experience and multiple industry certifications, serving a broad local customer base. The website provides comprehensive information about their services, pricing, and community involvement, reflecting a customer-centric approach without aggressive sales tactics. Technically, the website employs standard web technologies such as jQuery, Bootstrap, and a camera slideshow plugin, with a cookie consent mechanism in place. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, there is no evidence of advanced CMS or hosting details, and performance is moderate. Security headers and SSL configuration details are not visible, indicating room for improvement in security hardening. From a security perspective, the site shows basic compliance with privacy regulations, including a privacy policy and cookie consent banner. No explicit security policies or incident response contacts are found, and no vulnerabilities or tracking analytics are detected. The WHOIS lookup failed due to an invalid domain query including the 'www' prefix, but the website content aligns with a legitimate business. The lack of WHOIS data reduces the trust score somewhat but does not indicate malicious intent. Overall, the website is professional, trustworthy, and compliant with basic privacy standards. Strategic improvements in security headers, SSL configuration, and incident response transparency would enhance the security posture and trustworthiness further.
- UUnitron
unitron.com
Healthcare · Germany
74Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Unitron is a well-established hearing aid brand operating under the Sonova group, offering intelligent hearing solutions tailored to users' lifestyles. The website targets German-speaking consumers and professionals in the hearing health sector, providing product information, online hearing tests, and professional resources. Technically, the site is built on Adobe Experience Manager, employs modern analytics and consent management tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and standard best practices, though explicit security policies and incident response contacts are not visible. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and legitimacy of the business. Strategic recommendations include publishing clear privacy and security policies, adding vulnerability disclosure information, and enhancing transparency around data protection.
- CCoastline Veterinary Surgery - Carlton Colville
coastlinevets.co.uk
Healthcare · United Kingdom
64Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Coastline Veterinary Surgery - Carlton Colville is a small animal veterinary practice established in 1992, operating under the CVS Vets brand. The practice offers a range of veterinary services including surgery, treatment, routine check-ups, and emergency support, targeting pet owners in the Carlton Colville and Lowestoft area. The website is professionally designed, mobile-optimized, and provides clear contact information and service details. Technically, the site leverages modern technologies such as React and integrates analytics and monitoring tools like Google Analytics and New Relic, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the site presents a trustworthy and professional image with good compliance to privacy standards.
- Home | Inner London Cleaning
innerlondoncleaning.co.uk
Other
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.innerlondoncleaning.co.uk appears to be a small business site built using the Wix platform, presumably offering cleaning services in Inner London. However, the domain WHOIS lookup failed due to a naming rules violation, indicating the domain is not properly registered or is invalid. The website content is minimal with no visible contact information, privacy policies, or terms of service, which limits trust and credibility. Technically, the site uses standard Wix scripts and polyfills, with moderate performance and basic mobile optimization. Security posture is weak with no detected security headers or advanced configurations. Overall, the site lacks essential compliance and trust elements, posing a risk to users and limiting business credibility.
City Physiotherapy Portsmouthcity-physio.net
Healthcare · United Kingdom
55Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
City Physiotherapy Portsmouth is a small, established physiotherapy clinic based in Southsea, Portsmouth, offering expert treatment for back pain, neck pain, sports injuries, and other musculoskeletal issues. The business has been operating since 1994 and targets local residents seeking physiotherapy services. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. However, the domain WHOIS data is unavailable, raising questions about domain registration legitimacy. The site uses HTTPS and Google Tag Manager for analytics but lacks privacy and cookie policies, which impacts GDPR compliance. No security headers were detected, indicating room for security improvements.
- Clapton Country Club
claptoncountryclub.co.uk
Hospitality · United Kingdom
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Clapton Country Club is a small hospitality business located in East London, specializing in unique event venue services including weddings, private events, photoshoots, and creative industry gatherings. The venue emphasizes its distinctive upcycled interior design and offers food and fine wines with an ethical focus. The website is professionally designed, providing clear navigation and multiple contact channels including email, phone, and a newsletter signup form. Technically, the site is built on the Duda platform, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and Snowplow. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers are not explicitly detected and cookie consent mechanisms are absent. The WHOIS lookup for the www subdomain failed due to a naming rule violation, but this is a known limitation and does not detract from the site's legitimacy. Overall, the site presents a trustworthy and professional digital presence for a niche hospitality venue.
- GGrainger & Worrall
gwcast.com
Manufacturing · United Kingdom
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Grainger & Worrall is a well-established UK-based company specializing in complex aluminium sand casting and machining services, serving demanding industries such as automotive, aerospace, and defence. With over 70 years of experience and a strong market position as a subsidiary of Evolution Castings Group Limited, the company offers a comprehensive range of services from engineering and prototyping to machining and validation. Their website reflects a professional and modern digital presence, leveraging WordPress CMS and integrating multiple marketing and analytics tools to support business growth and customer engagement. The technical infrastructure is solid, hosted by Hosting UK, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, with cookie consent implemented but lacking detailed GDPR indicators and security policies. Overall, the website is trustworthy, well-branded, and effectively communicates the company's expertise and contact channels.
Forterraforterra.co.uk
Manufacturing · United Kingdom
71Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Forterra is a leading UK manufacturer specializing in essential clay and concrete building products, including bricks, blocks, precast concrete, façade systems, and roofing components. The company holds a strong market position with iconic brands such as London Brick and Thermalite, serving construction professionals, architects, and developers. Their business model focuses on manufacturing and direct supply, supported by technical resources and customer portals to enhance client engagement. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, Google Tag Manager, and Pardot for marketing automation. The site demonstrates excellent mobile optimization, SEO, and performance, with comprehensive privacy and cookie consent mechanisms in place. Security measures include HTTPS, Google reCAPTCHA v3, and cookie consent, though some security headers could be further enhanced. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is noted. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, but website content and business information strongly indicate legitimacy and an established presence. Overall, Forterra's website reflects a professional, secure, and compliant digital presence aligned with its business stature. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.
Origin Digital Ltddreamleagues.co.uk
Other · United Kingdom
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Dream Leagues is a London-based organizer of amateur football and netball leagues, offering a variety of small-sided football formats and additional services such as pitch hire, kids parties, and corporate events. The company targets amateur sports enthusiasts in London, providing professionally organized matches on high-quality pitches with FA qualified referees. The website reflects a well-structured business with a clear focus on community sports and family-friendly activities. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile optimized and includes a dedicated mobile app, enhancing user engagement and accessibility. However, some technical improvements are recommended, such as implementing security headers and cookie consent mechanisms to improve compliance and security posture. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and privacy compliance features. The WHOIS data reveals that the domain 'www.dreamleagues.co.uk' is not registered, which is a significant concern for domain legitimacy and trust. Despite this, the website content is professional and trustworthy, suggesting the domain discrepancy may be due to a subdomain or alternate domain usage. Overall, the website presents a credible and professional front for an amateur sports league organizer but should address domain registration issues and enhance security and privacy compliance to strengthen trust and reduce risk.
- Grasmere Academy
grasmereacademy.org.uk
Education · United Kingdom
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Grasmere Academy is a primary educational institution positioned as the only primary academy in North Tyneside, UK. The website serves to provide information about the academy's educational services targeting parents and guardians of primary school children. The business model is focused on delivering first-class primary education. The website is built on the Wix platform, leveraging Wix's CMS and hosting services, with a moderate level of technical maturity and mobile optimization. However, the site lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance documentation. The absence of WHOIS data and domain registration irregularities raise concerns about domain legitimacy, although the website content and hosting platform suggest a legitimate presence. Overall, the site is functional but requires improvements in security, privacy, and business credibility to enhance trust and compliance.
Simply 2 Let Limitedsimply2let.com
Real Estate · United Kingdom
57Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Simply 2 Let Limited is a small, established property letting and management company based in Great Yarmouth, UK. The company provides dedicated services to landlords and tenants, focusing on local lettings and property management. Their website reflects a professional and consistent brand image with clear contact details and service descriptions. The business appears to have been founded around 2017, aligning with the website's published content dates. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Cookie Consent, with integration of Google Maps API for location services. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks important security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS registration data is a significant concern, impacting the overall trustworthiness of the domain. Overall, the website is functional and professional but would benefit from improved security practices and verification of domain registration to enhance trust and compliance.
- Hextalls Law
hextalls.com
Other · United Kingdom
72Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Hextalls Law is a small UK-based legal services firm located in Bishop's Stortford, England. The company offers professional legal solutions targeting individuals and businesses in the region. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS3, and JSON-LD structured data. The site presents a professional design with clear contact information including a UK phone number and physical address, but lacks privacy and cookie policies, which are important for compliance and user trust. The domain WHOIS data is unavailable or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the website. Security posture is adequate with HTTPS enforced, but security headers and incident response contacts are missing. Overall, the site is safe for general audiences and provides relevant legal service information but requires improvements in privacy compliance and domain registration transparency.
- BBabcock Blueprint
cavendishnuclear.com
Energy · United Kingdom
70Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Cavendish Nuclear, a wholly-owned subsidiary of Babcock International Group, operates as a key player in the nuclear energy, defence, and civil decommissioning sectors. The company provides comprehensive nuclear lifecycle solutions including support for existing reactors, new construction, and advanced nuclear technology development. Their market position is strong within the UK and internationally, supported by strategic contracts and partnerships. Technically, the website is built on WordPress with modern plugins and frameworks, demonstrating good digital maturity and mobile optimization. Security posture is solid with HTTPS and consent management in place, though explicit security policies and incident response details are absent. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall business credibility remains high due to strong branding and professional content.
BAE Systems OneArcbisimulations.com
Technology · United States
71Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
BAE Systems OneArc is a leading global provider of defense and civilian training and simulation software, delivering synthetic environments that support modern defense needs. The company leverages decades of innovation in simulation, interoperability, and geospatial technology, backed by the scale and trust of BAE Systems. Their product portfolio includes virtual desktop training environments, geospatial tools, image generators, and interoperability solutions, complemented by professional services and training. The website reflects a mature, well-established business with a strong market position and trusted brand identity. Technically, the website is built on a modern WordPress CMS with a robust tech stack including Yoast SEO, Contact Form 7, and GDPR compliance plugins. It is hosted with reputable providers and uses Cloudflare DNS services. The site is fast, mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and shows good security hygiene with no exposed sensitive data. However, it lacks DNSSEC and some advanced HTTP security headers. There is no public security policy or incident response contact, which could be improved to enhance trust and compliance. Overall, the website presents a professional, trustworthy, and compliant digital presence for a large enterprise in the defense technology sector. Strategic improvements in DNS security and explicit security disclosures would further strengthen its posture.
- KKing and Moffatt
kingmoffatt.com
Energy · Ireland
52Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
King and Moffatt is a well-established Mechanical and Electrical Engineering Contractor operating primarily in the UK, Ireland, and Mainland Europe with over 45 years of experience. The company offers a broad range of services including electrical, mechanical, design and BIM, maintenance and energy services, controls and automation, and offsite prefabrication. Their website reflects a professional presence targeting construction industry clients and partners. Technically, the site is built on WordPress with modern plugins and tools, including Yoast SEO and accessibility features, indicating a moderate to good level of digital maturity. Security-wise, the site uses HTTPS and has no visible exposed sensitive data, but lacks some security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data for the domain is a notable anomaly that warrants further investigation to confirm domain legitimacy. Overall, the website is professional and trustworthy but could enhance its security and privacy compliance posture.
- Wwww.mrmediagroup.com
mrmediagroup.com
Other
50Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.mrmediagroup.com currently presents only a minimal placeholder page with the text 'Nothing to see here' and lacks any meaningful content, metadata, or business information. The domain WHOIS query returned no registration data, indicating the domain may be unregistered or the WHOIS data is not publicly available. This severely limits the ability to assess the business or technical maturity of the entity behind the domain. Technically, the site lacks HTTPS, security headers, and any detectable technologies or frameworks, reflecting a very low digital maturity level. Security posture is minimal with no evident best practices implemented. Overall, the site appears inactive or abandoned, posing a high risk for trust and legitimacy.
Balu Travelbalutravel.co.uk
Transportation · United Kingdom
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Balu Travel is a small, family-run travel agency based in the United Kingdom with over 60 years of experience. The company offers a range of travel-related services including worldwide flights and holidays, global e-visa processing, National Express coach bookings, and secure money transfer services. Their business model focuses on personalized customer care and competitive pricing, targeting travelers seeking reliable and affordable travel solutions. The website reflects a professional and trustworthy image with clear service offerings and customer testimonials. Technically, the website is built using standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Font Awesome icons. It demonstrates good mobile optimization and user experience with clear navigation and well-structured content. However, no advanced CMS or frameworks are detected, and performance is moderate. There is no evidence of analytics or tracking tools, which may indicate minimal user tracking. From a security perspective, the website lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. The WHOIS lookup for the domain failed with an error indicating the domain name is invalid per Nominet UK rules, raising concerns about domain legitimacy. No forms or data collection mechanisms are present, reducing risk exposure but also limiting user engagement features. Overall, while the website content and business presentation are strong and professional, critical issues around domain registration and privacy compliance reduce the trustworthiness and security posture. Strategic improvements in domain verification, security headers, and privacy policies are recommended to enhance credibility and compliance.
- CCarian Interiors Limited
carianinteriors.co.uk
Retail · United Kingdom
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Carian Interiors Limited is a small, family-run upholstery business based in Stratford upon Avon, UK, with over 20 years of experience. The company offers upholstery and reupholstery services, including custom fabric sourcing and professional recovery for chiropractic and sports massage benches. Recently, they expanded to include an online store for upholstery items and DIY supplies, targeting both local customers and professionals. The website is built on the IONOS Website Builder platform with integrated Ecwid e-commerce functionality, demonstrating moderate digital maturity with good mobile optimization and basic accessibility features. From a security perspective, the website uses HTTPS with a valid SSL certificate and employs a service worker for enhanced performance. A cookie consent banner is present, indicating some level of privacy compliance. However, the absence of detailed privacy, security policies, and security headers suggests room for improvement in security posture. The WHOIS lookup for the domain failed due to naming rules, indicating the domain queried is likely a subdomain or alias rather than a registered domain, which slightly impacts trustworthiness. Overall, the website presents a professional and trustworthy image for a small local business with a growing online presence. The technical infrastructure is adequate but could benefit from enhanced security measures and clearer privacy compliance documentation. Strategic improvements in these areas would strengthen the company's digital trust and compliance standing.
- ALERT Life Sciences Computing, S.A.
alert-online.com
Healthcare · Portugal
65Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
ALERT Life Sciences Computing, S.A. operates ALERT-ONLINE.COM as a professional healthcare software provider specializing in clinical software solutions including Electronic Medical Records (EMR), Health Information Exchange (HIE), and Business Intelligence systems. The company targets healthcare facilities, medical students, and professionals with a comprehensive suite of healthcare IT products and 24/7 support services. Their software is internationally adopted and complies with relevant certifications and standards. Technically, the website is built on Drupal 7 CMS with legacy jQuery and uses common web technologies including Shadowbox.js and Google Analytics. The site is moderately optimized for performance and mobile use, with good SEO and accessibility basics. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and uses outdated JavaScript libraries, which could pose risks. WHOIS data is missing, raising concerns about domain registration legitimacy, though the website content and branding are consistent and professional. Overall, the site presents a credible business front but should improve technical security and clarify domain registration details.
ABC Structures Ltdabcmarquees.co.uk
Hospitality · United Kingdom
61Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
ABC Structures Ltd, operating as ABC Marquees, is a well-established family-run business specializing in marquee hire and event services primarily in Sussex and surrounding counties. With over 30 years of experience, the company offers a comprehensive range of services including marquee hire for weddings, corporate events, and parties, along with accessories, event management, and unique offerings such as ice rink and bar hire. The website reflects a professional and customer-focused approach, targeting event planners and private clients seeking bespoke event solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz for GDPR compliance, supported by Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Performance is moderate, with a clean and structured design that facilitates user navigation and engagement. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to domain registration errors introduces some uncertainty regarding domain legitimacy, but the website content and business information appear credible and trustworthy. Overall, the site presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and resilience.
- KKrusty Loaf Ltd
krustyloaf.co.uk
Retail · United Kingdom
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Krusty Loaf Ltd is a traditional family-run bakery based in Norfolk, UK, specializing in wholesale bakery products including bread, savouries, and confectionery. The company serves local shops with daily fresh deliveries and maintains a retail presence. The website reflects a small business with a clear local market focus and consistent branding. Technically, the site is built on the Weebly platform using standard web technologies such as jQuery and Google Analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS implied, but lacks explicit security headers and privacy policies. The absence of WHOIS data due to query errors limits full domain legitimacy verification, though the website content and contact details support a credible business presence. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.
—
71Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
IT Scope Solutions Ltditscopesolutions.com
Technology · Nigeria
62Medium
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
IT Scope Solutions Ltd is a Nigerian-based IT consulting and technology solutions provider focused on helping businesses leverage technology for growth and innovation. Their services include web design and development, hardware supply, Microsoft Office 365 deployment, networking, outsourcing, and a proprietary user engagement platform called InterAd. The company targets SMEs and larger enterprises seeking digital transformation and IT strategy support. The website is professionally designed, mobile-optimized, and includes client logos from reputable companies, indicating a solid market presence. Technically, the website uses modern frontend technologies such as React, Google Fonts, and Google Tag Manager for analytics. The site is mobile responsive and SEO optimized, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. No privacy or cookie policies were found, which is a compliance gap. WHOIS data is unavailable, which raises concerns about domain registration legitimacy but does not negate the professional presentation and business information on the site. Overall, the security posture is adequate but could be improved by implementing security headers, privacy policies, and incident response information. The absence of WHOIS data reduces trustworthiness and should be investigated. The website content is safe for general audiences with no adult or questionable content detected. The company demonstrates a credible business model with clear contact information and social media presence. Strategic recommendations include enhancing privacy compliance, adding security policies, verifying domain registration, and improving accessibility and security headers to strengthen trust and compliance.
- Parker Plumbing & Heating Services
parkerphs.co.uk
Energy · United Kingdom
62Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Parker Plumbing & Heating Services is a well-established UK-based plumbing and heating contractor with over 30 years of experience. The company offers a comprehensive range of commercial and bespoke domestic plumbing and heating services, operating primarily in the North of England but servicing clients nationwide. Their market position is that of a respected regional contractor with a professional and dedicated approach, employing local apprentices and maintaining high standards of health and safety. The website is built on Squarespace, featuring a professional design with good mobile optimization and clear navigation. Contact information is readily available, including phone, email, and contact forms, supporting customer engagement. Security posture is basic with HTTPS enabled but lacking advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the website presents a credible and trustworthy business presence with a solid technical foundation but could enhance privacy compliance and security policies.
Form WSformws.co.uk
Other · United Kingdom
62Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Form WS is a UK-based company specializing in office fit out and workplace design services, operating since 2006. The website presents a professional design and targets businesses seeking office refurbishment and design solutions. The technical infrastructure is based on WordPress CMS with common web technologies and third-party integrations such as Google Fonts and Mailchimp. While the site is accessible and functional, it lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance. Security posture is moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement in security best practices. Overall, the website is legitimate and professional but would benefit from enhanced security and compliance measures.
- EEasy Access Self Storage
easyaccessselfstorage.co.uk
Real Estate · United Kingdom
58Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Easy Access Self Storage is a UK-based self storage service provider operating since 2006, with multiple locations in Stockport, Manchester, Trafford, and Ashton Under Lyne. The company offers a wide range of storage solutions for personal and business customers, including vehicle and boat storage, archive storage, office and retail units, and workshop spaces. Their market position is that of a local/regional provider with competitive pricing and customer-centric services. The website reflects a mature business with clear branding and consistent messaging. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, leveraging modern web technologies such as Bootstrap and Font Awesome. It integrates Google Analytics and Tag Manager for tracking and marketing purposes. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Hosting is provided by a reputable UK registrar and hosting provider. From a security perspective, the site uses HTTPS with good SSL configuration and security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and serves its business purpose well. Strategic improvements in security transparency and accessibility could further strengthen its posture and customer confidence.
Upham Innsoakmaninns.co.uk
Hospitality · United Kingdom
53Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Upham Inns operates a collection of premium countryside pubs with rooms across Southern England, targeting travelers seeking authentic rural hospitality experiences. Their offerings include characterful pubs, individually designed bedrooms, and menus focused on seasonal countryside cuisine. The website is built on WordPress with modern plugins and integrates multiple partner domains for booking and dining services. While the technical infrastructure is solid with HTTPS and analytics tools, the site lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with room for improvement in security headers and incident response visibility. Overall, Upham Inns presents a professional and trustworthy online presence aligned with their hospitality business model.
| Everyone's wearing itevoclothing.com
Other
67Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
The website www.evoclothing.com appears to represent a clothing brand or e-commerce business, as suggested by the website title and domain name. However, the site content is minimal and lacks critical business information such as contact details, privacy policies, and terms of service. The technical infrastructure is based on WordPress with the Divi theme, incorporating standard web technologies including Google Analytics and Google reCAPTCHA for tracking and bot protection. Despite these, the site lacks advanced security headers and comprehensive privacy compliance features. The absence of WHOIS registration data raises concerns about the domain's legitimacy and trustworthiness. Overall, the website presents a basic online presence with significant gaps in security, compliance, and business transparency.
Ashton Mill Services Ltdashtonmill.co.uk
Real Estate · United Kingdom
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Ashton Mill Services Ltd is a small UK-based company specializing in property clearance, probate valuations, storage, removals, deliveries, and waste disposal services. The company targets local customers in Wiltshire, England, providing personalized and tailored services. The website is professionally designed using the Wix platform, featuring structured data for local business identification and customer trust signals such as aggregate ratings. Technically, the site leverages Wix's hosting and standard web technologies, with moderate performance and good mobile optimization. Security posture is basic, with HTTPS enforced but lacking advanced security headers and explicit privacy or cookie policies. The WHOIS data is unavailable and indicates the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy. Overall, the website presents a trustworthy front for a local service business but requires improvements in privacy compliance and domain registration transparency.
- RDJ Shutters Ltd
rdjshutters.co.uk
Real Estate · United Kingdom
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
RDJ Shutters Ltd is a UK-based small business specializing in bespoke interior window shutters and wooden blinds, serving customers primarily in Hertfordshire but with a national reach. The company emphasizes quality, bespoke service including free home visits, expert advice, and professional measuring and fitting. Their market position is strengthened by accreditation as a Which Trusted Trader and positive client testimonials. The website reflects a professional and trustworthy business with clear contact channels and detailed product offerings. Technically, the website is built on WordPress with a modern tech stack including jQuery, Gravity Forms for data collection, and SEO optimization via Yoast. Hosting is provided by Zen Internet Limited, a reputable UK provider. The site performs moderately well with good mobile optimization and basic accessibility features. Analytics and user behavior tracking are implemented using Google Analytics and Hotjar, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration and employs basic security best practices such as form validation and spam protection. However, it lacks advanced security headers like Content Security Policy and does not provide a security policy or incident response information. Privacy compliance is partial; a privacy policy and terms of service are present, but no cookie consent mechanism is detected. Overall, the website presents a low-risk profile with strong business credibility and a solid technical foundation. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory adherence.
Geeks on Wheelsgeeks-on-wheels.com
Technology · United Kingdom
61Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
Geeks on Wheels is a well-established IT support company founded in 2003, providing comprehensive IT services including managed IT support, cybersecurity, remote and on-site assistance, and specialized services such as custom gaming PC builds and smart home installations. The company targets both business and residential customers primarily in London and across the UK, positioning itself as a trusted local expert with over 14,000 satisfied clients and strong customer ratings. The website reflects a professional and modern digital presence built on WordPress, leveraging popular plugins and technologies to deliver a fast, mobile-optimized, and user-friendly experience. Security posture is solid with HTTPS and domain transfer protections, though there are gaps in DNSSEC and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site demonstrates high business credibility and technical maturity but should improve privacy and security transparency to enhance trust and compliance.
- Pulse Films
pulsefilms.com
Media · United Kingdom
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Pulse Films is a London-based media production company specializing in commercials, music videos, documentaries, and feature films. With offices in London and Los Angeles, it serves a global clientele including brands, agencies, artists, labels, broadcasters, and studios. The company has an established market presence since 2009 and offers full-service video production across multiple disciplines. The website reflects a professional brand with consistent messaging and a clear focus on creative media production services. Technically, the website employs modern web technologies including React and Vimeo video embedding, hosted on AWS infrastructure. The site is mobile optimized and SEO friendly, though performance is moderate. The absence of a CMS or analytics scripts suggests a custom-built or minimalistic approach. However, some accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. No privacy or cookie policies are published, and no incident response or vulnerability disclosure information is available. These gaps reduce privacy compliance and security posture scores. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious content were found. Overall, Pulse Films presents a credible and professional online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.
- Wwww.zopa.com
zopa.com
Other
75Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.zopa.com is currently inaccessible, with the WHOIS query returning no registration data and the HTML content consisting solely of a JSON hash indicating site unavailability. This suggests the domain may be unregistered, suspended, or blocked. Due to the lack of accessible content, no metadata, business information, or contact details could be extracted. The absence of any visible content or security headers indicates a very low digital maturity and security posture. Without access to the site, it is impossible to assess the company's market position, services, or compliance status. The overall risk is high due to the lack of transparency and availability, and the domain's legitimacy is questionable based on WHOIS data.
- CCamperite Leisure
camperite.co.uk
Retail · United Kingdom
71Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Camperite Leisure operates as a specialized UK-based e-commerce retailer focusing on tents, camping, and caravan accessories. The website offers a broad range of outdoor equipment with an emphasis on fast and friendly service, including free next-day delivery across the UK. The business targets outdoor enthusiasts, campers, and caravan owners, leveraging Shopify's platform for its online presence. The site is professionally designed with clear navigation and a consistent brand image, supporting multiple payment methods including PayPal and major credit cards. Technically, the website is built on Shopify's Expanse theme and utilizes modern web technologies and third-party marketing and analytics tools. Security posture is solid with HTTPS enforced and secure payment integrations, though explicit security headers and privacy policies are lacking. The WHOIS data is unavailable due to domain naming rules violations, suggesting the domain may be a CNAME or alias to the Shopify domain, which slightly impacts trust but does not detract from the site's professionalism. Overall, the site is a credible and functional e-commerce platform with room for improvement in privacy compliance and security transparency.
Other
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.traditionaltuscany.co.uk is currently inaccessible beyond a Cloudflare security challenge page, which prevents direct content access and analysis. The domain WHOIS lookup failed with an error indicating the domain cannot be registered due to naming rules violations, suggesting the domain is not legitimately registered or active. Consequently, no business information, contact details, or policies are available for review. The technical infrastructure relies on Cloudflare's security services, including Turnstile captcha, but no further technology or CMS details are discernible. Security posture is limited to the presence of a Content-Security-Policy header and Cloudflare protection, but the lack of accessible content and WHOIS data severely limits trust and credibility assessments. Overall, the site appears non-operational or placeholder behind a security mechanism, resulting in a low risk profile due to lack of exposure but also very low business credibility and content quality.
- NNorthstar Ventures
northstarventures.co.uk
Energy · United Kingdom
69Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Northstar Ventures is a UK-based venture capital firm specializing in investments in early and later stage high growth companies focused on climate technology and healthy ageing. The company positions itself as a forward-looking investor aiming to tackle global challenges through innovation and capital deployment. The website reflects a professional and modern digital presence built on WordPress with Elementor, featuring a clean design and clear navigation. The technical infrastructure includes standard security practices such as HTTPS and security headers, alongside user tracking via Google Analytics. However, the absence of a privacy policy and terms of service pages, coupled with missing verified contact information, indicates gaps in compliance and business transparency. The WHOIS data is notably missing due to a domain registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the security posture is solid but could be improved with enhanced privacy compliance and clearer business contact details.