Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,301–5,350 of 99,069
Accenturenhs.net
Healthcare · United Kingdom
72Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
NHSmail is the national secure collaboration service for health and social care in England, delivered in partnership between NHS Digital and Accenture.
- CComscore Movies
rentrak.com
Other
72Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.rentrak.com appears to be inaccessible or blocked, with minimal content consisting only of a loading spinner and no substantive information available. The WHOIS data indicates that the domain is not registered or has expired, which is inconsistent with the presence of any active business website. No privacy policies, cookie policies, terms of service, or contact information are found, which further limits the ability to assess the business or security posture. The technical infrastructure appears to use Bootstrap and FontAwesome libraries, but no CMS or hosting provider information is available. Security posture is poor due to lack of HTTPS and security headers. Overall, the site is not currently functional or trustworthy for business or user engagement.
- CCherry Printers UK
cherryprinters.co.uk
Retail · United Kingdom
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Cherry Printers UK operates an e-commerce website specializing in the design, printing, and delivery of NCR and record keeping books primarily targeted at schools and businesses within the United Kingdom. The company positions itself as an expert provider in this niche market, offering a wide range of printed stationery products. The website is built on the Shopify platform, leveraging various third-party applications for customer reviews, loyalty programs, and chat support, indicating a moderate level of digital maturity and integration of e-commerce best practices. Technically, the site demonstrates good performance, mobile optimization, and accessibility, with HTTPS enforced and no evident security challenges or WAF blocks. However, the absence of explicit privacy and cookie policies, as well as missing visible contact information, suggests gaps in privacy compliance and user trust facilitation. The WHOIS data for the domain is unavailable due to a domain naming error, which raises concerns about domain registration legitimacy, although the website content and infrastructure appear professional and trustworthy. Overall, the site presents a solid business presence with room for improvement in compliance and transparency to enhance security posture and user confidence.
- KKING SOUND REINFORCEMENT
kingsr.com
Other · United Kingdom
72Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
King Sound Reinforcement is a well-established UK event production company specializing in sound, lighting, staging, AV, and backline services. Founded in 1995 and operating from Bristol, it offers a comprehensive one-stop solution for multi-stage events, supported by a large warehouse and transport fleet. The company also engages in sales, installation, and equipment rental, positioning itself as a market leader in the South West UK event production sector. The website reflects a professional and consistent brand image with strong social media integration and detailed service offerings. Technically, the site is built on Squarespace, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and domain locking but lacks advanced DNS security measures and published security policies. Privacy compliance is partial, with a cookie consent banner present but no privacy or terms of service pages found. Overall, the site demonstrates high business credibility and good technical implementation but should improve privacy and security transparency to enhance trust and compliance.
Sensible PCsensiblepcsolutions.co.uk
Technology · United Kingdom
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Sensible PC Solutions is a small IT support service provider based in England, offering computer support primarily for workplaces and businesses. The website is built on the Wix platform and uses standard Wix technologies along with Facebook Pixel for tracking. The site content is basic but relevant to its business focus, targeting local businesses needing IT solutions. Technically, the site is moderately optimized with good mobile responsiveness but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance mechanisms. The absence of WHOIS data due to a domain naming rules violation error from Nominet UK raises concerns about domain legitimacy and reduces overall trust. No privacy or cookie policies, contact information, or security incident response details are provided, which further impacts compliance and credibility. Overall, the site is functional but requires improvements in security, privacy, and business transparency to enhance trust and compliance.
- AAlan Jones Chartered Surveyors
ajuk.com
Real Estate · United Kingdom
69Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Alan Jones Chartered Surveyors is a well-established, family-run professional property services firm operating since 1977 in the United Kingdom, specializing in building surveying, architectural design, project management, and related commercial and residential property services. The company targets clients across the Fylde Coast and Preston regions, offering a broad range of services including commercial services, building surveys, party walls, dilapidations, architecture, and project management. The website reflects a professional and consistent brand image with clear contact information and trust indicators such as RICS regulation. Technically, the website is built on GoDaddy's Website Builder platform, uses HTTPS with good SSL configuration, and incorporates Google reCAPTCHA for form security. However, it lacks DNSSEC and explicit security headers, which are recommended for enhanced security. Privacy compliance is basic with a privacy policy and cookie consent banner present, but no terms of service or security policy is published. Overall, the site is accessible, well-structured, and safe for general audiences.
Stamford Storage HG Ltdstamfordstoragehg.co.uk
Real Estate · United Kingdom
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Stamford Storage HG Ltd operates as a UK-based provider specializing in modular buildings, shipping and storage containers for sale and hire, and warehousing storage solutions. The company positions itself as a leading provider in the UK market, targeting businesses and individuals requiring flexible storage and modular building options. The website reflects a professional business model focused on sales and rental services within the real estate and storage sector. Technically, the website is built on WordPress using the Divi theme and enhanced with Yoast SEO Premium, indicating a moderate level of digital maturity. The site is mobile-optimized and incorporates Google Analytics for visitor tracking. Security-wise, the site uses HTTPS with a good SSL configuration but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data is unavailable due to domain registration issues, which raises concerns about domain legitimacy but does not directly impact the website's operational content. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance documentation.
- RROYAL ABERDEEN GOLF CLUB
royalaberdeengolf.com
Hospitality · United Kingdom
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Royal Aberdeen Golf Club is a historic and prestigious golf club located in Aberdeen, Scotland, founded in 1780. The club offers membership services, visitor green fees, and hosts major national and international golf events. It maintains a traditional clubhouse and a classic links golf course with a rich heritage and royal patronage. The website reflects a medium-sized hospitality business targeting golf enthusiasts and members. Technically, the site uses modern web technologies including jQuery, Bootstrap, and external platforms for membership management and bookings. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response policies. Privacy and cookie policies exist but lack consent mechanisms. WHOIS data is missing, which raises some concerns about domain legitimacy, though the website content and external references support authenticity. Overall, the site is professional and trustworthy but could improve security and compliance transparency.
Janitorial Warehouse Cleaning Suppliesjanitorialwarehouse.co.uk
—
63Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Cannadinescannadines.co.uk
Retail · United Kingdom
50Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Cannadines is a small, family-run business based in Uckfield, United Kingdom, specializing in the design, supply, and installation of kitchens, bathrooms, bedrooms, and home offices. The company positions itself as a reliable local provider with a longstanding presence in Sussex, targeting homeowners seeking bespoke interior solutions. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the site is built on WordPress 7.0, utilizing modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection but lacks explicit security headers and incident response information, suggesting room for improvement in security posture. Overall, the website is well-structured and compliant with privacy regulations, though the absence of WHOIS data limits full domain legitimacy verification.
Marketlayer Limitedmarketlayer.com
Other · United Kingdom
55Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Marketlayer Limited is a London-based email marketing company specializing in data-driven email marketing solutions for B2B and B2C clients. The company offers a comprehensive suite of services including campaign growth, segmentation, fully managed campaigns, pixel-perfect design, A/B testing, and detailed reporting. Marketlayer positions itself as one of the fastest-growing email broadcasting and digital marketing firms in London, targeting businesses seeking to enhance their email marketing effectiveness. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, jQuery, React (development scripts), and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and uses HTTPS with Google reCAPTCHA for bot protection. However, some security best practices like security headers and explicit cookie consent mechanisms are missing. From a security perspective, the site demonstrates a solid baseline with HTTPS and bot protection but lacks visible security headers and incident response information. The absence of WHOIS registration data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. The site displays certifications such as Cyber Essentials and Living Wage Employer badges, enhancing credibility. Overall, Marketlayer presents a professional and trustworthy front with strong business and technical foundations but should address WHOIS registration transparency and enhance privacy and security policies to improve compliance and trustworthiness.
- PPimlico Academy
pimlicoprimary.org
Education · United Kingdom
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Pimlico Academy is a well-established secondary and sixth form educational institution located in London, operating under the parent organization Future Academies. The website presents a professional and content-rich platform aimed at students, parents, and the local community, emphasizing academic excellence and inclusive education. The technical infrastructure leverages a custom CMS by Greenhouse School Websites, with common web technologies such as jQuery and Google Translate integration, ensuring accessibility and multilingual support. Security measures include HTTPS usage and image protection scripts, although some improvements are needed in updating libraries and implementing security headers. Privacy compliance is addressed with clear cookie consent and privacy policies, aligning with GDPR requirements. Overall, the website demonstrates a solid business credibility and user experience with room for technical and security enhancements.
Zeta Servicezetaservice.com
Other · Italy
53Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Zeta Service is a medium-sized Italian company specializing in payroll outsourcing, HR consultancy, and headhunting services, serving approximately 1,600 businesses. Their website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern performance and SEO optimizations, leveraging advanced analytics and marketing tools such as Google Analytics, HubSpot, and Facebook Pixel. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although public security policies and incident response contacts are not disclosed. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website's professionalism and compliance with privacy regulations mitigate this risk. Overall, the site presents a trustworthy and business-focused digital front with room for improvement in domain transparency and security communication.
- EExonar Ltd
exonar.com
Technology · United Kingdom
68Medium
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Exonar Ltd is a UK-based technology company specializing in advanced data discovery software that indexes both structured and unstructured data at scale. The company targets information security, governance, risk, compliance, and IT operations professionals, offering solutions that reduce risk and uncover business value from data. Recently acquired by NowVertical Group, Exonar maintains a strong market position with notable clients such as GSK and Lloyds. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools including Google Analytics, Hotjar, and LinkedIn Insight. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security header implementation. Privacy and cookie policies are present with consent mechanisms, indicating good privacy compliance practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for enhancement. The lack of WHOIS data for the domain raises some trust concerns, although the professional presentation and business information mitigate this to some extent. Overall, Exonar's digital presence is solid with good content quality and privacy compliance, but improvements in transparency and security best practices would strengthen its security posture and business credibility.
- SSITE NOT FOUND
bureau-accountants.co.uk
Other
60Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.bureau-accountants.co.uk is currently inaccessible and displays a generic 'Site not found' error page indicating that the site is not published or the domain is not assigned. There is no visible business information, contact details, or content describing the company's services or market position. The domain WHOIS lookup failed due to a Nominet UK naming rules violation, suggesting the domain is invalid or misconfigured. This severely limits the ability to assess the business or technical maturity of the entity behind the domain. Technically, the site lacks any detectable CMS, frameworks, or modern technologies and does not present any security headers or HTTPS enforcement, indicating a minimal security posture. Privacy and compliance policies are absent, and no contact or incident response information is available. Overall, the site appears to be either abandoned, misconfigured, or not yet launched, resulting in a very low trust and credibility rating.
- MMinxMedia
minxmedia.co.uk
Other · United Kingdom
53Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
MinxMedia is a UK-based small business consultancy specializing in marketing, sales, leadership, and professional development training and coaching. The company offers onsite consultancy and external group courses aimed at helping businesses evolve their marketing and sales strategies and develop their teams. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and MonsterInsights for analytics, and uses a cookie consent mechanism compliant with GDPR. The technical infrastructure is modern and well-maintained, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website presents a professional and trustworthy image consistent with a legitimate consultancy business.
Other
62Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.zuto.com is currently inaccessible, returning a 403 Forbidden error page with no visible content or metadata. This prevents any meaningful analysis of the business, technical infrastructure, or security posture. The WHOIS lookup for the domain also failed, returning no registration data, which raises concerns about the domain's legitimacy and registration status. Without access to the website content or WHOIS details, it is impossible to verify the company's identity, services, or compliance with privacy and security standards. From a technical perspective, the lack of accessible content and metadata indicates poor digital maturity. No information about hosting, CMS, or security headers is available. The absence of HTTPS or security best practices further suggests a weak security posture. The domain's WHOIS data absence and the 403 error page imply either a misconfiguration, domain suspension, or deliberate access restriction. Security evaluation is limited due to the blocked content. No privacy policies, cookie consent mechanisms, or contact information are found, indicating non-compliance with GDPR and other privacy regulations. The lack of WHOIS transparency and domain registration data further reduces trustworthiness. Overall, the site presents a high risk for users and partners due to its inaccessibility and lack of verifiable information. Strategically, it is recommended to resolve the access issues, ensure proper domain registration and WHOIS transparency, implement HTTPS and security headers, and publish comprehensive privacy and security policies. These steps will improve trust, compliance, and user experience.
- SStudioCanal UK
studiocanal.co.uk
Media · United Kingdom
65Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
StudioCanal UK operates as a major media distribution company specializing in films, TV shows, and related merchandise. The website presents a professional and content-rich platform targeting general audiences interested in entertainment media. The company positions itself as Europe's largest distribution studio, offering a broad catalog of titles and advanced search capabilities for users. The digital presence is supported by a WordPress CMS infrastructure with modern JavaScript libraries, ensuring a responsive and user-friendly experience across devices. However, the absence of explicit privacy and cookie policies indicates a gap in compliance with data protection regulations. Security posture is adequate with HTTPS enforced but lacks comprehensive security headers and incident response disclosures. The domain WHOIS data is unavailable due to UK domain naming restrictions, which slightly impacts trust but the website content and branding strongly indicate legitimacy. Strategic improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.
Agrovista UK Limiteddjturfcare.co.uk
Retail · United Kingdom
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Agrovista Amenity, a division of Agrovista UK Limited, operates as a reputable supplier of organic fertilisers and amenity products in the UK market. The website focuses on the Viano Organic Fertilisers product line, providing detailed product information, local stockist contacts, and support services. The company maintains a strong market position with a clear B2B and B2C business model targeting amenity specialists, gardeners, and agricultural professionals. The digital presence is supported by a professional website with good content quality and consistent branding. Technically, the website employs modern frontend technologies including Alpine.js and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized and demonstrates good SEO practices. However, there is room for improvement in security headers and SSL configuration transparency. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR requirements. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected. The use of reCAPTCHA helps mitigate automated abuse. The absence of visible security headers and detailed security policies suggests potential areas for enhancement. WHOIS data for the subdomain is unavailable due to domain naming rules, but this is consistent with the subdomain structure under the main Agrovista domain, which is legitimate. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include strengthening security headers, enhancing SSL/TLS transparency, and maintaining regular security audits to uphold trust and compliance standards.
- SSecurity Verification
mortgageandinsuranceneeds.com
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.mortgageandinsuranceneeds.com is currently inaccessible beyond a security verification challenge page utilizing Google reCAPTCHA v3. This indicates the presence of a Web Application Firewall or bot protection mechanism that blocks automated or unverified access. Due to this, no substantive business content, metadata, or contact information is available for analysis. The WHOIS query returned no registration data, suggesting the domain may be unregistered, newly registered, or privacy-protected with no public data. This raises concerns about the legitimacy and operational status of the website. From a technical perspective, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for security. However, no SSL/HTTPS information or security headers were detected in the provided data. The lack of privacy policies, cookie consent mechanisms, and contact details further diminishes the site's compliance posture and business credibility. Security-wise, while the use of reCAPTCHA is a positive measure against bots, the absence of HTTPS and security headers, combined with no visible security policies, indicates a weak security posture. The domain's unknown registration status adds to the risk profile. Overall, the site currently presents a high risk due to inaccessibility, lack of transparency, and missing compliance and security indicators. Strategic recommendations include establishing clear domain registration, enabling HTTPS, publishing privacy and cookie policies, and providing verifiable contact information to improve trust and compliance.
- BBritish Car Auctions Limited
bca.co.uk
Transportation · United Kingdom
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
British Car Auctions Limited (BCA) operates as the UK’s largest used vehicle remarketing business, providing end-to-end vehicle remarketing services across the UK and Europe. Their offerings include vehicle auctions, fleet management, refurbishment, storage, imaging, funding solutions, and logistics. The company targets businesses, particularly limited companies with business insurance, and operates a digital platform for vehicle search, bidding, and buying. The website reflects a mature enterprise with consistent branding and a comprehensive service portfolio. Technically, the site leverages modern web technologies including React, Adobe Launch, and Dynatrace for monitoring, with a CMS likely Magnolia. The site is mobile optimized and SEO friendly, with good performance and accessibility standards. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. WHOIS data for the 'www.bca.co.uk' subdomain is unavailable due to domain naming rules, but the main domain is presumably registered and legitimate. Overall, the website is professional, trustworthy, and safe for general audiences.
Purdicom WiFi & Cloud Distributorpurdi.com
Technology · United Kingdom
75Medium
NIS2 10 · GDPR 85
NIS2 10 · GDPR 85
Purdicom is a UK-based value-added IT distributor specializing in wireless, cloud, WiFi, and IT security technologies. The company positions itself as a leading distributor in the UK market, targeting IT resellers, integrators, and businesses seeking advanced wireless and security solutions. Their website showcases a broad portfolio of vendors and technologies, emphasizing professional services and comprehensive product offerings. The digital presence is supported by a WordPress-based platform with modern plugins and SEO optimizations, reflecting a moderate to good level of digital maturity. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS domain registration data introduces some uncertainty about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security transparency and compliance documentation.
- SSecurity Verification
pacy-wheatley.co.uk
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.pacy-wheatley.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. This indicates the presence of a bot protection mechanism or a Web Application Firewall (WAF) challenge, preventing normal content retrieval and analysis. The WHOIS lookup for the domain failed with an error stating the domain name cannot be registered due to contravention of Nominet UK naming rules, suggesting the domain is either invalid or improperly registered. Consequently, no registrar, creation, expiry, or registrant information is available, severely limiting trust and legitimacy assessments. From a technical perspective, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for security verification. However, no further content, metadata, or business information is accessible. There are no privacy, cookie, or terms of service policies detected, nor any contact details or social media links. The external resources are limited to common CDNs and Google domains. Due to the blocking mechanism, the website's performance, accessibility, SEO, and user experience cannot be properly evaluated. Security-wise, the use of Google reCAPTCHA is a positive measure against automated abuse, but the absence of visible security headers, HTTPS confirmation, or other best practices cannot be confirmed. The lack of WHOIS data and domain registration irregularities raise significant concerns about the domain's legitimacy and trustworthiness. Overall, the site is effectively inaccessible for meaningful analysis, resulting in a low AI score and a recommendation to contact the site administrators or owners for further information. The domain's registration issues and blocking mechanisms suggest caution in trusting this domain or associating business activities with it.
- PPure Leisure Group
pure-leisure.co.uk
Hospitality · United Kingdom
52Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Pure Leisure Group operates a professional website focused on luxury lodges and caravan holidays in the UK, targeting holidaymakers and potential holiday home buyers. The company positions itself as an established player in the hospitality and real estate sectors, offering holiday homes for sale and holiday park ownership benefits. The website is well-branded and provides clear navigation and relevant content to its audience. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Contact Form 7, Cookiebot for consent management, and analytics tools such as Google Analytics, Hotjar, and HubSpot. Hosting appears to be via Nimbus CDN, and the site is secured with HTTPS and uses Cloudflare Turnstile for bot detection. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site demonstrates good practices with HTTPS, cookie consent, and bot mitigation. However, it lacks explicit security headers and published security policies or incident response contacts. The WHOIS data is unavailable due to a domain naming rules error, which slightly reduces trust but the active and professional website mitigates concerns. Overall, the website is legitimate and professional with moderate to good security and privacy compliance. Strategic improvements include publishing a privacy policy and security policy, adding security headers, and resolving WHOIS transparency issues to enhance trust and compliance.
Chris Leishman Designleishmandesign.co.uk
Media · United Kingdom
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Chris Leishman Design is a small creative design studio based in Torquay, Devon, UK, established in 2009. The company offers a broad range of services including graphic design, branding, photography, illustration, packaging, and online services targeting local, national, and international companies. The website showcases a professional portfolio demonstrating diverse projects and clients, positioning the company as an established player in the creative media sector. Technically, the website is built on WordPress 7.0 with a modern tech stack including Bootstrap, jQuery, and various UI libraries, providing a good user experience with mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks important security headers and published privacy or cookie policies, representing compliance and security gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.
Lloyds Gardens of Londonlloydsgardens.com
Real Estate · United Kingdom
62Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Lloyds Gardens of London is a professional garden landscaping and design company operating in London, offering a range of services including paving, fencing, decking, driveways, lawns, and stonework. The company positions itself as a trusted local leader, endorsed by Trustmark and partnered with John Lewis & Partners, targeting homeowners and property owners seeking quality outdoor space transformations. The website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and various UI libraries, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks important security headers and formal privacy and cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the website content and trust indicators suggest a genuine business. Strategic recommendations include implementing security headers, publishing privacy and cookie policies with consent mechanisms, adding incident response contacts, and improving WHOIS transparency to enhance trust and compliance.
Removal services | Widnes | Roy Jacks Removalsroyjacks.co.uk
Other
72Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website www.royjacks.co.uk appears to be a small business site built on the Wix platform. The site content is minimal and primarily consists of technical scripts and styles with no visible detailed business description or contact information. The domain WHOIS lookup failed due to an invalid domain registration error from Nominet UK, indicating the domain may not be properly registered or is invalid. Technically, the site uses Wix's standard technologies and Google Tag Manager for analytics and tracking. Security posture is weak with no detected security headers and no visible SSL configuration details. Privacy compliance is limited to a cookie consent mechanism, but no privacy policy or terms of service pages were found. Overall, the site lacks transparency and trust indicators, which raises concerns about its legitimacy and professionalism.
HOME | Profile PRprofilepublicrelations.com
Other
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.profilepublicrelations.com appears to be a business site built using the Wix platform, likely related to public relations services. However, the content is minimal and lacks critical business information such as contact details, privacy policies, and terms of service. The absence of WHOIS registration data raises concerns about the domain's legitimacy and registration status. Technically, the site uses standard Wix scripts and polyfills but lacks advanced SEO, accessibility, and security features. Security posture is weak due to missing security headers and no visible incident response or security policies. Overall, the site presents a low trust profile with significant gaps in compliance and transparency.
- MMartin & Co Estate Agents & Letting Agents in Leigh
redwaterslettings.co.uk
Real Estate · United Kingdom
69Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Martin & Co Estate Agents & Letting Agents in Leigh is a local real estate agency providing comprehensive property services including sales and lettings. The company targets property buyers, sellers, renters, and landlords in the Leigh area of the UK. The website is professionally designed, leveraging WordPress with Elementor and SEO best practices, and includes structured data to enhance search engine visibility. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, VWO, Microsoft Clarity, and LiveChat, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. The domain WHOIS data is missing or unavailable, which reduces trust from a domain registration perspective but does not detract from the professional appearance and functionality of the site. Overall, the website is well-positioned for its market segment with good user experience and compliance features.
- Wwww.crescentindependent.co.uk
crescentindependent.co.uk
Other
65Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.crescentindependent.co.uk is currently inaccessible, returning an 'Unprocessable Entity' error with minimal HTML content. The domain itself is invalid according to the Nominet UK registry, as it violates naming rules and cannot be registered. Consequently, no legitimate WHOIS data or registrant information is available. The lack of accessible content, metadata, or business information prevents any meaningful analysis of the company's operations or market position. Technically, the site lacks HTTPS, security headers, and any visible scripts or frameworks, indicating a non-functional or misconfigured web presence. Security posture is very weak due to the absence of standard protections and policies. Overall, the site appears non-operational or incorrectly configured, posing a high risk for trust and credibility.
NVA Online Advertising B.V.creativebuilding.co.uk
Other · Netherlands
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website creativebuilding.co.uk is a domain sales landing page operated by NVA Online Advertising B.V., a domain expert business founded in 2004 based in the Netherlands. The site offers the domain for sale via the Nameshift.com platform, which provides escrow and domain transfer services to ensure safe and fast transactions. The business model focuses on domain brokerage and facilitating secure domain ownership transfers with no fees for buyers. The target audience includes domain investors and businesses seeking premium domain names. Technically, the site is built using modern web technologies including SvelteKit and JavaScript, with external integrations such as Trustpilot for customer reviews and a tracking script from stats.nameshift.com. The site is well-optimized for performance and mobile devices, though accessibility features are basic. SEO optimization is minimal but sufficient for its purpose as a sales landing page. From a security perspective, the site uses HTTPS and an escrow service to mitigate transaction risks. However, no explicit security headers or policies are present, and privacy and cookie policies are missing, which reduces compliance posture. The WHOIS data shows inconsistencies, including a domain creation date in the future and registrant information pointing to the registrar rather than the business, which is typical for domains listed for sale but impacts trustworthiness. Overall, the website is functional and professional for its domain sales purpose but lacks comprehensive privacy and security policies. Strategic improvements in these areas would enhance trust and compliance. The domain's WHOIS inconsistencies should be clarified to improve legitimacy perception.
—
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
- Contract Cars
contractcars.com
Transportation · United Kingdom
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Contract Cars is a UK-based vehicle leasing provider specializing in personal and business car leasing, as well as van leasing. The company offers a wide selection of vehicles including electric and hybrid models, supported by competitive pricing and special offers. Their market position is strong within the UK leasing sector, supported by positive customer reviews and a professional online presence. Technically, the website employs modern web technologies such as Vue.js, Google Tag Manager, Cookiebot for consent management, and Microsoft Azure Application Insights for telemetry. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS, uses reCAPTCHA for bot protection, and implements cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or recent registration, which slightly reduces domain trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, making it a credible platform for vehicle leasing in the UK.
- HHair Systems Inc.
hairsystemsinc.com
Manufacturing
51Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Hair Systems Inc. is a contract manufacturer specializing in the development, manufacturing, and packaging of reactive hair care products such as hair color and bleach powder for the professional beauty industry. The company positions itself as a worldwide leader in customized hair care product solutions. The website content is focused on showcasing their product offerings and certifications, targeting professional beauty companies. Technically, the website is built with basic HTML and CSS, lacks modern frameworks or CMS, and shows signs of dated design with poor mobile optimization and accessibility. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. The WHOIS data is missing or unavailable, raising concerns about domain legitimacy, although the website content and certifications provide some trust signals. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization.
- Eurofins Scientific
mgslabs.co.uk
Healthcare · United Kingdom
75Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Eurofins BioPharma Product Testing UK is a division of Eurofins Scientific, a global leader in laboratory testing services. The company specializes in analytical and microbiological testing for biopharmaceutical products, offering a comprehensive range of services including microbiology, chemistry, stability studies, specialist services, and disinfectant testing. Their market position is strong, supported by a large global network and recognized certifications such as ISO 14001. The website reflects a professional and well-structured digital presence, targeting pharmaceutical and medical device manufacturers with regulatory-compliant testing solutions. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers could be improved. The absence of WHOIS data due to domain naming rules is a limitation but does not detract from the evident legitimacy and professionalism of the business. Overall, the site demonstrates a mature digital infrastructure aligned with industry standards and regulatory requirements.
Other
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.patrobson.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The absence of metadata, structured data, or any business-related information prevents a comprehensive understanding of the company's operations or services. The WHOIS lookup failed to retrieve any registration details, suggesting the domain may be unregistered, inactive, or protected by privacy mechanisms that are not disclosed. Technically, the site lacks any detectable scripts, external resources, or security headers, indicating minimal or no active web infrastructure. From a security perspective, the lack of HTTPS confirmation, security headers, and privacy policies raises concerns about the site's readiness and compliance. Overall, the site presents a high risk due to its inaccessibility and lack of transparency, and it is not possible to assess its business credibility or technical maturity accurately.
Mayer Brown Ltdmayerbrown.co.uk
Transportation · United Kingdom
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Mayer Brown Ltd is a well-established UK consultancy specializing in transport planning, infrastructure design, and environmental assessment. Founded in 1996, the company serves a broad professional audience including town planners, developers, builders, and landowners. Their market position is strong, supported by ISO certifications and a portfolio of client testimonials. The website reflects a professional and trustworthy business with comprehensive service offerings and clear contact channels. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Cookiebot for consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is good, with a clear privacy policy and cookie consent. Overall, the website is well-designed, user-friendly, and trustworthy, supporting Mayer Brown's business credibility effectively.
PS Website Design Ltdpswebsitedesign.com
Technology · United Kingdom
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
PS Website Design Ltd is a UK-based bespoke website design and digital marketing company operating since 2009. They offer a comprehensive range of services including website design, development, SEO, PPC management, and social media marketing, targeting businesses primarily in the UK. The company emphasizes in-house development, direct client communication, and transparent processes, positioning itself as a trusted and professional service provider with a strong reputation supported by numerous client testimonials and a Google Partner badge for PPC services. Technically, the website employs modern JavaScript and tracking technologies such as Google Tag Manager and Ripple CRM scripts, with good mobile optimization and SEO practices. Security posture is generally good with HTTPS and cookie consent mechanisms, though explicit security headers and detailed security policies are absent. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency despite the professional appearance and content of the website. Overall, the website scores well on content quality, technical implementation, and business credibility, with recommendations to enhance security headers, publish incident response information, and clarify domain registration details.
- Marshall Wace
mwam.com
Finance · United Kingdom
71Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Marshall Wace is a globally recognized alternative investment manager specializing in quantitative, systematic, and fundamental investment strategies with a focus on long/short equity. The company operates multiple offices worldwide, demonstrating a significant international presence. The website is professionally designed, content-rich, and provides comprehensive information about the firm's values, teams, and impact. Technical infrastructure leverages WordPress CMS with modern plugins and tracking tools such as Google Analytics and Hotjar, indicating a mature digital presence. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and regulatory disclosures. Overall, the site reflects a well-established financial services firm with a focus on client trust and regulatory compliance.
Eastway Careeastwaycare.co.uk
Healthcare · United Kingdom
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Eastway Care is a UK-based healthcare organization providing daytime opportunities for people with learning and physical disabilities in East London. The website reflects a small-sized, local care provider with a focus on community support. The digital infrastructure is built on WordPress using the Divi theme, enhanced with SEO capabilities via Yoast and cookie consent managed by CookieYes. The website is moderately optimized for mobile and SEO, with a clean and professional design. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy and terms of service documentation. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security policies to improve compliance and user trust.
Other
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.featherstonerovers.co.uk is currently inaccessible, returning a 403 Forbidden error with no accessible content or metadata. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain may not be properly registered or is invalid. No business, contact, or policy information is available on the site. Technically, the site lacks HTTPS, security headers, and any detectable technology stack, resulting in a very low digital maturity and security posture. The absence of content and security controls poses significant risks and undermines trustworthiness.
- PPegasus Theatre
pegasustheatre.org.uk
Non-profit · United Kingdom
59Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Pegasus Theatre is a well-established non-profit community theatre organization based in East Oxford, UK, with over 60 years of history. The organization focuses on creating theatre for and with young people, offering classes, youth companies, and community engagement initiatives. The website reflects a professional and consistent brand presence, targeting young people and community members interested in the arts. Technically, the site is built on WordPress using the Divi theme and several plugins, hosted likely on WPEngine, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from improved compliance and security practices.
Dynamic CCTV Limiteddynamic-cctv.com
Technology · United Kingdom
75Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Dynamic CCTV Limited is a UK-based trade-only distributor specializing in CCTV, intruder alarms, access control, fire safety, and networking products. The company partners with leading global brands such as Hikvision, Ruijie, Pyronix, Ajax, and Texecom, offering a comprehensive product portfolio and award-winning technical support. Their business model focuses on B2B distribution with next day delivery services, targeting security professionals and installers. The website reflects a mature digital presence with modern technologies and good user experience, although it lacks visible privacy and terms of service documentation. The absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and consistent branding. Security posture is generally good with HTTPS and controlled access to pricing, but could be improved with enhanced security headers and published policies. Overall, the site is functional and trustworthy for its target audience but would benefit from improved transparency and compliance documentation.
Other
60Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.ralphlauren.co.uk is currently inaccessible due to an access denial error, likely caused by a Web Application Firewall (WAF) or server configuration blocking access. The minimal HTML content returned contains no metadata, structured data, or business information, preventing a detailed analysis of the company's online presence or digital maturity. WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain may be invalid or misconfigured. This lack of WHOIS data further complicates trust and legitimacy assessments. Security posture cannot be evaluated due to the absence of accessible headers or content, and no privacy or compliance policies are detectable. Overall, the site is effectively blocked from analysis, resulting in a very low AI score and limited insights.
- Ggcp Chartered Architects
gcparch.co.uk
Energy · United Kingdom
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
gcp Chartered Architects is a small, employee-owned architectural practice and energy consultancy based in Bristol, UK, with over 30 years of experience. They specialize in sustainable design, energy-efficient buildings, and Passivhaus standards, serving clients who seek innovative and environmentally responsible architectural solutions. The website is professionally designed using Squarespace, featuring rich visual content and clear navigation, targeting clients interested in sustainable architecture and energy consultancy. Technically, the site uses modern web technologies and integrates Google Analytics for user tracking, but lacks some security headers and privacy compliance features. The security posture is generally good with HTTPS enabled, but could be improved by adding security headers and visible privacy policies. The WHOIS data for the domain is unavailable and shows an error indicating the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and professional but should address privacy compliance and domain registration issues to improve credibility and security.
NetEquity Networksrtl-adconnect.com
Telecommunications · United States
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
NetEquity Networks is a small infrastructure sharing start-up based in San Francisco, focused on deploying open access fiber networks globally by leveraging electrical grid infrastructure. Their business model treats fiber as a public utility, aiming to make high-speed internet affordable for everyone within a decade. The website is professionally designed with clear navigation and relevant content targeting stakeholders interested in broadband infrastructure and digital inclusion. Technically, the site uses modern web fonts, Font Awesome icons, and carousel libraries, with good mobile optimization and SEO practices. However, there is no detected CMS or hosting provider information. Security posture is weak due to missing security headers and lack of visible HTTPS enforcement details. Privacy and cookie policies are absent, reducing compliance confidence. WHOIS data is missing, which raises concerns about domain legitimacy despite the professional appearance. Overall, the site presents a credible business front but requires improvements in security, privacy, and domain registration transparency.
Conway Packing Services Ltdconwaypack.co.uk
Manufacturing · United Kingdom
69Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Conway Packing Services Ltd is a UK-based small business specializing in export packing services, particularly for the Ministry of Defence (MoD), defence, and commercial clients. The company offers ISPM15 certified crates, bespoke cases, and compliant export packing solutions. Their market position is that of a niche specialist catering to regulated sectors requiring certified packing services. The website is built on the Wix platform, leveraging Wix's Thunderbolt rendering engine and standard JavaScript polyfills, indicating a moderate level of digital maturity. The site is mobile-optimized and presents professional content relevant to its business domain. Security posture is limited, with no visible security headers or incident response information, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain WHOIS lookup failed due to a naming rules violation, which raises concerns about domain registration legitimacy, although the website content and structured data suggest a legitimate business presence. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.
- AA & H Construction & Developments plc
ahconstruction.com
Real Estate · United Kingdom
51Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
A & H Construction & Developments plc is a reputable building contractor based in the West Midlands, UK, specializing in commercial, industrial, leisure, retail, education, and residential construction projects. The company has a strong regional presence with a portfolio of prestigious contracts and certifications that reinforce its market position. Their website reflects a professional business with clear contact information and a focus on quality and efficiency in construction services. Technically, the website employs modern web technologies such as jQuery and Google Fonts, and it is secured with HTTPS and Google Analytics for visitor tracking. However, it lacks some privacy compliance features such as a cookie consent mechanism and terms of service page. Security-wise, the site shows good practices with no visible vulnerabilities but could improve by adding security headers and incident response information. The WHOIS data is missing or unavailable, which raises some concerns about domain transparency but does not directly contradict the legitimacy of the business as presented on the website.
- SYSPAL Ltd
syspal.com
Manufacturing · United Kingdom
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
SYSPAL Ltd is a UK-based company specializing in the innovation, design, and manufacture of aluminium and stainless steel equipment tailored for hygiene and quality-oriented industries. The company positions itself as a market leader within this niche manufacturing sector, targeting industrial clients requiring hygienic processing equipment. The website reflects a professional business presence with a focus on industrial manufacturing solutions. Technically, the site is built on the Magento platform, leveraging modern JavaScript libraries and third-party marketing and analytics tools such as Google Analytics, Google Tag Manager, Leady, and Lfeeder. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, the absence of security headers and visible privacy policies indicates room for improvement. The WHOIS data is missing or unregistered, which raises concerns about domain legitimacy and ownership transparency. Overall, the website presents a moderate risk profile with recommendations to enhance compliance, security headers, and domain registration transparency.
- SSilk Museum
silkmacclesfield.org.uk
Non-profit · United Kingdom
64Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Silk Museum website represents a small non-profit cultural heritage organization focused on preserving and showcasing the silk industry history in Macclesfield, UK. The site provides visitor information, educational content, and access to guided tours and a gift shop. The museum targets general audiences including tourists and educational groups. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Tag Manager and Google Fonts, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS enabled, but lacks comprehensive security headers and published policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and hosting appear professional and trustworthy. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is functional and professional but would benefit from improved compliance documentation and domain registration clarity.