Security Directory

Rodgers & Johnston Ltd is a well-established property maintenance company founded in 1968, specializing in multi-trade planned and reactive repairs primarily for housing associations and local authorities in central Scotland. Their services include reactive maintenance, planned maintenance, out-of-hours emergency repairs, medical adaptations, and void works. The company emphasizes personal service, tenant well-being, and holds multiple industry certifications such as ISO 45001, ISO 9001, and ISO 14001, reflecting a commitment to quality and safety. Technically, the website is built on a modern Bootstrap framework with jQuery and other common libraries, providing a responsive and user-friendly experience. However, there is no evidence of advanced analytics or tracking, and no CMS is detected. The site lacks privacy and cookie policies, which indicates gaps in compliance with data protection regulations. Security headers are not evident, and WHOIS data for the domain is missing or invalid, which raises concerns about domain registration legitimacy. From a security perspective, the site shows basic good practices such as no exposed sensitive data and no vulnerable libraries detected. The absence of security headers and privacy policies, however, lowers the overall security posture. The WHOIS inconsistency suggests a need for domain registration verification. Overall, the website is professional and trustworthy in content but requires improvements in security and privacy compliance. The overall risk is moderate with recommendations to implement security headers, privacy and cookie policies, verify domain registration, and establish incident response contacts to enhance trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

G

George Walker Event Management Ltd | event management scotland

georgewalkerevents.co.uk

55

The website www.georgewalkerevents.co.uk appears to represent an event-related business hosted on the Wix platform. However, the domain WHOIS lookup failed with an error indicating the domain name is invalid per Nominet UK naming rules, raising concerns about the legitimacy of the domain registration. The website content is minimal, lacking privacy, cookie, or terms of service policies, and no contact information or social media links are present. Technically, the site uses Wix standard scripts and polyfills but lacks visible security headers or HTTPS information in the provided data. Overall, the site demonstrates poor content quality and business credibility with limited technical sophistication.

ScotlandIS is a well-established membership organisation focused on supporting and enabling Scotland's digital technology ecosystem. The website positions the company as a central player in Scotland's digital economy, offering membership services, industry insights, events, and cluster support. The site is professionally designed using WordPress with Elementor and WooCommerce, indicating a mature digital infrastructure. Security posture is solid with HTTPS and security headers implemented, though explicit security policies and incident response details are absent. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. The lack of WHOIS data reduces domain trustworthiness slightly but does not detract from the professional presentation and active engagement of the site. Overall, ScotlandIS demonstrates a strong market position in the technology sector with a focus on community and industry development.

The website www.scotland-tours.com currently presents only a security verification page employing Google reCAPTCHA v3, blocking access to any substantive content. The domain WHOIS data is unavailable, indicating the domain is either unregistered or the data is not publicly accessible, which raises significant trust and legitimacy concerns. No business information, contact details, or policies are present on the accessible page, limiting the ability to assess the company's operations or market position. Technically, the site uses modern frontend libraries such as Bootstrap 5.3.3 and Google reCAPTCHA, but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site is inaccessible for meaningful analysis and scores very low on content quality, business credibility, and privacy compliance.

W

Winemark

winemark.com

61

Winemark is a leading independent wine merchant and off licence chain in Northern Ireland, operating 84 stores and employing over 500 staff. The company specializes in retailing premium wines, beers, and spirits, complemented by services such as wine tastings, glass hire, gifting, and wedding services. Their market position as the largest off licence chain in the region is supported by a strong physical presence and an informative website with store locator and promotional offers. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and user engagement, demonstrating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced, age verification for legal compliance, and cookie consent mechanisms, though there is room for improvement in security headers and DNSSEC implementation. Overall, the site is professional, trustworthy, and compliant with GDPR, targeting adult consumers interested in alcoholic beverages.

Olympic Lifts Ltd is a well-established family-owned business based in Lisburn, Northern Ireland, with over 40 years of experience supplying and servicing a wide range of lift products including passenger lifts, hybrid lifts, access lifts, goods lifts, stair lifts, and escalators. The company serves commercial and domestic customers across Northern Ireland, the Republic of Ireland, and the UK, having completed over 15,000 projects. Their market position is strong within the lift manufacturing and servicing sector, supported by ISO certifications and a professional online presence. Technically, the website is built on WordPress using the Flatsome theme and common plugins such as Yoast SEO and Contact Form 7. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting is provided by a UK-based registrar, and the domain is long-established, consistent with the company's claimed history. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and incident response contact information. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The site does not appear to use analytics or tracking services, which limits user data collection but also reduces marketing insights. Overall, the website is professional, trustworthy, and business-focused, but improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

The domain caterhamlotus7.club is registered to Seven Club Ltd, a UK-based small business established in 2021, likely operating in the transportation sector given the domain name. However, the website content is currently inaccessible due to network restrictions or a web application firewall (WAF) blocking access, presenting a significant barrier to assessing the company's digital presence and offerings. The WHOIS data is transparent and consistent with the business identity, but no website content, metadata, or contact information is available for further analysis. Technically, the site lacks accessible content, metadata, or detectable technologies, preventing a full evaluation of its infrastructure or digital maturity. The hosting provider is Gandi SAS, a reputable registrar and hosting provider. The absence of DNSSEC and security headers, combined with the blocked content, suggests room for improvement in security configuration. From a security perspective, the inability to access the site limits the assessment of security posture, privacy compliance, and incident response readiness. No privacy or cookie policies are found, and no contact or security-related information is available. The domain registration is legitimate and consistent with the business, but the lack of accessible content and security best practices lowers trust and credibility. Overall, the site scores low on content quality, technical implementation, security posture, privacy compliance, and business credibility due to the blocking and lack of accessible information. Strategic recommendations include enabling proper HTTPS and security headers, publishing privacy and cookie policies, providing clear contact and incident response information, and ensuring the website is accessible to users and security scanners.

I

Invatech Health Ltd

invatechhealth.com

62

Invatech Health Ltd is a UK-based healthcare development company specializing in innovative health-tech solutions, pharmacy systems, and healthcare property development. The company has a strong market presence with over 30 years of experience and recognized products such as the Titan pharmacy system. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting healthcare providers and pharmacies. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms. The absence of WHOIS data raises some legitimacy concerns, though the business information and certifications support a credible profile. Overall, the website is well-designed and trustworthy but could improve in privacy compliance and security best practices.

R

Red Vape Ltd

redvape.com

51

Red Vape Ltd is a UK-based manufacturer and retailer specializing in premium gourmet e-liquids, focusing on natural ingredients and luxury tobacco flavors. The company positions itself as a leading UK luxury e-liquid brand with a strong emphasis on quality, compliance, and customer service. Their product range includes naturally extracted tobacco e-liquids, premium flavored e-liquids, zero nicotine options, and high VG blends, catering to vaping enthusiasts seeking high-quality products. The website is professionally designed, mobile-optimized, and uses modern e-commerce technologies including WordPress and WooCommerce, supported by Google Tag Manager and Sendinblue for marketing and analytics. Security measures such as HTTPS and Google reCAPTCHA are implemented, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact information and social media presence enhancing trust. However, the absence of WHOIS domain registration data raises some concerns about domain transparency, which should be addressed to improve business credibility. Overall, Red Vape demonstrates a mature digital presence with good security posture and compliance, serving a niche market in the UK vaping industry.

The website www.mjconway.com is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. This prevents access to any substantive content, business information, or contact details. The WHOIS lookup for the domain returned no registration data, suggesting the domain may not be registered or the data is withheld, which raises concerns about the legitimacy and trustworthiness of the domain. The technical infrastructure is minimal, relying primarily on Bootstrap for styling and Google reCAPTCHA for security verification. No privacy, cookie, or terms of service policies are present, and no contact or business information is accessible. Overall, the site’s security posture is limited to bot protection, with no visible advanced security headers or compliance indicators.

The website at www.fgebiomass.co.uk currently serves a 404 Not Found error page, indicating the requested content is unavailable. The domain itself is invalid according to Nominet UK naming rules, as it contains too many parts, and WHOIS data is not retrievable. Consequently, no business information, contact details, or privacy policies are present on the site. The technical infrastructure appears minimal, with only Google Fonts loaded externally and no detectable CMS, analytics, or security features. The lack of HTTPS and security headers further diminishes the site's security posture. Overall, the site is non-functional and lacks any meaningful content or business presence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Simply Networks

simplynetworks.com

52

Simply Networks is a small UK-based company preparing to launch its new website, currently displaying a professional coming soon page with contact phone number and physical address in London. The website uses a modern WordPress infrastructure with Elementor and Slider Revolution plugins, supported by Google Analytics and Google Tag Manager for tracking. The technical setup is moderate in performance and mobile optimization, but lacks advanced accessibility features and security headers. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and SSL configuration partially mitigate these concerns. Overall, the site is functional but minimal, with room for improvement in compliance and security.

Gas Tech (Wales) Ltd is a small, specialized energy services company based in the United Kingdom, focusing on central heating solutions including boiler installations, servicing, and maintenance. The company emphasizes its Gas Safe registration and offers grant funding options, positioning itself as a trusted local provider with over 70 years of combined experience. The website is professionally designed with clear navigation and multiple contact channels, including phone, email, and a contact form, supporting customer engagement and lead generation. Technically, the site leverages modern web technologies such as jQuery, Ecwid ecommerce integration, and PWA features, hosted on CDN infrastructure for performance. Security posture is good with HTTPS and CAPTCHA protections, though some security headers are missing. Privacy and cookie policies are present, indicating basic GDPR compliance. However, the domain WHOIS data is unavailable due to a naming rules violation error from Nominet UK, which slightly reduces trust from a domain registration perspective. Overall, the site is functional, professional, and secure, suitable for its business purpose.

The website catalyst-fund.com is currently inaccessible, returning a 403 Forbidden error page. This indicates that access to the site is blocked or restricted, likely by Cloudflare security mechanisms as evidenced by the DNS name servers. Due to the lack of accessible content, no business descriptions, contact information, or policy documents are available for analysis. The domain is registered with Network Solutions, LLC since 1999, which suggests a long-standing presence, but no registrant details are provided to verify legitimacy. The technical infrastructure shows Cloudflare DNS usage but lacks DNSSEC and security headers, indicating room for security improvements. Overall, the website's security posture is limited by the lack of accessible content and missing security best practices. The absence of privacy and cookie policies, contact details, and business information further reduces trust and compliance confidence.

S

Shebbear College

shebbearcollege.co.uk

61

Shebbear College is a well-established independent co-educational day and boarding school located in Devon, UK, founded in 1829. The institution offers education for students aged 4 to 18, including nursery, prep, senior school, and sixth form. The website reflects a professional and comprehensive digital presence with detailed information about admissions, school life, academics, and boarding options. The school positions itself as a nurturing community with a strong emphasis on academic excellence, co-curricular activities, and outdoor learning.

L

LABC

labc.co.uk

62

LABC is a well-established membership organization representing local authority building control teams across England and Wales. It provides essential services including building regulations guidance, accredited training, and professional development for over 3,000 building inspectors and technical staff. The website reflects a strong market position with comprehensive content tailored to various stakeholders such as builders, engineers, developers, homeowners, and local authority leaders. The organization is government-aligned and operates in the public sector domain. Technically, the website is built on Craft CMS and integrates modern tools like Google Analytics, Google Tag Manager, and CookieYes for consent management. It demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. The presence of structured data enhances search engine understanding and trust. From a security perspective, the site uses HTTPS, employs CSRF tokens in forms, and provides a cookie consent mechanism aligned with GDPR. While explicit security headers are not visible in the HTML, the overall posture is good with no evident vulnerabilities or exposed sensitive data. The WHOIS data for the domain is unavailable due to querying the 'www' subdomain, but the website content and business information strongly support legitimacy. Overall, LABC's website is professional, secure, and compliant, serving its audience effectively with clear contact channels and transparent policies.

E

Evoture.com — Premium Domain For Sale | Atom

evoture.com

67

The website atom.com/name/Evoture serves as a premium domain marketplace landing page, specifically promoting the sale of the Evoture.com domain. The business model focuses on offering verified premium domains with flexible payment options such as installments, targeting startups and businesses in technology, travel, and personal development sectors. The site positions itself as a trusted reseller with transaction support and no extra fees. Technically, the site employs modern web technologies including Google Fonts for typography, Google reCAPTCHA for bot protection, and New Relic for performance and error monitoring. The site is served over HTTPS, ensuring secure communications. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of visible contact information, limits its privacy compliance and business transparency. Security posture is generally good with HTTPS and bot protection, but could be improved by adding security headers and vulnerability disclosure information. Overall, the site is professional and functional but would benefit from enhanced compliance and transparency measures.

The website for www.hrmillen-builders.co.uk is currently inaccessible beyond a security verification page implementing Google reCAPTCHA v3. No business content, contact information, or policies are available for review. The domain WHOIS query failed due to the domain name violating Nominet UK's naming rules, indicating the domain is invalid or misconfigured. This severely limits the ability to assess the business or technical maturity of the site. The technical infrastructure is minimal, relying on Bootstrap and Google reCAPTCHA, with no visible CMS or hosting details. Security posture is limited to bot verification, with no HTTPS or security headers visible in the provided data. Overall, the site appears to be either under protection or misconfigured, resulting in a low trust and credibility score.

Web Presence Ltd is a small UK-based digital marketing agency specializing in inbound marketing, web development, and charity advertising services. Established since 2004, the company targets SMEs and non-profit organizations primarily in Cheshire and the UK. The website demonstrates a professional market position with a focus on digital growth support and charity sector expertise. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and multiple analytics and marketing tools such as Google Analytics, HubSpot, and TikTok Pixel. The site is mobile optimized and SEO friendly with good content quality and navigation. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. However, the site lacks explicit contact emails and phone numbers, relying on contact forms, and does not publish a security policy or vulnerability disclosure. Overall, the domain WHOIS is privacy protected, which is justified for this business type, and no suspicious patterns are detected. The website scores well on professionalism, security, and compliance, making it a trustworthy digital marketing service provider.

CTI Digital is a well-established full-service digital agency founded in 2003, specializing in web development, digital marketing, and AI innovation. With over 150 specialists across Manchester and Lancaster, the company positions itself as a leading partner for ambitious brands seeking digital transformation and measurable growth. Their service offerings include web design and build, digital marketing, strategic consulting, and AI-driven innovation solutions. The website reflects a professional and modern digital presence with comprehensive service descriptions, client case studies, and certifications that enhance credibility. Technically, the website leverages modern technologies including Umbraco CMS, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. The site is mobile-optimized, fast-loading, and SEO-friendly, with structured data enhancing search visibility. Security posture is strong with HTTPS enforced and recognized certifications like ISO 27001 and Cyber Essentials, although explicit security headers were not detected in the provided data and should be verified. The WHOIS data is notably absent or inaccessible, which introduces some uncertainty regarding domain registration transparency. However, the website content, business information, and trust signals strongly support legitimacy. Privacy and cookie policies are present and GDPR compliant, with clear contact information including email, phone, and physical addresses. Overall, CTI Digital demonstrates a robust business and technical foundation with a strong security and compliance stance. The primary risk lies in the lack of WHOIS transparency, which should be monitored. Strategic recommendations include enhancing security headers, publishing an incident response contact, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

Bytheways is a UK-based office supplies retailer specializing in a wide range of products including medical supplies, stationery, janitorial items, PPE, and catering supplies. The company primarily serves businesses and organizations in the North East of England, offering a comprehensive e-commerce platform with a broad product catalog. The website is professionally designed with clear navigation and consistent branding, supporting a B2B and B2C business model. Technically, the site leverages modern JavaScript libraries and integrates third-party services such as Google Analytics, Google Tag Manager, reCAPTCHA, and Tawk.to live chat, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection but lacks explicit security policies and advanced security headers, suggesting room for improvement. The WHOIS data is incomplete due to a domain naming rules error, which slightly impacts trust but the website's operational status and contact transparency mitigate concerns. Overall, the site presents a moderate risk profile with recommendations to enhance security policies and WHOIS transparency.

T

Tamar IT

tamar-it.co.uk

50

Tamar IT Ltd is a UK-based small business specializing in comprehensive IT services including business IT support, cloud server hosting, network infrastructure, telecoms, web design, and bespoke cloud application development. Established in 2016, the company positions itself as a reliable IT partner for businesses seeking secure and efficient IT solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress using modern tools such as Breakdance Builder and LiteSpeed caching, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though additional security headers could enhance the posture. Privacy compliance is addressed with accessible privacy and cookie policies, including consent mechanisms. Overall, Tamar IT demonstrates a solid digital presence with a trustworthy business profile.

W

Wilson Thomas

wilsonthomas.co.uk

49

Wilson Thomas is an independent estate agency established in 1992, serving the Poole, Broadstone, and surrounding Dorset areas. The company offers a comprehensive range of real estate services including property sales, financial services, conveyancing, surveyors, and unique offerings such as sale by informal tender and utility concierge services. The business positions itself as a trusted local expert with over 30 years of experience and multiple office locations, supported by client testimonials and recognized certifications such as The Property Ombudsman and Chartered Trading Standards Institute.

The website represents Bakers Kitchen Ltd., a small bespoke kitchen company based in Kent, UK, specializing in the design, supply, and installation of custom kitchen furniture. The business targets homeowners and property owners in Kent and surrounding areas, offering a wide range of kitchen styles and materials with bespoke sizing and customization options. The website content is comprehensive regarding business offerings but lacks modern technical and security features. Technically, the site is built with basic HTML, CSS, and JavaScript, without evidence of a CMS or modern frameworks. Performance and mobile optimization are basic, and SEO practices are minimal. Security posture is weak, with no HTTPS enforcement or security headers detected, and no cookie consent mechanism or GDPR compliance indicators. The WHOIS data is unavailable due to domain registration issues flagged by Nominet UK, raising concerns about domain legitimacy. Overall, the site provides useful business information but requires significant improvements in security, privacy compliance, and technical modernization.

Lucio is a fine Italian dining restaurant located in Fulham, London, established in 2003. The website presents a professional and consistent brand image, targeting general audiences seeking seasonal Italian cuisine. The business operates primarily as a hospitality service with a local market focus. Technically, the website is built on the Squarespace platform, leveraging modern web fonts and standard web technologies, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security or privacy policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy or privacy protection, which should be verified. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance documentation.

Key2 Group is a UK-based signage manufacturer located near Portsmouth, specializing in plastic fabrication, retail display, signage, printing, and bespoke screens. The company offers end-to-end services from industrial design to manufacturing and installation, targeting businesses requiring signage and printing solutions. Their market position is that of a regional specialist with in-house production capabilities, serving a business clientele primarily in the manufacturing and retail sectors. The website is professionally designed using Squarespace, with good mobile optimization and clear navigation. The technical infrastructure includes modern web technologies and analytics tools such as Microsoft Clarity and Google Tag Manager, hosted on Squarespace's platform. Security posture is strong with HTTPS enforced, HSTS enabled, and use of reCAPTCHA for form protection. However, the absence of explicit privacy policy and terms of service pages represents a compliance gap. The WHOIS data is missing, which raises concerns about domain legitimacy despite the active and professional website presence. Overall, the site is safe, business-focused, and trustworthy but would benefit from improved compliance documentation and domain registration transparency.

Finisterre is a well-established sustainable outdoor apparel brand operating an e-commerce store primarily targeting German-speaking customers. The company emphasizes environmentally conscious products and holds a B Corp certification, positioning itself as a niche player in the sustainable retail market. The website is built on Shopify, leveraging a modern tech stack with multiple marketing and analytics integrations, including Cookiebot for consent management and Signifyd for fraud prevention. The site demonstrates good technical maturity with fast performance, mobile optimization, and SEO best practices. Security posture is solid with HTTPS enforcement and domain transfer protection, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is partially evidenced by cookie consent mechanisms, but explicit privacy policy and terms of service pages were not detected in the provided content. Overall, the website is professional, trustworthy, and aligned with its business goals.

D

Dial Doncaster

dialdoncaster.co.uk

47

Dial Doncaster is a small UK-based non-profit organization dedicated to supporting disabled people and their families in the Doncaster area. Founded in 1983, the organization has served the community for over 40 years but has recently announced its closure. The website provides information about the organization’s history, closure announcement, and directs users to an alternative support site. The business model is community-focused non-profit support with a local target audience. Technically, the website is built on Joomla CMS using common libraries such as jQuery, Bootstrap, and Font Awesome. Google Analytics is used for visitor tracking. The site is accessible with moderate performance and basic mobile optimization. However, there is a lack of advanced security headers and no cookie consent mechanism, which impacts privacy compliance. The WHOIS lookup failed due to domain registration issues, which raises concerns about domain legitimacy despite the genuine content. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. No forms or sensitive data collection mechanisms were detected, reducing immediate risk. Overall, the site is functional but requires improvements in security best practices, privacy compliance, and domain registration legitimacy to enhance trust and compliance. The overall risk is moderate with recommendations to improve security headers, implement cookie consent, clarify contact information, and resolve domain registration issues to ensure long-term credibility and compliance.

Lieferando is a leading online marketplace specializing in food delivery, groceries, and everyday products primarily serving Germany and Austria. Founded in 2009 and operating under the parent company Just Eat Takeaway.com, Lieferando offers a comprehensive platform that connects consumers with over 35,000 restaurants and stores. The company also provides logistics services with employed couriers, enhancing delivery reliability for partners without their own delivery infrastructure. The website is professionally designed, mobile-optimized, and rich in content, targeting consumers seeking convenient food and grocery delivery solutions.

N

Newham Community Renewal Programme Ltd

renewalprogramme.org.uk

51

The Renewal Programme is a well-established non-profit organization serving the Newham community in the UK for over 50 years. It offers a broad range of community services including food support, health and wellbeing activities, employability programs, and support for refugees and migrants. The organization maintains a strong local presence and is recognized with the Trusted Charity Standard Level 1 certification, reinforcing its credibility and trustworthiness. The website is professionally designed with clear navigation and comprehensive content tailored to its community audience. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. However, the WHOIS data for the domain is unavailable due to a registration error, which slightly impacts trustworthiness and should be investigated further. Overall, the website and organization demonstrate a high level of professionalism and community focus.

B

BettaVeg Ltd

bettaveg.co.uk

60

BettaVeg Ltd is a family-run wholesale supplier of fresh fruit, vegetables, dairy products, dried goods, and prepared produce, primarily serving hotels, restaurants, schools, and other food establishments in the North West of England. Established in 2002, the company emphasizes quality, service, and competitive pricing, positioning itself as a trusted local supplier with over 20 years of experience. The website reflects this business focus with clear product categories, customer testimonials, and active social media engagement. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Analytics and Tag Manager for tracking, and Typekit for fonts. The site is mobile-optimized with good navigation and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks some advanced security headers and explicit incident response information. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS lookup for the domain 'www.bettaveg.co.uk' failed due to a naming rules violation, which is unusual and suggests the domain queried may not be the exact registered domain or is a subdomain. Despite this, the website is fully accessible and professional, indicating legitimacy. Privacy compliance is good with a privacy policy and cookie banner present. Overall, the website presents a trustworthy and professional front for BettaVeg Ltd, though domain registration details should be verified for full assurance. Strategic recommendations include enhancing security headers, publishing an incident response policy, and improving accessibility features to strengthen compliance and security posture.

I

Innovid

flashtalking.com

67

Innovid unleashes the power of creative to make media work better across all channels with AI and automation. It provides automation to connect teams and deliver efficient production, versioning, and distribution of creative, enabling personalization and intelligence for audience engagement.

The website at https://www.fordmears.uk/funeral-directors/michael-miller-partners-petersfield is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3. This indicates the presence of a Web Application Firewall or bot protection mechanism that restricts direct content access. Due to this, no substantive business content, contact information, or policies are available for analysis. The domain WHOIS lookup failed with an error indicating the domain name is invalid per Nominet UK naming rules, suggesting potential misconfiguration or that the domain is a subdomain rather than a registered domain. The technical infrastructure uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site exhibits minimal digital maturity and poor content quality, with significant gaps in privacy compliance and business credibility.

P

PAE Business

paebusiness.com

57

PAE Business is a UK-based independent value added distributor specializing in managed print services (MPS) and managed content services (MCS). The company offers industry-leading solutions including print device management, user management, business dashboards, total cost of ownership audits, and floor planning audits. Their market position is strong within the technology sector, targeting businesses seeking to optimize their print and content management infrastructure. Founded in 2015, PAE Business maintains a professional online presence with consistent branding and a clear focus on their core services. Technically, the website is built on WordPress with modern integrations such as Google Fonts, Yoast SEO Premium, Google Tag Manager, and ClickCease for bot mitigation. The site demonstrates good SEO optimization, mobile responsiveness, and accessibility features, although performance is moderate. Hosting and domain registration are consistent with the business profile, with a domain age appropriate for the company's history. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protection. However, it lacks DNSSEC and explicit security headers like Content-Security-Policy and X-Content-Type-Options. Privacy compliance is basic, with a cookie policy present but no clear GDPR consent mechanism or comprehensive privacy policy. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website presents a trustworthy and professional image with room for improvement in security headers, privacy compliance, and direct contact information. Strategic enhancements in these areas would strengthen their security posture and regulatory adherence.

The website www.simpexgroup.com currently hosts minimal content, consisting solely of a frameset that loads https://simpexmro.com/. There is no substantive business information, metadata, or contact details present on the site. The WHOIS lookup for the domain returned no registration data, indicating the domain may not be registered or the data is unavailable, which raises significant legitimacy concerns. The lack of HTTPS information and security headers further diminishes the site's trustworthiness. Overall, the digital maturity of this domain is very low, with no visible security or privacy compliance measures in place.

Glanville Environmental is a well-established UK-based civil engineering and drainage services company operating since 1983, with a strong regional presence in the South West and Midlands. The company offers a comprehensive range of services including drainage and sewer works, sewer rehabilitation, manhole construction, and specialized solutions such as trenchless and no-dig technologies. With over 180 employees and multiple depots, Glanville Environmental positions itself as a market leader with a commitment to sustainability and net zero initiatives. Technically, the website is built on WordPress with modern plugins such as Gravity Forms, Google Tag Manager, and CookieYes for consent management. The site demonstrates good SEO practices, mobile optimization, and accessibility features. Security measures include HTTPS enforcement and use of Google reCAPTCHA on forms, though some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring detailed cookie and privacy policies aligned with GDPR requirements. The company displays multiple ISO certifications and industry awards, enhancing trust and credibility. However, the absence of WHOIS domain registration data is a notable concern, as it conflicts with the active and professional nature of the website. This discrepancy lowers the overall trust score and suggests further verification of domain legitimacy is advisable. Overall, Glanville Environmental presents a professional and trustworthy digital presence with strong business and technical foundations, but domain registration transparency should be addressed to improve credibility.

openDemocracy is an established independent international media platform focused on news, ideas, and culture with an emphasis on challenging power and encouraging democratic debate. The website is professionally designed, content-rich, and targets a general audience interested in global affairs and democratic discourse. The platform operates on the Ghost CMS, leveraging modern web technologies and third-party services such as Google Analytics and Stripe for payments. Security posture is strong with HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness from a domain registration perspective. Overall, the site is reliable, secure, and compliant with privacy regulations, making it a credible source of independent media.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The Catholic Association is a well-established UK-based charity with a history spanning over 125 years, focused on organizing pilgrimages to Lourdes, France. The website reflects a medium-sized non-profit organization with a clear mission and target audience within the Catholic community. The business model centers on pilgrimage services, volunteer coordination, and fundraising activities. The organization maintains a consistent brand presence and trust indicators such as registration numbers and social media engagement. Technically, the website is built on the Squarespace platform, leveraging HubSpot for form management and Google/Typekit fonts for typography. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks visible security headers and explicit privacy or terms of service documentation. The WHOIS data for the domain is unavailable due to a domain naming rules error, which suggests the domain queried may be a subdomain or alias. This anomaly does not detract significantly from the site's legitimacy given the organization's established history and content quality. Overall, the website presents a trustworthy and professional front for the Catholic Association, with recommendations to enhance security headers, publish privacy and terms policies, and provide clearer contact information to improve compliance and user trust.

S

SML Supplies

smlsupplies.co.uk

56

SML Supplies is a UK-based wholesale supplier specializing in medical supplies, cleaning products, and janitorial equipment. The company targets healthcare providers, medical facilities, and cleaning businesses, offering a broad range of products at wholesale prices. Their market position is that of a leading supplier within the UK medical and cleaning supplies sector, supported by a professional website and active social media presence. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized with good navigation and content quality. However, no CMS or hosting provider details were identified, and performance is moderate. From a security perspective, HTTPS is implied but no explicit security headers were detected in the provided data. There is no visible privacy or cookie policy, nor any published security or incident response policies. The WHOIS lookup failed due to querying the 'www' subdomain, which reduces trust in domain registration transparency. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website presents a moderate risk profile with good business credibility but gaps in privacy compliance and security best practices. Strategic improvements in security headers, privacy policies, and WHOIS transparency are recommended to enhance trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

B

Beesley & Fildes Ltd

beesleyandfildes.co.uk

69

Beesley & Fildes Ltd is a well-established UK builders merchants company with a rich heritage dating back to 1820. The company offers a comprehensive range of building materials including bricks, timber, plumbing, landscaping, and roofing supplies. With over 10 branches across the UK, it serves professional builders, contractors, and DIY enthusiasts, providing services such as trade accounts, click and collect, and delivery. The website reflects a professional and trustworthy business with strong customer engagement and social media presence. Technically, the website employs modern web technologies including jQuery, Slick Carousel, Google Tag Manager, and Meta Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and structured data for enhanced search visibility. Security is well-implemented with HTTPS and secure form handling, though some security headers and explicit security policies are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. However, the WHOIS data for the domain could not be retrieved due to a query error on the full hostname rather than the base domain, which is a technical anomaly but does not detract from the website's legitimacy. Overall, Beesley & Fildes presents a low-risk profile with a strong market position and professional digital presence. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.