Security Directory

Grainger & Worrall is a well-established UK-based company specializing in complex aluminium sand casting and machining services, serving demanding industries such as automotive, aerospace, and defence. With over 70 years of experience and a strong market position as a subsidiary of Evolution Castings Group Limited, the company offers a comprehensive range of services from engineering and prototyping to machining and validation. Their website reflects a professional and modern digital presence, leveraging WordPress CMS and integrating multiple marketing and analytics tools to support business growth and customer engagement. The technical infrastructure is solid, hosted by Hosting UK, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, with cookie consent implemented but lacking detailed GDPR indicators and security policies. Overall, the website is trustworthy, well-branded, and effectively communicates the company's expertise and contact channels.

F

Forterra

forterra.co.uk

66

Forterra is a leading UK manufacturer specializing in essential clay and concrete building products, including bricks, blocks, precast concrete, façade systems, and roofing components. The company holds a strong market position with iconic brands such as London Brick and Thermalite, serving construction professionals, architects, and developers. Their business model focuses on manufacturing and direct supply, supported by technical resources and customer portals to enhance client engagement. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, Google Tag Manager, and Pardot for marketing automation. The site demonstrates excellent mobile optimization, SEO, and performance, with comprehensive privacy and cookie consent mechanisms in place. Security measures include HTTPS, Google reCAPTCHA v3, and cookie consent, though some security headers could be further enhanced. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is noted. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, but website content and business information strongly indicate legitimacy and an established presence. Overall, Forterra's website reflects a professional, secure, and compliant digital presence aligned with its business stature. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

U

Upham Inns

oakmaninns.co.uk

52

Upham Inns operates a collection of premium countryside pubs with rooms across Southern England, targeting travelers seeking authentic rural hospitality experiences. Their offerings include characterful pubs, individually designed bedrooms, and menus focused on seasonal countryside cuisine. The website is built on WordPress with modern plugins and integrates multiple partner domains for booking and dining services. While the technical infrastructure is solid with HTTPS and analytics tools, the site lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with room for improvement in security headers and incident response visibility. Overall, Upham Inns presents a professional and trustworthy online presence aligned with their hospitality business model.

R

RDJ Shutters Ltd

rdjshutters.co.uk

60

RDJ Shutters Ltd is a UK-based small business specializing in bespoke interior window shutters and wooden blinds, serving customers primarily in Hertfordshire but with a national reach. The company emphasizes quality, bespoke service including free home visits, expert advice, and professional measuring and fitting. Their market position is strengthened by accreditation as a Which Trusted Trader and positive client testimonials. The website reflects a professional and trustworthy business with clear contact channels and detailed product offerings. Technically, the website is built on WordPress with a modern tech stack including jQuery, Gravity Forms for data collection, and SEO optimization via Yoast. Hosting is provided by Zen Internet Limited, a reputable UK provider. The site performs moderately well with good mobile optimization and basic accessibility features. Analytics and user behavior tracking are implemented using Google Analytics and Hotjar, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration and employs basic security best practices such as form validation and spam protection. However, it lacks advanced security headers like Content Security Policy and does not provide a security policy or incident response information. Privacy compliance is partial; a privacy policy and terms of service are present, but no cookie consent mechanism is detected. Overall, the website presents a low-risk profile with strong business credibility and a solid technical foundation. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory adherence.

Northstar Ventures is a UK-based venture capital firm specializing in investments in early and later stage high growth companies focused on climate technology and healthy ageing. The company positions itself as a forward-looking investor aiming to tackle global challenges through innovation and capital deployment. The website reflects a professional and modern digital presence built on WordPress with Elementor, featuring a clean design and clear navigation. The technical infrastructure includes standard security practices such as HTTPS and security headers, alongside user tracking via Google Analytics. However, the absence of a privacy policy and terms of service pages, coupled with missing verified contact information, indicates gaps in compliance and business transparency. The WHOIS data is notably missing due to a domain registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the security posture is solid but could be improved with enhanced privacy compliance and clearer business contact details.

V

Vapourtec Ltd.

vapourtec.com

62

Vapourtec Ltd. is a UK-based manufacturer specializing in flow chemistry equipment and fast-flow peptide synthesizers, serving a global market of chemists and researchers. With over 22 years of experience, the company holds a strong market position supported by extensive installations worldwide and numerous scientific citations. Their product portfolio includes modular and integrated flow chemistry systems, peptide synthesizers, and chemistry tools, complemented by a comprehensive resource center and customer support. Technically, the website is built on WordPress with modern SEO and analytics tools, including Google Analytics, Google Tag Manager, and HubSpot. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security measures include HTTPS, reCAPTCHA, and anti-spam plugins, though explicit security headers could be enhanced. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the professional web presence mitigates this concern. Overall, Vapourtec presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying domain registration details to improve trust further.

W

WorkForce Software

workforcesoftware.com

71

WorkForce Software is an established enterprise software company specializing in workforce management solutions. The company offers software products aimed at optimizing labor management, compliance, and employee engagement for large organizations. The website reflects a professional and consistent brand presence with a focus on B2B services in the technology sector. The domain age and registration details support the legitimacy and maturity of the business. Technically, the website is built on WordPress using Elementor and WP Rocket for performance optimization. It integrates several marketing and analytics tools such as Google Tag Manager, OneTrust for cookie consent, and various ad/tracking pixels. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and trustworthy but would benefit from publishing comprehensive privacy and security policies to improve compliance and user trust. The AI score reflects a solid technical and business foundation with room for improvement in privacy compliance and security transparency.

Graham Parish Engineering is a small, family-run manufacturing business established in 1986, specializing in CNC machining, structural steelwork, architectural metalwork, and care-home beds. The company operates primarily in Suffolk and the East of England, serving clients requiring bespoke engineering and manufacturing solutions. The website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reputable regional manufacturer.

S

SAS Metal Fabrication

saintanns.co.uk

61

SASM Fabrication is a UK-based sheet metal manufacturing company with origins dating back to 1960, specializing in laser cutting, CNC bending, welding, and powder coating services. The company positions itself as a quality-oriented manufacturer serving industrial clients, leveraging state-of-the-art fiber laser technology and ISO 9002 accreditation to maintain competitive advantage. Their digital presence is built on a modern WordPress platform with SEO and GDPR compliance features, supported by active social media channels. The website provides clear contact information and service descriptions, targeting B2B manufacturing customers primarily in the UK region. Technically, the website employs a robust WordPress infrastructure with multiple plugins for SEO, anti-spam, GDPR compliance, and user experience enhancements. The site is mobile-optimized and performs moderately well, with good SEO metadata and structured data. Security posture is strong with HTTPS enforced and anti-spam measures, though security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid for a medium-sized manufacturing business, with good privacy compliance and trustworthy domain registration. The domain age is younger than the business founding date, suggesting a recent digital presence establishment or rebranding. No blocking or WAF challenges were detected, allowing full content access and analysis. Strategic recommendations include enhancing security headers, adding explicit security and incident response policies, and considering a security.txt file for vulnerability disclosure. These steps would further strengthen trust and compliance in an increasingly regulated environment.

LandFlight Travel Services operates a UK-based transportation business specializing in bus, coach, chauffeur, and airport transfer services. The company targets corporate and private clients, emphasizing eco-friendly and executive vehicle options. The website is professionally designed, built on WordPress, and incorporates modern technologies such as Google Analytics and reCAPTCHA for security and analytics. Despite a generally good security posture with HTTPS and secure forms, the site lacks some security headers and has a broken Google Maps integration. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. The WHOIS data is unavailable due to domain naming rule violations, which raises concerns about domain legitimacy, although the website content and contact information appear credible and consistent with a legitimate business.

I

IK-Trax

online-electronics.com

64

IK-Trax is a specialized company focused on manufacturing pipeline pig locating and signalling equipment along with advanced pipeline data logging and testing systems. Founded in 2023 and operating under the IK Group umbrella, the company targets pipeline operators and installation companies primarily in the energy sector. The website demonstrates a strong market position with over 25 years of expertise reflected in its product offerings and comprehensive content. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive business credibility profile.

RHI Magnesita is a global leader in manufacturing high-grade refractory products, systems, and services primarily serving the steel, cement, glass, and non-ferrous metals industries. Their website reflects a mature enterprise with a strong market position and a focus on sustainability and innovation. The company targets industrial clients requiring advanced heat management solutions and refractory expertise. Technically, the website is built on WordPress with modern plugins and technologies such as Yoast SEO, Cookiebot for consent management, and Google Analytics for tracking. The site is well-structured, mobile-optimized, and SEO-friendly, indicating a good level of digital maturity. Security-wise, the site enforces HTTPS and uses secure forms but lacks explicit security policy or incident response disclosures. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding strongly suggest legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.

B

BWS Windows Ltd

bwswindows.co.uk

57

BWS Windows Ltd is a small UK-based manufacturer and installer specializing in bespoke windows, doors, and roof lanterns, primarily serving Bedfordshire, London, Surrey, and surrounding areas. The company operates a showroom in Bedford and caters to both trade and domestic customers. Their product offerings include uPVC and aluminium systems, with a focus on quality and competitive pricing. The website reflects a professional and trustworthy business with clear contact channels and customer testimonials. Technically, the website is built on WordPress with modern technologies such as jQuery and Font Awesome, optimized for mobile devices and SEO. The presence of Yoast SEO plugin and Google Analytics indicates a focus on digital marketing and performance tracking. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. From a security perspective, the site enforces HTTPS, includes standard security headers, and uses secure forms with validation. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism, aligning with GDPR requirements. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements could include adding detailed security policies, incident response contacts, and enhancing accessibility features to further strengthen trust and compliance.

M

MBA Polymers Inc.

mbapolymers.com

44

MBA Polymers Inc. is a globally recognized leader in the plastic recycling industry, specializing in converting post-consumer durable goods waste into high-value recycled plastic granulates. Founded in 1997, the company operates state-of-the-art production units across multiple countries including Germany, China, India, and the UK, serving manufacturers worldwide with sustainable materials that reduce energy consumption and carbon emissions. Their patented technology and numerous certifications underscore their market leadership and commitment to quality and sustainability. Technically, the website is built on a modern WordPress platform using the Enfold theme, enhanced with SEO and performance plugins like Yoast SEO and WP Rocket. The site demonstrates excellent mobile optimization, fast loading times, and good accessibility features. Analytics are implemented via Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms. However, explicit security headers and a public security policy or incident response contacts are not found, representing areas for improvement. The domain registration is consistent with the company’s history and business claims, enhancing trustworthiness. Overall, MBA Polymers presents a professional, trustworthy, and well-structured digital presence aligned with their business objectives. Strategic enhancements in security policy transparency and DNS security could further strengthen their security posture and compliance.

St Nicholas Hospice Care is a well-established UK-based non-profit organization providing specialist palliative care and community support services. The website reflects a mature digital presence with comprehensive information on services, volunteering, donations, and community engagement. The organization holds recognized certifications such as an Outstanding CQC rating and registration with the Fundraising Regulator, reinforcing its credibility and trustworthiness. The site targets patients, families, healthcare professionals, and donors, offering clear pathways for support and involvement. Technically, the website is built on WordPress with modern plugins including Yoast SEO and Google Tag Manager integration. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of cookie consent mechanisms and privacy policies indicates compliance with GDPR and privacy regulations. Hosting is provided by a reputable UK registrar, and no WAF or security challenges interfere with content access. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, some security headers could be improved or explicitly implemented. The site uses tracking tools responsibly with user consent. Overall, the site scores high on professionalism, trust, and compliance, making it a reliable resource for its audience. Strategically, the organization should focus on enhancing security headers, publishing a formal security policy, and maintaining regular audits of third-party scripts. These steps will further strengthen its security posture and stakeholder confidence.

H

Hillsdale College

hillsdale.edu

66

Hillsdale College is a well-established private liberal arts college based in Michigan, known for its classical education and independence from government funding. The website reflects a professional and consistent brand image, targeting prospective students and academics interested in a classical liberal arts education. The institution maintains a strong social media presence and uses modern web technologies including WordPress CMS, SEO optimization tools, and cookie consent mechanisms to comply with privacy regulations. Technically, the site is well-structured with good mobile optimization and accessibility features, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the overall site content and branding strongly support legitimacy. Privacy compliance is basic with cookie consent but lacks explicit privacy or security policy pages. No forms or contact details were found in the provided content, suggesting contact information may be located elsewhere on the site. Security posture is good with HTTPS and no visible vulnerabilities, but could benefit from publishing security policies and vulnerability disclosure information.

JB Elite is a UK-based specialist company providing commercial and domestic swimming pool services including construction, maintenance, refurbishment, and automation. Established in 2013 by experienced engineers, the company holds industry certifications and multiple awards, positioning itself as a trusted provider in the East and West Midlands regions. The website is professionally designed using WordPress and Elementor, featuring clear navigation, responsive design, and SEO optimization. Technical infrastructure includes modern web technologies and integration with third-party services such as CallRail for tracking. Security posture is generally good with HTTPS enforced and secure forms, though improvements are recommended in security headers and cookie consent mechanisms. The absence of WHOIS data due to domain naming rules violation introduces some trust concerns, but the overall business credibility remains high based on content and trust signals. Strategic recommendations include enhancing security policies, publishing incident response information, and improving privacy compliance features.

M

MRN

themrn.co.uk

66

MRN is a healthcare-focused company specializing in patient-centric clinical trial delivery and support services. Founded in 2020, it operates globally with a strong emphasis on improving recruitment and retention in clinical trials through innovative home trial support, site and patient services, integrated technologies, and strategic trial services. The company holds several certifications and awards that reinforce its credibility and market position. Technically, the website is built on WordPress with modern performance and SEO optimizations, leveraging tools like Google Analytics, HubSpot, and CookieYes for analytics and compliance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site presents a professional, trustworthy, and compliant digital presence suitable for its healthcare audience.

A

Ashlea Limited

ashlea-landscaping.co.uk

48

Ashlea Limited is a well-established UK-based commercial landscaping company founded in 1910, offering a broad range of services including hard and soft landscaping, arboricultural works, grounds maintenance, and highways services. The company operates nationally with regional offices and has a strong market position as one of the largest privately owned landscaping service providers in the UK. Their website reflects a professional business model targeting commercial clients, with clear service descriptions and multiple trust indicators such as certifications and social media presence. Technically, the website is built on WordPress using popular plugins like Yoast SEO, WPBakery Page Builder, and Slider Revolution, hosted by Fasthosts Internet Ltd. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility could be improved. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

Hive Insurance Services is a UK-based lifestyle protection insurance provider established in 2019. The company offers a range of insurance products including income protection, life insurance, medical cash plans, private medical insurance, and sports accident plans targeting individuals, families, businesses, and intermediaries. The website is professionally designed using WordPress with the Divi theme and integrates modern technologies such as Gravity Forms and Google reCAPTCHA to secure user interactions. SEO and accessibility are adequately addressed, with clear navigation and structured data enhancing search engine visibility. Security posture is solid with HTTPS enforced and form protections in place, though the absence of explicit privacy and security policies indicates room for improvement in compliance and transparency. Overall, the business presents a credible and trustworthy online presence with a moderate to good technical maturity level.

T

TheMagicTouch (GB) Ltd

themagictouch.co.uk

52

TheMagicTouch (GB) Ltd operates a specialized e-commerce website focused on image transfer paper and related printing and crafting products. Established since 1992, the company targets crafters, hobbyists, and small businesses seeking high-quality materials and equipment for heat transfer, direct-to-film, and dye sublimation applications. The website presents a professional and consistent brand image with a clear product catalog and educational resources such as video tutorials. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern SEO and anti-spam tools. Hosting appears to be managed by Pressidium, ensuring reliable infrastructure. Security measures include HTTPS, Google reCAPTCHA, and cookie consent, though some security headers are not explicitly detected. Privacy policy and terms of service pages are not clearly found, indicating an area for compliance improvement. Overall, the site is accessible without WAF or blocking, with a moderate to good security posture and solid business credibility.

A

Aukett Swanke

aukettswanke.com

62

Aukett Swanke is a well-established London-based architecture and interior design firm with a history dating back to 1906. The company offers a range of professional services including architecture, masterplanning, and interior design, focusing on sustainable and innovative solutions. Their market position is strong within the real estate and hospitality sectors, supported by a robust portfolio and industry recognition. The website reflects a professional brand with consistent design and clear navigation, targeting clients in the UK and internationally. Technically, the site is built on WordPress with modern SEO and performance optimizations, though there is room for improvement in security headers and privacy compliance. Security posture is generally good with HTTPS enabled and secure forms, but lacks advanced security headers and incident response information. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security features to align with best practices and regulatory requirements.

T

The Stewarts Group

stewarts-group.com

47

The Stewarts Group is a well-established manufacturer specializing in pressure gauges, temperature gauges, and various valves and manifolds, operating primarily in Scotland, UK. Founded in 1870, the company has built a strong reputation for innovation and quality in industrial instrumentation, serving competitive markets across Europe and globally. Their product range includes specialized subsea pressure gauges and bespoke assemblies, targeting industrial and engineering sectors. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and SEO best practices. The site is mobile-optimized and integrates Google Analytics for user tracking. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some recommended security headers and cookie consent mechanisms, which could be improved to enhance compliance and protection. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness, though the website content and social media presence support legitimacy. Overall, the site is professional and functional with room for security and privacy enhancements.

M

Magnitude Surveys Ltd

magnitudesurveys.co.uk

56

Magnitude Surveys Ltd is a UK-based company specializing in archaeological and environmental geophysical surveys, serving research, commercial, and community sectors. Established in 2015, it has grown to be the largest independent provider of archaeological geophysics surveys in the UK. The company designs and manufactures bespoke geophysical systems and software, offering tailored survey packages and training programs. Their client base includes academic institutions, commercial developers, and community projects. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators such as ISO certifications and industry memberships. Technically, the website is built on WordPress using Elementor and several plugins including Yoast SEO and JetEngine. It employs modern web technologies and integrates Google Analytics and LinkedIn Insight for tracking. The site is hosted by Mythic Beasts Limited, a reputable UK hosting provider. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, there is no visible cookie consent mechanism or detailed privacy compliance indicators, which could be improved to meet GDPR requirements. Incident response and security policies are not published, representing a gap in transparency. Overall, the website is trustworthy and professional with a solid business presence and technical foundation. Strategic improvements in privacy compliance and security headers would enhance the security posture and regulatory adherence, further strengthening user trust and risk management.

WRS Fornham Financial Partners Ltd is a specialist financial advisory firm based in Colchester, UK, providing personalized financial planning and investment advice. The company operates under the regulatory umbrella of Sandringham Financial Partners Ltd, ensuring FCA compliance and trustworthiness. Their key services include investment planning and pension access advice, targeting individuals seeking tailored financial solutions. The website reflects a professional and consistent brand image with clear contact information and regulatory disclosures. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. The site is hosted by Easyspace Ltd and benefits from HTTPS and DNSSEC for secure communications. Performance and mobile optimization are good, though accessibility features are basic. No major technical issues or vulnerabilities were detected in the content provided. From a security perspective, the site uses HTTPS and DNSSEC, but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. There is no publicly visible incident response or security policy, which could improve trust and preparedness. No forms were detected on the homepage, reducing immediate attack surface, but contact is available via email and phone. Overall, the website presents a trustworthy and professional front for a small financial advisory business with a solid regulatory backing. Strategic improvements in privacy compliance and security headers would enhance the security posture and regulatory adherence.

F

Farrell Fritz

farrellfritz.com

79

Farrell Fritz is a professional law firm serving clients primarily in the New York metropolitan area, offering a broad range of legal services and insights. The website presents a well-structured, content-rich platform featuring articles, news, events, and legal insights, positioning the firm as an established regional legal service provider. The firm targets clients seeking high-level legal expertise and maintains a professional online presence with consistent branding and quality content. Technically, the website is built on WordPress, utilizing modern libraries such as jQuery and Swiper.js, and integrates SEO tools like Yoast SEO. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance. The site is mobile-optimized and accessible, with moderate performance. However, some security best practices such as explicit security headers are missing. Security posture is generally good with HTTPS enforced and no exposed sensitive data detected. The cookie consent mechanism is comprehensive, but the absence of a clear privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the website content supports legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in privacy and security policies, improved security headers, and verified domain registration information to strengthen trust and compliance.

W

Wertz Brothers Furniture

wertzbrothers.com

50

Wertz Brothers Furniture is a long-established, family-owned retail business specializing in quality used and antique furniture in Los Angeles, California. Founded in 1931, it operates a physical showroom and maintains an online presence to showcase its inventory and engage customers. The company leverages social media platforms to connect with its audience and promote new arrivals. Technically, the website is built on WordPress with common plugins for SEO, newsletter management, and interactive features like Google Maps integration. The site is moderately performant and mobile-optimized, providing a good user experience. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and advanced security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

Brunton Design is a small architectural firm based in Angus and Carnoustie, UK, specializing in house extensions, renovations, and planning applications. The company positions itself as an award-winning local specialist, targeting homeowners and property developers in the region. The website is professionally designed, built on WordPress, and incorporates modern web technologies and SEO best practices. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. However, no explicit contact emails or phone numbers are found, with contact primarily via a form. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy. Security posture is good with HTTPS enforced and anti-spam measures, but lacks advanced security headers and incident response information. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security disclosures.

A

A2B Taxis Petersfield Ltd

a2btaxispetersfield.co.uk

54

A2B Taxis Petersfield Ltd is a well-established local taxi service provider based in Petersfield, United Kingdom, with over 18 years of operation. The company positions itself as the largest taxi company in the Petersfield area, offering a range of services including airport transfers, business travel, private hire, and account-based services. Their business model leverages both traditional phone bookings and a dedicated mobile app available on Android and Apple platforms, targeting local residents and travelers in East Hampshire. The website reflects a professional and consistent brand image with good content quality and clear navigation.

V

Visit Dartmoor

visitdartmoor.co.uk

64

Visit Dartmoor is a well-established regional tourism website founded in 2006, providing comprehensive information on accommodation, food, attractions, and activities in the Dartmoor area of the United Kingdom. The website targets tourists and visitors seeking to explore Dartmoor, offering detailed guides, booking options, and an online shop for related products. Its market position is that of a trusted local tourism portal with consistent branding and a professional online presence. Technically, the website is built on WordPress using popular plugins such as WooCommerce for e-commerce, Elementor for page building, and Yoast SEO for search engine optimization. It integrates Google Analytics and Google Maps APIs to enhance user experience and track visitor data. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility features. From a security perspective, the website employs HTTPS and Google reCAPTCHA to protect forms, with no visible vulnerabilities or exposed sensitive data. However, it lacks some recommended security headers and does not publish a formal security policy or incident response contacts. Privacy and cookie policies are present and GDPR compliant, reflecting a basic but adequate privacy posture. Overall, Visit Dartmoor presents a low-risk profile with a strong business credibility and good technical implementation. Strategic improvements in security headers, incident response readiness, and accessibility compliance would further enhance its security posture and user trust.

T

Tanda Engineering

tandaengineering.co.uk

51

Tanda Engineering is a small manufacturing business specializing in bespoke metal fabrication, welding, machining, galvanising, powder coating, and perspex fabrication services based in Leeds, UK. The company emphasizes quality workmanship and excellent customer service, leveraging over 45 years of industry experience. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience and clear navigation. Technical infrastructure is modern but lacks some advanced security headers and cookie consent mechanisms. The website is secured with HTTPS, but WHOIS data is unavailable due to domain registration issues, which raises some concerns about domain legitimacy. Overall, the business presents itself as a trustworthy local manufacturer with a solid market position.

A

Aire Valley Architectural Aluminium Ltd

aire-valley.com

49

Aire Valley Architectural Aluminium Ltd is a well-established UK-based specialist commercial glazing contractor, founded in 2000. The company focuses on the design, manufacture, and installation of high-performance glazed façades, serving the commercial construction and architectural sectors. Their market position is supported by a strong portfolio of projects, certifications, and client testimonials, indicating a reputable and trusted business. The website reflects a professional business model with clear service offerings including windows, doors, and curtain walling solutions. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Tag Manager. The site demonstrates good mobile optimization and moderate performance, with a consistent branding approach. Hosting appears to be via GoDaddy, and the domain is long-established, adding to credibility. Privacy and cookie policies are implemented with a consent mechanism, supporting GDPR compliance. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, security headers are not detected, and no explicit security or incident response policies are published. The domain lacks DNSSEC, which is recommended for enhanced DNS security. Overall, the security posture is good but could be improved with additional headers and published policies. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure program to enhance trust and security maturity.

V

Velcro IP Holdings LLC

velcro.com

68

Velcro IP Holdings LLC operates the official Velcro brand website, providing a wide range of fastening solutions including hook and loop fasteners for both consumer and industrial applications. The company holds a strong market position as a globally recognized brand with a legacy of innovation and quality. Their website reflects a mature digital presence with comprehensive product information and customer engagement channels. Technically, the site is built on WordPress with modern SEO and privacy compliance tools such as Yoast SEO and OneTrust cookie consent, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforcement and security headers, though the absence of a dedicated security policy and incident response contact suggests room for improvement. The lack of publicly available WHOIS data slightly reduces domain trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing transparency around security policies and incident response, and publishing a vulnerability disclosure program to further build trust.

A

AECOM

aecom.com

70

AECOM is a global leader in infrastructure consulting, engineering, design, construction, and management services. The company operates at an enterprise scale with a strong market position in sectors such as energy, transportation, government, healthcare, and water. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress with modern libraries and frameworks, including Google Tag Manager and Mapbox, supporting good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers appear absent. Privacy compliance is well addressed with accessible policies and GDPR indicators. Overall, the domain registration data aligns well with the company's profile, confirming legitimacy and trustworthiness.

Z

Zeta Service

zetaservice.com

52

Zeta Service is a medium-sized Italian company specializing in payroll outsourcing, HR consultancy, and headhunting services, serving approximately 1,600 businesses. Their website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern performance and SEO optimizations, leveraging advanced analytics and marketing tools such as Google Analytics, HubSpot, and Facebook Pixel. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although public security policies and incident response contacts are not disclosed. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website's professionalism and compliance with privacy regulations mitigate this risk. Overall, the site presents a trustworthy and business-focused digital front with room for improvement in domain transparency and security communication.

MinxMedia is a UK-based small business consultancy specializing in marketing, sales, leadership, and professional development training and coaching. The company offers onsite consultancy and external group courses aimed at helping businesses evolve their marketing and sales strategies and develop their teams. The website is built on WordPress, leveraging popular plugins such as Yoast SEO and MonsterInsights for analytics, and uses a cookie consent mechanism compliant with GDPR. The technical infrastructure is modern and well-maintained, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website presents a professional and trustworthy image consistent with a legitimate consultancy business.

P

Purdicom WiFi & Cloud Distributor

purdi.com

67

Purdicom is a UK-based value-added IT distributor specializing in wireless, cloud, WiFi, and IT security technologies. The company positions itself as a leading distributor in the UK market, targeting IT resellers, integrators, and businesses seeking advanced wireless and security solutions. Their website showcases a broad portfolio of vendors and technologies, emphasizing professional services and comprehensive product offerings. The digital presence is supported by a WordPress-based platform with modern plugins and SEO optimizations, reflecting a moderate to good level of digital maturity. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks some advanced security headers and explicit incident response information. The absence of WHOIS domain registration data introduces some uncertainty about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security transparency and compliance documentation.

Pure Leisure Group operates a professional website focused on luxury lodges and caravan holidays in the UK, targeting holidaymakers and potential holiday home buyers. The company positions itself as an established player in the hospitality and real estate sectors, offering holiday homes for sale and holiday park ownership benefits. The website is well-branded and provides clear navigation and relevant content to its audience. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Contact Form 7, Cookiebot for consent management, and analytics tools such as Google Analytics, Hotjar, and HubSpot. Hosting appears to be via Nimbus CDN, and the site is secured with HTTPS and uses Cloudflare Turnstile for bot detection. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site demonstrates good practices with HTTPS, cookie consent, and bot mitigation. However, it lacks explicit security headers and published security policies or incident response contacts. The WHOIS data is unavailable due to a domain naming rules error, which slightly reduces trust but the active and professional website mitigates concerns. Overall, the website is legitimate and professional with moderate to good security and privacy compliance. Strategic improvements include publishing a privacy policy and security policy, adding security headers, and resolving WHOIS transparency issues to enhance trust and compliance.

L

Lloyds Gardens of London

lloydsgardens.com

56

Lloyds Gardens of London is a professional garden landscaping and design company operating in London, offering a range of services including paving, fencing, decking, driveways, lawns, and stonework. The company positions itself as a trusted local leader, endorsed by Trustmark and partnered with John Lewis & Partners, targeting homeowners and property owners seeking quality outdoor space transformations. The website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and various UI libraries, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks important security headers and formal privacy and cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the website content and trust indicators suggest a genuine business. Strategic recommendations include implementing security headers, publishing privacy and cookie policies with consent mechanisms, adding incident response contacts, and improving WHOIS transparency to enhance trust and compliance.

Martin & Co Estate Agents & Letting Agents in Leigh is a local real estate agency providing comprehensive property services including sales and lettings. The company targets property buyers, sellers, renters, and landlords in the Leigh area of the UK. The website is professionally designed, leveraging WordPress with Elementor and SEO best practices, and includes structured data to enhance search engine visibility. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, VWO, Microsoft Clarity, and LiveChat, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. The domain WHOIS data is missing or unavailable, which reduces trust from a domain registration perspective but does not detract from the professional appearance and functionality of the site. Overall, the website is well-positioned for its market segment with good user experience and compliance features.

H

Harrison Catering

harrisoncatering.co.uk

68

Harrison Catering Services Ltd. is a UK-based catering company established in 1994, specializing in bespoke catering solutions for independent schools, schools, corporate clients, and in-house catering services. The company positions itself as a trusted provider with a strong emphasis on quality ingredients, skilled chefs, and exceptional service. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data due to a query error limits domain trust verification, but company registration details and website professionalism support legitimacy. Overall, Harrison Catering demonstrates a well-established business with a reliable online presence.

N

Nice-Pak International

nice-pak.co.uk

53

Nice-Pak International operates as a leading manufacturer of wet wipes, serving major brands and retailers globally. The company positions itself as a trusted supplier within the manufacturing sector, focusing on B2B relationships. The website reflects a professional digital presence built on WordPress, leveraging common SEO and cookie compliance tools to ensure regulatory adherence and user experience. The technical infrastructure is modern and includes Google Analytics for performance insights. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly disclosed. The domain WHOIS data is unavailable due to domain registration issues, which introduces some legitimacy concerns that should be addressed. Overall, the website is well-designed, compliant with privacy regulations, and serves its business purpose effectively.

A

AGS

agsltd.co.uk

52

AGS is a UK-based company specializing in architectural glass systems, providing bespoke glazing solutions for both residential and commercial projects. With over 35 years of experience, AGS offers a comprehensive service from design and consultation through to manufacturing and installation. The company positions itself as a trusted regional provider with a strong portfolio and customer testimonials, emphasizing quality and warranty-backed products. Technically, the website is built on WordPress with modern SEO and cookie consent tools such as Yoast SEO and Cookiebot. The site is mobile-optimized and includes marketing integrations like Facebook Pixel and Google Analytics, reflecting a moderate level of digital maturity. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms to comply with privacy regulations. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good regarding cookie management but lacks a visible privacy policy page. Overall, AGS presents a professional and trustworthy online presence with room for improvement in privacy documentation and security policy transparency. The risk level is low, but enhancing security headers and publishing incident response information would strengthen their security posture.

M

Motor Fuel Group

motorfuelgroup.com

62

Motor Fuel Group (MFG) is the UK's largest independent forecourt operator, managing over 1200 sites including its own and Morrisons forecourt networks. The company offers a comprehensive range of services including dual-fuel supply, valeting, retail convenience, food to go, and expanding EV charging infrastructure. Their market position as a leading independent operator is supported by partnerships with well-known brands and a strong digital presence. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager, complemented by a cookie consent mechanism via OneTrust. The site demonstrates good mobile optimization and user experience, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and published security policies. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security disclosures.

General Demolition is a UK-based company specializing in demolition, strip out, and structural alterations with a strong focus on sustainability and health and safety. The company has over 40 years of experience delivering complex enabling works projects primarily in London, positioning itself as a reputable and established player in the construction and real estate sectors. The website reflects this with professional design, clear branding, and a portfolio of landmark projects. Technically, the site is built on WordPress using Elementor and integrates modern web technologies such as Bootstrap, Swiper.js, and Google Tag Manager. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS enabled and use of reCAPTCHA, but could be improved by adding explicit security headers and vulnerability disclosure information. Overall, the site is trustworthy and professional but should address privacy compliance gaps and enhance contact information visibility.

R

Richardson Designs Limited

richardson-designs.com

54

Richardson Designs Limited operates a UK-based e-commerce website specializing in the retail of personalised rosettes, engraved pet products, trophies, and related show accessories. The company targets customers seeking high-quality personalised products primarily within the UK market. The website is built on WordPress using WooCommerce, leveraging common plugins such as Smart Slider 3 and Yoast SEO to enhance user experience and search engine visibility. The site demonstrates a moderate level of digital maturity with good mobile optimization and clear navigation. From a security perspective, the website employs HTTPS with a valid SSL certificate and displays a payment security badge indicating secure transaction processing. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and e-commerce functionality suggest a legitimate business. The site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance with data protection regulations such as GDPR. Overall, the website presents a professional retail platform with good content quality and user experience but requires improvements in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and clarifying domain registration details to improve trustworthiness and compliance.

D

Dye & Durham

quill.co.uk

68

Dye & Durham is a UK-based legal technology company specializing in unified legal tech solutions and services tailored for UK law firms. Their offerings include practice management, conveyancing due diligence, compliance, KYC/AML, and corporate services. The company is well-positioned in the legal tech market, trusted by over 80 of the top 100 UK law firms, and maintains a strong partnership with the Law Society of England and Wales. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and HubSpot integrations. The site is mobile-optimized and SEO-friendly, though accessibility could be improved. Security posture is good with HTTPS enforced and cookie consent implemented, but explicit security headers and a published security policy are absent. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

B

Bromwall Ltd

bromwall.co.uk

44

Bromwall Ltd is a specialist commercial insurance brokerage based in the United Kingdom, offering tailored insurance solutions for commercial, business, and industrial clients. With over 50 years of expertise, the company positions itself as a trusted partner providing bespoke coverage across multiple insurance sectors including goods in transit, liability, financial, property, business, and motor fleet insurance. The website reflects a professional and consistent brand image, targeting businesses seeking comprehensive insurance protection. Technically, the site is built on WordPress with modern frameworks such as UIkit and integrates SEO and user engagement tools like Yoast SEO and Chaty plugin. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks explicit security headers and formal security policies on the site. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

M

Mendes & Mount LLP

mendes.com

60

Mendes & Mount LLP is a well-established New York-based law firm specializing in insurance and reinsurance law with over 100 years of experience. The firm offers a broad range of legal services including professional liability, litigation, cyber liability, and reinsurance arbitration. Their website reflects a professional and consistent brand image, targeting insurance companies and legal professionals seeking specialized counsel. The business model is focused on providing expert legal services in a niche market, supported by a medium-sized team of nearly 100 lawyers. Technically, the website is built on WordPress using the PaperStreet theme, leveraging modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly with structured data implemented for enhanced search presence. Security posture is solid with HTTPS enabled and domain transfer protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, lacking a cookie consent mechanism despite the use of tracking scripts. Overall, the website is trustworthy, professional, and well-positioned in its market niche.

L

Linda Johnson Interiors

lindajohnsoninteriors.co.uk

42

Linda Johnson Interiors is a small, family-run bespoke interior design business established in 1987, specializing in made-to-measure curtains, blinds, roman blinds, and soft furnishings primarily serving Derby and surrounding areas. The company emphasizes personalized service, quality workmanship, and customer satisfaction, supported by a strong local reputation and testimonials. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO, with integration of social media and WhatsApp for customer engagement. Technically, the site is moderately performant and mobile-optimized but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks formal security policies, incident response contacts, and security headers such as Content-Security-Policy. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable compliance gap. Overall, the business is credible and trustworthy with a well-presented online presence but should improve privacy and security disclosures to enhance compliance and user trust.