Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,551–5,600 of 99,069
Dant Y Coed Dental Practicedantycoeddentalpractice.co.uk
Healthcare · United Kingdom
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Dant Y Coed Dental Practice is a UK-based dental clinic offering a wide range of dental services including general dentistry, cosmetic treatments, dental implants, Invisalign, and facial rejuvenation. The practice emphasizes high-quality care and affordable payment plans, targeting patients seeking reliable dental services. The website is professionally designed using WordPress and Elementor, featuring detailed team profiles and service descriptions. Social media integration with Facebook and Instagram enhances their digital presence. Technically, the site uses modern web technologies and plugins, with SSL enabled ensuring secure connections. However, the absence of visible privacy and cookie policies and lack of security headers indicate areas for improvement in compliance and security posture. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site presents a credible and professional dental practice with moderate technical maturity and good business credibility.
Nationwide Heating & Coolingnationwidehc.co.uk
Energy · United Kingdom
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Nationwide Heating & Cooling Ltd is a UK-based HVAC contractor specializing in heating, ventilation, refrigeration, and air conditioning engineering services for commercial and industrial sectors nationwide. The company positions itself as a leading service provider in the HVAC industry with a focus on quality and nationwide coverage. The website is professionally designed using the Wix platform, featuring structured data for local business identification and standard SEO metadata. However, the domain registration appears problematic as WHOIS queries fail due to domain naming rules violations, raising concerns about domain legitimacy despite the professional web presence. Technically, the site uses modern web technologies and is mobile optimized but lacks advanced security headers and privacy compliance mechanisms. Security posture is moderate with HTTPS enforced but missing explicit security policies and incident response contacts. Overall, the site is functional and informative but requires improvements in privacy, security disclosures, and domain registration legitimacy to enhance trust and compliance.
Blueprint Joineryblueprintjoinery.com
Retail · United Kingdom
69Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Blueprint Joinery operates a professional e-commerce website specializing in stair parts, balustrade, decking, and joinery timber products. The company targets homeowners and trade professionals in the UK market, offering premium stair kits and a broad product range with a focus on quality and ease of installation. The website is built on WordPress with WooCommerce and uses modern technologies such as Google Tag Manager and Gravity Forms, indicating a mature digital infrastructure. Security measures include HTTPS and Google reCAPTCHA, but some security headers are missing, and no explicit privacy policy page was found, which are areas for improvement. The absence of WHOIS data for the domain is a notable concern for transparency, though the website content and customer reviews suggest a legitimate business. Overall, the site presents a good user experience with clear navigation, responsive design, and trust signals such as customer testimonials.
- SSecurity Verification
angliaoffice.co.uk
Other
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.angliaoffice.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. The domain itself is invalid per Nominet UK naming rules, as indicated by the WHOIS raw output, which prevents proper WHOIS data extraction and raises concerns about domain legitimacy. No business or contact information, privacy or cookie policies, or terms of service are available on the accessible content. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible HTTPS enforcement and security headers, limiting its security posture. Overall, the site’s content quality and business credibility are very low due to the lack of accessible information and domain registration issues.
- MMagpie Property Management
magpieproperty.co.uk
Real Estate · United Kingdom
61Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Magpie Property Management operates as a local estate and letting agency based in St Neots, Cambridgeshire, UK. The company provides property sales, lettings, and management services targeting property buyers, renters, landlords, and property owners in the local area. The website presents a professional appearance with clear branding and relevant content focused on real estate services. However, the domain WHOIS data indicates that the domain 'www.magpieproperty.co.uk' is invalid under Nominet UK naming rules, suggesting possible misconfiguration or use of a subdomain rather than a registered domain. This discrepancy warrants caution regarding domain legitimacy. Technically, the website uses modern web technologies including Bootstrap, Font Awesome 6 Pro, and various JavaScript libraries for UI enhancements. The site includes a cookie consent mechanism compliant with GDPR principles, but lacks explicit privacy policy and terms of service pages. No security headers were detected in the provided data, and no analytics or tracking beyond cookie consent were found. The site appears mobile-optimized with good design and navigation. From a security perspective, the site benefits from cookie consent but lacks visible security headers and formal privacy documentation. The absence of WHOIS registration data and domain registration issues reduce trustworthiness. No vulnerabilities or adult content were detected. Overall, the security posture is moderate but could be improved with better documentation and security best practices. The overall risk assessment suggests the business is legitimate and professional in its operations but should address domain registration clarity and enhance security and privacy compliance to improve trust and reduce potential risks.
- SSecurity Verification
weshapeit.com
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.weshapeit.com currently presents a security verification page employing Google reCAPTCHA v3, indicating that access to the actual content is blocked by a Web Application Firewall or similar security mechanism. Due to this blocking, no business-related content, contact information, or policies are accessible for analysis. The domain WHOIS data is unavailable, suggesting the domain may be unregistered, newly registered, or the WHOIS server is restricting access to the data. This lack of transparency and accessibility significantly limits the ability to assess the company's legitimacy or business operations. Technically, the site uses modern frontend libraries like Bootstrap and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation in the provided data. Overall, the site’s security posture is minimal, and the content quality is poor due to the blocking mechanism.
Oliver Mintonoliverminton.com
Real Estate · United Kingdom
65Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Oliver Minton is a well-established real estate agency specializing in village and rural properties in Hertfordshire, UK. With over 26 years of experience and multiple local offices, the company offers a range of services including property sales, lettings, auctions, and mortgage advice. The website reflects a professional and user-friendly digital presence built on WordPress with modern tools such as Elementor and Yoast SEO. The site includes a cookie consent mechanism supporting GDPR compliance but lacks explicit privacy policy and terms of service pages. Security posture is generally good with HTTPS and no visible vulnerabilities, though security headers and incident response information are absent. WHOIS data is unavailable or privacy protected, limiting domain trust verification. Overall, the website is credible and functional, serving its target audience effectively.
Videojet Technologiesvideojet.co.uk
Manufacturing · United Kingdom
69Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Videojet Technologies UK provides industrial printers and coding & marking solutions, positioning itself as a world-leading provider in the manufacturing sector. The website targets industrial manufacturers requiring product identification and traceability solutions. The business model is B2B, offering equipment, software, and on-site services. The site demonstrates strong branding consistency and professional content quality. Technically, the website is built on WordPress 7.0 with modern JavaScript libraries such as jQuery and integrates marketing and analytics tools including Google Tag Manager, Marketo, and LiveChat. The site is mobile-optimized, SEO-friendly, and uses structured data for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms. Privacy and cookie policies with consent mechanisms are implemented, indicating good privacy compliance. However, explicit security headers and incident response information are not publicly available, representing areas for improvement. Overall, the website is trustworthy and professionally maintained, with no signs of blocking or WAF interference. The WHOIS data for the subdomain is unavailable due to domain naming rules, but the main domain is presumed legitimate. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency.
Other
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.masterdriver.co.uk is currently inaccessible due to a Cloudflare security verification challenge page that blocks direct access to its content. The domain WHOIS lookup failed with an error indicating the domain name is invalid under Nominet UK naming rules, suggesting the domain may not be properly registered or is misconfigured. Consequently, no business, contact, or policy information is available for analysis. The technical infrastructure relies on Cloudflare's security services including Turnstile CAPTCHA, but no further details about the site's technology stack or business operations can be determined. The security posture is limited to the presence of Cloudflare's WAF and content security policies, but the inability to access the actual site content prevents a full security assessment. Overall, the site presents a high risk due to lack of transparency, missing WHOIS data, and inaccessibility, requiring remediation to enable proper evaluation and trust establishment.
East Lindsey Fire Protection Services Ltdelfps.co.uk
Other · United Kingdom
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
East Lindsey Fire Protection Services Ltd is a UK-based small business specializing in fire protection services including industrial fire and rescue cover, fire extinguisher maintenance, detection, and suppression systems. The company targets businesses and organizations requiring fire safety solutions, positioning itself as a local specialist. The website is professionally designed using the Wix platform, featuring structured data and social media integration, indicating a moderate level of digital maturity. Technically, the site uses modern JavaScript libraries and is hosted on Wix, with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled and error monitoring via Sentry, but lacks important security headers and privacy compliance elements. The absence of WHOIS data due to domain naming rules violation reduces trustworthiness but the live, professional site suggests legitimate operations. Overall, the website is functional and credible but would benefit from enhanced privacy, security policies, and WHOIS transparency.
Devonshire House Dental Practicedevonshirehousedental.co.uk
Healthcare · United Kingdom
56Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Devonshire House Dental Practice is a well-established private dental practice based in Cambridge, UK, offering a comprehensive range of general and specialist dental services. The practice targets private patients and dental professionals, positioning itself as a leading specialist referral centre with over 35 years of experience. Their services include preventive care, dental implants, orthodontics, oral surgery, and postgraduate education. The website is built on WordPress 7.0 with modern technologies such as jQuery, Google Tag Manager, and CookieYes for cookie consent management. The site is professionally designed, mobile-optimized, and provides clear contact information. Security posture is good with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response information. Overall, the website reflects a credible and professional healthcare provider with a strong digital presence.
Other
67Medium
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
The website www.p3pm.co.uk presents itself as a provider of HR consultancy and business HR services, targeting businesses likely in the Altrincham and Manchester areas. The site uses modern web technologies such as Nuxt.js and Tailwind CSS, and integrates third-party services like Google Tag Manager and Trustpilot for analytics and reviews. However, the domain WHOIS data is unavailable due to an error indicating the domain name is invalid under Nominet UK naming rules, which raises concerns about the legitimacy or registration status of the domain. No privacy, cookie, or terms of service policies are found, and no explicit contact information is provided on the site, limiting transparency and trust. The content is professional and safe, with no adult or questionable material detected.
- TThomas & Gentry IFA Ltd
thomasandgentry.co.uk
Finance · United Kingdom
50Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Thomas & Gentry IFA Ltd is a well-established independent financial advisory firm based in the UK, offering services such as protection, mortgages, savings and investments, and pensions. The company is FCA authorised and regulated, reinforcing its credibility and trustworthiness in the financial sector. The website reflects a professional and consistent brand image with clear contact information and regulatory disclosures. Technically, the site is built on WordPress with Yoast SEO plugin, uses HTTPS, and includes modern web technologies like jQuery. The site is moderately performant and mobile-optimized, providing a good user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are absent. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the website is trustworthy and suitable for its target audience seeking financial advice.
- Knoxed Limited
knoxed.com
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Knoxed Limited operates a global digital platform with regional homepages for the United Kingdom, India, United Arab Emirates, and Germany. The website serves as a gateway for users to select their region, suggesting a geographically segmented service offering. The business model appears to focus on providing localized digital experiences, though specific services are not detailed on the landing page. The company presents itself professionally with consistent branding and a modern design aesthetic. Technically, the website uses modern web technologies including JavaScript ES modules and CSS, with a responsive design suitable for mobile devices. However, there is no evidence of a content management system or advanced frameworks. Performance is moderate, and accessibility features are basic. The absence of security headers and lack of visible SSL/TLS configuration details indicate potential security gaps. From a security perspective, the site lacks critical elements such as privacy and cookie policies, contact information, and incident response details. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness. No forms or data collection mechanisms are present on the landing page, reducing immediate data exposure risks but also limiting user engagement. Overall, the website is functional and visually appealing but suffers from significant trust and compliance deficiencies. Strategic improvements in domain registration transparency, security hardening, and privacy compliance are recommended to enhance credibility and reduce risk.
- OOcean Partners
oceanpartners.com
Energy · United Kingdom
58Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Ocean Partners is a well-established commodity supply chain company founded in 2001, specializing in trading, warehousing, blending, agency, consulting, and structured finance services for metals and minerals. The company operates globally with offices in the UK, USA, Mexico, Peru, and Chile, targeting miners, smelters, refiners, and metal consumers. Their market position is that of a specialized, analytical, and creative partner in commodity supply chains, offering bespoke solutions to long-term clients. Technically, the website is built on WordPress with modern front-end technologies such as jQuery and Typekit fonts. The site is mobile optimized, accessible, and SEO friendly with structured data markup. Performance is moderate, and the site is well-branded and professionally designed. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain transfer protection. However, it lacks DNSSEC, explicit security headers, and published security or incident response policies. No cookie consent mechanism was detected, which is a compliance gap given the GDPR relevance. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is professional, trustworthy, and business credible with a strong domain history and consistent WHOIS data. The main risks relate to privacy compliance and security best practices, which can be improved to enhance trust and regulatory adherence.
- Crystal Clear Cleaning & Property Maintenance Services
crystalclear.me.uk
Other · United Kingdom
53Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Crystal Clear Cleaning & Property Maintenance Services is a small, family-run business based in Epsom, Surrey, specializing in commercial and residential cleaning services including window cleaning, carpet cleaning, and office cleaning. The company serves clients primarily in Surrey and Greater London, emphasizing customer satisfaction and eco-friendly practices. Their market position is that of a trusted local service provider with nearly a century of combined experience within the company. The website reflects a straightforward business model focused on service delivery to local residential and commercial customers. Technically, the website is built with basic HTML, CSS, and JavaScript, incorporating Google Analytics for visitor tracking. The site lacks modern CMS or frameworks and shows basic mobile optimization and accessibility. Performance is moderate, with no advanced technical features or optimizations detected. SEO is basic but present through meta tags and structured navigation. From a security perspective, the site does not explicitly confirm HTTPS usage in the provided data, and no security headers are detected. There is no visible incident response or security policy information, and cookie consent mechanisms are absent despite the presence of a cookie policy page. The site does not expose sensitive data or use vulnerable libraries, but security posture is basic and could be improved significantly. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security measures, privacy compliance improvements, and modernization of technical infrastructure to reduce risk and improve user experience.
- CCerberus Services Ltd
cerberus-services.co.uk
Transportation · United Kingdom
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Cerberus Services Ltd is a UK-based company specializing in bespoke car parking and perimeter security solutions. Their offerings include barriers, car park counting systems, ANPR, gates, access control, and turnstiles, targeting businesses and organizations requiring physical security enhancements. The website presents a professional and consistent brand image with clear navigation and relevant content focused on their security engineering services. However, the domain www.cerberus-services.co.uk is not registered according to Nominet UK WHOIS data, indicating a potential discrepancy or misconfiguration in domain registration. Technically, the website uses standard web technologies such as Bootstrap and jQuery, with moderate performance and good mobile optimization. There is no evidence of advanced CMS or hosting provider details. Security posture is weak due to lack of HTTPS, absence of security headers, and no visible security policies or incident response information. Privacy compliance is minimal with no cookie consent mechanism detected, although privacy and terms pages exist. Overall, the website is functional and business-focused but suffers from critical security and legitimacy issues related to domain registration and lack of HTTPS. These issues pose risks to user trust and data protection. Strategic improvements in security infrastructure, domain registration validation, and privacy compliance are recommended to enhance credibility and reduce risk.
Quba Digital Ltdquba.co.uk
Technology · United Kingdom
70Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Quba Digital Ltd is a UK-based digital technology consultancy and services provider with over 20 years of experience. They specialize in digital transformation, offering consultancy, project delivery, replatforming, support, and hosting services. The company partners with leading technology platforms such as Umbraco, Kentico, Contentful, and BigCommerce, positioning itself as a trusted partner for ambitious organizations seeking to modernize their digital presence. Their market position is reinforced by a strong client portfolio and multiple industry certifications including ISO 27001 and Cyber Essentials. Technically, the website demonstrates a mature digital infrastructure leveraging modern analytics tools like Google Analytics, Hotjar, Microsoft Clarity, and LinkedIn Insight. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Security best practices are observed with HTTPS enforcement, anti-forgery cookies, and a comprehensive cookie consent mechanism. However, explicit security headers could be verified and an incident response contact page is absent. From a security posture perspective, the site shows good maturity with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear privacy and cookie policies, GDPR compliance indicators, and user consent mechanisms. Business credibility is high, supported by clear contact information, professional content, client testimonials, and multiple trust certifications. Overall, the website is safe, professional, and trustworthy with a high AI score of 85. The main limitation is the lack of WHOIS data due to query quota restrictions, which limits domain registration trust analysis. Strategic recommendations include verifying security headers, publishing incident response information, and adding vulnerability disclosure mechanisms to further enhance security transparency.
Brooks Macdonaldbm-fc.com
Finance · United Kingdom
68Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Brooks Macdonald is a UK-based wealth management and financial planning firm offering award-winning services to individuals, families, businesses, and charities. The company positions itself as a trusted advisor with a comprehensive suite of financial services tailored to a diverse client base. The website reflects a mature digital presence with a professional design and clear messaging aligned with its business objectives. Technically, the site leverages modern frameworks such as Next.js and Contentful CMS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although the absence of a public vulnerability disclosure policy and incident response contact information suggests room for improvement. The lack of WHOIS registration data is a notable anomaly that warrants further verification to confirm domain ownership and legitimacy. Overall, the site demonstrates a high level of professionalism and trustworthiness, suitable for its financial services industry.
- LLlewellyn & Co
llewellynandco.co.uk
Real Estate · United Kingdom
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Llewellyn & Co is a small, family-owned independent estate and lettings agency specializing in the West London housing market. The company offers a range of services including property lettings, sales, valuations, and landlord support, targeting landlords and tenants in areas such as Hammersmith, Shepherds Bush, and Chiswick. The website reflects a local market focus with a professional but basic online presence, emphasizing personal service and local expertise. Technically, the website is built on ASP.NET WebForms and uses older JavaScript libraries such as jQuery 1.4.2 and Colorbox for UI elements. While functional, the technology stack is outdated, which may pose security and performance challenges. The site includes basic SEO and accessibility features but lacks modern optimizations and mobile responsiveness is limited. From a security perspective, the site shows some positive indicators such as a cookie consent banner and use of HTTPS (implied but not confirmed). However, it lacks important security headers and uses outdated libraries with known vulnerabilities. The WHOIS data is unavailable or invalid, which raises concerns about domain registration legitimacy. No incident response or security policy information is provided. Overall, the website is moderately trustworthy and functional for its business purpose but requires technical and security improvements. The lack of valid WHOIS data and outdated technology stack are key risk factors. Strategic recommendations include updating the technology stack, enhancing security headers, verifying domain registration, and improving privacy compliance to strengthen trust and security posture.
YMCA England & Walesymca.org.uk
Non-profit · United Kingdom
54Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
YMCA England & Wales is a well-established non-profit organization dedicated to supporting young people across England and Wales through a broad spectrum of services including health and wellbeing, family and youth work, housing, training, and support. The organization has a strong market presence and a clear mission to empower youth, supported by a professional and well-structured website that reflects its community-oriented business model. The website is designed to engage multiple audiences including young people, donors, volunteers, and partners. Technically, the website is built on WordPress 7.0, leveraging modern JavaScript libraries such as jQuery, Swiper.js, and AOS for enhanced user experience. It integrates key analytics and marketing tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and Google Tag Manager, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS with a good SSL configuration and employs cookie consent mechanisms compliant with GDPR. It uses Google reCAPTCHA to mitigate bot attacks and integrates a consent management platform (CookieYes) for privacy compliance. However, there is room for improvement in implementing additional security headers and publishing explicit security policies or incident response contacts. Overall, the website presents a low-risk profile with strong business credibility, good privacy compliance, and a secure technical foundation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response transparency to further strengthen trust and security posture.
- PPlanet Sounds
planet-sounds.com
Other · United Kingdom
58Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Planet Sounds is a well-established music rehearsal and recording service provider based in Southampton, UK, operated by the SoCo Music Project charity. The business offers multiple rehearsal rooms and a recording studio with various packages, targeting musicians and artists of all genres and sizes. The website is built on Squarespace, featuring a professional design and good user experience with clear navigation and mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though some security headers and privacy compliance elements are missing. Contact information is clearly provided, enhancing business credibility. However, the WHOIS data is unavailable due to querying the subdomain rather than the registered domain, limiting domain trust verification.
Broadway Malyan | Homebroadwaymalyan.com
—
74Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
- SSchwartz Bros
schwartzbros.co.uk
Retail · United Kingdom
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Schwartz Bros is a small, locally established gourmet burger takeaway business based in Bath, UK, with a history dating back to 1977. The company emphasizes quality ingredients and traditional preparation methods, positioning itself as a leading burger provider in the local market. The website supports online click & collect ordering and phone orders, and maintains active social media profiles on Facebook and Twitter. Technically, the website is built on the Weebly platform using older JavaScript libraries and includes standard analytics tools. While the site is functional and user-friendly with good content quality, it lacks key privacy and cookie policies, and no WHOIS data is available to verify domain registration details, which raises some legitimacy concerns. Security headers and modern security practices are not evident, and the site uses an outdated jQuery version, which could pose vulnerabilities.
Mantis Worldmantisworld.com
Retail
50Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Mantis World is a well-established manufacturer and retailer of premium, ethically-made GOTS-certified organic clothing for all ages, operating since 1999. The company targets both businesses and consumers interested in sustainable and organic apparel, offering a broad product range including bespoke made-to-order services. The website reflects a professional e-commerce platform built on WordPress and WooCommerce, with a clear focus on sustainability and ethical manufacturing. The digital infrastructure includes modern technologies and SEO optimizations, supporting a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as enabling DNSSEC and additional security headers are recommended. The domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.
- EEskbank Chiropractic
eskbank-chiropractic.co.uk
Healthcare · United Kingdom
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Eskbank Chiropractic is a small, family-run healthcare provider specializing in chiropractic care since 2000, serving the Eskbank and Dalkeith area in the United Kingdom. The business has expanded regionally with a partner site in Melrose, indicating growth and a stable market position. Their services include professional chiropractic treatment, initial consultations, and x-ray facilities, with an emphasis on patient convenience and care quality. The website is built on Squarespace, leveraging modern web technologies and providing a mobile-optimized experience with clear navigation and professional branding. However, the absence of privacy and cookie policies and the lack of security headers indicate areas for compliance and security improvement. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the site presents a trustworthy healthcare service but requires enhancements in security posture and regulatory compliance.
- SSecurity Verification
id-installations.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.id-installations.co.uk currently serves only a security verification page employing Google reCAPTCHA v3 to prevent automated access. No business-related content, contact information, or policies are accessible, indicating the site is effectively blocked by a Web Application Firewall or similar security mechanism. The WHOIS lookup for the domain fails with an error stating the domain name contains too many parts and cannot be registered, suggesting the domain is either invalid or misconfigured. This severely limits the ability to assess the business or technical maturity of the site. Technically, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA for bot mitigation but lacks visible security headers or HTTPS confirmation in the provided data. The absence of privacy, cookie, or terms of service policies further indicates low compliance maturity. No contact or business information is presented, and no analytics or advertising scripts are detected beyond essential security components. From a security perspective, the site demonstrates basic bot protection but lacks comprehensive security best practices such as security headers and visible SSL/TLS confirmation. The domain's WHOIS data issues raise legitimacy concerns. Overall, the site’s security posture is minimal, and the business credibility is low due to lack of accessible information. Given the blocking by security verification and domain registration issues, the overall risk assessment is high. Strategic recommendations include resolving domain registration issues, implementing HTTPS with strong SSL/TLS, adding security headers, publishing privacy and cookie policies, and providing clear business contact information to improve trust and compliance.
ASB (Engineers) Ltdasbspraycentre.co.uk
Manufacturing · United Kingdom
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
ASB (Engineers) Ltd is a small, established company based in Glasgow, Scotland, specializing in the hire and servicing of paint spraying equipment and related products since 1957. The company offers a comprehensive range of equipment including airless and turbine sprayers, high pressure washers, and stocks spare parts and accessories. Their market position is that of a trusted local business with a strong emphasis on customer service and quality equipment. The website is built on WordPress using common plugins such as Yoast SEO and Beaver Builder, with Google Analytics and Tag Manager integrated for tracking. The site is well-structured, mobile-optimized, and professionally designed, providing clear contact information and service descriptions. However, the absence of privacy and cookie policies indicates compliance gaps with data protection regulations. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but security headers are missing and no incident response or vulnerability disclosure information is provided. WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness but the website content and contact details appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.
- Lennoxautoservices
lennoxautoservices.co.uk
Transportation · United Kingdom
61Medium
NIS2 14 · GDPR 35
NIS2 14 · GDPR 35
Lennoxautoservices is a small UK-based automotive service provider offering vehicle maintenance and repair services. The website is built on the Wix platform and targets local customers seeking automotive services. The technical infrastructure relies on Wix hosting and standard web technologies, with moderate performance and basic mobile optimization. Security posture is weak due to lack of visible HTTPS verification, absence of security headers, and missing privacy and cookie policies. The domain WHOIS data is unavailable and indicates the domain is invalid under Nominet UK rules, which raises concerns about domain legitimacy or possible misconfiguration. Overall, the website provides basic business information but lacks critical security and compliance features.
- BBlake Printers Ltd
blakeprint.co.uk
Other · United Kingdom
58Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Blake Printers Ltd is a small, established local printing company based in Northumberland, UK, with a history dating back to 1976. The company offers a broad range of print services including litho and digital printing, business stationery, promotional materials, and in-house graphic design. Their target market is local businesses in the North East and North West of England seeking affordable and professional print solutions. The website reflects a basic but functional digital presence hosted on the Weebly platform, with standard web technologies and moderate performance. Contact information and a privacy policy are provided, though cookie consent mechanisms and advanced security policies are lacking. The WHOIS data for the domain is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional appearance of the website content.
- Ian Mitchell Distribution Limited
ianmitchelldistribution.com
Manufacturing · United Kingdom
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Ian Mitchell Distribution Limited is a UK-based family-owned manufacturer and distributor of cleaning chemicals and lubricants serving multiple industrial sectors including food, transport, engineering, and agriculture. Established in 1987, the company emphasizes quality, bespoke product development, and comprehensive distribution capabilities across the UK. The website is built on a modern WordPress platform using WooCommerce and Elementor, with SEO optimization via Yoast. It features a professional design with good navigation and mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises concerns about domain registration legitimacy. Overall, the site presents a credible business but would benefit from enhanced privacy compliance and security best practices.
- Wwww.rebel-vapes.co.uk
rebel-vapes.co.uk
—
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
- SSecurity Verification
cottrillcivileng.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.cottrillcivileng.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. The domain itself appears invalid or misconfigured as the WHOIS lookup failed with an error indicating the domain name contains too many parts and cannot be registered under Nominet UK rules. No business information, contact details, or policies are available on the site, which severely limits the ability to assess the company's market position or services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers, SSL enforcement, or SEO optimizations. The overall security posture is weak due to the lack of accessible content and security best practices beyond bot protection.
- MacWilliam Demolition Ltd
macwilliamdemolition.co.uk
Other · United Kingdom
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
MacWilliam Demolition Ltd is a small, established demolition and asbestos removal company based in North Lanarkshire, Scotland, with a family history dating back to 1922. The company offers a range of services including demolition, clearance, plant and machinery hire, and asbestos removal, targeting commercial, industrial, and local authority clients. Their market position is that of a trusted local specialist with multiple industry certifications and memberships. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies such as jQuery, Google Tag Manager, Cookiebot for consent management, and Snowplow Analytics for user behavior tracking. The site is mobile optimized and SEO friendly, with good content quality and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published policies. The WHOIS data is unavailable due to domain naming rules violation, which raises some concerns about domain registration legitimacy, but the website content and business information appear professional and consistent with a legitimate small business. Overall, the site scores well in content, technical implementation, security, and privacy compliance, with minor penalties related to WHOIS data and security policy transparency.
The Flamethe-flame.co.uk
Healthcare · United Kingdom
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Flame is a small, not-for-profit organization based in Coventry, UK, specializing in mindfulness, holistic health, and wellness services. With over 30 years of experience, it offers meditation, yoga, and Qi Gong classes aimed at improving mental, physical, emotional, and spiritual well-being. The website is built on the Wix platform, featuring multimedia content and structured data to enhance search visibility. However, the domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy. The site lacks explicit privacy and cookie policies, and no direct contact emails or phone numbers are found, which impacts trust and compliance. Technically, the site uses modern web technologies but lacks security headers and detailed security policies.
Midland Tube & Fabrications Limitedmidlandtubeandfabrications.co.uk
Manufacturing · United Kingdom
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Midland Tube & Fabrications Limited is a UK-based small manufacturing business specializing in bespoke pipework fabrication services. The company targets industrial and commercial clients requiring specialized pipework solutions. The website presents a professional image with clear contact information and structured data indicating the company's location and services. Technically, the site is built on WordPress using the Gutenberg editor, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data due to domain registration issues introduces some uncertainty about domain legitimacy, though the website content and presentation suggest a legitimate business. Overall, the site is functional and trustworthy but would benefit from enhanced security and compliance features.
- SSecurity Verification
coombeandsharpe.com
Other
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.coombeandsharpe.com currently presents only a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No substantive business or content information is accessible, preventing a full assessment of the company's services or market position. The lack of WHOIS registration data further complicates legitimacy verification, suggesting the domain may be unregistered, inactive, or protected by privacy services. Technically, the site uses modern libraries such as Bootstrap and Google reCAPTCHA but lacks visible security headers or SSL configuration details. Privacy and compliance policies are absent, and no contact information is provided, which negatively impacts trust and compliance posture. Overall, the site is inaccessible for meaningful analysis and scores low on content quality, business credibility, and privacy compliance.
- bandw-engineering
bandwengineering.com
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.bandwengineering.com is a basic Wix-built site with minimal content and no detailed business or contact information. The domain WHOIS data is unavailable, which raises concerns about the legitimacy and registration status of the domain. Technically, the site uses Wix's standard platform technologies and scripts, with moderate performance and good mobile optimization. However, there is a lack of security headers, privacy policies, and contact details, which negatively impacts the security posture and privacy compliance. Overall, the site appears to be a small-scale or placeholder business website with limited digital maturity and trust indicators.
Rooms Hotelsroomshotels.com
Hospitality · Georgia
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Rooms Hotels is a boutique lifestyle hotel brand based in Georgia, operating properties in Tbilisi, Batumi, and Kazbegi. The brand focuses on delivering distinctive hospitality experiences that celebrate Georgian culture, local craftsmanship, and sustainable agriculture. The website reflects a mature digital presence with a well-structured design, clear navigation, and integrated booking functionality. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Triptease for visitor engagement and conversion optimization. Security posture is solid with HTTPS enforced, bot protection via Google reCAPTCHA, and a comprehensive cookie consent mechanism, although some security headers could be improved. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the site is professional, secure, and privacy compliant, serving its target audience effectively.
- Cards n Candy
ccballoons.co.uk
Retail · United Kingdom
50Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Cards n Candy is a small, locally established retail business based in Wirral, UK, specializing in party supplies including balloons, cards, gifts, and party accessories. The company has been operating for over 16 years, run by a husband and wife team, and targets local customers seeking party decorations and gifts. The website reflects a well-structured retail storefront with clear product categories and customer engagement through testimonials and social media integration. Technically, the website is built on WordPress with popular plugins for page building, spam protection, and SEO, hosted by Krystal Hosting Ltd, a reputable UK provider. Performance and mobile optimization are adequate for a small business site. Security posture is moderate with HTTPS enabled and anti-spam measures, but lacks advanced security headers and explicit incident response policies. Privacy and cookie policies exist but are hosted externally and lack consent mechanisms, indicating partial GDPR compliance. Overall, the site is trustworthy and professional for its business scope but could improve security and privacy practices.
- SSecurity Verification
cromiepharmacy.co.uk
Other
55Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.cromiepharmacy.co.uk currently serves a security verification page protected by Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. Due to this, no actual business content or services are accessible for analysis. The domain WHOIS lookup failed with an error indicating the domain name contains too many parts, suggesting the domain is invalid or misconfigured under Nominet UK rules. This severely limits the ability to verify the legitimacy or business details of the entity behind the site. Technically, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA v3 for bot mitigation. However, no other technologies, CMS, or analytics tools are detectable. The site lacks visible privacy, cookie, or terms of service policies, and no contact information or business credentials are present. Security headers and SSL configuration details are not available from the provided data. The security posture is limited to the presence of reCAPTCHA, but the absence of other security headers and policies reduces overall security maturity. The domain registration issues and blocked content result in a low trust and legitimacy score. Overall, the site appears to be either a placeholder, under maintenance, or protected from automated access, preventing meaningful user interaction or business engagement. Strategic recommendations include resolving domain registration issues, publishing clear privacy and cookie policies, providing contact and business information, improving security headers, and ensuring the website content is accessible to legitimate users.
- Academic Day Nursery
twinkletotsdaynursery.co.uk
Education · United Kingdom
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Academic Day Nursery is a small, well-established childcare provider located in Stoke Newington, London, serving families with children aged 6 months to 5 years. The nursery has a good reputation supported by an Ofsted 'Good' rating and offers a range of childcare services including baby, toddler, and preschool rooms, outdoor activities, and government funding options. The website is professionally designed with clear navigation and contact information, targeting local parents seeking quality childcare. Technically, the site uses modern JavaScript libraries and analytics tools, hosted likely via Yell.com's platform, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and CAPTCHA-protected forms, but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable due to domain registration constraints, which slightly reduces trustworthiness from a domain perspective but does not detract from the business legitimacy evident on the site. Overall, the site is safe, professional, and trustworthy for its intended audience.
Jazzclub Moodsmoods.club
Hospitality · Switzerland
64Medium
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
Jazzclub Moods operates a well-established concert venue in Zurich, specializing in jazz, world, funk, soul, pop, and electro music. The venue hosts almost daily concerts and offers extensive video-on-demand content and live streaming services, positioning itself as a cultural hub in the region. The website reflects a mature digital presence with a modern tech stack including Next.js and React, integrated with analytics and booking widgets to support event management and user engagement. Security measures such as HTTPS, security headers, and reCAPTCHA are implemented, indicating a good security posture. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is professional, trustworthy, and well-optimized for its audience.
- IRS
irsscotland.com
Real Estate · United Kingdom
72Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
IRS Construction is a UK-based company specializing in external wall insulation and building cladding services. Positioned as an industry leader within the UK construction sector, the company targets property developers, owners, and construction professionals seeking specialized cladding and insulation solutions. The website is professionally designed using the Wix platform, featuring clear branding and contact information, including a UK phone number and physical address in Airdrie. Structured data is implemented to enhance search engine visibility and provide business details. Technically, the website leverages Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. However, the absence of privacy and cookie policies, as well as the lack of security headers, indicates room for improvement in compliance and security practices. The WHOIS lookup failed due to domain naming rules violations, limiting the ability to verify domain registration details and reducing trustworthiness from a domain legitimacy perspective. Overall, the site is safe, professional, and functional but would benefit from enhanced privacy compliance and security hardening.
- IIntergears Ltd
intergears.co.uk
Transportation · United Kingdom
56Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Intergears Ltd is a well-established automotive service provider specializing in gearbox, axle, differential, and clutch reconditioning with over 35 years of experience. The company operates primarily in the West Midlands and Black Country region of the UK, targeting both public and trade customers. Their business model focuses on quality service backed by warranties and free collection options, positioning them as a trusted local specialist in their niche market. The website reflects a professional and consistent brand presence with clear service offerings and customer testimonials reinforcing trust. Technically, the website is built on WordPress using the Enfold theme, integrating modern technologies such as Google Tag Manager and Yoast SEO for analytics and search optimization. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security headers and detailed security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid for a small business website, with room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with clear policies and consent mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy. The website is safe for general audiences with no adult or questionable content. Strategically, the company should focus on enhancing security best practices, adding incident response information, and maintaining up-to-date technical components to sustain trust and compliance in the evolving digital landscape.
- Wwww.andoverglass.co.uk
andoverglass.co.uk
Other
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website at andoverglass.co.uk is currently a parked domain page hosted by GoDaddy, with no active business content or services presented. The domain WHOIS lookup failed due to domain naming rules violations, indicating the domain is either improperly registered or a subdomain rather than a standalone domain. The site contains minimal content, primarily advertising scripts from Google Adsense and a Trustpilot widget, but lacks any company branding, contact information, or business description. Technically, the site uses JavaScript and React-like structures, but the overall technical implementation is basic and limited to parking page functionality. There is no evidence of HTTPS or security headers, and no forms or data collection mechanisms are present. Privacy compliance is minimal, with only a basic privacy policy link that does not appear comprehensive or GDPR compliant. From a security perspective, the absence of HTTPS and security headers, combined with the lack of registrant data, results in a low security posture. No incident response or vulnerability disclosure information is available. The domain's legitimacy is questionable due to WHOIS errors and lack of business presence. Overall, this domain appears to be inactive or reserved without an operational website. Strategic recommendations include securing proper domain registration, implementing HTTPS, adding business content and contact information, and establishing privacy and security policies to improve trust and compliance.
- Paragon Global Brands
communisis.com
Retail · United Kingdom
69Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Paragon Global Brands is a prominent global outsourced services provider specializing in retail execution solutions that help brands succeed at critical consumer touchpoints. The company operates worldwide with expert teams that create integrated multi-agency ecosystems supported by data platforms to streamline retail processes, reduce costs, and improve brand compliance. Their offerings include strategy, design, procurement, fulfillment, and AI-driven insights, positioning them as a leader in retail services. The website reflects a mature digital presence built on Drupal 10, incorporating modern technologies such as Cookiebot for consent management and Cloudflare Insights for analytics. The site is well-optimized for mobile and accessibility, with professional design and clear navigation. Security posture is strong with HTTPS and consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is privacy protected, typical for corporate domains, and does not raise immediate concerns. Overall, the website and business demonstrate high professionalism and trustworthiness, with room for improvement in transparency and security policy disclosures.
Douglas Land Surveys Ltddouglas-land-surveys.co.uk
Real Estate · United Kingdom
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Douglas Land Surveys Ltd is a well-established land surveying company based in Dundee, Scotland, with over 25 years of experience. The company offers a comprehensive range of surveying services including topographic surveys, 3D laser scanning, hydrographic surveys, volumetric works, boundary resolution, and title deed preparation. Their client base includes individual property owners and large-scale developments such as wind farms and hydroelectric schemes, primarily serving the Scottish mainland, islands, and parts of northern England and Ireland. The business model focuses on providing professional, reliable, and timely surveying services with a strong emphasis on quality and client satisfaction.
- SSecurity Verification
funplex.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.funplex.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating a bot protection mechanism is in place. No actual business content, contact information, or policies are accessible, severely limiting the ability to analyze the company's operations or services. The domain WHOIS lookup failed with an error from Nominet UK stating the domain name contains too many parts and cannot be registered, suggesting the domain is invalid or improperly configured. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for frontend security, but lacks visible security headers, privacy policies, or business information. The absence of HTTPS information and security headers indicates a weak security posture. The site’s content quality and user experience are poor due to the blocking mechanism and lack of accessible content. From a security perspective, the use of reCAPTCHA is a positive measure against automated abuse, but the lack of other security best practices and the invalid domain registration raise concerns about legitimacy and trustworthiness. The overall risk is high due to the inability to verify business legitimacy and the blocked content. Strategic recommendations include resolving domain registration issues, implementing HTTPS with strong SSL/TLS, adding comprehensive privacy and cookie policies, publishing clear business and contact information, and enhancing security headers and compliance measures to improve trust and accessibility.
- CCircle Health Group
bmihealthcare.co.uk
Healthcare · United Kingdom
64Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Circle Health Group is a UK-based healthcare provider group. The website is currently inaccessible beyond a Cloudflare Turnstile captcha challenge, preventing full content analysis. The visible content includes a contact phone number and a prompt to visit the homepage, but no further substantive information is accessible. The domain WHOIS data is unavailable and indicates registration issues, raising concerns about domain legitimacy. The technical infrastructure includes Google Tag Manager and Cloudflare services, but lacks visible security headers or privacy policies. Overall, the website's digital maturity and security posture cannot be fully assessed due to access restrictions.