High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
551–600 of 36,503
Ahmarra Door Solutions Ltdahmarra.co.uk
Manufacturing · United Kingdom
48High
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Ahmarra Door Solutions Ltd is a well-established UK-based manufacturer and installer of certified timber fire doors, serving sectors including education, healthcare, social housing, commercial, airports, and luxury homes. The company holds multiple industry-recognized certifications such as Q-Mark, ISO 9001, ISO 14001, FSC, and Secured By Design, positioning it as a trusted leader in its niche market. Their website reflects a professional and comprehensive digital presence, offering detailed product information, specification tools, BIM models, and educational CPD sessions for industry professionals. The target audience includes architects, specifiers, contractors, and building owners seeking high-quality fire door solutions.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Academia Ltdacademia.co.uk
Technology · United Kingdom
47High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Academia Ltd is a well-established UK-based IT solutions provider specializing in education, public sector, and business markets. Founded in 2002, the company offers a broad portfolio of services including hardware, software, cyber security, cloud, managed services, and creative solutions. Their market position is reinforced by multiple industry accreditations and awards, including the Stockies Reseller Website of the Year 2025. The company targets educational institutions, public sector organizations, businesses, charities, and creative industries, delivering tailored IT solutions to enhance productivity and user experience. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be improved. Hosting is provided by a reputable UK registrar, and the domain age aligns with the company's stated history, supporting credibility. Security posture is solid with HTTPS enabled and secure form embedding, but lacks explicit security headers and published security policies. Privacy compliance is partial, with no visible privacy or cookie policies on the homepage, which should be addressed to meet GDPR standards fully. Overall, the site is professional, trustworthy, and well-branded, with room for improvement in privacy and security transparency. Strategically, Academia Ltd should focus on enhancing privacy disclosures, implementing cookie consent mechanisms, and publishing security policies to strengthen compliance and user trust. Technical improvements in accessibility and security headers will further improve the site's robustness and user experience.
Other
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.randmappleby.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked. The domain WHOIS lookup failed with an error stating the domain cannot be registered due to contravention of Nominet UK naming rules, suggesting the domain is either invalid or unregistered. No business information, contact details, or privacy policies are present on the site. The technical infrastructure appears minimal with only a Google Fonts resource loaded. Security posture cannot be assessed due to lack of accessible content and absence of security headers or SSL information. Overall, the site is non-functional and does not provide any business or security assurances.
Kircher Building Services Ltdkircher.co.uk
Real Estate · United Kingdom
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Kircher Building Services Ltd is a well-established, award-winning building services company based in Lightwater, Surrey, UK. Founded in 2000, the company specializes in new build construction, refurbishments, and extensions, serving both developers and private clients. Their market position is strong locally, supported by NHBC registration and a professional online presence. The website reflects a focused business model targeting residential construction projects with a clear emphasis on quality and customer satisfaction. Technically, the website is built on WordPress with common plugins such as Yoast SEO and LayerSlider, and it employs Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile use, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though it lacks security headers and formal security policies. Privacy compliance is weak, with no privacy or cookie policies present, which is a notable gap. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security measures.
James de Frias Limitedjdf-accountants.co.uk
Finance · United Kingdom
48High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
James de Frias Limited is a small, professional accounting firm based in Pontypridd, UK, offering a range of financial services including accounting, bookkeeping, tax advice, and cloud accounting solutions. The company emphasizes personalized client relationships and timely support to help businesses achieve financial success. Their website reflects a professional and client-focused approach with secure client portals integrated via third-party platforms such as Iris OpenSpace and KashFlow. Technically, the website uses legacy JavaScript libraries like jQuery 1.8.3 alongside modern UI components such as bxSlider and Colorbox. While the site is functional and moderately optimized for performance and SEO, there is room for improvement in mobile responsiveness and accessibility. The absence of detected security headers and the use of outdated libraries present potential security risks. From a security perspective, the site employs HTTPS and cookie consent mechanisms, but lacks visible advanced security headers and uses outdated JavaScript libraries that may expose vulnerabilities. The WHOIS data is unavailable due to domain registration errors, raising concerns about domain legitimacy or query accuracy. No critical security issues like exposed credentials or malware were detected. Overall, the website is professional and trustworthy in appearance but would benefit from technical and security enhancements. The domain registration inconsistency should be investigated further to ensure legitimacy and continuity of service.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.britishwrestling.org is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or restricted. Due to this, no meaningful business or content information can be extracted. The lack of WHOIS data further limits the ability to verify domain ownership or legitimacy. The site does not provide any privacy, cookie, or terms of service policies, nor does it offer contact information or security incident response details. This severely limits the ability to assess the business or security posture. Technically, the site shows no evidence of modern frameworks, analytics, or security best practices. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trustworthiness.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Corporate Alchemycorpalc.com
Other · United Kingdom
48High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Corporate Alchemy is a UK-based small business specializing in executive coaching and leadership training services. Established in 2006, it serves senior executives, partners, and managers to enhance leadership skills, emotional intelligence, and people management capabilities. The company has a strong market presence supported by reputable clients and professional branding. Technically, the website is built on WordPress using the Genesis framework, with integrations including Google Analytics and Mailchimp for marketing and analytics. The site is mobile-optimized and performs moderately well. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Overall, the website is trustworthy and professional, with minor areas for security and privacy improvement.
- Fasthands Ltd
fasthands.co.uk
Manufacturing · United Kingdom
47High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Fasthands Ltd is a UK-based print finishing and packaging company with a solid reputation in the Nottingham area. They offer a range of services including hand finishing, cutting and creasing, folding and stitching, and wrapping and bagging. The company targets customers needing bespoke print finishing solutions and operates both manual and automated finishing systems. The website is built on SilverStripe CMS and uses common JavaScript libraries such as jQuery and Featherlight, with some Vue.js components implied. The site is accessible, well-structured, and mobile-optimized, but lacks privacy and cookie policies, security headers, and WHOIS transparency. The absence of WHOIS data due to a Nominet UK naming rules error is a notable concern, though the website content and contact details appear legitimate. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in security and compliance documentation.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
George Pickersgill Removals and Storagegpickersgill.co.uk
Transportation · United Kingdom
44High
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
George Pickersgill Removals and Storage is a well-established UK-based company specializing in domestic and commercial removals, storage solutions, and related business services. With a history dating back to 1867 and a domain registered since 2007, the company demonstrates a strong market presence in Yorkshire and nationally. Their service portfolio includes home removals, commercial relocations, overseas removals, containerised and self storage, archival management, shredding, and waste removal. The website reflects a professional and consistent brand image supported by customer testimonials and industry certifications such as IDMO, BAR CTSI, and FHIO Insurance Quality. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices but could improve accessibility and security headers. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of security headers and a formal security policy are areas for enhancement. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website is trustworthy, professional, and serves its target audience effectively.
- CCentral Axle Services (Midlands) Ltd.
centralaxles.com
Transportation · United Kingdom
42High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Central Axle Services (Midlands) Ltd. operates as a specialist provider of reconditioned gearboxes, axles, and differentials, serving passenger and commercial vehicles in the UK. The company offers a range of services including new transmissions, reconditioning, clutch and brake replacements, and fleet maintenance partnerships. Their market position is that of a regional specialist with a focus on quality and fast turnaround times, supported by a 12-month warranty and nationwide delivery. The website is built on WordPress using Astra theme and Elementor, indicating a moderate level of digital maturity with basic SEO and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or incident response policies. The absence of WHOIS data raises some legitimacy concerns, though the website content and contact information suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.
- AAbakus Limited
abakus.co.uk
Technology · United Kingdom
49High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Abakus Limited is a UK-based company formerly known as Abakus Scientific, now closed. The website serves as a legacy portal retaining contact information and offering limited sale of previous product designs and stock related to optical lenses and adaptors. The business model has shifted from active operations to liquidation of assets. The website content is minimal and static, targeting a niche audience interested in legacy optical components. Technically, the website is basic HTML with no modern frameworks or CMS detected, lacking mobile optimization and accessibility features. Security posture is weak with no evidence of HTTPS or security headers, and no privacy or cookie policies are present. WHOIS data is unavailable due to domain naming rules violation, which raises concerns about domain registration legitimacy. Overall, the website is functional but minimal, with significant room for improvement in security and compliance.
- TTrade Effluent Services Ltd
tradeeffluent.com
Energy · United Kingdom
48High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Trade Effluent Services Ltd is a UK-based independent waste management company specializing in effluent and waste solutions across North England and Wales. The company offers services including food waste disposal, bio solids transport, and centrifuge services, targeting businesses requiring compliant and sustainable waste management. Their market position is that of a trusted regional service provider with a focus on environmental protection and circular economy principles. The website is built on WordPress with modern SEO and analytics integrations, demonstrating a moderate level of digital maturity. While the site is professionally designed and mobile-optimized, it lacks explicit privacy and cookie policies, which are important for regulatory compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and DNSSEC. Overall, the business presents a credible and trustworthy online presence with room for enhancements in privacy and security transparency.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Daemon Fire and Security Ltddaemonfire.co.uk
Other · United Kingdom
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Daemon Fire and Security Ltd is a UK-based company specializing in the design, installation, commissioning, and maintenance of life safety and security systems. With a claimed 40 years of service and innovation, the company serves businesses seeking professional fire and security solutions. Their website showcases key services including life safety, security systems, building technology, and additional services, supported by certifications such as NSI Gold and ISO. The company targets business clients and maintains a professional online presence with clear contact information and client logos from reputable companies.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- NNorth East Land Sea and Air Museums
nelsam.org.uk
Transportation · United Kingdom
45High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The North East Land Sea and Air Museums (NELSAM) is a volunteer-run heritage museum located in Sunderland, UK, dedicated to preserving and showcasing 100 years of transport history including aircraft, military vehicles, and electric traction. The museum operates as a registered charity and limited company, offering exhibits, events, and educational programs to local visitors, tourists, and history enthusiasts. The website reflects a well-maintained digital presence with clear navigation, event information, and social media integration. Technically, the site uses modern frontend technologies such as Tailwind CSS and Lucide Icons, with Google Analytics and Tag Manager for tracking, and a cookie consent mechanism ensuring privacy compliance. Security posture is moderate with HTTPS implied but lacking explicit security headers or published security policies. The WHOIS data is unavailable due to a domain naming rules error, which is unusual but the website content and external trust signals support legitimacy. Overall, the site is professional, informative, and trustworthy, though improvements in security transparency and WHOIS data clarity are recommended.
Fristam Pumpsfristam.de
Manufacturing · Germany
41High
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Fristam Pumps is a well-established German manufacturer specializing in high-quality hygienic stainless steel pumps and mixers, serving industries such as food, beverage, pharmaceutical, and personal care. With over 115 years of history and a global presence in more than 50 countries, the company positions itself as a leader in hygienic pumping solutions. Their website reflects a mature digital presence with comprehensive product information, case studies, and customer testimonials, targeting industrial clients seeking durable and efficient pumping equipment. Technically, the website is built on WordPress with modern plugins like WPBakery, Slider Revolution, and Yoast SEO, ensuring good SEO, mobile responsiveness, and user experience. The site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms compliant with GDPR. Analytics tools include Matomo and Google Analytics, indicating moderate user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and uses security-related plugins but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is minimal but consistent with the company's German origin and long history, supporting legitimacy. Overall, Fristam Pumps demonstrates a strong business and technical foundation with good security hygiene. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.
David Shores & Codavidshores.co.uk
Finance · United Kingdom
46High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
David Shores & Co is a small, respected accounting firm based in the New Forest, Hampshire, UK, providing accounting and financial consultancy services to clients across England. The website is built on WordPress using the Divi theme and incorporates SEO best practices through the Yoast SEO plugin. The site is professionally designed with good content quality and clear navigation, targeting businesses and individuals seeking accounting services. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance features. The absence of WHOIS data due to domain naming rules violation introduces some uncertainty about domain legitimacy, though the website content itself is professional and trustworthy. Overall, the site presents a credible business presence but would benefit from enhanced privacy and security measures.
Into Lightinginto.co.uk
Other · United Kingdom
46High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Into Lighting is a well-established UK-based multidisciplinary lighting design consultancy with over 45 years of experience. The company specializes in providing innovative lighting solutions tailored to architects, interior designers, and clients across various sectors including real estate, hospitality, retail, and other industries. Their business model offers flexible appointment options, including fee-based consultancy and design plus supply management, supported by global partnerships in key regions such as Germany, Dubai, Hong Kong, and the USA. The website reflects a professional and consistent brand image with detailed portfolio and accreditations, including ISO certifications, reinforcing their market position as a trusted lighting design partner. Technically, the website is built on WordPress using Elementor and LiteSpeed Cache, incorporating modern JavaScript libraries like jQuery and Google Analytics for tracking. The site is mobile-optimized with good SEO practices and moderate performance. However, some technical improvements are recommended, such as implementing security headers and a cookie consent mechanism to enhance privacy compliance. From a security perspective, the site uses HTTPS with no visible exposed sensitive data or vulnerable libraries. The absence of security headers and lack of incident response or vulnerability disclosure information indicate areas for improvement. The WHOIS data for the domain is unavailable due to a Nominet UK naming rules error, which raises some concerns about domain registration transparency but does not directly impact the legitimacy of the business as presented on the website. Overall, Into Lighting presents a credible and professional online presence with strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, privacy compliance, and publishing security policies to further strengthen trust and security posture.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Laboratoire Bio Ard'Aisneilab-analyses.fr
Healthcare · France
41High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Laboratoire Bio Ard'Aisne is a well-established medical laboratory serving the Ardennes and Marne regions in France since 1971. The website presents a professional image with a focus on quality medical analyses, targeting patients and healthcare providers in the local area. The business operates on a traditional healthcare service model, emphasizing regional presence and trusted laboratory services. Technically, the website is built on WordPress using the Kadence theme and modern Gutenberg blocks, supported by reputable hosting and CDN services. Performance and mobile optimization are good, with standard SEO and accessibility features implemented. Security posture is strong with HTTPS, security headers, and domain transfer protections in place, although some compliance documentation such as privacy policy and terms of service are missing. Analytics usage includes Google Tag Manager and wanalytics.org, with moderate user tracking and a cookie consent mechanism implemented. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security policy disclosures to improve compliance and user trust.
AMV Haulageamv-uk.com
Transportation · United Kingdom
49High
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
AMV Haulage is a small UK-based transportation and plant hire company with over 25 years of experience serving Kent, Sussex, Surrey, and surrounding areas. They provide a comprehensive range of services including haulage, excavation, waste disposal, and supply of aggregates. The company maintains a professional online presence with clear contact information and customer testimonials, positioning itself as a reliable local service provider. Technically, the website is built on WordPress using Elementor, with modern libraries such as jQuery and Font Awesome, and includes cookie consent mechanisms to comply with GDPR. Security posture is adequate with HTTPS enforced, but lacks some recommended security headers and a formal security policy. The absence of WHOIS data for the domain is a notable concern, impacting trust and legitimacy verification. Overall, the website is functional, professional, and compliant with privacy regulations, but could improve in transparency and security best practices.
- HHutton Farquhar
huttonfarquhar.com
Other
38High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Hutton Farquhar appears to be a small-scale design or branding related entity, as inferred from the minimal website content and external links to related design and branding domains. The website is very basic, providing only minimal information and links to partner sites without detailed business descriptions or contact information. Technically, the site uses standard HTML5, CSS3, and JavaScript with Google Fonts, but lacks advanced frameworks or CMS platforms. There is no evidence of HTTPS or security headers from the provided data, indicating a low security posture. The absence of privacy policies, cookie notices, and contact details further reduces compliance and trustworthiness. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and registration status. Overall, the site is functional but minimal, with significant room for improvement in security, compliance, and business transparency.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.mccauls.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is invalid and indicates that the domain name contravenes Nominet UK naming rules, suggesting registration issues or misconfiguration. No business information, contact details, or privacy policies are available on the site. Technically, the site loads minimal resources, primarily Google Fonts, but lacks any modern web technologies or security headers. The absence of HTTPS information and security best practices further diminishes the site's trustworthiness. Overall, the site appears inactive or improperly configured, posing significant challenges for business or security assessment.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Events Houseeventshouse.co.uk
Transportation · United Kingdom
46High
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Events House is a UK-based global motorsport activation agency specializing in fan engagement, racing brand experiences, and creative events worldwide. The company operates a professional and well-structured website built on WordPress with Elementor and Bootstrap frameworks, integrating modern tracking and marketing technologies such as Google Analytics, Microsoft Clarity, and LinkedIn Insight. The website demonstrates good design quality, mobile optimization, and SEO practices, targeting brands and companies seeking motorsport experiential marketing services. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing security policies and adding security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Windspeed Limited (Vector Instruments)
windspeed.co.uk
Energy · United Kingdom
48High
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Windspeed Limited, trading as Vector Instruments, is a specialized manufacturer of professional wind sensors including anemometers and wind vanes, with over 50 years of experience based in North Wales, UK. The company targets business, government, and educational sectors with a B2B sales model, offering high-quality, calibrated meteorological instruments and related services such as repair and calibration. Their market position is strong within the niche of scientific and industrial wind instrumentation, supported by recognized certifications like MEASNET, IEC, RoHS, CE, and UKCA. Technically, the website is built on an older CMS (Mambo Open Source 4.0.12) and uses legacy JavaScript libraries such as jQuery 1.4.4, which may pose security risks. The site is moderately optimized for performance and mobile use but lacks modern accessibility and SEO features. No advanced analytics or tracking tools are detected, and no cookie consent mechanism is implemented despite GDPR references. From a security perspective, the site lacks visible security headers and uses outdated libraries, which could expose it to vulnerabilities. The WHOIS data for the domain is unavailable due to a Nominet error, raising concerns about domain registration legitimacy. However, the website content and contact information are consistent with a legitimate business entity. Overall, the website presents a professional and trustworthy front for a niche industrial manufacturer but requires technical and security modernization, improved privacy compliance, and verification of domain registration details to enhance trust and security posture.
- CChange Finance and Leasing
changefinanceandleasing.co.uk
Finance · United Kingdom
48High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Change Finance and Leasing is a UK-based finance provider specializing in practice finance funding for professional practitioners, manufacturing companies, industrial businesses, and agricultural sectors. The company offers a range of financial products including unsecured practice loans, equipment and asset finance, tax and VAT funding, vehicle finance, and sale and leaseback options. The website positions the company as a niche finance provider with over 20 years of experience serving various professional and industrial sectors. Technically, the website is built on WordPress and utilizes common plugins such as Contact Form 7 and Cookie Notice. It employs jQuery and other JavaScript libraries for UI enhancements. The site is accessible without any WAF or security challenge blocking, but the technical implementation is basic with moderate performance and limited mobile optimization. SEO and accessibility features are present but minimal. From a security perspective, the site uses HTTPS but lacks advanced security headers like Content-Security-Policy and HSTS. There is no visible security.txt or incident response contact information. Privacy compliance is basic, with a privacy policy and cookie consent banner present but no explicit GDPR statements. No contact emails or phone numbers are found on the homepage, which limits direct communication channels. Overall, the website is functional and provides relevant business content but shows gaps in security best practices and transparency. The WHOIS data is unavailable due to a domain registration error, which raises concerns about domain legitimacy and reduces trustworthiness. Strategic improvements in security posture, privacy compliance, and contact transparency are recommended to enhance credibility and user trust.
A M Milesammiles.com
Finance · United Kingdom
42High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
A M Miles is a small UK-based accounting and bookkeeping service provider with over 30 years of professional experience. The company offers a comprehensive range of financial services including company secretarial services, bookkeeping with popular software, payroll, VAT returns, accounts preparation, and tax filing for both corporate and personal clients. The website reflects a professional and consistent brand image targeting small businesses, sole traders, partnerships, and non-profit organizations in the UK. Technically, the website is built on WordPress with standard plugins and scripts, hosted on HostPapa, and includes a cookie consent mechanism. However, it lacks a privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. No WAF or blocking mechanisms are detected, and the domain registration data is consistent and transparent, supporting the legitimacy of the business.
- RRichard Tovey Transport Services Ltd
rich-tovey.co.uk
Transportation · United Kingdom
49High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Richard Tovey Transport Services Ltd is a UK-based transportation and haulage company offering a variety of services including general haulage, Hiab crane operations, airfreight/seafreight, low loader transport, special deliveries, and electronic proof of delivery tracking. The company emphasizes a skilled workforce and a diverse fleet equipped with certified mechanical handling devices. The website presents basic but clear information targeting businesses and individuals requiring transport services within the UK. Technically, the website uses JavaScript and jQuery with inline cookie consent mechanisms and Google Analytics for tracking. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident. Security measures are minimal, with no detected security headers or HTTPS verification in the provided data, though cookie consent is implemented. From a security perspective, the site lacks a published security policy, incident response contacts, and certifications. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain legitimacy. No blocking or WAF was detected, and the site content is safe with no adult or questionable material. Overall, the site demonstrates basic digital maturity with room for significant improvements in security, privacy compliance, and technical robustness.
Other
46High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.thomasandwoolven.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The WHOIS lookup failed with an error indicating the domain name contains too many parts, suggesting registration issues or invalid domain status. No metadata, structured data, or contact information is available, and no security or privacy policies are present. The site uses only Google Fonts as an external resource and lacks any analytics or tracking scripts. Overall, the digital presence is minimal and blocked, preventing meaningful business or security analysis.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Rockingham Carsrockinghamcars.co.uk
Transportation · United Kingdom
48High
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Rockingham Cars is a well-established automotive dealership based in Corby, Northamptonshire, specializing in new and used car sales, servicing, and motability offers. The company has a strong regional presence with over 40 years of experience and partnerships with major manufacturers such as Fiat, Mazda, and Abarth. Their website reflects a professional and customer-focused approach, providing rich content, interactive search features, and multiple contact channels including phone and social media. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security measures include HTTPS, CAPTCHA, and cookie consent mechanisms, though explicit security policies and WHOIS data are lacking. Overall, the site presents a trustworthy and functional digital presence for the business.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Wwww.cityarch.co.uk
cityarch.co.uk
Other
46High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website cityarch.co.uk is currently under construction, displaying only a maintenance placeholder page with minimal content. There is no business description, contact information, or policies available on the site. The domain is registered since 2005 with eNom LLC, indicating a long-standing registration, but the current website content does not reflect an active or mature online presence. Technically, the site uses WordPress CMS with jQuery and standard maintenance mode plugins. HTTPS is enabled, but no security headers are present, and no analytics or tracking scripts are detected. Privacy and cookie policies are absent, and no contact or business details are provided, limiting trust and compliance indicators. Overall, the site has a poor content quality and low business credibility at this time.
Other
47High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.permastore.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content. The WHOIS lookup for the domain indicates no registration record exists, suggesting the domain may be unregistered, expired, or otherwise unavailable. Due to the lack of accessible content, no business information, contact details, or policies are present on the site. Technically, the site does not reveal any technologies, scripts, or analytics, and no security headers or SSL information is available. The security posture is poor due to the site being blocked and the absence of any security best practices. Overall, the domain's legitimacy is questionable given the missing WHOIS data and inaccessible content. Strategic recommendations include verifying domain registration status, enabling proper website access, implementing security headers and SSL, and publishing privacy and contact information to improve trust and compliance.
Children's Charity - Darjeeling Children's TrustDarjeeling Children's Trust | UK Registered Charity No. 1143109darjeelingchildrenstrust.org.uk
—
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Crossroads Project - Serving Meltham, Helm and Wilshawmelthamcrossroads.co.uk
—
41High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
- RRSCDS Wirral Home
rscds-wirral.org.uk
—
44High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
—
36High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Branding boss - Branding Leeds | Dan Pearce Sells Homesbrandingboss.com
—
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.