Security Directory

A

Arizona Chamber of Commerce & Industry

azchamber.com

60

The Arizona Chamber of Commerce & Industry is a well-established membership organization founded in 1996, serving as the leading voice for Arizona businesses. It provides advocacy, networking, education, and business resources to promote economic growth and prosperity in the state. The website reflects a professional and consistent brand image targeting Arizona business leaders and companies. Technically, the site uses a modern tech stack including jQuery, Foundation CSS, and a UserWay accessibility widget, hosted likely via Network Solutions. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information and social media presence are clear and professional, enhancing business credibility.

The International Association of Privacy Professionals (IAPP) operates the website iapp.org as a leading global professional association focused on privacy, AI governance, and digital responsibility. Established in 2003, the organization provides education, certification, and resources to privacy professionals worldwide. The website reflects a mature and professional brand with consistent messaging and high-quality content tailored to privacy and AI governance stakeholders. Technically, the site is built on modern frameworks such as Next.js and Chakra UI, hosted on Amazon AWS infrastructure, and employs industry-standard tools like Google Tag Manager and OneTrust for cookie consent. The site is mobile-optimized, fast, and accessible, indicating a high level of digital maturity. Security posture is strong with HTTPS enforced and domain transfer protections in place, although DNSSEC is not enabled and explicit security policies or incident response contacts are not published. Privacy compliance is partially demonstrated through cookie consent but lacks visible privacy and terms of service documentation. Overall, the site is trustworthy and professional, with room for improvement in transparency and security disclosures.

Novavax is a biotechnology company specializing in vaccine development using proprietary technology platforms such as Matrix-M adjuvant and protein-based nanoparticles. The company targets unmet medical needs with a strong pipeline and strategic partnerships to maximize impact in global health. The website reflects a mature digital presence with comprehensive content aimed at investors, partners, and healthcare professionals. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes robust privacy and cookie consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

O

O-I

o-i.com

77

O-I is a leading global manufacturer specializing in glass bottle production and innovative glass packaging solutions. The company emphasizes sustainability, recycling, and health-conscious packaging, targeting brands and businesses that require high-quality glass packaging. The website reflects a mature digital presence built on WordPress with Elementor, incorporating modern SEO and analytics tools. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the professional site and consistent branding support legitimacy. Overall, the site is well-designed, accessible, and business-focused, with a strong emphasis on sustainability and innovation in the manufacturing sector.

PeoplesBank is a regional mutual community bank serving personal and business customers primarily in Western Massachusetts and Northern Connecticut. The bank offers a comprehensive range of financial services including personal and business checking and savings accounts, mortgage and home equity loans, business lending, cash management, and wealth management services. The website reflects a well-established financial institution with a strong local presence and community focus. The bank positions itself as a trusted local banking partner with a mutual ownership structure, emphasizing customer service and community involvement. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and multiple analytics and advertising tracking tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile optimized, accessible, and SEO friendly with proper metadata and structured navigation. Performance is moderate with good user experience and professional design quality. From a security perspective, the site enforces HTTPS, uses frame busting to prevent clickjacking, and provides cookie consent mechanisms. However, it lacks some advanced security headers and publicly available security or incident response policies. The WHOIS data for the domain is unavailable, which is unusual for a bank and slightly reduces trust, but the presence of regulatory trust seals and consistent branding supports legitimacy. Overall, PeoplesBank's website demonstrates a mature digital presence with good security hygiene and comprehensive service offerings. Strategic improvements in transparency around security policies and WHOIS data disclosure would enhance trust and compliance posture.

Norwest is a well-established global venture capital and growth equity firm managing $15.5 billion in assets. The firm focuses on partnering with founders in key sectors including consumer, enterprise, healthcare, biotech, SaaS, and fintech. Their website reflects a professional and mature investment firm with a strong market position and a clear business model centered on venture and growth equity investments. The site targets founders, startups, and investors seeking capital and strategic partnership. Technically, the website is built on WordPress with Elementor and integrates advanced marketing and analytics tools such as HubSpot, Google Analytics, Microsoft Clarity, and PerimeterX for bot protection. The site is mobile-optimized, SEO-friendly, and includes comprehensive cookie consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS enforced and bot protection in place, though explicit security headers and incident response information are not publicly documented. The absence of WHOIS data for the domain is a notable concern, reducing trustworthiness despite the professional presentation. Overall, the website is a credible digital presence for a major investment firm but would benefit from improved transparency in domain registration and security policies.

E

Eckert Seamans Cherin & Mellott, LLC

eckertseamans.com

70

Eckert Seamans Cherin & Mellott, LLC is a large national law firm operating primarily in the United States with over 360 attorneys and multiple office locations. The firm offers a broad range of legal services including litigation, corporate law, labor and employment, construction, and commercial litigation. The website reflects a mature and professional business with strong market positioning, evidenced by multiple industry recognitions such as BTI Client Service A-Team and Chambers USA rankings. Technically, the website is built on WordPress with modern SEO practices using Yoast SEO and includes responsive design elements for mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. The absence of WHOIS data limits domain registration trust analysis, but the website content and external references support legitimacy. Overall, the site demonstrates a high level of professionalism and business credibility.

Mayo Clinic is a globally recognized non-profit healthcare organization specializing in patient care, medical research, and education. The website focuses on education and research opportunities, highlighting Mayo Clinic's integrated approach to improving patient outcomes through academic and scientific collaboration. The institution serves a broad audience including patients, medical professionals, students, and researchers, positioning itself as a leader in healthcare innovation and education. Technically, the website employs modern JavaScript libraries, tag management, and performance monitoring tools, hosted likely on Akamai's infrastructure, ensuring fast load times and good mobile responsiveness. Accessibility and SEO best practices are well implemented, contributing to an excellent user experience. From a security perspective, the site enforces HTTPS, uses secure form handling, and integrates consent management for privacy compliance. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is noted but likely due to .edu domain registration policies rather than malicious intent. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its users.

J

Jewish Federation of Detroit

jewishdetroit.org

62

Jewish Federation of Detroit is a well-established non-profit organization serving the Jewish community in Detroit. The website provides information about community events, fundraising campaigns, and news updates, targeting community members and supporters. The organization has been active since 2007, with a consistent domain registration and professional branding. Technically, the website is built on WordPress using modern plugins such as Gravity Forms and Kadence Blocks, with SEO optimization via Yoast and tracking through Google Analytics and Facebook Pixel. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is credible and trustworthy but could improve privacy and security practices.

Solano County's official website serves as a comprehensive portal for residents, businesses, and government stakeholders within Solano County, California. It provides access to key government services, board meeting information, employment opportunities, and volunteer programs. The site is well-branded and clearly positioned as a government entity, targeting local constituents and public service users. Technically, the site leverages modern web frameworks such as Next.js and integrates analytics and survey tools to enhance user engagement and data collection. The website is mobile-optimized and accessible, with good SEO practices evident in metadata and structured data. Security-wise, the site enforces HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is minimal, typical for government domains, but the .gov TLD and consistent content strongly support legitimacy. Overall, the site is professional and trustworthy, though it would benefit from enhanced privacy disclosures and security header implementation.

The website www.arkansashighways.com is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This indicates that the site is either restricted by server permissions or protected by a firewall or security mechanism. No metadata, business information, or contact details are available from the provided content. The WHOIS lookup failed to return any registration data, suggesting the domain may not be registered, is expired, or otherwise inactive. Due to these factors, the website's digital maturity is very low, with no visible technical infrastructure or security posture to evaluate. The lack of accessible content and registration data severely limits any meaningful analysis or trust assessment.

F

Foster Farms

fosterfarms.com

64

Foster Farms is a well-established poultry company specializing in premium chicken and turkey products, targeting general consumers seeking fresh, natural, and organic protein options. The company maintains a strong market presence on the West Coast of the United States, offering a range of fresh whole chickens and ready-to-eat meals. Their website reflects a mature digital presence with professional branding and consistent messaging aligned with their business model. Technically, the website is built on WordPress with integration of modern marketing and analytics tools such as Google Tag Manager and Bazaarvoice. The site is mobile-optimized and employs SEO best practices, although some accessibility features could be enhanced. Performance is moderate, with no significant technical debt observed. From a security perspective, the site enforces HTTPS and includes standard security headers, contributing to a good security posture. However, there is a lack of publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improving transparency and trust. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism in place. Overall, the website presents a low-risk profile with good business credibility and technical implementation. The main limitation is the absence of WHOIS data, which reduces domain registration trust verification. Strategic recommendations include publishing security policies, adding incident response information, and enhancing accessibility and security transparency.

The San Diego Regional Chamber operates as a well-established business advocacy and networking organization serving the San Diego region. The website reflects a professional presence with a focus on business services, economic development, and member engagement. The domain's long history since 1996 supports the organization's credibility and market position. Technically, the site is built on WordPress with modern frameworks like Bootstrap 5 and integrates common tools such as Google Analytics and Facebook Pixel for marketing and analytics. Security posture is adequate with HTTPS enforced and clientTransferProhibited domain status, but lacks advanced security headers and published incident response policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy page. Overall, the site is trustworthy and functional but would benefit from enhanced security and privacy disclosures.

The website camdenassetmanagement.com currently serves a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. Due to this, no business descriptive content, contact information, or policies are publicly accessible. The domain is registered with Network Solutions, LLC since 1999, suggesting a long-standing presence, but the lack of accessible content severely limits the ability to assess the company's market position or services. Technically, the site lacks DNSSEC and security headers, and no analytics or tracking technologies are detected, indicating a minimal digital footprint and weak security posture. Privacy and cookie policies are absent, and no contact or social media information is available, which negatively impacts compliance and business credibility. Overall, the site appears to be down or access-restricted, resulting in a low AI score and limited insights.

N

Norfolk Antique & Reclamation Centre

norfolkreclamation.co.uk

58

Norfolk Antique & Reclamation Centre operates as the UK's largest antique and reclamation retail center, offering a wide range of reclaimed building materials, antiques, and architectural salvage. Their business model focuses on retail and e-commerce, targeting customers interested in unique and reclaimed architectural items. The website is well-structured with extensive product categories and social media presence, supporting their market position. Technically, the site uses modern web technologies including Google Fonts, Google Maps API, and a third-party chat service (tawk.to), with good mobile optimization and SEO practices. However, there is a lack of explicit privacy and cookie policies, and no visible security headers, which are areas for improvement. Critically, the domain WHOIS data is unavailable due to a registry error indicating the domain name is invalid under Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but requires addressing domain registration issues and enhancing privacy and security compliance.

A

Arnold Clark Finance Limited

arnoldclarkrental.com

62

Arnold Clark Car & Van Rental operates a comprehensive vehicle rental service across over 30 locations in Scotland and England, offering cars, vans, dual control vehicles, and luxury options. The company positions itself as a trusted and established player in the UK transportation rental market, supported by awards such as the Which? Recommended Provider and BVRLA accreditation. Their website provides a professional, user-friendly booking experience with clear pricing and extensive location coverage. Technically, the website employs modern technologies including Google Tag Manager, LivePerson chat, Trustpilot integration, and a robust cookie consent management system. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. Security is well-handled with HTTPS enforcement and secure form submissions, though some security headers could be improved. From a security perspective, the site shows good practices in privacy compliance and data protection, with clear cookie consent and privacy policies aligned with GDPR. However, the absence of WHOIS data raises a minor concern that should be investigated further to confirm domain registration legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, Arnold Clark Car & Van Rental presents a secure, trustworthy, and professional online presence suitable for its business model. Strategic improvements in security headers and incident response transparency would further enhance their security posture and customer trust.

S

ST JOHNSTONE FC

perthstjohnstonefc.co.uk

44

St Johnstone FC's official website serves as a digital hub for fans, providing news, match reports, ticketing information, and club updates. The site is well-branded and targets football supporters, offering a professional and engaging user experience. The technical infrastructure is based on WordPress with modern JavaScript libraries and SEO optimizations, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is lacking, with no visible privacy or cookie policies, which is a notable gap. The WHOIS data is unavailable due to domain registration issues, which raises concerns about domain legitimacy despite the active website presence. Overall, the site is functional and professional but would benefit from enhanced compliance and security transparency.

S

Sustainable Seas Ltd

sustainableseas.co.uk

56

Sustainable Seas Ltd is a UK-based consultancy specializing in climate change adaptation and coastal zone management. The company operates globally, providing expert advice and project delivery services to coastal communities, businesses, and governments. Their website reflects a mature business with over 15 years of experience, supported by professional content, testimonials, and a downloadable brochure. Technically, the site is built on WordPress using modern plugins and includes a comprehensive cookie consent mechanism, indicating good privacy compliance. Security posture is solid with HTTPS and secure forms, though formal security policies and incident response details are absent. Overall, the website presents a trustworthy and professional image suitable for its target audience.

C

City Centre Initiative

cciderry.com

51

City Centre Initiative (CCI) is a dedicated city centre management organization serving Derry~Londonderry, focusing on maintaining a clean, safe, and vibrant city centre through partnerships with public, private, and community stakeholders. The website highlights key services such as city centre wardens, Derry Walls management, business awards, and safety accreditations, positioning CCI as a central figure in local urban management and community engagement. The target audience includes local businesses, residents, and visitors to the city centre. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including jQuery and push notification services. The site is hosted by NameCheap and employs HTTPS with a clientTransferProhibited domain status, indicating a stable and secure domain registration. Security posture is moderate with room for improvement in security headers and formal policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and well-branded, serving its community-focused mission effectively.

A

AJS Motorcycles Ltd.

ajsmotorcycles.co.uk

63

AJS Motorcycles Ltd. is a UK-based motorcycle manufacturer specializing in affordable learner legal motorbikes and scooters, including 50cc and 125cc models. The company targets provisional license holders and riders with various motorcycle licenses, positioning itself as an accessible option in the motorcycle market. The website is professionally designed using the Wix platform, featuring relevant content and structured data to enhance search engine visibility. However, the technical infrastructure is basic with moderate performance and limited accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. The WHOIS data for the domain is unavailable or invalid, raising concerns about domain legitimacy. Overall, the website presents a credible business front but requires improvements in privacy, security transparency, and domain registration clarity.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

The National Association for Children of Alcoholics

nacoa.org.uk

55

Nacoa is a well-established UK charity dedicated to supporting children, young people, and adults affected by parental alcohol misuse. The organization provides a free confidential helpline, online message boards, and extensive information and advice. It has a strong market position supported by notable patrons, awards, and a clear mission to raise awareness and provide support. The website reflects a professional and trustworthy presence with comprehensive content tailored to its target audience. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers and policies could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and digital maturity.

The website www.northernlights-hydroponics.co.uk is currently inaccessible and displays a 'Site not found' error page, indicating that it is either unpublished or the domain is not properly assigned. The WHOIS lookup failed due to the domain name violating Nominet UK naming rules, suggesting the domain is invalid or improperly registered. Consequently, no business information, contact details, or security policies are available for analysis. The technical infrastructure appears minimal, with only basic font and image resources loaded from an external CDN. No HTTPS or security headers are detected, and no analytics or tracking technologies are present. Overall, the site lacks any meaningful content or digital maturity.

T

Total Solutions Group (TSG) Jersey

tsg.je

61

Total Solutions Group (TSG) Jersey is a leading information management and technology services provider based in Jersey, serving clients across the Channel Islands, UK, Gibraltar, Mauritius, and South Africa. The company offers a broad range of services including document management, scanner hardware support, robotic process automation, GDPR consultancy, and information security. Their market position is strong regionally, supported by partnerships with recognized technology providers such as Kofax and Mitratech. The website reflects a professional business model focused on B2B services with clear contact channels and trust indicators such as Cyber Essentials certification. Technically, the website is built on WordPress using modern plugins like WPBakery Page Builder and LayerSlider. It employs HTTPS with good SSL configuration and includes responsive design elements for mobile optimization. However, some technical improvements are recommended, including the implementation of security headers and proper configuration of analytics tools. The website's performance is moderate with basic SEO and accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. The presence of Cyber Essentials certification indicates a commitment to security standards. However, the absence of security headers and lack of an incident response or vulnerability disclosure policy are areas for improvement. Privacy compliance is partially met with privacy and cookie policies present, but the lack of a cookie consent mechanism reduces compliance confidence. Overall, the website is trustworthy, professional, and well-positioned in its market niche. Strategic recommendations include enhancing security headers, implementing cookie consent, configuring analytics properly, and publishing explicit security and incident response policies to strengthen compliance and trust.

A

Academy Roofing Supplies LTD

academyroofingsupplies.co.uk

44

Academy Roofing Supplies LTD is a small, family-run business established in 1990, specializing in supplying roofing materials to roofers, builders, and DIY customers. The company emphasizes expert advice, efficient delivery services, and competitive pricing. Their website reflects a well-established local supplier with a clear market position and a focus on customer service. Technically, the website is built on WordPress using common plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder, hosted by Heart Internet Limited. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is adequate with HTTPS enabled, reCAPTCHA integration, and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the business's credibility and customer engagement.

E

Express Export Services

express-exports.co.uk

52

Express Export Services Limited is a UK-based international shipping and logistics company with over 50 years of experience. The company offers a broad range of services including parcel delivery, pallet and crate shipping, container shipping, vehicle shipping, international removals, antiques and artwork shipping, oversized cargo handling, professional packing, and customs/documentation assistance. Their target audience includes individuals, families, and businesses requiring reliable and secure international shipping solutions. The website presents a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring good mobile responsiveness and user experience. The site uses Google reCAPTCHA to protect forms from spam. However, there is no evidence of advanced security headers or cookie consent mechanisms, which are important for GDPR compliance and security hardening. From a security perspective, the website is accessible without WAF or blocking mechanisms, but lacks several security best practices such as security headers and explicit incident response contacts. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name contains too many parts and cannot be registered, which raises concerns about domain legitimacy and ownership consistency. Overall, the website is professional and functional with good content quality and business credibility. However, the domain registration anomaly and missing security headers reduce the overall trust score. Strategic improvements in domain registration verification, security header implementation, and privacy compliance are recommended to enhance trust and security posture.

W

Worcester Tyres & Exhausts Ltd

worcestertyres.co.uk

63

Worcester Tyres & Exhausts Ltd is a small, established automotive service provider based in Worcester, UK, specializing in tyre fitting, servicing, MOT testing, and repairs. The company targets local vehicle owners and prides itself on quality, reliability, and competitive pricing. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity. It includes an online booking widget and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with HTTPS usage but lacks visible security headers and published security policies. The absence of privacy and cookie policies indicates compliance gaps. WHOIS data is unavailable due to a domain naming rules error, which raises some concerns about domain legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security transparency.

Royal Devon University Healthcare NHS Foundation Trust operates as a large regional healthcare provider within the UK NHS system, delivering acute hospital services, patient and visitor support, and healthcare professional resources. The website is well-branded and professionally designed, targeting patients, visitors, healthcare workers, and job seekers in the Devon region. The digital infrastructure leverages modern JavaScript frameworks such as Alpine.js and Splide.js, with Umbraco CMS managing content. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements, reflecting a mature approach to privacy compliance. Security posture is moderate with HTTPS implied but lacks explicit security headers and published incident response policies. Overall, the website is trustworthy, accessible, and provides comprehensive healthcare information and services.

B

Bothams Estate Agents

bothams.co.uk

50

Bothams Estate Agents is a well-established independent real estate firm based in Chesterfield, UK, with a history dating back to 1871. The company offers a comprehensive range of property services including residential and commercial sales, lettings, valuations, and property management. The website reflects a professional and trustworthy business with strong customer testimonials and recognized industry certifications. Technically, the site is built on Joomla CMS with modern JavaScript libraries and is mobile-optimized, providing a good user experience. Security measures include HTTPS and Google reCAPTCHA on forms, although some security headers are missing. The WHOIS data for the domain is unavailable due to a domain registration anomaly, which slightly impacts trust but does not detract from the business credibility. Overall, the website is secure, compliant with privacy regulations, and professionally maintained.

C

Capacity

capacitymedia.com

59

Capacity is a well-established media company founded in 2009, specializing in news, insights, events, and market intelligence for the connectivity and digital infrastructure sectors including telecoms, data centres, wireless, and subsea industries. The website serves industry professionals and stakeholders by providing relevant and timely content. Technically, the site is built on WordPress and leverages modern analytics and marketing tools such as Google Analytics 4, Google Tag Manager, Marketo, and CookieYes for cookie consent management. Hosting infrastructure is supported by Microsoft Azure DNS services. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and security headers which could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and content-rich, but could enhance compliance and security transparency.

L

LendInvest

lendinvest.com

69

LendInvest is a UK-based property finance platform specializing in bridging, development, and buy-to-let loans targeted at intermediaries, developers, landlords, and investors. The company positions itself as a leading online lender in the property finance sector, offering tailored financial products to a professional audience. The website reflects a mature digital presence with a modern tech stack including React and Gatsby, ensuring fast performance and mobile optimization. Analytics and tracking are implemented via Segment and Google Tag Manager, supporting data-driven marketing and user insights. Security posture is strong with HTTPS enforcement, security headers, and bot protection via reCAPTCHA, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and comprehensive compliance documentation. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around data retention and vulnerability disclosures.

Q

Quaypoint Security | Locksmiths Newry

quaypointlocksmiths.com

48

Quaypoint Security is a well-established locksmith business based in Newry, Northern Ireland, with over 27 years of industry experience. The company offers a comprehensive range of locksmith and security services including key cutting, domestic, commercial, automotive locksmith services, access control systems, and safes. Their market position is that of a trusted local locksmith serving customers across the UK and Ireland, supported by positive Google reviews and partnerships with reputable clients. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, with SEO optimizations and moderate performance. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks security headers and DNSSEC, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is consistent with the business profile, showing legitimacy and no privacy protection, which is appropriate for this business type.

The website at www.msjoyners.com/lander currently serves as a minimal placeholder or parking page with no substantive content or business information. The domain appears unregistered or expired as indicated by the WHOIS query returning no match. There is no visible company branding, contact information, or policies, which severely limits the ability to assess the business or its market position. Technically, the site uses basic JavaScript and React framework scripts loaded from external sources but lacks any meaningful content or SEO optimization. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present to indicate compliance with data protection regulations. Overall, the site is not operational as a business website and presents a high risk for trust and credibility.

P

Plextek

plextek.com

68

Plextek is a UK-based engineering and consulting company specializing in advanced technology solutions, particularly in radar, communications, and data systems. With over 35 years of experience, they serve government and industry sectors, offering a broad range of services including software and electronics engineering, AI and data science, and production manufacturing. The website reflects a mature and professional digital presence with comprehensive service descriptions and a clear market focus. Technically, the site is built on WordPress with modern frameworks and includes multiple analytics and marketing tools, indicating a digitally mature infrastructure. Security posture is generally good with HTTPS and cookie consent implemented, but lacks some advanced security headers and explicit privacy policies. Overall, the site is trustworthy and professional, though the absence of WHOIS data and explicit privacy documentation suggests areas for improvement in transparency and compliance.

P

Print & Cut

printandcut.co.uk

45

Print & Cut is a UK-based commercial printing company specializing in large format printing services including wall graphics, window graphics, signage, exhibition stands, and bespoke printing solutions. Established in 2012 and operating primarily from Stockport, Manchester, the company serves both local and nationwide clients, focusing on retail and event display needs. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress using Elementor, incorporates modern web technologies, and employs Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS and security headers in place, though privacy and cookie policies are missing, representing a compliance gap. Overall, the website is well-structured, user-friendly, and trustworthy, but could improve privacy compliance and incident response transparency.

M

Merlin Architectural Ltd

merlinarc.com

48

Merlin Architectural Ltd is a UK-based company specializing in the supply and specification of architectural hardware, ironmongery, and door furniture. The company positions itself as a trusted and reliable supplier with a strong focus on customer satisfaction and professional service. Their market presence is supported by certifications such as Certifire and UKCA, and positive customer reviews. The website is built on WordPress with WooCommerce and Elementor, indicating a modern and flexible digital infrastructure. The technical setup includes Google Analytics and Tag Manager for marketing and analytics purposes. Security posture is generally good with HTTPS and reCAPTCHA implemented, though some security headers are missing and WHOIS data is unavailable, which slightly reduces trust. Privacy and cookie policies are present and GDPR compliant. Overall, the website reflects a professional business with a solid digital presence but would benefit from improved domain transparency and enhanced security headers.

M

MRK Services

mrkservices.co.uk

62

MRK Services is a small, family-run UK business specializing in powder coating, blast cleaning, automotive restoration, and garden furniture restoration services. Established in 1990, the company emphasizes quality, service, and experience, targeting both consumer and business clients seeking surface preparation and restoration solutions. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials, positioning MRK Services as a trusted local specialist in their industry. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA Enterprise for security and analytics. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be enhanced. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and anti-bot measures in place, but lacks explicit security headers such as CSP and X-Frame-Options. Privacy compliance is partial; a cookie consent banner is present, but no explicit privacy policy or terms of service pages were detected in the provided content. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and professional, but domain registration details are unavailable due to WHOIS query issues, which slightly impacts trust assessment. Strategic improvements in privacy documentation and security headers would strengthen compliance and security posture.

C

Cullimore Dutton Solicitors Limited

cullimoredutton.co.uk

56

Cullimore Dutton Solicitors Limited is a well-established legal and financial advisory firm based in Cheshire, UK, with a heritage dating back to 1792. The company offers a broad range of services including family law, property conveyancing, estate planning, and independent financial advice, targeting individuals, families, and business owners in the Cheshire and Chester region. The firm positions itself as a trusted local advisor providing joined-up legal and financial services under one roof, emphasizing clarity, respect, and professionalism. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Yoast SEO for search optimization, Contact Form 7 for user inquiries, and Google reCAPTCHA for spam protection. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for improvement in security headers and some external tracking domains. From a security perspective, the website enforces HTTPS and uses reCAPTCHA on forms, indicating a good baseline security posture. However, there is no explicit evidence of advanced security headers or a published security policy or incident response plan. The WHOIS lookup for the domain failed due to a naming rules error, but the domain is active and professionally maintained, suggesting legitimacy despite incomplete WHOIS data. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR. The main risks relate to incomplete WHOIS data and minor security header omissions. Strategic improvements in security policy transparency and header implementation would enhance the security posture and trustworthiness further.

The website mad-sheep.co.uk is currently a parked domain with minimal content primarily consisting of advertising placeholders and consent management scripts. The domain is invalid according to the official Nominet UK WHOIS lookup, indicating it is not properly registered and likely not in active business use. There is no identifiable business information, contact details, or privacy policies present on the site. Technically, the site uses JavaScript and a ConsentManager CMP for cookie consent but lacks evidence of HTTPS or security headers. The overall security posture is weak, and the site does not demonstrate compliance with privacy regulations such as GDPR. Given the lack of legitimate content and domain registration issues, the site has a low trustworthiness and credibility score.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website at www.rainbowfactorykids.com/lander currently serves only a minimal parking or placeholder page with no substantive content or business information. The domain WHOIS query returned no registration data, indicating the domain is either unregistered or expired. There is no evidence of an active business presence or digital infrastructure beyond basic JavaScript and CSS files related to parking services. The technical infrastructure is minimal, relying on React and some progressive web app indicators, but lacks any meaningful content or SEO optimization. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site appears inactive or abandoned, posing a high risk for trust and legitimacy. Strategic recommendations include securing domain registration, deploying a secure HTTPS site with proper policies, and establishing clear business and contact information to build credibility.

R

RJ Evans Flat Roofing Limited

rjevansroofing.com

52

RJ Evans Flat Roofing Limited is a UK-based commercial roofing contractor specializing in engineered roofing systems for commercial and industrial buildings nationwide. The company offers a comprehensive range of services including installation, repair, inspection, and maintenance of flat and low-slope roofing systems tailored to meet UK regulatory and environmental demands. Their market position is strong, supported by multiple industry accreditations and positive customer testimonials, targeting commercial property owners and facilities managers across the UK. Technically, the website employs modern web technologies such as Google Analytics, Bootstrap, and hCaptcha, indicating a moderate to advanced digital maturity. The site is well-structured, mobile-optimized, and SEO-friendly, though some improvements in accessibility and security headers could enhance its technical posture. From a security perspective, the site benefits from HTTPS and form protection via hCaptcha, alongside cookie consent mechanisms supporting GDPR compliance. However, the absence of visible security headers and lack of explicit incident response or security policy pages suggest areas for improvement. The missing WHOIS data introduces some uncertainty regarding domain registration legitimacy, though the website content and trust signals mitigate this concern. Overall, RJ Evans presents a professional and trustworthy online presence with solid business credibility and technical implementation. Strategic enhancements in security practices and domain registration transparency would further strengthen their security posture and trustworthiness.

A

Agencyspace

agencyspace.co.uk

43

Agencyspace is a well-established independent global creative company specializing in advertising, content creation, and experiential marketing. The company positions itself as a forward-thinking agency that helps brands go beyond conventional marketing approaches to become distinctive and memorable. The website reflects a professional and consistent brand image with clear messaging targeted at ambitious brands seeking innovative marketing solutions. The company operates primarily in the media sector and is based in the United Kingdom, with a domain age indicating a mature business presence since 2003. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates Google Analytics and Tag Manager for tracking. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, some accessibility features could be improved. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the security posture is adequate but could be enhanced by implementing security headers, cookie consent, and incident response information. The business credibility is high due to clear contact information, professional design, and consistent branding. There are no indications of malicious or adult content, making the site safe for general audiences. The domain registration data supports the legitimacy of the business with consistent and transparent WHOIS information. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, publishing security and incident response policies, and maintaining regular updates to WordPress and plugins to mitigate vulnerabilities.

The website www.vetruus.com is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No substantive business content, contact information, or policies are publicly available, severely limiting the ability to assess the company's operations or credibility. The WHOIS lookup failed to retrieve any registration data, suggesting the domain may be unregistered, privacy protected, or otherwise obscured. Technically, the site uses modern frontend frameworks like Bootstrap and integrates Google reCAPTCHA, but lacks visible security headers or HTTPS enforcement details in the provided data. Overall, the security posture is minimal and the trustworthiness is low due to the lack of accessible information and domain registration transparency.

R

Retinue Solutions

retinue-solutions.com

70

Retinue Solutions is a UK-based workforce management and recruitment solutions provider specializing in contingent and permanent workforce services, MSP, RPO, and consultancy. The company positions itself as a technology-led specialist helping organizations reduce hiring costs, improve compliance, and scale hiring efficiently. Their market presence is supported by case studies with major clients and a professional, content-rich website. Technically, the website uses modern frameworks such as Laravel Livewire and includes multimedia content and responsive design, indicating a mature digital infrastructure. Security posture is strong with HTTPS, CSRF protection, and secure form handling, though additional security headers could enhance protection. The absence of WHOIS registration data is a concern but is offset by the professional business presentation and verified contact information. Overall, the website reflects a credible and trustworthy business with room for minor security improvements.

Balls2Marketing Ltd is a well-established marketing agency based in Derby, UK, founded in 2010. The company offers a comprehensive range of marketing services including public relations, digital marketing, creative branding, marketing strategy, social media management, and event management. Their client base spans various sectors such as glazing, construction, home improvements, sustainability, and both B2B and B2C markets. The agency positions itself as a creative and strategic partner focused on delivering measurable marketing results. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, demonstrating a mature digital presence. Security measures include HTTPS, reCAPTCHA on forms, and anti-spam honeypots, though additional security headers could enhance protection. Overall, the website is professional, user-friendly, and compliant with privacy regulations, reflecting a credible and trustworthy business.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

E

Edmonds Accountancy Ltd.

edmonds-accountancy.co.uk

48

Edmonds Accountancy Ltd. is a professional accountancy firm based in Reading, Berkshire, UK, offering a wide range of accounting and business advisory services tailored to both businesses and individuals. The company emphasizes client support, transparency with no hidden fees, and expertise in areas such as VAT returns, payroll, self-assessments, and cloud accounting. Their market position is that of a local, approachable, and trusted accounting partner with a strong focus on client relationships and business growth support. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Gravity Forms for data collection, Google Analytics, Google Tag Manager, Microsoft Clarity, Facebook Pixel for tracking, and Google reCAPTCHA v3 for form security. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. The main concern is the failure to retrieve WHOIS data due to domain naming rules issues, which limits verification of domain legitimacy. Strategic recommendations include improving security headers, verifying domain registration status, and publishing a security policy to enhance trust and compliance.