Security Directory

LCI Productions is a specialized media company focused on creating immersive and memorable experiences worldwide through 3D projection mapping, laser special effects, water shows, and other experiential technologies. Their market position is that of a niche service provider catering to attractions, brands, and venues seeking high-quality show production and design consultancy. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Yoast SEO, and Google Tag Manager, indicating a good level of digital maturity. Security posture is generally strong with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy, but the lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Home | WeDu

adaptiveit.co.uk

50

The website www.adaptiveit.co.uk appears to be a Wix-hosted site with minimal content and no meaningful business information presented. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK naming rules and cannot be registered, which raises significant concerns about the legitimacy and ownership of the domain. The site lacks privacy and cookie policies, contact information, and security best practices such as security headers or SSL configuration details. Technically, the site uses standard Wix platform scripts and polyfills but does not demonstrate advanced technical maturity or optimization. Overall, the security posture is weak due to lack of visible security controls and policies. The risk assessment for this site is high due to domain registration issues and lack of compliance and security indicators.

C

CarSupermarket.com

motordepot.co.uk

67

CarSupermarket.com is a UK-based large used car retailer offering thousands of used vehicles with a minimum 12-month warranty, home delivery, and store collection options. The business is part of the Aramis Group, a major European used car sales leader, which enhances its market credibility. The website is professionally designed with excellent content quality, clear navigation, and good mobile optimization. It leverages modern technologies including Nuxt.js, Stripe for payments, and multiple analytics and advertising platforms such as TikTok Pixel and Bing Ads. Security posture is good with HTTPS and security headers implemented, though no explicit security policy or incident response information is published. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. The absence of WHOIS data for the domain is a notable anomaly, slightly reducing trust, but the overall business and website presentation are professional and trustworthy.

E

EBM Electrical services Ltd

ebmelec.com

57

EBM Electrical services Ltd is a small local business based in England providing electrical services. The website is built on the Wix platform and presents basic business information including contact phone number and postal address. The site lacks comprehensive privacy, cookie, and terms of service policies, which limits its compliance posture. Technically, the site uses standard Wix scripts and styles with moderate mobile optimization and basic SEO features. Security posture is limited with no detected security headers or incident response contacts. The domain WHOIS data is missing or unregistered, which raises concerns about domain legitimacy and trustworthiness. Overall, the website serves its basic business purpose but requires improvements in security, compliance, and domain registration transparency.

B

Bloxwich Environmental Services Ltd

bloxwichasbestos.co.uk

52

Bloxwich Environmental Services Ltd is a small UK-based company specializing in asbestos removal and surveys, serving the West Midlands and nationwide. Established in 2004, the company emphasizes professional service, competitive pricing, and holds industry accreditations such as CHAS and ARCA. Their website reflects a professional and clear presentation of services targeted at residential and commercial clients. Technically, the site uses modern web technologies including Google Analytics and Tag Manager, hosted on a MultiScreenSite platform with good mobile optimization and SEO practices. Security posture is generally good with HTTPS enforced and secure forms, though explicit security headers and a published security policy are absent. Privacy and cookie policies are present but basic, with GDPR compliance implied. The WHOIS data for the domain is unavailable and indicates domain registration issues, which raises legitimacy concerns despite the professional web presence. Overall, the site scores well on business credibility and content quality but is penalized for domain registration inconsistencies and some security best practices gaps.

M

Micro Pneumatics

micropneumatics.co.uk

38

Micro Pneumatics is a UK-based manufacturing company specializing in designing and producing machines for the textile industry, with over 40 years of experience. The company maintains a professional online presence with a well-structured WordPress website that highlights its product range and company history. The site targets manufacturing and textile industry professionals, positioning itself as a niche player with a focus on quality and innovation. Technically, the website leverages modern CMS and plugins such as WooCommerce, Yoast SEO, and Google Analytics, indicating a moderate level of digital maturity. However, there is room for improvement in performance optimization and accessibility. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security practices.

The website at www.integral.co.uk is currently inaccessible, returning a 403 Forbidden error page served by nginx. The domain WHOIS lookup failed due to the domain name violating Nominet UK's naming rules, indicating the domain is invalid or misconfigured. Consequently, no business, contact, or policy information is available from the site. The lack of accessible content and absence of metadata or scripts suggests the site is either under maintenance, misconfigured, or not properly registered. From a technical perspective, the site lacks HTTPS and security headers, and no modern technologies or CMS platforms are detectable. The minimal HTML content and error status severely limit any meaningful technical or SEO analysis. The absence of privacy and cookie policies indicates non-compliance with common data protection regulations. Security posture is weak due to the lack of HTTPS and security headers, and the domain's invalid status raises concerns about legitimacy. No vulnerabilities or incident response information can be assessed due to the blocked content. Overall, the site presents a high risk from a trust and security perspective. Strategic recommendations include resolving domain registration issues, enabling HTTPS with a valid SSL certificate, implementing security headers, and publishing privacy and cookie policies to improve compliance and trustworthiness.

Diagnostic Imaging Ltd is a UK-based supplier specializing in Nuclear Medicine products and related healthcare equipment, serving the UK healthcare market with over 30 years of experience. Their offerings include radiopharmaceuticals, radioisotopes, theranostics, gamma cameras, and related consumables. The company operates primarily as a B2B supplier with direct sales, marketing support, service engineering, and distributor assistance. The website content reflects a focused healthcare niche with clear contact details and certifications indicating quality management standards. Technically, the website is basic with static HTML content, lacking modern CMS or frameworks. There is no evidence of HTTPS or security headers from the provided data, and the site is not optimized for mobile devices or accessibility. SEO is minimal but includes relevant meta tags. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the absence of WHOIS registration data is concerning and suggests either a very recent domain registration or privacy protection that is not reflected in the WHOIS output. The lack of HTTPS and security headers reduces the security posture. No privacy or cookie policies are present, which is a compliance gap. The site does display ISO certifications, which are positive trust indicators. Overall, the website presents a moderate risk profile due to missing domain registration transparency and security best practices. Strategic improvements in HTTPS implementation, privacy compliance, and WHOIS transparency are recommended to enhance trust and security.

Burton Beavan is a small, established accounting firm based in Northwich, Cheshire, UK, offering a range of financial and accounting services primarily targeting local businesses, contractors, and tech start-ups. The company emphasizes forward-thinking and proactive client service, with a strong local market presence and positive trust indicators such as high customer ratings and testimonials. The website is professionally designed using WordPress, with good SEO and mobile optimization, and integrates common technologies such as Google Analytics and reCAPTCHA for security. Security posture is solid with HTTPS and form protections, though additional security headers and explicit policies could enhance compliance and trust. WHOIS data is unavailable due to domain registration lookup limitations, but the website content and domain usage align with legitimate business operations. Overall, the site presents a trustworthy and professional image suitable for its target audience.

U

UKP Worldwide

ukpworldwide.com

46

UKP Worldwide is a specialist service provider focusing on customs clearance for eCommerce parcels and mail to and from the UK, including returns management and duty reclaim services. The company targets businesses involved in eCommerce logistics, offering niche expertise in customs and returns processes. The website presents a professional and consistent brand image with clear business descriptions and social media presence, indicating a small but focused operation founded around 2019. Technically, the website is built on WordPress using the Divi theme and common plugins such as Yoast SEO and Contact Form 7. It employs tracking and analytics tools like Microsoft Clarity and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. From a security perspective, the website lacks visible security headers and explicit privacy or cookie policies, which reduces its compliance posture. The WHOIS data is incomplete or unavailable, raising concerns about domain registration transparency. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices and compliance documentation are recommended. Overall, the website is functional and professional but would benefit from enhanced security configurations, transparent privacy policies, and verified domain registration information to improve trust and compliance.

A

Association of Charitable Foundations (ACF)

acf.org.uk

67

The Association of Charitable Foundations (ACF) is a well-established UK non-profit membership association serving foundations and independent grant-makers. The website reflects a mature digital presence with comprehensive content, including research, events, and member resources. The technical infrastructure is based on ASP.NET with modern analytics and tracking tools integrated, supported by a reputable registrar and hosting environment. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness suitable for its sector.

CSP London is an independent civil and structural engineering consultancy established in 1987, operating primarily in the UK market. The company offers tailored engineering solutions including RAAC expertise and multi-disciplinary services, positioning itself as a reputable mid-sized firm with a strong client retention record. The website reflects a professional brand image consistent with its business focus and includes clear contact details and social media presence. Technically, the site is built on WordPress using modern plugins and themes, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and explicit policies are missing. WHOIS data is unavailable, which slightly impacts trust but the business information on the site appears legitimate. Overall, CSP London presents a credible and professional online presence suitable for its industry and audience.

The website www.sanremouk.com currently serves only as a security verification page implementing Google reCAPTCHA v3 to prevent automated access. There is no accessible business content, contact information, or policies visible, indicating the site is either under protection or not fully deployed. The domain WHOIS data is unavailable, suggesting the domain may not be registered or WHOIS information is withheld, which raises concerns about legitimacy and trustworthiness. Technically, the site uses modern libraries like Bootstrap and Google reCAPTCHA but lacks visible security headers and HTTPS confirmation. Overall, the site is blocked by a security mechanism, limiting content access and analysis.

L

Lewis Partnership Architects

lewispartnership.co.uk

56

Lewis Partnership Architects is a small architectural firm specializing in residential architecture services primarily serving Llanelli, Carmarthenshire, and the wider South Wales region. The company positions itself as a trusted local architect with a focus on building strong client partnerships and delivering detailed, customer-focused architectural solutions. Their website reflects a professional business with clear contact information and a focus on residential building projects. Technically, the website is built on the Wix platform, leveraging Wix's proprietary frameworks and libraries, which provides a moderate level of performance and mobile optimization. However, the site lacks advanced SEO and accessibility features and does not include privacy or cookie policies, which are important for compliance and user trust. Security posture is basic, with no detected security headers or incident response information, and the WHOIS data for the domain is unavailable due to a domain registration error, which raises some concerns about domain legitimacy. Overall, the website is functional and professional but would benefit from improved security and compliance measures.

D

Dignity

dignityfunerals.co.uk

72

Dignity Funeral Directors operates a comprehensive UK-wide funeral service and prepaid funeral plan business, positioning itself as a trusted and professional provider in the bereavement sector. The website offers extensive guidance, service information, and a funeral director locator tool, catering primarily to UK residents seeking funeral arrangements. Technically, the site employs modern tracking and analytics tools, including Google Tag Manager, Google Analytics, and Visual Website Optimizer, and is built on the Umbraco CMS platform. The site is mobile-optimized and accessible, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. WHOIS data is unavailable due to domain naming rules issues, but the site’s linkage to Dignity PLC and professional presentation support its legitimacy. Overall, the site is well-structured, trustworthy, and compliant with basic privacy standards.

Hi-Spec Engineering Ltd is a small UK-based engineering consultancy specializing in structural, mechanical, and civil design services, project management, surveying, and draughting. Their market position is that of a niche regional service provider focused on construction, manufacturing, and renewable energy sectors. The website presents professional content with clear contact details and certifications, supporting business credibility. Technically, the site uses legacy technologies such as jQuery and Google Analytics, with moderate performance and basic mobile optimization. Security posture is moderate but lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are published, indicating compliance gaps. The WHOIS data is missing, raising concerns about domain registration legitimacy despite the active website presence. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and domain legitimacy verification.

The domain www.stonefirms.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content or metadata. The WHOIS lookup failed to retrieve any registration information, indicating the domain may be unregistered, expired, or intentionally blocked. Due to the lack of accessible content, no business description, contact information, or technical infrastructure details can be determined. The website does not provide any privacy, cookie, or terms of service policies, nor does it show any security or compliance frameworks. This severely limits the ability to assess the company's market position or digital maturity. The security posture is unknown but likely poor given the absence of security headers or HTTPS confirmation. Overall, the site presents a high risk due to lack of transparency and accessibility.

Stuart Fletcher Limited operates as a specialized consultancy providing seismic interpretation and geophysical services primarily to the oil and gas industry. The website serves as a professional portfolio and contact point for the consultancy, highlighting expertise in seismic data analysis and related geoscience services. The business targets industry professionals and companies requiring expert geophysical consultancy, positioning itself as a niche provider with a history of work prior to the principal's retirement in 2018. Technically, the website is a simple static HTML site with basic CSS styling, lacking modern web technologies, mobile optimization, and advanced SEO features. There is no evidence of CMS usage or analytics integration. Security posture is weak due to the absence of HTTPS, security headers, and privacy policies. The WHOIS data is unavailable, which raises questions about domain registration status but does not directly contradict the legitimacy of the business as presented. Security evaluation reveals critical gaps including lack of HTTPS, missing security headers, and no privacy or cookie policies, which expose visitors to potential risks and reduce trust. No forms or data collection mechanisms are present, minimizing attack surface but also limiting user engagement. Overall, the site is functional but outdated and lacking in modern security and privacy best practices. The overall risk is moderate due to the absence of HTTPS and WHOIS transparency. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, improving mobile responsiveness, and verifying domain registration details to enhance trust and compliance.

M

MandM

mandmdirect.com

72

MandM is a well-established UK-based e-commerce retailer specializing in branded clothing, footwear, and accessories at discounted prices. The website targets men, women, and children primarily in the UK and European markets. It offers a broad range of products from big brands, positioning itself as a cost-effective alternative to traditional retail. The business model focuses on direct online sales with a strong digital presence and customer engagement through multiple social media platforms. Technically, the website employs modern web technologies including Vue.js, jQuery, and Algolia for search functionality, supported by robust tracking and marketing tools such as Google Tag Manager and Exponea. Hosting and content delivery appear to be managed via Akamai CDN, ensuring good performance and availability. The site is mobile-optimized and incorporates accessibility features, though there is room for improvement in accessibility compliance. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements security headers like Content Security Policy and X-Frame-Options. Cookie consent and privacy policies are comprehensive and GDPR compliant, reflecting a mature privacy posture. However, explicit security policies and incident response information are not publicly available, which could be enhanced to improve transparency and trust. Overall, MandM demonstrates a strong digital maturity and business credibility with a secure and user-friendly platform. The absence of WHOIS data is likely due to privacy protection and does not detract from the legitimacy of the business. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility to further strengthen the website's security and compliance posture.

A

Arcadis N.V.

arcadis.com

78

Arcadis N.V. is a leading global design and consultancy firm specializing in natural and built assets, operating in over 30 countries with a workforce exceeding 34,000 professionals. The company focuses on infrastructure, sustainability, energy, transportation, and real estate sectors, delivering services that modernize critical infrastructure and provide asset advisory. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to business and government clients. Technically, the site leverages modern frameworks such as React, integrates Azure Application Insights for telemetry, and employs Google Tag Manager and Cookiebot for analytics and consent management, indicating a high level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement. Overall, the site is trustworthy and professional, though the lack of WHOIS data transparency slightly reduces domain trustworthiness. Strategic recommendations include enhancing transparency on security incident response and maintaining up-to-date third-party components.

L

Liverpool College

liverpoolcollege.org.uk

60

Liverpool College is a well-established educational institution in Liverpool, UK, providing comprehensive education for children aged 4 to 19, including primary, secondary, sixth form, and boarding services. The website reflects a mature digital presence with a clear focus on community engagement, curriculum information, and student support services. The institution holds recognized awards and partnerships that enhance its credibility and market position. Technically, the site is built on Joomla CMS with modern frontend frameworks such as Bootstrap and UIkit, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the institution's mission and community role effectively.

C

Contechs

contechs.co.uk

70

Contechs is a professional service provider specializing in automotive design and engineering, targeting global automotive OEMs. The company offers innovative design and engineering services from concept through to production, positioning itself as a key player in the transportation sector. The website reflects a medium-sized business with a consistent brand presence and good quality content tailored to its B2B audience. Technically, the website employs modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Coralogix RUM, and uses Bootstrap for responsive design. However, the absence of explicit privacy and terms of service policies, as well as missing WHOIS registration data, limits the ability to fully verify the business's legitimacy and compliance posture. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and incident response contacts, indicating room for improvement in security best practices. Overall, the website is professional and functional but would benefit from enhanced transparency and security documentation.

A

AirCraft Air Handling

aircraftairhandling.com

48

AirCraft Air Handling is a UK-based manufacturer specializing in Air Handling Units (AHUs) with over 25 years of experience serving sectors such as healthcare, pharmaceutical, retail, and food processing. The company offers both standard and bespoke AHU solutions, emphasizing quality and cost-effectiveness. The website is built on WordPress using the Avada theme and incorporates modern technologies including Google Tag Manager and LinkedIn Insight for analytics and marketing. The site is well-structured, mobile-optimized, and professionally designed, providing a good user experience and clear navigation. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers are not explicitly detected and privacy compliance elements like privacy and cookie policies are missing. WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and registration consistency, especially given the company's claimed long business history. Overall, the website presents a professional front but would benefit from enhanced transparency and compliance documentation.

I

International Management Answers

managementanswers.co.uk

55

International Management Answers (IMA) is a UK-based specialist service provider established in 2003, focusing on assisting international companies entering the UK market. Their core offerings include Professional Employee Outsourcing (PEO), Market Access Consulting, Outsourced HR, Employee Relocation, and part-time Local UK Director services. The company has established credibility through partnerships with London & Partners and recognition by the UK Department for Business and Trade. The website reflects a professional and consistent brand image targeting international businesses seeking a streamlined UK market entry.

Hallmark Luxury Care Homes is a family-run provider of luxury care homes across England and Wales, specializing in residential, dementia, respite, and nursing care. The company positions itself as an award-winning, top 20 care home group with a strong reputation for relationship-centred care and high resident satisfaction. Their website reflects a mature digital presence with rich content, professional design, and clear navigation tailored to seniors and their families seeking premium care services. Technically, the website leverages a modern technology stack including PHP with Laravel, WordPress CMS, Microsoft Azure hosting, and integrates advanced analytics and marketing tools such as Google Analytics, Microsoft Clarity, LiveChat, and CookieYes for consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices. From a security perspective, the site enforces HTTPS, uses anti-forgery tokens, DDoS protection, and bot detection mechanisms. Cookie consent is actively managed with user customization options. However, explicit security headers could be more clearly implemented and documented. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The lack of WHOIS data for the queried subdomain is a minor anomaly but does not detract from the legitimacy of the business. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving public availability of privacy and security policies.

S

SCL Interiors

serviceceilings.co.uk

40

SCL Interiors is a UK-based interior fit-out company specializing in structural framing systems, stud partitioning, suspended ceilings, glazed partitioning, and acoustic panels. With over 100 years of combined expertise, they serve diverse sectors including commercial, education, healthcare, leisure, retail, industrial, and accommodation. The company holds multiple certifications and accreditations, reinforcing its market credibility and commitment to quality. Their website is professionally designed using WordPress CMS, featuring modern JavaScript libraries and SEO optimizations, though mobile optimization and accessibility are basic. Security posture is adequate with HTTPS enabled and secure forms, but lacks security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Contact information is comprehensive, including email, phone, physical address, and a contact form, facilitating client engagement. Overall, the website reflects a trustworthy and established business with room for improvement in privacy compliance and security best practices.

ICU Group, operating as IT Support North West, is a small UK-based IT support company serving businesses primarily in the North West of England. Established since 1998, they provide managed IT support services including direct technical support, onsite visits, backup monitoring, and IT strategy reviews. The company emphasizes trust, offering a free 3-month trial and monthly rolling contracts, and holds Microsoft Silver Partner status along with multiple technical certifications. Their website is professionally designed with clear navigation and contact options, including phone, email, and a secured contact form with Google reCAPTCHA. However, the domain WHOIS data is unavailable due to a naming rules violation, which raises concerns about domain legitimacy. The site lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with some best practices observed but missing security headers and unknown SSL configuration. Overall, the company presents a credible business with room for improvement in security and compliance documentation.

Mainstream Plumbing & Heating Ltd is a small UK-based company specializing in plumbing and heating services primarily for new build construction projects. The company has over twenty years of experience and serves regions including Yorkshire & Humberside, East Anglia, and The Midlands. Their client base includes notable developers such as Barratts, Lindens, Bovis, and Morris Homes. The website content is straightforward, providing a basic overview of their services and company values, but lacks detailed contact information and compliance documentation. Technically, the website is built using RapidWeaver CMS and incorporates older JavaScript libraries such as jQuery 1.11.0 and Modernizr. The site shows basic mobile optimization and accessibility but lacks modern security features such as HTTPS enforcement and security headers. There is no evidence of analytics or tracking tools, and no privacy or cookie policies are present, indicating low digital maturity. From a security perspective, the absence of HTTPS and security headers, combined with the failure to retrieve WHOIS data due to domain registration errors, raises concerns about the domain's legitimacy and security posture. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities but also limiting user engagement. The website does not demonstrate GDPR compliance or incident response readiness. Overall, while the business appears legitimate and established based on website content, the technical and security shortcomings, especially the domain registration issues, present risks. Strategic improvements in security, compliance, and digital presence are recommended to enhance trust and operational resilience.

The website www.rcbuk.com currently presents only a security verification page employing Google reCAPTCHA v3, blocking access to any substantive content. No business information, contact details, or policies are accessible, severely limiting the ability to assess the company or its services. The domain WHOIS query returned no registration data, indicating the domain may be unregistered or the data is withheld, which raises concerns about legitimacy. Technically, the site uses modern libraries like Bootstrap and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation in the provided data. Overall, the site’s security posture is minimal but includes bot protection. The lack of accessible content and registration data results in a low trust and credibility score.

The website www.merseymail.com appears to be a parked domain or placeholder site with minimal content primarily consisting of embedded advertisements and consent management scripts. There is no visible business information, contact details, or privacy policies, which significantly limits the ability to assess the business or its operations. The domain WHOIS data is missing, indicating the domain may be unregistered or expired, which raises serious legitimacy concerns. Technically, the site uses basic JavaScript and a consent management platform but lacks modern security headers and visible compliance documentation. Overall, the site exhibits a low level of digital maturity and business credibility.

T

HOME | Ark Trust

theark.org.uk

59

The website at www.theark.org.uk appears to be hosted on the Wix platform but lacks a registered domain record in the Nominet UK WHOIS database, indicating the domain is either a subdomain or misconfigured. The site content is minimal and primarily technical, with no visible business or organizational information, contact details, or privacy policies. The technical infrastructure relies on Wix's standard scripts and polyfills, with no advanced frameworks or analytics detected. Security posture is weak due to lack of visible security headers, SSL configuration details, and absence of privacy or cookie policies. Overall, the site presents low business credibility and limited content quality, raising concerns about legitimacy and trustworthiness.

S2 Events Ltd is a London-based event production company specializing in set design, prop hire, custom builds, scenic painting, staging, and technical services for live events worldwide. The company targets event organizers and production companies seeking bespoke event solutions. The website is professionally designed using the Squarespace platform, featuring clear navigation, rich visual content, and active social media presence, indicating a moderate level of digital maturity. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks some security headers and cookie consent mechanisms. The WHOIS data is incomplete and indicates domain registration issues, which may affect trust but the website content and business information appear consistent and professional. Overall, the site presents a credible business with room for improvement in privacy compliance and security best practices.

The website www.epam.com/services/epam-continuum is currently inaccessible due to a Cloudflare security verification challenge page that blocks access to the actual content. This challenge uses Cloudflare's Turnstile captcha to protect against malicious bots, preventing extraction of business, contact, or policy information. The WHOIS lookup for the domain also failed to return registrant or registration details, limiting trust and legitimacy analysis. The site is protected by Cloudflare, indicating a legitimate enterprise-level security posture, but the lack of accessible content restricts comprehensive evaluation. The domain epam.com is known in the industry, but this analysis cannot confirm details due to the blocking mechanisms in place.

S

Scutum

scan-alarms.com

55

Scutum is a well-established leader in corporate security, providing comprehensive security solutions to large companies and SMEs primarily in the United Kingdom and Europe. Their offerings include asset protection, infrastructure protection, people protection, business intelligence, and advanced digital monitoring services. The company emphasizes 24/7 security support and leverages certified remote surveillance centers to ensure high-quality service delivery. The website reflects a mature business with a strong market position and a broad sector focus including defence, health, industry, and public sectors. Technically, the website is built on Drupal CMS and employs modern web technologies such as Google Tag Manager, Microsoft Clarity, HubSpot Analytics, and cookie consent management via Axeptio. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security-wise, the site enforces HTTPS and uses certified security standards, but lacks some explicit security headers and public security policies. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registrant data and privacy policy reduces overall trust. The site does not expose contact emails but provides a clear phone contact and contact forms. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Scutum's website demonstrates a professional and trustworthy digital presence aligned with its business goals. Verification of domain registration and publication of privacy and security policies would further enhance trust and compliance.

Nevilles Global operates as a UK-based B2B supplier specializing in hospitality and catering products, offering a comprehensive online catalogue and interactive mood board tools to assist customers in product selection and presentation. The company targets hospitality businesses and catering professionals, positioning itself as an established supplier within the UK retail sector. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, and specialized tools like html2canvas and jsPDF for enhanced user interaction and content export capabilities. The presence of cookie consent mechanisms and integration with analytics services such as Microsoft Clarity indicate a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, impacting overall trust. Strategic recommendations include enhancing security headers, publishing clear contact and incident response information, and resolving domain registration transparency to improve business credibility and security compliance.

P

Propelair

propelair.com

51

Propelair is a UK-based international cleantech company specializing in water-efficient commercial washroom solutions that integrate IoT technology for smart management. Their product range includes ultra-low water-flush toilets and connected washroom systems designed to reduce water consumption, improve hygiene, and support sustainability goals. The company holds multiple certifications such as BREEAM and CE marking, reinforcing its market credibility and commitment to quality. The website reflects a professional and modern digital presence, leveraging WordPress and WooCommerce platforms with integrated analytics and cookie consent mechanisms to ensure compliance and user experience. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and security headers could be improved. Overall, Propelair demonstrates a mature business with a solid technical foundation and compliance awareness.

Brysons Haulage Ltd is a family-owned haulage and storage company based in Leicester, UK, with over 40 years of experience in the transportation and logistics sector. The company offers a range of services including road haulage, storage, and freight forwarding across the UK, operating a fleet of vehicles from vans to articulated trailers equipped with modern tracking and safety technologies. The website reflects a professional and customer-focused business with strong trust signals such as verified Google reviews and clear contact information. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as Google reCAPTCHA v3 for form security and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices, although some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and a published security policy or incident response plan. The absence of WHOIS domain registration data is a notable concern, potentially impacting trustworthiness despite the professional presentation and business legitimacy indicated by the website content. Overall, the website presents a solid business presence with good technical and security practices, but the domain registration opacity warrants further verification. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying domain registration details to improve trust and compliance.

Agripower Contractors Limited is a UK-based specialist company focused on natural and artificial sports surface construction, landscaping, drainage, and environmental works. Established in 1964, the company serves a diverse clientele including universities, schools, sports clubs, local authorities, and premier league football clubs. Their business model centers on providing turnkey solutions from design and consultancy through to construction and maintenance, supported by a skilled in-house workforce and a comprehensive fleet of machinery. The company holds multiple industry certifications and affiliations, reinforcing its market position as a leading sports surface specialist in the UK. Technically, the website employs a legacy but functional technology stack including Bootstrap 3, jQuery, Font Awesome 4.7, and Google Fonts. The site is mobile responsive with good navigation and content quality, though some technical debt is evident such as outdated libraries and an invalid Statcounter analytics code snippet. Privacy compliance is addressed with clear privacy and cookie policies and a consent mechanism, though GDPR-specific details are basic. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and has some minor issues like the invalid analytics code. No forms collecting sensitive data were detected on the homepage, reducing immediate risk. However, the WHOIS data is unavailable due to a domain registration error from Nominet UK, which raises concerns about domain legitimacy despite the professional appearance and business credibility of the website. Overall, the website is professional and trustworthy in content and presentation but should address the WHOIS anomaly and improve security headers and analytics implementation to enhance trust and security posture. Strategic recommendations include verifying domain registration status, implementing security headers, updating analytics code, and continuin…

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Spencer Birch is a small, independent firm of chartered surveyors and estate agents based in Nottingham, UK, with a history dating back to 1984. The company offers residential and commercial surveying, estate agency services, and property lettings, positioning itself as a leading local player with a focus on practical advice and competitive fees. The website reflects this business focus with relevant content and clear contact information but lacks modern privacy and security features. Technically, the website is built on Joomla CMS using older technologies such as MooTools and jQuery, with a dated Artisteer template. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Integration with external property listing platforms like Rightmove is evident through embedded forms. From a security perspective, the site uses email obfuscation to reduce spam but lacks visible security headers and explicit HTTPS confirmation in the provided data. No privacy or cookie policies are present, and WHOIS data for the domain is unavailable due to an invalid domain query, which reduces trustworthiness. Overall, the security posture is moderate but could be improved significantly. The overall risk is moderate with no critical vulnerabilities detected in the content. Strategic improvements in security headers, privacy compliance, and WHOIS domain registration transparency are recommended to enhance trust and compliance.

A

Acis Group Limited

acisgroup.co.uk

59

Acis Group Limited is a UK-based housing charity focused on supporting people through housing, education, and skills development across several regions including Lincolnshire, Yorkshire and the Humber, North Derbyshire, and Nottinghamshire. The organization operates as a non-profit entity providing homes to rent and buy, community support services, training, and tenant engagement. Their market position is that of a regional charity with a strong community focus and a medium-sized operational scale. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and Adobe Typekit fonts. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. Performance is moderate with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks certain security headers and a formal incident response or vulnerability disclosure policy. The presence of multiple certifications and clear contact information enhances trustworthiness. The WHOIS data is unavailable due to a query on the subdomain rather than the root domain, but the website content and charity registration number support legitimacy. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in privacy compliance and security headers would further strengthen its posture.

The website www.windowplan.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed with an error indicating the domain name contains too many parts and cannot be registered, suggesting the domain may be invalid or improperly configured. No business information, contact details, or policies are available on the site, severely limiting any assessment of the company's operations or credibility. Technically, the site lacks visible security headers, scripts, or metadata, and no CMS or hosting details can be discerned. The absence of HTTPS or security best practices further compounds the risk profile. Overall, the site appears non-functional and untrustworthy in its current state.

The website www.buckdale-recovery.co.uk currently serves a security verification page implementing Google reCAPTCHA v3 to prevent automated access. The domain WHOIS lookup failed due to the domain being invalid under Nominet UK naming rules, indicating the domain is either misconfigured or non-existent. No business, contact, or policy information is available on the site, severely limiting the ability to assess the company's operations or legitimacy. The technical infrastructure uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation in the provided data. Overall, the site is inaccessible for meaningful content analysis due to the WAF/bot protection mechanism.

Universal Converting Equipment is a UK-based manufacturer and supplier specializing in converting machinery such as slitter rewinders, core cutters, salvage rewinders, and hot melt coating systems. The company positions itself as a leading global supplier with a focus on substantial construction, simple operation, and worldwide support. Their business model targets industrial manufacturers and converting industry professionals worldwide, leveraging a B2B approach. The website reflects a professional and consistent brand image with clear product offerings and UK-based contact information. Technically, the website is built on WordPress using a modern stack including Yoast SEO, Google Tag Manager, and GDPR-compliant cookie management. The site is mobile-optimized with good SEO and accessibility basics. Analytics and marketing tools such as Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag are integrated with user consent mechanisms. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for forms, but lacks explicit security policy or incident response disclosures. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, warranting further verification. Overall, the website presents a solid digital presence for an industrial equipment supplier with good privacy compliance and marketing practices. Strategic recommendations include enhancing security headers, publishing security policies, and resolving WHOIS data inconsistencies to improve trust and compliance.

A

Artsreach

artsreach.co.uk

52

Artsreach is a well-established non-profit organization dedicated to enriching rural communities in Dorset through arts and cultural experiences. Their offerings include live performances, workshops, exhibitions, and family-friendly events, supported principally by Arts Council England and Dorset Council. The website reflects a strong community focus with clear branding and comprehensive event information. Technically, the site is built on modern infrastructure including Craft CMS, uses CDN services for performance, and integrates analytics and marketing tools such as Google Analytics and Mailchimp. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response contacts are absent. Privacy and cookie policies are present and GDPR compliant, enhancing trust. However, the domain WHOIS data is missing due to domain naming rules violation, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and professionally maintained but would benefit from clarifying domain registration and enhancing security disclosures.

S

SMS

sms-plc.com

69

SMS is a UK-based energy infrastructure and solutions provider focused on delivering low-carbon energy technologies and services to homes, businesses, and utilities. The company positions itself as a leader in smart metering and energy management, supporting the transition to a greener, more sustainable energy system. Their offerings include infrastructure design, metering services, data analytics, energy services, and grid flexibility solutions. The website demonstrates a mature digital presence with modern technologies such as WordPress, Bootstrap, and Google Tag Manager, optimized for performance and SEO. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional content and certifications. Strategic recommendations include enhancing transparency around security policies and improving WHOIS data availability to bolster trust.

S

Stoford

stoford.com

62

Stoford is a UK-based property development company specializing in occupier led development and strategic land promotion within the commercial real estate sector. The website presents a professional image with clear business descriptions, targeting landowners, occupiers, and investors. The company positions itself as a leading player in the UK commercial property market, offering bespoke design and build solutions and managing a portfolio of developments. The site includes social media integration and uses modern web technologies such as Foundation CSS, jQuery, and Google Analytics, indicating a moderate level of digital maturity. From a security perspective, the website enforces HTTPS and employs Google reCAPTCHA v2 on its contact forms, which helps mitigate spam and automated abuse. However, the absence of key security headers and explicit security or incident response policies suggests room for improvement in security posture. The cookie consent mechanism and privacy policy indicate basic GDPR compliance, but no terms of service or vulnerability disclosure policies were found. The WHOIS data is notably absent, with no registrar, creation date, or registrant information available from the VeriSign database. This inconsistency reduces the domain's trustworthiness despite the professional website content. There are no signs of WAF or content blocking, and no suspicious or malicious content was detected. Overall, the site is safe and professional but would benefit from enhanced transparency and security documentation. Strategic recommendations include implementing security headers, publishing comprehensive security and incident response policies, improving contact information transparency, and addressing the WHOIS data gap to enhance trust and compliance.