Security Directory

T

The Silver Pear

silverpear.co.uk

69

The Silver Pear is a UK-based retail or e-commerce business operating on a WordPress platform with WooCommerce and Elementor. The website presents a basic but functional online presence targeting general consumers in the UK. The technical infrastructure is standard for small to medium e-commerce sites, leveraging popular CMS and plugins. However, the site lacks visible privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is minimal with no detected security headers or advanced protections, and no incident response or vulnerability disclosure information is provided. The domain is well-established, registered since 2000 with a reputable UK registrar, indicating legitimacy and stability. Overall, the site is safe for general audiences but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

Fenton Global Limited is a specialized executive search firm established in 2007, focusing on providing top-tier international recruitment services to the telecommunications sector. The company leverages over 20 years of industry experience to connect leading telecommunications companies with highly talented executives globally. Their market position is that of a niche, trusted player with a strong network in the telecommunications industry. The website reflects a professional business model centered on executive search and talent acquisition. Technically, the website is built on WordPress using Visual Composer and common web technologies such as jQuery and Google Fonts. Hosting is provided via LCN.com, with a moderate performance profile and good mobile optimization. SEO practices are adequately implemented with proper meta tags and structured data. However, accessibility features are basic, and there is room for improvement in technical modernization and security hardening. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended to enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a privacy policy and terms of service exist, there is no cookie consent mechanism, which may pose GDPR compliance risks. Incident response and security policy information are absent, limiting transparency in security governance. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security posture and regulatory adherence, reducing risk and increasing client confidence.

R

Reviso Cloud Accounting Limited

reviso.com

73

Reviso Cloud Accounting Limited operates a professional website offering cloud-based bookkeeping and accounting software tailored for small and medium-sized enterprises (SMEs), accounting practices, and self-employed professionals. The company provides a comprehensive suite of services including invoicing, bank reconciliation, asset management, and project accounting, positioning itself as a complete cloud accounting solution in the UK market. The website is well-structured, visually appealing, and optimized for user experience with clear navigation and mobile responsiveness. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics, jQuery, and various UI libraries to enhance functionality and tracking. The site enforces HTTPS with strong SSL configuration and implements security headers, reflecting a good security posture. Privacy compliance is evident through detailed privacy and cookie policies, along with a consent mechanism, aligning with GDPR requirements. However, the WHOIS data for the domain is missing or inaccessible, which raises questions about domain registration transparency. No explicit security policy or incident response information is published, and there is no vulnerability disclosure or security.txt file available. These gaps suggest areas for improvement in security communication and transparency. Overall, the website presents a trustworthy and professional front for its cloud accounting services, but the domain registration opacity and lack of published security policies warrant cautious monitoring and potential enhancements in security governance and disclosure.

The website www.pinkpigloans.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain is not properly registered or is invalid. No business information, contact details, privacy policies, or security-related content are present on the site. Technically, the site lacks any detectable scripts, analytics, or modern web technologies and is not optimized for mobile or accessibility. The absence of HTTPS and security headers further weakens its security posture. Overall, the site appears to be either inactive, misconfigured, or potentially fraudulent due to the domain registration issues and lack of content.

Kingston Cleaning Services (KCS) is a UK-based commercial and industrial cleaning company specializing in a wide range of interior and exterior cleaning services across Yorkshire and the UK. The company serves diverse sectors including commercial, industrial, and domestic clients, offering services such as building fabric cleaning, window cleaning, pressure washing, and high-level cleaning. KCS emphasizes health and safety, with trained teams and strong site compliance, positioning itself as a reliable and reputable cleaning partner with over 70 years of combined experience in the industry. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics integrated. The site is mobile-optimized with good navigation and content structure, though some security headers could be improved. The website uses HTTPS and reCAPTCHA for form security, reflecting a moderate to good security posture. Security-wise, the site demonstrates good practices including HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit incident response contacts and a vulnerability disclosure policy, which are recommended for enhanced security maturity. Privacy and cookie policies are present and appear GDPR compliant, supporting privacy compliance. Overall, the website is professional, trustworthy, and well-maintained, though the WHOIS data is unavailable due to domain registration lookup issues. This does not detract from the legitimacy of the business, but it is recommended to verify domain registration details through alternative means. Strategic improvements in security headers and incident response transparency would further strengthen the security posture.

V

Vortex Global

vortexglobal.com

66

Vortex Global is a specialized manufacturer of solids and bulk handling components, including slide gates, diverter valves, iris valves, and loading spouts designed for dry bulk solids applications. The company targets industrial clients requiring durable and reliable material handling solutions, positioning itself as a trusted provider with extensive industry experience. Their website reflects a mature digital presence with comprehensive product catalogs, resources, and customer engagement tools such as newsletters and case studies. Technically, the site is built on Webflow with modern analytics and marketing integrations, delivering fast performance and excellent mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and published security policies are lacking. The absence of WHOIS registration data reduces transparency but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and improving WHOIS transparency to bolster trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

U

United Milking Systems

unitedmilkingsystems.co.uk

55

United Milking Systems is a UK-based supplier specializing in agricultural and farming equipment, particularly milking systems and teat care products. The company operates an e-commerce platform built on WordPress with WooCommerce, targeting farmers and agricultural businesses. The website demonstrates a professional market presence with clear branding and social media engagement. Technically, the site uses modern web technologies including Elementor for design, Google reCAPTCHA for form security, and CookieYes for privacy compliance. Security posture is solid with HTTPS enforced and anti-bot measures in place, though some security headers are missing. Privacy compliance is supported by a cookie consent mechanism, but lacks a visible privacy policy or terms of service pages. The WHOIS lookup failed due to querying an invalid domain variant, but the main domain is active and legitimate. Overall, the site is well-maintained, secure, and trustworthy for its business domain.

JDR Group is a professional digital marketing agency based in Derby, England, offering a wide range of marketing services including inbound marketing, SEO, PPC, social media, HubSpot onboarding, web design, and training workshops. The company positions itself as an established local agency focused on helping businesses grow through effective digital strategies. The website is built on the HubSpot CMS platform, leveraging modern marketing technologies such as Google Tag Manager and Google reCAPTCHA Enterprise to enhance user experience and security. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the site lacks a dedicated security policy or incident response information. WHOIS data is unavailable due to query errors, but website content and branding strongly indicate legitimacy. Overall, the site demonstrates a mature digital presence with good technical implementation and business credibility.

A

Adept GRP Cabinets

adeptgrp.co.uk

45

Adept GRP Cabinets is a UK-based manufacturer specializing in GRP cabinets, enclosures, and steel kiosks. The company emphasizes UK-made, weather-resistant products with secure locking mechanisms and nationwide delivery, targeting industrial and commercial sectors requiring durable enclosures. The website reflects a professional digital presence built on WordPress with WooCommerce and Elementor, supporting e-commerce capabilities and product search. The technical infrastructure includes modern tracking and marketing tools such as Google Analytics and Google Ads, indicating a mature digital marketing approach. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. WHOIS data for the exact queried domain is unavailable due to Nominet UK naming rules, but the main domain appears legitimate and consistent with the business claims. Overall, the website is well-structured, trustworthy, and business-focused, with room for improvement in privacy and security disclosures.

G

GF Electrical

gfelectrical.co.uk

50

GF Electrical is a well-established electrical contracting company based in Dorset, UK, with a domain age dating back to 2004. The company offers a broad range of electrical services including commercial, industrial, residential electrical work, fire alarms, emergency lighting, and EV charging solutions. Their market position is strong within the South of England, supported by long-term client relationships and multiple industry accreditations such as ECA, BAFE, NICEIC, and SafeContractor. The website reflects a professional business model focused on service delivery to domestic, commercial, and industrial sectors. Technically, the website is built on WordPress using popular plugins and tools such as WPBakery Page Builder, Gravity Forms, and integrates analytics and marketing tools including Google Analytics, Google Tag Manager, Facebook Pixel, Smartlook, and Tawk.to live chat. The site is mobile optimized with good SEO practices and moderate performance. Hosting and domain registration are managed via Cloudflare, providing a reliable infrastructure. From a security perspective, the site uses HTTPS and some security best practices but lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial; a cookie policy with consent mechanism is present, but no privacy policy page was found, representing a compliance gap. Contact information is clearly provided, enhancing business credibility. Overall, GF Electrical's website presents a trustworthy and professional digital presence with room for improvement in privacy policy publication and security header implementation. The risk level is low, but addressing compliance gaps and enhancing security posture would strengthen trust and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

N

New Millennium Bank

nmbonline.com

54

New Millennium Bank is a community-focused financial institution established in 1999, serving regions in New Jersey, New York, and Georgia. The bank offers a comprehensive range of personal and business banking products including checking accounts, savings, loans, mortgages, and SBA loan programs. It emphasizes serving low to moderate income and underserved communities with a mission to foster community development. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on AWS infrastructure, and optimized for mobile and accessibility. Security posture is solid with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking explicit cookie consent mechanisms. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

V

VIAVI Solutions Inc.

viavisolutions.com

73

VIAVI Solutions Inc. is a leading provider of network test, monitoring, and assurance solutions primarily serving telecommunications service providers, enterprises, and network equipment manufacturers. The company offers a broad portfolio of products including fiber optic testing, wireless network analysis, and service assurance software, positioning itself as a critical technology partner in the network infrastructure sector. The website reflects a mature digital presence with multi-language support and comprehensive product categorization, targeting technical professionals and enterprise clients globally. Technically, the site is built on Drupal 11 with modern front-end technologies such as VideoJS and Bootstrap, ensuring good performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, though the absence of WHOIS data suggests domain privacy or recent registration, which is common for corporate domains. Strategic recommendations include publishing explicit security and incident response policies and enhancing vulnerability disclosure transparency.

C

Crown Castle

crowncastle.com

61

Crown Castle is a leading telecommunications infrastructure provider in the United States, specializing in shared communications infrastructure such as cell towers, small cells, and fiber networks. The company positions itself as the nation's largest provider in this sector, targeting wireless carriers, public sector entities, industrial enterprises, property owners, and investors. Their business model focuses on leasing and managing infrastructure assets to enable wireless connectivity nationwide. The website reflects a mature enterprise with comprehensive service offerings and a strong market presence. Technically, the website employs a modern technology stack including Vue.js, jQuery, and integrates multiple marketing and analytics platforms such as Google Analytics, Microsoft Clarity, Hotjar, and Marketo. The site is mobile-optimized, accessible, and SEO-friendly, with fast to moderate performance. The use of reputable third-party services and secure form handling indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident in the HTML source, suggesting room for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and consistency support its legitimacy. Overall, Crown Castle's website demonstrates a strong business and technical foundation with good security practices. Recommendations include enhancing security headers, publishing an incident response policy, and adding a vulnerability disclosure program to further strengthen trust and security posture.

N

Northern Natural Gas

northernnaturalgas.com

65

Northern Natural Gas operates as a major natural gas pipeline service provider, delivering not only natural gas but also comprehensive tools and resources to its customers. The company maintains a professional online presence with detailed informational postings, customer support, and regulatory compliance documentation. The website is built on Microsoft SharePoint, leveraging modern web technologies such as Bootstrap and jQuery, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and secure form handling, though improvements in security headers and explicit privacy policies are recommended. The absence of WHOIS data raises some concerns about domain legitimacy, but the website content and structure strongly suggest a legitimate and established business. Overall, the site serves its target audience effectively with clear navigation and relevant content.

S

Susman Godfrey L.L.P.

susmangodfrey.com

74

Susman Godfrey L.L.P. is a premier litigation law firm specializing in complex and high-stakes legal cases. The firm is highly ranked nationally, holding the Vault #1 litigation boutique position in the US for over a decade. Their services focus on trial law, class actions, privacy litigation, business disputes, arbitration, and pro bono work, targeting corporations, plaintiffs, and defendants involved in litigation. The website reflects a mature and professional legal services business with a strong market presence. Technically, the website is built on WordPress with modern technologies such as jQuery, Algolia Search for enhanced search functionality, and Google Analytics for visitor insights. The site is well optimized for SEO, mobile responsive, and fast loading, indicating a high level of digital maturity. Privacy compliance is robust with clear privacy and cookie policies and a consent mechanism. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs cookie consent blocking for analytics scripts. However, no explicit security headers were detected in the HTML source, and no incident response or security policy pages were found. The WHOIS data is unavailable, which slightly reduces transparency but is common for professional firms protecting registrant privacy. Overall, the security posture is good but could be improved with additional headers and published security policies. The overall risk assessment is low, with the main recommendation being to enhance security headers and incident response visibility. The website is trustworthy, professional, and compliant with privacy regulations, making it suitable for its target audience and business model.

C

Carbon Financial Partners Limited

carbonfinancial.co.uk

57

Carbon Financial Partners Limited is a well-established financial planning firm headquartered in Edinburgh, UK, with a strong market position supported by high client satisfaction and professional certifications such as Chartered Financial Planner and Fellow of the Personal Finance Society. The company operates as part of The Progeny Group, offering personalized financial planning, investment management, pensions advice, and a free second opinion service. Their target audience includes individuals seeking expert financial advice to achieve life ambitions. Technically, the website leverages modern technologies including Vue.js, Google Tag Manager, and is hosted on Amazon S3, providing good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

F

Fife Carpet Mill Ltd

fifecarpetmill.co.uk

58

Fife Carpet Mill Ltd is a small, independent retail business specializing in carpets, vinyls, and rugs, operating since 2001 in Cardenden, Fife, UK. The company offers a range of floor coverings and related services including carpet fitting and floor laying, targeting residential customers in the local area. The website reflects a well-established local business with a loyal customer base and a focus on personalized service. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Analytics, and reCAPTCHA v3, providing a responsive and user-friendly experience. The presence of cookie consent and privacy policy pages indicates attention to privacy compliance, although some security best practices like security headers and incident response information are missing. The website is secure with HTTPS and uses spam protection mechanisms. However, WHOIS data is unavailable due to a query error, limiting domain legitimacy verification. Overall, the site is professional, trustworthy, and safe for general audiences.

M

Malcolm Smith Pianos Ltd

mspianos.co.uk

44

Malcolm Smith Pianos Ltd is a well-established piano tuning and repair service provider based in Scotland, with a history dating back to 1978. The company offers a range of services including minor on-site repairs and full workshop rebuilds, serving a broad geographic area across Scotland. The website reflects a professional and consistent brand image, supported by testimonials and membership in a professional institute, which enhances its market credibility. Technically, the website is built on WordPress with common plugins for SEO and cookie compliance, delivering a good user experience with mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and explicit security policies. The WHOIS data could not be retrieved due to an invalid query on the subdomain, but the website content and business information suggest legitimacy. Overall, the site is trustworthy, compliant with privacy regulations, and serves its niche effectively.

J

James Keiller Property Holdings Ltd

commercial-properties-scotland.co.uk

58

James Keiller Property Holdings Ltd is a privately owned property development, investment, and management company based in Dundee, Scotland, established in 1981. The company focuses on residential and commercial property projects across Scotland, with a strong presence in Tayside and the central belt. Their services include land sourcing, planning, project management, construction, acquisition, and disposal, targeting landowners, financial institutions, and local authorities. The website presents a professional image with clear contact details and partner affiliations but lacks key compliance documents such as privacy and cookie policies. Technically, the site is built on WordPress with Elementor and uses Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS enabled and secure forms, but missing security headers and absence of incident response or security policies reduce maturity. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and business-appropriate but would benefit from improved transparency and security practices.

H

HRH Geology

hrhgeology.com

52

HRH Geology operates a specialized geological software platform called GravitasEDGE, targeting the energy sector with cloud-based operations geology tools. The platform integrates multiple applications for well data visualization, analysis, and reporting, supporting mobile access and global collaboration. Technically, the website is built on WordPress with Elementor and uses modern tracking and analytics tools. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy, despite the professional appearance and active content. Overall, the site demonstrates good technical maturity but requires improvements in compliance and transparency.

Wrigleys Solicitors LLP is a well-established specialist law firm operating primarily in the UK with offices in Leeds, Sheffield, and Newcastle. The firm focuses on advising private clients, charities, trustees, and businesses in sectors such as trusts, tax, pensions, property, agriculture, education, and employment law. Their market position is reinforced by multiple industry certifications and recognitions, including Legal 500 and Chambers rankings. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to their target audience. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security on forms. The site is mobile-optimized and demonstrates good SEO practices. While no explicit CMS or hosting provider was identified, the infrastructure appears stable and performant. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent and CAPTCHA mechanisms to protect user data and prevent abuse. However, security headers are not explicitly detected and no public security or incident response policies are found, indicating room for improvement in transparency and defense-in-depth. Overall, the website is trustworthy and professional with no signs of malicious activity or content safety concerns. The lack of WHOIS data due to domain query failure limits full domain legitimacy verification, but the business credentials and content strongly support authenticity. Strategic recommendations include enhancing security headers, publishing incident response information, and continuous monitoring of third-party scripts.

O

Oasis Design Studio Ltd.

oasisdesignstudio.co.uk

51

Oasis Design Studio Ltd. is a small, family-owned graphic and web design company based in Larne, Northern Ireland, serving primarily the Belfast and Northern Ireland region. Established since 1994, the company offers a wide range of creative services including graphic design, web design, branding, photography, videography, SEO, and social media marketing. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, positioning Oasis as a trusted local design agency with a history of quality service and industry recognition.

Eagle Overseas is a UK-based logistics service provider specializing in transport, warehousing, and customs clearance. The company has a well-established online presence with a domain registered since 2000, indicating long-term business operations. The website is built on WordPress using the Divi theme and incorporates standard plugins such as Gravity Forms and Google reCAPTCHA to facilitate user interaction and spam protection. Google Analytics is employed for visitor tracking, reflecting a moderate level of digital maturity. From a security perspective, the website benefits from HTTPS encryption and domain transfer protection, but lacks advanced DNS security measures such as DNSSEC. The absence of a published privacy policy, terms of service, and vulnerability disclosure documents indicates gaps in compliance and transparency. The cookie consent mechanism is present and functional, supporting GDPR compliance to some extent. No critical security vulnerabilities or malicious content were detected during the analysis. Overall, Eagle Overseas demonstrates a moderate security posture with room for improvement in privacy compliance and security best practices. The website quality and user experience are good, supporting the company's business objectives effectively. Strategic enhancements in security headers, policy documentation, and DNS security would strengthen trust and regulatory adherence.

A

Allen & Mellon

allenmellon.com

55

Allen & Mellon is a small ecological consultancy firm specializing in environmental and ecological services across the UK and Ireland. With over three decades of experience, they provide a comprehensive range of services including field surveys, impact assessments, management plans, biodiversity audits, training, and advice. Their client base includes government agencies, conservation organizations, and private sector entities, positioning them as a trusted provider in their niche market. The website is professionally designed on the Squarespace platform, offering clear navigation and relevant content tailored to their target audience. Technically, the website leverages Squarespace's hosting and content management capabilities, incorporating Typekit fonts and standard web technologies such as JavaScript and CSS. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO optimization. Security-wise, the site enforces HTTPS but lacks additional security headers and policies, which could enhance its security posture. No forms or analytics scripts were detected, indicating minimal data collection and tracking. The WHOIS data for the domain is missing or unavailable, which raises some concerns about domain registration legitimacy. However, the active and professional website presence suggests a legitimate business. The absence of privacy, cookie, and terms of service policies indicates potential compliance gaps, especially regarding GDPR. Overall, the site presents a trustworthy and professional image but would benefit from enhanced security and compliance measures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

V

Visions In Plastics

visionsinplastics.co.uk

34

Visions In Plastics is a small, family-run UK-based business specializing in the manufacture and distribution of various plastic mirror products including acrylic, polycarbonate, PETG, and HIPS mirrors, as well as security and novelty mirrors. The company serves a nationwide and European customer base, positioning itself as a versatile supplier with an expanding product range. The website provides detailed product information and contact details but lacks modern privacy and security features. Technically, the site is built using Serif WebPlus X8 with jQuery and Google Analytics integration, but it lacks HTTPS and essential security headers, which impacts its security posture negatively. The absence of privacy and cookie policies indicates compliance gaps with GDPR and other privacy regulations. Overall, the website is functional but basic in design and technical implementation, with moderate trustworthiness based on visible contact information and social media presence. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance business credibility and user trust.

P

PRESTON ENGINEERING SURVEY LTD

prestonengsurv.co.uk

54

PRESTON ENGINEERING SURVEY LTD is a small, professional surveying company based near Launceston on the Cornwall-Devon border, offering a wide range of surveying and geomatics services including land surveys, measured building surveys, laser scanning, and construction site setting out. The company targets architects, engineers, designers, and construction professionals primarily in the South West of England. Their website reflects a well-established business with over 20 years of experience, supported by clear service descriptions and social media presence. Technically, the website is built on the Create.net CMS platform, utilizing modern JavaScript libraries such as jQuery and Google Analytics for tracking. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, and HTTPS is properly implemented, ensuring secure connections. From a security perspective, the site lacks several important security headers and does not provide a privacy policy or cookie consent mechanism, which are critical for GDPR compliance. No incident response or security policy information is available. The WHOIS lookup failed due to an invalid query on the subdomain, resulting in missing domain registration data and reducing trustworthiness. However, the website content and contact information support the legitimacy of the business. Overall, the website presents a professional and trustworthy business but should improve privacy compliance and security headers to enhance user trust and regulatory adherence.

F

Fifth Frame Ltd

fifthframe.co.uk

52

Fifth Frame Ltd is a London-based video production company specializing in creating dynamic and engaging video content for businesses and elite sports organizations. Their services include promotional films, event video production, content marketing, charity films, business communications, motion graphics, sports production, and big screen content. The company targets professional clients seeking high-quality video storytelling to enhance brand presence and audience engagement. The website reflects a professional and consistent brand image with strong trust indicators such as client logos and testimonials. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Fonts, jQuery, and PJAX for seamless page transitions. The site is hosted on Webflow's CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility features could be improved. No major technical issues or broken elements were detected. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The WHOIS lookup for the domain 'www.fifthframe.co.uk' failed due to the domain being invalid under Nominet UK rules, indicating the queried domain is a subdomain or misconfigured. This discrepancy lowers domain trustworthiness but does not negate the legitimacy of the business, which likely operates under a valid domain. Overall, the website is professional, content-rich, and trustworthy with minor areas for security and privacy improvements. The domain WHOIS issue should be clarified by verifying the correct registered domain to improve trust and legitimacy perception.

C

Coupes and Convertibles Ltd

coupesandconvertibles.co.uk

56

Coupes and Convertibles Ltd operates a specialized vehicle sales business focused on campervans and leisure vehicles in the Berkshire region of the United Kingdom. The company offers a range of new, used, and pre-registered vans, including hand-built campervan conversions with sustainable off-grid electrical packages. Their market position is that of a niche local dealer with a strong emphasis on multifunctional campervans suitable for both leisure and mobile office use. The website reflects a small-sized business with a professional online presence, FCA regulation, and customer trust signals such as testimonials and clear contact information. Technically, the website is built on WordPress with modern web technologies including Yoast SEO, Google Tag Manager, Google Analytics, and Typekit fonts. The site is hosted with CDN support (Cloudfront) and uses HTTPS with good SSL configuration. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and no security.txt or incident response information is provided. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data query for the 'www' subdomain failed due to domain naming rules, but the main domain is active and consistent with the business claims. Overall, the website presents a trustworthy and professional business with a solid technical foundation and good privacy compliance. The main risk areas include incomplete WHOIS data, lack of explicit security headers, and absence of formal security policies or vulnerability disclosure channels. Strategic improvements in these areas would enhance the security posture and trustworthiness further.

The website www.rosswrightltd.com currently presents a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism that blocks direct access to content. Due to this, no meaningful business information, contact details, or policies are accessible, limiting the ability to assess the company's market position or services. The domain WHOIS data is unavailable, suggesting the domain may be unregistered, expired, or privacy-protected, which raises concerns about legitimacy and transparency. Technically, the site uses Bootstrap for styling and Google reCAPTCHA for security but lacks visible security headers or HTTPS confirmation. Overall, the site’s digital maturity is low, with minimal content and poor user experience.

B

Bold & Reeves Ltd.

boldandreeves.co.uk

65

Bold & Reeves Ltd. is a specialized luxury property management company based in London, offering comprehensive management services for prime and super-prime properties. The company differentiates itself by integrating proprietary property management software designed specifically for property managers, enhancing client experience and operational efficiency. Their target audience primarily consists of high net worth individuals, including overseas owners of luxury homes, who seek professional, hassle-free property management solutions. The company maintains a strong market position within the niche luxury real estate sector by combining traditional property management with innovative technology platforms.

S

Skultes Kokmateriāli

skulteskokmateriali.lv

42

Skultes Kokmateriāli is a small Latvian business specializing in the retail and delivery of quality wood materials sourced from local forests. Their product range includes sawn timber, terrace boards, facade and interior finishing materials, screw piles, fences, and firewood, with delivery services across Latvia. The company targets general consumers and builders in the Limbažu novads region, positioning itself as a reliable local supplier with a professional online presence. The website is well-designed, mobile-optimized, and provides clear product information and pricing, enhancing user experience and trust. Technically, the website is built using modern technologies such as Next.js and React, hosted on Vercel, ensuring fast performance and good SEO practices. The site includes Vercel Analytics for minimal user tracking. However, there is a lack of visible security headers and no disclosed privacy or cookie policies, which are areas for improvement in compliance and security posture. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or vulnerable libraries. The absence of security headers and formal privacy documentation reduces the overall security maturity. No WAF or blocking mechanisms were detected, and the WHOIS data, while privacy-protected, aligns with the business's Latvian location and nature. Overall, the website presents a trustworthy and professional image suitable for its business scope but should enhance privacy compliance and security headers to improve its security posture and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.cjpaintspraying.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The domain WHOIS data is not available, indicating the domain may be unregistered, inactive, or protected by privacy services. No metadata, structured data, or contact information is present, preventing a full assessment of the business or its services. The technical infrastructure appears minimal with only external Google Fonts resources loaded. Security posture cannot be evaluated due to lack of accessible content and headers. Overall, the site is effectively blocked, limiting any meaningful analysis or trust assessment.

E

ExpiredDomains.com

bristolgynaecology.com

69

ExpiredDomains.com operates as a specialized platform aggregating expired and expiring domain names, providing users with detailed domain metrics and facilitating purchases through trusted registrars such as GoDaddy. The platform targets domain investors, SEO professionals, and businesses seeking premium domain assets. It holds a strong market position as a trusted resource with comprehensive listings and user testimonials. Technically, the website employs modern web standards with a clean, responsive design and uses Cloudflare DNS and HTTPS for security. However, it lacks some advanced security headers and explicit security policies. The security posture is solid but could be improved with additional best practices. Privacy compliance is basic with visible privacy and cookie policies but no explicit GDPR compliance statements. Overall, the site is professional, trustworthy, and safe for general audiences, with a good balance of content quality and technical implementation.

CloudNine Creative Interiors is a UK-based bespoke interior design and furniture manufacturing company specializing in high-quality office and residential furniture. The company emphasizes craftsmanship with over 70 years of combined experience and holds accreditations for specialized materials such as Corian and Krion. Their market position is that of a niche provider catering to both corporate and private clients, offering full design consultancy and installation services. The website reflects a professional and consistent brand image with clear contact details and customer testimonials, enhancing trustworthiness. Technically, the website is built on the itseeze CMS platform and employs modern web technologies including Google Analytics and Tag Manager for minimal user tracking. The site is mobile-optimized with responsive design scripts and good SEO practices. Performance is moderate, and accessibility is basic but functional. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and advanced policies are lacking. The security evaluation reveals no critical vulnerabilities or exposed sensitive data. However, the absence of security headers and a formal incident response or vulnerability disclosure policy are areas for improvement. Privacy compliance is adequate with clear privacy and cookie policies and GDPR consent mechanisms in place. WHOIS data could not be extracted due to a query error on the 'www' subdomain, but the domain appears legitimate and consistent with the business branding. Overall, the website presents a low-risk profile with good business credibility and a solid technical foundation. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen the security posture and compliance framework.

Harpers Salon is a small, established hair salon located in Belper, Derbyshire, UK, operating since 2012. The business offers a variety of haircare services including wedding hair, hair extensions, and general treatments, targeting local customers seeking professional and personalized hair styling. The website is built on WordPress using the Crush theme and integrates common plugins such as Contact Form 7 and Instagram Feed. The site is well-designed with good mobile optimization and clear navigation, reflecting a professional local business presence. However, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but security headers and incident response information are missing. Overall, the website is trustworthy and safe for general audiences but would benefit from enhanced privacy compliance and security best practices.

The website www.mansfieldsuperbowl.com is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked. The domain does not appear to be registered or is not found in the WHOIS database, which raises significant concerns about the legitimacy and operational status of the website. No business-related content, contact information, or policies are available for review. Technically, the site uses basic HTML and CSS with Google Fonts but lacks any advanced frameworks, analytics, or security headers. The absence of HTTPS and security best practices further diminishes the security posture. Overall, the site is not functional for end users or analysis and presents a high risk due to lack of transparency and accessibility.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

NRCPD is a UK-based non-profit organization serving as the leading voluntary regulator for language service professionals, particularly those serving the deaf and deafblind communities. Their core mission is to maintain high standards and public trust by registering professionals, setting codes of conduct, and investigating complaints. The organization supports a wide range of communication professionals including British Sign Language interpreters and others. The website reflects a professional and accessible platform with clear navigation and relevant content for its target audience. Technically, the site employs modern web technologies such as Bootstrap, jQuery, Google Analytics, and CookieYes for consent management, indicating a moderate level of digital maturity. Security measures include Google reCAPTCHA and cookie consent mechanisms, but lack explicit security headers and published security policies. The WHOIS data is unavailable due to a domain naming rules error, which introduces some uncertainty about domain registration legitimacy. Overall, the site is trustworthy and well-positioned in its niche but could improve transparency and security posture.