Security Directory

H

Hillier Jewellers

hillierjewellers.co.uk

67

Hillier Jewellers is a UK-based online retailer specializing in fashion jewellery and giftware, offering quality products at competitive prices with promotional incentives such as discounts for first orders. The company targets a broad general audience interested in jewellery and watches, operating primarily through an e-commerce platform. The website demonstrates a solid digital presence with integrated customer reviews and active social media channels, supporting its market position as a reputable retailer in the UK jewellery sector. Technically, the website employs modern web technologies including JavaScript libraries, Google Analytics, and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and exhibits good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data, reflecting a good security posture. However, the absence of a public security policy and incident response information suggests room for improvement in transparency and preparedness. The WHOIS data retrieval failed due to domain naming issues, which limits full verification of domain legitimacy, but the active and professional website presence supports its credibility. Overall, Hillier Jewellers presents a trustworthy and well-maintained online retail platform with moderate technical maturity and a good security baseline.

Unique Estate Agency Ltd operates as a real estate agency in the United Kingdom, focusing on property sales, lettings, auctions, and valuations primarily across the Fylde Coast region. The company maintains multiple branch offices with dedicated contact details and offers services tailored to tenants, buyers, landlords, and vendors. The website presents a professional appearance with clear navigation and multiple service offerings, positioning itself as a market leader in its local area. However, the domain registration data is unavailable and flagged as invalid by the Nominet UK WHOIS system, which raises concerns about domain legitimacy or configuration issues. Despite this, the website content and business information appear consistent and credible.

Alexander Charles & Browne is a small, award-winning family-run estate agency based in Forest Hill, London, specializing in property sales and lettings with over 25 years of experience. The company positions itself as a trusted local leader in South East London, focusing on customer service and community involvement. Their website reflects a professional and consistent brand image with clear contact details and service offerings. Technically, the site is built on WordPress using modern plugins and themes, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled, but lacks some security headers and visible policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trust. Privacy and cookie policies are missing, indicating compliance gaps. Strategic improvements in security policies, compliance documentation, and domain registration transparency are recommended to enhance trust and security posture.

S

Stripe Gardens

sgardens.co.uk

52

Stripe Gardens is a small, locally focused landscaping and garden maintenance company based in Farnham, Surrey, UK. The company offers a range of services including landscape design, construction, and garden maintenance for private homes and commercial developers. Their website reflects a professional business with positive customer feedback and clear contact information, positioning them as a trusted local service provider. Technically, the website is built on WordPress with common plugins for SEO, forms, and reviews, showing a moderate level of digital maturity. The site enforces HTTPS and uses basic anti-spam measures in forms, but lacks some advanced security headers and formal privacy and cookie policies, indicating room for improvement in compliance and security posture. Overall, the website is functional, trustworthy, and well-branded, but could benefit from enhanced privacy compliance and security best practices.

R

Red Earth Studio Ltd.

redearthstudio.com

55

Red Earth Studio Ltd. is a London-based award-winning film and video production company specializing in branded content and documentaries since 2003. The company targets brands and businesses seeking impactful storytelling through film. Their market position is established and reputable within the media production sector, offering full-service production capabilities. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress 6.9.4 with a modern tech stack including jQuery, Google Analytics, and Mailchimp integrations. The site is mobile-optimized and performs moderately well, though accessibility features are basic. SEO is enhanced by Yoast SEO plugin usage. However, no hosting provider or CDN details were identified. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. The WHOIS data is missing, which raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and WHOIS transparency to improve trust and security posture.

R

River Learning Trust

riverlearningtrust.org

70

River Learning Trust is a well-established multi-academy trust managing 30 schools and educational services in Oxfordshire and Swindon. The organization focuses on excellence in education, teacher training, and community engagement. The website reflects a professional and comprehensive digital presence with detailed information about schools, leadership, and services. The trust maintains active social media profiles and provides clear contact details, enhancing transparency and accessibility. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, Google Maps API, and a specialized school website platform by Cleverbox. It is mobile optimized and includes accessibility features, though some improvements could be made. Performance is moderate with good SEO and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent implemented. However, explicit security headers and incident response information are absent, representing areas for improvement. The lack of WHOIS data limits domain registration analysis, but the website's professionalism and trust signals mitigate concerns. Overall, the site is a credible, secure, and user-friendly platform for the educational trust, supporting its mission and stakeholder engagement effectively.

G

GVE Commercial Solutions

gvecs.co.uk

54

GVE Commercial Solutions is a small professional services firm specializing in quantity surveying and commercial solutions primarily serving clients in London and the South East of England. Their key offerings include NEC contracts management, dispute resolution, programming, and training services. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard web technologies and moderate performance. Security posture is basic with HTTPS enabled but lacking advanced security headers and privacy compliance mechanisms. The absence of WHOIS data due to domain registration issues raises concerns about domain legitimacy despite the professional presentation of the website. Overall, the business appears credible but would benefit from improved transparency and security practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.raycool.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. This indicates the presence of a Web Application Firewall (WAF) or bot protection mechanism preventing normal content delivery. The domain WHOIS lookup failed with an error from Nominet UK stating the domain cannot be registered due to naming rules violations, suggesting the domain is invalid or misconfigured. No business, contact, or policy information is available on the site, and no SSL or security headers were detected in the provided data. Overall, the site lacks meaningful content and trust indicators, severely limiting any business or security assessment.

C

Chapman Worth Limited

chapmanworth.co.uk

63

Chapman Worth Limited is a well-established chartered accountancy firm based in East Hendred near Wantage, Oxfordshire, serving local businesses and individuals with accounting, tax, bookkeeping, payroll, and VAT services. The company has a strong local presence with a domain registered since 2003 and long-term client relationships, positioning itself as a trusted business advisor in the region. Their business model emphasizes personalized service, fixed fees, and transparency, targeting small to medium-sized enterprises in Oxfordshire. Technically, the website is built on a proprietary CMS platform with integration of modern analytics and marketing tools such as Google Analytics and Endorsal testimonials. The site is mobile-optimized and well-structured, providing a good user experience and clear navigation. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though it lacks some advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no dedicated privacy or terms of service pages. Overall, the website reflects a professional and credible business with room for improvement in compliance documentation and security transparency.

M

Making Projects Work

makingprojectswork.co.uk

62

Making Projects Work is a UK-based small consultancy specializing in project facilitation, capability development, coaching, mentoring, and speaking services. The company positions itself as a niche provider helping organizations transform challenging projects into creative and collaborative efforts. The website reflects a professional and consistent brand image with clear contact information and a focus on service offerings tailored to project teams and managers. Technically, the site is built on WordPress using the Divi theme, enhanced with Google Fonts and Google Analytics via the MonsterInsights plugin. The infrastructure is modern and mobile-optimized, providing a good user experience and SEO foundation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms. Overall, the domain registration is consistent with the business profile, showing a long-standing presence since 2006. Strategic improvements in privacy compliance and security policies would enhance trust and regulatory adherence.

T

T K COPE MOTO LTD

tkcope.co.uk

58

T K COPE MOTO LTD is a small, established motorcycle dealership based in Colchester, UK, specializing in new, used, pre-registered, and demo motorcycles and scooters. The website serves as a comprehensive platform for showcasing a wide range of motorcycle brands and models, providing detailed product information and finance options. The business targets motorcycle buyers and enthusiasts in the local region, positioning itself as a trusted dealer with a broad brand portfolio and additional services such as selling used bikes and providing rider guides. Technically, the website employs modern web technologies including Laravel Livewire, Bootstrap 5, Owl Carousel, and Select2, ensuring a responsive and user-friendly experience across devices. The site is well-structured with SEO-friendly metadata and uses HTTPS for secure communications. However, some accessibility features and security headers could be improved to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and includes CSRF tokens and cookie consent mechanisms, but lacks explicit security headers and published security policies such as privacy policy, terms of service, incident response, or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent and appropriate for the business age, supporting legitimacy. Overall, the website presents a professional and trustworthy front for the dealership but would benefit from enhanced privacy compliance documentation and improved security best practices to strengthen user trust and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

F

First Ram Ltd

firstram.co.uk

53

First Ram Ltd operates as a corporate credit insurance brokerage based in Leeds, UK, focusing on providing credit insurance solutions to businesses. The company targets businesses seeking to manage credit risk through insurance products. The website is built on the Webflow platform, utilizing modern web fonts and Font Awesome icons, indicating a moderate level of digital maturity. However, the technical implementation lacks advanced security configurations and privacy compliance features. The absence of WHOIS data due to domain query failure raises concerns about domain legitimacy and ownership transparency. Overall, the security posture is weak with no detected security headers or privacy policies, and contact information is not explicitly provided on the site. Strategic improvements in security, compliance, and transparency are recommended to enhance trust and professionalism.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

R

Retford Saddlery Ltd

retfordsaddlery.co.uk

48

Retford Saddlery Ltd operates as a specialized equestrian retail business based in Nottinghamshire, UK, offering a wide range of products including footwear, safety wear, horse care items, saddlery, and riding clothing. The company targets equestrian enthusiasts and horse owners, positioning itself as a premier local store with an e-commerce presence. The website is built on WordPress using the Avada theme and integrates several plugins such as UberMenu and Mailchimp for enhanced user experience and marketing capabilities. The technical infrastructure is modern and supports mobile optimization, though some accessibility features are basic. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, but the absence of security headers and explicit privacy policies suggests room for improvement. The WHOIS data for the exact domain queried is unavailable due to domain naming rules, indicating the domain is likely a subdomain or alias, which slightly impacts trust but does not detract from the overall legitimacy of the business. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and adding incident response information to improve compliance and trust.

L

Loyalty Logistix

loyaltylogistixltd.com

73

Loyalty Logistix is a specialized company focused on delivering data-driven customer loyalty solutions within the automotive sector. Their website presents a professional and well-structured digital presence built on WordPress with Elementor and Yoast SEO, indicating a mature technical infrastructure. The site emphasizes transforming customer data into lasting loyalty and advocates for deep customer understanding to foster lifelong relationships. Technically, the site uses modern web technologies and includes a cookie consent mechanism compliant with GDPR standards, reflecting awareness of privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. Overall, the website is credible and trustworthy, though it lacks explicit privacy and terms of service pages and direct contact information, which are recommended for enhanced transparency and compliance.

S

Swallows Nursery & Plant Centre Ltd

swallowsnursery.co.uk

49

Swallows Nursery & Plant Centre Ltd operates an independent retail plant nursery located in Mixbury, North Oxfordshire, UK. The company specializes in growing and selling high-quality plants, including shrubs, bedding plants, trees, and topiary, with an emphasis on peat-free products. Additionally, the business offers an onsite cafe serving coffee, Nordic cakes, brunch, and lunch on select days, enhancing the customer experience. The nursery also caters to trade buyers and provides delivery services. The website reflects a small, locally focused business with a strong community presence and a commitment to quality and sustainability. Technically, the website is built on WordPress using WooCommerce for e-commerce capabilities, WPBakery Page Builder for layout, and integrates several modern libraries such as Bootstrap 5 and jQuery. The site is mobile-optimized and includes SEO best practices like meta tags and structured data. However, some technical improvements are recommended, including the implementation of security headers and a cookie consent mechanism to enhance privacy compliance. From a security perspective, the site enforces HTTPS and uses secure forms with anti-spam measures. No critical vulnerabilities or exposed sensitive data were detected. The absence of security headers and incomplete analytics setup slightly reduce the security posture. The WHOIS data for the domain is unavailable or invalid, which raises concerns about domain registration legitimacy, though the presence of a UK company registration number and consistent business information on the site supports its legitimacy. Overall, the website presents a professional and trustworthy front for a small retail nursery business. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, clarifying WHOIS/domain registration status, and enhancing analytics implementation to support business growth and security assurance.

N

Neil O'Brien Tailoring

notl.co.uk

49

Neil O'Brien Tailoring is a small bespoke tailoring business specializing in high-quality, hand-tailored suits and shirts made in Italy using premium Italian and English fabrics. The website serves as a coming soon placeholder with a countdown timer, indicating ongoing development. The business targets customers seeking exclusive, made-to-measure menswear in London. Technically, the site uses older JavaScript libraries such as AngularJS and jQuery 1.11.3, with basic mobile optimization and SEO. Security posture is moderate but lacks modern security headers and uses outdated libraries, which could pose risks. No privacy or cookie policies are present, and no direct contact emails or phone numbers are provided, only a contact form. WHOIS data is unavailable and indicates the domain is invalid under Nominet UK rules, raising concerns about domain legitimacy or configuration. Overall, the site is professional in design but requires improvements in security, privacy compliance, and domain legitimacy verification.

R

Richardson Jones Chartered Accountants

rjca.co.uk

50

Richardson Jones Chartered Accountants is a well-established independent accounting firm based in Marlow, UK, with a history dating back to 1987. The company offers a comprehensive range of financial services including taxation, auditing, business consultancy, payroll, and HR services, catering to a diverse client base from multinational corporations to individual taxpayers. The firm holds ICAEW accreditation, reinforcing its professional credibility and commitment to quality service. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics integrated. The site demonstrates good mobile optimization, accessibility, and performance, hosted by GoDaddy. The presence of cookie consent mechanisms and GDPR-compliant privacy policies indicates a mature approach to privacy and regulatory compliance. From a security perspective, the site uses HTTPS and employs WordFence security plugin implied by cookies, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, the security posture is solid but could be improved with additional headers and transparency. The website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party components.

The website www.ptsconsulting.com is currently inaccessible, presenting a 403 Forbidden error page with no accessible content or business information. The domain WHOIS data is unavailable, indicating the domain may not be registered or is expired. No metadata, contact information, privacy policies, or security details are present. This severely limits the ability to assess the company's business operations, technical infrastructure, or security posture. The lack of HTTPS and security headers further reduces trustworthiness. Overall, the site appears inactive or blocked, representing a high risk for users and stakeholders.

T

TRS Roofing

trsroofing.com

43

TRS Roofing is a UK-based specialist roofing refurbishment contractor established in 2003, with over 20 years of industry experience. The company targets commercial and industrial clients across the UK, offering a wide range of roofing services including metal roofing, flat roofing, coating systems, construction, gutter systems, surveying, safety systems, and maintenance. The website positions TRS Roofing as a leading market player with significant completed works and projects. Technically, the website is built on WordPress using the Divi theme and incorporates SEO best practices via the Rank Math plugin. The site is moderately optimized for performance and mobile devices, with basic accessibility features. Security posture is moderate but lacks explicit security headers and privacy compliance documentation. No WHOIS registrant data is publicly available, which raises some concerns about domain registration transparency. Overall, the website is professional and trustworthy in appearance but would benefit from improved privacy and security disclosures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.alverstones.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed due to the domain contravening Nominet UK naming rules, indicating the domain is either invalid or improperly configured. No business information, contact details, or policies are available on the site, severely limiting the ability to assess the company's operations or market position. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS or SSL information is evident from the content. The overall digital maturity is very low, with poor content quality and no privacy or compliance indicators.

C

Coch-Y-Bonddu Books

anglebooks.com

66

Coch-Y-Bonddu Books operates an e-commerce website specializing in niche books related to fishing, field sports, and countryside natural history. The site targets enthusiasts and collectors in these specialized areas, offering a curated selection of products. The business model is retail-focused, leveraging a Magento 2 platform to provide online shopping capabilities including customer accounts and secure checkout. The website demonstrates a moderate level of digital maturity with a modern tech stack and responsive design, although some areas such as privacy compliance and security headers could be improved. Security posture is generally good with HTTPS and reCAPTCHA integration, but the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the site is professional and trustworthy in content but would benefit from enhanced transparency and security practices.

P

Pollinger & Warren Engineering Ltd

pollingerandwarren.com

37

Pollinger & Warren Engineering Ltd appears to be a small engineering service provider based on the website title and content. The website is accessible and uses standard web technologies such as Google Fonts, Font Awesome, and Google Analytics. However, the lack of WHOIS registration data raises concerns about the domain's legitimacy or recent registration status. The website lacks essential compliance documents such as privacy and cookie policies, and no contact information is clearly provided. Security posture is minimal with no detected security headers or advanced protections. Overall, the site presents basic business information but lacks trust and compliance indicators.

The website at https://www.abode-insurance.com/bruford-vallance/ is currently inaccessible due to a human verification challenge page served by AWS WAF. This security mechanism blocks direct access to the actual website content, preventing extraction of meaningful business, contact, or policy information. The WHOIS lookup for the domain www.abode-insurance.com returned no registration data, indicating the domain may be unregistered or the data is withheld, which raises concerns about the legitimacy and transparency of the domain ownership. Due to the lack of accessible content and WHOIS data, a comprehensive security and compliance analysis cannot be performed. The site appears to be protected by AWS WAF, but no further security headers or SSL configuration details are available from the provided data.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

M

Matt Vinyl Graphics

mattvg.com

52

Matt Vinyl Graphics is a small business specializing in vehicle graphics, livery, and signage services primarily targeting clients in Hull. The company offers bespoke design, manufacture, and installation services to enhance business visibility through vehicle wraps and signage. The website presents a professional and consistent brand image with good content quality and clear service offerings. Technically, the site leverages modern front-end libraries such as Font Awesome, Swiper.js, and Google reCAPTCHA, indicating a moderate level of digital maturity. However, there is no evidence of a CMS or hosting provider from the available data. Security posture is moderate; while HTTPS is implied, no explicit security headers or advanced configurations are detected. The absence of privacy and cookie policies, as well as lack of WHOIS registration data, reduces overall trust and compliance standing. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance credibility and reduce risk.

Beecal Electrical Ltd is a small UK-based electrical services company operating in Nottinghamshire. Their website is currently under construction, serving as a placeholder with basic contact information and company address. The business targets local customers requiring electrical contracting services. Technically, the website is built on WordPress using a coming soon plugin, with standard libraries such as jQuery and Tailwind CSS. The site is accessible over HTTPS but lacks advanced security headers and privacy policies, indicating a basic security posture. No analytics or marketing tools are present, and no forms collect user data. WHOIS data for the www subdomain is unavailable due to a domain naming rules error, which slightly reduces trustworthiness but does not negate the legitimacy of the business based on website content. Overall, the site is functional but minimal, with room for improvement in security and compliance.

A

Airco

airco.co.uk

58

Airco Refrigeration & Air Conditioning Limited is a well-established UK-based HVAC service provider specializing in design, supply, installation, commissioning, servicing, and maintenance of air conditioning, refrigeration, heating, ventilation, electrical, and carbon reduction solutions. The company operates nationally with multiple offices and safe storage units, serving a broad range of sectors. Their website reflects a mature digital presence with professional design, comprehensive service descriptions, and multiple trust signals including certifications and case studies. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is good with HTTPS and reCAPTCHA implemented, though some improvements in security headers and explicit policies could be made. Overall, the site is trustworthy, business-focused, and compliant with GDPR, though cookie consent mechanisms are absent.

M

Mannasol Products Ltd.

mannasolproducts.com

59

Mannasol Products Ltd. is a specialized company focused on formulating custom blends and packaging solutions for wet, dry, and semi-moist pet food products. With over 35 years of experience, they have established themselves as a niche player in the pet food manufacturing sector, targeting B2B customers such as pet food manufacturers. Their website is professionally designed using the Wix platform, providing clear business information including contact phone and physical address in the UK. Technically, the site uses modern polyfills and error monitoring tools like Sentry, hosted on Wix infrastructure, with moderate performance and good mobile optimization. However, the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, raises concerns about compliance and domain legitimacy. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal incident response information. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and domain registration transparency.

R

Raffle Tickets Direct

raffleticketsdirect.co.uk

49

Raffle Tickets Direct is a UK-based e-commerce business specializing in the sale of raffle tickets and related products. The website targets organizers of raffles, charities, and events requiring raffle tickets. The business operates a niche online retail model using WooCommerce on a WordPress platform with the Divi theme. The site provides basic e-commerce functionality with online ordering and delivery services. Technically, the website uses a modern CMS and e-commerce framework but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS likely enabled but missing security headers and no visible security policies or incident response information. Privacy compliance is limited, with no privacy or terms of service pages found, though a cookie consent mechanism is present. The WHOIS data for the domain is incomplete and indicates a registration error for the www subdomain, which raises some concerns about domain legitimacy. Overall, the website is functional and safe for general audiences but would benefit from improved security practices, privacy transparency, and domain registration clarity.

C

Critical Tortoise Ltd

critical-tortoise.com

55

Critical Tortoise Ltd is a small, established commercial photography business based in Newcastle upon Tyne, UK, with over 25 years of experience serving clients across the northeast of England and the wider UK. Their services include commercial, advertising, drone, video, product, and industrial photography, targeting business clients requiring professional visual media. The website is built on the PhotoBiz platform, utilizing modern web technologies and tracking tools such as Google Analytics and Tag Manager. The site is well-structured, mobile-optimized, and presents professional content with clear navigation and contact information. However, the absence of privacy and cookie policies indicates potential compliance gaps with data protection regulations. Security posture is moderate with HTTPS enabled but lacking security headers and vulnerability disclosure mechanisms. WHOIS data is unavailable, raising concerns about domain registration legitimacy, though the website content and business information appear credible and professional. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

CoolKit Limited

coolkit.co.uk

59

CoolKit Limited is a UK-based specialist manufacturer and conversion expert in temperature-controlled vehicles, operating since 2005. The company holds a leading market position in the UK for refrigerated vehicle solutions, targeting businesses requiring reliable and innovative transport for perishables. Their website reflects a professional and consistent brand image, supported by comprehensive content and active social media presence. Technically, the site is built on WordPress with WooCommerce and integrates modern marketing and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and CAPTCHA protections, though lacks publicly available security policies or incident response information. Overall, the site is trustworthy and business credible, with minor gaps in security transparency.

I

IOTA

iotagarden.com

63

IOTA is a UK-based company specializing in the design and manufacture of bespoke metal planters, architectural metalwork, and landscape products primarily serving the commercial, public realm, and luxury residential sectors. Established in 2003, the company has built a trusted reputation within the UK landscape industry, working with high-profile clients and delivering complex projects. Their services include design and build contract solutions, site works, installation, and post-contract support. The website reflects a professional and well-structured digital presence with modern technologies such as HTMX, Alpine.js, and Google Tag Manager integrated for analytics and user experience enhancements. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and published privacy or terms of service policies. The absence of WHOIS data limits domain legitimacy verification, though the website content and client references suggest a credible business. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

The website www.clsdualfuel.co.uk currently serves only a security verification page implementing Google reCAPTCHA v3 to prevent automated access. No actual business content, branding, or contact information is accessible, indicating the site is either under protection or not fully deployed. The domain WHOIS lookup failed with an error from Nominet UK stating the domain name is invalid due to naming rules, suggesting the domain is not properly registered or is misconfigured. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks security headers, HTTPS enforcement visibility, and any SEO or accessibility features. The security posture is minimal, relying solely on bot verification, with no visible privacy or cookie policies, and no contact or business information to establish credibility. Overall, the site is inaccessible beyond the security challenge, limiting any meaningful analysis of business or security maturity.

D

db Designs

db-designs.co.uk

48

db Designs is a well-established, family-run business specializing in the supply and installation of windows, doors, and double glazing products in Leatherhead, Surrey, and surrounding areas. With over 35 years of experience, the company positions itself as a leading independent specialist offering a wide range of products including uPVC, aluminium, hardwood windows, composite doors, and commercial installations. The website reflects a professional and trustworthy business with strong customer testimonials and a clear focus on quality and energy efficiency. Technically, the site is built on WordPress using the Divi theme and Slider Revolution plugin, with SEO optimizations via Yoast. Security posture is good with HTTPS and reCAPTCHA implemented, though some security headers and policies are missing. The WHOIS data is incomplete due to querying a subdomain, which slightly impacts trust but does not detract from the business credibility presented on the site.

The Marsh Agency is a UK-based literary agency established in 1997, offering international representation services to writers, literary agents, and publishing companies. The website reflects a professional and consistent brand presence targeting literary professionals and publishing industry stakeholders. The business model centers on representation and rights management, positioning the agency as an established player in the media sector with a small company size. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, hosted by Zen Internet Limited. It employs Google Analytics and Tag Manager for user tracking and marketing insights. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices appear adequate with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers such as CSP or HSTS. Forms include basic anti-spam measures but no visible cookie consent or privacy compliance mechanisms beyond a privacy policy page. No incident response or security policy information is published, indicating room for improvement in security transparency and GDPR compliance. Overall, the website is trustworthy and professionally maintained, with a solid business credibility score. However, enhancements in privacy compliance, security headers, and incident response disclosures would strengthen the security posture and regulatory adherence.

K

KDM Events Ltd

kdmevents.co.uk

59

KDM Events Ltd is a UK-based corporate events management company specializing in team building, conferences, and corporate event services. The company positions itself as an award-winning provider delivering services across the UK, targeting corporate clients seeking professional event planning and management. Their key offerings include team building activities, conference management, audio visual services, content and design, audience engagement, and awards ceremonies. The website reflects a medium-sized business with a professional and consistent brand presence. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Google Analytics, Google Tag Manager, Google reCAPTCHA, New Relic monitoring, and CookieYes for consent management. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate with room for improvement in accessibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to mitigate spam, and implements cookie consent mechanisms. However, it lacks visible security headers and does not publish a privacy policy or terms of service within the analyzed content. The WHOIS data is unavailable or invalid, raising concerns about domain registration legitimacy, although the website content itself appears professional and trustworthy. Overall, the website presents a solid business and technical foundation but should address privacy policy publication, improve security headers, and clarify domain registration details to enhance trust and compliance.

The domain www.rzim.eu currently resolves to a minimal placeholder or parking page with no meaningful content, metadata, or business information. The lack of WHOIS data and absence of registrant details suggest privacy protection or incomplete registration. The website does not provide any contact information, privacy policies, or terms of service, limiting its credibility and trustworthiness. Technically, the site loads JavaScript resources from a third-party domain but lacks HTTPS and security headers, indicating a low security posture. Overall, the domain appears inactive or not properly maintained, posing a high risk for users seeking legitimate business information.

Tomtom Coffee House is a specialist coffee shop located in Belgravia, London, known for its high-quality coffee made from Allpress roast beans. The business targets coffee enthusiasts and local customers in the West End area, operating a retail coffee shop model with a strong local reputation. The website is built on WordPress using common plugins and frameworks such as Bootstrap, jQuery, and Contact Form 7, indicating a moderate level of digital maturity. The site includes marketing and analytics tools like Google Analytics and Crazy Egg, and offers newsletter signup forms for customer engagement. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and explicit incident response or security policies. Privacy and cookie policies are present but basic, with some GDPR compliance indicators. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name is invalid under Nominet UK rules, which raises concerns about domain legitimacy or configuration. Overall, the website is professional and functional but would benefit from enhanced security practices and clearer compliance documentation.

NResearch Inc. appears to be a small manufacturing company specializing in miniature solenoid operated pinch valves and inert isolation valves primarily for analytical and biomedical instrumentation markets. The website content is minimal and uses outdated HTML frameset technology, indicating a lack of recent modernization. There is no evidence of privacy, cookie, or terms of service policies, nor any contact information or social media presence. The WHOIS data is missing or indicates the domain is unregistered or expired, which raises significant legitimacy concerns. Technically, the site lacks HTTPS and security headers, exposing it to potential security risks. Overall, the digital maturity is low, and the security posture is weak, with critical improvements needed to establish trust and compliance.

V

Vessel Gallery

vesselgallery.com

58

Vessel Gallery is a London-based contemporary art gallery specializing in high-end art glass, ceramics, sculpture, and decorative lighting. The gallery positions itself as a UK leader in museum-quality contemporary art glass and serves collectors, interior designers, and art enthusiasts. Their business model revolves around exhibitions, sales, and commissions, supported by a professional online presence and active social media engagement. The website is powered by the MasterArt platform, indicating a specialized infrastructure for art galleries. Technically, the website employs modern web technologies including jQuery, Bootstrap 4.3.1, and Slick Carousel for UI components, alongside Google Analytics and Mailchimp for marketing and analytics. The site is mobile-optimized with good SEO practices and a cookie consent mechanism, reflecting a moderate to good digital maturity level. However, some security headers and explicit security policies are not evident, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern and reduces trustworthiness, although the website content and business information appear legitimate and professional. Overall, the website scores well in content quality and privacy compliance but could improve in security posture and domain registration transparency. Strategic recommendations include enhancing security headers, verifying domain registration details, and adding incident response contacts to strengthen trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website is minimalistic, featuring a simple search form and a contact banner linking to an internal page. There is no visible business information, contact details, or policies such as privacy or cookie notices. The domain WHOIS data indicates that the domain name is invalid or improperly registered due to contravention of Nominet UK naming rules, which raises significant concerns about legitimacy. Technically, the site uses basic HTML, CSS, and vanilla JavaScript with responsive design but lacks modern security features such as HTTPS and security headers. Overall, the site presents a low level of digital maturity and trustworthiness.