Security Directory

保

保柏(亞洲)有限公司

bupa.com.hk

57

保柏(亞洲)有限公司 operates a comprehensive medical insurance website targeting individuals and corporate clients in Hong Kong. The company offers a wide range of insurance products including voluntary health insurance schemes, critical illness coverage, family plans, and health support services. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It leverages modern web technologies and analytics tools to enhance user experience and marketing effectiveness. The company maintains a strong market position as a trusted healthcare insurance provider with over 400,000 members and thousands of corporate clients.

A

Arbor Vitae Arboriculture Ltd

avtree.co.uk

56

Arbor Vitae Arboriculture Ltd is a small, specialized tree consultancy and arboriculture service provider based in Scotland, primarily serving Edinburgh and surrounding areas. Founded in 2011 and led by an experienced consulting arborist, the company offers a comprehensive range of services including tree inspections, BS5837 surveys, tree protection, and woodland management. The website reflects a professional and well-established business with strong local trust indicators such as industry memberships and accreditations. Technically, the website is built on WordPress with modern plugins for SEO and GDPR compliance, including Google Tag Manager for analytics and Complianz for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. The performance is moderate, with a clean and navigable design. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively but lacks explicit security policy documentation and some advanced security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable due to a Nominet registration error, which is unusual but does not appear to impact the legitimacy or operation of the website. Overall, the website presents a trustworthy and professional front for Arbor Vitae Arboriculture Ltd, with minor recommendations to improve security posture and accessibility. The domain WHOIS anomaly should be investigated further to ensure full compliance and transparency.

W

WSS Group Ltd

walkersecurity.co.uk

58

WSS Group Ltd is a well-established, family-run business based in Glasgow, United Kingdom, specializing in security, electrical, and joinery services. With over 30 years of experience and certifications such as NSI approval and NICEIC qualification, the company serves both residential and commercial clients in Greater Glasgow and surrounding areas. Their service offerings include burglar alarms, fire alarms, CCTV, electrical repairs and installations, bespoke joinery, and door entry systems. The website reflects a professional and trustworthy business with clear contact information and a consistent brand presence.

I

Image Scotland Limited trading as Scottish Mountain Gear

scottishmountaingear.com

67

Scottish Mountain Gear, operated by Image Scotland Limited, is a specialist service provider focused on repair and cleaning of outdoor equipment such as clothing, rucksacks, tents, and down-filled products. The company partners with well-known outdoor brands and offers online booking for its services, positioning itself as a niche player in the UK outdoor retail service sector. The website is professionally designed with good navigation and mobile optimization, leveraging technologies like jQuery, Bootstrap, and Revolution Slider. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit incident response policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid business presence but would benefit from enhanced security practices and domain registration transparency.

A

Attacat

attacat.co.uk

54

Attacat helps businesses achieve change across marketing, sales and service operations using HubSpot. Also a Google Partner.

M

MW Groundworks Ltd

mwgroundworks.co.uk

60

MW Groundworks Ltd is a well-established landscaping and civil engineering company based in Scotland, with over 30 years of experience serving clients across Scotland and Northern England. The company offers a range of services including landscaping, civil works, site clearance, tree surgery, and fencing, targeting construction industry clients and main contractors. Their market position is that of a reputable regional service provider with a skilled workforce and notable project history. The website is built on WordPress using the Avada theme, integrating modern technologies such as Google Tag Manager and Google reCAPTCHA for form security. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA, but lacks comprehensive security headers and explicit privacy/cookie policies, which may affect GDPR compliance. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the business. Strategic improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

R.J. Blasting (Scotland) Ltd is a specialized drilling and blasting service provider operating primarily in the UK extractives industry, including quarrying, forestry, and opencast coal sectors. The company emphasizes its experienced team of explosive supervisors, shotfirers, drillers, and operators, highlighting a portfolio that includes projects like the Drakelands Tungsten Mine. Their business model focuses on providing comprehensive drilling and blasting solutions, explosives supply, surveying, profiling, and environmental monitoring services to industrial clients. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as JavaScript modules, Typekit fonts, and Google Analytics for tracking. The site is mobile-optimized with a professional design and clear navigation, though some SEO and accessibility features could be enhanced. The hosting and SSL configuration are robust, ensuring secure HTTPS connections. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks advanced security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which introduces some uncertainty about domain registration legitimacy, though the website content and contact information appear legitimate. Overall, the website presents a professional and trustworthy business front with room for improvement in security policies and compliance documentation. The domain registration anomaly warrants further investigation to ensure full legitimacy and trustworthiness.

A

Ayrshire Steels

ayrshiresteels.co.uk

51

Ayrshire Steels is a well-established independent steel stockholder based in Ayrshire, Scotland, with nearly 40 years of experience serving industrial and construction sectors across the UK and Europe. The company offers a broad range of steel products and processing services including sawing, plate profiling, shearing, section rolling, plasma cutting, and steel fabrication. Their market position is solid as one of the remaining independent steel stockholders in Scotland, supported by a comprehensive service offering and reliable delivery. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO and Google Tag Manager for analytics. The site is moderately performant, mobile-optimized, and includes standard SEO and accessibility features. Hosting is provided by a reputable UK provider, ANS Group Ltd (UKFAST), with HTTPS enabled and basic security practices in place. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Security headers could be improved to enhance protection. No critical vulnerabilities or suspicious indicators were detected. Overall, Ayrshire Steels presents a trustworthy and professional online presence with good compliance and security posture for its business size and sector. Strategic improvements in security policy transparency and technical security headers would further strengthen their security maturity and trustworthiness.

Alcohol Focus Scotland is a well-established national charity dedicated to preventing and reducing alcohol-related harm in Scotland. The organization operates through advocacy, research, public campaigns, and training to influence policy and public behavior. Their market position as a leading non-profit in alcohol harm reduction is supported by clear branding, comprehensive content, and active engagement with stakeholders including policymakers and the public. The website reflects a mature digital presence with good content quality and user experience. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for security and analytics purposes. The use of a custom CMS and Typekit fonts indicates a tailored digital infrastructure. Performance and mobile optimization are good, though some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but could benefit from additional security headers and published security policies. From a security and compliance perspective, the site demonstrates good privacy practices with clear privacy and cookie policies and consent mechanisms. However, there is no explicit incident response or vulnerability disclosure information publicly available. The WHOIS data is unavailable due to a query error but does not detract from the overall legitimacy of the site, which is supported by charity registration and consistent business information. Overall, the website is professional, trustworthy, and secure, serving its mission effectively. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility to further strengthen the site’s security and compliance posture.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

R

R&P Accident Repair Centre Ltd

rp-accidentrepair.co.uk

50

R&P Accident Repair Centre Ltd is a small UK-based business specializing in car body and accident repairs, serving Lingfield and surrounding areas. Established in 2008, it offers a broad range of vehicle repair services including dent repairs, SMART repairs, and insurance-related accident management. The company emphasizes quality workmanship, customer service, and convenience through services like courtesy vehicles and mobile estimates. The website is professionally designed with modern technologies such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking. However, the absence of privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS assumed but lacking visible security headers or advanced protections. The WHOIS data is unavailable due to domain naming rules violations, which raises some concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and well-positioned locally but would benefit from improved compliance and security transparency.

B

Blade Motor Cycles Limited

blademotorcycles.co.uk

75

Blade Motorcycles is a well-established UK motorcycle dealership founded in 1995, specializing in new and used motorcycles from leading brands such as Ducati, Harley-Davidson, Honda, and Triumph. The company operates multiple physical locations across the Southwest UK and offers a comprehensive range of services including motorcycle servicing, MOTs, repairs, finance brokering, and an online shop for motorcycle gear and accessories. The website reflects a professional and consistent brand presence with clear navigation and rich content tailored to motorcycle enthusiasts and buyers in the UK market. Technically, the site employs modern web technologies, including Bootstrap, Google Analytics, Facebook Pixel, and AdRoll for marketing and analytics, and uses DealerWebs CMS as its platform.

Central Pharmacy operates as a locally owned community pharmacy focused on personalized pharmaceutical care and wellness solutions. The website emphasizes services such as free medication delivery, online refills, prescription transfers, immunizations, and specialty medications. The business targets general consumers seeking convenient and compassionate healthcare support, positioning itself as a trusted local partner. The presence of a mobile app further enhances customer engagement and service accessibility. Technically, the website is built using modern web technologies including React and Next.js, hosted on Azure CDN infrastructure. It employs Google Tag Manager for analytics and marketing tracking. The site is mobile optimized with good SEO practices and a professional design, though accessibility features could be improved. Performance is moderate with deferred script loading and responsive images. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit privacy consent mechanisms. No incident response or vulnerability disclosure information is published, which limits transparency. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data source issues, which impacts domain legitimacy trust. Overall, the website presents a professional and trustworthy front for a small healthcare business but should improve transparency in domain registration, security policies, and privacy compliance to enhance trust and security posture.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

F

First Grade International Limited

fg-int.co.uk

49

First Grade International Limited is a UK-based medium-sized company specializing in the global supply of coconut-based ingredients, dried fruits, nuts, cocoa, chocolate, and plant-based alternatives to the food and beverage manufacturing industry. The company holds several industry certifications and serves a broad market across the UK and Europe. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The site is well-structured, mobile-optimized, and includes tracking via Google Analytics and Tag Manager. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies suggests room for improvement. The WHOIS data is unavailable due to domain registration query errors, which impacts domain trust verification. Overall, the website presents a professional and credible business presence with moderate technical and security maturity.

Comtec Translations is a UK-based translation and localisation service provider with over 40 years of experience. The company uniquely blends AI-powered machine translation with expert human linguists to deliver high-quality multilingual content tailored to client brand voice and terminology. Recognized with awards and certifications such as B Corp and ISO 27001, Comtec positions itself as a trusted partner for organizations seeking efficient and culturally accurate translation solutions. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a professional and user-friendly experience. Security posture is strong with HTTPS, cookie consent, and ISO 27001 compliance, though some security headers could be improved. Overall, the site reflects a mature, credible business with a solid digital presence.

Apollo Gardening Ltd. operates a professional retail website focused on supplying a comprehensive range of gardening essentials including landscaping fabrics, wire mesh, plant supports, and garden decor. The company targets everyday gardeners and garden maintenance professionals primarily in the United Kingdom. The website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. However, the absence of a publicly available WHOIS record raises questions about domain registration transparency. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy policies. Overall, the business presents as a small, legitimate gardening supplier with room for improvement in compliance and security transparency.

The website at https://happydaysnurseries.com/our-nurseries/the-hollies/ is currently inaccessible, returning a 403 Forbidden error page served by nginx behind Cloudflare DNS. This prevents any meaningful content, metadata, or business information extraction. The domain happydaysnurseries.com is a long-established domain registered since 2004 with a reputable registrar and no privacy protection, indicating legitimacy. However, the lack of accessible content severely limits the ability to assess the business, technical infrastructure, or security posture. No privacy, cookie, or terms of service policies are detectable, nor any contact information or security disclosures. The site appears to be protected or restricted, possibly by access control or firewall rules, but no explicit WAF challenge page is present. Overall, the site’s security posture cannot be fully evaluated due to blocked content, and the AI score is low due to lack of accessible data.

Hallamshire Brewery Services Ltd is a UK-based company specializing in the repair, sales, and recycling of drinks dispense and cooling equipment primarily serving the brewery and licensed trade industry. Established in 1981 and management-owned since 2001, the company operates from Sheffield with a medium-sized facility and workforce. The website reflects a professional business presence with clear service offerings and customer engagement features. Technically, the site is built on WordPress with WooCommerce, employing modern web technologies and security measures such as HTTPS and Google reCAPTCHA. However, some security headers are missing and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. The WHOIS data for the domain 'www.hallamshire.co.uk' is unavailable due to domain registration errors, which slightly reduces domain trustworthiness despite the professional website content. Overall, the site is secure, functional, and business credible with minor technical and compliance gaps.

B

Broadcom Inc.

brocade.com

81

Broadcom Inc. is a leading global technology company specializing in semiconductors and infrastructure software solutions for complex enterprise needs. The company targets global enterprises and technology professionals, offering critical products and services that support mission-critical operations. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its B2B audience. Technically, the site employs modern web technologies including React and Google Tag Manager, with strong mobile optimization and accessibility features. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and incident response information are not publicly detailed. Overall, the domain and website present a trustworthy and professional front consistent with a large enterprise technology company.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Grapes Direct is a UK-based specialist grape importer connecting top grape growers worldwide with UK supermarkets. The company operates a year-round supply chain, importing grapes from multiple countries and providing technical support to optimize product quality. Their business model focuses on partnership with growers and simplifying the complex grape supply chain. The website is built on legacy ASP.NET Web Forms technology and uses Google Analytics for visitor tracking. While the site is accessible and professionally presented with clear contact information, it lacks modern security headers and privacy compliance documentation. The WHOIS data indicates the domain registration failed due to naming rules, raising concerns about domain legitimacy. Overall, the website presents a credible business front but requires improvements in security posture and compliance to enhance trust and reduce risk.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

DHF Engineering Ltd. is a small UK-based company specializing in engineering and fabrication solutions, including structural steelwork, architectural staircases, specialist fabrication, and project management services. The company targets businesses and contractors requiring bespoke engineering services, leveraging over 30 years of industry experience. Their market position is that of a reputable local/regional service provider with a professional online presence hosted on Squarespace. Technically, the website is built on the Squarespace platform, utilizing modern web technologies such as Google Analytics and Typekit fonts. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. The infrastructure is standard for small business websites, with no advanced frameworks detected. From a security perspective, the website enforces HTTPS but lacks important security headers and cookie consent mechanisms, indicating partial compliance with privacy regulations such as GDPR. No forms are present on the homepage, reducing immediate data collection risks. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy, though the website content and business information appear authentic and professional. Overall, the website presents a moderate risk profile with recommendations to improve security headers, privacy compliance, and domain registration clarity to enhance trustworthiness and regulatory adherence.

K

Knight Group

knight-group.co.uk

62

Knight Group is a large UK-based supplier and processor specializing in premium quality precision strip and wire products, serving multiple industrial sectors including aerospace, defence, automotive, and energy. The company positions itself as one of Europe's largest multi-metal suppliers with aerospace-approved performance alloys, offering a broad range of materials and processing services. The website reflects a mature digital presence with comprehensive navigation, detailed product and sector information, and clear business focus.

W

Home | Wastesolve | Recycling & Waste Management Solutions

wastesolve.co.uk

59

The website wastesolve.co.uk appears to be a Wix-hosted site related to waste management services, but the content is minimal and primarily technical Wix framework code without visible business descriptions or contact information. The domain WHOIS lookup failed due to a naming rules violation, indicating the domain may not be properly registered or is invalid, which severely impacts trust and legitimacy. Technically, the site uses Wix platform technologies and includes Sentry for error monitoring but lacks advanced security headers and privacy compliance features. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available, limiting the site's credibility and compliance posture. Overall, the site is accessible without WAF or security challenges but lacks substantive business and security information, resulting in a low trust and security score.

N

NFP

kgjgroup.co.uk

68

NFP UK Limited, a subsidiary of AON, operates as a leading global insurance and employee benefits consultancy. The company offers a broad range of services including commercial insurance, employee benefits consulting, financial planning, and human capital solutions. Their market position is strong, supported by the backing of the global AON brand, and they target businesses and individuals seeking comprehensive insurance and financial services. The website reflects a professional and well-structured digital presence, indicating a mature technical infrastructure with modern technologies such as jQuery, Bootstrap, and Google Tag Manager integrated for analytics and marketing. From a security perspective, the website enforces HTTPS and employs multiple security best practices, although explicit security headers could be more visible. The presence of multiple third-party analytics and marketing tools suggests extensive user tracking, balanced by clear privacy and cookie policies with consent mechanisms, indicating good privacy compliance. However, the WHOIS data is unavailable due to domain naming rules errors, which raises concerns about domain registration legitimacy despite the strong business branding and presence. Overall, the website is professionally designed, mobile-optimized, and accessible, with a high level of content quality and user experience. The main risk lies in the lack of WHOIS transparency, which should be addressed to improve trustworthiness. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and improving incident response contact visibility to strengthen the security posture further.

The Timber Decking and Cladding Association (TDCA) operates as an independent, not-for-profit advisory body focused on timber decking and cladding in the UK. The organization provides technical guidance, supplier accreditation, membership services, and quality assurance schemes such as DeckMark and CladMark. Their target audience includes commercial organizations and DIY enthusiasts seeking expert advice and trusted suppliers. The website reflects a professional and consistent brand presence with clear navigation and relevant content.

E

Eastside

eastside.org.uk

54

Eastside is a UK-based non-profit creative arts charity dedicated to empowering young people through arts education and creative programmes. The organization offers a variety of funded workshops, residencies, and interactive livestreams targeting children and youth across the UK. Their market position is that of an established charity with a focus on nurturing creativity and confidence in young people. The website is professionally designed using WordPress and Elementor, integrating modern donation tools such as GiveWP and Stripe for fundraising. Social media presence across major platforms supports community engagement. From a technical perspective, the site uses a modern tech stack with good SEO and mobile optimization, though some accessibility features could be improved. Security posture is solid with HTTPS and secure payment integration, but lacks explicit security headers and published policies. WHOIS data for the queried subdomain is unavailable due to domain naming rules, but the main domain appears legitimate based on website content and SSL. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and contact transparency are recommended.

1

1st Surface Ltd

1st-surface.co.uk

66

1st Surface Ltd is a UK-based specialist company focused on tennis court construction and related services such as resurfacing, re-colouring, maintenance, fencing, and floodlighting. Established in 1988 and located in Surrey, the company serves both private individuals and large clubs, positioning itself as a niche expert in the sports surfaces sector. The website reflects a small business with a professional but basic digital presence. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and Google Tag Manager for analytics and advertising. However, the presence of deprecated Flash content and lack of modern security headers indicate areas for technical improvement. Security posture is moderate with cookie consent implemented but missing advanced security headers and explicit incident response policies. The WHOIS data is unavailable due to querying an invalid subdomain, which limits domain trust verification, though company registration and VAT details support legitimacy. Overall, the site is functional and trustworthy but would benefit from modernization and enhanced security practices.

P

Protherm Engineering Limited

prothermengineering.co.uk

41

Protherm Engineering Limited is a UK-based small manufacturing company specializing in hot dip galvanizing equipment and related engineering services. With over 30 years of experience, the company serves a global industrial audience, providing tailored galvanizing furnaces, drying ovens, splash enclosures, and consultancy services. The website reflects a professional and consistent brand with clear product offerings and contact information. Technically, the site uses common JavaScript libraries and Google Analytics, with moderate performance and good mobile optimization. Security posture is moderate but lacks visible security headers and cookie consent mechanisms, and WHOIS data is unavailable due to domain naming rules issues, which slightly reduces trust. Overall, the site is functional, professional, and trustworthy for its niche industrial audience.

Floorplan Systems Ltd is a UK-based specialist in raised access flooring, providing supply, installation, refurbishment, and maintenance services primarily for commercial construction projects including offices and data centres. The company positions itself as a leading UK distributor of premium European-engineered flooring systems, targeting main contractors and supply chain professionals nationwide. The website reflects a professional business with clear service offerings and a focus on quality, safety, and environmental responsibility. Technically, the site uses JavaScript and Google Analytics, is mobile-optimized, and built on the itseeze CMS platform. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit incident response policies. The WHOIS data is incomplete and indicates domain registration issues, which raises some concerns about domain legitimacy despite the professional web presence. Overall, the site is trustworthy and functional but would benefit from improved security practices and WHOIS clarity.

T

Tangible Benefit

tangiblebenefit.com

62

Tangible Benefit is a UK-based IT infrastructure advisory and solutions company, operating as a part of the Bechtle Group. The company targets corporate clients across the UK, offering a range of services including logistics, partner collaborations, and tailored technology solutions. The website presents a professional image with clear branding and a focus on high-quality client support. Technically, the site is built on WordPress using the Avada theme, incorporating modern web technologies and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data reduces transparency but the overall digital footprint and social media presence support legitimacy. Privacy compliance is well addressed with a comprehensive privacy policy and cookie notice. Overall, the site reflects a mature business with a good digital presence and moderate technical sophistication.

M

Manor Brick Centres Ltd (The Brickyard)

manorbrick.com

48

Manor Brick Centres Ltd operates a retail and wholesale business specializing in bricks and paving materials across South Wales, with physical branches in Cardiff, Swansea, and Caerphilly. The company targets both trade professionals and the general public, offering a large inventory with clearance pricing and a free brick-matching service. The website presents a professional and user-friendly interface with clear navigation and relevant content tailored to its market segment. Technically, the website employs modern web technologies including Google Tag Manager for analytics and Google Fonts for typography. The site is mobile-optimized and structured with good SEO practices, though accessibility features are basic. There is no evidence of a CMS or advanced frameworks, indicating a likely custom or lightweight implementation. Performance is moderate with no blocking or WAF detected. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No privacy or cookie policies are present, and no direct contact emails or phone numbers are provided, limiting transparency. The WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The overall risk is moderate with recommendations to improve transparency, implement security headers, and clarify domain registration status to enhance trust and compliance.

R

Relate

relate.org.uk

63

Relate is a well-established UK non-profit organization specializing in relationship counselling and support services for individuals, families, and couples. The website clearly communicates its mission and services, targeting a broad audience seeking relationship help across England and Wales. The organization operates under the parent charity Family Action, reinforcing its credibility and market position. The site offers a variety of services including paid and free counselling, toolkits, and training programs. Technically, the website is built on Drupal 10 and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve transparency around security policies and incident handling.

Easylinks UK Limited operates as a distributor of electric scooters and original accessories in the United Kingdom. The company offers a range of major brands and emphasizes genuine products and competitive pricing. Their website provides basic information about their business model, product offerings, and contact emails for sales and support. However, the digital presence is minimalistic with a basic HTML/CSS structure and lacks modern web features such as mobile optimization and advanced SEO. Technically, the website is simple and does not employ modern frameworks or CMS platforms. There is no evidence of HTTPS enforcement or security headers, which exposes the site to potential security risks. The absence of privacy and cookie policies indicates non-compliance with GDPR and other privacy regulations. No analytics or tracking technologies are detected, suggesting minimal user data collection. From a security perspective, the lack of HTTPS and security headers, combined with the failure to provide privacy policies, represents significant vulnerabilities. The WHOIS lookup failure and domain registration error from Nominet UK raise concerns about the legitimacy and proper registration of the domain, which could impact trustworthiness. Overall, the website's security posture is weak, and the business credibility is moderate but undermined by domain registration issues. Strategically, the company should prioritize securing their website with HTTPS, implementing privacy and cookie policies, and resolving domain registration issues to improve trust and compliance. Enhancing the website's technical infrastructure and mobile responsiveness would also benefit user experience and market positioning.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

F

FT Construction Group

ftcg.co.uk

43

FT Construction Group is a medium-sized, privately owned construction group based in the North East of England, comprising multiple subsidiary companies specializing in construction projects and metalwork fabrication. The group targets both private and public sector clients with project values ranging from small to multi-million pounds. Their website is professionally designed using WordPress and the Divi theme, providing clear navigation and promoting their subsidiaries effectively. The technical infrastructure is modern and includes standard web technologies and cookie consent mechanisms, indicating a reasonable level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks visible advanced security headers and detailed security policies. The absence of WHOIS data due to domain naming rules error introduces some uncertainty about domain registration legitimacy, though the website content and structure suggest a legitimate business presence. Overall, the website is functional, professional, and safe for general audiences.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.ukshelving.co.uk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page employing Turnstile captcha verification. This prevents access to any substantive content, business information, or contact details. The domain WHOIS lookup failed with an error indicating the domain name is invalid under Nominet UK naming rules, suggesting potential misconfiguration or registration issues. Technically, the site benefits from Cloudflare's security infrastructure including HTTPS and Content Security Policy headers, but the lack of accessible content severely limits assessment of business operations or compliance. Security posture is strong in terms of infrastructure but cannot be fully evaluated due to blocked content. Overall, the site presents a high risk due to inaccessibility and domain registration anomalies, requiring resolution of WAF blocking and domain issues for further analysis.

The website www.treetoplandscapes.co.uk is currently inaccessible, returning a 404 Not Found error page with no business content, contact information, or policies. The WHOIS lookup failed due to an invalid domain name error from Nominet UK, indicating the domain may be misconfigured or improperly registered. The site uses LiteSpeed Web Server but lacks any detectable CMS, frameworks, or modern technologies. There are no security headers or HTTPS information available, and no privacy or cookie policies are present. Overall, the website appears inactive or improperly set up, providing no meaningful business or security information.

D

Doorstore (Wirral) Ltd

doorstorewirral.co.uk

51

Doorstore (Wirral) Ltd is a small, family-run business specializing in the supply and installation of wooden, composite, and UPVC doors and windows in the Wirral and Chester areas. The company positions itself as a local leader with over 30 years of experience, targeting homeowners and property owners seeking quality door and window solutions. The website reflects this with clear service descriptions and contact information. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Google reCAPTCHA, indicating a moderate level of digital maturity. However, the Google Analytics plugin is present but not configured, suggesting incomplete analytics implementation. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks advanced security headers and explicit security policies. The WHOIS data is unavailable due to domain registration errors, which raises some concerns about domain legitimacy but does not negate the professional presentation and business consistency observed. Overall, the website is functional and trustworthy but could benefit from enhanced security and privacy compliance measures.

Darwin Clayton is a UK-based specialist insurance brokerage with over 100 years of experience, offering tailored business insurance solutions. The website positions the company as a long-established and award-winning broker targeting businesses seeking specialist insurance coverage. The digital infrastructure is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable platform. Google Tag Manager is used for analytics and tracking, and a comprehensive cookie consent mechanism is implemented, reflecting attention to privacy compliance. Security posture is generally good with HTTPS enforced, but some security headers are missing and no explicit security or incident response policies are visible. The WHOIS data is unavailable due to a domain naming rules violation, which raises some concerns about domain registration legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced transparency in contact and security policies.