Security Directory

The website www.simplysigns.com currently presents only a security verification page protected by Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No substantive content, business information, or contact details are accessible, severely limiting the ability to assess the company's operations or services. The lack of WHOIS data further complicates trust and legitimacy evaluation, as the domain appears unregistered or WHOIS information is unavailable. Technically, the site uses modern frontend frameworks like Bootstrap and integrates reCAPTCHA for security, but lacks HTTPS confirmation and security headers in the provided data. Overall, the site’s security posture is weak due to minimal visible security controls beyond bot protection, and privacy compliance is absent. The site is effectively inaccessible for normal users without passing the verification, resulting in a low trust and credibility rating.

Dext is a well-established SaaS company specializing in automated accounting and bookkeeping solutions, serving over 700,000 businesses and 12,000 accounting firms globally. Their platform simplifies financial data capture, expense management, and integrates with numerous accounting software and banks, targeting accountants, bookkeepers, and SMBs. The company demonstrates a mature digital presence with mobile apps on iOS and Android, extensive integrations, and a professional website with rich content and customer testimonials. Technically, the website is built on modern frameworks such as Next.js and Builder.io, hosted on AWS, and employs a comprehensive set of analytics and marketing tools including Google Analytics 4, HubSpot, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized, fast, and SEO-friendly, reflecting a high level of digital maturity. From a security perspective, the site enforces HTTPS, uses domain locking statuses to prevent unauthorized changes, and employs secure cookies. However, DNSSEC is not enabled, and explicit incident response or vulnerability disclosure policies are not publicly available. No critical vulnerabilities or exposed sensitive data were detected. Overall, Dext presents a low-risk profile with strong business credibility, good privacy compliance, and a secure technical infrastructure. Strategic recommendations include enabling DNSSEC, publishing incident response contacts, and enhancing transparency around security certifications and data protection officer details.

Farrendale Ltd is a UK-based electrical contracting company established in 2001, specializing in domestic electrical services including responsive call outs and planned rewires. The company operates primarily in the Midlands with capacity to serve clients UK-wide. It holds recognized accreditations such as NICEIC approval and Construction Line Gold membership, reinforcing its market credibility. The website is built on WordPress using Elementor, featuring a professional design with clear navigation and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies are absent. Overall, the site reflects a mature business with a solid digital presence and compliance with GDPR requirements.

M

Mark Bates & Sons Ltd

batesconcrete.co.uk

45

Mark Bates & Sons Ltd is a small, independent family-run business specializing in the supply of ready mix concrete primarily serving the North West of England, including Manchester, Waterfoot, and Westhoughton. The company emphasizes punctual delivery, quality products, and customer service, supported by BSI and ISO certifications. Their market position is that of a trusted local supplier with over 20 years of operational history. The website reflects a professional and consistent brand image with clear business information and multiple branch locations. Technically, the website is built on WordPress with the UIkit framework, leveraging modern JavaScript libraries and Google services such as Tag Manager and reCAPTCHA. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers implementation. SEO practices are adequately addressed with proper metadata and structured data. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data query failed due to an invalid query on the subdomain, but the website's business legitimacy is supported by company registration details and certifications. Overall, the website presents a low risk profile with good business credibility and moderate technical maturity. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the security posture and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.caterpillardaynursery.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, suggesting the domain is either invalid or improperly registered. No business, contact, or policy information is accessible, severely limiting the ability to assess the company's market position or services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. The overall security posture is weak due to minimal content and lack of transparency. The domain's legitimacy is questionable given the WHOIS failure and lack of registration data.

T

Trojan Sheetmetal

trojansheetmetal.co.uk

51

Trojan Sheetmetal is a small, family-run manufacturing business based in Ashford, Kent, specializing in metal fabrication including gates, railings, balustrades, fire hoods, and powder coating services. The company emphasizes over 30 years of experience and offers design, build, and finishing services to local customers. The website reflects a professional and consistent brand image with clear contact details and service descriptions, targeting local businesses and individuals requiring metalwork solutions. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and SVG.js, ensuring good mobile responsiveness and user experience. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate with good SEO practices but basic accessibility features. The site lacks analytics and tracking scripts, indicating minimal user tracking. From a security perspective, the site does not display HTTPS status or security headers, and no privacy or cookie policies are present, which lowers its security posture. The WHOIS lookup failed due to domain naming rules violations, raising concerns about domain legitimacy or configuration, although the website content itself appears legitimate and professional. Overall, the website is functional and informative but requires improvements in security, privacy compliance, and domain registration clarity to enhance trust and reduce risk.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Alecto Recruitment

alectorecruitment.com

55

Alecto Recruitment is a UK-based recruitment agency specializing in technical engineering sectors, founded in 2009. The company serves both large UK Blue-Chip clients and SMEs, offering recruitment and managed services. Their website reflects a professional and consistent brand with a focus on client and candidate service excellence. Technically, the site is built on WordPress with modern plugins and scripts, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and security headers are not evident. No explicit security or incident response policies are published. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

PFS Fire & Security is a UK-based company specializing in fire prevention and security services, targeting residential and corporate clients primarily in Nottingham, Derby, and Leicester. The company offers a range of services including CCTV systems, on-site security, alarm monitoring, and fire protection. The website presents a professional image with clear contact information and client testimonials, positioning PFS as a regional leader with over a decade of experience. Technically, the website is built on WordPress using WooCommerce and Visual Composer, with standard plugins such as Revolution Slider and jQuery. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices evident. However, some plugins appear outdated, and accessibility features are basic. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and HSTS, which are recommended to enhance protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain registration legitimacy, though the website content itself appears legitimate. Overall, the website is functional and professional but would benefit from improved security practices and privacy compliance to enhance trust and reduce risk.

J

JBC Management Solutions

jbcms.co.uk

56

JBC Management Solutions is a small, family-run accounting firm based in Ponteland, UK, specializing in providing part-time financial management and accountancy services to small and medium enterprises. The company emphasizes helping businesses improve profitability through robust financial planning and outsourced finance department services. The website is professionally designed using the Wix platform, with clear navigation and relevant business content. However, the domain WHOIS data is unavailable due to a registration error, which raises questions about domain legitimacy despite the professional appearance of the site. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. Overall, the site presents a credible business front but would benefit from improved compliance and security transparency.

A

Arena Flowers

arenaflowers.com

71

Arena Flowers is a UK-based e-commerce company specializing in ethical flower delivery and gift subscriptions. Positioned as the UK's #1 rated ethical flower company, it emphasizes sustainability, including planting over one million trees and avoiding fossil-based single-use plastics. The company offers hand-tied bouquets, flower subscriptions, and gift cards, targeting consumers who value ethical sourcing and sustainability. The website is professionally designed, mobile-optimized, and rich in content, supporting a strong market presence with over 22,000 Trustpilot reviews and a perfect ethical company score on the Good Shopping Guide. Technically, the website is built on the Shopify platform, leveraging modern technologies such as Google Tag Manager, Rollbar for error tracking, and Ometria for marketing automation. It employs HTTPS with strong security headers and a cookie consent mechanism, reflecting a mature digital infrastructure. Performance and accessibility are rated excellent, supporting a positive user experience. Security posture is strong with HTTPS enforcement and standard security headers, though the absence of a published security policy or incident response plan is noted. The WHOIS data is incomplete, showing no registrar or registrant information, which is unusual for a business founded in 2006 and slightly reduces trustworthiness. No signs of malicious activity or vulnerabilities were detected. Overall, Arena Flowers presents a trustworthy, professional, and ethically focused online business with a solid technical foundation. Strategic recommendations include publishing explicit security and incident response policies and addressing the WHOIS data anomaly to enhance transparency and trust.

L

Labosport Group

labosport.com

61

Labosport Group is an established organization specializing in research, testing, and certification of sports surfaces and equipment, recognized as a FIFA Research Institute. Founded in 1993, the company offers consulting, testing services, training, and certification to improve sports surface safety and performance. The website targets sports industry professionals and related stakeholders globally, supporting multiple languages to cater to an international audience. The business model revolves around providing expert services and certifications in the sports surface domain, positioning Labosport as a trusted authority in this niche market. Technically, the website is built on WordPress 7.0 with a modern tech stack including jQuery, various plugins for SEO, translation (Weglot), marketing (Brevo/Sendinblue), push notifications (WonderPush), and analytics (Google Analytics, Snitcher). The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting details are limited but the domain is registered with a reputable registrar (Gandi SAS). From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers. Anti-spam measures are in place via CleanTalk. No explicit privacy, cookie, or security policies are published, which is a compliance gap. No incident response or vulnerability disclosure information is available. Overall, the security posture is moderate but could be improved with better policy transparency and DNS security. The overall risk assessment is low to moderate with recommendations to enhance privacy compliance, enable DNSSEC, implement security headers, and publish clear security and incident response policies. These improvements will strengthen trust and regulatory compliance while maintaining the company’s professional online presence.

O

Office Watercoolers

glugglugglug.com

65

Office Watercoolers is a UK-based company specializing in providing and servicing high quality bottled water and mains fed dispensers nationwide. With over 25 years of industry experience and established since 2001, it operates as part of the South Staffordshire Plc group, which includes multiple subsidiaries in water supply and related services. The company targets business customers seeking reliable hydration solutions for offices and commercial environments. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, and employs Google Tag Manager and reCAPTCHA for analytics and security. The site is well-structured, mobile-optimized, and includes a comprehensive cookie consent mechanism, reflecting good digital maturity. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though security headers and explicit incident response policies are absent. The lack of WHOIS data reduces domain trustworthiness, but the professional presentation and corporate group affiliation mitigate concerns. Overall, the website is functional, secure, and compliant with basic privacy standards, but could improve transparency and security documentation.

A

Abacus Associates

abacusadvisers.co.uk

62

Abacus Associates is an established UK-based independent financial advisory network operating under the parent company Saltus Partnership Limited. The company offers a comprehensive range of financial planning services including pensions, investments, estate planning, mortgages, and protection advice. Their market position is strong with over 150 advisers and £3bn in assets under management, serving more than 10,000 clients. The website reflects a professional and trustworthy brand with rich content, client testimonials, and clear service descriptions. Technically, the site is built on WordPress with modern frameworks and is well optimized for SEO and mobile devices. Security posture is good with HTTPS and secure forms, though explicit security headers and published policies are lacking. WHOIS data is not publicly available, which slightly reduces transparency but does not detract significantly from the overall legitimacy given the professional presentation and business information. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, enhancing security headers, and providing incident response contacts to improve compliance and trust.

The website www.unionstreetgarage.co.uk is a domain parking and sales landing page operated by URLease.com, a premium domain marketplace. The site offers the domain for sale or lease but does not represent an active business or service. The content is minimal and primarily focused on domain sales with a single contact email provided. Technically, the site uses basic HTML, CSS, and Google Adsense for monetization. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no privacy or cookie policies. The WHOIS lookup failed, indicating the domain is not registered or invalid under Nominet UK rules, which significantly impacts trust and legitimacy. Overall, the site is a simple holding page with low business credibility and minimal technical sophistication.

S

HOME | Shires Crane Hire

shirescranehire.com

47

The website www.shirescranehire.co.uk appears to represent a small business likely involved in crane hire or construction services, hosted on the Wix platform. However, the domain WHOIS lookup failed due to a naming rules violation, indicating the domain may be invalid or improperly registered. The website content is minimal, lacking clear business descriptions, contact information, or privacy and cookie policies. Technically, the site uses standard Wix scripts and polyfills but lacks visible security headers or HTTPS status information. The absence of privacy compliance and contact details further reduces trustworthiness. Overall, the site exhibits a low security posture and limited digital maturity, with significant gaps in compliance and business credibility.

B

Bathex

bathex.co.uk

54

Bathex is a UK-based family-run manufacturing business specializing in the supply and manufacture of equipment for the less able market, with over 40 years of experience. The company offers a range of products including Distinction, Professional, and Essential ranges, as well as bespoke manufacturing solutions tailored to customer needs. Their market position is solid, trusted by major UK purchasers, and focused on delivering quality British-made goods from Birmingham. The website reflects a professional business with clear branding and consistent messaging targeting businesses and purchasers in the assisted living sector. Technically, the website is built on WordPress 7.0 with modern libraries such as Bootstrap 5, jQuery, and Slick Carousel. It uses Google Tag Manager for analytics and Adobe Typekit for fonts. The site is mobile optimized with good SEO practices and moderate performance. Accessibility features are basic but present. The hosting provider is not explicitly identified. From a security perspective, the site enforces HTTPS with excellent SSL configuration but lacks security headers like Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerable libraries were detected. However, the absence of a cookie consent mechanism and a comprehensive privacy policy reduces privacy compliance. There is no visible security policy or incident response contact information. Overall, the website is trustworthy and professional with a strong business credibility score. Recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing a security policy, and enhancing accessibility. The domain WHOIS data is consistent with the business claims, supporting legitimacy and trustworthiness.

The website www.carlylebusandcoach.com is currently inaccessible due to Cloudflare's Web Application Firewall (WAF) blocking access with an error 1015 indicating rate limiting and a temporary ban. The WHOIS lookup for the domain returned no registration data, suggesting the domain may not be registered or WHOIS data is unavailable. Due to the lack of accessible content, no business information, contact details, or policies are visible. The technical infrastructure is limited to Cloudflare's protection services, with no further technology or CMS detected. Security posture cannot be assessed due to the blocked content, and no privacy or compliance information is present. Overall, the site presents a high risk due to inaccessibility and lack of transparency.

The website at sherwinhall.com is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. This prevents any meaningful analysis of the business, services, or compliance posture from the website itself. The domain is registered with GoDaddy.com, LLC since 2008, indicating a long-standing registration, but no public-facing content is available to assess business operations or market positioning. The technical infrastructure appears minimal with no detected scripts, analytics, or security headers, and DNSSEC is not enabled. The lack of HTTPS information and security headers suggests a weak security posture. Privacy and cookie policies, terms of service, and contact information are absent, indicating poor privacy compliance and business credibility from the website perspective.

T

TRAVEX ENERGY GMBH

travex-energy.de

54

The website travex-energy.de appears to represent a small business operating in the energy sector in Germany. The domain and content suggest a focus on energy-related services, but the website content is minimal and lacks explicit business descriptions, contact information, or legal policies. The technical infrastructure is based on WordPress CMS with standard Google Fonts integration, but lacks advanced frameworks or performance optimizations. Security posture is weak, with no detected security headers, privacy policies, or incident response information. No WAF or blocking mechanisms are present, indicating accessible content but limited security maturity. Overall, the site presents a low level of digital maturity and trustworthiness, with significant room for improvement in content quality, security, and compliance.

J

Jameson Lomax

jamesonlomax.com

45

Jameson Lomax is a small, established IT support company based in the East Midlands, UK, specializing in IT support, cloud services including Microsoft 365, cyber security, IT procurement, and backup solutions. The company positions itself as a reliable partner focused on user-centric IT solutions to help businesses improve efficiency and profitability. The website is professionally designed using WordPress and modern plugins, providing a good user experience with clear navigation and mobile optimization. However, the absence of WHOIS registration data raises some concerns about domain transparency. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy and cookie policies are not found, indicating room for compliance improvement. Contact information is clearly provided, enhancing business credibility. Overall, the website reflects a trustworthy small business IT service provider with moderate technical maturity and some compliance gaps.

The website ww1.fowkesauto.com appears to be a minimal placeholder or parked domain with no substantive business content or branding. The page primarily consists of embedded iframes and scripts related to cookie consent management, with no visible company information, contact details, or privacy policies. The lack of WHOIS data for the domain raises significant concerns about its legitimacy and registration status. Technically, the site lacks HTTPS and standard security headers, indicating a weak security posture. The cookie consent mechanism is implemented, but overall privacy compliance is minimal. Given the absence of business information and security best practices, the site does not present itself as a credible or trustworthy business presence.

Platinum Technology is a UK-based engineering and technology consultancy specializing in high-speed digital circuit design, FPGA development, and PCB layout services. The company targets clients requiring expert FPGA design and verification using tools from leading vendors such as AMD Xilinx, Intel, Lattice, and Microchip. Their market position is that of a specialist consultancy with a focus on delivering advanced electronics design services to technology companies. The business model is consultancy-driven, providing tailored engineering solutions and support for PCB design and manufacturing processes. The website reflects a small-sized, newly founded company with professional branding and clear service offerings. Technically, the website is built using the Hostinger Website Builder platform with the Astro framework and uses Google Fonts for typography. Hosting is provided by Hostinger. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and good SEO practices. However, no advanced analytics or tracking tools are detected, indicating minimal user tracking and data collection. From a security perspective, the website lacks visible security headers and does not provide privacy, cookie, or terms of service policies, which are important for GDPR compliance and user trust. There is no evidence of incident response or vulnerability disclosure mechanisms. The domain registration is recent but consistent with the company's founding date and business claims, registered through a reputable registrar without privacy protection, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced security practices, privacy compliance documentation, and clearer contact information to improve trust and compliance posture.

Eco Sustainable Solutions Ltd is a well-established company founded in 1995, specializing in sustainable waste management and renewable energy solutions across Southern England. The company focuses on transforming waste into valuable resources through various recycling services and green energy production, positioning itself as a regional leader in the energy sector. Their website reflects a professional and environmentally conscious brand with clear messaging and strong trust indicators such as environmental impact statistics and project involvement with notable initiatives like The Eden Project and a solar farm. Technically, the website is built on WordPress using Elementor and Gravity Forms, integrating modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and CAPTCHA on forms, but lacks some security headers and formal privacy/cookie policies. The absence of WHOIS data due to a domain naming rules error reduces domain registration trustworthiness, though the website content and business information strongly indicate legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a mature digital presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and verifying domain registration details to enhance trust and compliance.

R

ROBER LIMITED

roberlimited.com

59

ROBER LIMITED is a UK-based company specializing in the design, manufacture, and global distribution of advanced pressure relief mattresses using proprietary Zero Pressure Technology. Their products are clinically developed in collaboration with healthcare professionals to prevent and treat pressure ulcers, targeting healthcare providers and institutions. The website demonstrates a professional digital presence built on WordPress with the Avada theme, incorporating SEO best practices and a cookie consent mechanism to address privacy compliance. Security posture is adequate with HTTPS enforced but could benefit from enhanced security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the business content and certifications support credibility. Overall, the website is functional, informative, and trustworthy with room for improvement in privacy and security transparency.

B

Bolt Down

boltdown.co.uk

57

Bolt Down is a UK-based SaaS company providing a comprehensive workshop and business management platform tailored for repair workshops. Their solution integrates job tracking, customer management, task boards, callbacks, warranty registration, and order management into a single platform, targeting small to medium-sized workshops seeking operational efficiency. The website presents a professional and consistent brand image with clear subscription plans and contact channels, positioning Bolt Down as a niche player in the workshop management software market. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Stripe for payment processing. Hosting appears to be on Vercel, indicating a modern cloud infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. The presence of secure login and registration forms with password policies and Stripe integration reflects a mature technical implementation. From a security perspective, the site uses HTTPS and secure payment processing but lacks publicly available privacy, cookie, and security policies, which are critical for GDPR compliance and user trust. No major vulnerabilities or exposed sensitive data were detected, but the absence of security headers and incident response information suggests room for improvement. The WHOIS data is unavailable and indicates the domain is not registered, which is inconsistent with the live website and reduces domain trustworthiness. Overall, Bolt Down demonstrates a solid business and technical foundation with a professional web presence. However, to enhance trust and compliance, the company should publish privacy and cookie policies, improve security headers, and clarify domain registration status. These steps will strengthen their security posture and regulatory compliance, supporting sustainable growth and customer confidence.

S

Select Components

selectcomponents.co.uk

49

Select Components is a UK-based B2B supplier specializing in furniture fittings, architectural hardware, and ironmongery, serving furniture manufacturers internationally. The company has an established market presence with over 25 years of experience and operates an e-commerce platform built on WordPress and WooCommerce. The website demonstrates a good level of digital maturity with modern technologies, SEO optimization, and cookie compliance mechanisms in place. Security posture is adequate with HTTPS and reCAPTCHA usage, though improvements such as enabling DNSSEC and adding security headers are recommended. The absence of explicit privacy policies and contact information for incident response represents a compliance gap. Overall, the website is professional, trustworthy, and safe for general audiences.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Polyflex Packaging Ltd is a UK-based manufacturer specializing in eco-friendly, bespoke flexible packaging solutions tailored for businesses. Established in 1987, the company has a strong market position as a provider of sustainable packaging products including clip close handle bags, duvet and pillow bags, mailing bags, and bale bags. Their manufacturing operations are based in Runcorn Cheshire, with typical lead times of 2-4 weeks. The website reflects a professional and consistent brand image, targeting businesses seeking sustainable packaging options. Technically, the website is built on the GoDaddy Website Builder platform, utilizing modern web technologies such as HTML5, CSS3, and JavaScript. It incorporates Google reCAPTCHA for spam protection and displays a TrustedSite certification badge, indicating a focus on trust and security. The site is mobile-optimized with good SEO and accessibility basics, though some advanced security headers are not explicitly detected. From a security perspective, the site uses HTTPS with good SSL configuration and employs reCAPTCHA on its contact form. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. Cookie consent is implemented with clear accept and decline options, supporting basic privacy compliance. The WHOIS data shows a long-established domain consistent with the business history, enhancing legitimacy. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and compliance.

The FCA Markets Practitioner Panel website is a professionally maintained and authoritative resource representing an independent statutory body within the UK's financial regulatory framework. It provides advisory services and represents financial market participants, supporting the FCA's strategic and operational objectives. The site is part of the official FCA domain, reinforcing its credibility and trustworthiness. Technically, the site leverages Drupal 10 CMS, integrates Google Tag Manager and New Relic for analytics and monitoring, and demonstrates excellent mobile optimization and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not directly published on this page. Overall, the site is secure, compliant with privacy regulations, and professionally presented, making it a reliable source for its target audience.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Treyone Bespoke Kitchens is a well-established bespoke kitchen design and manufacturing company based in Cornwall and Devon, UK, with over 45 years of experience. The company offers a comprehensive service from design consultation through to manufacture and installation, targeting homeowners and property developers seeking high-quality handcrafted kitchens. Their market position is strong regionally, supported by professional branding, customer testimonials, and a consistent online presence. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, supported by Cloudflare for CDN and security. The site demonstrates good performance, mobile optimization, and accessibility, with proper SEO and privacy compliance including cookie consent mechanisms and GDPR adherence. Security posture is solid with HTTPS, security headers, and bot protection via Google reCAPTCHA. However, there is no publicly available security policy or incident response information, and the WHOIS data for the domain is missing or invalid, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is trustworthy and professional but would benefit from clarifying domain registration details and publishing formal security and incident response policies to enhance trust and compliance.

The website www.faun-zoeller.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain failed due to a Nominet UK naming rules violation, indicating the domain name contains too many parts and cannot be registered. This raises significant concerns about the legitimacy and proper registration of the domain. No business, contact, or policy information is available on the site, and no metadata or structured data is present to provide insights into the company or its operations. The technical infrastructure appears minimal with no detectable scripts, frameworks, or external resources, and no security headers or SSL configuration details are available from the content. Overall, the site lacks any visible content or trust indicators, resulting in a very low AI score and high risk from a security and business credibility perspective.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Saw.com

microchem.co.uk

55

The website www.microchem.co.uk is a domain sales landing page managed by Saw.com, a domain brokerage service. It offers the premium domain MICROCHEM.CO.UK for sale, targeting buyers interested in acquiring this domain. The site features a professional design with clear calls to action for making offers, supported by trust signals such as a Trustpilot review widget and media logos. However, the domain WHOIS data is unavailable due to a naming rules violation, indicating the domain is likely parked or reserved for resale rather than actively used by an operating business. Technically, the site uses modern web technologies including JavaScript libraries like ThumbmarkJS for fingerprinting and Trustpilot widgets for social proof. The site is mobile optimized and has good SEO metadata but lacks visible security headers and explicit HTTPS confirmation in the provided data. Privacy and cookie policies are absent, and no direct contact information is provided, which limits compliance and user trust. From a security perspective, the site demonstrates some best practices such as secure payment processing partnerships and input protections but lacks comprehensive security headers and documented policies. The absence of WHOIS transparency and contact details reduces trustworthiness. Overall, the site is functional and professional for domain sales but requires improvements in privacy, security, and transparency to enhance credibility and compliance. Strategically, the domain is positioned as a premium asset for sale rather than an active business website. The key recommendation is to improve privacy and security disclosures, ensure HTTPS enforcement, and provide clear contact and compliance information to build buyer confidence and meet regulatory requirements.

T

Tails Cocktails

tailscocktails.com

57

Tails Cocktails is a premium ready-to-drink cocktail brand offering consumers high-quality pre-mixed cocktails to enjoy at home. The website is professionally designed, leveraging WordPress CMS and modern web technologies including Google Tag Manager and OneTrust for privacy compliance. The brand is associated with Bacardi Limited, a well-known global beverage company, enhancing its market credibility. The site includes comprehensive privacy and cookie policies, an age gate for legal compliance, and a branded contact support portal. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though explicit security policies and incident response information are absent. WHOIS data is privacy protected, which is typical for commercial brands in this sector. Overall, the site presents a trustworthy and professional digital presence with good SEO and user experience.

P

PD Ports

pdports.co.uk

67

PD Ports is a leading UK port group operating 11 strategically located sites across the UK, providing comprehensive port, logistics, and shipping services. The company emphasizes safety, sustainability, and innovation, employing approximately 1,500 people. Their service portfolio includes port-centric logistics, contract logistics, warehousing, rail, stevedoring, freight forwarding, and shipping services. Owned by Brookfield, PD Ports positions itself as a trusted gateway for businesses requiring maritime and logistics solutions in the UK and Europe. Technically, the website is built on WordPress with modern web technologies such as jQuery, Google Tag Manager, and Splide.js for carousels. The site is mobile-optimized with good SEO practices and a professional design. Cookie consent and privacy policies are implemented, reflecting a mature digital presence. However, some security headers are not explicitly detected, and incident response information is not publicly available. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. The site uses cookie consent mechanisms and has certifications indicating trustworthiness. The lack of explicit security.txt or vulnerability disclosure pages is a minor gap. Overall, the site is professional, secure, and compliant with GDPR requirements. The overall risk is low, but improvements in security header implementation, incident response transparency, and accessibility could enhance the security and compliance posture further. The domain WHOIS data is unavailable due to querying the subdomain rather than the registered domain, but the website content and branding strongly indicate legitimacy.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

B

Bramber Construction Co. Limited

bramber-construction.co.uk

51

Bramber Construction Co. Limited is a small, reputable construction company based in Shoreham-by-Sea, West Sussex, specializing in bespoke homes, community, commercial developments, and property renovations. The website provides detailed information about their services and project portfolio, targeting homeowners and developers in the Sussex region. The digital infrastructure is modern, leveraging the Astro framework, Google Tag Manager, and multiple advertising platforms, with a focus on SEO and mobile optimization. Security posture is moderate with HTTPS enabled and client-side consent management, but lacks explicit security policies and incident response contacts. WHOIS data is inconsistent, showing a future domain creation date, which raises concerns about domain registration legitimacy. Overall, the website is professional and content-rich but would benefit from improved transparency in security and contact information.

S

Sinclair Group

sinclairgroup.co.uk

71

Sinclair Group is a well-established, family-run automotive dealership group operating primarily in Wales and Shropshire, UK. With over 75 years of experience, it represents prestigious automotive brands including Audi, Jaguar, Land Rover, Mercedes-Benz, Volkswagen, and others. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, MOT, repairs, finance and leasing, Motability schemes, fleet management, and bodyshop services. The website reflects a large, professional business with multiple dealership locations and a strong regional market presence. Technically, the website is built on a modern stack including Bootstrap, jQuery, and Font Awesome, with Umbraco CMS inferred from backend resource patterns. It employs Google Tag Manager and Matomo for analytics, along with cookie consent mechanisms, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site uses HTTPS and includes cookie consent, but lacks explicit security policy or incident response information. Security headers are partially inferred but not explicitly confirmed. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS lookup for the exact domain 'www.sinclairgroup.co.uk' failed due to Nominet UK naming rules, suggesting the domain is a subdomain or alias; however, the main domain is presumably registered and legitimate. Overall, Sinclair Group's website demonstrates a strong business credibility and technical maturity with good privacy compliance. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further improve trust and security posture.

Anglo Pacific World Movers is a UK-based international shipping and removals company, recognized as the UK's largest shipping company with over 20,000 customers annually. The company offers competitively priced international removals and overseas shipping services to numerous global destinations including New Zealand, Australia, USA, South Africa, and UAE. Their business model focuses on providing comprehensive logistics solutions for individuals and businesses moving goods overseas. The website reflects a professional and trustworthy brand with embedded customer reviews and clear contact channels. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for analytics, marketing, and privacy compliance. The site is mobile-optimized with good SEO practices and a moderate performance profile. Cookie consent mechanisms and privacy policies are well implemented, indicating a mature approach to data privacy. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks visible security headers in the HTML source. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to domain naming rules error is a notable anomaly but does not detract from the overall legitimacy of the business as evidenced by the professional website and trust signals. Overall, Anglo Pacific demonstrates a solid digital presence with good security and privacy practices. Strategic improvements include adding security headers, publishing explicit security policies, and enhancing accessibility. The WHOIS anomaly should be investigated to ensure domain registration transparency and trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

E

EPSL Educational Printing Services Limited

eprint.co.uk

52

EPSL Educational Printing Services Limited is a UK-based company specializing in the production and supply of personalised exercise books, stationery, and other printed educational materials primarily for schools and educational institutions. With over 50 years of experience, EPSL positions itself as a leading provider in the educational printing sector, emphasizing quality, British manufacturing, and customer service. The website is built on the Magento e-commerce platform, leveraging modern JavaScript libraries and integrations such as Google Tag Manager and Stripe for payments. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security measures include HTTPS enforcement and CAPTCHA protections on forms, although some security headers and policies are not visibly implemented. Privacy and cookie policies are not explicitly found in the provided content, indicating room for improvement in compliance transparency. The WHOIS data for the 'www.eprint.co.uk' subdomain is unavailable due to domain naming rules, but the main domain 'eprint.co.uk' is active and legitimate. Overall, the website demonstrates a solid business presence with moderate technical maturity and a good security posture, but could enhance privacy compliance and security transparency.

N

NSK Ltd.

nsk.com

75

NSK Ltd. is a globally recognized enterprise specializing in manufacturing bearings, automotive components, and precision machinery parts. The company holds a strong market position as a leader in motion and control solutions, serving industrial manufacturers and automotive sectors worldwide. Their website reflects a professional and comprehensive digital presence, showcasing a broad product portfolio and global reach. Technically, the site is built on Adobe Experience Manager, leveraging modern analytics and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although public security policies and incident response contacts could be improved. Overall, NSK's digital footprint aligns with its enterprise stature, supporting trust and credibility.

ECS (Electrical & Contractors Supplies) is a small UK-based electrical wholesaler founded in 1973, operating under parent company Rowenmead Ltd. The company serves electricians and electrical contractors with a large stock of electrical supplies, free delivery, and personalized customer service. Their sister company OSS specializes in safety and security equipment. The website content is basic but relevant, targeting local and regional customers in the electrical industry. Technically, the website is built using Serif WebPlus X8 with jQuery, lacks modern CMS or frameworks, and shows limited mobile optimization and accessibility. Security posture is weak due to missing HTTPS and security headers, and no privacy or cookie policies are present, indicating potential compliance gaps. WHOIS data is missing or indicates the domain may not be registered, which is a critical concern for legitimacy. Overall, the website is functional but requires significant improvements in security, compliance, and technical modernization.