Security Directory

Domestic Property Surveys is a small, established UK-based company specializing in residential property surveys including Homebuyer and Building Surveys across Kent, London, and the South East of England. The company positions itself as an independent and reliable provider with a clear regional focus. Their website is built on the HubSpot CMS platform, leveraging modern web technologies and includes structured data to enhance SEO and business visibility. The site is well-designed, mobile-optimized, and provides clear navigation and contact information. Security posture is good with HTTPS and DNSSEC enabled, though some security headers and policies could be improved. Privacy compliance is basic with a cookie consent banner but lacks a dedicated privacy policy page. Overall, the website reflects a professional and trustworthy business with room for enhanced privacy and security transparency.

R

Regency Executive Travel

regencyexectravel.co.uk

60

Regency Executive Travel is a small, established chauffeur and executive car hire company based in Milton Keynes, UK, operating since 1986. They offer luxury chauffeur services, airport transfers, wedding cars, and special occasion transportation. The website presents a professional and user-friendly interface with clear navigation and relevant content targeting individuals and businesses seeking premium transportation services in the region. Technically, the site uses a traditional tech stack including jQuery, Google Fonts, and Google Tag Manager, with HTTPS enforced and security features like reCAPTCHA and cookie consent implemented. However, some outdated libraries and missing security headers suggest room for improvement. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy, though the website content and contact information appear credible. Overall, the site demonstrates a good security posture but lacks explicit security policies and incident response information. Strategic recommendations include enhancing security headers, updating libraries, and clarifying domain registration status to improve trust and compliance.

The website www.forestrock.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The site appears to be protected by a web application firewall or similar security mechanism, as indicated by embedded Cloudflare scripts and iframe elements. Due to this blockage, no business information, contact details, or service descriptions are available for analysis. The WHOIS lookup for the domain failed with an error indicating the domain name is invalid or not properly registered, raising significant legitimacy concerns. No privacy, cookie, or terms of service policies are present, and no forms or interactive elements are detected on the page. From a technical perspective, the site loads minimal external resources, primarily Google Fonts, and lacks any detectable CMS, analytics, or tracking technologies. The absence of security headers and HTTPS information further indicates a poor security posture. The overall website quality is poor, with minimal content and no navigation or user engagement features. The domain's WHOIS data is missing, and the registry error suggests the domain may not be legitimately registered or is misconfigured. Security-wise, the site is effectively blocked from access, which prevents any detailed vulnerability or compliance assessment. The lack of privacy and security policies, combined with the WHOIS issues, suggests a high risk from a trust and compliance standpoint. The site does not contain any adult or explicit content and is rated safe in terms of content safety. However, the overall risk assessment is high due to inaccessibility and domain legitimacy concerns. Strategic recommendations include resolving the domain registration issues, ensuring proper DNS and WHOIS configuration, implementing HTTPS with valid SSL certificates, adding essential privacy and cookie policies, and providing clear contact and incident response information. Improving the site's accessibility and content …

E

East Kent Housing

eastkenthousing.org.uk

49

East Kent Housing is a regional housing association focused on providing housing support, advice, and safe accommodation to individuals and families in the East Kent area of the United Kingdom. The organization offers a range of tenant services including rent payment, repairs reporting, anti-social behavior reporting, and leaseholder information. Their market position is that of a trusted non-profit housing provider serving a medium-sized community with a focus on stability and community well-being. Technically, the website is built on a moderately modern stack including jQuery, Bootstrap, and Font Awesome, with indications of Umbraco CMS usage. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as implementing security headers and enhancing accessibility features. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit cookie consent mechanisms. The WHOIS data presents inconsistencies, notably a future domain creation date, which raises concerns about domain registration legitimacy despite the website content appearing genuine and professional. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from addressing technical security gaps and clarifying domain registration details to improve trustworthiness and compliance.

Mindtools Kineo is a workplace learning and talent development organization focused on delivering digital learning solutions to global enterprises. Their services include leadership development, compliance training, and onboarding programs tailored to organizational needs. The company positions itself as a professional and established player in the education sector, targeting B2B clients seeking to enhance workforce capability and performance. The website reflects a modern digital presence with integrated marketing and analytics tools, including Google Tag Manager, HubSpot, and Visual Website Optimizer, indicating a mature digital marketing strategy. Technically, the site is built on WordPress with contemporary technologies and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and visible security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. WHOIS data raises concerns due to suspicious future domain creation dates, which impacts trustworthiness. Overall, the site is professional and functional but would benefit from enhanced transparency and security improvements.

iACS is a UK-based specialist company providing advanced HVAC control solutions including Air Handling Unit (AHU) controls, Fan Coil Unit controls, Heat Recovery Systems, Smoke Extract controls, and Retrofit solutions. The company targets commercial and industrial sectors, offering custom panel solutions, integrated automation, and training services. Their market position is supported by over 40 years of experience and thousands of successful projects, positioning them as a trusted provider in the HVAC controls industry. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as Bootstrap, FontAwesome, Google Fonts, and embedded multimedia content including YouTube videos and Google Maps. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Analytics tools like Google Tag Manager and Plausible Analytics are employed for user tracking. From a security perspective, the site uses HTTPS and includes CSRF tokens in scripts, but lacks visible security headers and explicit privacy or cookie policies. No forms are present on the main page, reducing immediate input risks. WHOIS data for the subdomain is unavailable due to Nominet UK naming rules, but the main domain appears legitimate. Overall, the security posture is moderate with room for improvement in policy transparency and header implementation. The overall risk is low given the professional presentation and clear contact information, but the absence of privacy and cookie policies and missing security headers are notable gaps. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

S

Senso Systems

senso-systems.co.uk

42

Senso Systems is a specialist retailer and installer of premium hi-fi, home cinema, and multi-room audio solutions based in Truro, Cornwall. Established in 2002, the company offers a curated selection of high-end audio products, bespoke home cinema design, and pre-owned equipment sales. Their market position is that of a trusted local expert with a strong brand presence and showroom. Technically, the website is built on WordPress with WooCommerce, leveraging modern JavaScript libraries and optimized for SEO and mobile devices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and privacy compliance measures are lacking. The WHOIS lookup failed due to querying the subdomain, limiting domain registration insights. Overall, the website presents a professional and trustworthy front for a small retail business focused on premium audio solutions.

S

Sunrise Software

sunrisesoftware.com

63

Sunrise Software is a UK-based IT service management software provider established in 1994, specializing in AI-powered service desk solutions for public sector organizations including NHS trusts, local councils, universities, and law firms. Positioned as a top ITSM vendor for the NHS, Sunrise offers a comprehensive platform featuring incident management, AI triage via Solvyr, knowledge management, and ITIL-aligned workflows. The company operates on a SaaS model hosted on Microsoft Azure with UK data residency, emphasizing compliance and data sovereignty for its clients. Technically, the website is built on HubSpot CMS with integrations for analytics and marketing tools such as Google Analytics 4, Hotjar, LinkedIn Insight Tag, and Bing UET, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data introduces uncertainty about domain legitimacy, warranting further verification. Overall, Sunrise Software presents a professional, trustworthy online presence with strong compliance and technical standards, suitable for its target UK public sector market.

A

ATL Transformers

atltransformers.co.uk

47

ATL Transformers UK is a specialized small business operating in the energy and manufacturing sector, focusing on the supply, repair, and maintenance of electrical transformers. The company targets industrial and commercial clients within the UK market. The website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google reCAPTCHA for form security and CookieYes for cookie consent management. The technical infrastructure is moderate in performance and mobile optimization, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and anti-bot measures, but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service pages. Overall, the website presents a professional image with consistent branding and relevant content, but could improve transparency and security practices.

C

CFA Institute

cfainstitute.org

70

CFA Institute is a globally recognized nonprofit organization specializing in investment management education, ethics, and professional standards. It administers the prestigious CFA® and CIPM® programs, serving a large international membership base. The website reflects a mature digital presence with comprehensive content tailored to finance professionals and students seeking certification. Technically, the site is built on Drupal CMS, integrates Adobe Launch for tag management, and uses Osano for consent management, indicating a modern and privacy-conscious infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supporting the organization's authoritative market position.

M

Moore People Recruitment Ltd

moorepeople.com

45

Moore People Recruitment Ltd is a specialized recruitment and career coaching firm focusing on HR and Accountancy professionals primarily in Kent and London. The company is led by Melanie Moore, who brings over 27 years of recruitment experience and holds leadership roles within the CIPD Kent branch. The website presents a professional image with clear service offerings including recruitment, career coaching, CV writing, and interview preparation. Technically, the site is built on WordPress with a modern theme and uses standard analytics and social media integrations. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data is a notable concern and should be investigated further to confirm domain legitimacy. Overall, the site is well designed, user-friendly, and trustworthy for its target audience.

Number One Port Hill is a luxury bed and breakfast located in Hertford, UK, offering boutique accommodation, exclusive bridal packages, and event hosting services. The business is well-established with multiple industry awards and positive customer testimonials, positioning it as a leading hospitality provider in its region. The website is professionally designed using WordPress with modern technologies such as Bootstrap and Revolution Slider, providing a visually appealing and user-friendly experience. However, the site lacks a privacy policy and cookie consent mechanism, which are important for GDPR compliance. Security posture is moderate with HTTPS enforced but missing key security headers. The WHOIS lookup failed due to domain naming rules, but the website is fully accessible and legitimate, indicating the domain is registered correctly without the 'www' prefix. Overall, the site demonstrates strong business credibility and good technical implementation but should improve privacy and security compliance.

P

Prospects

prospects.ac.uk

64

Prospects is a well-established UK-based online platform providing comprehensive career guidance, job search, and postgraduate study advice primarily targeting students and graduates. It operates under the parent company Jisc, a reputable organization in the education sector. The website offers a rich set of services including job matching, course search, career advice, and employer advertising, positioning itself as a key resource for UK higher education and career development. Technically, the site employs modern web technologies such as AngularJS, integrates multiple analytics and marketing tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection, which is justified for this business type.

Contact Packaging Ltd is a well-established family-run business founded in 1980, specializing in the import, manufacture, and distribution of packaging products including adhesive tapes, printed tapes, stretch films, and packaging machinery. They hold a strong market position as the largest importer of Vibac self-adhesive tapes in the UK and maintain a significant stock holding to serve both trade and end users. The company also offers eco-friendly packaging solutions and has an in-house graphics department for custom printed tapes. Technically, the website employs modern JavaScript libraries, Google Analytics, and Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, though security headers and explicit policies could be improved. Privacy compliance is supported by a cookie policy and consent mechanism, but lacks a dedicated privacy policy page and incident response information. Overall, the website and business demonstrate professionalism and trustworthiness, with room for enhanced security and compliance maturity.

AMG North Weald Ltd is a UK-based logistics company with over 50 years of experience specializing in road freight, freight forwarding, express courier services, warehousing, distribution, and bespoke project management. The company targets businesses requiring reliable and flexible logistics solutions, particularly with expertise in Swiss and Italian markets. The website is built on WordPress using modern technologies such as Bootstrap 4 and Slider Revolution, providing a professional and mobile-optimized user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. The absence of WHOIS data and domain registration inconsistencies raise concerns about domain legitimacy, warranting further verification. Overall, the site presents a trustworthy business front with room for improvement in security transparency and domain registration clarity.

Jungle Bar is a small hospitality business based in Hertford, UK, specializing in nightlife entertainment including nightly events, karaoke, live jazz, and DJ sets. The website is professionally designed using Squarespace, featuring good mobile optimization and moderate performance. The business targets adults interested in vibrant nightlife experiences. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, indicating a strong SSL configuration. However, the absence of privacy and cookie policies, lack of contact information, and missing WHOIS registration data reduce overall trust and compliance posture. No security vulnerabilities or exposed sensitive data were detected, but security headers could be improved. Overall, the site presents a professional front for a local nightlife venue but would benefit from enhanced privacy compliance and transparency.

M

Marks Tey Autospares Ltd

marksteyautospares.co.uk

60

Marks Tey Autospares Ltd is a small, established vehicle parts supplier based in Colchester, UK, with over 25 years of experience. The company offers a wide range of genuine vehicle parts and accessories, serving local customers through a physical store and an online sales channel. The website reflects a professional and consistent brand presence with clear contact information and social media links. Technically, the site uses modern JavaScript libraries and is hosted on a platform provided by Yell.com, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and CAPTCHA on forms, though some security headers are missing and no explicit security policies are published. WHOIS data for the domain is unavailable due to a naming rules violation, which slightly reduces domain trustworthiness but does not detract from the business legitimacy as presented on the site.

F

Foundation Landscaping

foundationlandg.co.uk

50

Foundation Landscaping is a small, local landscaping and groundworks company based in Berkhamsted, England, serving Hertfordshire and surrounding counties. The company offers a range of services including garden design, planting, outdoor structures, and groundworks, targeting homeowners and commercial clients. The website is professionally designed using Webflow CMS, with good mobile optimization and clear navigation. It integrates Google Analytics for visitor tracking but lacks privacy and cookie policies, which is a compliance gap. Security posture is adequate with HTTPS enabled but missing security headers and vulnerability disclosures. WHOIS data is unavailable, which raises some concerns about domain legitimacy despite the professional presentation. Overall, the website reflects a credible local business but should improve compliance and security transparency.

E

El Sol SteakHouse & Mexican Cuisine

elsolgambia.com

58

El Sol SteakHouse & Mexican Cuisine is a well-established restaurant located in Kololi, The Gambia, specializing in Mexican cuisine, tapas, steakhouse dishes, and international specialties. The business has a strong market position as the only Mexican restaurant in the country and has earned TripAdvisor Certificates of Excellence annually since its inception in 2009. The website is hosted on WordPress.com and uses a standard WordPress theme with Jetpack and Facebook SDK integrations. The site provides clear contact information and booking options, targeting tourists and local diners seeking quality dining experiences. Technically, the website is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

Derek W Hancox Ltd is a well-established family-run business specializing in plant hire and specialist earth moving services in Gloucestershire, UK. Founded in 1982, the company offers a broad range of services including bulk earth moving, golf course construction, lake excavation, and machinery repairs. Their market position as Gloucestershire's leading plant hire specialist is supported by over 40 years of experience and a commitment to maintaining a modern, well-serviced fleet. The website reflects a professional business with clear contact information and certification credentials such as Constructionline Gold. Technically, the website is built on WordPress using the Divi theme, incorporating modern web fonts and a cookie consent management system (CookieYes). The site is mobile-optimized and provides a moderate performance experience. SEO and accessibility are basic but adequate for the business scope. The presence of Google Analytics indicates moderate user tracking, balanced by a comprehensive cookie consent mechanism. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business profile, showing a legitimate domain registration with no privacy protection, appropriate for the business type. Overall, Derek W Hancox Ltd's website presents a credible, professional online presence with good business and technical foundations. To enhance security and compliance posture, the company should consider adding privacy and terms of service pages, implementing security headers, and publishing incident response and vulnerability disclosure policies.

Lebanese Grill is a small hospitality business operating a Lebanese food takeaway service in London since 2007. The website presents authentic Lebanese cuisine with freshly grilled dishes, targeting local customers seeking traditional flavors. The business operates primarily through a Squarespace-hosted website, leveraging standard web technologies and social media platforms such as Instagram, Facebook, and X for outreach. Technically, the website is built on the Squarespace platform, utilizing Google Fonts and Google reCAPTCHA for form security. The site is mobile-optimized with moderate performance and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. Security posture is strong with HTTPS enforced and HSTS enabled, though additional security headers could enhance protection. Security evaluation reveals good SSL configuration and use of reCAPTCHA, but lacks published privacy policies, terms of service, and incident response contacts. The absence of WHOIS data due to domain registration errors introduces uncertainty about domain legitimacy, though the website content and branding appear professional and consistent. Cookie consent mechanisms are implemented, indicating some GDPR compliance awareness. Overall, the website is functional and professional but would benefit from improved transparency in privacy and contact information, enhanced security headers, and resolution of domain registration inconsistencies to strengthen trust and compliance.

C

CES Quarry Products Ltd

cesquarryproducts.com

62

CES Quarry Products Ltd is a well-established company founded in 1948, specializing in the supply and delivery of quarry products and construction materials throughout Northern Ireland. The company offers a broad range of products including floor screed, quarry and recycled stone, bituminous surfacing products, ready-mix concrete, building mortar, blocks, bricks, and insulation blocks. With 75 years of industry experience, CES positions itself as a trusted and reliable supplier serving construction professionals and related customers. The website reflects a professional and consistent brand image with multiple physical locations and active social media presence, supporting its market position as a regional leader. Technically, the website is built using modern web technologies such as Gatsby and React, ensuring fast performance, mobile optimization, and good SEO practices. The site uses Google Tag Manager for analytics and tracking but lacks a cookie consent mechanism, which may impact GDPR compliance. The absence of WHOIS registration data for the domain is a notable concern, as it conflicts with the company's long business history claim and reduces domain trustworthiness. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide visible incident response or vulnerability disclosure information. The overall security posture is good but could be improved with additional best practices and transparency. Overall, CES Quarry Products Ltd presents a credible and professional online presence with room for improvement in privacy compliance and domain registration transparency. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and verifying domain registration details to enhance trust and compliance.

D

Dant Y Coed Dental Practice

dantycoeddentalpractice.co.uk

55

Dant Y Coed Dental Practice is a UK-based dental clinic offering a wide range of dental services including general dentistry, cosmetic treatments, dental implants, Invisalign, and facial rejuvenation. The practice emphasizes high-quality care and affordable payment plans, targeting patients seeking reliable dental services. The website is professionally designed using WordPress and Elementor, featuring detailed team profiles and service descriptions. Social media integration with Facebook and Instagram enhances their digital presence. Technically, the site uses modern web technologies and plugins, with SSL enabled ensuring secure connections. However, the absence of visible privacy and cookie policies and lack of security headers indicate areas for improvement in compliance and security posture. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site presents a credible and professional dental practice with moderate technical maturity and good business credibility.

M

MPA Accounting

mpaaccounting.co.uk

51

MPA Accounting is a small, island-based accounting firm specializing in accounting, bookkeeping, payroll, and tax-related services for sole traders, limited companies, partnerships, and individuals primarily in the Isle of Wight area. The company emphasizes personalized customer service and offers a range of specialized services including VAT returns, self-assessment, and construction industry scheme compliance. Their market position is that of a trusted local specialist with an AAT qualified team and positive client testimonials. Technically, the website is built on WordPress using popular plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though some security headers and incident response information are missing. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve in security best practices and transparency. The domain is long-standing and consistent with the business history, supporting legitimacy.

Cerberus Services Ltd is a UK-based company specializing in bespoke car parking and perimeter security solutions. Their offerings include barriers, car park counting systems, ANPR, gates, access control, and turnstiles, targeting businesses and organizations requiring physical security enhancements. The website presents a professional and consistent brand image with clear navigation and relevant content focused on their security engineering services. However, the domain www.cerberus-services.co.uk is not registered according to Nominet UK WHOIS data, indicating a potential discrepancy or misconfiguration in domain registration. Technically, the website uses standard web technologies such as Bootstrap and jQuery, with moderate performance and good mobile optimization. There is no evidence of advanced CMS or hosting provider details. Security posture is weak due to lack of HTTPS, absence of security headers, and no visible security policies or incident response information. Privacy compliance is minimal with no cookie consent mechanism detected, although privacy and terms pages exist. Overall, the website is functional and business-focused but suffers from critical security and legitimacy issues related to domain registration and lack of HTTPS. These issues pose risks to user trust and data protection. Strategic improvements in security infrastructure, domain registration validation, and privacy compliance are recommended to enhance credibility and reduce risk.

E

Euroflo Group Limited

euroflogroup.co.uk

47

Euroflo Group Limited is a specialist engineering contractor operating primarily within the UK construction industry, focusing on commissioning and water treatment services. Established in 2008, the company serves mechanical installation contractors, managing contractors, supervising engineers, and direct clients. Their service portfolio includes precommission cleaning, HVAC commissioning, water system disinfection, chemical and equipment supply, Legionella risk assessments, and system validation. The company has expanded into Europe with a subsidiary, Euroflo BV, reflecting growth in the data centre market. The website is professionally designed, mobile-optimized, and provides clear contact information and trust indicators such as industry certifications. Technically, the site runs on WordPress with standard libraries like jQuery and Bootstrap, delivering moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. No incident response or vulnerability disclosure information is available, indicating room for improvement in transparency and security maturity.

A

A & D Door Systems Ltd

addoorsystems.co.uk

43

A & D Door Systems Ltd is a well-established family-owned business specializing in the installation, repair, and maintenance of industrial and commercial doors, roller shutters, and security systems across the UK. With over 25 years of experience, the company offers a comprehensive range of products and services including emergency 24/7 repair, multi-site contracts, and tailored maintenance plans. Their market position is strengthened by strong customer loyalty, certifications, and a focus on quality and service. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating modern technologies such as Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS with good SSL configuration but lacks some security headers that could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a comprehensive privacy policy present but no visible cookie consent mechanism. Contact information is clear and comprehensive, supporting business credibility. Overall, the website presents a professional and trustworthy front for the business, though improvements in security headers and privacy compliance would enhance its posture. The WHOIS data is unavailable due to querying the 'www' subdomain, but the website content and business information indicate legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, and enhancing incident response transparency.

A

Academic Day Nursery

twinkletotsdaynursery.co.uk

62

Academic Day Nursery is a small, well-established childcare provider located in Stoke Newington, London, serving families with children aged 6 months to 5 years. The nursery has a good reputation supported by an Ofsted 'Good' rating and offers a range of childcare services including baby, toddler, and preschool rooms, outdoor activities, and government funding options. The website is professionally designed with clear navigation and contact information, targeting local parents seeking quality childcare. Technically, the site uses modern JavaScript libraries and analytics tools, hosted likely via Yell.com's platform, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and CAPTCHA-protected forms, but lacks some advanced security headers and explicit security policies. WHOIS data is unavailable due to domain registration constraints, which slightly reduces trustworthiness from a domain perspective but does not detract from the business legitimacy evident on the site. Overall, the site is safe, professional, and trustworthy for its intended audience.

J

Jazzclub Moods

moods.club

62

Jazzclub Moods operates a well-established concert venue in Zurich, specializing in jazz, world, funk, soul, pop, and electro music. The venue hosts almost daily concerts and offers extensive video-on-demand content and live streaming services, positioning itself as a cultural hub in the region. The website reflects a mature digital presence with a modern tech stack including Next.js and React, integrated with analytics and booking widgets to support event management and user engagement. Security measures such as HTTPS, security headers, and reCAPTCHA are implemented, indicating a good security posture. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is professional, trustworthy, and well-optimized for its audience.

S

Sanderson Decorators Ltd

casanderson.co.uk

47

Sanderson Decorators Ltd is a small, local painting contractor business based in Leicester, United Kingdom, specializing in residential, commercial, and industrial painting and decorating services. The website presents a professional and consistent brand image with a clear focus on its core services and target audience. The domain has been registered since 2001, indicating a well-established presence in the market. Technically, the website uses modern web fonts and iconography, including Google Fonts and Font Awesome, and integrates Google Tag Manager for analytics. However, there is no evidence of advanced frameworks or platforms beyond a proprietary CMS (GYOLCMS v3.8.11). Security posture is limited, with no detected security headers or explicit SSL/TLS configuration details in the provided data. Privacy and cookie policies are absent, which may impact compliance with GDPR and user trust. Overall, the website is functional and relevant but would benefit from enhanced security and privacy practices.

Cars Garage Limited operates as a local automotive repair and servicing business based in Drighlington, West Yorkshire, UK. The company offers a range of car repair and servicing solutions targeting local car owners. The website presents basic business information and services but lacks comprehensive contact details and formal policies. The market position appears focused on local clientele with a small business scale. Technically, the website uses a basic CMS (W4UCMS) and integrates common web technologies such as Google Fonts, Google Analytics, Google Tag Manager, and reCAPTCHA for bot protection. The site is mobile-optimized with moderate performance but lacks advanced frameworks or hosting details. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented; however, no security headers were detected, and privacy compliance is minimal due to missing privacy and cookie policies. The domain WHOIS data indicates the domain is not registered or invalid under Nominet UK rules, raising legitimacy concerns. Overall, the website is functional but requires significant improvements in security, privacy compliance, and business transparency to enhance trust and professionalism.

T

Three Pears Brands | International Fragrance, Skin and Personal Care Supplier

threepears.co.uk

51

Three Pears Brands is a UK-based company specializing in international fragrance, skin, and personal care products. Established in 1973, the company has evolved from a distribution powerhouse into a leading brand partner, focusing on brand licensing, brand management, and manufacturing. They serve major retail partners such as Tesco, Morrisons, Superdrug, and B&M, bridging the gap between world-class intellectual property and retail shelves. The website reflects a mature digital presence with professional design, clear navigation, and modern technology stack including WordPress, WooCommerce, and Elementor. Technically, the website is well-structured, mobile-optimized, and uses secure HTTPS connections. However, it lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and user trust. The WHOIS data for the domain is unavailable due to a domain registration error, which raises some concerns about domain legitimacy despite the professional business presence. Security posture is generally good with HTTPS and no visible vulnerabilities, but improvements are recommended in security headers and privacy compliance. Overall, the website presents a trustworthy and professional business front, but domain registration inconsistencies and missing compliance documents should be addressed to enhance credibility and reduce risk.

C. Brumpton Butchers Ltd is a longstanding family-run butcher business operating in Nottingham with physical stores in Cotgrave and West Bridgford. The company emphasizes quality, local sourcing, and traditional recipes, offering a wide range of meat products and home-baked goods. Their website serves primarily as an informational platform showcasing their offerings and contact details, supported by a professional design and embedded promotional video. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile responsiveness. Security posture is solid with HTTPS and anti-spam measures, though it lacks advanced security headers and formal privacy policies, which are areas for improvement. The domain WHOIS data is unavailable due to a registration error, which raises some concerns about domain legitimacy from a technical standpoint but does not detract from the business's apparent authenticity. Overall, the website is functional, professional, and safe for general audiences.

The Finchley Vet is a small veterinary clinic based in Finchley, London, providing pet healthcare services to the local community. The website is built on WordPress using the Divi Builder theme and incorporates common web technologies such as Google Fonts, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. The domain is registered with a reputable UK registrar since 2015, consistent with the business's operational timeline. The website design and user experience are good, with basic mobile optimization and clear navigation. However, the content quality is basic, lacking comprehensive business and compliance information such as privacy and cookie policies. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks security headers and incident response details. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

G

Garnetts Gardens

garnettsgardens.co.uk

49

Garnetts Gardens is a well-established, family-run retail plant nursery located in Hacheston, United Kingdom. Founded in 1994, the business has expanded from a small shed to a comprehensive garden centre offering a farm shop, café, gift area, and caravan site. The website reflects a local community focus with services tailored to gardening enthusiasts and local customers. The business model centers on retail and hospitality services with a strong emphasis on homegrown plants and knowledgeable customer support. Technically, the website is built using the Site.pro website builder platform, incorporating standard JavaScript libraries and Google Fonts. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. The website is accessible without any WAF or security challenges, indicating good availability. From a security perspective, the site uses HTTPS but lacks important security headers and policies such as privacy, cookie, and terms of service documents. There is no evidence of advanced security frameworks or incident response mechanisms. The site collects minimal user data via a simple Google Maps directions form but does not implement consent mechanisms or privacy compliance features. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment suggests a legitimate small business website with moderate technical maturity and some compliance gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and enhancing data protection practices to improve trust and compliance.

Boward is a small treesurgery business operating a WordPress-based website focused on gardening and tree care content. The site features a blog authored by 'Jack Boomer' with posts dating from 2022. The business appears to be a local or small-scale service provider with no evident parent company or subsidiaries. Technically, the website uses standard WordPress technologies including jQuery and several JavaScript libraries for UI enhancements. Hosting is provided by OVH, a reputable provider. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. No contact emails, phone numbers, or social media links are provided, which limits business credibility and user trust. WHOIS data is consistent with the business profile, showing domain registration in 2022 with OVH. Overall, the website is functional and content-rich but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and compliance.

The website www.lunson-mitchenall.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup failed with an error indicating the domain cannot be registered due to naming rules violations, suggesting the domain may be invalid or misconfigured. No business information, contact details, or policies are available on the site. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern security headers, HTTPS information, or analytics. The overall security posture is poor due to lack of accessible content and missing security best practices. This results in a very low trust and legitimacy score for the domain and website.

Owens & Minor is a well-established healthcare logistics and supply chain company providing distribution and supply chain management services primarily to healthcare providers such as hospitals and clinics. The company operates at an enterprise scale with a strong market position in the United States. Their website reflects a professional and consistent brand image, targeting healthcare supply chain professionals and organizations. Technically, the website is built on WordPress with modern frameworks like Bootstrap and optimized for performance and mobile devices. Security posture is strong with HTTPS enforcement and appropriate security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website and business appear credible and trustworthy, though the absence of WHOIS data is a notable anomaly that warrants further verification.

The website www.georgeshairdressing.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or service content. The WHOIS lookup failed to find any registration data for the domain, indicating it may be unregistered or the data is not publicly available. The site contains no metadata, no forms, no contact information, and no privacy or cookie policies, which severely limits any meaningful analysis of the business or its digital presence. Technically, the site only loads Google Fonts and lacks HTTPS confirmation or security headers, indicating a poor security posture. Overall, the site appears inactive or improperly configured, posing a high risk for trust and credibility.

W

Wembley Mini Cabs

wembleycab.com

55

Wembley Mini Cabs is a small transportation service provider based in the United Kingdom, specializing in minicab, minibus, and airport transfer services in the Wembley area. The company positions itself as a reliable alternative to traditional taxi services, emphasizing safety, professionalism, and customer convenience. The website supports online booking through a partner platform and offers mobile apps for Android and iPhone users, enhancing digital accessibility. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, Google Fonts, and Font Awesome icons. The site is mobile optimized with a responsive design and clear navigation, though no advanced CMS or frameworks are detected. Performance is moderate with no visible analytics or tracking scripts, indicating a privacy-conscious approach or minimal digital marketing. From a security perspective, the site uses HTTPS as indicated by canonical URLs but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data for the domain is a notable concern, suggesting possible domain registration issues or privacy protection that is not publicly disclosed. No incident response or security policies are published, and no vulnerability disclosures or certifications are evident. Overall, the website is professional and trustworthy in content and presentation but would benefit from improved transparency in domain registration, enhanced security headers, and privacy compliance features. Strategic recommendations include implementing cookie consent, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

W

Wilkes-Green + Hill Ltd

wilkesgreenhill.co.uk

59

Wilkes-Green + Hill Ltd is an independent, award-winning estate agency based in Penrith, Cumbria, established in 1996. The company specializes in property sales, lettings, valuations, and landlord/tenant services, targeting local property buyers, sellers, landlords, and tenants. The website reflects a professional and trustworthy business with clear branding, comprehensive service descriptions, and multiple trust indicators including certifications and customer testimonials. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Swiper.js, and Google reCAPTCHA v3, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a credible and professional digital presence for a small real estate business.

D

Dream Days Bridal Wear Ltd.

dreamdaysbridalwear.co.uk

62

Dream Days Bridal Wear Ltd. is a small retail bridal boutique located in Dudley, UK, specializing in wedding dresses, plus size bridal wear, and mother of the bride outfits. The business operates primarily on an appointment-only model, offering personalized and in-house alteration services. The website reflects a professional and customer-focused approach with clear communication about COVID-19 policies and appointment scheduling. Technically, the site is built on the Webflow platform, leveraging modern web technologies and integrating Google Analytics and Tag Manager for marketing insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. The WHOIS lookup failed due to domain naming rules issues, which raises some concerns about domain registration legitimacy, though the website content and business information appear trustworthy. Overall, the site scores well in business credibility and content quality but should improve security and privacy compliance to enhance trust and regulatory adherence.

T

The Doughnut (W)Hole

thedoughnutwhole.com

45

The Doughnut (W)Hole website represents a creative or artistic project launched in 2025, as indicated by the domain registration date and content references. The site features multimedia content including embedded Vimeo videos and uses Google Tag Manager for analytics tracking. The technical infrastructure is based on the Cargo CMS platform, with Google Fonts for typography. The website design is basic with moderate branding consistency and limited textual content, targeting a general audience interested in art or culture. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, indicating a gap in compliance. No contact information or incident response details are provided, limiting business credibility and transparency. Overall, the site is safe and accessible without WAF or blocking mechanisms.

Clan & Plant Tools Ltd, part of the Emergency One Group, is a UK-based company specializing in the supply of equipment and manufacturing of emergency vehicles, including fire engines and rescue vehicles. The company targets a broad audience ranging from large organizations to private individuals, positioning itself as a reputable supplier in the transportation and emergency services sector. The website reflects a professional business presence with detailed product offerings and a clear brand identity aligned with its parent group. Technically, the site is built on WordPress using modern plugins such as Elementor and WooCommerce, ensuring a flexible and scalable platform. SEO and structured data implementations are well executed, enhancing search visibility and content clarity. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. Overall, the website is functional, professional, and trustworthy, but could benefit from enhanced privacy compliance and security hardening to meet best practices and regulatory requirements.

Sycamore Park is a UK-based hospitality business specializing in providing an adult-only site for touring caravans and motor homes. Established in 2013, it caters to a niche market of adult caravan and motor home users seeking a dedicated and peaceful environment. The website is built on WordPress using Elementor, indicating a moderate level of digital maturity with a focus on user-friendly design and mobile responsiveness. However, the site lacks critical privacy and cookie policies, which are essential for GDPR compliance and user trust. Security posture is moderate with no evident security headers or incident response information, suggesting room for improvement in protecting user data and enhancing trust. Overall, the business appears legitimate with a consistent domain registration history, but the website would benefit from enhanced security and privacy measures to align with best practices and regulatory requirements.

C

Claridge Interiors

claridgeinteriors.co.uk

65

Claridge Interiors is a UK-based small business specializing in interior design and home renovation services, including kitchens, bathrooms, bedrooms, and offices. The company emphasizes a collaborative design-to-build process and leverages over 30 years of experience to deliver high-quality workmanship and customer satisfaction. Their website reflects a professional and consistent brand image with clear contact information and customer testimonials that enhance trust. Technically, the website is built on WordPress using modern technologies such as Bootstrap 4, jQuery, and FontAwesome. It is mobile-optimized and includes SEO best practices. Google Analytics is implemented for user tracking and external link event monitoring. However, some security best practices like security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS with a good SSL configuration and secure forms. There are no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are present, indicating some level of GDPR compliance, though the absence of a cookie consent banner is a gap. No incident response or security policy information is publicly available. Overall, the website is trustworthy and professionally maintained with a good security posture for a small business. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance compliance and user trust.

The website www.pelc.nhs.uk currently serves a 403 Forbidden error page, indicating that access to the content is restricted or blocked. The domain itself is invalid according to the WHOIS data, as it contravenes Nominet UK's naming rules due to having too many parts, and thus cannot be registered. This suggests that the domain is likely a subdomain or alias rather than a standalone registered domain. Consequently, no registrant or registration details are available. The website lacks any visible business information, contact details, privacy or cookie policies, or terms of service. Technically, the site uses Google Fonts but no other detectable technologies or scripts. Security headers and SSL configuration details are not provided, and no analytics or tracking services are detected. Overall, the site is inaccessible for meaningful content or business analysis beyond the error page.

A

Apodi

apodi.co.uk

60

Apodi is a UK-based healthcare services provider specializing in facilitating access to medicines and healthcare services, primarily serving pharmaceutical companies, healthcare professionals, and patients. Their offerings include market insight services, specialist healthcare professional (HCP) services, homecare, recruitment, HR and development, and a patient portal. The company positions itself as a trusted partner with strong industry certifications and a focus on improving patient outcomes through innovative healthcare solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI/UX enhancement libraries. It is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Analytics tools such as Google Analytics and planned LinkedIn analytics are integrated with user consent. However, some security best practices like security headers are not visibly implemented, representing an area for improvement. From a security perspective, the site uses HTTPS with a strong SSL configuration and does not expose sensitive data. The cookie consent mechanism and privacy policy indicate good privacy compliance. The absence of a dedicated security policy or incident response contact reduces transparency. WHOIS data for the domain is unavailable or indicates the domain queried is not registered, which slightly impacts trust from a domain legitimacy standpoint but does not detract from the professional presentation and certifications. Overall, Apodi's website demonstrates a solid business and technical foundation with good security and privacy practices. Strategic improvements in security headers, incident response transparency, and domain registration clarity would enhance trust and security posture further.

C

CDS Co operatives

cds.coop

59

CDS Co-operatives is a charitable community benefit society based in the UK, established in 2001, focused on supporting co-operative and community enterprises. The website uses WordPress with the Divi theme and includes cookie consent mechanisms via CookieYes, indicating a basic level of digital maturity. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website content is safe and targeted at a general audience interested in co-operative development.

Coe Fabrications is a small manufacturing business specializing in bespoke steel fabrication services including metal gates, railings, balconies, handrails, and staircases primarily serving the Essex and London areas. The company emphasizes over 45 years of experience in the industry, targeting residential and commercial property owners seeking custom metalwork solutions. The website is built on WordPress with a modern theme and includes Google Tag Manager for analytics. While the site is well-structured and mobile-optimized, it lacks visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing key security headers and vulnerability disclosures. The WHOIS data is unavailable and inconsistent, which raises concerns about domain legitimacy despite the professional appearance of the website.