Security Directory

J

James Fisher and Sons

fendercare.com

74

James Fisher and Sons operates as a specialist provider in the maritime transport industry, serving sectors such as defence, oil and gas, ports, construction, and renewables. The company offers a range of marine market products and bespoke solutions tailored to the global marine industry. The website reflects a professional and consistent brand presence targeting specialized maritime customers. Technically, the site employs modern tracking and analytics tools including Google Analytics, Microsoft Clarity, and LinkedIn Insight, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as lack of contact information, suggests gaps in compliance and user engagement. Security posture is moderate with no explicit security headers or policies detected, and WHOIS data is unavailable, raising concerns about domain registration transparency. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and contact disclosures to improve trust and compliance.

The website www.yorkhandmade.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism preventing normal content retrieval. The domain WHOIS lookup failed due to the domain name being invalid per Nominet UK naming rules, which further questions the legitimacy or proper configuration of the domain. No business-related content, contact information, or policies are accessible, limiting the ability to assess the company's market position or services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or SSL configuration details in the provided data. Overall, the site’s security posture is minimal beyond bot protection, and the lack of accessible content results in a low trust and credibility score.

O

O.I.W (Steels) Limited

oiwsteels.co.uk

40

O.I.W (Steels) Limited is a family-run steel manufacturing business established in 1945, operating primarily in the UK. The company specializes in steel products and fabrication services, targeting businesses and individuals requiring steel supplies. The website reflects a professional and consistent brand presence, with clear contact information and social media integration. Technically, the site is built on WordPress using the Avada theme, leveraging jQuery and Facebook SDK for social media features. The site is secured with HTTPS and shows moderate performance and mobile optimization. However, the absence of key security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional website content. Overall, the site presents a trustworthy business front but should address technical and compliance gaps to enhance security posture and regulatory adherence.

Stuart Jones is a well-established handmade furniture manufacturer based in Sussex, United Kingdom, with over 40 years of experience specializing in upholstered headboards and a distinctive range of furniture. The company targets consumers and businesses seeking quality handcrafted furniture, positioning itself as a specialist with a strong reputation for craftsmanship and quality. The website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. However, the site lacks key compliance documents such as privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is generally good with HTTPS enabled, but the absence of security headers and incident response information suggests room for improvement. Overall, the domain age and WHOIS data strongly support the legitimacy of the business, and the presence of verified contact information and social media links enhance credibility.

N

Newman Business Solutions

hbbm.co.uk

66

Newman Business Solutions is a UK-based business systems consultancy specializing in print and document management, IT solutions and support, telecoms, visual display systems, and speech processing technologies. The company targets businesses primarily in the South East of the UK, offering integrated workplace technologies and tailored business process improvements. Their market position is that of an established regional supplier with over 40 years of industry experience, supported by positive customer reviews and a professional online presence. Technically, the website is built on WordPress with modern plugins such as WPBakery, Slider Revolution, and Yoast SEO, indicating a mature digital infrastructure. The site is mobile-optimized and uses HTTPS with no visible security vulnerabilities in the front-end code. However, some security headers are missing, and privacy compliance documentation is not evident. From a security perspective, the site enforces HTTPS and uses anti-spam measures but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. The WHOIS data for the exact domain queried is unavailable due to a naming rules error, which raises some concerns about domain registration legitimacy, though the website content itself appears professional and trustworthy. Overall, the website presents a solid business offering with good technical implementation but should improve privacy compliance and security header implementation. The domain registration anomaly should be investigated further to ensure full legitimacy and trustworthiness.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Spratley's of Mortimer is a well-established, family-run automotive service and sales business located in Mortimer near Reading, Berkshire. The company specializes in car servicing, MOT testing, repairs, and used car sales, with a particular focus on Vauxhall vehicles. Their market position is that of a trusted local garage with over 60 years of experience and multiple industry certifications, serving a broad local customer base. The website provides comprehensive information about their services, pricing, and community involvement, reflecting a customer-centric approach without aggressive sales tactics. Technically, the website employs standard web technologies such as jQuery, Bootstrap, and a camera slideshow plugin, with a cookie consent mechanism in place. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, there is no evidence of advanced CMS or hosting details, and performance is moderate. Security headers and SSL configuration details are not visible, indicating room for improvement in security hardening. From a security perspective, the site shows basic compliance with privacy regulations, including a privacy policy and cookie consent banner. No explicit security policies or incident response contacts are found, and no vulnerabilities or tracking analytics are detected. The WHOIS lookup failed due to an invalid domain query including the 'www' prefix, but the website content aligns with a legitimate business. The lack of WHOIS data reduces the trust score somewhat but does not indicate malicious intent. Overall, the website is professional, trustworthy, and compliant with basic privacy standards. Strategic improvements in security headers, SSL configuration, and incident response transparency would enhance the security posture and trustworthiness further.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Unitron is a well-established hearing aid brand operating under the Sonova group, offering intelligent hearing solutions tailored to users' lifestyles. The website targets German-speaking consumers and professionals in the hearing health sector, providing product information, online hearing tests, and professional resources. Technically, the site is built on Adobe Experience Manager, employs modern analytics and consent management tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and standard best practices, though explicit security policies and incident response contacts are not visible. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and legitimacy of the business. Strategic recommendations include publishing clear privacy and security policies, adding vulnerability disclosure information, and enhancing transparency around data protection.

Coastline Veterinary Surgery - Carlton Colville is a small animal veterinary practice established in 1992, operating under the CVS Vets brand. The practice offers a range of veterinary services including surgery, treatment, routine check-ups, and emergency support, targeting pet owners in the Carlton Colville and Lowestoft area. The website is professionally designed, mobile-optimized, and provides clear contact information and service details. Technically, the site leverages modern technologies such as React and integrates analytics and monitoring tools like Google Analytics and New Relic, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the site presents a trustworthy and professional image with good compliance to privacy standards.

Gloucestershire County Council operates as the official local government authority for Gloucestershire, UK, providing a broad range of public services including education, highways, social care, and environmental management. The website serves residents and businesses with comprehensive information and interactive tools, reflecting a strong community focus and public service mission. Technically, the site employs modern web technologies and analytics tools, ensuring good performance, accessibility, and user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response disclosures. Overall, the domain and website exhibit high legitimacy and trustworthiness consistent with a government entity.

I

Home | Inner London Cleaning

innerlondoncleaning.co.uk

54

The website www.innerlondoncleaning.co.uk appears to be a small business site built using the Wix platform, presumably offering cleaning services in Inner London. However, the domain WHOIS lookup failed due to a naming rules violation, indicating the domain is not properly registered or is invalid. The website content is minimal with no visible contact information, privacy policies, or terms of service, which limits trust and credibility. Technically, the site uses standard Wix scripts and polyfills, with moderate performance and basic mobile optimization. Security posture is weak with no detected security headers or advanced configurations. Overall, the site lacks essential compliance and trust elements, posing a risk to users and limiting business credibility.

C

City Physiotherapy Portsmouth

city-physio.net

53

City Physiotherapy Portsmouth is a small, established physiotherapy clinic based in Southsea, Portsmouth, offering expert treatment for back pain, neck pain, sports injuries, and other musculoskeletal issues. The business has been operating since 1994 and targets local residents seeking physiotherapy services. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. However, the domain WHOIS data is unavailable, raising questions about domain registration legitimacy. The site uses HTTPS and Google Tag Manager for analytics but lacks privacy and cookie policies, which impacts GDPR compliance. No security headers were detected, indicating room for security improvements.

C

Clapton Country Club

claptoncountryclub.co.uk

65

Clapton Country Club is a small hospitality business located in East London, specializing in unique event venue services including weddings, private events, photoshoots, and creative industry gatherings. The venue emphasizes its distinctive upcycled interior design and offers food and fine wines with an ethical focus. The website is professionally designed, providing clear navigation and multiple contact channels including email, phone, and a newsletter signup form. Technically, the site is built on the Duda platform, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and Snowplow. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers are not explicitly detected and cookie consent mechanisms are absent. The WHOIS lookup for the www subdomain failed due to a naming rule violation, but this is a known limitation and does not detract from the site's legitimacy. Overall, the site presents a trustworthy and professional digital presence for a niche hospitality venue.

F

Friends Jewellers

friendsjewellers.com

45

Friends Jewellers is a small, family-owned retail jewellery business based in Birmingham, UK, specializing in 22ct gold and diamond jewellery with bespoke services and reproduction of sentimental pieces. The company has a strong local market presence supported by customer testimonials and recognized certifications. The website is built on Joomla CMS with modern front-end technologies and includes essential features such as contact forms protected by Google reCAPTCHA and cookie consent mechanisms. Security posture is adequate with HTTPS enforced but could be improved by adding more security headers and publishing a security policy. The absence of WHOIS data for the domain is a concern for domain legitimacy and should be investigated further. Overall, the website presents a professional and trustworthy image with good user experience and privacy compliance.

Grainger & Worrall is a well-established UK-based company specializing in complex aluminium sand casting and machining services, serving demanding industries such as automotive, aerospace, and defence. With over 70 years of experience and a strong market position as a subsidiary of Evolution Castings Group Limited, the company offers a comprehensive range of services from engineering and prototyping to machining and validation. Their website reflects a professional and modern digital presence, leveraging WordPress CMS and integrating multiple marketing and analytics tools to support business growth and customer engagement. The technical infrastructure is solid, hosted by Hosting UK, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, with cookie consent implemented but lacking detailed GDPR indicators and security policies. Overall, the website is trustworthy, well-branded, and effectively communicates the company's expertise and contact channels.

F

Forterra

forterra.co.uk

66

Forterra is a leading UK manufacturer specializing in essential clay and concrete building products, including bricks, blocks, precast concrete, façade systems, and roofing components. The company holds a strong market position with iconic brands such as London Brick and Thermalite, serving construction professionals, architects, and developers. Their business model focuses on manufacturing and direct supply, supported by technical resources and customer portals to enhance client engagement. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, Google Tag Manager, and Pardot for marketing automation. The site demonstrates excellent mobile optimization, SEO, and performance, with comprehensive privacy and cookie consent mechanisms in place. Security measures include HTTPS, Google reCAPTCHA v3, and cookie consent, though some security headers could be further enhanced. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is noted. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, but website content and business information strongly indicate legitimacy and an established presence. Overall, Forterra's website reflects a professional, secure, and compliant digital presence aligned with its business stature. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

O

Origin Digital Ltd

dreamleagues.co.uk

56

Dream Leagues is a London-based organizer of amateur football and netball leagues, offering a variety of small-sided football formats and additional services such as pitch hire, kids parties, and corporate events. The company targets amateur sports enthusiasts in London, providing professionally organized matches on high-quality pitches with FA qualified referees. The website reflects a well-structured business with a clear focus on community sports and family-friendly activities. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, indicating a moderate level of digital maturity. The site is mobile optimized and includes a dedicated mobile app, enhancing user engagement and accessibility. However, some technical improvements are recommended, such as implementing security headers and cookie consent mechanisms to improve compliance and security posture. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and privacy compliance features. The WHOIS data reveals that the domain 'www.dreamleagues.co.uk' is not registered, which is a significant concern for domain legitimacy and trust. Despite this, the website content is professional and trustworthy, suggesting the domain discrepancy may be due to a subdomain or alternate domain usage. Overall, the website presents a credible and professional front for an amateur sports league organizer but should address domain registration issues and enhance security and privacy compliance to strengthen trust and reduce risk.

Logistics People is a UK-based logistics recruitment provider that has recently transferred its business operations to Staffline, the UK's largest recruitment solutions partner. The website currently serves as a maintenance/transition page informing visitors of this change and directing them to Staffline's main site for continued services. The business focuses on providing recruitment and workforce solutions in the logistics sector, targeting both job seekers and clients. Technically, the website is built on WordPress with jQuery and uses a maintenance plugin to display the transition message. The site is accessible without any WAF or security challenges but lacks comprehensive privacy, cookie, and contact information, which limits its compliance and user trust. Security posture is basic with no advanced headers or policies detected, though HTTPS is implied by the URL. Overall, the site is functional but minimal, reflecting a transitional state rather than a fully operational recruitment platform.

G

Grasmere Academy

grasmereacademy.org.uk

59

Grasmere Academy is a primary educational institution positioned as the only primary academy in North Tyneside, UK. The website serves to provide information about the academy's educational services targeting parents and guardians of primary school children. The business model is focused on delivering first-class primary education. The website is built on the Wix platform, leveraging Wix's CMS and hosting services, with a moderate level of technical maturity and mobile optimization. However, the site lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance documentation. The absence of WHOIS data and domain registration irregularities raise concerns about domain legitimacy, although the website content and hosting platform suggest a legitimate presence. Overall, the site is functional but requires improvements in security, privacy, and business credibility to enhance trust and compliance.

S

Simply 2 Let Limited

simply2let.com

52

Simply 2 Let Limited is a small, established property letting and management company based in Great Yarmouth, UK. The company provides dedicated services to landlords and tenants, focusing on local lettings and property management. Their website reflects a professional and consistent brand image with clear contact details and service descriptions. The business appears to have been founded around 2017, aligning with the website's published content dates. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Cookie Consent, with integration of Google Maps API for location services. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks important security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS registration data is a significant concern, impacting the overall trustworthiness of the domain. Overall, the website is functional and professional but would benefit from improved security practices and verification of domain registration to enhance trust and compliance.

H

Hextalls Law

hextalls.com

63

Hextalls Law is a small UK-based legal services firm located in Bishop's Stortford, England. The company offers professional legal solutions targeting individuals and businesses in the region. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS3, and JSON-LD structured data. The site presents a professional design with clear contact information including a UK phone number and physical address, but lacks privacy and cookie policies, which are important for compliance and user trust. The domain WHOIS data is unavailable or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional appearance of the website. Security posture is adequate with HTTPS enforced, but security headers and incident response contacts are missing. Overall, the site is safe for general audiences and provides relevant legal service information but requires improvements in privacy compliance and domain registration transparency.

Cavendish Nuclear, a wholly-owned subsidiary of Babcock International Group, operates as a key player in the nuclear energy, defence, and civil decommissioning sectors. The company provides comprehensive nuclear lifecycle solutions including support for existing reactors, new construction, and advanced nuclear technology development. Their market position is strong within the UK and internationally, supported by strategic contracts and partnerships. Technically, the website is built on WordPress with modern plugins and frameworks, demonstrating good digital maturity and mobile optimization. Security posture is solid with HTTPS and consent management in place, though explicit security policies and incident response details are absent. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall business credibility remains high due to strong branding and professional content.

SRD Organics operates as a global sourcing partner, focusing on organic products and supply chain services. The company appears to be a small-sized business founded in 2012, with a web presence built on WordPress using the Divi theme and WooCommerce for e-commerce capabilities. The website content is basic but professional, targeting a general business audience interested in organic sourcing. Technical infrastructure is standard for small business websites, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but lacks advanced DNS security and security headers, indicating room for improvement in hardening the site. Privacy and compliance policies are absent, which may pose risks in jurisdictions with strict data protection laws. Overall, the website is functional but would benefit from enhanced security measures and clearer privacy disclosures to improve trust and compliance.

B

BAE Systems OneArc

bisimulations.com

66

BAE Systems OneArc is a leading global provider of defense and civilian training and simulation software, delivering synthetic environments that support modern defense needs. The company leverages decades of innovation in simulation, interoperability, and geospatial technology, backed by the scale and trust of BAE Systems. Their product portfolio includes virtual desktop training environments, geospatial tools, image generators, and interoperability solutions, complemented by professional services and training. The website reflects a mature, well-established business with a strong market position and trusted brand identity. Technically, the website is built on a modern WordPress CMS with a robust tech stack including Yoast SEO, Contact Form 7, and GDPR compliance plugins. It is hosted with reputable providers and uses Cloudflare DNS services. The site is fast, mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and shows good security hygiene with no exposed sensitive data. However, it lacks DNSSEC and some advanced HTTP security headers. There is no public security policy or incident response contact, which could be improved to enhance trust and compliance. Overall, the website presents a professional, trustworthy, and compliant digital presence for a large enterprise in the defense technology sector. Strategic improvements in DNS security and explicit security disclosures would further strengthen its posture.

Kingdom Gardens is a UK-based small business specializing in garden design, construction, and maintenance services. The website presents a professional appearance using WordPress with the Divi theme and is optimized for SEO with Yoast. The technical infrastructure is modern and includes HTTPS security, but lacks advanced security headers and privacy compliance mechanisms. No explicit privacy or cookie policies are found, and contact information is not clearly provided in the analyzed content. The website is accessible without WAF or security challenges, indicating no blocking or filtering mechanisms in place. Overall, the business appears legitimate with a domain age consistent with an established presence since 2004.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

King and Moffatt is a well-established Mechanical and Electrical Engineering Contractor operating primarily in the UK, Ireland, and Mainland Europe with over 45 years of experience. The company offers a broad range of services including electrical, mechanical, design and BIM, maintenance and energy services, controls and automation, and offsite prefabrication. Their website reflects a professional presence targeting construction industry clients and partners. Technically, the site is built on WordPress with modern plugins and tools, including Yoast SEO and accessibility features, indicating a moderate to good level of digital maturity. Security-wise, the site uses HTTPS and has no visible exposed sensitive data, but lacks some security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data for the domain is a notable anomaly that warrants further investigation to confirm domain legitimacy. Overall, the website is professional and trustworthy but could enhance its security and privacy compliance posture.

The website www.mrmediagroup.com currently presents only a minimal placeholder page with the text 'Nothing to see here' and lacks any meaningful content, metadata, or business information. The domain WHOIS query returned no registration data, indicating the domain may be unregistered or the WHOIS data is not publicly available. This severely limits the ability to assess the business or technical maturity of the entity behind the domain. Technically, the site lacks HTTPS, security headers, and any detectable technologies or frameworks, reflecting a very low digital maturity level. Security posture is minimal with no evident best practices implemented. Overall, the site appears inactive or abandoned, posing a high risk for trust and legitimacy.

B

Balu Travel

balutravel.co.uk

50

Balu Travel is a small, family-run travel agency based in the United Kingdom with over 60 years of experience. The company offers a range of travel-related services including worldwide flights and holidays, global e-visa processing, National Express coach bookings, and secure money transfer services. Their business model focuses on personalized customer care and competitive pricing, targeting travelers seeking reliable and affordable travel solutions. The website reflects a professional and trustworthy image with clear service offerings and customer testimonials. Technically, the website is built using standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Font Awesome icons. It demonstrates good mobile optimization and user experience with clear navigation and well-structured content. However, no advanced CMS or frameworks are detected, and performance is moderate. There is no evidence of analytics or tracking tools, which may indicate minimal user tracking. From a security perspective, the website lacks visible security headers and privacy or cookie policies, which are important for compliance and user trust. The WHOIS lookup for the domain failed with an error indicating the domain name is invalid per Nominet UK rules, raising concerns about domain legitimacy. No forms or data collection mechanisms are present, reducing risk exposure but also limiting user engagement features. Overall, while the website content and business presentation are strong and professional, critical issues around domain registration and privacy compliance reduce the trustworthiness and security posture. Strategic improvements in domain verification, security headers, and privacy policies are recommended to enhance credibility and compliance.

Carian Interiors Limited is a small, family-run upholstery business based in Stratford upon Avon, UK, with over 20 years of experience. The company offers upholstery and reupholstery services, including custom fabric sourcing and professional recovery for chiropractic and sports massage benches. Recently, they expanded to include an online store for upholstery items and DIY supplies, targeting both local customers and professionals. The website is built on the IONOS Website Builder platform with integrated Ecwid e-commerce functionality, demonstrating moderate digital maturity with good mobile optimization and basic accessibility features. From a security perspective, the website uses HTTPS with a valid SSL certificate and employs a service worker for enhanced performance. A cookie consent banner is present, indicating some level of privacy compliance. However, the absence of detailed privacy, security policies, and security headers suggests room for improvement in security posture. The WHOIS lookup for the domain failed due to naming rules, indicating the domain queried is likely a subdomain or alias rather than a registered domain, which slightly impacts trustworthiness. Overall, the website presents a professional and trustworthy image for a small local business with a growing online presence. The technical infrastructure is adequate but could benefit from enhanced security measures and clearer privacy compliance documentation. Strategic improvements in these areas would strengthen the company's digital trust and compliance standing.

A

ALERT Life Sciences Computing, S.A.

alert-online.com

58

ALERT Life Sciences Computing, S.A. operates ALERT-ONLINE.COM as a professional healthcare software provider specializing in clinical software solutions including Electronic Medical Records (EMR), Health Information Exchange (HIE), and Business Intelligence systems. The company targets healthcare facilities, medical students, and professionals with a comprehensive suite of healthcare IT products and 24/7 support services. Their software is internationally adopted and complies with relevant certifications and standards. Technically, the website is built on Drupal 7 CMS with legacy jQuery and uses common web technologies including Shadowbox.js and Google Analytics. The site is moderately optimized for performance and mobile use, with good SEO and accessibility basics. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and uses outdated JavaScript libraries, which could pose risks. WHOIS data is missing, raising concerns about domain registration legitimacy, though the website content and branding are consistent and professional. Overall, the site presents a credible business front but should improve technical security and clarify domain registration details.

A

ABC Structures Ltd

abcmarquees.co.uk

56

ABC Structures Ltd, operating as ABC Marquees, is a well-established family-run business specializing in marquee hire and event services primarily in Sussex and surrounding counties. With over 30 years of experience, the company offers a comprehensive range of services including marquee hire for weddings, corporate events, and parties, along with accessories, event management, and unique offerings such as ice rink and bar hire. The website reflects a professional and customer-focused approach, targeting event planners and private clients seeking bespoke event solutions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Complianz for GDPR compliance, supported by Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although hosting details are not explicitly identified. Performance is moderate, with a clean and structured design that facilitates user navigation and engagement. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to domain registration errors introduces some uncertainty regarding domain legitimacy, but the website content and business information appear credible and trustworthy. Overall, the site presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers and domain registration transparency would enhance trust and resilience.

Avon Stainless Marine is a specialist supplier focused on stainless steel marine fasteners and fittings, catering primarily to the marine industry including yacht and boat owners. The company operates an e-commerce platform built on Zen Cart, offering a range of marine hardware products. The website is professionally designed with clear navigation and product categorization, targeting a niche market segment in the UK. Technically, the site uses legacy JavaScript libraries and standard e-commerce frameworks, with moderate performance and mobile optimization. Security posture is moderate but impacted by the use of outdated jQuery and lack of visible security headers. Privacy compliance is basic, with a privacy notice present but no cookie consent mechanism. WHOIS data is unavailable due to a domain naming rules error, which raises some concerns about domain registration transparency but does not directly affect the website's operational legitimacy. Overall, the site is functional and credible but would benefit from technical and security improvements.

Krusty Loaf Ltd is a traditional family-run bakery based in Norfolk, UK, specializing in wholesale bakery products including bread, savouries, and confectionery. The company serves local shops with daily fresh deliveries and maintains a retail presence. The website reflects a small business with a clear local market focus and consistent branding. Technically, the site is built on the Weebly platform using standard web technologies such as jQuery and Google Analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS implied, but lacks explicit security headers and privacy policies. The absence of WHOIS data due to query errors limits full domain legitimacy verification, though the website content and contact details support a credible business presence. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

BoredOfChores.co.uk is a small UK-based ironing service operating primarily in the Bromley and Orpington areas. The business offers professional ironing with free local collection and delivery, quick turnaround times, and online booking and payment options. The website content is focused on local residential customers seeking convenience in laundry chores. Technically, the site is built on legacy ASP technology with basic JavaScript and CSS, lacking modern frameworks or CMS. Security posture is moderate with visible SiteLock and Trustwave badges but lacks HTTPS enforcement and security headers. The domain WHOIS data is unavailable due to a domain registration error, which impacts trust and legitimacy perceptions. Overall, the site is functional but would benefit from modernization and improved security practices.

I

IT Scope Solutions Ltd

itscopesolutions.com

61

IT Scope Solutions Ltd is a Nigerian-based IT consulting and technology solutions provider focused on helping businesses leverage technology for growth and innovation. Their services include web design and development, hardware supply, Microsoft Office 365 deployment, networking, outsourcing, and a proprietary user engagement platform called InterAd. The company targets SMEs and larger enterprises seeking digital transformation and IT strategy support. The website is professionally designed, mobile-optimized, and includes client logos from reputable companies, indicating a solid market presence. Technically, the website uses modern frontend technologies such as React, Google Fonts, and Google Tag Manager for analytics. The site is mobile responsive and SEO optimized, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks visible security headers and formal security policies. No privacy or cookie policies were found, which is a compliance gap. WHOIS data is unavailable, which raises concerns about domain registration legitimacy but does not negate the professional presentation and business information on the site. Overall, the security posture is adequate but could be improved by implementing security headers, privacy policies, and incident response information. The absence of WHOIS data reduces trustworthiness and should be investigated. The website content is safe for general audiences with no adult or questionable content detected. The company demonstrates a credible business model with clear contact information and social media presence. Strategic recommendations include enhancing privacy compliance, adding security policies, verifying domain registration, and improving accessibility and security headers to strengthen trust and compliance.

The website www.andersonandco.co.uk currently serves only a placeholder page indicating that a new website is coming soon. There is no substantive business information, contact details, or content describing the company or its services. The domain WHOIS lookup failed due to a naming rules violation, indicating that the domain 'www.andersonandco.co.uk' is not properly registered or is an invalid query of a subdomain rather than a registered domain. The hosting provider is identified as birchhosting.co.uk from the image and link references. Technically, the site lacks HTTPS, security headers, and any modern web technologies or analytics. The security posture is minimal, with no privacy or cookie policies, no contact or incident response information, and no visible security best practices. Overall, the site is not production ready and provides no trust or credibility signals.

P

Parker Plumbing & Heating Services

parkerphs.co.uk

58

Parker Plumbing & Heating Services is a well-established UK-based plumbing and heating contractor with over 30 years of experience. The company offers a comprehensive range of commercial and bespoke domestic plumbing and heating services, operating primarily in the North of England but servicing clients nationwide. Their market position is that of a respected regional contractor with a professional and dedicated approach, employing local apprentices and maintaining high standards of health and safety. The website is built on Squarespace, featuring a professional design with good mobile optimization and clear navigation. Contact information is readily available, including phone, email, and contact forms, supporting customer engagement. Security posture is basic with HTTPS enabled but lacking advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the website presents a credible and trustworthy business presence with a solid technical foundation but could enhance privacy compliance and security policies.

F

Form WS

formws.co.uk

57

Form WS is a UK-based company specializing in office fit out and workplace design services, operating since 2006. The website presents a professional design and targets businesses seeking office refurbishment and design solutions. The technical infrastructure is based on WordPress CMS with common web technologies and third-party integrations such as Google Fonts and Mailchimp. While the site is accessible and functional, it lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance. Security posture is moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement in security best practices. Overall, the website is legitimate and professional but would benefit from enhanced security and compliance measures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Easy Access Self Storage is a UK-based self storage service provider operating since 2006, with multiple locations in Stockport, Manchester, Trafford, and Ashton Under Lyne. The company offers a wide range of storage solutions for personal and business customers, including vehicle and boat storage, archive storage, office and retail units, and workshop spaces. Their market position is that of a local/regional provider with competitive pricing and customer-centric services. The website reflects a mature business with clear branding and consistent messaging. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, leveraging modern web technologies such as Bootstrap and Font Awesome. It integrates Google Analytics and Tag Manager for tracking and marketing purposes. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Hosting is provided by a reputable UK registrar and hosting provider. From a security perspective, the site uses HTTPS with good SSL configuration and security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and serves its business purpose well. Strategic improvements in security transparency and accessibility could further strengthen its posture and customer confidence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

U

Upham Inns

oakmaninns.co.uk

52

Upham Inns operates a collection of premium countryside pubs with rooms across Southern England, targeting travelers seeking authentic rural hospitality experiences. Their offerings include characterful pubs, individually designed bedrooms, and menus focused on seasonal countryside cuisine. The website is built on WordPress with modern plugins and integrates multiple partner domains for booking and dining services. While the technical infrastructure is solid with HTTPS and analytics tools, the site lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with room for improvement in security headers and incident response visibility. Overall, Upham Inns presents a professional and trustworthy online presence aligned with their hospitality business model.

E

| Everyone's wearing it

evoclothing.com

55

The website www.evoclothing.com appears to represent a clothing brand or e-commerce business, as suggested by the website title and domain name. However, the site content is minimal and lacks critical business information such as contact details, privacy policies, and terms of service. The technical infrastructure is based on WordPress with the Divi theme, incorporating standard web technologies including Google Analytics and Google reCAPTCHA for tracking and bot protection. Despite these, the site lacks advanced security headers and comprehensive privacy compliance features. The absence of WHOIS registration data raises concerns about the domain's legitimacy and trustworthiness. Overall, the website presents a basic online presence with significant gaps in security, compliance, and business transparency.