Security Directory

A

Ashton Mill Services Ltd

ashtonmill.co.uk

64

Ashton Mill Services Ltd is a small UK-based company specializing in property clearance, probate valuations, storage, removals, deliveries, and waste disposal services. The company targets local customers in Wiltshire, England, providing personalized and tailored services. The website is professionally designed using the Wix platform, featuring structured data for local business identification and customer trust signals such as aggregate ratings. Technically, the site leverages Wix's hosting and standard web technologies, with moderate performance and good mobile optimization. Security posture is basic, with HTTPS enforced but lacking advanced security headers and explicit privacy or cookie policies. The WHOIS data is unavailable and indicates the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy. Overall, the website presents a trustworthy front for a local service business but requires improvements in privacy compliance and domain registration transparency.

R

RDJ Shutters Ltd

rdjshutters.co.uk

60

RDJ Shutters Ltd is a UK-based small business specializing in bespoke interior window shutters and wooden blinds, serving customers primarily in Hertfordshire but with a national reach. The company emphasizes quality, bespoke service including free home visits, expert advice, and professional measuring and fitting. Their market position is strengthened by accreditation as a Which Trusted Trader and positive client testimonials. The website reflects a professional and trustworthy business with clear contact channels and detailed product offerings. Technically, the website is built on WordPress with a modern tech stack including jQuery, Gravity Forms for data collection, and SEO optimization via Yoast. Hosting is provided by Zen Internet Limited, a reputable UK provider. The site performs moderately well with good mobile optimization and basic accessibility features. Analytics and user behavior tracking are implemented using Google Analytics and Hotjar, indicating a moderate level of digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration and employs basic security best practices such as form validation and spam protection. However, it lacks advanced security headers like Content Security Policy and does not provide a security policy or incident response information. Privacy compliance is partial; a privacy policy and terms of service are present, but no cookie consent mechanism is detected. Overall, the website presents a low-risk profile with strong business credibility and a solid technical foundation. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory adherence.

G

Geeks on Wheels

geeks-on-wheels.com

62

Geeks on Wheels is a well-established IT support company founded in 2003, providing comprehensive IT services including managed IT support, cybersecurity, remote and on-site assistance, and specialized services such as custom gaming PC builds and smart home installations. The company targets both business and residential customers primarily in London and across the UK, positioning itself as a trusted local expert with over 14,000 satisfied clients and strong customer ratings. The website reflects a professional and modern digital presence built on WordPress, leveraging popular plugins and technologies to deliver a fast, mobile-optimized, and user-friendly experience. Security posture is solid with HTTPS and domain transfer protections, though there are gaps in DNSSEC and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site demonstrates high business credibility and technical maturity but should improve privacy and security transparency to enhance trust and compliance.

P

Pulse Films

pulsefilms.com

57

Pulse Films is a London-based media production company specializing in commercials, music videos, documentaries, and feature films. With offices in London and Los Angeles, it serves a global clientele including brands, agencies, artists, labels, broadcasters, and studios. The company has an established market presence since 2009 and offers full-service video production across multiple disciplines. The website reflects a professional brand with consistent messaging and a clear focus on creative media production services. Technically, the website employs modern web technologies including React and Vimeo video embedding, hosted on AWS infrastructure. The site is mobile optimized and SEO friendly, though performance is moderate. The absence of a CMS or analytics scripts suggests a custom-built or minimalistic approach. However, some accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers. No privacy or cookie policies are published, and no incident response or vulnerability disclosure information is available. These gaps reduce privacy compliance and security posture scores. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious content were found. Overall, Pulse Films presents a credible and professional online presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

The website www.zopa.com is currently inaccessible, with the WHOIS query returning no registration data and the HTML content consisting solely of a JSON hash indicating site unavailability. This suggests the domain may be unregistered, suspended, or blocked. Due to the lack of accessible content, no metadata, business information, or contact details could be extracted. The absence of any visible content or security headers indicates a very low digital maturity and security posture. Without access to the site, it is impossible to assess the company's market position, services, or compliance status. The overall risk is high due to the lack of transparency and availability, and the domain's legitimacy is questionable based on WHOIS data.

Camperite Leisure operates as a specialized UK-based e-commerce retailer focusing on tents, camping, and caravan accessories. The website offers a broad range of outdoor equipment with an emphasis on fast and friendly service, including free next-day delivery across the UK. The business targets outdoor enthusiasts, campers, and caravan owners, leveraging Shopify's platform for its online presence. The site is professionally designed with clear navigation and a consistent brand image, supporting multiple payment methods including PayPal and major credit cards. Technically, the website is built on Shopify's Expanse theme and utilizes modern web technologies and third-party marketing and analytics tools. Security posture is solid with HTTPS enforced and secure payment integrations, though explicit security headers and privacy policies are lacking. The WHOIS data is unavailable due to domain naming rules violations, suggesting the domain may be a CNAME or alias to the Shopify domain, which slightly impacts trust but does not detract from the site's professionalism. Overall, the site is a credible and functional e-commerce platform with room for improvement in privacy compliance and security transparency.

The website www.traditionaltuscany.co.uk is currently inaccessible beyond a Cloudflare security challenge page, which prevents direct content access and analysis. The domain WHOIS lookup failed with an error indicating the domain cannot be registered due to naming rules violations, suggesting the domain is not legitimately registered or active. Consequently, no business information, contact details, or policies are available for review. The technical infrastructure relies on Cloudflare's security services, including Turnstile captcha, but no further technology or CMS details are discernible. Security posture is limited to the presence of a Content-Security-Policy header and Cloudflare protection, but the lack of accessible content and WHOIS data severely limits trust and credibility assessments. Overall, the site appears non-operational or placeholder behind a security mechanism, resulting in a low risk profile due to lack of exposure but also very low business credibility and content quality.

Northstar Ventures is a UK-based venture capital firm specializing in investments in early and later stage high growth companies focused on climate technology and healthy ageing. The company positions itself as a forward-looking investor aiming to tackle global challenges through innovation and capital deployment. The website reflects a professional and modern digital presence built on WordPress with Elementor, featuring a clean design and clear navigation. The technical infrastructure includes standard security practices such as HTTPS and security headers, alongside user tracking via Google Analytics. However, the absence of a privacy policy and terms of service pages, coupled with missing verified contact information, indicates gaps in compliance and business transparency. The WHOIS data is notably missing due to a domain registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the security posture is solid but could be improved with enhanced privacy compliance and clearer business contact details.

C

Cygnus

cygnusaircon.com

60

Cygnus is a small local business based in Wales, specializing in air conditioning and electrical services. The company targets local customers and businesses requiring these services. The website is professionally designed using the Wix platform, providing clear navigation and relevant business information. The technical infrastructure leverages Wix's Thunderbolt framework and includes modern JavaScript libraries and error monitoring via Sentry. Security posture is adequate with HTTPS enabled and some security hardening scripts, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy but could improve compliance and security transparency.

B

Belvidere Lifts Ltd

belviderelifts.co.uk

49

Belvidere Lifts Ltd is a UK-based small business specializing in commercial and residential lift and escalator services, including installation, maintenance, repairs, and consultancy. Established in 2004, the company serves clients primarily in Shropshire, the Midlands, and Wales, positioning itself as a leading regional provider with a strong emphasis on quality and tailored customer service. The website reflects a professional and consistent brand image with clear service offerings and multiple trust indicators such as industry certifications and social media presence. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Bootstrap, and popular carousel plugins. It employs Google Analytics and Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good SEO practices but lacks some accessibility features and security headers that could enhance its technical maturity. From a security perspective, the site uses HTTPS with a strong SSL configuration and secure contact forms protected by reCAPTCHA. However, it lacks visible security headers and does not provide a privacy policy or cookie consent mechanism, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture but with room for improvement in compliance and security best practices. Overall, the website is trustworthy and professional, with a good balance of business credibility and technical implementation. The main risks relate to privacy compliance gaps and missing security headers. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence, supporting continued business growth and customer trust.

V

Vapourtec Ltd.

vapourtec.com

62

Vapourtec Ltd. is a UK-based manufacturer specializing in flow chemistry equipment and fast-flow peptide synthesizers, serving a global market of chemists and researchers. With over 22 years of experience, the company holds a strong market position supported by extensive installations worldwide and numerous scientific citations. Their product portfolio includes modular and integrated flow chemistry systems, peptide synthesizers, and chemistry tools, complemented by a comprehensive resource center and customer support. Technically, the website is built on WordPress with modern SEO and analytics tools, including Google Analytics, Google Tag Manager, and HubSpot. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security measures include HTTPS, reCAPTCHA, and anti-spam plugins, though explicit security headers could be enhanced. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the professional web presence mitigates this concern. Overall, Vapourtec presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying domain registration details to improve trust further.

B

Bury Society for Blind and Partially Sighted People

buryblindsociety.org

47

Bury Society for Blind and Partially Sighted People is a small, independent local charity focused on supporting blind and partially sighted individuals in Bury and surrounding areas. The organization offers a range of practical services including early intervention, rehabilitation, befriending, daily living skills, and social activities. It operates primarily through grants, donations, and local fundraising efforts, and is commissioned by Bury Metropolitan Borough Council to provide sensory services for the visually impaired. The website reflects a clear mission and provides useful resources and contact points for its audience. Technically, the website is built on Drupal 10 and uses modern JavaScript libraries such as Modernizr and Enquire.js, indicating a moderate level of digital maturity. The site is mobile optimized and accessible, with good SEO practices and clear navigation. However, there is no visible cookie consent mechanism or comprehensive security headers, which are areas for improvement. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. The absence of security headers and cookie policies slightly lowers the security posture. WHOIS data is unavailable or protected, which is common for small charities but reduces transparency. Overall, the site demonstrates a good level of trustworthiness and professionalism appropriate for a non-profit organization. Strategically, the organization should focus on enhancing its security posture by implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies. Improving WHOIS transparency where possible would also enhance trust. These steps will help maintain compliance and protect the organization and its users better.

C

CiContinuity

adam.co.uk

62

CiContinuity is a UK-based business continuity and disaster recovery service provider with over 20 years of experience, serving both private and public sectors. The company offers a range of backup, recovery, and managed continuity services built on secure UK-sovereign infrastructure, emphasizing compliance and rapid recovery from cyber, IT, and natural disasters. The website is professionally designed using WordPress and Elementor, integrating modern analytics and marketing tools with privacy compliance mechanisms. Security posture is strong with HTTPS and consent-based tracking, though some security headers could be improved. The domain registration is consistent with the business identity, supporting legitimacy. Overall, CiContinuity presents a trustworthy and mature digital presence aligned with its market position.

Harman's Facilities Management is a UK-based small business specializing in on-site facilities management services including catering and cleaning, primarily serving Hull, Yorkshire, and wider UK regions. The company emphasizes tailored solutions, quality fresh ingredients, and proactive service audits, positioning itself as a reliable regional service provider with a strong customer focus. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site uses a custom CMS (itseeze), integrates Google Analytics and Tag Manager with privacy-conscious consent settings, and is mobile responsive with good SEO practices. Security posture is generally good with HTTPS enforced and cookie consent mechanisms, but lacks advanced security headers and public security policies. The WHOIS data for the domain is unavailable due to a domain registration error, which raises concerns about domain legitimacy and reduces overall trustworthiness. Overall, the website is functional, professional, and privacy-aware but would benefit from improved domain registration clarity and enhanced security disclosures.

The website www.hortuslig.co.uk is currently inaccessible, returning a 403 Forbidden error page that denies access to all users. The domain WHOIS lookup failed due to the domain name violating Nominet UK naming rules, indicating the domain is either invalid or improperly registered. No business information, contact details, or website content is available to assess the company's operations or market position. Technically, the site is served by LiteSpeed Web Server but lacks HTTPS and security headers, which are critical for secure web presence. The absence of privacy policies, cookie consent mechanisms, and any form of user interaction further limits the site's digital maturity. From a security perspective, the site shows no evidence of best practices and is effectively non-operational, posing a low trustworthiness risk but also providing no business value or user engagement.

C

Certes IT Service Solutions Ltd

certes.co.uk

60

Certes IT Service Solutions Ltd is a UK-based IT service provider specializing in security solutions and managed IT services primarily for government agencies and federal organizations. With a domain age dating back to 1996 and claims of 40 years of IT expertise, the company positions itself as a trusted partner in mission-critical IT and digital transformation for the public sector. Their key offerings include IT Managed Services, Cyber Security as a Service, Information Assurance, and IT recruitment services. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress 7.0, leveraging modern JavaScript libraries such as jQuery and integrating marketing and analytics tools like HubSpot and Google Analytics. The site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, accessibility features are basic, and performance is moderate, indicating room for optimization. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of reCAPTCHA, and cookie consent with blocking. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust in the cybersecurity domain. No critical vulnerabilities or exposed sensitive data were detected. Overall, Certes.co.uk presents a credible and professional online presence suitable for its target audience in government and public sectors. To enhance compliance and security posture, the company should publish privacy and security policies, incident response information, and consider adding a vulnerability disclosure page. These steps will improve trust and regulatory adherence while maintaining their strong market position.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

Cara Group

caragroup.co.uk

51

Cara Group is a UK-based company established in 2004, specializing in safety, quality, and environmental services primarily targeting businesses in the energy sector. The website reflects a professional business presence with a clear focus on consultancy and service delivery in these domains. The company maintains a stable market position with a long-standing domain and consistent branding. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and FontAwesome, and includes SEO optimization via Yoast. The site is mobile-optimized and performs moderately well, although accessibility features are basic. Security posture is adequate with HTTPS enforced and anti-spam measures in place, but lacks published security policies, incident response contacts, and security headers, which are recommended for improvement. Privacy compliance is partially addressed through a cookie consent mechanism, but the absence of a privacy policy and terms of service pages reduces compliance confidence. Overall, the website is safe, professional, and trustworthy, with room for enhancement in security transparency and privacy documentation.

The website www.buryblackpuddings.co.uk is currently inaccessible, returning a 403 Forbidden error page. The domain WHOIS lookup failed due to a domain naming rules violation, indicating the domain may not be properly registered or is misconfigured. No business information, contact details, or policies are available on the site, making it impossible to assess the company's operations or market position. Technically, the site lacks HTTPS, security headers, and any detectable technologies or analytics, reflecting a very low digital maturity. The security posture is poor due to the lack of accessible content and absence of security best practices. Overall, the site presents a high risk due to inaccessibility and lack of transparency, and it is recommended to verify domain registration status and resolve access issues before any further analysis or engagement.

The website www.grangebanqueting.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS query returned no registration data, indicating the domain may not be registered or WHOIS information is unavailable. Due to the lack of accessible content, no business information, contact details, or policies are present on the site. The technical infrastructure cannot be assessed beyond the error page, and no security headers or SSL information are detectable. Overall, the site appears offline or misconfigured, resulting in a very low trust and credibility score.

S

Scotty's Gates Ltd

scottysgates.co.uk

63

Scotty's Gates Ltd is a small, Bristol-based company specializing in bespoke gates, railings, and metal fabrication services, including installation and servicing of gate automation. The company positions itself as a local specialist with over 15 years of experience and CAME approved gate automation installation credentials. The website is professionally designed with clear navigation and relevant content targeting homeowners and property managers in the Bristol area. Technically, the site uses modern JavaScript libraries such as jQuery, Google Analytics, and Snowplow for analytics, and is hosted on a static CDN platform with moderate performance and basic mobile optimization. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. The WHOIS data is unavailable due to domain registration issues, which slightly impacts trust but the website content and social presence support legitimacy. Overall, the site is a credible digital presence for a small manufacturing business with a focus on quality and customer service.

The website www.altonaids.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. Due to this, no substantive business content, contact information, or policies are accessible for analysis. The domain WHOIS lookup failed because the domain name itself is invalid per Nominet UK naming rules, which further undermines the legitimacy and trustworthiness of the domain. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or SSL information in the provided data. Overall, the site is effectively blocked from normal access, limiting any meaningful security or business analysis.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

W

WorkForce Software

workforcesoftware.com

71

WorkForce Software is an established enterprise software company specializing in workforce management solutions. The company offers software products aimed at optimizing labor management, compliance, and employee engagement for large organizations. The website reflects a professional and consistent brand presence with a focus on B2B services in the technology sector. The domain age and registration details support the legitimacy and maturity of the business. Technically, the website is built on WordPress using Elementor and WP Rocket for performance optimization. It integrates several marketing and analytics tools such as Google Tag Manager, OneTrust for cookie consent, and various ad/tracking pixels. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and trustworthy but would benefit from publishing comprehensive privacy and security policies to improve compliance and user trust. The AI score reflects a solid technical and business foundation with room for improvement in privacy compliance and security transparency.

V

Vanitorials Ltd

vanitorials.co.uk

57

Vanitorials Ltd is a UK-based company specializing in the supply of janitorial and catering cleaning products, operating since 1992. The company targets businesses and organizations requiring cleaning equipment and supplies, positioning itself as an established and trusted supplier in the cleaning industry. Their website serves as an e-commerce platform built on Magento, offering a wide range of products including cleaning chemicals, equipment, healthcare supplies, and PPE. The site is professionally designed with clear navigation and mobile optimization, supporting a B2B business model with a focus on retail distribution.

P

Planteria Group (UK) Ltd

greenteaminteriors.co.uk

57

Planteria Group (UK) Ltd is a well-established UK-based company specializing in interior landscaping, office plant and flower hire, maintenance, and biophilic design services. Founded in 1977, the company has grown through organic expansion and strategic acquisitions, including Green Team Interiors Ltd and Office Landscapes (Midlands) Ltd, positioning itself as a leading provider in the hospitality and real estate sectors. The website reflects a professional and comprehensive digital presence, showcasing their services, certifications, and client partnerships. Technically, the site is built on WordPress with Elementor and employs modern web technologies and performance optimizations, ensuring a fast and mobile-optimized user experience. Security posture is strong with HTTPS, security headers, and compliance certifications such as ISO standards and Cyber Essentials. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, the absence of WHOIS registration data for the domain reduces trustworthiness slightly and should be investigated further. Overall, the website and business demonstrate high professionalism, trustworthiness, and technical maturity.

The website www.sscinc.com is currently inaccessible due to DNS resolution failure and Cloudflare Edge IP restriction (Error 1034). The WHOIS lookup indicates no registration record for the domain, suggesting it is unregistered or inactive. Consequently, no business content, metadata, or security policies are available for review. The only accessible content is a Cloudflare error page with a redirect link to www.ssctech.com, which may be a related or parent site. The technical infrastructure appears misconfigured, preventing normal access and analysis. From a technical perspective, the site lacks any detectable technologies, scripts, or CMS, and no security headers or HTTPS status can be confirmed. The DNS and CDN configuration issues represent critical operational and security risks. No privacy, cookie, or terms of service policies are present, and no contact or business information is available, severely limiting trust and compliance evaluation. Security posture is poor due to the domain's unregistered status, DNS failure, and Cloudflare blocking. There are no indications of vulnerabilities beyond the operational failure. The lack of any business or compliance information further reduces confidence in the domain's legitimacy and readiness for public use. Overall, the site is non-functional and presents a high risk for users attempting to access it. Strategic recommendations include resolving DNS and Cloudflare configuration issues, registering the domain properly, implementing HTTPS and security headers, and publishing comprehensive privacy and security policies to improve trust and compliance.

V

Valve Solutions

valvesolutions.co.uk

68

Valve Solutions is a well-established UK-based supplier specializing in control valves and related products and services for the process industry, with over 25 years of experience. The company holds multiple ISO certifications and serves a global client base including major industry players. Their website reflects a mature digital presence built on WordPress with WooCommerce, offering detailed product and service information. The site includes comprehensive privacy and cookie policies with active consent management, demonstrating good privacy compliance. Security posture is solid with HTTPS and consent mechanisms, though security headers could be improved. WHOIS data for the exact queried domain is unavailable due to a naming rules error, which is unusual but does not detract from the professional appearance and trustworthiness of the website content. Overall, the business appears credible and professionally managed.

Graham Parish Engineering is a small, family-run manufacturing business established in 1986, specializing in CNC machining, structural steelwork, architectural metalwork, and care-home beds. The company operates primarily in Suffolk and the East of England, serving clients requiring bespoke engineering and manufacturing solutions. The website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Yoast SEO, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reputable regional manufacturer.

LeisureGrow Products LTD operates a professional e-commerce website hosted on Shopify, targeting trade, retail, and distribution customers primarily in the UK, Ireland, and parts of Europe. The company positions itself as an innovator in leisure and garden products since 1999, offering a wide range of product lines. The website infrastructure leverages Shopify's platform and associated apps, providing a modern and responsive user experience with secure HTTPS connections and standard security headers. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Additionally, the website lacks visible privacy and cookie policies, which impacts compliance and trust. Contact is primarily facilitated through web forms without direct email or phone contacts displayed.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

Team Netsol Limited

teamnetsol.com

67

Team Netsol Limited is a UK-based technology company specializing in AI-powered no-code platforms, primarily through their flagship product BECS Studio. The platform enables business experts and government organizations to rapidly build and deploy digital services without programming, integrating with key UK government services such as GOV.UK Pay and Notify. Positioned as a Crown Commercial Supplier, Team Netsol targets public sector and customer-focused organizations aiming to improve service delivery and reduce digital transformation costs. The company emphasizes open source technology and GDPR compliance, reflecting a modern approach to software development and data privacy. Technically, the website is built on a modern Webflow CMS platform, leveraging Google reCAPTCHA for form security, Hotjar and Google Tag Manager for analytics, and a cookie consent mechanism compliant with GDPR. The site demonstrates excellent design quality, mobile optimization, and SEO practices, indicating a mature digital presence. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and certifications suggest a legitimate business. From a security perspective, the site enforces HTTPS, uses CAPTCHA on forms, and provides cookie consent with opt-in options. Certifications such as Cyber Essentials Plus and Crown Commercial Supplier status enhance trust. Nonetheless, the lack of a published security policy, incident response information, and vulnerability disclosure reduces transparency and could be improved to strengthen security posture. Overall, Team Netsol presents a professional and trustworthy digital front with strong business and technical foundations. The primary risk lies in the missing WHOIS data, which should be investigated to confirm domain registration legitimacy. Strategic improvements in security transparency and formal policies would further enhance trust and compliance.

S

SAS Metal Fabrication

saintanns.co.uk

61

SASM Fabrication is a UK-based sheet metal manufacturing company with origins dating back to 1960, specializing in laser cutting, CNC bending, welding, and powder coating services. The company positions itself as a quality-oriented manufacturer serving industrial clients, leveraging state-of-the-art fiber laser technology and ISO 9002 accreditation to maintain competitive advantage. Their digital presence is built on a modern WordPress platform with SEO and GDPR compliance features, supported by active social media channels. The website provides clear contact information and service descriptions, targeting B2B manufacturing customers primarily in the UK region. Technically, the website employs a robust WordPress infrastructure with multiple plugins for SEO, anti-spam, GDPR compliance, and user experience enhancements. The site is mobile-optimized and performs moderately well, with good SEO metadata and structured data. Security posture is strong with HTTPS enforced and anti-spam measures, though security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid for a medium-sized manufacturing business, with good privacy compliance and trustworthy domain registration. The domain age is younger than the business founding date, suggesting a recent digital presence establishment or rebranding. No blocking or WAF challenges were detected, allowing full content access and analysis. Strategic recommendations include enhancing security headers, adding explicit security and incident response policies, and considering a security.txt file for vulnerability disclosure. These steps would further strengthen trust and compliance in an increasingly regulated environment.

The website www.globalfit.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or restricted. The domain WHOIS lookup failed with an error from Nominet UK stating the domain cannot be registered due to naming rules violations, suggesting the domain may be invalid or misconfigured. No business information, contact details, or privacy/security policies are available on the site. The lack of accessible content and absence of WHOIS data severely limit the ability to assess the company's market position or services. Technically, the site lacks any detectable technologies, scripts, or security headers, and no HTTPS or SSL information is available. Overall, the site appears non-operational or improperly configured, posing a high risk for trust and legitimacy.

F

Fatra UK Ltd

fatra.co.uk

48

Fatra UK Ltd is a specialized supplier of recyclable flat roofing membranes and waterproofing systems, targeting the UK construction and refurbishment market. Their product portfolio includes single ply membranes, liquid applied systems, and two-layer felt solutions, all supported by certified quality and professional installation services. The company positions itself as a leading provider with a focus on environmental sustainability and long-lasting roofing performance. The website reflects a professional digital presence with clear navigation, relevant content, and active social media engagement. Technically, the website is built on the Concrete5 CMS platform, utilizing common web technologies such as jQuery and YouTube APIs, alongside Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in security headers and privacy compliance features, as no privacy or cookie policies were found. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. The absence of security headers and incident response information suggests moderate security maturity. The WHOIS data is notably missing due to a domain registration error, which introduces uncertainty about domain legitimacy despite the professional site presentation. Overall, the website is functional, professional, and trustworthy from a user perspective but requires enhancements in privacy compliance and security best practices. The domain registration anomaly should be investigated further to ensure full legitimacy and trustworthiness.

Thrive Renewables is a UK-based renewable energy investment company with a history dating back to 1994. The company focuses on funding, building, and operating clean energy projects, primarily in the renewable energy sector. Their website presents a professional and consistent brand image targeting investors and stakeholders interested in sustainable energy solutions. The technical infrastructure leverages modern web technologies such as Next.js and React, indicating a contemporary digital presence. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS usage implied but lacking advanced security headers and visible privacy or cookie policies. Overall, the website is functional and informative but would benefit from enhanced security and compliance features to improve trust and regulatory adherence.

LandFlight Travel Services operates a UK-based transportation business specializing in bus, coach, chauffeur, and airport transfer services. The company targets corporate and private clients, emphasizing eco-friendly and executive vehicle options. The website is professionally designed, built on WordPress, and incorporates modern technologies such as Google Analytics and reCAPTCHA for security and analytics. Despite a generally good security posture with HTTPS and secure forms, the site lacks some security headers and has a broken Google Maps integration. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. The WHOIS data is unavailable due to domain naming rule violations, which raises concerns about domain legitimacy, although the website content and contact information appear credible and consistent with a legitimate business.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Homestyle Nationwide Ltd operates the website HomeStyle4u.co.uk, a UK-based e-commerce platform specializing in home goods, beauty products, fragrances, and lifestyle accessories. The company is FCA authorized and holds multiple trust certifications, positioning itself as a reputable retailer in the UK market. The website offers personal shopper services and credit account management, targeting general consumers seeking quality home and beauty products. Technically, the site uses common web technologies such as jQuery, Google reCAPTCHA, and Mailchimp for marketing, with moderate performance and basic mobile optimization. Security measures include HTTPS and CAPTCHA on forms, but lack some important security headers, indicating room for improvement. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent banner was detected. WHOIS data for the domain is unavailable due to querying the subdomain, but business legitimacy is supported by consistent company information and regulatory registrations. Overall, the website presents a professional and trustworthy e-commerce presence with moderate technical and security maturity.

S

Schmitz Cargobull

cargobull.com

72

Schmitz Cargobull is a leading manufacturer and service provider in the transportation sector, specializing in trailers and semi-trailers for various freight types including temperature-controlled, dry freight, and bulk materials. The company offers a comprehensive portfolio of products and services, including telematics data services, spare parts, and mobile service solutions, targeting logistics companies and fleet operators. The website reflects a mature digital presence with professional design, clear navigation, and multi-language support, indicating a global market reach. Technically, the website is built on the Sitecore CMS platform, utilizing modern web technologies such as Bootstrap 4 and jQuery, with integrations for Google Tag Manager, Facebook Pixel, and Usercentrics for consent management. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is solid with HTTPS enforced and consent-based cookie management, though explicit security headers could be more visible. The WHOIS data is unavailable, which slightly impacts trust but the website's professional content and branding strongly support legitimacy. No security policy or incident response information is explicitly provided, and no vulnerability disclosure or security.txt file is found. Contact information is clearly presented, including verified company emails and phone numbers. Overall, the website is secure, privacy-compliant, and professionally managed, suitable for its business audience. Recommendations include enhancing visible security headers and publishing explicit security and incident response policies to further strengthen trust and compliance.

K

KSS

kssgroup.com

56

KSS is a well-established architecture and design firm based in the United Kingdom, specializing in sports stadia, training centres, residential, education, commercial, hospitality, and workplace projects. Celebrating over 30 years of experience, the company holds a strong market position as an award-winning AJ100 practice with offices in London and Kent. Their website reflects a professional and modern digital presence, leveraging WordPress CMS with SEO optimization through Yoast and integration of Google Analytics and Adsense for marketing and tracking purposes. The technical infrastructure is solid, with reputable hosting and domain registration dating back to 1998, consistent with the company's claimed history. Security posture is adequate with HTTPS enabled and domain transfer protections in place; however, there is room for improvement in DNSSEC adoption and security headers implementation. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies on the homepage. Overall, the website is trustworthy and professional, but enhancing privacy and security disclosures would strengthen user trust and compliance.

Dive In Ltd is a well-established UK-based scuba diving training centre with over 40 years of experience. The company offers a wide range of diving courses from beginner to technical instructor levels, along with dive trips and professional certifications. The website reflects a professional and trustworthy business with clear contact information and customer testimonials, positioning itself as a reputable player in the diving training market. Technically, the website is built on WordPress with a modern theme and plugins, providing a good user experience and mobile optimization. However, there is room for improvement in SEO and accessibility. Security-wise, the site uses HTTPS but lacks important security headers and formal policies such as privacy and cookie policies, which impacts compliance and security posture. Overall, the domain age and WHOIS data support the legitimacy of the business, with no suspicious indicators detected.

I

IK-Trax

online-electronics.com

64

IK-Trax is a specialized company focused on manufacturing pipeline pig locating and signalling equipment along with advanced pipeline data logging and testing systems. Founded in 2023 and operating under the IK Group umbrella, the company targets pipeline operators and installation companies primarily in the energy sector. The website demonstrates a strong market position with over 25 years of expertise reflected in its product offerings and comprehensive content. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers and policies could enhance protection. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive business credibility profile.

B

Bright Purple Resourcing Ltd

brightpurple.co.uk

75

Bright Purple Resourcing Ltd is a specialized technology and transformation recruitment agency based in Edinburgh, UK, with over 30 years of experience. The company focuses on providing recruitment solutions including permanent, contract, executive search, and contractor management services primarily for technology and transformation sectors across the UK and internationally. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service information. Technically, the site is built on ASP.NET Web Forms and uses Firefish recruitment software, with modern JavaScript libraries like jQuery and Slick Carousel enhancing user experience. Security posture is solid with HTTPS enforced and secure form handling, though some security headers are missing and could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. The WHOIS data for the 'www' subdomain is unavailable due to domain naming rules, but the main domain is legitimate and consistent with the business claims. Overall, the website is trustworthy, professional, and well-suited for its target audience.

RHI Magnesita is a global leader in manufacturing high-grade refractory products, systems, and services primarily serving the steel, cement, glass, and non-ferrous metals industries. Their website reflects a mature enterprise with a strong market position and a focus on sustainability and innovation. The company targets industrial clients requiring advanced heat management solutions and refractory expertise. Technically, the website is built on WordPress with modern plugins and technologies such as Yoast SEO, Cookiebot for consent management, and Google Analytics for tracking. The site is well-structured, mobile-optimized, and SEO-friendly, indicating a good level of digital maturity. Security-wise, the site enforces HTTPS and uses secure forms but lacks explicit security policy or incident response disclosures. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding strongly suggest legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in business credibility and security transparency.

Signstik is a small business specializing in signs and banner services, represented by a Facebook public profile page. The business appears to target a general audience seeking signage solutions. The page is hosted on Facebook's platform, leveraging its robust technical infrastructure and security features. The technical maturity is moderate, with modern frameworks like React and Relay used by Facebook, ensuring good performance and mobile optimization. However, the business page itself lacks direct privacy, cookie policies, and contact information, which limits its compliance and trustworthiness from a standalone perspective. Security posture is strong due to Facebook's HTTPS enforcement and platform security, but the absence of explicit security policies or incident response contacts on the page is noted. Overall, the risk is low given the platform's trust but could be improved by adding business-specific compliance and contact details.