Security Directory

An Ceathrú Póilí is an independent bookshop based in Belfast, established in 1983, specializing in Irish and English language books with a catalog of approximately 3000 titles and offering worldwide delivery. The website is built on WordPress with WooCommerce, indicating a moderate level of digital maturity suitable for retail e-commerce. The site is accessible and provides relevant content for its target audience, but lacks comprehensive privacy and cookie policies, which impacts compliance and user trust. Security posture is basic with HTTPS enabled but missing important security headers and vulnerability disclosures. The absence of WHOIS registration data raises concerns about domain legitimacy, although the business content appears genuine. Overall, the website is functional and professional but would benefit from improved security practices and compliance documentation.

Dorman and Sons Limited is a well-established family-run commercial printing company based in Belfast, Northern Ireland, with a history dating back to 1929. The company specializes in lithographic and digital printing, prepress, and finishing services, targeting businesses requiring high-quality print solutions. Their market position is strong locally, supported by a reputation for quality and professionalism. The website reflects their business focus with detailed service descriptions and contact information. Technically, the website uses standard HTML, CSS, and JavaScript with HYPE.js for interactive content, but lacks modern CMS or advanced frameworks. Mobile optimization and accessibility are basic, and SEO is minimal. Security posture is weak due to lack of HTTPS confirmation and missing security headers. Privacy and cookie policies are absent, indicating poor privacy compliance. The domain WHOIS data is unavailable due to domain naming rules violation, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is functional but requires improvements in security, privacy, and technical modernization to enhance trust and compliance.

J

J.T Byrne Funeral Directors

jtbyrne.co.uk

53

J.T Byrne Funeral Directors is a well-established, family-run independent funeral service provider based in Lancashire, UK, with over 20 years of experience. The company offers comprehensive funeral planning services including bespoke funerals, prepaid funeral plans through Golden Charter, memorials, and continuing care. Their market position is strong locally, serving towns such as Thornton-Cleveleys, Fleetwood, and Blackpool. The website reflects a professional and compassionate approach, targeting local families seeking sensitive funeral arrangements. Technically, the site is built on WordPress with modern plugins and SEO optimizations, providing a good user experience with mobile responsiveness and accessibility considerations. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility with clear contact information and trust signals such as industry memberships and customer testimonials.

The website www.hbhaccountants.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed due to a domain registration error indicating the domain name contains too many parts and cannot be registered. Consequently, no registrant or domain age information is available. The website lacks any visible business information, contact details, privacy or cookie policies, and security headers. External resources are limited to Google Fonts, and no analytics or tracking scripts are present. Overall, the site is non-functional and does not provide any indication of the business or services it represents.

B

BE Furniture Ltd

befurnituresales.co.uk

60

BE Furniture Sales is a UK-based commercial furniture supplier specializing in furniture for cafes, pubs, restaurants, hotels, and event venues nationwide. The company offers a wide range of products including tables, seating, garden furniture, and accessories, emphasizing quality, affordability, and customer service. Their client base includes notable brands such as McDonald's and Subway, indicating a strong market presence in the hospitality sector. The website is built on WordPress with WooCommerce, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced, though the absence of explicit security headers suggests room for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. However, WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, user-friendly, and well-optimized for its target audience.

YourCAD is a UK-based small business specializing in Computer Aided Design (CAD) and Building Information Modelling (BIM) services. They provide architectural, mechanical, electrical, and plumbing design support, targeting construction and manufacturing sectors. The company positions itself as a niche service provider with a professional online presence hosted on Squarespace. The website is well-structured, mobile-optimized, and includes essential contact information and privacy compliance features such as a cookie consent banner. However, the domain WHOIS data is unavailable due to a registration error, which introduces some uncertainty about domain legitimacy despite the professional presentation. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit security policies or incident response information. Overall, the website is trustworthy and business-focused, but would benefit from enhanced transparency in security and compliance documentation.

G

Global River

global-river.co.uk

62

Global River is a UK-based small business specializing in bespoke website design and comprehensive digital marketing services including SEO, social media marketing, email marketing, and hosting support. Established since 2010, the company positions itself as a partner for business growth, offering tailored solutions and long-term client relationships. The website reflects a mature digital presence with professional design, clear navigation, and rich content targeting businesses seeking to enhance their online marketing capabilities. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for data insights. Security measures include HTTPS, Cloudflare Turnstile captcha, and GDPR-compliant cookie consent, though HTTP security headers could be improved. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable due to query quota limits, but the website's trust indicators and business information support legitimacy. Strategic recommendations include enhancing security headers, accessibility, and publishing explicit security and incident response policies to further strengthen trust and compliance.

L

Luxx PR

luxxpr.co.uk

49

Luxx PR is a small, specialized public relations agency focusing on luxury food and drinks brands in the United Kingdom. The company, led by Milly Wiggin with over 25 years of experience, offers PR services aimed at building brand reputation and media presence for high-end clients such as Godiva and Jackson Family Wines. The website reflects a professional and consistent brand image targeting luxury sector clients. Technically, the site uses modern JavaScript frameworks like React and is hosted by GoDaddy, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers and policies could be improved. Privacy compliance is limited, lacking cookie consent and detailed privacy policies. Overall, the site is trustworthy and well-positioned in its niche, but could benefit from enhanced privacy and security transparency.

B

BWS Windows Ltd

bwswindows.co.uk

57

BWS Windows Ltd is a small UK-based manufacturer and installer specializing in bespoke windows, doors, and roof lanterns, primarily serving Bedfordshire, London, Surrey, and surrounding areas. The company operates a showroom in Bedford and caters to both trade and domestic customers. Their product offerings include uPVC and aluminium systems, with a focus on quality and competitive pricing. The website reflects a professional and trustworthy business with clear contact channels and customer testimonials. Technically, the website is built on WordPress with modern technologies such as jQuery and Font Awesome, optimized for mobile devices and SEO. The presence of Yoast SEO plugin and Google Analytics indicates a focus on digital marketing and performance tracking. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. From a security perspective, the site enforces HTTPS, includes standard security headers, and uses secure forms with validation. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism, aligning with GDPR requirements. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements could include adding detailed security policies, incident response contacts, and enhancing accessibility features to further strengthen trust and compliance.

P

Premier Platforms

premier-platforms.co.uk

53

Premier Platforms Ltd is a UK-based medium-sized company specializing in mobile and static platform lift hire, training, and maintenance services. Established in 2013, the company holds a strong market position in the Powered Access industry, offering a diverse fleet of equipment and comprehensive IPAF-standard training. Their business model focuses on equipment rental, training, and maintenance, supported by multiple industry accreditations and customer testimonials that reinforce their credibility. Technically, the website is built on WordPress with WooCommerce and Divi theme, leveraging modern plugins and technologies such as Google Tag Manager and CookieYes for consent management. The site demonstrates good performance and mobile optimization with a professional design and clear navigation. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though incident response contacts and a privacy policy page are missing. Overall, the website is trustworthy and well-maintained, with room for improvement in privacy compliance and accessibility.

The website www.goharwood.co.uk/lander is currently a minimal placeholder or parking page with no substantive content or business information. The domain itself is invalid according to Nominet UK WHOIS data, as it violates naming rules and is not properly registered. This severely limits the credibility and trustworthiness of the site. Technically, the site uses React-based scripts loaded from an external domain but lacks any meaningful SEO, accessibility, or security features. There are no privacy or cookie policies, no contact information, and no business descriptions available. Security posture is weak with no HTTPS or security headers detected. Overall, the site appears to be non-operational or a placeholder with no active business presence.

M

MBA Polymers Inc.

mbapolymers.com

44

MBA Polymers Inc. is a globally recognized leader in the plastic recycling industry, specializing in converting post-consumer durable goods waste into high-value recycled plastic granulates. Founded in 1997, the company operates state-of-the-art production units across multiple countries including Germany, China, India, and the UK, serving manufacturers worldwide with sustainable materials that reduce energy consumption and carbon emissions. Their patented technology and numerous certifications underscore their market leadership and commitment to quality and sustainability. Technically, the website is built on a modern WordPress platform using the Enfold theme, enhanced with SEO and performance plugins like Yoast SEO and WP Rocket. The site demonstrates excellent mobile optimization, fast loading times, and good accessibility features. Analytics are implemented via Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms. However, explicit security headers and a public security policy or incident response contacts are not found, representing areas for improvement. The domain registration is consistent with the company’s history and business claims, enhancing trustworthiness. Overall, MBA Polymers presents a professional, trustworthy, and well-structured digital presence aligned with their business objectives. Strategic enhancements in security policy transparency and DNS security could further strengthen their security posture and compliance.

Hexham Violins is a specialized retail and service business focused on string instruments including violins, violas, cellos, and bows. With over five decades of experience, it serves musicians and enthusiasts primarily in the UK regions of North East England, Scotland, and London. The website presents a professional image with detailed descriptions of custom builds, repairs, restoration, and valuation services. Technically, the site is built on WordPress using the Divi theme, with moderate performance and good mobile optimization. However, the absence of privacy and cookie policies, lack of security headers, and missing WHOIS registration data indicate areas for improvement in security and compliance. Overall, the site is functional and trustworthy from a business perspective but requires enhancements in security posture and regulatory compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

R

Ron Breen Estate Agents

rbreen.co.uk

40

Ron Breen Estate Agents is a small, family-run real estate business based in Heaton, Newcastle Upon Tyne, with over 50 years of experience in residential sales, lettings, and property management. The company focuses on local properties in Newcastle and the North East of England, offering a no-fee tenancy policy and owning the rental properties they manage. Their website is professionally designed using WordPress with SEO optimization and property management plugins, providing a good user experience and mobile responsiveness. Contact information and trust indicators such as industry memberships are clearly presented, enhancing business credibility. However, the WHOIS data for the domain is unavailable due to a domain naming error, which raises some concerns about domain registration consistency.

The website at bb1.augstskola.lv is currently minimalistic, displaying only a single word 'success' with no additional content, metadata, or interactive elements. This suggests it may be a placeholder or a minimal status page rather than a fully developed business site. There is no visible business information, contact details, or policies, limiting the ability to assess the company's market position or services. Technically, the site lacks detectable technologies, scripts, or security configurations, and no HTTPS or security headers are evident from the provided data. The WHOIS data is privacy protected, which restricts transparency about the registrant and domain age. Security posture is weak due to lack of HTTPS and absence of security best practices. Overall, the site presents a high risk due to minimal content and lack of compliance indicators.

The website www.roadsweepers.net is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. No substantive business content, contact information, or policies are accessible, severely limiting the ability to assess the company's market position or services. The WHOIS lookup failed to retrieve any domain registration data, suggesting the domain may be unregistered, expired, or privacy-protected without public data, which raises concerns about legitimacy. Technically, the site uses modern frontend libraries such as Bootstrap and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation. Overall, the security posture is minimal with only bot protection evident, and privacy compliance is absent.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

L

Link to Change

linktochange.org.uk

61

Link to Change is a UK-based non-profit charity dedicated to combating exploitation and supporting victims and young people at risk. The organization positions itself as a specialized service provider in the anti-exploitation sector, offering support and advocacy. The website is professionally designed using the Wix platform, featuring structured data that enhances search engine visibility and provides clear contact information. However, the domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy or configuration. The technical infrastructure relies on Wix hosting and includes Google Ads and Tag Manager for marketing and analytics. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. Overall, the website is safe for general audiences and presents a trustworthy front for the charity, though improvements in compliance and domain registration clarity are recommended.

Card Factory is a well-established UK-based retailer specializing in greeting cards, gifts, and party supplies. The company targets general consumers across the UK, offering a broad range of products including personalized cards and gifts. The website reflects a mature e-commerce business model leveraging Salesforce Commerce Cloud, with a strong market position in retail. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

Fifosys is a London-based Managed Service Provider (MSP) specializing in managed IT services, cybersecurity, and digital transformation with over 20 years of experience. The company serves UK businesses with a focus on proactive IT management, cyber threat protection, and compliance, supported by industry certifications such as ISO 27001 and Cyber Essentials Plus. Their market position is that of a trusted, established MSP with multiple regional offices and a strong client partnership approach. Technically, the website is built on Squarespace, leveraging modern web technologies including Google Tag Manager and reCAPTCHA for security and marketing. The site is mobile-optimized, uses HTTPS with HSTS, and includes cookie consent mechanisms, reflecting a moderate to good level of digital maturity. Security posture is strong with enforced HTTPS, security certifications, and best practices like cookie consent and reCAPTCHA. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS domain registration data, are notable gaps that reduce overall trust and compliance confidence. Overall, the website is professional and trustworthy from a content and design perspective, but domain registration transparency and privacy compliance documentation should be improved to enhance credibility and reduce risk.

The website www.bet365.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, presenting a security challenge page instead of the actual content. This prevents any direct analysis of the website's business content, metadata, or technical infrastructure beyond the WAF layer. The domain is known publicly as a major online gambling platform, but no direct data from the provided HTML or WHOIS records is available to confirm current operational or compliance status. The WHOIS query returned no match, indicating either privacy protection, registry issues, or potential inconsistencies in domain registration data. Technically, the site is protected by Cloudflare, which is actively blocking access, likely due to security rules triggered by the request. No security headers or SSL configuration details could be extracted from the provided data. No privacy, cookie, or terms of service policies were found in the accessible content, nor any contact or incident response information. This limits the ability to assess compliance with GDPR or other data protection regulations. From a security posture perspective, the presence of a WAF block indicates active security measures, but the lack of accessible content and WHOIS data reduces trust and transparency. The domain's legitimacy cannot be fully verified, and the absence of business or contact information further complicates risk assessment. Overall, the site currently scores low on content quality, technical implementation, security posture, privacy compliance, and business credibility due to inaccessibility and missing data. Strategic recommendations include verifying domain registration details, ensuring proper exposure of security headers and policies, improving transparency with contact and incident response information, and resolving any WAF configuration issues that may block legitimate users. For a comprehensive analysis, access to the actual website content and valid WHOIS data is essenti…

Keystroke Pro is a small outsourcing service provider specializing in audio transcription, accounting, recruitment, and virtual staffing services. The company positions itself as a leading expert in these niches, offering bespoke and confidential solutions to business clients. The website content is professional and business-focused, targeting organizations seeking outsourcing efficiencies. Technically, the site uses older JavaScript libraries such as MooTools, integrates Google Analytics for tracking, and displays a Comodo SSL seal indicating HTTPS security. However, the site lacks modern security headers and cookie consent mechanisms, which are important for compliance and security posture. The absence of WHOIS data for the domain is a significant concern, as it undermines trust and raises questions about domain legitimacy. Overall, the website is functional with moderate technical maturity but requires improvements in security and privacy compliance to enhance trustworthiness.

A

Annadale Roofing Ltd

annadaleroofing.co.uk

42

Annadale Roofing Ltd is a well-established roofing company based in Bootle, Merseyside, with a history dating back to 1985. The company specializes in a wide range of roofing services including roof repairs, replacements, flat roofs, chimney repairs, and guttering, primarily serving the Liverpool, Wirral, and broader Merseyside area. Their market position is that of a trusted local expert with a focus on quality workmanship and customer satisfaction, supported by certifications such as Trustmark and NFRC membership. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google Analytics for tracking. The site is mobile-optimized with good navigation and SEO practices, hosted by Heart Internet Limited. However, there is room for improvement in accessibility and performance optimization. From a security perspective, the website benefits from HTTPS encryption and does not expose sensitive data. However, it lacks important security headers and published security policies such as privacy, cookie, and incident response policies. The absence of these policies represents a compliance gap, especially regarding GDPR. No vulnerabilities or suspicious patterns were detected in the visible content. Overall, the website presents a professional and trustworthy front for the business but should prioritize adding privacy and cookie policies, enhancing security headers, and publishing incident response information to improve compliance and security posture. These steps will strengthen customer trust and reduce potential legal and security risks.

K

Knights Garden Centres

knightsgardencentres.com

62

Knights Garden Centres is a UK-based retail business specializing in garden centre products including plants, outdoor living items, homewares, pet products, and hospitality services such as dining and events. The company operates both physical garden centres in Godstone and Betchworth, Surrey, and an online webshop offering delivery services. The website is well-structured with comprehensive content, clear navigation, and good branding consistency, targeting gardening enthusiasts and home/outdoor living consumers in the UK market. The business positions itself as a reputable and established garden centre with a strong customer base and positive reviews.

K

KBS Corporate

kbscorporate.com

66

KBS Corporate is a UK-based business sales advisory firm positioned as a leading corporate business sales adviser. The company offers expert guidance for buying and selling businesses, leveraging award-winning agents to serve business buyers and sellers primarily in the UK market. Their digital presence is professional and well-structured, reflecting a mature business model focused on brokerage and advisory services. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Microsoft Clarity, and Cookiebot for privacy compliance. The site demonstrates good SEO and accessibility practices, with responsive design and clear navigation. Security posture is strong with HTTPS enforcement, security headers, and use of reCAPTCHA, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is trustworthy and professional, though the lack of WHOIS data introduces some uncertainty about domain registration legitimacy. Strategic recommendations include enhancing transparency around security policies and monitoring domain registration status.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

mrdistribution.co.uk is a newly registered domain with a website currently serving as a placeholder indicating an upcoming launch. The site is built using GoDaddy's Website Builder platform and hosted by GoDaddy.com, LLC. The content is minimal, featuring a 'Launching Soon' message and a contact form protected by Google reCAPTCHA. There is no detailed business description, service information, or contact details such as phone numbers or email addresses. Privacy and terms of service policies link to Google's standard policies, suggesting no custom legal documentation. The technical infrastructure is basic but functional, with HTTPS enabled and some modern web fonts used. Security posture is moderate with HTTPS and reCAPTCHA but lacks advanced security headers and explicit security policies. Overall, the website is in an early stage with limited content and business information, reflecting its recent domain registration and launch status.

C

Clifton Upon Teme Nursery

cliftoneyc.co.uk

55

Clifton Upon Teme Nursery & Forest School is a small, local childcare provider in Worcestershire, UK, specializing in outdoor, forest school-based early years education for children aged 3 months to 5 years. The website presents a professional and consistent brand image, emphasizing a nature-led, child-centered approach with flexible funding options and an Ofsted Good rating. The business targets families seeking nurturing outdoor childcare and early education in a rural setting. Technically, the website is built with modern HTML5, CSS3, and JavaScript, using Google Fonts for typography. It is mobile-optimized with good accessibility and SEO practices. However, no CMS or hosting provider details are evident, and performance is moderate. The site lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Security posture is moderate; HTTPS is implied but not confirmed, and the contact form includes a honeypot anti-spam field. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to a domain registration error, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and content quality of the website. Overall, the site is trustworthy and well-designed for its business purpose but would benefit from improved security headers, explicit cookie consent, and resolution of domain registration inconsistencies to enhance credibility and compliance.

G

GT Towing Ltd

gttowing.co.uk

62

GT Towing Ltd is a well-established small business based in Hertfordshire, UK, specializing in towing equipment including towbars, trailers, roof racks, and bike racks. The company offers sales, fitting, servicing, and hire services, targeting both commercial and domestic customers. Their market position is supported by a long domain history since 1998 and recognized certifications such as NTTA and NCC approvals. The website is professionally designed with clear navigation and relevant content tailored to their audience. Technically, the site uses modern analytics and marketing tools including Google Analytics, Facebook Pixel, Hotjar, and Stripe for payments, indicating a mature digital infrastructure. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the site is trustworthy and professional with good business credibility.

Body Clock is a UK-based e-commerce retailer specializing in TENS machines, electronic muscle stimulators, and electro-acupuncture devices aimed at pain relief. Established since 1998, the company positions itself as a premier supplier in its niche market. The website is built on the BigCommerce platform, leveraging modern web technologies and integrating multiple analytics and marketing tools to support its online retail operations. The presence of live chat support enhances customer engagement and service. Security-wise, the site enforces HTTPS and uses nonce attributes in scripts, but lacks some advanced security headers, which could be improved. Privacy compliance indicators such as privacy and cookie policies are not detected in the provided content, suggesting room for enhancement in GDPR compliance. Overall, the site presents a professional and trustworthy front with a moderate security posture and good technical implementation.

Places for People is a UK-based leading social enterprise focused on building homes and supporting thriving communities across the country. Their website clearly communicates their mission to improve lives through housing and community development, offering services such as homes to rent and buy, community projects, and tenant support. The organization holds recognized certifications like Great Place To Work 2024 and Disability Confident Employer, reinforcing their credibility and social commitment. Technically, the website is built on the Umbraco CMS platform, leveraging modern JavaScript frameworks like Alpine.js and includes Google Tag Manager for analytics. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with comprehensive privacy and cookie policies that include user consent mechanisms, indicating good privacy compliance. Security posture is strong with HTTPS enforced and appropriate security headers present, though explicit security policy documentation and incident response contacts are not found. The WHOIS lookup for the exact subdomain failed due to querying a subdomain rather than the registered domain, but the website content and branding strongly indicate legitimacy. Overall, the site presents a professional, trustworthy, and well-maintained digital presence for a large social enterprise in the real estate and non-profit sector.

The website www.eacg.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable and indicates the domain is invalid or improperly registered under Nominet UK rules. No business information, contact details, or legal policies are present on the site. The technical infrastructure is minimal, with only Google Fonts loaded externally. There is no evidence of HTTPS or security headers, and no forms or data collection mechanisms are found. Overall, the site lacks any digital maturity or security posture, and the domain legitimacy is questionable.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.adeptcleaninggroup.co.uk is currently inaccessible, serving a 404 Not Found error page with minimal content. The domain WHOIS lookup failed due to a naming rules violation, indicating the domain is either invalid or misconfigured and not properly registered. There is no accessible business information, contact details, privacy policies, or any other content that would indicate an active or legitimate online presence. The technical infrastructure appears minimal, with only a LiteSpeed Web Server signature visible. No HTTPS or security headers are detected, and no scripts or analytics are present. Overall, the site lacks any meaningful content or security posture, resulting in a very low trust and credibility rating.

I

Impellam Group

impellam.com

78

Impellam Group is a leading UK-based recruitment and managed services provider specializing in workforce and STEM talent solutions. The company offers a broad portfolio of services including MSP, RPO, services procurement, project services, consulting, and integrated talent solutions. Recognized globally as a leader in contingent workforce management, Impellam serves a diverse client base with a strong emphasis on innovation, diversity, and sustainability. The website reflects a mature digital presence with modern technologies such as Next.js and React, integrated marketing and analytics tools, and comprehensive content supporting business and candidate engagement. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, warranting further verification. Overall, the site is professional, trustworthy, and well-optimized for user experience and compliance.

The website www.manorlodgeschool.com currently serves only a security verification page protected by Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or similar bot mitigation mechanism. No actual content related to the purported school or business is accessible, preventing meaningful analysis of business operations or services. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, inactive, or privacy-protected to an extent that no data is publicly available. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for frontend and security respectively, but lacks visible security headers or privacy policies. Overall, the site’s security posture is limited to bot protection, with no further security or compliance measures evident.

M

M Cubed Limited

m-cubed.org

67

M Cubed Limited operates as a chartered accountancy firm based in Stoughton, Leicestershire, UK. The company offers a broad range of accounting and consultancy services including taxation, bookkeeping, payroll, business start-up advice, and financial planning. With over 70 years of combined staff experience and professional qualifications (ICAEW/ACCA), M Cubed positions itself as a leading local accountancy firm focused on personalized client service and expertise. The website reflects a professional and trustworthy business with clear contact information and a comprehensive service offering tailored to local businesses and individuals. Technically, the website employs a modern but standard technology stack including jQuery, Bootstrap, and a proprietary clientzone framework. The site is mobile responsive, accessible, and SEO optimized with clear navigation and structured content. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing, which could be improved to enhance user trust and compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The WHOIS data is incomplete and malformed, limiting domain ownership verification, but the website content and contact details strongly indicate a legitimate and professional business. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, M Cubed Limited presents a solid business presence with good technical implementation and moderate security posture. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would further strengthen trust and compliance.

W

Wigmore Hall

wigmore-hall.org.uk

71

Wigmore Hall is a prestigious non-profit cultural venue located in London, specializing in chamber music and song recitals. It offers a rich program of live concerts, educational initiatives, and membership opportunities, positioning itself as a leading institution in the classical music scene. The website reflects this heritage with professional design, clear navigation, and comprehensive content tailored to classical music enthusiasts and concertgoers. Technically, the website employs modern web technologies including JavaScript ES modules, Matomo analytics for privacy-conscious visitor tracking, and Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured content. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms that respect user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a low-risk profile with strong privacy compliance and professional business credibility. The absence of WHOIS data is due to a query on the subdomain rather than the registered domain, not indicating any legitimacy concerns. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and improving contact information visibility.

Phillips Joinery Ltd is a well-established bespoke joinery manufacturer based in the United Kingdom with over 50 years of experience. The company specializes in high-quality timber joinery products including doors, windows, staircases, gates, and bespoke timber structures, serving commercial, trade, and private clients. Their market position is strong, supported by multiple industry certifications and a loyal repeat customer base. The website reflects a professional business with clear service offerings and trust indicators such as certifications and testimonials. Technically, the website is built on WordPress using the Divi theme, incorporating modern analytics tools like Google Analytics and Microsoft Clarity. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security header implementation. Hosting details are limited but the domain is registered with a reputable registrar, Ionos SE. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and does not publish a security policy or incident response information. Privacy compliance is partially addressed with privacy and cookie policies present, but no active cookie consent mechanism is detected. User tracking is moderate due to analytics scripts. Overall, the website is trustworthy and professional, with a solid business foundation and good digital maturity. Strategic improvements in security headers, privacy consent mechanisms, and incident response transparency would enhance the security posture and compliance standing.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

Clear Insurance Management Limited

lukerrowe.com

61

Clear Insurance Management Limited is a UK-based independent Chartered insurance broker specializing in commercial, property, construction, manufacturing, and life sciences insurance, with a notable focus on audio visual and events insurance. The company operates multiple branches including the Amersham branch, and is part of the Clear Group. The website reflects a professional and comprehensive digital presence with clear navigation, detailed service offerings, and strong regulatory compliance signals such as FCA authorization. Technically, the site uses modern web technologies including jQuery, Google reCAPTCHA, Usercentrics CMP for consent management, Hotjar for analytics, and Feefo for customer reviews, hosted behind Cloudflare DNS and CDN services. Security posture is good with HTTPS enforced and secure form handling, though security headers and incident response information are not publicly detailed. Overall, the website is trustworthy, well-branded, and compliant with privacy regulations, making it a reliable resource for prospective clients seeking insurance services.

C

CW Fencing

cw-fencing.co.uk

70

CW Fencing is a small regional fencing company based in Colchester, Essex, providing a range of fencing products and installation services including security, commercial, school, and garden fencing. The company serves multiple counties in southeast England and positions itself as a trusted local supplier and installer. The website demonstrates a moderate level of digital maturity, employing modern web technologies such as Ecwid e-commerce, Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site is well-structured with good SEO and mobile optimization, and it includes privacy and cookie policies indicating GDPR compliance. However, the absence of WHOIS data due to a domain registration error introduces some uncertainty regarding domain legitimacy. Security posture is generally good with HTTPS and security best practices in place, but lacks explicit security policies or incident response information. Overall, the website is professional and trustworthy, though improvements in transparency and domain registration clarity are recommended.

B

Brixham Trawler Agents

bxta.co.uk

45

Brixham Fish Market operates as England’s largest fish market by value of fish sold, providing a comprehensive range of services including fish market auctions, trawler information, and commercial services such as finance, fuel supply, and fish transport. The company targets fish buyers, trawler operators, and the local community, positioning itself as a key player in the UK fishing industry. The website reflects a medium-sized business with a well-established presence since 2009. Technically, the website is built on WordPress with modern plugins and themes, including Rank Math SEO and Google Tag Manager for analytics. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. Accessibility is basic but functional. Hosting and registrar information align with the business claims, supporting digital maturity. Security posture is solid with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. Cookie consent is implemented, but a dedicated privacy policy page is missing, which may impact GDPR compliance. Overall, the website is professional, trustworthy, and well-aligned with the business objectives. Strategic enhancements in security transparency and privacy compliance would further strengthen the site’s credibility and user trust.

A

A.G. Axton & Sons Ltd

agaxton.co.uk

55

A.G. Axton & Sons Ltd is a small UK-based retail supplier specializing in fresh fruit, salad, vegetables, and dairy products, primarily sourced from local growers. The company positions itself as a leading supplier in the South of the UK, targeting businesses and consumers seeking quality fresh produce. The website is built on WordPress with WooCommerce and Elementor, indicating a moderate level of digital maturity with e-commerce capabilities. Hosting is provided by Cloudflare, ensuring reliable delivery and security at the network level. Security posture is adequate with HTTPS enabled and SSL certificates in place; however, the absence of security headers and formal security policies indicates room for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms, which could pose compliance risks under GDPR. Overall, the website is professional and functional but lacks critical compliance and security documentation. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve trust and compliance.