Security Directory

O

OptiCom

opticom.lv

56

OptiCom is a well-established Latvian IT integrator and solution provider founded in 1994, specializing in IT infrastructure, cybersecurity, and professional training services. The company holds ISO 27001:2022 and ISO 9001:2015 certifications, underscoring its commitment to quality and information security. OptiCom serves Latvian businesses seeking advanced IT and cybersecurity solutions, positioning itself as a leading player in the local market with a professional team and comprehensive service offerings including SOC, penetration testing, and infrastructure maintenance. Technically, the website is built on Joomla CMS with modern front-end technologies such as Bootstrap, jQuery, and FontAwesome. It features responsive design and good SEO practices, with moderate performance and basic accessibility. The site includes a cookie consent mechanism and integrates Google Analytics for user tracking, maintaining good privacy compliance. From a security perspective, OptiCom demonstrates strong posture with HTTPS enforcement, ISO certifications, secure forms, and no visible vulnerabilities or exposed sensitive data. However, some security headers could be explicitly implemented or improved. The absence of a public vulnerability disclosure or incident response contact is noted as an area for enhancement. Overall, the website and business present a high level of professionalism, trustworthiness, and compliance with relevant standards. The domain registration details align well with the company's history and claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen the security and compliance posture.

JSC “TOKSA” is a Lithuanian company specializing in the trade of high-quality infection control products, medical equipment, and disposable medical supplies. The company targets healthcare providers and hospitals, aiming to be a market leader in infection prevention products within Lithuania. Their business model focuses on B2B distribution with value-added services such as product presentations and consultations. The website content is professionally presented, emphasizing trust, quality, and customer satisfaction. Technically, the site uses common frontend libraries like jQuery and Bootstrap, with moderate performance and good mobile optimization. However, no CMS or hosting details are evident, and SEO and accessibility features are basic. Security posture is limited due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. WHOIS data could not be retrieved, raising concerns about domain registration legitimacy. Overall, the site is functional and informative but requires improvements in security and compliance to enhance trust and protect user data.

Etnopramogos is a small Lithuanian business focused on providing ethnographic or cultural entertainment services. The website is built on WordPress and uses common plugins such as Smart Slider 3, Visual Composer, and Contact Form 7. The technical infrastructure is standard for a small business website, hosted by HOSTINGER operations, UAB. The website is accessible without any WAF or security challenge blocking content. However, the site lacks important compliance elements such as privacy and cookie policies, which impacts GDPR compliance. Security posture is basic with HTTPS enabled but missing critical security headers and incident response information. Overall, the website is functional but basic in design and content quality, with room for improvement in security and compliance.

S

State of New Jersey

state.nj.us

60

The website www.nj.gov serves as the official online portal for the State of New Jersey, providing comprehensive access to government programs, services, and resources for residents, businesses, and visitors. It holds a strong market position as the authoritative source of state government information, featuring key services such as resident assistance programs, business resources, employment services, and transportation information. The site targets a broad audience including residents, government employees, and businesses, operating under a government service portal business model. Technically, the site employs a modern and mature infrastructure leveraging Bootstrap, jQuery, Google Tag Manager, Facebook Pixel, and other contemporary web technologies. The design is responsive and accessible, with good SEO practices and performance characteristics. The site integrates multiple social media platforms and uses feedback widgets to engage users. From a security perspective, the site enforces HTTPS and employs secure forms with proper accessibility features. However, it lacks explicit security headers, a published security policy, incident response contacts, and a vulnerability disclosure mechanism. The WHOIS data is incomplete but consistent with government domain policies, and no WAF or blocking mechanisms were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and content quality, with minor areas for improvement in privacy compliance and security transparency. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security policies, and enhancing incident response visibility.

L

Lindenwood University

lindenwood.edu

69

Lindenwood University is a well-established higher education institution founded in 1832, offering a wide range of undergraduate, graduate, and online degree programs. The university positions itself as a student-centered institution with a strong regional presence near St. Louis, Missouri. The website reflects a professional and modern digital presence with clear navigation, multimedia content, and calls to action for prospective students. The institution leverages multiple marketing and analytics technologies to optimize user engagement and recruitment efforts. Technically, the website is built on WordPress with Bootstrap framework and integrates various third-party analytics and marketing tools such as Google Tag Manager, TikTok Pixel, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is mobile-optimized and accessible, with good SEO practices implemented via Yoast SEO. Performance is moderate, with asynchronous loading of scripts to enhance speed. From a security perspective, the site enforces HTTPS and uses several security-related scripts, but lacks explicit security headers and published security policies or incident response information. No vulnerability disclosure or security.txt file is present, which could be improved to enhance transparency and trust. The absence of WHOIS data for the domain is unusual for an established university and slightly reduces trustworthiness, though the website content strongly supports legitimacy. Overall, Lindenwood University’s website demonstrates a mature digital infrastructure suitable for its educational mission, but could benefit from enhanced privacy compliance documentation and security transparency to further strengthen its security posture and user trust.

Western Fabrications Ltd is a well-established industrial engineering and metalwork design specialist based in South West England, founded in 1995. The company offers bespoke design, fabrication, supply, and installation services primarily in steel, stainless steel, and aluminium products, targeting commercial organizations, councils, and schools. Their market position is strong within their regional manufacturing sector, supported by certifications and a professional online presence. Technically, the website is built on Concrete5 CMS with Bootstrap and jQuery, featuring modern analytics tools such as Google Analytics and Tag Manager. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, including the implementation of security headers and enhanced privacy compliance mechanisms. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. Nonetheless, the absence of security headers, incident response policies, and vulnerability disclosure mechanisms indicates room for improvement in security maturity. The WHOIS data is unavailable due to a domain registration error, which introduces some legitimacy concerns despite the professional website content. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from enhanced security and privacy practices to improve compliance and trustworthiness further.

N

Noz-Alls Ltd

weldingdirect.co.uk

53

Noz-Alls Ltd is a small, family-owned UK-based company specializing in welding supplies and equipment, operating since 1996. The company offers a broad range of welding products including MIG, TIG, MMA welders, plasma cutters, and associated consumables, serving both wholesale and retail customers through an e-commerce platform and physical trade counter in Cheltenham. The website reflects a well-organized product catalog with clear navigation and active social media presence, supporting their market position as a niche supplier focused on quality and value. Technically, the website employs a traditional tech stack with jQuery, Bootstrap, and Google Analytics integration, providing a responsive and user-friendly experience. While the site is mobile optimized and SEO conscious, there is room for improvement in accessibility and modern security practices. The absence of explicit security headers and incomplete WHOIS data due to domain registration issues are notable gaps. Security posture is moderate; HTTPS is implied but no advanced security headers are detected. The site implements cookie consent mechanisms aligned with GDPR requirements, and contact information is clearly presented, enhancing trust. However, the domain's WHOIS failure and lack of registrant data reduce confidence in domain legitimacy, though the business information on the site appears consistent and credible. Overall, the website is functional and professional with good content quality and business credibility. Strategic improvements in security headers, WHOIS registration clarity, and accessibility would enhance the site's trustworthiness and compliance posture.

S

Spark Data Systems Ltd

sparkdata.co.uk

60

Spark Data Systems Ltd is a UK-based software consultancy and development company specializing in customized software solutions for the finance, hospitality, and membership management sectors. With over 20 years of experience, they focus on financial mutual policy administration, claims, underwriting, and digital transformation projects. Their market position is that of a trusted partner to leading finance and service providers in the UK. The website reflects a professional and modern digital presence with clear navigation and relevant content. Technically, the site uses modern frameworks such as Blazor and integrates Microsoft Azure Maps and LinkedIn platform scripts, indicating a mature digital infrastructure. However, the absence of explicit privacy and cookie policies, lack of visible security headers, and missing WHOIS registration data introduce concerns about compliance and domain legitimacy. Overall, the security posture is moderate but could be improved with enhanced security headers and privacy compliance measures. The domain WHOIS inconsistency lowers trust from a registration perspective but does not negate the professional business presentation. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and clarifying domain registration details to improve trust and compliance.

UAB Nagista operates as a retail business specializing in fishing equipment and related products, targeting fishing enthusiasts primarily in Lithuania. The website presents a professional and consistent brand image, leveraging WordPress CMS with Elementor and Bootstrap frameworks to deliver a functional and visually appealing online presence. The technical infrastructure is modern but could benefit from enhanced security configurations and privacy compliance measures. Security posture is moderate with HTTPS enabled and Google reCAPTCHA implemented, though the absence of security headers and privacy policies indicates room for improvement. The domain's WHOIS data is unavailable or invalid, which introduces some uncertainty regarding domain registration legitimacy, but the website content and business information appear consistent and credible. Overall, the site is safe for general audiences and serves its retail purpose effectively.

T

Trials UK Ltd

trialsuk.co.uk

50

Trials UK Ltd operates a specialized e-commerce website focused on motorcycle trials products including bikes, clothing, parts, and accessories. The company targets motorcycle trials enthusiasts in the UK and internationally, offering a wide range of products and educational video content. The website is well-structured with detailed product listings and a clear contact phone number, supporting a professional retail experience. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Google Analytics, and is built on the OpenCart CMS platform. Security posture is good with HTTPS and GDPR cookie consent implemented, though privacy policy and terms of service pages are missing. WHOIS data for the domain 'www.trialsuk.co.uk' is unavailable due to a naming rule violation, but the site is accessible, indicating the actual domain is likely 'trialsuk.co.uk'. This discrepancy slightly reduces trust but does not indicate malicious activity.

R

ResourceiT

resourceit.net

56

ResourceiT is a UK-based, award-winning channel marketing agency specializing in content creation, demand generation, and training services for IT businesses. Established in 2003, the company has built a strong market position with over 7,000 projects delivered and partnerships with leading technology vendors such as Microsoft and Logitech. Their website reflects a professional and consistent brand image, targeting B2B technology companies seeking to grow their channel presence and lead generation capabilities. Technically, the site is built on WordPress with modern frameworks and integrates multiple marketing and analytics tools, demonstrating digital maturity and good performance. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security policies are not publicly disclosed. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy page. Overall, the website is trustworthy and professional, with room for improvement in privacy and security transparency.

Larimer County's official government website serves as a comprehensive portal for residents and businesses in Larimer County, Colorado. It provides access to a wide range of public services including property search, vehicle licensing, tax payments, parks and recreation information, and emergency management resources. The site targets local citizens and stakeholders, positioning itself as a trusted and authoritative source for county-related information and services. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as Bootstrap for responsive design, jQuery for interactivity, and FontAwesome for iconography. The site integrates third-party services like Cludo for search functionality and Google Tag Manager for analytics, indicating a mature digital infrastructure. Mobile optimization and accessibility features are well implemented, enhancing user experience across devices. From a security perspective, the website enforces HTTPS, employs multiple security headers, and uses CAPTCHA mechanisms on forms to prevent abuse. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit incident response contacts and vulnerability disclosure policies suggests areas for improvement in security transparency and readiness. Overall, the website demonstrates a strong balance of usability, security, and compliance suitable for a government entity. The incomplete WHOIS data is a minor concern but likely due to domain privacy or registry restrictions common with .gov domains. Strategic recommendations include enhancing security policy disclosures, publishing vulnerability handling procedures, and maintaining up-to-date third-party components to sustain a robust security posture.

F

Ford Retail Group

fordretail.com

73

Ford Retail Group operates as the world's largest dedicated Ford dealer group under the TrustFord umbrella, managing over 60 locations across the UK including Northern Ireland and the Channel Islands. The company offers new and used Ford vehicles, commercial vehicles, aftersales, and parts services, positioning itself as a key player in the UK automotive retail sector. The website reflects a professional digital presence with clear branding, comprehensive content, and active social media engagement. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates Google Analytics and Tag Manager for tracking, and is hosted securely with HTTPS. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though security headers could be enhanced. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates a mature digital infrastructure supporting a large automotive retail business.

A

AKW Medi-Care Ltd

akw-ltd.co.uk

63

AKW Medi-Care Ltd is a UK-based market leader specializing in the design, manufacture, and supply of accessible bathroom, kitchen, and mobility support products. With a portfolio exceeding 5,500 products, the company targets contractors, architects, occupational therapists, housing associations, and care providers across the UK and Europe. AKW emphasizes inclusivity and accessibility, supported by a skilled team of sales, technical, and maintenance professionals, alongside robust logistics and distribution capabilities. The company maintains a strong brand presence with multiple ISO certifications and a commitment to ESG principles. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates various plugins for SEO, analytics, and cookie consent management. The site demonstrates good mobile optimization, accessibility features, and SEO practices, supported by Google Analytics and LinkedIn tracking for marketing insights. Hosting is provided by Fasthosts Internet Ltd, consistent with the domain registration data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business history and shows no suspicious patterns, enhancing trustworthiness. Overall, AKW presents a professional, secure, and privacy-compliant digital presence aligned with its business objectives. Strategic recommendations include enhancing security headers, publishing incident response contacts, and implementing a vulnerability disclosure policy to further strengthen security posture and stakeholder trust.

E

Eiropas Tālmācības centrs

eiropasskola.lv

40

Eiropas Tālmācības centrs operates an online distance learning platform targeting students in Latvia. The website serves primarily as a login portal for accessing educational content. The business is positioned as a regional educational provider specializing in remote learning services. The platform's technical infrastructure relies on older JavaScript libraries such as jQuery 1.10.2 and Bootstrap, with no detected CMS or advanced frameworks. The site shows basic mobile optimization and moderate performance but lacks modern SEO and accessibility features. Security posture is moderate with HTTPS implied but no visible security headers or advanced protections. The cookie consent banner indicates some GDPR awareness, but no privacy policy or terms of service are present, limiting compliance confidence. Overall, the site is functional but requires modernization and enhanced security and compliance measures.

B

Bridgecon Systems Private Limited

bridgeconindia.com

36

Bridgecon Systems Private Limited is an Indian company specializing in the design and construction of bridges, flyovers, metro rail elevated corridors, and other elevated structures. Founded by Mr. R.K. Gupta, a civil engineer with over four decades of experience, the company offers specialized consultancy services and supplies construction equipment for bridge construction using advanced methods such as Pre-Cast Segmental and Cantilever Construction. The company targets infrastructure developers, government agencies, and construction firms, positioning itself as a niche player in the Indian transportation infrastructure sector. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, Revolution Slider, and Google Maps API. The site is mobile responsive with good design quality and clear navigation, though accessibility and SEO optimizations are basic. There is no evidence of a CMS or hosting provider from the data provided. Performance is moderate, with no major errors or broken elements detected. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and trustworthiness. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, while the business content and website design are professional and relevant, the absence of WHOIS data, security policies, and contact information reduces trust and compliance posture. Strategic improvements in security, privacy compliance, and domain registration transparency are recommended to enhance credibility and reduce risk.

P

Paayas Milk Producer Company Limited

paayasmilk.com

42

Paayas Milk Producer Company Limited is a medium-sized dairy cooperative organization based in India, incorporated in 2012. It operates as a milk producer organization with technical support from NDDB Dairy Services, offering a digital platform for milk procurement and payment, alongside manufacturing dairy products such as ghee and rasgulla. The company also provides animal nutrition products and various dairy-related services including breeding, advisory, fodder development, and veterinary services. The website reflects a professional and consistent brand presence with detailed product and service information, targeting milk producers, distributors, and consumers in the dairy sector. Technically, the website employs modern front-end technologies including Bootstrap, Font Awesome, Swiper.js, and YouTube APIs, delivering a responsive and content-rich user experience. While performance and SEO are adequate, accessibility features are basic and could be improved. Security posture is moderate with HTTPS enforced and no exposed sensitive data, but lacks important security headers and cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the security posture is acceptable but could benefit from enhanced security headers, privacy compliance improvements, and clearer incident response policies. The domain registration inconsistency reduces trust slightly, suggesting a need for verification or clarification. Strategic recommendations include implementing security headers, adding cookie and privacy consent, publishing incident response and vulnerability disclosure policies, and improving accessibility and GDPR compliance.

S

System Consultant Information India (SCII)

scii.in

48

System Consultant Information India (SCII) is a small-sized IT services company established in 2005 as a 100% subsidiary of the Japanese firm System Consultant Co. Ltd (KSC). The company specializes in customized web-based applications, cloud computing, research and development, and business management solutions, targeting businesses seeking to blend Indian IT talent with Japanese expertise. The website presents a professional image with clear branding and a focus on quality and innovation. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. No contact emails or phone numbers are directly visible on the homepage, which may impact user trust and engagement. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is functional and professional but could enhance privacy and security features to improve compliance and user trust.

P

PT Embossindo Utama

embossindo.com

42

PT Embossindo Utama is an established Indonesian manufacturing company specializing in premium paper products such as fancy and ivory papers, serving primarily B2B clients in printing and packaging sectors. The company emphasizes responsiveness, quality, and partner support, with a market presence supported by client testimonials and a domain registered since 1999. The website is built on WordPress using the Hestia theme and several plugins, providing a responsive and professional user experience. Technical infrastructure is moderate with room for improvement in security and privacy compliance. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. No privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided with multiple physical addresses and a company phone number. Social media presence is limited to Instagram. Overall, the website is functional and trustworthy but would benefit from enhanced security and privacy measures.

Adiwarna Pratama is a small Indonesian business focused on providing business support and operational management services. The website presents a professional but basic digital presence using Joomla CMS and common web technologies like jQuery and Bootstrap. The company showcases its team and contact information clearly, targeting business clients in Indonesia. Technically, the site is mobile responsive and moderately performant but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy policies. No evidence of tracking or analytics tools was found, indicating minimal user data collection. Overall, the website is functional but would benefit from enhanced security and privacy compliance measures to improve trust and professionalism.

安

安基工业设备有限公司 (总公司)

ongear.hk

46

安基工业设备有限公司是一家位于香港的工业设备供应商，专注于传动器材、泵阀产品、热风焊接器材、清洗机及发电机等产品的销售与服务。公司面向快速增长的中国市场，设有上海及香港澳门的分支机构，体现其区域性市场布局和业务扩展。网站内容以中文为主，提供多语言版本以适应不同客户需求。技术基础采用Bootstrap和jQuery等现代前端技术，网站设计专业且响应式良好，适合移动设备访问。安全方面，网站启用了HTTPS，但缺少安全头和隐私政策，存在合规风险。整体业务信息透明，联系方式明确，体现一定的商业信誉。

SITC International Holdings Co., Ltd. operates a comprehensive container shipping and logistics network primarily focused on Asia, with a presence in 16 countries and 82 major ports. The company offers container shipping, logistics services, supply chain management, and e-commerce platforms for shipment tracking and cargo management. The website content is primarily in Chinese and targets business clients and investors in the transportation sector. Technically, the website uses Bootstrap and jQuery with moderate performance and basic mobile optimization. Security posture is average with HTTPS enabled but minimal security headers and disabled X-XSS-Protection. Privacy and cookie policies are not found, indicating compliance gaps. The WHOIS data is missing or domain not registered properly, raising concerns about domain legitimacy. Overall, the website is functional but requires improvements in security, privacy compliance, and domain registration transparency.

M

Marapco

marapco.com

38

Marapco is an established company specializing in diesel generators and customized power generation solutions, positioning itself as a market leader with over 30 years of industry experience. The website reflects a professional and consistent brand image targeting industrial and commercial customers worldwide. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and providing a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, and does not publicly disclose security policies or incident response contacts. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the site is trustworthy and business credible but could improve in compliance and security transparency.

U

United Molasses (Ireland)

umi.co.uk

46

United Molasses (Ireland) operates as a supplier of quality molasses products primarily targeting farmers and feed compounders in Ireland and Northern Ireland. The company focuses on providing animal feed ingredients and nutrition solutions, particularly for dairy cows. The website reflects a small-sized business with a basic but functional online presence, leveraging Joomla! CMS and common web libraries such as jQuery and Bootstrap. The content is relevant and targeted, though the overall design and technical sophistication are moderate. From a technical perspective, the website is accessible without any blocking or WAF interference. It uses HTTPS as indicated by the base URL, but lacks advanced security headers and explicit consent mechanisms for cookies, which are recommended for GDPR compliance. No analytics or advertising technologies are detected, indicating minimal user tracking. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain registration legitimacy but does not affect the accessibility or content quality of the site. Security posture is moderate with no visible vulnerabilities or exposed sensitive data, but improvements are needed in security headers and incident response transparency. Privacy policies exist but lack explicit consent mechanisms. Overall, the website is safe, business-focused, and trustworthy, but the lack of WHOIS transparency and limited contact information reduce the overall trust score. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, publishing security and incident response policies, and improving contact information visibility to strengthen trust and compliance.

A

Angel Plastics

angelplastics.co.uk

54

Angel Plastics is a UK-based supplier specializing in plastic building materials such as guttering, fascias, soffits, cladding, and plumbing systems. The company targets construction professionals and DIY enthusiasts, operating primarily through an e-commerce platform. The website presents a professional and consistent brand image with a clear product catalog and social media presence. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA Enterprise, ensuring secure user authentication and a responsive design. Security posture is solid with HTTPS enforced and anti-bot measures on login, though additional security headers and public security policies are absent. The lack of WHOIS data due to domain registration issues limits domain trust verification, but the website content and contact information appear legitimate. Overall, the site is functional and secure with room for improvement in privacy compliance and transparency.

P

Pivotal Business Services Limited

pivotalbusiness.co.uk

38

Pivotal Business Services Limited is a small UK-based accounting firm offering a broad range of accountancy and taxation services tailored to sole traders, partnerships, limited companies, charities, and non-profit organizations. The company emphasizes trust, confidentiality, and personalized service, providing bookkeeping, statutory accounts, tax returns, payroll, and company formation services. The website presents a professional image with clear contact details and service descriptions, targeting small business clients in the UK. Technically, the website uses modern frontend technologies including Bootstrap, Google Fonts, and Swiper Slider, with responsive design and basic accessibility features. However, no CMS or hosting provider information is evident. Performance is moderate, and SEO optimization is basic. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and published security policies. Forms use POST methods but lack visible anti-CSRF tokens. The WHOIS data for the domain is unavailable due to a registry error indicating the domain name is invalid or improperly registered, which raises concerns about domain legitimacy. No privacy or cookie policies are present, impacting privacy compliance. Overall, the website is functional and professional but has gaps in security posture and privacy compliance. The domain registration issues warrant caution. Strategic improvements in security headers, privacy policies, and domain registration verification are recommended to enhance trust and compliance.

Manzana Business Solutions Limited is a small UK-based company specializing in English-French translation and localisation services. The company offers comprehensive project management for translation, interpretation, and revision services, targeting businesses and individuals requiring bilingual communication solutions. Their website reflects a niche market position with a professional and consistent brand presence. Technically, the website is built on WordPress using common plugins such as LayerSlider and Yoast SEO, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

F

FPT Asia Co., Ltd.

fpt-asia.com

50

FPT Asia Co., Ltd. is a Thailand-based company specializing in professional and innovative food processing technology solutions. They provide comprehensive services including consultancy, turnkey design, technology center facilities, and after-sales support, positioning themselves as a market leader in Asia. Their business model focuses on B2B engagements with food manufacturers and industrial clients, emphasizing quality, sustainability, and Industry 4.0 automation. The website is well-structured, professionally designed, and provides clear contact information and social media presence. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Owl Carousel, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the business presence and content quality suggest legitimacy. Overall, the site scores well on content quality and business credibility but could improve security and privacy compliance.

E

ec2i

ec2i.biz

62

ec2i is a creative production agency specializing in multi-channel media content creation, optimization, and deployment. Their services include photography, retouching, colour management, workflow solutions, and print production, targeting brands and businesses requiring integrated media content solutions. The company demonstrates a technology-first approach with a strong emphasis on client service and long-term relationships. Technically, the website is built on HubSpot CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics 4, Hotjar, and Lead Forensics. Security posture is strong with HTTPS and security headers properly configured, though privacy compliance could be improved by adding explicit privacy and cookie policies. WHOIS data is not publicly available, indicating privacy protection, which is common and justified for this business type. Overall, the website is professional, trustworthy, and well-structured, but could enhance privacy transparency and incident response readiness.

O

OMNOVA North America Inc.

omnova.com

53

OMNOVA North America Inc., a division of SURTECO, operates as a global innovator and supplier of coated fabrics and performance-enhancing surface materials primarily serving industrial and commercial markets. The company offers a range of products including coated fabrics upholstery and decorative surfaces, targeting manufacturers and designers worldwide. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, leveraging TYPO3 CMS and standard analytics tools such as Google Analytics and Google Tag Manager. Security posture is moderate with HTTPS enabled and privacy compliance evident through cookie consent and privacy policies, though lacking explicit security headers and incident response information. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but consistent branding and links to SURTECO domains support authenticity. Overall, the website is a reliable corporate resource with room for security and transparency improvements.

The Royal Air Force website serves as the official digital presence of the UK's air and space defense force, providing comprehensive information about its operations, aircraft, personnel, and community support. The site is professionally designed with a clear focus on delivering authoritative content to a broad audience including UK citizens, military personnel, and international allies. The use of modern web technologies such as Bootstrap and Mura CMS, combined with strong SEO and accessibility practices, reflects a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data is consistent with UK Ministry of Defence domain privacy policies and does not detract from the site's legitimacy. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

M

Mark Specialist Applications Limited

markspecialistapplications.co.uk

51

Mark Specialist Applications Limited is a UK-based specialist provider of industrial repair and protective coating services, focusing on sectors such as marine, petrochemical, manufacturing, power generation, and water treatment. The company offers a comprehensive range of onsite and workshop services including blast cleaning, butyl liners, erosion and corrosion control, and composite repairs. Their expertise and over 100 years of combined technical experience position them as a trusted partner for maintenance and asset protection in demanding industrial environments. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience and business credibility. However, the WHOIS data is incomplete due to a domain naming rules error, which slightly impacts trustworthiness from a domain registration perspective. The site lacks cookie consent mechanisms and visible security headers, indicating areas for improvement in privacy compliance and security posture. Overall, the digital infrastructure is modern and functional, but enhancements in security policies and compliance disclosures would strengthen the company's online trust and regulatory adherence.

B

Bateman's Barn Weddings

batemansbarn.co.uk

41

Bateman's Barn Weddings is a small hospitality business located in Suffolk, UK, historically providing wedding venue services, bed and breakfast accommodation, and conference hosting. The website announces the cessation of wedding services and a strategic pivot towards nature conservation and land stewardship. The business targets couples seeking unique wedding venues and local community members interested in heritage and conservation. The website is professionally designed, mobile-optimized, and includes social media integration, but lacks formal privacy, cookie, and terms of service policies. Technically, the site uses Bootstrap, jQuery, and Google Analytics, with HTTPS enabled but missing security headers. WHOIS data is incomplete and indicates domain registration issues, which lowers trust but does not negate the legitimacy of the business based on website content. Overall, the site is functional and professional but would benefit from improved privacy compliance and security hardening.

S

Sumburgh Hotel

sumburghhotel.com

62

Sumburgh Hotel is a small, privately owned hospitality business located in the South Mainland of Shetland, UK. The hotel offers accommodation, dining, business facilities, and self-catering options, targeting both business and leisure travelers. The website presents a professional and consistent brand image with clear navigation and relevant content. However, the domain WHOIS data is missing, which raises concerns about domain registration legitimacy despite the website's professional appearance. Technically, the website uses a modern front-end stack including Bootstrap, jQuery, Google Analytics, and FontAwesome, with indications of ProcessWire CMS usage. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS implied but lacking security headers and cookie consent mechanisms. Security evaluation shows no critical vulnerabilities but highlights gaps in privacy compliance and incident response transparency. The absence of WHOIS data and privacy protection details reduces trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices and compliance measures. Strategic recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing security and incident response policies, and verifying domain registration details to improve trust and legitimacy.

The Seasonal Group is a UK-based company specializing in creating bespoke immersive environments and magical experiences for shopping centres, garden centres, and theme parks both in the UK and internationally. Their offerings include virtual reality rides, animatronics, displays, decorations, and photo opportunities, positioning them as a niche B2B provider in the entertainment and themed environment sector. The company is established since 2009 and holds recognized certifications such as ISO 9001 and ISO 14001, enhancing their market credibility. Technically, the website is built on WordPress using modern plugins like WPBakery Page Builder, Yoast SEO, and Google Analytics for performance and marketing insights. The site is hosted by Fasthosts Internet Ltd and employs HTTPS with Google reCAPTCHA for form security. While the site demonstrates good mobile optimization and SEO practices, there is room for improvement in security headers and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, but lacks some advanced HTTP security headers. No critical vulnerabilities or exposed sensitive data were detected. The privacy and cookie policies are comprehensive and accessible, supporting regulatory compliance. Contact information is clearly presented, including phone, email, and physical address, contributing to business credibility. Overall, the website reflects a professional and trustworthy business with a solid digital presence. Recommendations include enhancing security headers, adding a terms of service page, and improving accessibility to further strengthen compliance and user experience.

S

Sylvestre Ltd

sylvestreltd.co.uk

46

Sylvestre Ltd is a UK-based importer and wholesaler specializing in fine champagnes and wines, targeting reputable restaurants, hotels, night clubs, and party organizers. Established in 2010, the company emphasizes relationships with small and medium growers to provide exclusive products. The website reflects a professional business presence with clear branding and contact information, including social media channels. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and incident response information. Overall, the site is trustworthy and well-positioned within its hospitality sector niche.

A

AK Travel & Money Transfer

aktravel.net

43

AK Travel & Money Transfer is a UK-based small travel agency specializing in long-haul flights, pilgrimage travel (Hajj & Umrah), money transfer, currency exchange, insurance, hotels, visas, and cargo services. The website presents a professional and comprehensive service offering targeting travelers and individuals sending money internationally, particularly to South Asia and the Middle East. The technical infrastructure uses modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, providing a good user experience with mobile optimization and clear navigation. However, the website lacks visible privacy and cookie policies, and the contact form is disabled in the HTML, which limits user interaction and compliance. Security posture is moderate with no explicit security headers detected and unknown SSL configuration. WHOIS data is missing, raising concerns about domain legitimacy and registration transparency. Overall, the site is functional and trustworthy in content but requires improvements in compliance and security transparency.

CCB Fastmap Ltd. operates fastmap.com as a specialized market research and customer insight service provider since 2006. The company focuses on helping businesses understand their customers better through tailored surveys, data analysis, and benchmarking against competitors. Their client base includes reputable organizations across various sectors, indicating a solid market position in the UK. The website is built on WordPress with a modern technology stack including Bootstrap and jQuery, providing a good user experience and mobile optimization. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business information appear professional and trustworthy. Security posture is generally good with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. Overall, the site is functional and credible but would benefit from improved transparency in domain registration and enhanced privacy compliance.

N

Nuclear Industry Association

niauk.org

75

The Nuclear Industry Association (NIA) is a well-established UK-based trade association representing the civil nuclear industry. The organization advocates for nuclear energy as a clean, reliable, and sustainable power source essential for the UK's climate goals. The website serves as a hub for industry news, events, membership information, and resources, targeting industry stakeholders, policymakers, and the general public interested in nuclear energy. The NIA positions itself as a credible and influential voice within the energy sector. Technically, the website is built on WordPress, leveraging modern web technologies such as Bootstrap, jQuery, and Google Analytics for performance and user engagement tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation structure. Privacy and cookie policies are implemented with user consent mechanisms, reflecting good compliance with GDPR requirements. From a security perspective, the site uses HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, supporting the NIA's role as a key industry association. Strategic recommendations include publishing detailed security and incident response policies, improving contact information visibility, and maintaining regular security audits to sustain trust and resilience.

H

Hayley Group Limited

hayley-group.co.uk

54

Hayley Group Limited is a well-established UK-based industrial supply specialist with over 50 years of experience. The company operates a large network of over 50 branches across the UK, providing engineering components, consumables, and a range of onsite engineering services. Their business model focuses on delivering value-added solutions beyond simple product supply, including bespoke manufacturing and technical support. The website reflects a mature, professional organization with strong market positioning in the manufacturing and energy sectors. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, Google Tag Manager, and Google reCAPTCHA, indicating a good level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and anti-bot measures in place, but could be improved by adding explicit security headers and a cookie consent mechanism. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security governance and transparency. The domain registration is consistent with the company's history and shows no suspicious patterns, supporting the legitimacy of the business. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing additional security headers to further strengthen the security posture.

J

JM Family Enterprises

jmfamily.com

61

JM Family Enterprises is a well-established diversified automotive company with a strong market presence in vehicle distribution, finance, insurance, retail sales, and home improvement franchises. The company is recognized as one of the largest private companies in the U.S., with a workforce exceeding 5,500 associates and annual revenues of $24.7 billion. The website reflects a professional corporate identity with consistent branding and a clear focus on business and community impact. Technically, the site is built on WordPress with modern frameworks and libraries, optimized for mobile and SEO, and integrates Google Analytics and Tag Manager for tracking. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and visible security headers, and does not publish explicit privacy or security policies. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

S

San Joaquin County

sjgov.org

67

San Joaquin County's official website serves as a comprehensive portal for residents and visitors to access county government services and information. The site is positioned as a local government authority providing essential public services. The technical infrastructure leverages modern web technologies including Bootstrap and Telerik Sitefinity CMS, ensuring a responsive and user-friendly experience. While the site employs HTTPS and uses Google Analytics for visitor insights, there is room for improvement in security headers and privacy compliance documentation. Overall, the website demonstrates a solid security posture appropriate for a government entity, though enhanced transparency in privacy and cookie policies would strengthen user trust. Strategic recommendations include implementing security headers, publishing comprehensive privacy and cookie policies, and improving accessibility features to meet compliance standards.

H

Hoof and Hound

hoofandhound.co.uk

52

Hoof and Hound is a small UK-based pet care service provider focusing on dog and horse grooming, sitting, and walking services. The current website is a placeholder indicating an upcoming new site, with minimal content and basic contact options limited to an email link and a login form. The business targets pet owners in the UK, operating likely as a small local service provider. Technically, the website uses Joomla CMS with jQuery and Bootstrap libraries, but lacks advanced features or modern optimizations. Security posture is weak, with no detected security headers and minimal form protections. The domain WHOIS data is unavailable due to a naming rules violation, raising concerns about domain legitimacy. Overall, the website is accessible but underdeveloped, with significant room for improvement in security, privacy compliance, and content quality.

G

Grandiose UK is under construction

grandioseuk.com

40

The website www.grandioseuk.com is currently under construction and displays only a placeholder page with minimal content. There is no business information, contact details, or privacy policies available, which severely limits the ability to assess the company's operations or legitimacy. The technical infrastructure is based on WordPress with a common under construction plugin and standard libraries such as Bootstrap and Font Awesome. No advanced analytics, tracking, or security features are detected. The security posture is weak due to lack of visible HTTPS confirmation, security headers, and absence of privacy or cookie policies. The domain WHOIS data is missing, indicating the domain may not be properly registered or is newly created, which raises concerns about legitimacy and trustworthiness. Overall, the website is not yet operational and provides no meaningful business or security information.

A

ACS Imaging - Signage Kent

acsimaging.co.uk

44

ACS Imaging is a small UK-based business specializing in signage, display, and shop fitting services primarily serving commercial clients in Kent. Their offerings include bespoke projects, customised work clothing, illuminated signage, and vehicle graphics. The website is built on WordPress using common plugins such as Visual Composer, Yoast SEO, and Contact Form 7, indicating a moderate level of digital maturity. The site is accessible, uses HTTPS, and integrates a live chat service for customer engagement. However, it lacks visible privacy and cookie policies, and no explicit contact emails or phone numbers are provided on the homepage, which may impact user trust and compliance. The WHOIS data for the domain is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain registration transparency. Security posture is moderate with HTTPS enabled but missing important security headers. Overall, the website is functional and business-focused but would benefit from enhanced privacy compliance and security hardening.

Agilent Technologies operates a professional and comprehensive website focused on life science instrumentation, specifically microplate instrumentation under the BioTek brand. The company is positioned as a global leader with over 50 years of experience, targeting scientific research and clinical laboratory markets. The website demonstrates a mature digital presence with modern technologies and a clear business focus. Technically, the site uses a robust tech stack including Bootstrap, jQuery UI, Adobe DTM, and Coveo search, supported by multiple analytics and marketing tools. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not publicly detailed. The WHOIS data is unavailable, likely due to privacy protection, but the website's branding and content strongly support legitimacy. Overall, the site is professional, secure, and compliant with privacy regulations, serving an enterprise-level audience effectively.

O

ORB Electrics

orbelectrics.co.uk

41

ORB Electrics is a small, family-run electrical contracting company based in the North East of the United Kingdom, established in 1989. The company offers a range of electrical services from minor domestic works to large-scale industrial and commercial electrical installations. Their website reflects a professional and consistent brand image, highlighting certifications from NICEIC which reinforce their credibility in the electrical industry. The target audience includes domestic and commercial customers seeking quality electrical services in the region. Technically, the website is built on Joomla CMS and utilizes common web technologies such as jQuery, Bootstrap, and MooTools. The site is moderately optimized for performance and mobile responsiveness, with a basic level of accessibility and SEO. However, there is no evidence of advanced analytics or tracking tools, and no contact forms or social media integrations were detected in the provided content. From a security perspective, the website lacks visible security headers and there is no information about HTTPS or SSL configuration in the provided data. The presence of CSRF tokens in scripts is a positive sign, but overall security posture is moderate with recommendations to improve HTTPS implementation, add security headers, and ensure secure form handling. The absence of privacy and cookie policies indicates a gap in compliance with data protection regulations such as GDPR. Overall, the website presents a trustworthy and professional business front but would benefit from enhanced security measures and privacy compliance to improve user trust and regulatory adherence. The lack of WHOIS data limits domain legitimacy verification, but the business content and certifications support its authenticity.

E

EM Systems Oy

emsystems.fi

47

EM Systems Oy is a Finnish technology company specializing in business management solutions leveraging the Odoo ERP platform. Their services include requirement specification, implementation, user training, and ongoing maintenance, targeting small and medium-sized enterprises and private individuals seeking affordable and efficient ERP solutions. The company positions itself as an expert in Odoo-based systems within the Finnish market, emphasizing automation and integrated management of business processes to improve productivity. Technically, the website is built on the Odoo CMS platform, utilizing Bootstrap and FontAwesome for frontend styling and icons. The site is moderately performant, mobile-optimized, and provides a professional user experience with clear navigation. However, SEO and accessibility features are basic, and no advanced analytics or tracking tools are detected. From a security perspective, the site uses HTTPS and includes CSRF tokens in scripts, but lacks important security headers such as Content-Security-Policy and HSTS. There is no visible cookie consent mechanism or published security policies, which indicates partial compliance with privacy regulations like GDPR. The domain registration is privacy protected, which is justified for this business type, and no suspicious patterns were found. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy mechanisms, and transparency policies would enhance the site's trustworthiness and compliance standing.

ا

العالمية للاستثمار والتنمية

alamiya-eg.com

50

العالمية للاستثمار والتنمية is an Egyptian joint-stock company established in 1981, specializing in real estate investment and development. The company focuses on housing projects, urban expansion, land acquisition, subdivision, infrastructure provision, construction, and related contracting activities. The website presents a professional corporate image targeting investors and clients in the Egyptian real estate sector. Technically, the site uses a modern but basic tech stack including Bootstrap, jQuery, and Google Maps API, with moderate performance and basic mobile optimization. Security posture is average with no visible advanced security headers or policies, and the absence of WHOIS data raises concerns about domain registration transparency. Overall, the site is functional and business-focused but lacks privacy and security best practices, which should be addressed to improve trust and compliance.

S

Simarco International Ltd

simarco.com

57

Simarco International Ltd is a UK-based independent logistics and freight operator with nearly three decades of experience. The company offers a comprehensive range of logistics services including air, ocean, and road freight, warehousing, customs clearance, and supply chain management. Positioned as a leading UK logistics provider, Simarco serves clients worldwide with tailored and flexible solutions. The website reflects a professional and well-established business with clear branding, extensive service descriptions, and active engagement through case studies and news updates. Technically, the site is built on WordPress with modern plugins and technologies, ensuring good performance, mobile optimization, and SEO. Security measures include HTTPS, Google reCAPTCHA, and standard WordPress security practices, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user data protection. WHOIS data is incomplete, lacking registrar and creation date information, which slightly impacts trust but does not detract from the overall legitimacy given the professional presentation and contact transparency.