Security Directory

B

Boothroyd & Company

boothroyd.co.uk

48

Boothroyd & Company is an independent estate and letting agency based in Kenilworth, Warwickshire, specializing in residential property sales, lettings, and management. The company positions itself as a trusted local expert with multiple customer service awards, targeting property buyers, sellers, landlords, and tenants in the local area. Their business model focuses on personalized service and local market knowledge, supported by a professional website showcasing their services and customer testimonials. Technically, the website is built on WordPress using popular plugins such as PropertyHive and Contact Form 7, with integrations for Google Analytics and Google reCAPTCHA to enhance user experience and security. The site demonstrates good SEO practices and mobile optimization, although some accessibility features could be improved. Performance is moderate, with modern web technologies employed. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies indicates a compliance gap with GDPR and related regulations. WHOIS data for the domain is unavailable due to a domain naming rules error, which limits the ability to fully verify domain legitimacy. Overall, the website presents a professional and trustworthy front for a small local real estate business, but improvements in privacy compliance, security headers, and domain registration transparency are recommended to enhance trust and security posture.

S

Spica Technologies

spicatech.co.uk

55

Spica Technologies operates as a provider of workplace experience software, offering a SaaS platform and a white-label employee app named GemEx. The company positions itself as an award-winning technology provider focused on enhancing workplace engagement, booking, services, and analytics. The website is professionally designed using WordPress with the Divi theme and optimized for performance and mobile devices. The technical infrastructure includes modern tools such as NitroPack, Google Tag Manager, Microsoft Clarity, and bot detection services, indicating a mature digital presence. Security measures include HTTPS, reCAPTCHA, and bot detection, though some security headers and policies are missing. The absence of WHOIS data due to domain naming rules violation introduces some uncertainty about domain legitimacy, but the website content and presentation suggest a legitimate business. Overall, the site is safe, business-focused, and well-structured, but improvements in privacy compliance and security transparency are recommended.

N

Nomy veisluþjónusta

nomy.is

56

Nomy veisluþjónusta is a specialized catering service based in Iceland, offering tailored menus and event catering solutions for a variety of occasions including weddings, corporate events, and private parties. The company operates a WordPress-based website with WooCommerce integration, providing both service information and an online store for food products. Their market position is that of a local, small-sized hospitality business with a focus on quality and customization. Technically, the website employs modern web technologies such as Elementor, Google Tag Manager, and Matomo Analytics, hosted behind Cloudflare DNS services. Security measures include HTTPS with SSL, Google reCAPTCHA on login and registration forms, and nonce tokens to protect forms from CSRF attacks. However, there is room for improvement in DNS security (DNSSEC not enabled) and HTTP security headers. Privacy compliance is partially addressed with a privacy policy and terms of service, but lacks an explicit cookie consent mechanism. Overall, the website is professional, trustworthy, and well-maintained, with moderate tracking and marketing integrations.

W

winvest.co.in

winvest.co.in

60

winvest.co.in is a website currently under development, presenting a 'Launching Soon' placeholder page with minimal business information. The site is hosted on GoDaddy's platform using their Website Builder technology and includes basic features such as a contact form protected by Google reCAPTCHA and a cookie consent banner referencing Google's privacy policies. There is no detailed description of the business model, services, or company background, limiting the ability to assess market position or operational scale. Technically, the site uses modern web standards and is mobile optimized, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled and reCAPTCHA implemented, but lacks security headers and explicit security or incident response policies. Overall, the site appears legitimate with consistent WHOIS data but is in an early stage of deployment.

A

ASG Aerospace

bh-precision.co.uk

57

ASG Aerospace is a UK-based aerospace company with a professional online presence hosted on the Squarespace platform. The website provides contact information primarily through a contact form and maintains a consistent branding approach. The technical infrastructure includes modern web technologies such as Google Tag Manager and reCAPTCHA, indicating a moderate level of digital maturity. However, the absence of direct contact emails or phone numbers and lack of privacy and cookie policies highlight areas for improvement in user trust and compliance. Security posture is generally good with HTTPS enforced and some security best practices observed, but additional security headers and incident response information are missing. The WHOIS data for the domain is unavailable due to a domain naming rules error, which raises concerns about domain legitimacy and reduces overall trust. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and clarifying domain registration details to improve credibility and compliance.

S

Sandison Easson & Co. Accountants

sandisoneasson.co.uk

68

Sandison Easson & Co. Accountants is a UK-based specialist accounting firm focusing on medical and dental professionals. Their website highlights chartered accounting services tailored for doctors across the UK, with offices in Wilmslow and London. The firm positions itself as a niche provider in healthcare accounting, targeting medical practitioners as their primary audience. The website content is professional and relevant to their business domain, though lacking in some compliance and contact details. Technically, the site uses modern web fonts and Google reCAPTCHA for form security, indicating a basic level of digital maturity. However, the absence of security headers and privacy policies suggests room for improvement in security posture and regulatory compliance. The WHOIS data for the domain is unavailable and indicates registration issues, which raises concerns about domain legitimacy despite the professional website presentation. Overall, the site is functional and informative but would benefit from enhanced security, compliance, and transparency measures.

C

Caledonian Industries Ltd

caledonian-group.co.uk

51

Caledonian Industries Ltd is a well-established manufacturing company specializing in engineered foam, seals, gaskets, and thermoplastic components, serving various industries including aerospace, energy, and food & drink. The company positions itself as a leader in Scotland and the UK, with over a century of experience and a subsidiary, Kayfoam Ltd, under the Caledonian Group umbrella. Their website reflects a professional business presence with clear product offerings and industry focus. Technically, the site uses a mix of established JavaScript libraries and modern tools such as Google reCAPTCHA and Google Tag Manager, indicating a moderate level of digital maturity. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks advanced security headers and uses an outdated jQuery version, which could pose risks. The absence of WHOIS data due to domain registration issues introduces some uncertainty about domain legitimacy, although the website content and business information appear credible. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security measures and domain registration clarity.

T

The George Hotel

thegeorgebuckden.com

57

The George Hotel is an independent boutique hotel and award-winning restaurant located in Buckden, Cambridgeshire, UK. It offers a luxury hospitality experience with ten bedrooms, a 4 Star rating, and a One Rosette award for its restaurant. The website showcases their accommodation, dining options including brunch, afternoon tea, and a cocktail bar, targeting general audiences seeking a refined hospitality experience. The business positions itself as a premium local destination with a focus on quality and customer experience. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, jQuery, and Google reCAPTCHA for form security. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. The hosting is via Webflow's CDN, ensuring reliable delivery. From a security perspective, the site uses HTTPS and includes reCAPTCHA on forms, but lacks important security headers and a cookie consent mechanism, which are important for compliance and protection. The absence of WHOIS data for the domain is a notable concern, as it impedes verification of domain legitimacy and ownership. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional and trustworthy in appearance, but the missing WHOIS information and lack of privacy compliance features suggest areas for improvement. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and verifying domain registration details to strengthen trust and compliance.

T

The Norfolk Water Company

norfolkwater.co.uk

48

The Norfolk Water Company is a well-established supplier of premium quality bottled and mains fed water dispensers and coolers serving the East Anglia region, including Norfolk, Suffolk, Cambridgeshire, and Essex. With over 16 years of experience, the company positions itself as a leading provider in its market segment, offering a range of services including bottled water coolers, plumbed-in coolers, instant hot water dispensers, and contract filling solutions. The website reflects a professional business model targeting offices and commercial clients seeking reliable water dispensing solutions. Technically, the website employs modern web technologies such as Google reCAPTCHA for bot protection, lazy loading scripts, and custom CSS/JS for user experience enhancements. The site is mobile optimized and SEO friendly with proper meta tags and structured data. Hosting and domain registration are consistent with the business claims, and the website performance is moderate with good accessibility features. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and integrates Google reCAPTCHA on forms, demonstrating a solid baseline security posture. However, the absence of security headers and a public security policy or incident response contact limits its security maturity. Privacy compliance is strong with a clear privacy policy, cookie consent mechanism, and GDPR adherence. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.

B

Bendalls Engineering

bendalls.co.uk

55

Bendalls Engineering is a well-established UK-based engineering company specializing in design and fabrication services for safety-critical and hazardous environments, including sectors such as Nuclear, Defence, Oil & Gas, and Renewable Energy. With a history spanning nearly 130 years, the company holds a strong market position supported by ISO certifications and a commitment to quality and sustainability. Their website reflects a professional B2B service model targeting industrial clients requiring bespoke engineering solutions. Technically, the website is built on WordPress using the Flatsome theme and Yoast SEO plugin, incorporating modern web technologies such as jQuery and Google reCAPTCHA for security. The site demonstrates good mobile optimization, SEO practices, and performance, although some accessibility enhancements could be made. Cookie consent is managed comprehensively with user controls, reflecting GDPR compliance. Security posture is solid with HTTPS enforced, spam protection via reCAPTCHA, and cookie consent mechanisms. However, security headers like CSP and X-Frame-Options are not explicitly detected and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, Bendalls Engineering's digital presence is professional, secure, and compliant, supporting their business credibility. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen their security and compliance posture.

S

Suds Launderette

sudslaunderette.com

57

Suds Launderette is a small retail laundry service business based in Mississauga, Canada, offering personalized laundry care including wash and fold and coin laundry services. The website is professionally designed using the Squarespace platform, featuring clear navigation, contact information, and social media integration. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Technically, the site uses HTTPS and Google reCAPTCHA but lacks advanced security headers and privacy policies, which impacts its security and compliance posture. Overall, the website is functional and user-friendly but would benefit from improved security practices and transparency regarding privacy and domain registration.

Hengsheng Melamine Ware Co Ltd is a large manufacturing company based in Hong Kong specializing in melamine tableware production and export. Established in 2000, it holds a significant market position in Asia with extensive manufacturing capabilities and a focus on both classic and innovative designs. The company offers OEM and tailor-made services supported by in-house R&D and art departments. Technically, the website is built on RVSiteBuilder CMS using the UIkit framework and includes integrations such as Facebook SDK and Google reCAPTCHA. However, some technical debt is evident with outdated libraries and mixed content issues. Security posture is moderate with basic protections but lacks comprehensive security headers and policies. Privacy compliance is poor due to absence of privacy and cookie policies. Overall, the website provides essential business information and contact details but requires improvements in security and privacy to enhance trust and compliance.

H

Haines Watts

hwca.com

71

Haines Watts is a UK-based professional services firm specializing in chartered accountancy, VAT, tax advisory, and business advisory services. The company targets business owners and entrepreneurs, offering a comprehensive suite of services to help clients achieve their business goals efficiently. The website reflects a mature and professional market position with consistent branding and high-quality content. Technically, the website is built on the Umbraco CMS platform and leverages modern web technologies including Google Tag Manager, HubSpot, Cookiebot for consent management, and Google reCAPTCHA for form security. The site is mobile-optimized, accessible, and performs moderately well, with good SEO practices implemented. From a security perspective, the site enforces HTTPS, uses security headers, and employs anti-bot measures. Cookie consent and privacy compliance are well managed, indicating a strong privacy posture. However, the absence of a publicly available security policy or incident response information is a gap. The WHOIS data is missing, which slightly reduces trust but does not outweigh the professional presentation and compliance indicators. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a security policy, incident response contacts, and improving WHOIS transparency to enhance trust further.

A

Align Chiropractic

alignchiropractic.co.uk

44

Align Chiropractic is a small healthcare provider specializing in chiropractic services located in Taverham, Norwich, UK. The website serves as a basic informational platform primarily targeting local residents seeking chiropractic care. The business model is straightforward, focusing on direct patient services with contact primarily via phone. The website uses modern front-end technologies such as Bootstrap and FontAwesome, with embedded YouTube and Google reCAPTCHA integrations, indicating a moderate level of digital maturity. However, the site lacks comprehensive privacy and cookie policies, which are critical for compliance and user trust. Security posture is limited with no detected security headers and no visible incident response or vulnerability disclosure mechanisms. The domain WHOIS data is unavailable due to a naming rules violation, which raises concerns about domain legitimacy and reduces overall trust. Overall, the website is functional and safe but requires improvements in compliance, security, and business transparency to enhance credibility and user confidence.

S

Saunders Metals Ltd

saundersmetals.co.uk

68

Saunders Metals Ltd is a well-established scrap metal recycling company based in Swindon, UK, with a history dating back to 1979. The company offers a range of services including scrap metal purchasing, vehicle recovery, and recycling of catalytic converters and car batteries. They provide next day payment and handle all necessary DVLA paperwork, positioning themselves as a convenient and reliable local service provider. The website reflects a professional and consistent brand image with clear contact details and trust indicators such as SecureTrust certification and DVLA compliance logos. Technically, the website is built on WordPress with modern plugins and integrations including Yoast SEO, Google Tag Manager, and reCAPTCHA, indicating a mature digital infrastructure. The site is mobile optimized, uses HTTPS, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics, though some improvements in security headers and accessibility could be made. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, secure forms, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. Overall, the website and business present a low-risk profile with strong business credibility and compliance posture. The main limitation is the lack of WHOIS data due to a domain query error, which slightly reduces confidence in domain legitimacy verification. Strategic recommendations include improving security headers, publishing security policies, and enhancing accessibility compliance to further strengthen trust and security posture.

Intuitive Systems is a UK-based travel technology company specializing in high-performing travel reservation software for tour operators, online travel agents (OTAs), and B2B wholesalers. With over two decades of industry experience, they offer a suite of products including iVector, iVectorOne, and DealFinder, designed to streamline booking operations, enhance connectivity, and improve search performance. Their platform is trusted by over 80 customers worldwide, including well-known travel brands. The company emphasizes flexibility, automation, and AI integration to support modern travel businesses in scaling and innovating their operations. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, HubSpot, and LinkedIn Insight Tag. Hosting is inferred to be on AWS with a fully managed cloud infrastructure. The site demonstrates good SEO and accessibility practices, with a responsive design and clear navigation. Security measures include HTTPS enforcement and use of Google reCAPTCHA, though some security headers could be improved. The security posture is solid with no critical vulnerabilities detected, but the absence of explicit security headers and incomplete WHOIS data slightly reduce trust scores. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, Intuitive Systems presents a professional, trustworthy digital presence aligned with its business focus. The WHOIS data inconsistency suggests privacy protection or data source issues but does not detract significantly from legitimacy. Strategic recommendations include enhancing security headers, providing clearer direct contact information, and verifying domain registration details to improve transparency and trust.

B

Bauer & Cottrell

bauerandcottrell.co.uk

45

Bauer & Cottrell is a UK-based specialist consultancy focused on IR35 compliance and Off-Payroll Working advice, targeting contractors and businesses. The company positions itself as an expert with over 20 years of experience in this niche, offering advisory and compliance services. The website is professionally designed using WordPress and Elementor, integrating modern tools such as Gravity Forms, Google Analytics, and Tawk.to live chat to support user engagement and data collection. The technical infrastructure reflects a mature digital presence with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers and formal policies are missing. The WHOIS data is unavailable due to domain naming irregularities, which introduces some uncertainty about domain legitimacy, but the website content and branding are consistent and professional. Overall, the site demonstrates a good balance of business credibility and technical implementation, with room for improvement in privacy compliance and security best practices.

I

Infomaniak Network SA

swisstransfer.com

67

SwissTransfer is a secure, free large file transfer service operated by Infomaniak Network SA, a Swiss hosting provider. The service allows users to send files up to 50 GB without registration, with files stored in Switzerland and transfers retained for up to 30 days. The website is well-branded and targets a general audience seeking secure and easy file sharing solutions. Technically, the site uses modern frameworks such as Angular and StencilJS, integrates Google reCAPTCHA for bot protection, and employs Matomo for analytics. The site is mobile optimized and uses HTTPS with good security practices, although explicit security headers and privacy policies are not clearly presented in the HTML content. WHOIS data for the .com domain is unavailable, which limits domain trust assessment, but the strong association with Infomaniak supports legitimacy. Overall, the site presents a professional and trustworthy service with room for improvement in privacy transparency and contact availability.

D

DCLX

dclx.co.uk

57

DCLX is a well-established UK-based event production and lighting hire company founded in 2006, operating primarily in London with a strong reputation in the event production sector. The company offers a comprehensive range of services including bespoke event solutions, equipment hires, and sales, serving a diverse clientele from corporate events to live music festivals and fashion shows. Their market position is reinforced by a professional website, strong client portfolio, and consistent branding. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and libraries, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and reCAPTCHA implemented, though there is room for improvement in security headers and explicit cookie consent mechanisms. Overall, the website reflects a credible and professional business with a medium-sized operational scale and a parent company relationship with ADA Live.

H

H2O Vending Solutions Ltd

h2o-vendingsolutions.co.uk

51

H2O Vending Solutions Ltd is a well-established vending service provider based in Birmingham, UK, operating since 2005. The company specializes in providing rent-free vending machines for hot drinks, cold drinks, snacks, and water dispensers, targeting businesses, schools, healthcare centers, and leisure facilities primarily within the West Midlands. Their business model includes fully managed vending services and self-managed vending support, with leasing options available. The website reflects a professional and consistent brand presence, supported by partnerships with reputable brands and positive customer testimonials. Technically, the website is built on WordPress using the Avada theme and WooCommerce for e-commerce functionality. It employs modern web technologies such as jQuery, Swiper Carousel, and Google reCAPTCHA for form security. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Hosting and domain registration are consistent with the business location and claims. From a security perspective, the site uses HTTPS with good SSL configuration and standard security headers. Forms are protected with reCAPTCHA, and no sensitive data is exposed. However, the absence of published privacy, cookie, and security policies reduces privacy compliance and transparency. There is no vulnerability disclosure or incident response information available. Overall, the website presents a low-risk profile with a solid business foundation and good technical implementation. Strategic improvements in privacy compliance, security policy transparency, and accessibility would enhance trust and regulatory adherence.

S

Salt & Pepper Events

saltandpepperevents.co.uk

55

Salt & Pepper Events is a well-established London-based event staffing agency founded in 2011, specializing in providing high-quality hospitality staff, security personnel, catering services, and equipment hire for private and corporate events. The company positions itself as a trusted partner with over 13 years of experience, strong client retention, and excellent customer reviews. Their website reflects a professional and consistent brand image, targeting event organizers seeking reliable event support services in London and surrounding areas. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and user interaction, showing moderate performance and good mobile optimization. Security measures include HTTPS, Google reCAPTCHA on forms, and nonce usage, though advanced security policies and headers could be improved. Privacy compliance is basic with a privacy and cookie policy present but lacking detailed GDPR statements or terms of service. Overall, the domain registration data supports the legitimacy and longevity of the business. The website is safe, free from adult or questionable content, and provides clear contact information and social media presence.

The Seasonal Group is a UK-based company specializing in creating bespoke immersive environments and magical experiences for shopping centres, garden centres, and theme parks both in the UK and internationally. Their offerings include virtual reality rides, animatronics, displays, decorations, and photo opportunities, positioning them as a niche B2B provider in the entertainment and themed environment sector. The company is established since 2009 and holds recognized certifications such as ISO 9001 and ISO 14001, enhancing their market credibility. Technically, the website is built on WordPress using modern plugins like WPBakery Page Builder, Yoast SEO, and Google Analytics for performance and marketing insights. The site is hosted by Fasthosts Internet Ltd and employs HTTPS with Google reCAPTCHA for form security. While the site demonstrates good mobile optimization and SEO practices, there is room for improvement in security headers and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, but lacks some advanced HTTP security headers. No critical vulnerabilities or exposed sensitive data were detected. The privacy and cookie policies are comprehensive and accessible, supporting regulatory compliance. Contact information is clearly presented, including phone, email, and physical address, contributing to business credibility. Overall, the website reflects a professional and trustworthy business with a solid digital presence. Recommendations include enhancing security headers, adding a terms of service page, and improving accessibility to further strengthen compliance and user experience.

P

PSD Group

thepsdgroup.co.uk

53

PSD Group is a family-owned and managed business established in 1978, specializing in vehicle rental, leasing, and sales primarily serving business and retail customers in the North West of England. The company operates multiple related domains dedicated to rental, leasing, and sales services, reinforcing its market presence. The website presents a professional and consistent brand image with clear service offerings and customer testimonials, positioning PSD Group as a reputable regional transportation service provider. Technically, the website is built on WordPress using the GeneratePress theme and several modern plugins including Yoast SEO, Google Analytics, and Google Tag Manager. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though the absence of security headers and cookie consent mechanisms suggests room for improvement in security and privacy compliance. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but enhancements such as implementing security headers and a cookie consent banner would strengthen compliance with GDPR and improve user trust. The lack of WHOIS data due to a domain lookup error limits the ability to fully verify domain registration legitimacy, but the overall business information and external links support the authenticity of the company. Overall, PSD Group’s digital presence is professional and trustworthy with a medium risk profile primarily due to incomplete WHOIS data and minor security/privacy gaps. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and regulatory adherence.

L

LBB Chartered Surveyors

lbb.org.uk

46

LBB Chartered Surveyors is a well-established UK-based professional surveying firm with nearly 30 years of experience, specializing in building surveying, valuations, lease extensions, enfranchisement, disputes, and litigation. The company targets property owners, tenants, landlords, and legal professionals primarily in Central London and the South East. Their market position is strong, supported by professional accreditations such as RICS and ALEP, and positive client testimonials. Technically, the website is built on WordPress with Elementor and Gravity Forms, incorporating modern SEO and analytics tools, though some security headers are missing. The security posture is solid with HTTPS and reCAPTCHA in place, but improvements in cookie consent and security policies are recommended. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements, though enhancements in privacy and security policies would strengthen compliance and user trust.

L

Leonardo Hotels

jurysinns.com

62

Leonardo Hotels is a large hospitality chain operating over 315 hotels across Europe, the UK, and Israel, providing accommodation, meeting facilities, and leisure services to travelers and business clients. The website is professionally designed using modern Angular technology and integrates key Google services for analytics and user interaction. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. WHOIS data is unavailable due to a domain naming rule violation error, which raises some concerns about domain registration legitimacy but does not detract from the professional presentation and trustworthiness of the website content. Overall, the site demonstrates good digital maturity and business credibility with moderate technical performance and security practices.

T

The Finance Lab Ltd

financelab.co.uk

60

The Finance Lab Ltd is a Leicester-based financial advisory firm specializing in mortgage advice, insurance, commercial mortgages, and wills services. With over 40 years of experience, the company positions itself as a trusted local expert helping individuals and businesses navigate complex financial decisions. The website reflects a professional and client-focused approach with clear service offerings and community involvement. Technically, the site is built on Webflow with modern web technologies and includes security features such as HTTPS and Google reCAPTCHA. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The WHOIS data is incomplete and shows an unusual domain registration error, which slightly impacts trustworthiness but does not negate the legitimacy suggested by the website content and certifications. Overall, the site is well-designed and functional, serving its target audience effectively.

A

Ahmarra Door Solutions Ltd

ahmarra.co.uk

47

Ahmarra Door Solutions Ltd is a well-established UK-based manufacturer and installer of certified timber fire doors, serving sectors including education, healthcare, social housing, commercial, airports, and luxury homes. The company holds multiple industry-recognized certifications such as Q-Mark, ISO 9001, ISO 14001, FSC, and Secured By Design, positioning it as a trusted leader in its niche market. Their website reflects a professional and comprehensive digital presence, offering detailed product information, specification tools, BIM models, and educational CPD sessions for industry professionals. The target audience includes architects, specifiers, contractors, and building owners seeking high-quality fire door solutions.

C

Corporate Alchemy

corpalc.com

46

Corporate Alchemy is a UK-based small business specializing in executive coaching and leadership training services. Established in 2006, it serves senior executives, partners, and managers to enhance leadership skills, emotional intelligence, and people management capabilities. The company has a strong market presence supported by reputable clients and professional branding. Technically, the website is built on WordPress using the Genesis framework, with integrations including Google Analytics and Mailchimp for marketing and analytics. The site is mobile-optimized and performs moderately well. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms, but lacks DNSSEC and security headers, and does not provide explicit security or incident response policies. Overall, the website is trustworthy and professional, with minor areas for security and privacy improvement.

T

Trustco PLC

trustco.co.uk

67

Trustco PLC is an established UK-based technology services company specializing in hybrid cloud solutions, data centre consolidation, cybersecurity, and managed IT services. Founded in 1997, the company positions itself as a trusted business technology partner offering a comprehensive suite of services including containerised datacentres, governance, risk and compliance (GRC), IT asset repair and disposal, and Windows 11 migration services. Their market presence is supported by a professional website, active social media channels, and customer feedback mechanisms. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Superfly Menu, and CookieYes for consent management. The infrastructure leverages Cloudflare for CDN and bot management, Google Tag Manager for analytics, and Microsoft Authentication Library for secure user interactions. The site demonstrates good performance, mobile optimization, and accessibility standards. From a security perspective, Trustco employs HTTPS with strong SSL configuration, integrates Google reCAPTCHA to mitigate spam, and uses cookie consent mechanisms aligned with GDPR. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. The domain registration is consistent with the business claims, showing a long history and reputable registrar. Overall, Trustco PLC's digital presence reflects a mature, secure, and compliant business environment with a clear focus on technology services for enterprise clients. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing a vulnerability disclosure policy to further strengthen trust and security culture.

East Cheshire Chamber of Commerce and Enterprise is a well-established local business support organization founded in 2009, serving the East Cheshire area. The chamber provides a range of services including business representation, networking opportunities, events, and guidance to its members. The website reflects a professional and consistent brand image with clear contact information and active social media presence. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and user engagement, hosted by Fasthosts Internet Ltd. Security posture is solid with HTTPS enforced, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the site is trustworthy and well-positioned as a local chamber of commerce.

H

Hayley Group Limited

hayley-group.co.uk

54

Hayley Group Limited is a well-established UK-based industrial supply specialist with over 50 years of experience. The company operates a large network of over 50 branches across the UK, providing engineering components, consumables, and a range of onsite engineering services. Their business model focuses on delivering value-added solutions beyond simple product supply, including bespoke manufacturing and technical support. The website reflects a mature, professional organization with strong market positioning in the manufacturing and energy sectors. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, Google Tag Manager, and Google reCAPTCHA, indicating a good level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and anti-bot measures in place, but could be improved by adding explicit security headers and a cookie consent mechanism. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in security governance and transparency. The domain registration is consistent with the company's history and shows no suspicious patterns, supporting the legitimacy of the business. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security policies, and implementing additional security headers to further strengthen the security posture.

H

Harrison Drury Solicitors

harrison-drury.com

61

Harrison Drury Solicitors is a well-established UK law firm serving businesses, individuals, and families primarily in the North of England. The firm offers a comprehensive range of legal services including probate, employment law, family law, commercial business, and property law. Their market position is that of a leading regional law firm with multiple office locations and a strong client base. The website reflects a professional and client-focused business model with clear communication and trust-building elements such as client logos and awards. Technically, the website is built on WordPress using modern themes and plugins including Gravity Forms, Google Tag Manager, and CookieYes for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and structured data enhancing search visibility. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. However, the absence of WHOIS registration data reduces transparency and trust from a domain registration perspective. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency to further strengthen trust and compliance.

D

Deans Accountants

deansaccountants.com

61

Deans Accountants is a well-established chartered accountancy firm based in Staffordshire, UK, offering a comprehensive range of financial and business advisory services to a diverse clientele including large PLCs, start-ups, subsidiaries, farmers, and individuals. The firm emphasizes personalized service delivered by experienced professionals and maintains a strong market position supported by its regulatory affiliation with the ICAEW. The website reflects a professional and trustworthy business with clear branding and detailed service offerings. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google reCAPTCHA, Cloudflare Turnstile, and Lottie animations to enhance user experience and security. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices evident in meta tags and structured navigation. However, some security headers are missing, and there is no cookie consent mechanism, which could be improved for compliance. From a security perspective, the site uses HTTPS and form protections effectively, but lacks explicit security policies or incident response information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and professional presentation mitigate these concerns to an extent. Overall, the website presents a credible and professional business front with minor areas for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

B

Brooktech Maintenance Ltd

brooktechmaintenance.com

58

Brooktech Maintenance Ltd is a small, regionally focused commercial and industrial maintenance company based in Stockport, UK. They offer a comprehensive range of services including gas and heating, plumbing and water treatment, electrical services, air conditioning, refrigeration, and mechanical and electrical installations. The company emphasizes planned maintenance and rapid emergency response, supported by recognized accreditations such as Gas Safe, NICEIC, and SRI. Their market position is that of a trusted local service provider with over 45 years of combined experience among its directors. Technically, the website is built on WordPress using popular plugins like WPBakery Page Builder and Slider Revolution. It employs modern web technologies including HTTPS, Google Tag Manager, and reCAPTCHA for security and analytics. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or recent registration, which slightly reduces trustworthiness. No explicit incident response or security policy is published. Overall, the website presents a professional and trustworthy front for a small commercial maintenance business, but domain registration transparency should be improved to enhance legitimacy and trust.

B

Blueprint Orthotics Ltd

blueprintorthotics.com

43

Blueprint Orthotics Ltd is a UK-based specialist company established in 2010, providing custom-made orthotics and orthoses primarily to NHS and large private clinics. The company emphasizes skilled handcrafting and offers a range of orthotic products tailored to various medical conditions. Their market position is strengthened by ISO 9001:2015 certification, reflecting a commitment to quality and customer service. The website is professionally designed, with clear navigation and comprehensive product information targeting healthcare professionals and clinics. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and reCAPTCHA for security. The site is mobile-optimized and employs various plugins for enhanced user experience. Security posture is solid with HTTPS enforced and anti-bot measures on forms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration transparency and legitimacy. Despite this, the website content and business information appear consistent and trustworthy. Overall, the site presents a professional and credible front but would benefit from improved domain registration transparency and enhanced security headers. Strategic recommendations include implementing additional security headers, establishing an incident response contact, maintaining up-to-date software, and enhancing accessibility features to further strengthen compliance and user trust.

M

Multiple Sclerosis Therapy Centre Norfolk

mstcn.org.uk

60

Multiple Sclerosis Therapy Centre Norfolk is an independent charity dedicated to providing therapy services, information, and support to individuals affected by multiple sclerosis and other neurological conditions in Norfolk, UK. The organization operates a therapy center staffed by a team of therapists and offers room hire services to support its operational costs. The website reflects a local, community-focused non-profit with clear contact details and a donation mechanism, positioning it as a trusted resource within its niche. Technically, the website is built using modern web technologies, including JavaScript and web fonts, and is hosted by Fasthosts Internet Ltd. It employs a progressive web app manifest and service worker for enhanced user experience and mobile optimization. The site uses Google reCAPTCHA to protect its contact form and implements a cookie consent banner, indicating attention to privacy compliance. However, explicit security headers and detailed security policies are absent. From a security perspective, the site benefits from HTTPS encryption and basic security best practices but lacks advanced security headers and incident response information. No vulnerabilities or suspicious domains were detected. Privacy compliance is supported by the presence of a privacy policy and cookie consent mechanism, though GDPR-specific details are basic. Overall, the website demonstrates a solid digital presence for a small non-profit charity, with good content quality, technical implementation, and business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen trust and compliance.

O

Orthoplastics

orthoplastics.com

51

Orthoplastics is a specialized manufacturer of premium medical-grade UHMWPE and implantable plastics, serving the orthopaedic implant industry for over 40 years. The company positions itself as a trusted supplier to leading device manufacturers, focusing on high-quality materials for medical devices. The website reflects a professional B2B business model targeting medical device manufacturers and related healthcare sectors. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and presents good content quality and navigation. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks some security headers and published security policies. WHOIS data is missing or unavailable, which raises concerns about domain registration transparency. Overall, the site is functional and professional but would benefit from improved privacy compliance and clearer domain ownership information.

HugeDomains operates as a reputable domain marketplace specializing in the resale of premium domain names such as BudDevelopment.com. The platform offers flexible purchasing options including outright buy and payment plans, supported by a 30-day money back guarantee and secure shopping experience. The website targets individuals and businesses seeking valuable domain assets and positions itself as a trusted intermediary with a strong market presence since 2005. Technically, the site employs modern web technologies including jQuery, Google Analytics, and reCAPTCHA, ensuring a functional and user-friendly interface with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be enhanced. Privacy compliance is well addressed with clear policies and GDPR-aligned consent management. Overall, the domain listing and marketplace demonstrate high professionalism and trustworthiness, with no signs of malicious activity or content safety concerns.

F

Fumetec - Fume Extraction Systems

fumetec.co.uk

45

Fumetec Ltd is a UK-based specialist company focused on the design, manufacture, installation, and maintenance of fume cupboards and fume extraction systems for various industries. Their website presents a professional image with clear descriptions of their key services and product offerings, targeting industrial and commercial clients requiring laboratory safety and fume control solutions. The company positions itself as a trusted manufacturer and installer within the UK market. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern performance optimizations such as WP Rocket and Google Analytics integration. The site is mobile-optimized and provides a cookie consent mechanism aligned with GDPR requirements. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA, but lacks explicit security policies and incident response information. The WHOIS data for the domain is unavailable due to a domain naming rules error, which limits full verification of domain legitimacy. Overall, the website is functional, professional, and secure with room for improvement in privacy and security transparency.

H

Hawkesford

hawkesford.co.uk

57

Hawkesford is a well-established real estate agency operating primarily in Warwickshire and the Channel Islands, offering a broad range of services including residential sales, lettings, commercial property, land sales, surveys, and auctions. The company has a strong regional presence and a professional online presence with clear service offerings and customer testimonials. Technically, the website is built on WordPress using the Divi theme and several modern plugins, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and use of reCAPTCHA, but could be improved by implementing additional security headers and publishing clear privacy and cookie policies. Overall, the domain registration data supports the legitimacy and longevity of the business. Strategic improvements in privacy compliance and security policies would enhance trust and regulatory adherence.

K

Kino Marilyn Oy

kinomarilyn.fi

46

Kino Marilyn Oy operates a Finnish cinema website providing movie screenings and online ticket reservations. The business is a small local cinema established in 2012, serving the general public interested in entertainment. The website is built on WordPress with a modern tech stack including jQuery and Google reCAPTCHA for form security. The site is accessible, mobile-optimized, and professionally designed with consistent branding. Security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers are missing and privacy policies are not explicitly found. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

T

Taqueria El Rey

elrey.fi

51

Taqueria El Rey is a small, cozy Mexican restaurant located in the heart of Helsinki, Finland. The business focuses on offering authentic Mexican tacos and handcrafted cocktails in a trendy and relaxed atmosphere. Their services include dine-in, takeaway, and home delivery via Wolt, positioning them as a local hospitality provider catering to general audiences seeking Mexican cuisine. The website reflects a professional and consistent brand image with clear contact information and active social media presence. Technically, the site is built on WordPress with modern plugins and integrations such as Yoast SEO, Cookiebot for consent management, and Google Analytics for tracking. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though explicit security headers could be improved. Privacy compliance is well addressed with comprehensive policies and user consent mechanisms. Overall, the site demonstrates good digital maturity and business credibility with no critical security or compliance issues detected.

PIRKANMAAN SISÄPINTA OY is a Finnish small business specializing in damage restoration and related construction services, including moisture mapping, odor removal, and asbestos surveying. The company emphasizes its combined 35 years of entrepreneurial experience and operates primarily in the Finnish market. Their website is hosted on the Weebly platform and managed by Louhi Net Oy, reflecting a modest but professional digital presence. The site provides clear contact information and service descriptions but lacks formal privacy and security policies. Technically, the site uses older JavaScript libraries and lacks modern security headers, which could expose it to vulnerabilities. However, the presence of a cookie consent banner indicates some awareness of privacy compliance. Overall, the business appears legitimate and stable, with room for improvement in security and compliance documentation.

R

Riihisoft Oy

riihisoft.fi

62

Riihisoft Oy is a Finnish technology company specializing in software development, device management, and custom enterprise software solutions. The company leverages modern technologies including Microsoft Azure, Umbraco CMS, and .NET frameworks to deliver scalable and efficient IT services. Their market position is strengthened by partnerships with Microsoft and Umbraco, as well as a portfolio of reputable clients across various sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the site is built on a modern stack with strong performance and mobile optimization. Security measures include HTTPS enforcement, anti-forgery tokens, Google reCAPTCHA, and a detailed cookie consent mechanism, indicating a strong security posture. However, the absence of a dedicated security policy or vulnerability disclosure page suggests room for improvement in transparency and incident response readiness. Overall, the website and domain registration data align well, supporting a high legitimacy score and trustworthiness. Strategic recommendations include publishing explicit security policies and incident response contacts to further enhance stakeholder confidence.

F

Fashion Finland ry

fafi.fi

51

Fashion Finland ry is a Finnish non-profit industry association dedicated to enhancing the visibility, appreciation, and business support of the fashion sector in Finland. The organization actively promotes collaboration and the culture of fashion through member services, events, and information dissemination. The website serves as a professional platform targeting fashion industry professionals, businesses, and interested consumers within Finland. It provides news, trends, event information, and membership details, positioning itself as a key player in the Finnish fashion ecosystem. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates advanced search capabilities via Algolia. It employs Google reCAPTCHA for form security and uses Google Tag Manager and Facebook Pixel for analytics and marketing. Hosting is inferred to be with OVH based on nameservers. The site is mobile-optimized, SEO-friendly, and demonstrates good performance and accessibility standards. From a security perspective, the site enforces HTTPS, uses CAPTCHA to protect forms, and does not expose sensitive data. While some security headers are not explicitly detected, the overall posture is strong with no evident vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. WHOIS data confirms the legitimacy and transparency of the organization, matching the website's claims and business nature. Overall, Fashion Finland ry's website is a credible, well-maintained digital presence that effectively supports its mission and audience. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

Harrison EDS is a UK-based specialist supplier and manufacturer of branding, display solutions, and flags, primarily serving the automotive, retail, and house builder sectors. With over 40 years of experience and backing from the Harrison Group parent company, it holds a strong market position as a trusted B2B provider. The website is professionally designed using WordPress and WooCommerce, integrating modern technologies such as Google Analytics, HubSpot forms, and Mapbox for enhanced user experience and marketing capabilities. Security posture is solid with HTTPS enforcement and reCAPTCHA on forms, though there is room for improvement in implementing security headers and explicit incident response policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and professional business presence with good content quality and user experience.

Acropolis Capital is a private family investment office with a long-standing history since 1975, specializing in strategic investments across real estate, hospitality, leisure, and alternative funds. The company operates globally with a focus on partnering with entrepreneurs and management teams to deploy capital effectively. The website reflects a professional and consistent brand image, targeting investors and business partners seeking stable, long-term investment opportunities. Technically, the site is built on WordPress with modern libraries such as Foundation, GSAP, and Google services for analytics and fonts, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced DNS security and explicit security headers. Privacy compliance is addressed with cookie consent and privacy policy, though incident response and security policies are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Purple Strategies, LLC

purplestrategies.com

74

Purple Strategies, LLC is a bipartisan corporate reputation firm specializing in blending political campaign speed and strategy with brand communications. The company targets Fortune 500 companies, trade associations, and major brands, helping them navigate reputation, public affairs, and issue advocacy. The website reflects a strong market position with professional branding and clear communication of services. Technically, the site is built on modern frameworks such as Next.js and React, hosted likely on Vercel, and integrates advanced analytics and marketing tools including Google Analytics, HubSpot, and Matomo. The site is fast, mobile-optimized, and SEO-friendly. Security posture is strong with HTTPS enforced, use of reCAPTCHA, and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the site presents a trustworthy and professional digital presence consistent with an established corporate consultancy.

B

Belfast Cookery School

belfastcookeryschool.com

67

Belfast Cookery School is a small hospitality business specializing in hands-on cooking classes and event hosting in Belfast, Northern Ireland. Their offerings include group, private, corporate, hen, and stag party classes, positioning them as a local experiential service provider in the culinary education sector. The website is professionally designed using the Squarespace platform, featuring good content quality, clear navigation, and mobile optimization. The business maintains an active social media presence on Facebook and Instagram, enhancing customer engagement and trust. Technically, the website leverages modern web technologies and benefits from Squarespace's hosting and CDN infrastructure. Security measures include HTTPS with HSTS enabled and the use of Google reCAPTCHA to protect forms. A cookie consent banner is implemented, supporting GDPR compliance, although explicit privacy and terms of service pages are absent. The lack of WHOIS data for the domain raises concerns about domain registration legitimacy, but the website content and SSL presence suggest a genuine business operation. Security posture is strong with no detected vulnerabilities or exposed sensitive data. However, the absence of formal security policies and incident response information indicates room for improvement in governance and compliance. Overall, the website presents a trustworthy and professional front for the business, but verification of domain registration and addition of privacy and legal policies would enhance credibility and compliance.

D

DR Services Ltd.

drplantrepairs.co.uk

50

DR Services Ltd. operates a specialized plant and tool hire business based in North Devon, UK, offering a range of equipment including mini diggers, dumpers, rollers, and access machinery, alongside repair services for plant and hydraulics. Positioned as a family-run company, it emphasizes value and friendly service compared to national competitors. The company targets construction professionals, DIY users, and businesses requiring equipment hire and repair services, with a market reach extending nationwide through delivery. Technically, the website is built on WordPress using the Enfold theme and Avia Framework, integrating modern web technologies such as jQuery, Google Analytics, Facebook SDK, and Google reCAPTCHA for security. Hosting is provided by Krystal Hosting Ltd, a reputable UK-based provider. The site demonstrates good mobile optimization, SEO practices, and moderate performance, with a professional design and clear navigation. Security posture is solid with HTTPS enforced, cookie consent mechanisms compliant with GDPR, and use of Google reCAPTCHA to protect forms. However, there is room for improvement in implementing HTTP security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence for a small, established business. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and continuous monitoring of third-party scripts to maintain security and compliance.