Security Directory

Cowderoy Antiques is a specialized antique clock and musical box business with a long history dating back to 1973. The company transitioned from a physical shop in Eastbourne to an online-only model in 2022, maintaining a workshop for repairs in Polegate. Their services include restoration, repair, and sales of antique clocks and musical boxes, targeting collectors and enthusiasts. The website is built on WordPress with WooCommerce, leveraging plugins for enhanced user experience. While the site is accessible and professionally presented, it lacks key privacy and cookie policies and does not currently have configured analytics tracking. Security posture is moderate with HTTPS enabled but missing important security headers. WHOIS data is missing or inconsistent, which slightly impacts trust but does not negate the legitimacy of the business based on website content.

K

Knowledge Change Action

kca.training

57

Knowledge Change Action (KCA) is a UK-based training and development consultancy specializing in trauma-informed practice. They provide a broad range of services including in-person training, leadership development, consultancy, e-learning, and event management. The company is positioned as a pioneer in trauma-informed practice in the UK, trusted by over 200 local authorities and serving thousands of participants annually. Their website reflects a professional and consistent brand with comprehensive content tailored to leaders and practitioners in education, social care, health, and justice sectors. Technically, the site is built on WordPress with modern plugins for SEO and analytics, demonstrating a moderate to good digital maturity. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, though the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site is trustworthy and well-maintained, but enhancing privacy compliance and security best practices would strengthen their risk profile.

P

Possum

possum.co.uk

55

Possum is a UK-based company specializing in assistive technology and telecare solutions aimed at enhancing the lives of individuals with disabilities, elderly people, and care homes. Their product portfolio includes GPS devices, telecare equipment, and solutions tailored for conditions such as dementia, epilepsy, and learning disabilities. The website is professionally designed using WordPress and Elementor, with good SEO practices and moderate performance. The technical infrastructure leverages modern web technologies and integrates Google Analytics for user insights. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. The domain WHOIS data is unavailable due to domain naming rules violations, which raises some concerns about domain registration legitimacy but does not detract from the professional presentation and business credibility of the site. Overall, the website is a reliable digital presence for a medium-sized healthcare technology provider.

Wayne County operates an official government website serving residents and stakeholders with information and access to various county departments and elected officials. The analyzed page is a redirect notice guiding users to the new official domain, ensuring continuity of access to county services. The technical infrastructure is basic, leveraging standard web technologies like HTML, CSS, JavaScript, and jQuery, with no advanced frameworks or CMS detected. The site demonstrates moderate performance and basic mobile optimization but lacks comprehensive SEO and accessibility features. Security posture is moderate; HTTPS is used, but security headers are absent and no forms are present to secure. Privacy and cookie policies are missing on this page, indicating room for compliance improvement. Overall, the domain and website appear legitimate and consistent with government standards, though WHOIS data is unavailable, likely due to privacy protection. Strategic improvements in security headers, privacy compliance, and SEO would enhance trust and user experience.

I

Intercommerce

intercommerce.hr

43

Intercommerce is a well-established Croatian company specializing in import, export, and wholesale distribution of globally recognized brands, with a focus on sectors such as food, wood, and composites. The company has a strong regional presence, supported by multiple offices and warehouses across Croatia and Slovenia, and a history spanning over 70 years. Their business model centers on B2B wholesale distribution, targeting distributors and retailers within the region. Technically, the website is built on a modern WordPress platform using WooCommerce and Avada theme, incorporating contemporary web technologies such as jQuery and Slider Revolution. The site is well-optimized for SEO, mobile-friendly, and includes accessibility features, reflecting a mature digital infrastructure. Hosting and DNS services are managed through reputable providers, including CARNET and Google Cloud DNS. From a security perspective, the website employs HTTPS with good SSL configuration, uses Google reCAPTCHA v3 to protect forms, and includes security headers. There are no visible vulnerabilities or exposed sensitive data. However, the site lacks a formal security policy and incident response contact details, which could be improved to enhance trust and compliance. Overall, the website presents a professional and trustworthy digital presence aligned with the company's business operations. Recommendations include implementing a cookie consent mechanism, publishing a security policy and incident response contacts, and adding a security.txt file for vulnerability disclosures to further strengthen security posture and regulatory compliance.

R

Regina Miracle International (Holdings) Limited

reginamiracleholdings.com

45

Regina Miracle International (Holdings) Limited is a well-established Hong Kong-based manufacturer specializing in intimate wear and related product categories, operating under a unique Innovative Design Manufacturing (IDM) business model. The company is publicly listed and positions itself as a global leader with a strong focus on innovation, design, and manufacturing excellence. Their website reflects a professional corporate presence with detailed investor relations and sustainability information. Technically, the site is built on WordPress with a modern tech stack including jQuery, various carousel libraries, and Google reCAPTCHA for form security. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is credible and trustworthy, supporting the company's market position and business model.

A

ARS Forged

americanrim.com

44

ARS Forged is a specialized manufacturer and wholesaler of multi-piece spun-forged wheel rims, positioning itself as the world’s largest dedicated 3-piece rim manufacturer. The company targets automotive professionals and enthusiasts in luxury, exotic, SUV, racing, and hot rod vehicle segments. Their business model focuses on in-house manufacturing and maintaining a comprehensive inventory enabling same-day shipping. The website reflects a medium-sized manufacturing business with a solid market position and a history dating back to 1991. Technically, the website is built on a modern WordPress and WooCommerce stack, leveraging multiple plugins for e-commerce, product visualization, and analytics. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting is provided by GoDaddy, with no DNSSEC enabled. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. The WHOIS data presents inconsistencies, notably a future domain creation date, which undermines domain trustworthiness. No privacy or cookie policies were found, indicating compliance gaps. Analytics and tracking are moderately implemented via Jetpack and other services. Overall, the site is professional and trustworthy in content and design but requires improvements in privacy compliance, security hardening, and domain registration transparency to enhance its security posture and business credibility.

Newcastle University is a prestigious UK-based research-led university, ranked among the world's top 150 and a founding member of the Russell Group. It offers higher education and research services targeting students, academics, and researchers globally. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its academic stature. The university leverages modern web technologies including TerminalFOUR CMS, Google Analytics, HubSpot, and Cloudflare for performance, analytics, and security. Security posture is strong with HTTPS enforcement, security headers, and bot detection mechanisms in place. Privacy compliance is robust, featuring detailed privacy and cookie policies with user consent mechanisms and a designated Data Protection Officer contact. However, public security policies and vulnerability disclosure mechanisms are not evident, representing an area for improvement. Overall, the website is trustworthy, professionally maintained, and aligned with the university's reputation.

P

Pave Fix Ltd

pavefix.co.uk

48

Pave Fix Ltd is a UK-based small manufacturing company specializing in advanced epoxy resin products tailored for the building trade. Their product line includes the Pointfix epoxy jointing compound, designed to be mess-free and easy to apply, targeting construction professionals and contractors. The company has maintained a consistent online presence since 2013, with a website built on WordPress using the Avada theme and enhanced by Yoast SEO for search optimization. Social media engagement is evident through Facebook, Twitter (X), and YouTube channels, supporting their market outreach. Technically, the website employs modern web technologies including jQuery and Google Analytics for user tracking. Hosting is provided by Krystal Hosting Ltd, a reputable UK hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are well implemented, but there is room for improvement in security headers and explicit privacy documentation. From a security perspective, the site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism, indicating awareness of privacy compliance. However, the absence of explicit privacy policies, terms of service, and incident response contacts suggests gaps in comprehensive security and compliance posture. No critical vulnerabilities or suspicious activities were detected in the analyzed content. Overall, Pave Fix Ltd presents a professional and trustworthy online presence consistent with a specialized manufacturing business. Strategic enhancements in security policies, privacy documentation, and security headers would strengthen their compliance and trustworthiness further.

RNH Automation is a small business specializing in electrical automation and sustainable energy solutions for both residential and commercial clients. Their website provides detailed educational content and guidance on electrical upgrades such as automated lighting, energy management software, smart electrical panels, EV charging stations, and backup power solutions. The company positions itself as a forward-thinking provider in the energy and transportation sectors, targeting businesses and homeowners interested in energy efficiency and future-proofing their electrical infrastructure. Technically, the website is built on WordPress with a professional theme and uses modern web technologies like jQuery and FontAwesome. The site is mobile-optimized and offers good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and has domain protections but lacks DNSSEC and security headers, and does not publish privacy or security policies, which are areas for improvement. Overall, the website is trustworthy and professional but could enhance compliance and security posture by adding privacy policies, security headers, and incident response information.

C

City of Pueblo

pueblo.us

62

The City of Pueblo's official website serves as a comprehensive portal for residents, businesses, and visitors, providing access to government services, community events, public meetings, and essential city information. The site is well-structured and targets a broad audience within the Pueblo, Colorado area, positioning itself as a key resource for municipal engagement and services. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website leverages a modern tech stack including jQuery, AlpineJS, and the CivicPlus CMS platform, with integrations for analytics and user tracking via Google Tag Manager, Facebook Pixel, and Azure Application Insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS, employs security headers, and uses anti-forgery tokens in forms, indicating a mature security posture. However, the absence of visible cookie consent mechanisms and published security or incident response policies suggests room for improvement in privacy compliance and transparency. The lack of WHOIS data reduces domain trust slightly but is mitigated by the official nature of the site and its .us domain. Overall, the website is a trustworthy and professional government portal with solid technical and security foundations. Strategic enhancements in privacy compliance, transparency, and WHOIS data availability would further strengthen its credibility and user trust.

C

Centre County, PA

centrecountypa.gov

54

Centre County, PA operates an official government website serving residents, businesses, and visitors with information and public services. The site provides key government resources including elections, tax payments, public safety, and event calendars. The website is positioned as the authoritative digital presence for Centre County government, targeting local constituents and stakeholders. The business model is public service and information dissemination typical of government entities. The site demonstrates consistent branding and trust indicators such as official .gov domain and verified social media accounts. Technically, the site uses modern JavaScript libraries including jQuery and AlpineJS, integrates Google Tag Manager and Azure Application Insights for analytics, and is built on the CivicPlus CMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture shows some strengths like HTTPS usage and anti-forgery tokens but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. WHOIS data is incomplete but the .gov domain and website content strongly support legitimacy. Overall, the site is a reliable government resource but could enhance privacy compliance and security best practices.

W

West London Film Studios

westlondonfilmstudios.com

56

West London Film Studios is a professional media production company operating two purpose-built film studio sites in West London. They provide soundproof stages, production offices, and specialized filming facilities including the UK's only permanent hospital film set. The company enjoys a strong market position supported by high-profile production credits, industry awards, and media recognition. Technically, the website employs modern frameworks such as Bootstrap, jQuery, and Font Awesome, with embedded Vimeo videos and animation libraries, delivering a visually appealing and responsive user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies, indicating room for improvement in compliance and protection. Overall, the business is credible and trustworthy, though the absence of WHOIS data reduces transparency. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and establishing incident response protocols to strengthen trust and compliance.

P

Panda Print - colour and digital printers

panda-print.co.uk

60

Panda Print is a family-owned Scottish printing company based in Rosyth, Dunfermline, with over 40 years of experience. They specialize in high-quality litho, digital, and large-format printing services, along with a broad range of promotional products. The company targets businesses and organizations in Scotland seeking reliable and cost-effective print solutions. Their market position is that of a well-established local print partner with a reputation for quality and customer service. Technically, the website is built on WordPress using the Oxygen Builder framework, enhanced with plugins such as Yoast SEO and Oxy Ninja. The site uses modern web technologies including jQuery and Google Fonts, and integrates Google Analytics via the Site Kit plugin. Performance and mobile optimization are good, though accessibility features are basic. Hosting is provided by Heart Internet Limited, a reputable registrar and hosting provider. From a security perspective, the site employs HTTPS with excellent SSL configuration but lacks security headers such as Content-Security-Policy and X-Frame-Options. No visible vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and published security or incident response policies indicates room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and well-aligned with the business's offline reputation. The risk level is moderate due to some compliance gaps and missing security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and maintaining regular updates to plugins and themes.

M

MyRuby

myruby.co.uk

67

MyRuby is a UK-based company specializing in outsourced telephone receptionist and switchboard services tailored for offices and clinics. Established in 2006, it offers dedicated live receptionists who manage calls, appointments, and administrative tasks, positioning itself as a professional and reliable partner for businesses seeking to enhance customer communication without the overhead of in-house staff. The website reflects a mature business with clear service offerings, client testimonials, and a professional digital presence. Technically, the website is built on WordPress with modern libraries such as jQuery and Font Awesome, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is hosted by Fasthosts Internet Ltd, uses HTTPS with good SSL configuration, and implements a GDPR-compliant cookie consent mechanism, indicating a good level of digital maturity and compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, showing a long-standing and legitimate presence. Overall, MyRuby presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

Q

Queensway Admin Limited

queensway.com

59

Queensway is a well-established, family-owned international hospitality group operating hotels, food & beverage businesses, and a private members’ club. The company has a strong market position with over 50 years of experience and a diverse portfolio including proprietary brands and partnerships with global brands. The website reflects a professional digital presence built on WordPress with modern technologies such as React and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the website is trustworthy and well-maintained but could improve in privacy and security transparency.

Nightglade Limited is a small UK-based electrical services company established in 1999, providing a comprehensive range of electrical contracting services primarily in the South of England. Their clientele includes government and healthcare sectors such as the NHS, supported by certifications and positive client testimonials. The website is built on WordPress with standard plugins and integrates Google Maps for location display. The technical infrastructure is modern and functional, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a professional and trustworthy business presence with room for improvement in security and compliance.

S

Saunders Metals Ltd

saundersmetals.co.uk

68

Saunders Metals Ltd is a well-established scrap metal recycling company based in Swindon, UK, with a history dating back to 1979. The company offers a range of services including scrap metal purchasing, vehicle recovery, and recycling of catalytic converters and car batteries. They provide next day payment and handle all necessary DVLA paperwork, positioning themselves as a convenient and reliable local service provider. The website reflects a professional and consistent brand image with clear contact details and trust indicators such as SecureTrust certification and DVLA compliance logos. Technically, the website is built on WordPress with modern plugins and integrations including Yoast SEO, Google Tag Manager, and reCAPTCHA, indicating a mature digital infrastructure. The site is mobile optimized, uses HTTPS, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics, though some improvements in security headers and accessibility could be made. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, secure forms, and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security transparency and readiness. Overall, the website and business present a low-risk profile with strong business credibility and compliance posture. The main limitation is the lack of WHOIS data due to a domain query error, which slightly reduces confidence in domain legitimacy verification. Strategic recommendations include improving security headers, publishing security policies, and enhancing accessibility compliance to further strengthen trust and security posture.

A

Abbey Publishing Ltd

abbeypublishing.co.uk

46

Abbey Publishing Ltd is a UK-based business-to-business media company specializing in authoritative digital publications focused on facilities management, bulk solids handling, and energy management for the public sector. The company operates established niche magazines such as Building & Facilities Management (BFM), Bulk Solids Today (BST), and Energy Manager (EM), serving professional audiences in these sectors. The website is built on WordPress with a consistent branding approach and clear navigation, providing relevant business content and contact information primarily via email. Technically, the site uses a modern CMS platform with standard web technologies and is hosted by Krystal Hosting Ltd. Security posture is adequate with HTTPS enabled and cookie consent implemented, though security headers and incident response policies are absent. Overall, the site reflects a small but credible media publisher with a solid domain history and professional online presence.

S

St Mary's Church Oldswinford

stmaryschurcholdswinford.org.uk

45

St Mary's Church Oldswinford is a local Church of England parish church serving the Oldswinford community in Stourbridge, UK. It operates as a registered charity providing religious services such as Sunday worship, baptisms, weddings, funerals, and community engagement activities. The website reflects a small non-profit organization focused on community outreach and worship facilitation. Technically, the site is built on WordPress using the Mesmerize theme, integrating common plugins for events and social media. The infrastructure is modern with HTTPS enabled and basic mobile optimization, but lacks advanced security headers and privacy compliance mechanisms. Security posture is moderate with no critical vulnerabilities detected but room for improvement in headers and privacy policies. The WHOIS data is unavailable due to domain naming rule violations, which raises some concerns about domain registration legitimacy, though the website content and contact information appear authentic and consistent with a legitimate church entity. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

R

Rough Lee Care Home

roughleehome.org.uk

48

Rough Lee Care Home is a small, established non-profit residential care provider for adults with physical disabilities, operated by The Alex Group Charity in Accrington, UK. The website presents a professional and well-structured digital presence built on WordPress with modern plugins and SEO optimizations. The home has a strong reputation supported by consistent 5-star RDB ratings and CQC registration. However, the domain WHOIS data is unavailable due to a naming rules violation, which raises some concerns about domain registration legitimacy. Security posture is adequate with HTTPS and secure forms, but lacks explicit security headers and incident response policies. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the website is trustworthy and informative but would benefit from enhanced privacy compliance and security transparency.

T

The Royal Grammar School Worcester

rgsw.org.uk

53

The Royal Grammar School Worcester operates a family of independent schools in the West Midlands, providing education from nursery through sixth form. The institution is well-established with a founding date of 1291 and holds prestigious awards such as the National Tes Independent Senior School of the Year 2026 and an ISI 'Significant Strength' accreditation. The website reflects a professional educational organization targeting parents and students seeking high-quality independent education. Technically, the site is built on WordPress with modern plugins and tracking tools, delivering a good user experience with mobile optimization and SEO best practices. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data due to domain registration anomalies introduces some uncertainty in domain legitimacy, but the overall digital presence and content quality support a trustworthy profile. Privacy compliance is moderate, with a cookie policy and consent but lacking a clearly identified privacy policy page. Overall, the site is a credible and professional representation of a reputable educational institution.

M

Marina Bar

marinabarsouthsea.com

50

Marina Bar is a small hospitality business located in Portsmouth, UK, offering food, drinks, and event hosting services at a scenic marina location. The website presents a clear business focus with menus, opening hours, and event announcements, targeting local residents and visitors seeking casual dining and group event venues. The technical infrastructure is based on WordPress with a standard theme and plugins, hosted on One.com, providing a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance documentation. No forms or email contacts are present, limiting direct digital engagement. Overall, the website is functional and trustworthy but requires improvements in privacy compliance and security best practices.

G

George Pickersgill Removals and Storage

gpickersgill.co.uk

43

George Pickersgill Removals and Storage is a well-established UK-based company specializing in domestic and commercial removals, storage solutions, and related business services. With a history dating back to 1867 and a domain registered since 2007, the company demonstrates a strong market presence in Yorkshire and nationally. Their service portfolio includes home removals, commercial relocations, overseas removals, containerised and self storage, archival management, shredding, and waste removal. The website reflects a professional and consistent brand image supported by customer testimonials and industry certifications such as IDMO, BAR CTSI, and FHIO Insurance Quality. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices but could improve accessibility and security headers. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of security headers and a formal security policy are areas for enhancement. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the website is trustworthy, professional, and serves its target audience effectively.

M

Mackinnon Slater

mackinnonslater.co.uk

48

Mackinnon Slater is a small business specializing in high-quality signage, large format printing, and exhibition graphics based in Edinburgh, United Kingdom. The company offers services including production and installation of signage and museum graphics, targeting local businesses and organizations requiring expert signage solutions. The website is professionally designed using WordPress CMS and incorporates modern web technologies such as Slider Revolution and jQuery, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are recommended for compliance and trust. The domain WHOIS data is unavailable due to a naming rules violation error from Nominet UK, which slightly reduces trust from a domain registration perspective but does not detract from the legitimacy of the business as presented on the website. Overall, the website is safe, professional, and credible for its business purpose.

S

Soveral

alexandrasoveral.co.uk

60

Alexandra Soveral operates a niche luxury skincare brand focused on organic, natural, and bespoke skincare products and treatments. The business targets consumers seeking high-quality, hand-blended skincare solutions and personalized consultations. The website is built on the Create.net platform, leveraging modern JavaScript libraries and Google Analytics for user tracking. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data for the domain is unavailable due to a registration error, which is inconsistent with the active website presence and may warrant further investigation. Overall, the business appears credible with strong branding and trust indicators.

E

Events House

eventshouse.co.uk

47

Events House is a UK-based global motorsport activation agency specializing in fan engagement, racing brand experiences, and creative events worldwide. The company operates a professional and well-structured website built on WordPress with Elementor and Bootstrap frameworks, integrating modern tracking and marketing technologies such as Google Analytics, Microsoft Clarity, and LinkedIn Insight. The website demonstrates good design quality, mobile optimization, and SEO practices, targeting brands and companies seeking motorsport experiential marketing services. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing security policies and adding security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

L

Lucas County

lucas.oh.us

52

Lucas County's official website serves as a comprehensive digital portal for residents, visitors, and businesses within the county. It provides access to government services, departments, news, event calendars, and public resources. The site is positioned as the authoritative source for county information and public engagement, reflecting its role as a government entity. The website targets a broad audience including local citizens, businesses, and government stakeholders, offering key services such as tax payments, bid postings, and public request submissions. Technically, the website employs a modern technology stack including jQuery, AlpineJS, Google Tag Manager, and Azure Application Insights, hosted on a CivicPlus CMS platform. The site demonstrates good mobile optimization and accessibility features, including integration with AudioEye for accessibility compliance and Google Translate for multilingual support. Performance is moderate with room for improvement in SEO and security headers. From a security perspective, the site enforces HTTPS and uses anti-forgery tokens in forms, indicating a baseline security posture. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced protection. No vulnerabilities or malicious content were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. Overall, the website is a trustworthy and professional government portal with solid content and technical implementation. The absence of WHOIS data slightly reduces trust but is mitigated by the official .us domain and consistent branding. Strategic improvements in security headers, privacy compliance, and incident response transparency would further strengthen the site's security posture and user trust.

S

SCIS UK Limited

reedtek.co.uk

48

SCIS UK Limited is a well-established IT support and services provider based in Lincolnshire, UK, with over 24 years of experience. The company recently acquired the client base of Reedtek Ltd, expanding its market presence and service offerings. Their portfolio includes IT maintenance, cyber security certifications, connectivity solutions, and hosted telephony services, targeting local businesses and organizations. The website reflects a professional and consistent brand image with clear communication channels and a focus on customer service. Technically, the site is built on WordPress with modern plugins and SEO optimizations, supported by analytics and marketing tools such as HubSpot and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but the overall digital footprint and business operations indicate legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining transparency in data protection practices.

Carepath Recruitment Ltd is a small UK-based healthcare recruitment agency specializing in providing high quality Health Care Assistants and Support Workers primarily in Preston and the North West of England. The company emphasizes person-centered care, staff training through a CQC recommended academy, and 24/7 service availability. The website is professionally designed with clear navigation, mobile optimization, and interactive features such as vacancy listings and testimonials. Technically, the site uses modern JavaScript libraries and frameworks, including jQuery, Bootstrap, Owl Carousel, and Google reCAPTCHA v3 for form security. However, some security best practices like security headers and cookie consent mechanisms are missing. The WHOIS data for the domain is unavailable due to a domain naming rules violation error, which raises some concerns about domain registration legitimacy. Overall, the website presents a trustworthy and professional front for a healthcare staffing agency but would benefit from improved privacy compliance and enhanced security measures.

R

Rendcomb Surgery

rendcombsurgery.co.uk

65

Rendcomb Surgery is a small NHS GP surgery located in Gloucestershire, United Kingdom, providing essential healthcare services including appointments, prescriptions, online patient services, and health information. The website is designed to serve local patients with clear navigation and NHS branding, reflecting its role as a trusted healthcare provider. The site integrates NHS login and app services, enhancing patient access to digital healthcare tools. Technically, the website is built on WordPress with NHS-specific themes and plugins, ensuring compliance with NHS digital standards and providing a good user experience across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. The domain is long-established since 2006, registered through a reputable registrar, and aligns well with the business identity, supporting high legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its healthcare audience effectively.

G

GM Finishing

gmfinishing.co.uk

57

GM Finishing is a UK-based print finishing company established in 2006, specializing in quality print finishing services with a strong reputation locally and nationally. The company operates from a 7,000 sq ft facility near Nottingham, offering all finishing processes under one roof to ensure fast and reliable turnaround times. The website reflects a professional business presence with clear contact information and ISO 9001:2008 certification, indicating a commitment to quality management standards. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies including Google Fonts and jQuery. Google Analytics is integrated via the MonsterInsights plugin, enabling moderate user tracking. The site is mobile optimized and performs moderately well, though SEO and accessibility features are basic. No forms or email contacts are present, limiting direct digital engagement. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. The WHOIS lookup failed due to domain registration issues, which raises concerns about domain legitimacy despite the professional website content. Overall, the website presents a credible business front with room for improvement in privacy compliance and security best practices. The domain registration anomaly should be investigated further to ensure full legitimacy and trustworthiness.

A

AeroEducate

aeroeducate.org

52

AeroEducate is an educational platform dedicated to inspiring the next generation of aviation professionals through free, age-appropriate aviation activities, STEM projects, and career pathways. The website targets K-12 students, parents, teachers, and EAA chapters, providing resources to ignite passion for aviation and aerospace careers. The platform is affiliated with the Experimental Aircraft Association (EAA), lending credibility and trust to its offerings. Technically, the site employs modern JavaScript libraries, the Foundation CSS framework, and Brightcove for video delivery, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

T

Taqueria El Rey

elrey.fi

51

Taqueria El Rey is a small, cozy Mexican restaurant located in the heart of Helsinki, Finland. The business focuses on offering authentic Mexican tacos and handcrafted cocktails in a trendy and relaxed atmosphere. Their services include dine-in, takeaway, and home delivery via Wolt, positioning them as a local hospitality provider catering to general audiences seeking Mexican cuisine. The website reflects a professional and consistent brand image with clear contact information and active social media presence. Technically, the site is built on WordPress with modern plugins and integrations such as Yoast SEO, Cookiebot for consent management, and Google Analytics for tracking. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though explicit security headers could be improved. Privacy compliance is well addressed with comprehensive policies and user consent mechanisms. Overall, the site demonstrates good digital maturity and business credibility with no critical security or compliance issues detected.

C

Cloubi

cloubi.com

56

Cloubi is a small technology and education company established in 2015, focusing on innovation and educational services. The website is built on WordPress using the Avada theme, reflecting a professional and modern digital presence. The technical infrastructure includes standard web technologies such as jQuery and Google Tag Manager, although Google Analytics is not fully configured. The site is hosted on DNS servers associated with Louhi Networks in Finland, indicating a stable hosting environment. Security posture is moderate with HTTPS enabled but lacking DNSSEC and explicit security headers. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie policy with consent mechanism is present. Contact information is minimal, relying on a contact form without explicit emails or phone numbers. Overall, the website is functional and professional but would benefit from enhanced privacy and security measures.

L

Linjaliikenne Nyholm Oy

linjaliikennenyholm.fi

53

Linjaliikenne Nyholm Oy is a Finnish transportation company specializing in chartered transportation services both domestically and internationally, with a long-standing presence in Turku's local public transport for over 75 years. The company operates a professional website built on WordPress using the Avada theme, demonstrating a moderate to good level of digital maturity. The site is secured with HTTPS and employs Cookiebot for cookie consent management, reflecting awareness of privacy compliance requirements. However, explicit privacy policies and terms of service are not present, indicating room for improvement in compliance documentation. Security posture is generally good with HTTPS and no visible vulnerabilities, but could be enhanced by implementing additional security headers and publishing incident response contacts. Overall, the website is trustworthy, professional, and safe for general audiences, with a solid business credibility profile supported by consistent WHOIS data and domain age.

P

Pääovi Oy

paaovi.fi

43

Pääovi Oy is a Finnish private property management company specializing in residential and commercial real estate services. Established in 2007 through a merger, it offers comprehensive property management including administration, financial oversight, technical maintenance, and rental services. The company targets property owners and housing associations in Finland, positioning itself as an experienced local service provider. The website is built on WordPress with standard plugins and provides professional content relevant to its business. However, it lacks privacy and cookie policies, which are important for compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is functional and trustworthy but could improve compliance and security transparency.

R

R. Mächtel Bauunternehmung GmbH

maechtel-bau.de

41

R. Mächtel Bauunternehmung GmbH is a small, regionally focused construction company based in Bad Schönborn, Germany. The company specializes in various construction services including renovations, new builds, repairs, and barrier-free living designs. Their website is professionally designed using WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for SEO and privacy compliance respectively. The technical infrastructure is solid, hosted on Schlund Technologies with HTTPS enabled and moderate performance. Security posture is adequate but could be improved by adding security headers and publishing comprehensive privacy and terms of service policies. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a legitimate and professional business with room for compliance and security enhancements.

Betting Umzüge oHG is a well-established moving company based in Lörrach, Germany, with over 60 years of experience in providing private and commercial moving services, including senior moves and storage solutions. The company targets both private individuals and businesses primarily in the Lörrach region and across Germany. Their website reflects a professional and trustworthy business with clear service offerings and positive customer testimonials, supported by industry association memberships. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and Mmenu.js for enhanced user experience. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR requirements. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses session and CSRF protection cookies. However, it lacks advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business claims, indicating a trustworthy online presence. Overall, Betting Umzüge oHG presents a solid digital footprint with room for improvement in security policy transparency and advanced security controls. The risk level is low, and the company demonstrates good compliance with privacy regulations.

D

Davis Brown

davis-brown.co.uk

44

Davis Brown is a UK-based Chartered Surveyors firm that has merged with Adelaide Jones, continuing to provide surveying, estate agency, and property management services under the Adelaide Jones brand. The website serves primarily as an informational and redirect portal to the Adelaide Jones website, indicating a business consolidation. The technical infrastructure uses modern frontend libraries such as Bootstrap and jQuery, with Google reCAPTCHA Enterprise integrated for form security. However, the website lacks critical privacy and cookie policies and does not exhibit advanced security headers, which limits its compliance posture. The WHOIS data for the domain is unavailable due to a domain registration error, raising concerns about the legitimacy and ownership of the www.davis-brown.co.uk domain itself. Overall, the website is professionally designed and user-friendly but requires improvements in security and compliance documentation.

Galaxy Windows is a small UK-based company specializing in manufacturing and installing windows, doors, conservatories, and porches for residential and commercial clients. With over 75 years of collective experience and more than 6000 projects completed, the company positions itself as a trusted local provider in Northwest London. The website reflects a professional business with clear service offerings and customer testimonials that enhance credibility. Technically, the site is built on WordPress with common plugins and libraries, offering moderate performance and good mobile optimization. However, there is room for improvement in security practices, such as implementing security headers and explicit privacy policies. Overall, the website is accessible, well-structured, and trustworthy, though privacy compliance could be enhanced.

Q

QS Recruitment

qsrecruitment.com

52

QS Recruitment is a well-established recruitment agency specializing in driving, warehouse, manufacturing, and office/admin staffing across the Midlands and South Yorkshire regions of the UK. The company has a strong regional presence with multiple offices and nearly 30 years of experience, positioning itself as a leading local recruitment provider. Their website is built on WordPress with modern SEO and marketing integrations, providing a good user experience and clear navigation for job seekers and employers alike. However, the absence of WHOIS registration data raises concerns about domain legitimacy that should be further investigated. Security posture is generally good with HTTPS and no exposed sensitive data, but the lack of security headers and formal privacy/cookie policies indicates room for improvement. Overall, the site is professional and trustworthy from a content perspective but would benefit from enhanced transparency and security controls.

D

Dortek Ltd

dortek.com

61

Dortek Ltd is a well-established manufacturer and service provider specializing in hygienic, waterproof, and cleanroom doors primarily serving pharmaceutical, healthcare, food, retail, and industrial sectors. With over 50 years of experience, Dortek holds a strong global market position, supported by a professional website that clearly communicates their expertise and services. The company offers comprehensive solutions including design, manufacture, installation, maintenance, and lifecycle management of advanced GRP doors. Their client base includes reputable organizations, reinforcing their credibility. Technically, the website is built on a modern WordPress platform with a robust tech stack including Bootstrap, jQuery, and SEO optimization tools. Hosting and DNS are managed by reputable providers, with Cloudflare DNS but lacking DNSSEC. The site is mobile-optimized and performs moderately well, with good accessibility and SEO practices. From a security perspective, the site uses HTTPS with no evident vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies are in place and GDPR compliant. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing a formal security policy or incident response contacts. Overall, Dortek's digital presence reflects a mature, professional business with strong trust indicators and compliance posture. The risk level is low, but strategic enhancements in security transparency and DNS security would further strengthen their position.

G

Goring Care Homes

goringcarehomes.com

57

Goring Care Homes is a UK-based residential care provider specializing in elderly and dementia care services. The company operates a website built on WordPress, leveraging common technologies such as jQuery, Google Tag Manager, and WP Rocket for performance optimization. The website presents basic content focused on care home services, targeting elderly individuals and their families. While the domain is well-established since 2009 and registered with a reputable UK registrar, the website lacks comprehensive privacy and cookie policies, as well as explicit contact information. Security posture is moderate with HTTPS enabled and some privacy consent mechanisms, but missing security headers and DNSSEC represent areas for improvement. Overall, the website is functional and moderately professional but could benefit from enhanced privacy compliance and security best practices.

T

Travel South Yorkshire

supertram.com

70

Travel South Yorkshire operates the Sheffield Supertram, a key public transportation service in South Yorkshire, UK. The website provides comprehensive information on tram routes, tickets, journey planning, and accessibility, targeting residents and visitors. The business is publicly owned and operates a significant number of weekly tram services, positioning itself as an essential regional transport provider. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Kentico CMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers and explicit policies are missing. The WHOIS data is unavailable, which raises some concerns about domain transparency, but the website content and external references support legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations.

T

Terrafix Limited

terrafix.co.uk

46

Terrafix Limited is a UK-based company specializing in ICT and mobile data solutions primarily for emergency services such as the UK Ambulance Service, Security Services, and Police. Established in 1997, the company positions itself as a world leader in mobile data solutions, offering a broad range of services including hosted cloud environments, software services, communication systems, and 24/7 support. Their market position is reinforced by long-term contracts with government health departments and a focus on mission-critical infrastructure. The website reflects a professional and consistent brand image targeting emergency and security sectors. Technically, the website is built on WordPress with a modern technology stack including Bootstrap, jQuery, and various UI/UX enhancement libraries. It employs Google Analytics for user tracking and has implemented a cookie consent mechanism, indicating a moderate level of digital maturity. The site is mobile optimized with good SEO practices but lacks some accessibility features and formal privacy documentation. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response plans, and vulnerability disclosure information, which are important for comprehensive security posture. The presence of BCI accreditation and clear contact information adds to trustworthiness. Overall, the security posture is good but could be improved with formal policy disclosures. The overall risk assessment is low with no critical issues detected. Strategic recommendations include publishing privacy and security policies, enhancing accessibility, and formalizing incident response and vulnerability disclosure processes to improve compliance and trust. The website quality and business credibility are high, supporting Terrafix's position as a reliable technology provider in the emergency services sector.

I

Irish World Heritage Centre

iwhc.com

48

The Irish World Heritage Centre (IWHC) is a well-established cultural and community venue based in Manchester, UK, serving the Irish community and broader audiences with event hosting, cultural activities, and hospitality services. The website reflects a professional and consistent brand presence, offering clear information about services such as venue hire, events, a bar, cafe, and retail shop. The domain age and WHOIS data support the legitimacy and stability of the organization. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common plugins for navigation, forms, and analytics. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements in security headers, privacy compliance, and incident response documentation would strengthen the site. The website is safe for general audiences, with no adult or explicit content. Contact information is comprehensive and clearly presented, supporting business credibility. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent mechanisms, and publishing detailed security and incident response policies to improve trust and compliance.

W

Whistle PR

whistlepr.co.uk

57

Whistle PR is an independent reputation consultancy based in the United Kingdom, specializing in public relations, communications strategies, digital marketing, ESG communications, crisis management, and content creation. The company positions itself as a results-driven partner for businesses seeking to enhance and protect their brand reputation. Their website reflects a professional and modern digital presence, leveraging WordPress and Divi theme technologies, integrated with Google Analytics and Tag Manager for performance and marketing insights. The company demonstrates a strong commitment to privacy compliance with clear cookie and privacy policies and provides multiple contact channels including email, phone, and social media. However, the WHOIS data for the domain is unavailable due to a lookup error, which limits full verification of domain registration details.

B

Black History Studies

blackhistorystudies.com

50

Black History Studies is a small educational and cultural organization dedicated to educating the community about Black history and culture through courses, study tours, events, workshops, and merchandise. The website is built on a modern WordPress infrastructure using WooCommerce and Elementor, providing a good user experience with clear navigation and relevant content. The technical setup is adequate with HTTPS enabled and modern libraries, though some security best practices such as DNSSEC and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security posture.

C

Castle Computers Europe Ltd

uk.net

44

Castle Computers Europe Ltd is a small UK-based technology supplier specializing in new and refurbished networking equipment, tape drives, autoloaders, UPS systems, and related peripherals. Established in 1995, the company offers a wide range of products from major brands and emphasizes cost savings and warranty-backed refurbished goods. The website is built on WordPress using modern plugins and includes a contact form protected by Google reCAPTCHA, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Security practices are adequate with HTTPS and CAPTCHA, but lack important security headers and formal privacy or cookie policies. Overall, the site is functional and business-focused but would benefit from improved compliance and clearer domain registration information.