Security Directory

Burton Beavan is a small, established accounting firm based in Northwich, Cheshire, UK, offering a range of financial and accounting services primarily targeting local businesses, contractors, and tech start-ups. The company emphasizes forward-thinking and proactive client service, with a strong local market presence and positive trust indicators such as high customer ratings and testimonials. The website is professionally designed using WordPress, with good SEO and mobile optimization, and integrates common technologies such as Google Analytics and reCAPTCHA for security. Security posture is solid with HTTPS and form protections, though additional security headers and explicit policies could enhance compliance and trust. WHOIS data is unavailable due to domain registration lookup limitations, but the website content and domain usage align with legitimate business operations. Overall, the site presents a trustworthy and professional image suitable for its target audience.

M

Mr B & Friends

mrbandfriends.co.uk

58

Mr B & Friends is a well-established independent branding, creative, and design agency operating primarily in Bristol and London, UK. They position themselves as transformation partners for bold businesses seeking change, offering services in brand strategy, campaigns, and employee experience. The website reflects a professional and modern digital presence with strong branding consistency and a clear focus on their target audience of businesses looking to differentiate themselves in competitive markets. Their client portfolio includes notable companies across various sectors, indicating a solid market position. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Analytics, and Google Tag Manager. The site is optimized for performance, mobile responsiveness, and accessibility, with a comprehensive cookie consent mechanism supporting GDPR compliance. Multimedia content is integrated via Vimeo, enhancing user engagement. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent controls. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust. The WHOIS data for the domain is unavailable due to a naming rules violation error from Nominet UK, which is unusual and reduces domain trustworthiness. Despite this, the website content and professional presentation support legitimacy. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with minor penalties for missing WHOIS data and security policy details. Strategic recommendations include publishing a formal security policy, providing incident response contacts, and adding vulnerability disclosure information to strengthen security posture and trust.

P

Paul Downing & Associates Ltd

pauldowningltd.co.uk

50

Paul Downing & Associates Ltd is a specialized environmental consultancy based in Hampshire, UK, serving manufacturing, industrial, and waste management sectors. The company offers a comprehensive range of services including environmental permits, compliance audits, planning applications, energy consultancy, and waste management solutions. Their market position is that of a trusted local consultancy with expertise in regulatory compliance and environmental management certifications such as ISO 14001 and ISO 50001. Technically, the website is built on WordPress and leverages modern technologies such as jQuery, WP Rocket for performance optimization, Owl Carousel for UI elements, and integrates analytics tools like Google Analytics and Bing UET. The site is well-optimized for SEO and mobile devices, with good loading performance and structured data for enhanced search presence. From a security perspective, the site enforces HTTPS and employs deferred and lazy loading of scripts to improve security and performance. However, it lacks several important security headers and does not display a privacy or cookie policy, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present, indicating room for improvement in security transparency. Overall, the website is professional, trustworthy, and functional, but the absence of WHOIS data and domain registration details limits full trust verification. Strategic improvements in privacy compliance and security headers would enhance the site's security posture and user trust.

Trickbox TV is a UK-based broadcast services company specializing in multi-camera outside broadcast facilities, equipment hire, virtual events, live streaming, and studio design and system integration. The company targets broadcast professionals, corporate event organizers, and media production companies, positioning itself as a trusted provider with notable clients such as Pfizer, Shell, and Red Bull. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the website runs on WordPress with WooCommerce and uses modern JavaScript libraries and Google Tag Manager for analytics and marketing. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, indicating possible domain registration issues or privacy protection, which slightly reduces trustworthiness. However, the professional website, clear contact information, and privacy compliance mitigate concerns. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, Trickbox TV demonstrates a solid business and technical foundation with room for improvement in security transparency and WHOIS data clarity. Strategic recommendations include enhancing security headers, publishing security policies, and monitoring domain registration status to strengthen trust and compliance.

Silven Recruitment is a well-established specialist recruitment agency focused on the food and drink manufacturing sector in the United Kingdom. Founded in 2011, the company offers a range of recruitment services including interim, permanent, retained search, and team-based solutions. The website reflects a professional and trustworthy brand with strong industry connections, evidenced by client logos and positive testimonials. Their target audience includes food manufacturing companies and job seekers across the UK. Technically, the website is built on WordPress with modern frameworks and tracking technologies, optimized for performance and SEO. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the site demonstrates high business credibility and digital maturity.

M

Mitchells Millbrook Limited

mitchellsworktops.co.uk

49

Mitchells Millbrook Limited operates a specialized retail and trade business supplying kitchen worktops and bathroom surfaces from Southampton, UK. With over 70 years of experience, they maintain a large stock and offer custom fabrication services supported by onsite workshop facilities. Their target market includes both trade professionals and retail customers primarily in the South of England. The website reflects a professional and established business with clear service offerings and local delivery capabilities. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WP Rocket, ensuring good SEO and performance optimization. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and formal security or incident response policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. The WHOIS data is unavailable due to a domain lookup error, which limits trust assessment from a domain registration perspective. Overall, the website is functional, professional, and trustworthy from a business and content perspective but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

S

Straightforward Agency Ltd.

straightforwardsolutions.co.uk

48

Straightforward Agency Ltd. is a small digital marketing and creative studio based in Lichfield, Staffordshire, UK. Founded in 2022, the company offers a range of marketing services including website design, SEO, PPC management, branding, social media, direct mail, print, and content creation. The agency targets ambitious businesses seeking clear, measurable growth and positions itself as a practical, transparent, and results-driven partner. The website is professionally designed using WordPress and Elementor, with modern technologies and good SEO practices. Security posture is solid with HTTPS and DNSSEC enabled, though explicit security policies and privacy documentation are lacking. Contact information is clearly presented, and cookie consent mechanisms are implemented, indicating basic GDPR compliance. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business presence.

T

Trace

traceisys.com

56

Trace is a UK-based company providing business-critical software solutions tailored for insurance and reinsurance brokers globally. Their flagship products, OpenTWINS and OT Messaging, support the entire broking lifecycle and facilitate eTrading, positioning them as a key technology partner in the insurance finance sector. The website reflects a professional and consistent brand image targeting insurance brokers worldwide. Technically, the site is built on WordPress with modern plugins and analytics tools, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks visible security headers and explicit public security policies. The absence of WHOIS registration data is a notable concern, though the website content and contact information suggest a legitimate business. Overall, the site is trustworthy but would benefit from enhanced transparency and security practices.

C

Cameron & Greig Veterinary Surgeons

cameronandgreigvets.co.uk

54

Cameron & Greig Veterinary Surgeons is a regional veterinary service provider based in the United Kingdom, specializing in veterinary care for pets, farm animals, and equine across Perth & Kinross, Fife, and Clackmannanshire. Their services include routine vaccinations, major surgeries, and pet health plans, targeting pet owners and farmers in their service areas. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting their market position as a trusted local veterinary practice. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, LayerSlider, and CleanTalk Anti-Spam, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. Security is well-managed with HTTPS enforced and anti-spam measures in place, although explicit security headers are not clearly visible and privacy compliance is lacking. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and the lack of WHOIS transparency due to domain naming rules error reduce overall trust. The domain's WHOIS data is unavailable, which is unusual but does not appear to impact the legitimacy of the business based on website content and professionalism. Overall, the website presents a trustworthy and professional front for a small healthcare business, but improvements in privacy compliance and explicit security header implementation are recommended to enhance security and regulatory adherence.

Plastribution is a UK-based leading distributor of plastics raw materials, specializing in standard and performance polymers, sustainable materials, and additives. The company serves diverse industries such as automotive, packaging, construction, and electronics, leveraging local market expertise and strong customer relationships. Their digital presence includes a professional WordPress-based website with modern SEO and performance optimizations. The site offers market insights, a customer service platform (Plastribution+), and sustainability-focused product portfolios. Technically, the website uses Elementor, Yoast SEO, WP Rocket, and jQuery, indicating a mature digital infrastructure with moderate performance and good mobile optimization. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy and cookie policies are absent, representing compliance gaps. Overall, the website is trustworthy and professionally maintained, but could improve privacy compliance and security transparency.

O

Ocean Scientific International Ltd (OSIL)

osil.com

64

Ocean Scientific International Ltd (OSIL) is a well-established UK-based company specializing in the design and manufacture of integrated environmental monitoring systems, particularly for marine environments. Their expertise spans instrumented oceanographic data buoy platforms, water column and seabed sampling, marine robotics, and calibration services. The company holds reputable certifications such as ISO 9001 and Cyber Essentials, reinforcing their commitment to quality and security. Their website reflects a mature business with a strong market position serving marine, offshore engineering, and environmental sectors globally. Technically, the website is built on WordPress with modern SEO and performance optimizations including Yoast SEO Premium and WP Rocket. It uses Cloudflare DNS and integrates Google Analytics via Google Tag Manager, with a compliant cookie consent mechanism. The site is mobile-optimized, accessible, and well-structured, providing a professional user experience. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and explicit security headers are not detected, which could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a clear privacy policy and cookie consent. Contact information is comprehensive, but no explicit security or incident response policies are published. Overall, OSIL's digital presence is robust, professional, and trustworthy, with minor recommendations to enhance DNS security and security headers. The risk profile is low, and the company demonstrates good security hygiene and compliance practices.

S

SSI Strategy

ndareg.com

52

SSI Strategy is a well-established consulting firm specializing in regulatory affairs and drug development strategy for biotech and pharmaceutical companies. With over a decade of experience and a strong track record in regulatory approvals, the company positions itself as a trusted partner for navigating complex regulatory landscapes globally. Their services include fractional regulatory leadership, dossier preparation, and agency engagement, targeting biotech firms aiming to accelerate product approvals. Technically, the website is built on WordPress with modern optimization and SEO practices, hosted on Microsoft Azure DNS infrastructure, and employs advanced lazy loading and performance enhancements. Security posture is strong with HTTPS and good practices, though explicit security headers could be improved. Privacy compliance is well addressed with clear policies and contact information. Overall, the site reflects a professional, credible, and trustworthy business with a clear focus on healthcare regulatory consulting.

F

Form WS

formws.co.uk

57

Form WS is a UK-based company specializing in office fit out and workplace design services, operating since 2006. The website presents a professional design and targets businesses seeking office refurbishment and design solutions. The technical infrastructure is based on WordPress CMS with common web technologies and third-party integrations such as Google Fonts and Mailchimp. While the site is accessible and functional, it lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance. Security posture is moderate with no detected security headers and unknown SSL configuration, suggesting room for improvement in security best practices. Overall, the website is legitimate and professional but would benefit from enhanced security and compliance measures.

G

Geeks on Wheels

geeks-on-wheels.com

62

Geeks on Wheels is a well-established IT support company founded in 2003, providing comprehensive IT services including managed IT support, cybersecurity, remote and on-site assistance, and specialized services such as custom gaming PC builds and smart home installations. The company targets both business and residential customers primarily in London and across the UK, positioning itself as a trusted local expert with over 14,000 satisfied clients and strong customer ratings. The website reflects a professional and modern digital presence built on WordPress, leveraging popular plugins and technologies to deliver a fast, mobile-optimized, and user-friendly experience. Security posture is solid with HTTPS and domain transfer protections, though there are gaps in DNSSEC and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site demonstrates high business credibility and technical maturity but should improve privacy and security transparency to enhance trust and compliance.

V

Vapourtec Ltd.

vapourtec.com

62

Vapourtec Ltd. is a UK-based manufacturer specializing in flow chemistry equipment and fast-flow peptide synthesizers, serving a global market of chemists and researchers. With over 22 years of experience, the company holds a strong market position supported by extensive installations worldwide and numerous scientific citations. Their product portfolio includes modular and integrated flow chemistry systems, peptide synthesizers, and chemistry tools, complemented by a comprehensive resource center and customer support. Technically, the website is built on WordPress with modern SEO and analytics tools, including Google Analytics, Google Tag Manager, and HubSpot. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security measures include HTTPS, reCAPTCHA, and anti-spam plugins, though explicit security headers could be enhanced. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the professional web presence mitigates this concern. Overall, Vapourtec presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying domain registration details to improve trust further.

W

WorkForce Software

workforcesoftware.com

71

WorkForce Software is an established enterprise software company specializing in workforce management solutions. The company offers software products aimed at optimizing labor management, compliance, and employee engagement for large organizations. The website reflects a professional and consistent brand presence with a focus on B2B services in the technology sector. The domain age and registration details support the legitimacy and maturity of the business. Technically, the website is built on WordPress using Elementor and WP Rocket for performance optimization. It integrates several marketing and analytics tools such as Google Tag Manager, OneTrust for cookie consent, and various ad/tracking pixels. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, it lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional and trustworthy but would benefit from publishing comprehensive privacy and security policies to improve compliance and user trust. The AI score reflects a solid technical and business foundation with room for improvement in privacy compliance and security transparency.

P

Planteria Group (UK) Ltd

greenteaminteriors.co.uk

57

Planteria Group (UK) Ltd is a well-established UK-based company specializing in interior landscaping, office plant and flower hire, maintenance, and biophilic design services. Founded in 1977, the company has grown through organic expansion and strategic acquisitions, including Green Team Interiors Ltd and Office Landscapes (Midlands) Ltd, positioning itself as a leading provider in the hospitality and real estate sectors. The website reflects a professional and comprehensive digital presence, showcasing their services, certifications, and client partnerships. Technically, the site is built on WordPress with Elementor and employs modern web technologies and performance optimizations, ensuring a fast and mobile-optimized user experience. Security posture is strong with HTTPS, security headers, and compliance certifications such as ISO standards and Cyber Essentials. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. However, the absence of WHOIS registration data for the domain reduces trustworthiness slightly and should be investigated further. Overall, the website and business demonstrate high professionalism, trustworthiness, and technical maturity.

B

BE Furniture Ltd

befurnituresales.co.uk

60

BE Furniture Sales is a UK-based commercial furniture supplier specializing in furniture for cafes, pubs, restaurants, hotels, and event venues nationwide. The company offers a wide range of products including tables, seating, garden furniture, and accessories, emphasizing quality, affordability, and customer service. Their client base includes notable brands such as McDonald's and Subway, indicating a strong market presence in the hospitality sector. The website is built on WordPress with WooCommerce, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced, though the absence of explicit security headers suggests room for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy practices. However, WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, user-friendly, and well-optimized for its target audience.

M

MBA Polymers Inc.

mbapolymers.com

44

MBA Polymers Inc. is a globally recognized leader in the plastic recycling industry, specializing in converting post-consumer durable goods waste into high-value recycled plastic granulates. Founded in 1997, the company operates state-of-the-art production units across multiple countries including Germany, China, India, and the UK, serving manufacturers worldwide with sustainable materials that reduce energy consumption and carbon emissions. Their patented technology and numerous certifications underscore their market leadership and commitment to quality and sustainability. Technically, the website is built on a modern WordPress platform using the Enfold theme, enhanced with SEO and performance plugins like Yoast SEO and WP Rocket. The site demonstrates excellent mobile optimization, fast loading times, and good accessibility features. Analytics are implemented via Google Analytics and Tag Manager with privacy-conscious configurations such as IP anonymization. From a security perspective, the site uses HTTPS with strong SSL configuration and implements cookie consent mechanisms. However, explicit security headers and a public security policy or incident response contacts are not found, representing areas for improvement. The domain registration is consistent with the company’s history and business claims, enhancing trustworthiness. Overall, MBA Polymers presents a professional, trustworthy, and well-structured digital presence aligned with their business objectives. Strategic enhancements in security policy transparency and DNS security could further strengthen their security posture and compliance.

Yozu is a UK-based software development company established in 2010, specializing in delivering bespoke digital transformation solutions including ERPs, CRMs, MRPs, mobile apps, SaaS products, and cloud platforms. The company targets ambitious businesses seeking sustainable growth through technology innovation. Their market position is supported by decade-long experience and a broad industry portfolio including finance, manufacturing, healthcare, and logistics. Technically, the website is built on WordPress with modern performance optimizations such as lazy loading and uses reputable hosting by Heart Internet. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website reflects a professional, trustworthy, and mature digital presence.

M

MRN

themrn.co.uk

66

MRN is a healthcare-focused company specializing in patient-centric clinical trial delivery and support services. Founded in 2020, it operates globally with a strong emphasis on improving recruitment and retention in clinical trials through innovative home trial support, site and patient services, integrated technologies, and strategic trial services. The company holds several certifications and awards that reinforce its credibility and market position. Technically, the website is built on WordPress with modern performance and SEO optimizations, leveraging tools like Google Analytics, HubSpot, and CookieYes for analytics and compliance. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site presents a professional, trustworthy, and compliant digital presence suitable for its healthcare audience.

Brunton Design is a small architectural firm based in Angus and Carnoustie, UK, specializing in house extensions, renovations, and planning applications. The company positions itself as an award-winning local specialist, targeting homeowners and property developers in the region. The website is professionally designed, built on WordPress, and incorporates modern web technologies and SEO best practices. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. However, no explicit contact emails or phone numbers are found, with contact primarily via a form. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy. Security posture is good with HTTPS enforced and anti-spam measures, but lacks advanced security headers and incident response information. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security disclosures.

Z

Zeta Service

zetaservice.com

52

Zeta Service is a medium-sized Italian company specializing in payroll outsourcing, HR consultancy, and headhunting services, serving approximately 1,600 businesses. Their website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. The technical infrastructure is based on WordPress with modern performance and SEO optimizations, leveraging advanced analytics and marketing tools such as Google Analytics, HubSpot, and Facebook Pixel. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although public security policies and incident response contacts are not disclosed. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website's professionalism and compliance with privacy regulations mitigate this risk. Overall, the site presents a trustworthy and business-focused digital front with room for improvement in domain transparency and security communication.

M

Motor Fuel Group

motorfuelgroup.com

62

Motor Fuel Group (MFG) is the UK's largest independent forecourt operator, managing over 1200 sites including its own and Morrisons forecourt networks. The company offers a comprehensive range of services including dual-fuel supply, valeting, retail convenience, food to go, and expanding EV charging infrastructure. Their market position as a leading independent operator is supported by partnerships with well-known brands and a strong digital presence. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager, complemented by a cookie consent mechanism via OneTrust. The site demonstrates good mobile optimization and user experience, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and published security policies. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security disclosures.

TC Group is a well-established UK-based accountancy and business advisory firm, ranked among the top 40 in the country. The company offers a comprehensive range of services including tax planning, corporate finance, wealth management, legal, HR, and mortgage advice. The recent merger with Bulley Davey expands their regional footprint in the East Midlands and East Anglia and introduces new service lines such as business recovery and insolvency. The website reflects a professional and mature business with clear branding and comprehensive service offerings. Technically, the site is built on WordPress with modern performance optimizations and security measures such as HTTPS and hCaptcha on forms. However, the absence of WHOIS domain registration data is a notable gap in transparency. Security policies and incident response contacts are not explicitly published, which could be improved. Overall, the website and business present a credible and trustworthy profile with room for enhanced security communication.

Owens & Minor is a well-established healthcare logistics and supply chain company providing distribution and supply chain management services primarily to healthcare providers such as hospitals and clinics. The company operates at an enterprise scale with a strong market position in the United States. Their website reflects a professional and consistent brand image, targeting healthcare supply chain professionals and organizations. Technically, the website is built on WordPress with modern frameworks like Bootstrap and optimized for performance and mobile devices. Security posture is strong with HTTPS enforcement and appropriate security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website and business appear credible and trustworthy, though the absence of WHOIS data is a notable anomaly that warrants further verification.

A

AdHiveStudio

adhivestudio.com

50

AdHiveStudio is a newly established digital marketing agency based in Dubai, UAE, specializing in services such as Google Ads, SEO, social media marketing, graphic design, and web design including WordPress development. The company positions itself as an AI-driven and automation-enabled marketing solution provider targeting businesses seeking professional digital marketing services in the UAE region. The website is built on WordPress CMS, leveraging popular plugins like Yoast SEO for search engine optimization and WP Rocket for performance enhancements. Hosting is provided by HOSTINGER operations, UAB, with a domain created in mid-2025, consistent with the business's founding year. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is professional, well-branded, and provides clear contact channels including a phone number and contact form. Social media presence on Facebook, Instagram, and LinkedIn supports trust and engagement.

F

First Light Fusion

firstlightfusion.com

53

First Light Fusion is a UK-based company specializing in inertial fusion energy technology, aiming to accelerate the commercialization of clean and limitless fusion power. The company positions itself as a leader in the UK fusion sector with proven technology validated on major research platforms. Their business model focuses on advanced target design and partnership-led development to reduce complexity and power requirements of fusion plants. The website reflects a professional and consistent brand image targeting energy sector stakeholders, scientific communities, and potential partners. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, and integrates analytics tools like Google Analytics and HubSpot. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Security evaluation shows no critical vulnerabilities or WAF blocking. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in security transparency and compliance. Overall, the domain registration data aligns well with the business profile, supporting legitimacy and trustworthiness. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to strengthen the security posture and compliance standing.

E

EverGrow Tech Inc.

vomo.ai

64

VOMO.ai is a technology company specializing in AI-powered meeting transcription and audio/video transcription services. The company offers a SaaS platform that records, transcribes, and summarizes meetings with high accuracy and speed, targeting business professionals and teams. The website is well-designed, mobile-optimized, and uses modern web technologies including WordPress, Elementor, and WP Rocket. It integrates Google OAuth for secure user login and employs Google Analytics and Tag Manager for tracking. The domain registration is consistent with the business identity, registered under EverGrow Tech Inc. in the US, founded in 2023. However, the site lacks visible privacy and cookie policies, which are important for GDPR compliance and user trust. No direct contact information or security policies are published, representing areas for improvement.

S

Sunshine Holdings PLC

sunshineholdings.lk

72

Sunshine Holdings PLC is a prominent Sri Lankan conglomerate engaged primarily in healthcare, consumer goods, and agribusiness sectors. The company holds a strong market position as a leading diversified holding company in Sri Lanka, targeting general consumers, investors, and business partners. Their website reflects a professional corporate identity with clear business descriptions and a focus on transparency and compliance. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, hosted on DigitalOcean infrastructure, and optimized with WP Rocket for performance. Mobile responsiveness and SEO practices are well implemented, contributing to a positive user experience. Security posture is solid with HTTPS enforced, appropriate security headers, and cookie consent mechanisms, although there is room for improvement in CSP policies and dedicated security documentation. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

E

EKOME, spol. s.r.o.

ekome.cz

40

EKOME, spol. s.r.o. is a Czech company specializing in environmental emission measurements and ecological consulting, with a focus on stationary pollution sources and workplace risk factors. The company holds multiple accreditations and authorizations from the Ministry of the Environment, indicating a reputable position in its sector. Their website reflects a professional service provider targeting businesses and organizations requiring environmental compliance and consulting services. Technically, the website is built on WordPress with modern plugins and demonstrates good SEO and privacy compliance, including GDPR and cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. The absence of WHOIS data limits full trust assessment but the visible business information and certifications support legitimacy.

Y

YCO Digital Agency

findfocus.hu

49

YCO Digital Agency operates the FindFocus website, a Hungarian-language professional platform focused on digital marketing trends, strategy, and development. The site provides valuable content such as articles and case studies targeting marketing professionals and businesses interested in digital transformation. Technically, the website is built on WordPress, leveraging modern technologies like WP Rocket for performance optimization, Bootstrap for responsive design, and Google Tag Manager for analytics. The security posture is adequate with HTTPS enabled and script lazy loading, but lacks visible security headers and published privacy or cookie policies, which are critical for compliance and trust. No WAF or blocking mechanisms were detected, and the domain registration is consistent with the business age and content. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

R

RADKA spol. s r.o.

radka.cz

45

RADKA spol. s r.o. is a Czech-based chemical distribution company with over 30 years of history, specializing in high-quality chemical products including plastics, elastomers, coatings, adhesives, and water treatment chemicals. As a member of the RADKA Group, it holds a solid market position in the manufacturing and chemical distribution sectors, targeting industrial and commercial clients. The website reflects a professional and consistent brand image with clear business information and certifications such as ISO 9001 and ISO 14001, enhancing trustworthiness. Technically, the website is built on WordPress 6.8.3 with modern performance optimizations including WP Rocket and Rank Math SEO. It uses Google Fonts and integrates Plausible Analytics for privacy-conscious tracking. The site is mobile-optimized and loads quickly, with good SEO practices and basic accessibility features. However, explicit privacy and cookie policies are not found, which is a gap in compliance. From a security perspective, the site uses HTTPS with excellent SSL configuration and secure form handling. No major vulnerabilities or exposed sensitive data were detected. Security headers are not explicitly present, and there is no visible vulnerability disclosure or security.txt file, which could improve the security posture. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, RADKA.cz presents a trustworthy and professional online presence with strong business credibility and technical implementation. To further enhance security and compliance, the company should publish clear privacy and cookie policies, implement security headers, and consider a vulnerability disclosure policy. These steps will improve user trust and regulatory compliance.

S

Smaily - intentionally simple email marketing and automation

smaily.com

60

Smaily is a small Estonian technology company specializing in providing an intentionally simple email marketing and automation platform. Founded in 2014, it offers a SaaS model with key services including email marketing, template editing, landing pages, automation, transactional emails, and app integrations. The company emphasizes GDPR compliance, ISO/IEC certification, and excellent human customer support, positioning itself as a trustworthy and user-friendly alternative in the email marketing space. Technically, the website is built on WordPress with modern tools such as Yoast SEO, WPBakery, and Google Tag Manager, ensuring good performance, SEO, and mobile optimization. Security posture is strong with HTTPS, cookie consent mechanisms, and CAPTCHA protections, although DNSSEC is not enabled and some security headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

Ekopak

ekopak.be

54

Ekopak is a medium-sized Belgian company specializing in sustainable industrial water and wastewater treatment solutions. The company focuses on circular water use to help industrial clients reduce costs and address water scarcity. Their business model is B2B, offering services such as water treatment, wastewater treatment, operational support, and green energy solutions. The website is professionally designed, multilingual, and optimized for SEO and mobile use. Technically, it is built on WordPress with modern plugins and integrates analytics and marketing tools like Google Tag Manager, Hotjar, and Cookiebot for consent management. Security posture is good with HTTPS and domain transfer protection, but lacks explicit security policies and headers. Privacy compliance is supported by a cookie consent mechanism, though no privacy policy or terms of service were found in the provided content. Overall, the domain registration is consistent and legitimate, supporting the business credibility.

C

Construction Management

constructionmanagermagazine.com

64

Construction Management is a well-established UK-based construction industry magazine affiliated with the Chartered Institute of Building. It provides comprehensive news, technical articles, CPD modules, job listings, podcasts, and digital editions targeted at construction professionals and industry stakeholders. The website is professionally designed with excellent content quality and consistent branding, positioning it as a trusted media source in the construction sector. The business model relies on advertising, subscriptions, and content services, supported by a mature digital infrastructure.

C

Construction Management

constructionmanagement.co.uk

64

Construction Management is a professional UK-based construction industry magazine affiliated with the Chartered Institute of Building (CIOB). It provides construction news, technical articles, CPD modules, job listings, and digital editions targeting construction professionals and stakeholders. The website is published by Atom Publishing and holds a strong market position as the official CIOB magazine. The content is rich, relevant, and professionally presented, catering to a medium-sized audience within the construction and real estate sectors. The business model is primarily media and advertising-based with subscription options.

D

Département de la Marne

marne.fr

56

The Département de la Marne website serves as the official digital portal for the regional government of the Marne department in France. It provides comprehensive information about the department's missions, actions, elected officials, and public services. The site targets residents and stakeholders within the region, offering resources such as contact information, news, tourism details, and access to administrative procedures. The website maintains a professional and consistent brand image aligned with government standards. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Matomo for analytics. It employs accessibility features and cookie consent management, ensuring compliance with basic privacy norms. The site is mobile-optimized and uses HTTPS, contributing to a secure and user-friendly experience. However, some advanced security headers and explicit privacy policies are not evident, indicating areas for improvement. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits full trust verification, but the official .fr domain and government affiliation support legitimacy. Overall, the site presents a moderate to high security posture with room for enhanced transparency and policy documentation. Strategically, the website effectively supports the department's public service mission, providing clear navigation and relevant content. It integrates social media channels to extend outreach and engagement. Recommendations include publishing detailed privacy and security policies, implementing additional security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

S

SMZ Stadtmedienzentrum Karlsruhe

smz-karlsruhe.de

53

SMZ Stadtmedienzentrum Karlsruhe is a regional educational media center supporting teachers in integrating digital media into classroom instruction. The website serves as a comprehensive resource hub offering services such as media lending, technical support, workshops, and pedagogical consulting. It targets educators and schools primarily in Karlsruhe, Germany. The digital infrastructure is built on a modern WordPress platform with Elementor and SEO optimizations, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The site maintains GDPR compliance with clear privacy and cookie policies. Overall, the website reflects a trustworthy and professional educational institution with a clear mission and well-structured content.

P

PRIMO GmbH

primo-gmbh.com

73

PRIMO GmbH is a German company specializing in innovative electrical installation solutions, targeting professional installers and construction sectors. The website presents a comprehensive catalog of products and services including underputzinstallation, hohlwandinstallation, betoninstallation, and factory production services. The company positions itself as a professional and innovative market player with a medium-sized business footprint in the energy sector. Technically, the website is built on a modern WordPress CMS platform using Elementor and WooCommerce, with performance optimizations via WP Rocket and analytics through Google Tag Manager. The site is well-structured, mobile-optimized, and compliant with GDPR regulations, featuring a detailed cookie consent mechanism. Security posture is good with HTTPS enforced, but lacks explicit security policies or incident response contacts. The absence of WHOIS domain registration data is a concern for domain legitimacy, though the website content and structure indicate a professional business presence. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with recommendations to improve security headers and transparency.

H

homeway

homeway.de

54

homeway is a German-based company specializing in modular communication networks for homes, integrating fiber optics, internet, TV, and multimedia in-house networks. The company targets both private consumers and business sectors such as installers, electrical planners, prefab house manufacturers, and developers. Their offerings include innovative home network solutions and safe electrical power products. The website demonstrates a solid digital presence with modern WordPress infrastructure, SEO optimization, and GDPR-compliant cookie management. Social media engagement is active across major platforms. Security posture is good with HTTPS and privacy plugins, though explicit security policies and vulnerability disclosures are absent. Overall, homeway presents as a trustworthy small business with a clear market niche in telecommunications and energy solutions for residential and commercial clients.

D

e-Documenta Pannonica – Čezmejna baza podatkov o kulturni dediščini izbranih 120 krajev na čezmejnem slovensko-madžarskem območju – Prekmurja v Sloveniji in Železne županije na Madžarskem

documenta-pannonica.hu

10

The website www.documenta-pannonica.si serves as a cross-border cultural heritage database focusing on 120 selected locations in the Slovenian-Hungarian border area, specifically Prekmurje in Slovenia and the Železna županija in Hungary. It provides multilingual content in Slovenian, Hungarian, and English, offering access to archival materials, immovable and intangible cultural heritage, notable personalities, and audiovisual materials. The platform targets researchers, historians, and cultural enthusiasts interested in this specific geographic and cultural region. The business model is informational and educational, with no evident commercial transactions. Technically, the website is built on WordPress CMS using the Betheme theme, enhanced with plugins such as WPML for multilingual support, GDPR Cookie Compliance for privacy management, and Google Site Kit for analytics integration. The site uses modern JavaScript libraries including Leaflet.js for interactive maps and jQuery for DOM manipulation. Hosting is provided by HITROST.COM, a Slovenian domain and hosting provider. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, no explicit security headers (e.g., CSP, HSTS) were detected, and some third-party libraries are slightly outdated, which could pose minor risks. No exposed sensitive data or vulnerabilities were observed in the provided content. The absence of a published privacy policy and terms of service is a compliance gap. Overall, the website is legitimate, consistent with its domain registration data, and safe for general audiences. It demonstrates a moderate to good security posture but would benefit from enhanced security headers and formalized privacy documentation. Strategic recommendations include implementing comprehensive security headers, updating libraries, publishing privacy and security policies, and improving accessibility and compliance documentation.

T

Teamdash

teamdash.com

10

Teamdash is a technology company specializing in AI-enabled recruitment software designed for in-house talent acquisition teams. Their platform offers a comprehensive suite of tools including applicant tracking, recruitment marketing, video interviewing, automation, and analytics to streamline hiring processes and improve recruitment outcomes. The company positions itself as a highly customizable and innovative solution in the recruitment software market, supported by positive user ratings and industry recognition. Technically, the website is built on WordPress with modern performance optimizations such as WP Rocket and Google Tag Manager integration. The site is well-structured with SEO best practices and mobile optimization, providing a professional user experience. However, the absence of WHOIS data and registrant information introduces some uncertainty about domain registration legitimacy. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service pages. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the security posture is good but could be improved with additional transparency and security controls. The overall risk assessment is moderate with recommendations to publish clear privacy and terms policies, enhance security headers, and clarify domain registration details to improve trust and compliance.

EVENT PARTNER is a well-established German media brand specializing in the event industry, providing news, trends, and educational content such as webinars and whitepapers. The website targets event professionals and marketers, offering subscription-based and single-issue sales alongside digital downloads. Technically, the site is built on WordPress with modern integrations including Usercentrics for consent management and Google Tag Manager for analytics and advertising. The site demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.

K

Krediidiregister

krediidiregister.ee

40

Krediidiregister is an established Estonian company providing comprehensive data solutions for credit and business risk management. With over 11 years in the market, it operates the largest payment default and business information database in Estonia, offering services such as credit scoring, account statement analysis, and business monitoring. The company targets businesses and financial institutions seeking to make informed credit decisions and manage financial risks effectively. Technically, the website is built on WordPress with WooCommerce and optimized for performance using WP Rocket. It integrates modern analytics and marketing tools including Google Analytics, Facebook Pixel, and GetResponse Analytics, while implementing GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and partial security headers, though there is room for improvement in explicit security policies and incident response disclosures. Overall, the website presents a professional, trustworthy, and well-structured digital presence aligned with its business objectives.

G

Grad Bjelovar

bjelovar.hr

42

Grad Bjelovar operates an official municipal government website serving the city of Bjelovar, Croatia. The site provides residents and visitors with information on local government administration, public calls, events, documents, and services. It maintains a consistent brand presence and leverages social media platforms to engage its audience. The website is built on WordPress with popular plugins for SEO, caching, and analytics, hosted on Totohost servers. The technical infrastructure supports good mobile optimization and accessibility, with moderate performance characteristics. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional, suitable for its government function.

5

Přední český portál pro recenze a srovnání online služeb

5nej.cz

38

The website www.5nej.cz is a leading Czech portal specializing in reviews and comparisons of online services, particularly in finance, e-commerce, lifestyle, and online tools. It targets Czech-speaking consumers seeking objective and comprehensive information to make informed decisions about financial products, online shopping, and digital services. The business model revolves around content creation, likely monetized through affiliate links and advertising. Technically, the site is built on WordPress CMS with a modern tech stack including jQuery, Yoast SEO Premium, WP Rocket for performance optimization, and analytics tools such as Microsoft Clarity and Google Tag Manager. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and explicit privacy disclosures. From a security perspective, the site uses HTTPS and avoids exposing sensitive data in its HTML. However, it lacks visible security headers and explicit privacy and cookie policies, which are important for GDPR compliance and user trust. No vulnerabilities or malware indicators were detected. The absence of WHOIS data suggests domain privacy protection, which is common and acceptable for this business type. Overall, the website presents a professional and trustworthy front for its target audience but would benefit from enhanced privacy disclosures, security headers, and clearer contact information to improve compliance and user confidence.

F

Finby

trustpay.sk

11

Finby is a Slovak-based payment gateway provider specializing in localized payment methods for European e-commerce businesses. The company offers a broad range of payment solutions including card payments, local payment methods, and instant bank transfers, supported by a merchant portal and API integration. The website is professionally designed, mobile-optimized, and provides comprehensive GDPR-compliant privacy and cookie policies. Technically, the site is built on WordPress with modern plugins and hosted on Microsoft Azure DNS, ensuring good performance and reliability. Security posture is strong with HTTPS enforced and PCI DSS certification displayed, although explicit security headers and incident response information are not publicly available. Overall, Finby presents as a credible and trustworthy payment service provider with a clear market focus and solid technical infrastructure.

S

Solitics

solitics.com

62

Solitics is a technology company specializing in AI-powered real-time user engagement and gamification solutions tailored for regulated industries such as trading, banking, and iGaming. Their platform enables businesses to create hyper-personalized user journeys, leveraging AI and automation to boost engagement, retention, and performance. The company positions itself as an innovative leader with a strong focus on compliance and security, catering to enterprises that require fast, secure, and compliant marketing automation tools. Technically, the website is built on WordPress with modern performance optimizations including WP Rocket, lazy loading, and integrations with HubSpot, Google Tag Manager, Hotjar, and Google reCAPTCHA Enterprise. The hosting infrastructure appears to be AWS-based, with DNS managed by AWS DNS servers. The site demonstrates excellent mobile optimization, SEO, and accessibility features, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS and integrates advanced bot protection via Google reCAPTCHA Enterprise. However, there is room for improvement in DNS security (DNSSEC not enabled), explicit security headers, and incident response transparency. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks visible cookie consent mechanisms and vulnerability disclosure information. Overall, Solitics presents a professional, trustworthy, and technically sound web presence with a strong business focus on regulated sectors. Strategic improvements in privacy compliance and security transparency would further enhance their risk posture and customer trust.

C

Capexus

capexus.sk

54

Capexus SK is a Slovak company specializing in custom commercial interior design and build services. Operating since 2011 and part of the Esco Slovensko group, it offers a comprehensive portfolio including architecture, workplace consultancy, acoustics, building technologies, and project documentation. The company has a strong market presence, evidenced by awards such as the Office Roka 2022 for Healthy Office. The website reflects a mature digital infrastructure built on WordPress with modern technologies and performance optimizations. Security posture is solid with HTTPS, DNSSEC, and best practices in place, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site projects professionalism, trustworthiness, and business credibility.