Security Directory

A

Alison Brooks Architects Ltd

alisonbrooksarchitects.com

66

Alison Brooks Architects Ltd is a well-established architectural design practice based in London, founded in 2004. The firm is recognized as one of London's most awarded design practices, offering a broad range of architectural services including residential, commercial, cultural, educational, and masterplanning projects. Their website showcases a comprehensive portfolio of projects and news updates, targeting clients and industry professionals seeking high-quality architectural design. The company maintains a strong market position with consistent branding and professional content. Technically, the website is built on WordPress with modern SEO and analytics tools, hosted by Mythic Beasts, and optimized for mobile and accessibility. Security posture is good with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is adequate with a privacy policy and cookie consent mechanism in place. Overall, the website reflects a credible and professional business with a high level of digital maturity.

A

Adexchange

adexchange.co.uk

48

Adexchange is a UK-based digital marketing and channel performance company that recently merged with Mazaru to expand its team and service offerings, including AI-powered marketing solutions. The website is built on WordPress using Elementor and incorporates modern technologies such as LiteSpeed caching and Google reCAPTCHA v3 for security. While the site is professionally designed and mobile-optimized, it lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. The security posture is moderate with HTTPS enforced and cookie consent implemented, but the absence of security headers and presence of a suspicious external domain for analytics slightly reduce confidence. Overall, the website presents a credible business with room for improvement in privacy and security transparency.

M

Mondottica Group

mondottica.com

65

Mondottica Group is a well-established UK-based eyewear design, licensing, and manufacturing company with over 20 years of experience. The company collaborates with multiple fashion brands to produce and distribute branded eyewear globally. Their website reflects a professional digital presence built on WordPress, featuring modern web technologies and SEO optimization. The site includes a comprehensive cookie consent mechanism and privacy policy, demonstrating good privacy compliance. Security measures include HTTPS, Google reCAPTCHA, and domain transfer protection, though additional security headers and explicit security policies could enhance their posture. Overall, the website is credible, well-maintained, and aligned with the company's business history and market position.

S

Shaw Carpets

shawcarpets.co.uk

60

Shaw Carpets is a well-established, family-run flooring supplier based in Barnsley, Yorkshire, with over 60 years of experience. The company operates the largest independent carpet and flooring showroom in Yorkshire, offering a wide range of products including carpets, cushion vinyl, luxury vinyl tiles, and carpet remnants. Their business model focuses on direct factory pricing, free home sampling, professional installation, and customer satisfaction, positioning them as a leading local retailer in the flooring sector. The website reflects a strong local market presence supported by extensive customer reviews and trust signals. Technically, the website is built on WordPress with a modern technology stack including Yoast SEO, WP Rocket for performance optimization, CleanTalk for anti-spam, LiveChat for customer support, and multiple analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is well-optimized for SEO, mobile-friendly, and demonstrates good accessibility practices. Performance is fast, and the site uses HTTPS with a solid SSL configuration. From a security perspective, the site employs HTTPS, anti-spam measures, and secure form handling. However, some security headers are not explicitly detected, and there is no visible security policy or incident response information. The WHOIS data for the exact domain queried is unavailable due to a domain naming rules violation error, which slightly reduces trustworthiness but is likely a query or domain format issue rather than a business legitimacy concern. Overall, Shaw Carpets presents a professional and trustworthy online presence with strong business credibility and technical maturity. Strategic improvements in security header implementation, incident response transparency, and WHOIS domain clarity would further enhance their security posture and trust profile.

Cavendish Online is a UK-based online fee-based discount broker specializing in life insurance and related financial protection products. Positioned as a leading discount broker, it offers customers lower premiums through fixed fees or reduced commissions. The company operates under the regulatory oversight of the Financial Conduct Authority (FCA) and is part of Lloyds Banking Group, enhancing its market credibility. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services, supported by strong trust signals such as expert endorsements and extensive customer reviews. Technically, the site employs modern analytics and marketing technologies, including Google Analytics, Klaviyo, and reCAPTCHA, ensuring robust user engagement and security. Security posture is strong with HTTPS enforcement and secure form handling, though some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with a high level of professionalism and trustworthiness.

N

Naylors

naylors.co.uk

68

Naylors is a leading independent commercial property consultancy based in the North East of the United Kingdom, specializing in a wide range of real estate services including agency and development, property and facilities management, occupier services, professional services, investment and asset management, and building consultancy. The company positions itself as a trusted advisor with deep regional knowledge and national reach, serving commercial property clients seeking to maximize the value of their assets. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. Technically, the website employs a modern technology stack including jQuery, Bootstrap 5, Select2, Swiper, and AOS for animations, alongside Google Analytics for user tracking. The site is mobile-optimized, accessible, and SEO-friendly, with proper meta tags and structured data enhancing search visibility. Cookie consent mechanisms and privacy policies demonstrate compliance with GDPR and privacy regulations. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and a public security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS lookup for the queried domain 'www.naylors.co.uk' failed due to an invalid domain format, but the actual domain 'naylors.co.uk' is active and legitimate, indicating no immediate trust concerns. Overall, Naylors' website presents a secure, professional, and user-friendly platform that supports its business objectives effectively. Strategic improvements in security headers and public security policies could further enhance trust and compliance.

Victoria Group operates as a service provider specializing in integrated port operations and supply chain management, targeting businesses and stakeholders within the transportation sector in the United Kingdom. The website presents a professional and consistent brand image with a clear focus on their core services. The digital infrastructure is built on WordPress CMS, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, supporting a good user experience. Security posture is generally positive with HTTPS enabled, but lacks visible advanced security headers and explicit security policies. Privacy compliance is limited, with no dedicated privacy or terms of service pages found, though a cookie consent mechanism is implemented. The absence of WHOIS data due to domain registration query issues limits the ability to fully assess domain legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

W

Wilton Bradley Ltd

wiltonbradley.com

59

Wilton Bradley Ltd is a UK-based company specializing in the design, development, sourcing, distribution, and wholesale supply of quality branded consumer leisure goods. The company serves specialist retailers and trade customers, offering a broad portfolio of products and services including product design, global sourcing, flexible supply options, and sales and marketing support. The website reflects a professional and established business with a clear market position in retail distribution. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates Google Analytics and reCAPTCHA for analytics and security. The site is mobile-optimized and SEO-friendly, with comprehensive privacy and cookie policies that comply with GDPR standards. Security posture is good with HTTPS enforced and secure form handling, though some security headers and explicit incident response information are missing. The absence of WHOIS data is a notable concern, reducing domain trustworthiness despite the professional web presence. Overall, the website is reliable and trustworthy for business interactions but would benefit from improved transparency in domain registration and security policies.

M

Metamark

metamark.co.uk

66

Metamark is a UK-based manufacturing company specializing in self-adhesive vinyl films and signage materials, serving primarily business customers in the printing and graphics industries. The company operates a professionally designed Shopify e-commerce website that facilitates product information dissemination and customer engagement through embedded forms. The technical infrastructure leverages modern web technologies including Shopify's Dawn theme, various marketing and analytics tools such as Google Tag Manager, Hotjar, and Klaviyo, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by implementing explicit security headers and publishing security policies. Privacy compliance is partially addressed with clear privacy and terms of service pages, but lacks a cookie consent mechanism. Overall, the website reflects a credible and trustworthy business with room for enhanced privacy and security transparency.

J

J.Hempstock & Co Ltd

hempstockmetalroofing.co.uk

39

J.Hempstock & Co Ltd is a UK-based small business specializing in lead roofing installations, repairs, and restoration services for period properties and new build construction. The website currently serves as a 'coming soon' placeholder, indicating an upcoming launch. The business targets property owners and construction professionals seeking specialized roofing services. The digital presence is built on WordPress using the SeedProd coming soon plugin, with basic technical implementation and minimal content. Security posture is limited, with no detected security headers or privacy policies, and the domain WHOIS data is unavailable due to a registration error, raising concerns about domain legitimacy. Overall, the website is functional but lacks comprehensive security and compliance features.

W

Weber Packaging Solutions UK

weber.co.uk

49

Weber Packaging Solutions UK is a well-established company specializing in labelling and coding solutions, serving a diverse range of industries including manufacturing, healthcare, logistics, and retail. The company offers a comprehensive portfolio of products such as label printers, applicators, inkjet coders, RFID systems, and related software and services. Their market position is strong, supported by nearly a century of industry experience and a broad client base including major brands and public sector entities. Technically, the website is built on a modern WordPress platform with a robust tech stack including Bootstrap, WooCommerce, and various plugins for SEO, social media integration, and cookie compliance. The site demonstrates good mobile optimization, SEO practices, and user experience, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, with indications of security plugins like Wordfence. However, explicit security headers are not detected, and there is no public incident response or security policy page. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website presents a professional and trustworthy digital presence with strong business credibility. The lack of WHOIS data for the exact subdomain is explained by domain naming rules, and the main domain is presumably registered and legitimate. Strategic improvements in security headers and incident response transparency would further strengthen the security posture.

T

TClarke

tclarke.co.uk

64

TClarke is a leading UK-based engineering services company specializing in technology-led building services and complex engineering projects. The company positions itself as a premier resource across the UK, with a strong focus on innovation, integrated systems, and community involvement. Their website reflects a professional and modern digital presence with multimedia content and comprehensive policy documentation. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers are missing and no incident response or vulnerability disclosure pages are present. The WHOIS data is missing, which raises some concerns about domain registration transparency but the business information and trust signals on the site support legitimacy. Overall, the site is well-structured and compliant with GDPR, providing a trustworthy experience for visitors.

I

Ian Williams

ianwilliams.co.uk

52

Ian Williams is a well-established, privately-owned property services company based in the United Kingdom, founded in 1946. The company specializes in innovative painting, planned investment, and repair services, targeting property owners, housing associations, and local authorities. Their website reflects a professional and consistent brand image, emphasizing quality service delivery and investment in people and processes. The business model focuses on providing property maintenance and investment services with a medium-sized market presence. Technically, the website is built on WordPress, utilizing modern web technologies including jQuery, Google Analytics, Matomo Analytics, and Cookiebot for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with structured data implemented for enhanced search engine understanding. Performance is moderate, with room for optimization. The technical infrastructure supports a professional digital presence but lacks some advanced security headers. From a security perspective, the website enforces HTTPS and implements a comprehensive cookie consent mechanism compliant with GDPR. No exposed sensitive data or vulnerabilities were detected in the analyzed content. However, the absence of explicit security headers and vulnerability disclosure policies suggests areas for improvement. The WHOIS data is incomplete due to a domain naming error in the lookup, but the website content and structure indicate a legitimate and trustworthy business. Overall, the website presents a solid digital footprint with good privacy compliance and a professional business image. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving WHOIS data transparency to strengthen trust and compliance.

S

Stedman Brothers Events

stedmanbrothers.com

51

Stedman Brothers Events is a family-run business specializing in mobile bar services for major events, with a heritage dating back to 1905. The company serves a mature audience including event organizers and promoters, offering bespoke bar services, sustainable reusable cup schemes, and advanced payment processing technology. Their market position is strengthened by longstanding relationships with major beverage brands and a century of industry experience. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Tag Manager and reCAPTCHA, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA, but lacks advanced security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information appear professional and trustworthy. Privacy compliance is basic, with no cookie consent mechanism detected. Overall, the site presents a professional image but would benefit from enhanced security and privacy practices.

C

Cornwall Window Centre

cornwallwindowcentre.co.uk

56

Cornwall Window Centre is a small, well-established business specializing in double glazing products and installation services in Cornwall, UK. The company offers a range of uPVC and aluminium windows, doors, conservatories, and accessories, serving multiple towns within the Cornwall region. Their website provides an online quoting engine, clear contact information, and showcases trusted partnerships with brands like Yale and Napit. Technically, the website is built on WordPress with common plugins and frameworks, optimized for SEO and mobile use, and secured with HTTPS. However, some security headers are missing, and no explicit incident response or security policy pages are present. The WHOIS lookup for the 'www' subdomain failed due to domain naming rules, but the main domain is active and legitimate. Overall, the website demonstrates good professionalism, trustworthiness, and business credibility.

M

Machurian

machurian.co.uk

45

Machurian is a UK-based small technology company specializing in web solutions, branding, and digital marketing services. With over 13 years of experience, the company is currently refreshing its website to better represent its offerings. The website is built on WordPress using Elementor and Astra theme, indicating a modern and flexible technical infrastructure. The site is mobile optimized and uses HTTPS, but currently lacks comprehensive privacy and security policy disclosures. Contact information including phone and physical address is clearly provided, enhancing business credibility. However, the absence of privacy policy and terms of service pages suggests room for improvement in compliance and transparency. Security posture is moderate with HTTPS and cookie consent implemented, but additional security headers and incident response information are recommended.

E

Echobox

echobox.com

63

Echobox is a technology company specializing in AI-driven social media and newsletter automation solutions tailored for publishers worldwide. Their platform aims to boost referral traffic and engagement by automating content distribution across social media channels and email newsletters. The company positions itself as a leader in media technology, offering products such as Echobox Social, Echobox Email, and Echobox Benchmarks, targeting enterprises and SMEs in the publishing sector. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Visual Website Optimizer, indicating a mature digital marketing and analytics infrastructure. The site is well-structured with responsive design and good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses several security best practices, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are present and indicate GDPR compliance, supporting a strong privacy posture. Overall, the website presents a professional and trustworthy front for Echobox's business. However, the absence of WHOIS data for the domain raises questions about domain registration legitimacy, which should be verified. The risk level is moderate with recommendations to improve security headers and confirm domain ownership.

AAA Taxi is a small, established transportation service provider based in Preston, United Kingdom, operating since 2003. The company offers luxury taxi services including airport transfers, long-distance travel, and accessible vehicles. Their digital presence includes a WordPress-based website with online booking capabilities and a mobile app, targeting local residents and visitors seeking reliable transport. The website demonstrates good content quality, clear navigation, and consistent branding, supported by customer testimonials and contactless payment options. Technically, the website leverages common WordPress plugins such as Yoast SEO, Contact Form 7, and Revolution Slider, hosted by 123-Reg. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. From a security perspective, the site shows basic best practices with no exposed sensitive data or visible vulnerabilities. However, the absence of security headers and GDPR cookie consent reduces its security posture score. No incident response or security policy information is provided, which could be enhanced to improve trust. Overall, AAA Taxi's website is functional, professional, and trustworthy for its business scope, but would benefit from enhanced security measures and privacy compliance to align with modern standards and regulations.

S

Sandall Roofing Ltd

sandallroofing.co.uk

55

Sandall Roofing Ltd is a small roofing services company based in Bourne, Lincolnshire, UK, specializing in a wide range of roofing solutions including tiling, slate roofing, flat roofing, fibre glass roofing, green roofing, and maintenance & repairs. The company targets both domestic and commercial customers and emphasizes guaranteed work and free quotations, positioning itself as a trusted local expert. The website is built on WordPress using the Divi theme, employing common web technologies such as jQuery and FontAwesome, and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data due to domain naming rules violation introduces some uncertainty about domain legitimacy, though the website content and contact information appear consistent and professional. Overall, the site presents a credible business front but would benefit from enhanced security and privacy features.

H

Head-On Electrical

head-onelectrical.co.uk

48

Head-On Electrical is a small, local electrical services provider based in Hull and East Yorkshire, UK. The company offers electrical installation, testing, and emergency call-out services, targeting residential and commercial customers in the region. The website is built on WordPress using the Avada theme and incorporates SEO best practices through the Yoast SEO plugin. Social media presence is established via a Facebook page linked in the website metadata. The website content is relevant and professionally presented, with a focus on electrical services and emergency support.

HugeDomains operates as a reputable domain marketplace specializing in premium domain name sales, offering flexible payment plans and a 30-day money back guarantee. The website is professionally designed with clear navigation and strong trust signals such as customer testimonials and secure shopping assurances. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google reCAPTCHA, and a cookie consent management system, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforced and bot management cookies in use, though some security headers and incident response information are absent. Overall, the domain sale page is trustworthy and well-maintained, supporting a positive business reputation.

G

Granite Direct Ltd

granitedirect.ltd.uk

69

Granite Direct Ltd is a well-established UK-based company specializing in the fabrication, supply, and installation of high-quality natural stone worktops including granite, quartz, marble, and quartzite. The company targets both residential and commercial clients primarily in London, positioning itself as a trusted expert with over 20 years of industry experience. Their website reflects a professional and customer-focused approach, featuring a multi-step quote form and showcasing a broad portfolio of stone products and services. Technically, the website is built on WordPress using Elementor and several optimization and SEO plugins such as WP Rocket and Yoast SEO. The site is hosted by Hosting Concepts B.V., a reputable provider, and employs HTTPS with good SSL configuration. Performance and mobile optimization are adequate, though accessibility features are basic. Analytics and marketing tools include Google Tag Manager and Google Analytics, with a cookie consent mechanism in place. From a security perspective, the site uses HTTPS and reCAPTCHA for forms, but lacks visible security headers and published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie policy present but no detected privacy or terms of service pages. Overall, the website is trustworthy and professionally maintained, with a solid business presence and technical foundation. Strategic improvements in security headers, privacy documentation, and incident response transparency would enhance the security posture and compliance standing.

S

Smart Payment Technologies

secure-retail.com

68

Smart Payment Technologies is a UK-based payment technology company founded in 2016, providing innovative, secure, and scalable payment solutions globally. Their business model focuses on delivering integrated payment software and devices tailored to diverse business needs, supported by comprehensive services including solution development, implementation, maintenance, and compliance. The company positions itself as an agile global technology partner with a broad client base including notable brands. Technically, the website is built on WordPress with modern JavaScript libraries and analytics tools, hosted behind Cloudflare DNS, and secured with HTTPS. However, the absence of explicit privacy and cookie policies, as well as security and incident response disclosures, indicates areas for compliance improvement. Overall, the site is professional and trustworthy, with moderate to good technical and security posture.

Berrymans Bakery is a small, established UK-based bakery specializing in traditional Cornish pasties made by hand using local ingredients. The business has a long history of over 50 years and serves both retail customers and trade clients. Their website supports online sales through a partner domain and provides information about their products and company history. Technically, the website is built on WordPress using common plugins and libraries such as jQuery, Modernizr, and Contact Form 7. The site is hosted on a green hosting provider, indicating environmental awareness. Security posture is moderate with HTTPS enabled but lacks visible security headers and privacy compliance mechanisms. No privacy or cookie policies are present, which is a compliance gap. The site is free from WAF blocking or content restrictions and contains no adult or questionable content, making it safe for general audiences. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

B

BAM Agency

bamuk.com

56

BAM Agency is a UK-based experiential marketing and promotional staffing agency specializing in youth and student marketing. With over 25 years of experience, the company offers a comprehensive suite of services including experiential marketing, event staffing, digital marketing, brand insights, and youth marketing. The website presents a professional and engaging digital presence, leveraging WordPress with Themify Ultra theme and integrating modern marketing tools such as Iubenda for cookie compliance and Instagram feeds for social proof. However, the absence of visible contact emails, phone numbers, and privacy policy pages slightly detracts from the overall trustworthiness. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy.

E

Elm Surfacing Ltd

elmsurfacing.com

57

Elm Surfacing Ltd is a UK-based company specializing in road surfacing, highway maintenance, hand lay reinstatement, machine lay surfacing, and road marking services primarily serving the South East, London, and Home Counties regions. Established since 1995, the company has built a solid reputation and a loyal customer base. Their website reflects a professional service provider with a clear focus on civil engineering and construction sectors. The company targets public, private, and construction clients requiring comprehensive road surfacing solutions. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, Slider Revolution, and Contact Form 7 with Google reCAPTCHA v3 for spam protection. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS and implements reCAPTCHA, but no explicit security headers were detected. Privacy and cookie policies are missing, indicating compliance gaps with GDPR and other privacy regulations. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, although the website content and professional presentation suggest a legitimate business. Overall, the website is functional, professional, and trustworthy from a business perspective but requires improvements in privacy compliance, security headers, and domain registration transparency to enhance trust and security posture.

B

Blooming Baskets

blooming-baskets.com

55

Blooming Baskets is a small retail business specializing in flower delivery and floral arrangements based in Sydney, Australia. The company has an established online presence with a domain registered since 2009, indicating a mature business. The website is built on WordPress with WooCommerce and Elementor, providing e-commerce capabilities and a professional user experience. The site is optimized for mobile and SEO, with clear navigation and good content relevance focused on floral services. However, the website lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security measures include HTTPS and domain registration protections, but the absence of DNSSEC and security headers represents areas for improvement. Contact information is primarily via a contact form, with no explicit emails or phone numbers found in the provided content. Overall, the website is functional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Abstract Office Interiors Ltd is a small UK-based company specializing in office refurbishment, interior design, and industrial unit fit outs primarily serving Essex, London, and surrounding counties. Their website presents a professional image with clear descriptions of services and a focus on commercial office spaces. The company targets businesses seeking turnkey office design and refurbishment solutions. Technically, the website is built on WordPress using the Divi theme and related plugins, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal privacy or terms policies. WHOIS data is unavailable due to a query error, which slightly reduces trustworthiness from a domain registration perspective. Overall, the website is functional and professional but would benefit from enhanced security practices and privacy compliance documentation.

H

Hollywood Travel

hollywoodtravel.co.uk

58

Hollywood Travel is a family-run coach travel company based in Birmingham, UK, offering a range of services including coach holidays, day trips, school trips, private hire, corporate hire, and airport transfers. The company emphasizes local and nationwide travel with over three decades of experience, positioning itself as a trusted small business in the transportation sector. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site uses modern JavaScript libraries, Cookiebot for consent management, and Google Analytics for visitor tracking. The site is hosted on a CDN platform likely associated with the Mono CMS, providing moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and bot protection via hCaptcha; however, explicit security headers are missing, and no public security policy or incident response information is available. Privacy compliance is well addressed with a visible cookie consent mechanism and a privacy policy page. The lack of WHOIS data due to domain registration issues limits full trust verification of the domain, though the website content and contact details appear legitimate. Overall, the site is functional, secure, and compliant with privacy regulations, suitable for its business purpose.

M

Murray Birrell

murraybirrell.co.uk

62

Murray Birrell is a well-established UK-based chartered building surveying firm with over 30 years of industry experience. The company offers a comprehensive range of specialist surveying and consultancy services primarily targeting property owners, developers, landlords, and tenants in London and Kent. Their market position is supported by multiple industry certifications and positive client testimonials, reflecting a strong reputation in the real estate sector. Technically, the website is built on a modern WordPress platform using Elementor and Slider Revolution, with good SEO and mobile optimization. Security posture is solid with HTTPS and security headers in place, though formal security policies and cookie consent mechanisms are lacking. Overall, the site presents a professional and trustworthy digital presence aligned with the company's business model and market claims.

V

Vaughan Limited

vaughandesigns.com

56

Vaughan Designs is a medium-sized retail company specializing in high-quality lighting, furniture, lampshades, and textiles, targeting interior design professionals and retail customers internationally. The company operates flagship showrooms in London and New York and offers trade accounts and project planning tools. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses modern web technologies including JavaScript, jQuery, Google Tag Manager, and cookie consent mechanisms, with good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response information is noted. The lack of WHOIS data for the domain is a concern for domain legitimacy and should be investigated further. Overall, the website presents a trustworthy and professional digital presence with moderate risk due to missing domain registration transparency.

A

Allied Worldwide LTD

alliedworldwide.com

71

Allied Worldwide LTD operates as a global IT managed services, outsourcing, and resourcing provider, positioning itself as a strategic partner to enterprises seeking cost-efficient IT solutions. The company emphasizes innovation, scalability, and future-ready capabilities, supported by industry recognition and a professional digital presence. The website reflects a medium-sized technology business with a consistent brand and good content quality, targeting enterprise clients primarily in the UK and globally. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, with SEO optimization via Yoast and analytics integration through Google Analytics and HubSpot. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and social media presence suggest a legitimate business. Privacy and terms of service policies are not explicitly found, indicating room for compliance improvement. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

T

TruTac

trutac.co.uk

61

TruTac is a UK-based business specializing in fleet compliance and tachograph management solutions, offering a suite of software and hardware products designed to simplify regulatory compliance for transport companies. The company operates under the parent organization Microlise Limited and holds several certifications including Cyber Essentials and the Queen's Award, reinforcing its market credibility. Their product portfolio includes digital tachograph analysis, driver compliance verification, real-time fleet management, and mobile vehicle inspection tools, targeting fleet operators and compliance officers. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product information. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for data insights, while implementing GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data was not retrievable due to querying the subdomain rather than the domain, but the website's trust signals and business information support legitimacy. Overall, TruTac presents a mature digital presence with solid business and security practices.

R

Radiant Barrier

radiantbarrier.com

56

Radiant Barrier operates a specialized e-commerce website focused on providing high-performance radiant barrier insulation products aimed at improving home energy efficiency. The company appears to be a small-sized entity with a long-established domain dating back to 1997, indicating a mature presence in the energy insulation market. The website is professionally designed using WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Microsoft Clarity. However, the site lacks explicit privacy and cookie policies, which impacts its privacy compliance posture. Security-wise, HTTPS is properly implemented, and domain registration protections are in place, but DNSSEC is not enabled and security headers are missing, representing areas for improvement. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

B

Bronte Carpets

brontecarpets.co.uk

52

Bronte Carpets is a well-established bespoke carpet manufacturer and retailer based in West Yorkshire, UK, with a history dating back to 1982. The company specializes in custom made luxury carpets and rugs, emphasizing quality, natural wool materials, and personalized services such as premium dye matching and made-to-shape carpets. Their market position is that of a niche, quality-focused manufacturer serving homeowners and interior designers seeking bespoke flooring solutions. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins like Yoast SEO and Cookie Law Info for SEO and privacy compliance. The site demonstrates good mobile optimization and a moderate performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, the security posture is good but could be enhanced by adding explicit security policies and incident response information. Privacy compliance is strong with clear privacy and cookie policies. The website content is professional, relevant, and safe for general audiences. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include implementing additional HTTP security headers, publishing a security policy or incident response plan, and considering a security.txt file for vulnerability disclosures to further enhance trust and security maturity.

H

Hindmarch & Co Ltd

hindmarch.org

62

Hindmarch & Co Ltd is a well-established family-owned automotive dealership operating since 1972, specializing in used car sales and servicing with a strong focus on Peugeot vehicles. The company operates in Lincolnshire with locations in Grantham and Stamford, offering a comprehensive range of services including vehicle sales, servicing, MOT, finance brokering, and petrol forecourt operations. Their market position is that of a trusted local dealer with over 50 years of experience and a reputation for quality and customer care. Technically, the website is built on a custom automotive dealer CMS platform by Autoweb Design, utilizing modern web technologies such as jQuery, Google Tag Manager, and responsive design frameworks. The site demonstrates good mobile optimization, clear navigation, and a professional design. Performance is moderate with standard use of asynchronous scripts and lazy loading for images. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, along with a cookie consent mechanism that aligns with GDPR requirements. However, some additional security headers are missing, and there is no visible security.txt or incident response information published. The absence of WHOIS data limits domain registration trust verification, but the website content and business disclosures strongly indicate legitimacy. Overall, the website presents a professional and trustworthy front for the business, with good compliance and security practices, though improvements in security headers and transparency around incident response would enhance their posture. The domain WHOIS data gap is a notable concern but likely due to technical issues rather than malicious intent.

HugeDomains operates as a reputable online marketplace specializing in premium domain name sales. The company offers flexible purchasing options including full payment and payment plans, supported by a 30-day money back guarantee and quick domain delivery. The website is professionally designed, mobile optimized, and provides clear navigation and trust signals such as customer testimonials and secure payment options. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google reCAPTCHA Enterprise, and Cloudflare bot management, ensuring a secure and user-friendly experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be improved. WHOIS data is not publicly available for the domain listed, consistent with privacy protection practices common in domain reselling. Overall, the site demonstrates a mature digital presence with good compliance and security practices.

D

Darke Group Ltd

darkegroup.co.uk

42

Darke Group Ltd is a UK-based company specializing in bespoke steel fabrications and complex architectural metalwork, serving architects, designers, contractors, and developers. The company offers a comprehensive range of services including structural steelwork, architectural metalwork, steel boats, staircases, balconies, handrails, and balustrades. Established in 2009, Darke Group holds a strong market position as a leading UK provider in its sector, supported by accreditations and client testimonials. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using common plugins such as Slider Revolution and Contact Form 7. It employs modern JavaScript libraries like jQuery and integrates Google Analytics and Tag Manager for user tracking. Hosting is provided by Fasthosts Internet Ltd, a reputable registrar. The site demonstrates moderate performance and good mobile optimization but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and an incident response contact. There is no cookie consent mechanism despite having a cookie policy, which may affect GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is adequate but could be improved with additional headers and formal incident response procedures. The overall risk assessment indicates a trustworthy and professional business website with minor compliance and security gaps. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, establishing an incident response contact, and maintaining up-to-date software to enhance security and compliance posture.

H

hargreaves-cycles

hargreaves-cycles.co.uk

47

Hargreaves Cycles is a well-established UK-based retail business specializing in bicycles and cycling-related products and services. The company offers a broad range of bicycles including mountain, road, electric, BMX, and children's bikes, along with customer services such as a cycle workshop, financing options, and participation in the Cycle To Work Scheme. The website reflects a medium-sized retail operation with a consistent brand presence and a focus on quality bicycle brands. Technically, the website is built on WordPress with WooCommerce, utilizing modern JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly with structured data implemented. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. Overall, the website is professional and trustworthy, but could enhance privacy compliance and security transparency.

S

Scottish Rowing

scottish-rowing.org.uk

47

Scottish Rowing serves as the official governing body for rowing in Scotland, overseeing the sport's governance, development, and promotion across the country. The organization supports approximately 28 affiliated clubs and a membership base of around 2,500 individuals. Their services include organizing competitions, supporting coaching and volunteer efforts, and providing resources related to safety and wellbeing. The website reflects a well-structured, community-focused non-profit entity with a clear mission to develop rowing in Scotland. Technically, the website is built on the Joomla CMS platform, utilizing common web technologies such as jQuery and FontAwesome. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. However, some improvements could be made in accessibility and the implementation of security headers. The site uses HTTPS with a valid SSL configuration, ensuring secure communications. From a security perspective, the website shows a solid baseline with HTTPS and CSRF token usage, but lacks advanced security headers and a cookie consent mechanism, which are important for compliance and protection. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the queried www subdomain is due to an invalid query rather than a security concern, as the main domain likely exists and is properly registered. Overall, Scottish Rowing's website is trustworthy and professional, serving its community effectively. Strategic recommendations include enhancing privacy compliance with cookie consent, adding security headers, publishing incident response and security policies, and clarifying WHOIS information by querying the correct domain. These steps will strengthen the site's security posture and regulatory compliance while maintaining user trust.

M

Match Lighting Studio

matchlightingstudio.com

44

Match Lighting Studio is a specialized architectural lighting design firm operating primarily in the UK and Spain. Founded in 2015, the company offers creative lighting solutions for residential, retail, commercial, and public realm projects. Their market position is that of a niche service provider with a focused client base including architects and property developers. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with Bootstrap and jQuery, hosted likely via Kualo, and employs HTTPS with Google Analytics for tracking. However, it lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with no DNSSEC and missing security headers, though HTTPS is enforced. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures.

T

Tigerlily Training Ltd

tigerlilytraining.co.uk

48

Tigerlily Training Ltd is a well-established UK-based provider of specialist first aid training courses for individuals and businesses. Founded in 2010, the company offers a wide range of accredited courses including First Aid at Work, Paediatric First Aid, Mental Health First Aid, Fire Marshal training, and Food Hygiene. Their business model focuses on delivering training both at their venues across the UK and in-house at client workplaces, targeting a broad audience from individuals to corporate clients. The website demonstrates a strong market position supported by extensive customer reviews and active social media engagement. Technically, the website employs a modern JavaScript stack including jQuery, Knockout.js, and various UI libraries for a responsive and interactive user experience. It integrates analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook SDK, and LiveChat, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility practices, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS with a good SSL configuration and includes several security best practices such as secure forms and no exposed sensitive data. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Contact information is transparent and professional, enhancing business credibility. Overall, Tigerlily Training Ltd presents a trustworthy, professional, and secure online presence with a comprehensive offering in the education sector. The website quality, business credibility, and security posture are strong, with minor recommendations for security header enhancements and ongoing third-party script audits to maintain security integrity.

D

Dunbia

dunbia.com

59

Dunbia is a well-established family-owned food manufacturing company specializing in meat products such as beef, lamb, burgers, and further processed meats. Operating primarily in the UK and Ireland, Dunbia serves a broad market including retailers, food service, and agriculture sectors. The company is a division of Dawn Meats, reflecting a strong market position and extensive operational scale. Their website demonstrates a professional digital presence with clear branding, comprehensive product information, and active social media engagement. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools, showing a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers could enhance protection. Overall, Dunbia presents a credible, trustworthy business with a solid online presence and compliance with privacy regulations.

I

ICR Scotland

icrscotland.co.uk

56

ICR Scotland is a specialist provider of EPoS solutions focused on the retail and hospitality sectors in the United Kingdom. Founded in 2016, the company offers a range of software and hardware products, including ICRTouch EPoS systems, remote management tools, loyalty software, and wireless ordering solutions. Their market position is strengthened by authorized partnerships and a clear focus on sector-specific needs. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on WordPress using the Elementor page builder and the GeneratePress theme, hosted by GoDaddy.com, LLC. It employs modern web technologies such as jQuery and Google reCAPTCHA v3 for form security. The site is mobile optimized and performs moderately well, though some accessibility features could be improved. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks important security headers which could enhance protection against common web attacks. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which is a notable gap given GDPR requirements. Contact information is available primarily through forms, with no direct emails or phone numbers published. Overall, the website presents a low risk profile with a legitimate domain registration consistent with the business history. Strategic improvements in privacy compliance and security headers would strengthen the security posture and regulatory adherence, enhancing trust and user confidence.

C

Coleman Building Company LLP

colemanbuilding.co.uk

45

Coleman Building Company LLP is a well-established high-end building contractor based in Hampshire, UK, with a history dating back to 1977. The company specializes in bespoke new builds, extensions, and refurbishment projects, targeting clients seeking luxury residential construction services. Their website reflects a professional and consistent brand image, showcasing key team members and client testimonials that reinforce their market position. Technically, the website is built on WordPress using Elementor, with modern libraries such as jQuery and Swiper.js. Hosting is provided by GoDaddy, and the site uses HTTPS with a good SSL configuration. However, there is room for improvement in security headers and privacy compliance, as no cookie consent mechanism or security policies are published. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks some best practices such as security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the site is secure but could enhance its posture by adopting additional security controls and privacy compliance features. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and maintaining regular updates to plugins and themes to mitigate vulnerabilities.

S

Scottish Business Centre

scottishbusinesscentre.com

43

Scottish Business Centre is a specialized business transfer agency operating in Scotland, focusing on the sale and valuation of hotels, guest houses, and pubs. The company targets business buyers and sellers within the hospitality and real estate sectors, offering valuation and advisory services to facilitate business transfers. The website reflects a professional and consistent brand image, supporting the company's market position as an experienced niche player since 2017. Technically, the site is built on WordPress using Elementor and Yoast SEO, with integrations for Google Analytics and Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities, though some security headers are missing and should be added to enhance protection. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or recent domain registration, which slightly impacts trustworthiness. Overall, the site is well-designed, user-friendly, and compliant with privacy norms, but domain legitimacy verification is recommended.

M

Morris Marshall & Poole

morrismarshall.co.uk

61

Morris Marshall & Poole is a regional estate agency specializing in residential and commercial property sales and lettings across Mid Wales and Shropshire. The company offers a broad range of services including RICS valuations, property auctions, agricultural property services, and planning advice. Their market position is strengthened by membership in The Guild of Property Professionals and multiple office locations, providing extensive regional coverage and national exposure. The website reflects a professional and trustworthy business with clear service offerings and customer engagement features such as reviews and valuation requests. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Maps API, and Google reCAPTCHA for security. Analytics and marketing tools like Google Tag Manager and Google Analytics are integrated with appropriate cookie consent mechanisms, indicating good privacy compliance. Security posture is solid with HTTPS and form protections, though some security headers are missing and no explicit incident response contacts are provided. The WHOIS data is unavailable due to a domain registration error, which is a concern for domain legitimacy but does not detract from the professional presentation and business credibility of the website. Overall, the site is well-structured, accessible, and secure, serving its target audience effectively.

S

Scollen & Wright Funeral Service Ltd

scollenandwright.co.uk

57

Scollen & Wright Funeral Service Ltd is a small, family-owned funeral service provider based in Sunderland, UK, with over 30 years of local business history. The company offers funeral arrangement services, funeral plans, and memorial items, targeting local families in need of compassionate funeral care. Their website reflects a professional and consistent brand image, emphasizing their independent and family-run nature. The business positions itself as a trusted local service with clear contact channels and a focus on personalized support during difficult times. Technically, the website is built on WordPress using the Divi theme and several popular plugins for SEO, performance, and security, including Google reCAPTCHA and cookie consent mechanisms. The site is mobile-optimized and provides good user experience with clear navigation and relevant content. Security posture is solid with HTTPS and anti-spam measures, though it lacks some advanced security headers. Privacy compliance is addressed with a GDPR cookie banner and a privacy policy page. However, WHOIS data is unavailable due to domain registration errors, which slightly impacts trust verification. Overall, the website is professional, secure, and compliant, serving its niche effectively.

R

Roughton Limited

roughton.com

46

Roughton Limited is an established engineering firm founded in 1999, specializing in sustainable infrastructure solutions across sectors such as roads & railways, renewable energy, water & wastewater, and ports & harbours. The company targets government and infrastructure clients, emphasizing innovative and sustainable engineering practices. The website is professionally designed using WordPress and Elementor, providing clear navigation and detailed expertise sections, though contact information is not explicitly visible in the provided content. Technically, the site uses modern web technologies and is mobile optimized, but lacks some advanced security headers and GDPR compliance mechanisms such as cookie consent. The domain registration is consistent with the business profile, indicating legitimacy and trustworthiness.

T

The Denture Studio LTD

thedenturestudioltd.co.uk

48

The Denture Studio LTD is a specialized denture clinic based in Lincoln, UK, offering bespoke denture services including acrylic, cobalt chrome, flexible dentures, and sports gumshields. The business emphasizes professional, friendly service with over 25 years of experience among its team members. The website reflects a local healthcare service provider with a clear focus on patient convenience, including free parking and home visits. Technically, the site is built on WordPress with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and some security plugins present, but lacks explicit security headers and CAPTCHA on forms. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security measures.