Security Directory

F

FareShare

fareshare.org.uk

35

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

W

WellMe - Official Website

wellme.com

52

The website 'WellMe' appears to be a basic online presence with limited publicly available business information. The site uses common marketing and tracking technologies such as Google Tag Manager and Facebook Pixel, indicating some level of digital marketing maturity. However, the absence of WHOIS registration data and lack of contact or policy information raises concerns about transparency and legitimacy. The technical infrastructure includes modern CSS frameworks like UIKIT and Tailwind, but security configurations such as HTTPS enforcement and security headers are not evident from the provided data. Overall, the security posture is weak, and privacy compliance is minimal or absent. Strategic recommendations include establishing clear privacy and cookie policies, improving security headers and SSL configurations, and providing verifiable contact information to enhance trust and compliance.

T

Tiffany & Co

tiffany.com

57

Shop Tiffany & Co. fine jewelry creations of timeless beauty and superlative craftsmanship that will be treasured always.

B

Blog Town Hub

blogtownhub.com

44

Blog Town Hub operates as a niche content platform specializing in guest posting and providing high-quality dofollow backlinks across multiple niches. The website targets content creators, marketers, and SEO professionals seeking to enhance their online presence through guest articles. The business model centers on content publishing and backlink services, positioning itself as a specialized media hub with a small but focused market presence. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and integrations such as Google Analytics and Tag Manager. Hosting is provided by FastCloudServer, and the site employs HTTPS with a good SSL configuration. Security posture is moderate, with HTTPS and reCAPTCHA implemented, but lacks DNSSEC and comprehensive security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is functional, professionally designed, and safe for general audiences but requires improvements in privacy and security policies to enhance trust and compliance.

W

WorkingDay

workingday.lv

40

WorkingDay is the largest recruitment agency in Latvia, specializing in recruitment, headhunting, executive search, and staffing services. The company targets both job seekers and employers within Latvia, offering a comprehensive suite of talent acquisition solutions. Their market position as a leading recruitment firm is supported by a professional website with clear service offerings and a strong online presence including social media channels. Technically, the website is built on WordPress with modern optimizations such as WP Rocket and Google Tag Manager, ensuring moderate performance and good mobile responsiveness. Security posture is solid with HTTPS and security headers implemented, though there is room for improvement in CSP enforcement and incident response transparency. Privacy compliance is well addressed with GDPR-aligned cookie and privacy policies and consent mechanisms. Overall, the site reflects a trustworthy and professional business with a good balance of content quality, technical implementation, and compliance.

Colliers is a leading global real estate services and investment management company, offering a comprehensive range of services including brokerage, property management, and consulting. The website reflects a strong market position with professional branding and extensive regional presence, targeting real estate investors, occupiers, and owners. Technically, the site employs modern technologies such as Google Tag Manager, OneTrust for cookie consent, and Cloudflare for security, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and bot protection mechanisms, although explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates high professionalism and trustworthiness, with minor gaps in publicly available security documentation.

T

Toshiba Tec UK Imaging Systems

toshibatec.co.uk

63

Toshiba Tec UK Imaging Systems operates a professional website offering digital workspace solutions, managed print services, barcode printing, and IT services primarily targeting business customers in the UK. The company positions itself as a large, established technology provider with a comprehensive portfolio tailored to various industry sectors including manufacturing, retail, healthcare, and finance. The website demonstrates a mature digital presence with modern technologies such as jQuery, Bootstrap, HubSpot, and Google Analytics integrated for marketing and analytics purposes. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and public security policies are absent. The WHOIS data for the domain is unavailable due to a domain naming rules error, which is unusual and reduces trust from a domain registration perspective. Overall, the site is professional, well-branded, and trustworthy from a content and business perspective but could improve transparency in security and incident response policies.

Diamond Electronics Ltd is a well-established UK-based company specializing in electronic component kitting, PCB assembly, box build services, and component distribution. With a domain age dating back to 1998 and a consistent online presence, the company targets electronic OEMs across the UK and Europe, positioning itself as a dependable partner in supply chain management and manufacturing services. Their website reflects a professional and business-focused approach, offering clear information about their services and contact options. Technically, the site is built on WordPress with modern integrations such as Gravity Forms and Google Analytics, ensuring a functional and user-friendly experience. Security measures include HTTPS enforcement and CAPTCHA on forms, though some security headers could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and a consent mechanism. Overall, the website demonstrates a mature digital presence aligned with the company's business objectives.

N

Norville Gloucester

norville-opticians.co.uk

59

Norville Gloucester is a well-established local optician business serving the Gloucester community with quality eyecare services for over 100 years. The website presents a professional image with clear business information, including physical address and phone contact, and leverages the Wix platform for its digital presence. The site integrates common marketing and analytics tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced, but lacks advanced security headers and formal privacy and cookie policies, which are important for compliance and trust. The WHOIS data for the domain is unavailable due to a registration error, which introduces some uncertainty about domain legitimacy, though the website content and business information appear consistent and trustworthy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

K

KS Cleaning Contractors Ltd

kscleaning.com

48

KS Cleaning Contractors Ltd is a well-established commercial cleaning service provider based in Somerset, UK, with over 45 years of experience since its founding in 1980. The company offers a broad range of cleaning services including office, school, healthcare, retail, hospitality, and builders cleans. Their business model emphasizes directly employed, DBS-checked teams and a proprietary client portal that provides audit trails with photo evidence and GPS check-ins, enhancing transparency and client trust. The website is professionally designed with clear navigation and strong local market positioning, targeting property managers, facilities managers, and developers in Somerset and the wider South West region. Technically, the website employs modern web technologies including Google Tag Manager for analytics and tracking, uses SVG graphics for branding, and is mobile-optimized with fast performance. However, no CMS or hosting provider details were detected. The site lacks visible security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS registration data for the domain is a notable anomaly that affects trustworthiness, although the website content and business information appear consistent and professional. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. The client portal's audit features indicate a mature approach to operational security and accountability. However, the lack of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for enhancement in security posture and compliance. Overall, the website scores well in content quality and business credibility but is moderately impacted by privacy compliance and WHOIS inconsistencies. Strategically, KS Cleaning should address the WHOIS registration anomaly, implement standard security headers, introduce cookie consent to comply with GDPR, and publish…

C

CD SURVEYS LTD

cdsurveys.com

56

CD SURVEYS LTD is a professional land surveying and site engineering service provider established in 2001 in the United Kingdom. The company offers a comprehensive range of surveying services including land surveying, site engineering, measured building surveying, 3D laser scanning, and drone survey systems. Their website reflects a well-structured and professional digital presence targeting businesses and professionals in real estate and transportation sectors. The company maintains active social media profiles on Facebook, Twitter (X), LinkedIn, and Instagram, enhancing their market reach and customer engagement. Technically, the website is built on WordPress using Elementor and integrates modern SEO tools like Rank Math. It employs Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is hosted with DNS managed by Cloudflare, ensuring reliable DNS resolution. Performance and mobile optimization are good, though accessibility features are basic. The website uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced security. From a security perspective, the site has no visible security policy, incident response information, or vulnerability disclosure mechanisms. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly presented, but no forms were detected in the analyzed content. The domain WHOIS data is consistent with the business claims, showing a long-standing registration since 2001, which supports the legitimacy of the company. Overall, CD SURVEYS LTD presents a trustworthy and professional online presence with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen their security posture and regulatory compliance, thereby increasing customer trust and reducing risk.

S

Sidcot School

sidcot.org.uk

64

Sidcot School is a well-established independent co-educational day and boarding school located in Somerset, UK, serving students aged 3 to 18. The school emphasizes a Quaker philosophy, fostering values such as curiosity, equality, empathy, and sustainability. It offers a broad academic curriculum including GCSEs, A Levels, IB, and BTEC, alongside a rich extracurricular program and boarding facilities. The website reflects a strong market position with multiple national awards and a diverse international community.

A

Andrews Property Group

andrewsonline.co.uk

70

Andrews Property Group is a well-established real estate agency operating across the South of England, with a history spanning 80 years and ownership by the Andrews Charitable Trust. The company offers a comprehensive suite of property-related services including sales, lettings, mortgages, auctions, and property management, targeting buyers, sellers, renters, and landlords in the UK market. Their website reflects a professional and consistent brand image with clear navigation and detailed service information. Technically, the site is built on Starberry CMS and leverages modern web technologies such as RequireJS, Bootstrap, and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and Microsoft Clarity. Hosting appears to be on Amazon Web Services with Elastic Load Balancing and Cloudflare protection. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data query failed due to an invalid domain format including 'www', but the site is accessible and legitimate. Overall, the website demonstrates a mature digital presence with strong business credibility and privacy compliance.

L

Lee Longlands

leelonglands.co.uk

63

Lee Longlands is a well-established UK-based furniture retailer with over 120 years of history, specializing in sofas, dining, bedroom furniture, and garden furnishings. The company operates both online and through multiple physical showrooms across the UK, offering services such as interest free credit, white glove delivery, and interior design consultation. Their market position is supported by strong trust indicators including thousands of positive Trustpilot reviews and a consistent brand presence. Technically, the website employs a modern tech stack including jQuery, Owl Carousel, Google Fonts, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Trustpilot widgets. The site is mobile optimized with good SEO practices and a moderate performance profile. However, some security best practices like security headers are missing, though HTTPS is properly enforced and CSRF tokens are implemented. From a security perspective, the site demonstrates a reasonable posture with encrypted communications and privacy compliance evidenced by clear privacy and cookie policies with consent mechanisms. There is no visible incident response or vulnerability disclosure information, which could be improved. The WHOIS data query failed due to an invalid domain format, but this appears to be a technical querying error rather than a legitimacy concern. Overall, Lee Longlands presents a trustworthy and professional online presence with solid business credibility and privacy compliance. Strategic improvements in security headers and incident response transparency would enhance their security posture further.

W

Whitbread PLC

whitbread.co.uk

81

Whitbread PLC is a leading hospitality company primarily operating in the UK and Germany, owning the Premier Inn brand, the largest hotel chain in the UK. The company also operates several branded restaurants and hospitality services. The website reflects a mature digital presence with comprehensive corporate, sustainability, and investor information, targeting a broad audience including investors, customers, and employees. Technically, the site is built on WordPress with modern JavaScript libraries and analytics tools, demonstrating good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR consent. Overall, the website projects high professionalism and trustworthiness, supporting Whitbread's market position as a major hospitality player.

Carlsberg is a globally recognized beer brand with a strong presence in Hong Kong, as evidenced by the localized website content and market-specific pages. The company focuses on brewing quality beer and promoting sustainability and responsible consumption. The website demonstrates a mature digital infrastructure with modern technologies, responsive design, and compliance with privacy regulations including GDPR. Security measures include HTTPS, an age verification gate, and cookie consent management, though some advanced security headers and policies are not explicitly detected. The absence of WHOIS data is unusual but likely due to privacy protection or query limitations. Overall, the website is professional, trustworthy, and well-aligned with the brand's global reputation.

H

Horne Engineering

horne.co.uk

70

Horne Engineering is a UK-based manufacturer specializing in thermostatic showers, taps, and valves, with a history dating back to 1909. The company focuses on delivering safe hot water solutions primarily for domestic and commercial applications, targeting engineers, plumbers, and building managers. Their product range includes thermostatic taps, showers, mixing valves, and related technical support services. The website reflects a mature digital presence with professional design, clear navigation, and relevant content tailored to their industry niche. Technically, the site employs common web technologies such as jQuery, Google Tag Manager, and Microsoft Application Insights for analytics and monitoring. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected in the HTML source. The WHOIS lookup for the subdomain www.horne.co.uk failed due to domain naming rules, indicating the query was likely made on a subdomain rather than the registered domain horne.co.uk, limiting domain registration transparency. Overall, the website is trustworthy and professional, with moderate technical sophistication and compliance with privacy regulations.

Just Keyrings is a UK-based e-commerce business specializing in custom printed promotional keyrings, targeting businesses seeking bulk orders with free artwork and fast delivery. The company positions itself as an experienced specialist with over 15 years in the industry. The website is built on Magento with the modern Hyvä theme and uses Alpine.js for frontend interactivity, indicating a moderate level of digital maturity. Cookie consent is managed via Cookiebot, and Google Tag Manager is used for analytics, reflecting attention to privacy and marketing needs. Security posture is good with HTTPS enforced, CSRF protections, and secure cookie handling, though explicit security policies and incident response information are absent. Overall, the site is professional and trustworthy but lacks some transparency in domain registration and formal security documentation.

C

Chartwell Group Limited

chartwell-group.com

60

Chartwell Group Limited is a UK-based luxury renovation, construction, and development company with over two decades of experience, serving an international clientele. The company positions itself as a premium service provider specializing in designing dream homes and high-end property projects. Their website reflects a professional digital presence built on WordPress, enhanced with SEO tools and social media integration, targeting affluent homeowners and property developers. Technically, the site uses modern web technologies including Google Tag Manager and Font Awesome, hosted likely via GoDaddy infrastructure. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the website employs HTTPS but lacks advanced DNS security measures like DNSSEC and does not implement security headers, which could expose it to certain web-based attacks. The absence of privacy and cookie policies indicates compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure mechanisms are present, limiting transparency in security management. The presence of a suspicious external domain in scripts raises minor concerns. Overall, the security posture is moderate but requires improvements to meet best practices. The business credibility is supported by consistent WHOIS data, domain age, and active social media presence. However, the lack of direct contact emails or phone numbers on the homepage reduces immediate trust signals. The website content is relevant and professionally presented, with no adult or questionable content detected, making it safe for general audiences. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear security contact information to enhance trust and compliance.

L

Litho Supplies Ltd.

litho.co.uk

60

Litho Supplies Ltd. is a UK-based market-leading distributor specializing in print consumables, equipment, and services for the printing industry. As part of the Agfa group, it operates multiple distribution centers across the UK, offering next day delivery and a broad product range including litho, offset, digital presses, flexographic, and wide format printing supplies. The website reflects a professional B2B business model targeting printing industry professionals and companies. Technically, the website uses a legacy jQuery version alongside Bootstrap and Google Tag Manager, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and a VeriSign SSL certificate but lacks modern security headers and uses outdated libraries, which could pose risks. Privacy and cookie policies are present but basic, with no explicit GDPR compliance statements or incident response information. Overall, the website is trustworthy and professional but would benefit from technical and security improvements to enhance compliance and resilience.

D

DiaSorin

luminexcorp.com

65

DiaSorin is a global healthcare diagnostics company specializing in innovative diagnostic technologies, including the Luminex xMAP® Technology solutions showcased on this subdomain. The company targets healthcare professionals, researchers, and diagnostic laboratories with a broad portfolio of immunodiagnostic and molecular diagnostic products and services. The website reflects a mature digital presence with comprehensive product information, training, and support resources. Technically, the site is built on Drupal 10 with modern front-end libraries and is optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policy and incident response information are not publicly visible. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting DiaSorin's position as a reputable player in the healthcare diagnostics industry.

P

PayPal

paypal.com

80

PayPal is a leading global online payment platform offering digital wallet services, payment processing, and flexible payment options including buy now pay later and installment plans. The website targets both private consumers and business customers in Germany, providing localized content and services. The site demonstrates strong branding consistency and professional content quality, reflecting PayPal's market position as a trusted financial technology provider. Technically, the site uses modern JavaScript frameworks, proprietary PayPal components, and integrates analytics and monitoring tools such as Datadog and Google Analytics. Hosting appears to be via Fastly edge servers, ensuring fast and reliable performance. Security posture is strong with HTTPS enforced, anti-clickjacking measures, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR adherence. WHOIS data is unavailable due to registry restrictions, but this does not detract from the site's legitimacy given PayPal's global brand recognition. Overall, the website is secure, compliant, and professionally maintained, supporting PayPal's business objectives effectively.

I

Ionis Pharmaceuticals, Inc

ionispharma.com

71

Ionis Pharmaceuticals, Inc is a well-established biopharmaceutical company specializing in RNA- and DNA-targeted medicines aimed at treating serious diseases. The company holds a strong market position with a comprehensive pipeline and a focus on innovation, patient advocacy, and corporate responsibility. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting patients, medical professionals, investors, and healthcare stakeholders. Technically, the site is built on Drupal 11, uses Cloudflare DNS, and integrates Google Tag Manager for analytics, indicating a modern infrastructure with moderate performance and excellent mobile optimization. Security posture is good with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is moderate due to the presence of cookie consent but absence of explicit privacy and terms of service pages. Overall, the domain registration data supports the legitimacy and trustworthiness of the business.

Power Integrations operates a professional and comprehensive website focused on power conversion technologies including AC-DC conversion, LED drivers, gate drivers, motor drivers, and automotive solutions. The company targets engineers and businesses in the electronics industry, providing extensive product information, design support, and technical resources. The website is built on Drupal 10 and integrates modern marketing and analytics tools such as Google Analytics, Marketo, and Hotjar, with a strong emphasis on privacy compliance through OneTrust cookie consent mechanisms. Security posture is solid with HTTPS enforcement and security headers, though explicit incident response and vulnerability disclosure policies are not publicly available. The absence of WHOIS registration data is a notable gap but does not detract significantly from the overall legitimacy given the professional presentation and comprehensive content. Strategic recommendations include publishing incident response and vulnerability disclosure information and adding a security.txt file to enhance transparency and trust.

S

Sonoco Products Company

sonoco.com

73

Sonoco Products Company operates a professional and comprehensive website focused on packaging solutions across multiple industries. The company positions itself as a global leader in manufacturing metal, paper, and specialty packaging products, serving business customers primarily in North America and globally. The website demonstrates a mature digital presence with modern technologies such as Drupal 10, Google Tag Manager, and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and provides clear navigation and rich content about products, markets, sustainability, and corporate information. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain www.sonoco.com is a notable anomaly, though the website content and branding strongly indicate legitimacy. Overall, the site reflects a large enterprise with a strong market position in manufacturing and packaging solutions.

T

Thermon

thermon.com

69

Thermon is a well-established industrial heating solutions provider, founded in 1994, with a strong market position as a world leader in industrial process heating. The company serves industrial sectors requiring flow assurance, temperature maintenance, freeze protection, and environmental monitoring. Their business model is primarily B2B, targeting large industrial clients in energy, transportation, and manufacturing sectors. The website reflects a mature digital presence with comprehensive content, consistent branding, and multiple language support.

A

Agile

agilesolutions.co.uk

70

Agile is a UK-based consulting firm specializing in data, cloud, and AI services aimed at driving business transformation. Established in 2006, Agile has built a strong market position with a medium-sized business model focused on delivering data strategy, governance, integration, and monetization services. The company partners with leading technology providers such as Microsoft, AWS, Snowflake, and Informatica, serving a global client base including notable organizations like BAE, BBC, and Natwest. Technically, the website is built on WordPress using modern frameworks like Elementor and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, Agile presents a professional and trustworthy online presence with opportunities to enhance security and privacy transparency.

S

Storewithus Self Storage Bridgend

storewithus.co.uk

63

Storewithus Self Storage Bridgend operates a professional self storage and flexible office space business serving Bridgend and surrounding areas in the UK. The company offers indoor and outdoor storage units, container storage, caravan and motorhome storage, along with free van hire and insurance. Their market position is that of the largest and best value self storage provider in Bridgend, supported by customer testimonials and CaSSOA Platinum certification. The website is well designed with clear navigation and good content quality, targeting domestic and business customers seeking storage solutions. Technically, the site uses modern web technologies including service workers and integrates Google Analytics and Trustpilot for analytics and reputation management. Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and policies are missing. Privacy compliance is basic with a cookie notification but no clear privacy or terms pages. WHOIS data is unavailable due to domain naming errors, which lowers trustworthiness from a domain registration perspective. Overall, the site is professional and trustworthy in content but would benefit from improved compliance and security disclosures.

Belazu Ingredient Company operates a professional e-commerce platform specializing in premium Mediterranean and Middle Eastern food ingredients targeted at chefs and home cooks. The company has a well-established online presence with a domain registered since 2000, indicating a mature business. Their website offers a broad product range, free UK shipping over £50, and a dedicated trade site for business customers, positioning them as a niche premium supplier in the food retail sector. Technically, the website is built on the BigCommerce platform using the Stencil framework, integrating modern analytics and marketing tools such as Google Tag Manager, TikTok Pixel, Facebook Pixel, Hotjar, and Klaviyo. The site demonstrates good mobile optimization, clear navigation, and a professional design, supporting a positive user experience and effective e-commerce functionality. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. However, the absence of a published security policy or incident response contact is noted. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in DNS security and HTTP security headers would enhance the security posture further. The site is suitable for general audiences with no adult or questionable content detected.

T

The SOFII Foundation

sofii.org

61

The SOFII Foundation operates a comprehensive online platform dedicated to fundraising innovation and inspiration, targeting fundraising professionals globally. Established in 2005 and based in the UK, SOFII provides extensive resources including case studies, articles, workshops, and multilingual content to support and educate fundraisers. The organization maintains strong partnerships with reputable entities such as Blackbaud and CIOF, enhancing its credibility and reach. Technically, the website is built on Craft CMS and leverages modern web technologies including jQuery, Slick Carousel, Google Tag Manager, and MailChimp for marketing and analytics. Hosting is provided by Media Temple, and the site demonstrates good mobile optimization and SEO practices. While performance is moderate, the site is well-structured and accessible with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized transfers or updates. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating potential areas for enhancement. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. No critical vulnerabilities or suspicious content were identified. Overall, SOFII presents a high-quality, trustworthy, and professional online presence with a strong focus on supporting the fundraising community. Strategic improvements in security hardening and accessibility could further strengthen its position and user trust.

A

Armour Environmental Services Limited

armourpest.co.uk

42

Armourpest is a UK-based pest control service provider specializing in domestic and commercial pest management across Essex and London. The company is well-established since 2008 and holds memberships in recognized industry bodies such as the NPTA and BPCA, which supports its market credibility. Their key services include heat treatment, bird proofing, and general pest control, targeting both residential and commercial clients. The website reflects a professional business with clear contact information and a consistent brand presence. Technically, the website uses modern web technologies including Google Tag Manager, Google Analytics, and a Django-based CMS hosted on DigitalOcean. The site is mobile-optimized and features interactive elements like slick carousels and forms protected by CSRF tokens. However, some SEO and accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and implements CSRF protection on forms, but lacks visible security headers and does not provide a privacy or cookie policy, which are important for GDPR compliance. There is no incident response or vulnerability disclosure information available, which could be improved to enhance trust and security posture. Overall, Armourpest presents a trustworthy and professional online presence with room for improvement in privacy compliance and security best practices. Addressing these gaps would strengthen their digital maturity and reduce potential risks.

T

Teradata

teradata.com

77

Teradata is a leading enterprise technology company specializing in AI-driven autonomous knowledge platforms that enable large organizations to connect, analyze, and operationalize data at scale. Their platform supports multi-modal data integration, AI operationalization, and autonomous decision-making, positioning them as a key player in the AI and data analytics market. The website reflects a mature digital presence with comprehensive content, multi-language support, and strong branding consistent with an enterprise-grade technology provider. Technically, the site leverages modern frameworks such as Vue.js, Kentico CMS, and cloud-based monitoring tools like Azure Application Insights, indicating a robust and scalable infrastructure. Security posture is strong with HTTPS enforcement and consent management, though some advanced security headers and public vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility, though the lack of WHOIS data transparency is a minor concern. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure policies, and providing clearer incident response contacts to further strengthen trust and compliance.

R

Rock Management Services

rms.ltd

69

Rock Management Services Ltd. is a UK-based company offering comprehensive business support services to organizations aiming to remain lean and focus on their core operations. Their service portfolio includes administrative support across HR, IT, finance, compliance, and consulting, positioning them as a trusted outsourcing partner with a proven track record and senior experienced personnel. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, Slider Revolution, and Google Analytics integrations, indicating a mature digital infrastructure. The site is mobile-optimized and employs cookie consent mechanisms, demonstrating awareness of privacy regulations. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and includes cookie consent banners but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable due to a domain naming error, which is unusual but does not appear to affect the legitimacy of the website. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance.

C

CCL Solutions Group

evidencetalks.com

71

CCL Solutions Group is a UK-based leader in digital forensics, cyber security, and investigative services, serving law enforcement, corporate, legal, and regulatory sectors worldwide. The company offers a broad range of accredited services, proprietary forensic tools, and consultancy and training solutions. Their market position is strong, supported by multiple ISO certifications and industry accreditations such as CREST and Cyber Essentials. The website reflects a professional and comprehensive digital presence with clear navigation, detailed service descriptions, and strong trust indicators including client logos and certifications. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries like jQuery and Google Tag Manager for analytics and marketing. Cookie consent is managed via CookieYes with a full consent mechanism, and security is enhanced by Cloudflare Turnstile captcha on forms. The site is mobile-optimized, fast-loading, and accessible with good SEO practices. However, explicit security headers are not detected, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. Security posture is solid with HTTPS enforced, no exposed sensitive data, and adherence to multiple security frameworks. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. The absence of an incident response contact or security.txt file is a minor gap. Overall, the site demonstrates a mature security culture and professional digital maturity. The main risk factor is the lack of WHOIS domain registration data, which could indicate privacy protection or a registration anomaly. This should be investigated further to confirm legitimacy. Strategic recommendations include adding security headers, publishing incident response information, and implementing a security.txt file to enhance transparency and trust.

Sanderson Plc is a specialist recruitment consultancy focused on the Insurance, Life & Pensions, and Wealth Management sectors, with a strong market presence in the UK financial services industry. The website highlights the strategic acquisition of Highams to expand their capabilities and service offerings. The company provides a range of recruitment services including permanent and contract placements, RPO, MSP, and executive search. The site is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins and integrations such as HubSpot for analytics and messaging, Google Tag Manager, and CookieYes for consent management. Security measures include HTTPS, Google reCAPTCHA Enterprise, and cookie consent mechanisms, although explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is missing or unavailable, which slightly reduces trustworthiness but is mitigated by the professional content and business legitimacy evident on the site. Overall, the website demonstrates a strong security posture, good privacy compliance, and a credible business presence in the financial recruitment sector.

X

XR Extreme Reach

adstream.com

66

XR Extreme Reach operates a leading enterprise platform that streamlines advertising operations for brands and agencies worldwide. Their integrated solutions cover asset management, rights compliance, ad delivery, and talent payments, serving a significant portion of the US advertising market including major events like the Super Bowl. The website reflects a mature digital presence with modern technologies, fast performance, and strong branding consistency. Privacy and cookie compliance are well implemented, though direct contact details are limited to forms. Security posture is solid with HTTPS and consent mechanisms, but could be improved with additional security headers and published policies. Overall, XR Extreme Reach presents as a credible, professional, and trusted player in the media technology sector.

P

Perk

clicktravel.com

65

Perk operates a specialist platform branded as 'Click Travel, Powered by Perk', targeting UK-based companies and the public sector to facilitate business travel booking, management, and reporting. The website presents a professional and modern digital presence, leveraging technologies such as Astro framework, Storyblok CMS, and various analytics and marketing tools including Google Tag Manager, Datadog RUM, and Usercentrics for consent management. Despite the professional front-end and user experience, the absence of WHOIS registration data for the domain www.perk.com raises concerns about domain legitimacy and ownership transparency. The website is secured with HTTPS and employs consent mechanisms, but lacks visible privacy policies, terms of service, and direct contact information, which are critical for compliance and user trust. Overall, the platform appears functional and targeted, but verification of domain registration and enhanced transparency in privacy and contact details are recommended.

Peter Scott Printers Ltd is a UK-based printing services company established in 1960, specializing in high-quality and cost-effective printing solutions with rapid lead times. The company targets businesses and individuals within the UK market, positioning itself as a trusted and experienced print specialist. The website reflects a professional business model focused on manufacturing and printing services, supported by consistent branding and clear contact information. Technically, the website is built on WordPress using the Salient theme and integrates several modern marketing and analytics tools such as Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and Mailchimp. The site is secured with HTTPS and shows moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with SSL enabled but lacks comprehensive security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance of the website. Overall, the site is safe and suitable for general audiences with no adult or questionable content detected.

C

CACI

caci.co.uk

76

CACI is an established enterprise technology company specializing in connecting data, technology, and human insight to deliver scalable, innovative solutions that drive business transformation and operational excellence. The company targets business and government clients seeking advanced data analytics, AI, and technology consulting services. The website demonstrates a mature digital presence with professional design, comprehensive navigation, and strong SEO implementation. Technically, the site is built on WordPress with modern libraries and includes cookie consent and analytics integrations, reflecting a good level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though improvements are recommended in security headers and explicit security policies. WHOIS data for the exact domain queried is unavailable due to it being a subdomain, which slightly impacts trust but does not detract from the overall legitimacy given the professional content and branding. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing direct contact information for security and privacy inquiries.

T

Troika Systems

troika-systems.com

63

Troika Systems is a well-established company founded in 2003, specializing in precision quality control tools and software for the printing industry, particularly anilox, gravure, and flexo printing. Their product portfolio includes advanced 3D scanning devices and inspection software designed to improve print quality and operational efficiency. The company maintains a strong market position supported by industry partnerships and award-winning products. Technically, the website is built on a modern WordPress platform with WooCommerce and Elementor, leveraging SEO and analytics tools such as Rank Math and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

K

Keys Energy Services

keysenergy.com

62

Keys Energy Services is a public power utility serving the Lower Florida Keys, providing electricity to over 28,000 customers from Key West to the Seven-Mile Bridge. Established in 1943, the company operates as a regional utility focused on residential and commercial electricity services, including payment options, rebate programs, and storm preparedness resources. The website reflects a stable market position as a trusted local energy provider with a clear focus on customer service and community engagement. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and LiveHelpNow for customer support. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The technical infrastructure is adequate for the business needs but could benefit from enhanced security headers and explicit cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, the absence of security headers and lack of published security policies or incident response information indicate room for improvement. The missing WHOIS data for the domain is a notable anomaly that reduces trust slightly but does not directly impact the operational legitimacy of the business. Overall, the website presents a professional and trustworthy front for Keys Energy Services, with solid business credibility and user experience. Strategic recommendations include improving security header implementation, adding cookie consent and privacy compliance features, and clarifying domain registration information to enhance trust and compliance posture.

C

County of Cumberland, Pennsylvania

ccpa.net

60

Cumberland County, Pennsylvania operates an official government website providing residents and visitors with comprehensive information about county government, services, news, and events. The site serves as a central hub for public resources including public meetings, elections, licensing, and community engagement. The website is positioned as the authoritative source for county-related information and services, targeting local citizens and stakeholders. Technically, the site is built on the CivicPlus CMS platform, leveraging modern JavaScript libraries such as jQuery and AlpineJS, and integrates analytics tools including Google Tag Manager and Azure Application Insights. The site demonstrates good mobile optimization and accessibility features, with a professional design and clear navigation structure. Security posture is solid with HTTPS enforcement and anti-forgery tokens, though some security headers could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is missing or unavailable, which slightly reduces trustworthiness, but the .gov domain and content strongly indicate legitimacy. Overall, the site is a well-maintained government portal with moderate technical sophistication and a good security baseline.

Truckee Donner Public Utility District provides electric and water utility services to the Truckee, CA area, focusing on sustainability, customer service, and community engagement.

M

Morton Fraser MacRoberts LLP

macroberts.com

76

Morton Fraser MacRoberts LLP (MFMac) is a leading Scottish law firm providing expert legal services to businesses, the public sector, and individuals. The firm is well-positioned in the Scottish legal market, recognized by prestigious legal directories such as Chambers and Partners and Legal 500. Their services span multiple sectors including energy, real estate, public sector, manufacturing, and healthcare. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. Technically, the website leverages modern technologies including Umbraco CMS, Google Tag Manager, Microsoft Application Insights, Hotjar, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced, security headers present, and use of reCAPTCHA on forms. Privacy compliance is well addressed with detailed policies and consent mechanisms. The WHOIS data is unavailable, which limits transparency on domain registration details. However, the website content and business information strongly indicate legitimacy and professionalism. No critical security vulnerabilities or compliance gaps were detected. Overall, the site demonstrates a mature digital infrastructure suitable for a large professional services firm.

C

Cairn o' Mohr

cairnomohr.com

61

Cairn o' Mohr is a small Scottish winery established in 1987, specializing in the production and sale of fruit wines, ciders, and related beverages made from locally sourced ingredients. The company operates an e-commerce platform, offers winery tours, and runs a wine club subscription service, targeting consumers interested in artisanal Scottish wines and cider. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Mailchimp, and is mobile optimized with moderate performance. However, the absence of explicit privacy and cookie policies, lack of security headers, and missing WHOIS domain registration data reduce the overall trust and security posture. No WAF or blocking mechanisms were detected, and the site is fully accessible.

F

Four Seasons Florists

fourseasonsflorists.co.uk

50

Four Seasons Florists is a well-established local florist business based in Aberdeen, UK, with over 50 years of experience. The company offers a wide range of floral arrangements, gifts, and delivery services including same day delivery. Their website is built on the Prestashop platform and integrates modern technologies such as Google reCAPTCHA and Google Analytics. The site is professionally designed with good content quality and clear navigation, targeting consumers seeking floral gifts for various occasions. Security posture is solid with HTTPS and secure forms, though some security headers and privacy compliance features could be improved. Overall, the business demonstrates credibility and trustworthiness with clear contact information and consistent domain registration data.

E

Elaines Flowers

elainesflowers.co.im

49

Elaines Flowers is a well-established local florist business based in Peel, Isle of Man, with over 29 years of experience. The company specializes in fresh flower arrangements and offers same-day delivery services island-wide. Their business model focuses on direct sourcing from growers and auctions, cutting out middlemen to provide quality floral products. The website reflects a professional retail e-commerce platform targeting local residents and businesses, with additional worldwide delivery through a partner network. Technically, the site uses modern frameworks such as Bootstrap and jQuery, and integrates Google Analytics for tracking. The design is responsive and user-friendly, with clear navigation and product presentation. Security posture is adequate with HTTPS and CSRF protection, but lacks some security headers and cookie consent mechanisms, which are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

N

nexos

magmaproducts.co.uk

59

nexos is a specialized EPC contractor focused on commissioning and start-up services within the energy sector, delivering operational readiness and safety for new and upgraded facilities. The company leverages extensive engineering expertise and proprietary technology (CHOMS) to ensure efficient project handover and operational success. The website reflects a professional and consistent brand presence with clear service offerings and international reach. Technically, the site uses modern JavaScript libraries and is hosted on Amazon S3, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though improvements are needed in security headers and incident response visibility. Privacy compliance is addressed with policies present but lacks explicit cookie consent mechanisms. Overall, the domain appears legitimate with privacy-protected WHOIS data and a domain expiry consistent with active business operations.

G

GLL

better.org.uk

63

Better.org.uk represents GLL, a charitable social enterprise operating leisure centres, libraries, and community programs across the UK. The organization targets the general public with a focus on health, wellbeing, and community engagement. Their market position is strong as a leading charitable leisure provider, offering diverse services including gyms, swimming pools, sports activities, and venue hire. The website reflects a mature digital presence with comprehensive content and clear navigation. Technically, the site employs modern frameworks such as Turbo Rails and Stimulus JS, integrates accessibility tools like ReciteMe, and uses Mapbox for location services. Security posture is robust with HTTPS enforcement, CSRF protection, and cookie consent management, although explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy standards.

F

Freeman Spogli

freemanspogli.com

62

Freeman Spogli is a private equity firm specializing in partnerships with founders and management teams in the consumer and distribution sectors. Established since 1983, the firm focuses on building enduring businesses through strategic investments and active engagement with portfolio companies. The website reflects a mature, professional business with a clear market position in middle market private equity. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good performance and mobile optimization. Security posture is strong with HTTPS enforced, though some security headers could be improved. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. The absence of WHOIS data is a notable anomaly that slightly reduces trustworthiness but does not overshadow the professional presentation and business credibility. Overall, the site is well-designed, content-rich, and trustworthy from a business perspective.