Security Directory

Grapes Direct is a UK-based specialist grape importer connecting top grape growers worldwide with UK supermarkets. The company operates a year-round supply chain, importing grapes from multiple countries and providing technical support to optimize product quality. Their business model focuses on partnership with growers and simplifying the complex grape supply chain. The website is built on legacy ASP.NET Web Forms technology and uses Google Analytics for visitor tracking. While the site is accessible and professionally presented with clear contact information, it lacks modern security headers and privacy compliance documentation. The WHOIS data indicates the domain registration failed due to naming rules, raising concerns about domain legitimacy. Overall, the website presents a credible business front but requires improvements in security posture and compliance to enhance trust and reduce risk.

DHF Engineering Ltd. is a small UK-based company specializing in engineering and fabrication solutions, including structural steelwork, architectural staircases, specialist fabrication, and project management services. The company targets businesses and contractors requiring bespoke engineering services, leveraging over 30 years of industry experience. Their market position is that of a reputable local/regional service provider with a professional online presence hosted on Squarespace. Technically, the website is built on the Squarespace platform, utilizing modern web technologies such as Google Analytics and Typekit fonts. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. The infrastructure is standard for small business websites, with no advanced frameworks detected. From a security perspective, the website enforces HTTPS but lacks important security headers and cookie consent mechanisms, indicating partial compliance with privacy regulations such as GDPR. No forms are present on the homepage, reducing immediate data collection risks. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy, though the website content and business information appear authentic and professional. Overall, the website presents a moderate risk profile with recommendations to improve security headers, privacy compliance, and domain registration clarity to enhance trustworthiness and regulatory adherence.

K

Knight Group

knight-group.co.uk

62

Knight Group is a large UK-based supplier and processor specializing in premium quality precision strip and wire products, serving multiple industrial sectors including aerospace, defence, automotive, and energy. The company positions itself as one of Europe's largest multi-metal suppliers with aerospace-approved performance alloys, offering a broad range of materials and processing services. The website reflects a mature digital presence with comprehensive navigation, detailed product and sector information, and clear business focus.

P

Protherm Engineering Limited

prothermengineering.co.uk

41

Protherm Engineering Limited is a UK-based small manufacturing company specializing in hot dip galvanizing equipment and related engineering services. With over 30 years of experience, the company serves a global industrial audience, providing tailored galvanizing furnaces, drying ovens, splash enclosures, and consultancy services. The website reflects a professional and consistent brand with clear product offerings and contact information. Technically, the site uses common JavaScript libraries and Google Analytics, with moderate performance and good mobile optimization. Security posture is moderate but lacks visible security headers and cookie consent mechanisms, and WHOIS data is unavailable due to domain naming rules issues, which slightly reduces trust. Overall, the site is functional, professional, and trustworthy for its niche industrial audience.

T

Tradelink Wood Products Ltd

tradelink-group.com

59

Tradelink Wood Products Ltd is an established international timber supplier founded in 1998, specializing in procurement, shipping, manufacturing, warehousing, and marketing of hardwoods, plywood, and allied timber products. The company operates globally with sales offices in seven countries and procurement offices in multiple regions, including South America and Asia. Their manufacturing plant in Brazil supports flooring, decking, and component production. The company emphasizes responsible purchasing policies audited by recognized bodies and compliance with international timber regulations. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and trusted SSL certificates but lacks DNSSEC and some security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the business credibility is strong with clear contact information and trust indicators such as certifications and third-party audits.

R

Roemheld UK

roemheld.co.uk

53

Roemheld UK is a specialized manufacturer focused on high quality and precision workholding and handling technology solutions for industrial sectors such as automotive, aerospace, medical, and packaging. The company offers a broad product range including hydraulic clamps, zero-point clamping, quick die change systems, power units, and assembly equipment, positioning itself as a leading UK provider in this niche. The website reflects a professional digital presence built on WordPress with SEO optimization and multimedia content to engage its industrial audience. Technically, the site uses modern web technologies including Google Analytics and reCAPTCHA for security on forms. Security posture is solid with HTTPS enforced and spam protection, though improvements could be made by adding security headers and explicit cookie consent mechanisms. The WHOIS data is unavailable due to domain naming rules, but the website content and business information support legitimacy. Overall, the site is well-structured, trustworthy, and serves its target market effectively.

D

Detroit Public Library

detroitpubliclibrary.org

53

Detroit Public Library is a large, government-operated public library system serving the Detroit community. The website provides extensive information about library locations, services, digital collections, and community events. It targets a broad audience including children, teens, adults, and researchers, offering diverse educational and cultural programming. The business model is based on public funding and community service, positioning the library as a key educational and cultural institution in Detroit. Technically, the website uses modern web technologies such as jQuery, Google Analytics, and FontAwesome, hosted on a reliable CDN infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices and clear navigation. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers and DNSSEC are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is clear and trustworthy, supported by consistent WHOIS data indicating a legitimate and long-standing domain. Overall, the website is professional, secure, and user-friendly, serving its public mission effectively.

M

Maryland Chamber of Commerce

mdchamber.org

57

The Maryland Chamber of Commerce is a statewide business advocacy organization focused on partnering with businesses, organizations, policymakers, and communities to promote pro-business policies and economic growth within Maryland. The website reflects a professional and consistent brand presence, targeting businesses and stakeholders in the Maryland region. The organization appears to be established since at least 2016, with a medium-sized operational scale. Technically, the website is built on WordPress, leveraging modern SEO tools such as Yoast SEO Premium, and integrates analytics services including Google Analytics and Facebook Pixel. The site is hosted on Azure CDN infrastructure, ensuring moderate performance and good mobile optimization. Accessibility features are basic but present, and SEO optimization is good with proper metadata and structured data. From a security perspective, the site uses HTTPS with a strong SSL configuration and includes Google reCAPTCHA to protect forms. However, no explicit security headers were detected, and there is a lack of published privacy, cookie, or incident response policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website is trustworthy and professional, with a solid business credibility score. The absence of WHOIS data limits domain registration insights, but the privacy protection is typical for such organizations. Strategic recommendations include enhancing privacy compliance documentation, implementing security headers, and publishing clear contact and incident response information to strengthen trust and security posture.

W

Wamco, Inc.

wamcoinc.com

46

Wamco, Inc. is a well-established company specializing in providing lighting solutions across multiple sectors including military, aerospace, automotive, industrial, medical, and stage and studio applications. With over 58 years of experience, the company positions itself as a reliable B2B supplier offering sourcing, custom development, and timely delivery of lighting products globally. The website reflects a professional and consistent brand image, targeting specialized industrial and commercial clients. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Analytics, and Google Maps API, indicating a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not outweigh the professional presentation and business credibility. Overall, the website is functional, professional, and trustworthy with room for enhanced security and privacy compliance.

P

Phoenix Flooring Ltd

pfcu.co.uk

52

Phoenix Flooring Ltd operates as a professional commercial flooring contractor in the United Kingdom, specializing in commercial carpets, vinyl, safety, and wooden flooring. The company targets businesses and commercial property owners seeking reliable flooring solutions. The website presents a professional and consistent brand image with a clear business focus and offers a free, no-obligation quote via a contact form. The site is built on WordPress, utilizing common plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder, and integrates Google Analytics and Google reCAPTCHA for analytics and form security respectively. HTTPS is enforced, ensuring secure communications. However, the WHOIS lookup for the domain 'www.pfcu.co.uk' failed due to domain naming rules, indicating a possible discrepancy or misconfiguration in domain registration. This reduces trustworthiness from a domain registration perspective.

GRAD is a London-based cultural platform and forum dedicated to Russian and post-Soviet art, history, and cultural debate. It operates primarily as a non-profit organization offering exhibitions, panel discussions, and educational programs targeting cultural enthusiasts, academics, and the general public interested in this niche. The website reflects a professional and consistent brand image with a focus on cultural content and community engagement. Technically, the site is built on Bitrix CMS and utilizes common JavaScript libraries such as jQuery and Swiper, with integrations for Google Analytics and Facebook SDK for tracking and marketing purposes. While the site is mobile-optimized and offers a good user experience, it lacks comprehensive privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is used but no explicit security headers were detected, and no vulnerability disclosure or incident response information is provided. The WHOIS data is missing or unavailable, which raises questions about domain registration legitimacy, although the presence of company registration and VAT numbers supports the organization's authenticity. Overall, the site is functional and professional but would benefit from improved privacy compliance and enhanced security practices.

H

Howlader & Co

howladerandco.com

48

Howlader & Co is a well-established chartered accountancy firm based in London, offering a comprehensive range of accounting and tax advisory services tailored to businesses of all sizes, including startups and small enterprises. With over 50 years of combined experience, the firm positions itself as a trusted partner for London businesses seeking expert financial guidance and tax efficiency. Their market position is reinforced by strong trust indicators such as professional certifications (ACCA, ICAEW, Xero Silver Partner) and excellent client reviews. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on WordPress using modern frameworks like Foundation and includes popular libraries such as jQuery and Owl Carousel. It integrates Google Analytics and Tag Manager for tracking and employs Google reCAPTCHA for form security. The site is mobile-optimized and SEO-friendly, though performance is moderate. Cookie consent is implemented with user customization options, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site uses HTTPS with good SSL configuration and includes some security best practices like CAPTCHA and consent banners. However, it lacks visible security headers and formal security or incident response policies. The WHOIS data is consistent with the business claims, showing a long-standing domain registration with a reputable UK registrar, supporting the legitimacy of the entity. Overall, Howlader & Co presents a credible, professional online presence with solid business credibility and moderate technical and security maturity. Enhancements in formal privacy documentation, security headers, and incident response disclosures would further strengthen their security posture and compliance standing.

Q

Quality Environmental Services (QES)

qualityenvironmental.co.uk

43

Quality Environmental Services (QES) is a UK-based asbestos consultancy firm established in 2010, specializing in asbestos surveys and environmental assessments. The website presents a professional image with clear contact information and a focus on asbestos consultancy services. The technical infrastructure is built on WordPress, utilizing common plugins such as WPBakery Page Builder and Slider Revolution, with Google Analytics integrated for visitor tracking. Hosting is provided by GoDaddy.com, LLC, and the site uses HTTPS, indicating a secure connection. However, the absence of visible privacy and cookie policies suggests compliance gaps with GDPR and related privacy regulations. Security posture is moderate, with HTTPS enabled and anti-spam measures in place, but lacking explicit security headers and vulnerability disclosure mechanisms. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

C

Chelsea Hire Complete Event Hire Solutions Ltd

chelseahire.co.uk

58

Chelsea Hire Complete Event Hire Solutions Ltd operates a professional website focused on marquee and event equipment hire services primarily in Northamptonshire and the Midlands region. The company offers a broad range of event-related hire services including furniture, crockery, kitchen, and refrigeration equipment. The website is built on the Wix platform, leveraging modern web technologies and includes structured data to enhance search engine visibility. Despite the professional presentation and clear business focus, the domain WHOIS data is unavailable due to a registration error indicating the domain name is invalid under Nominet UK rules. This discrepancy raises questions about domain legitimacy but does not detract from the apparent business credibility based on website content.

H

Hickleys Ltd

hickleys.com

53

Hickleys Ltd operates as a UK-based specialist in diagnostic and garage equipment, complemented by healthcare products, training services, and an automotive workshop. The company targets automotive professionals, locksmiths, healthcare users, and trainees, offering a diversified portfolio of products and services. The website reflects a medium-sized business with a consistent brand presence and good content quality. Technically, the site uses standard web technologies including jQuery and Google Analytics, with moderate performance and basic mobile optimization. Security posture is moderate but lacks visible security headers and explicit HTTPS confirmation in the provided data. Privacy compliance is basic, with a cookie consent banner and a privacy policy page present but no GDPR compliance indicators or detailed security policies. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the active website presence. Overall, the site is professional and safe but would benefit from enhanced security measures and clearer business contact information.

N

Northside Truck & Van Ltd

northside.co.uk

64

Northside Truck & Van Ltd is a reputable commercial vehicle dealership specializing in Mercedes-Benz and FUSO trucks and vans, primarily serving the Yorkshire region in the United Kingdom. The company offers new and used vehicle sales alongside servicing and maintenance, positioning itself as a trusted regional specialist. The website reflects a professional and consistent brand image with good content quality and user experience, targeting businesses and individuals seeking commercial vehicles. Technically, the site employs modern technologies including Google Analytics, Google Tag Manager, Osano consent management, and Vue.js, hosted via Amazon Cloudfront CDN, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. However, WHOIS data is unavailable due to domain registration issues, slightly impacting trustworthiness. Overall, the website is professional, secure, and compliant, with room for improvement in contact transparency and security documentation.

S

Strathclyde Scaffolding Services Ltd

strathclydescaffoldingservices.co.uk

55

Strathclyde Scaffolding Services Ltd is a small, locally focused scaffolding service provider based in Argyll, United Kingdom. With over 30 years of experience, the company offers scaffolding hire, erection and dismantling services, roof coverings, and related solutions primarily targeting construction and public sector clients in the Argyll region. The website reflects a professional and consistent brand presence with clear contact information and service descriptions. Technically, the site is built on WordPress using modern plugins such as Beaver Builder and Yoast SEO, with Google Analytics and reCAPTCHA integrated for analytics and security. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is good with HTTPS and reCAPTCHA, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and credible for its business domain but could improve compliance and security transparency.

SFA (Oxford) is a specialized consulting firm providing bespoke market intelligence and research services focused on critical metals, battery materials, green hydrogen, and fuel cells. The company positions itself as a leading value chain consultancy with a strong track record and a global client base including miners, processors, fabricators, end-users, investors, and recyclers. Their offerings include detailed market reports, consulting solutions, and industry events, supported by a professional and content-rich website. Technically, the website employs modern web technologies including Bootstrap, JavaScript libraries, and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and dedicated security or incident response policies, which are areas for improvement. The absence of WHOIS domain registration data raises some concerns about domain legitimacy and registration transparency, although the website content and business information appear professional and trustworthy. Overall, the website demonstrates a mature digital presence with strong content and marketing practices but could enhance its security posture and transparency regarding domain registration to improve trust and compliance.

The website www.logic-workshop.co.uk is currently a parked domain page hosted by Hostinger, serving primarily as a placeholder with referral links to Hostinger's web hosting and related services. The site lacks substantive business content, contact information, or policies, indicating it is not actively used for commercial or organizational purposes. The domain WHOIS lookup failed due to domain naming rules violations, suggesting the domain is either invalid or improperly registered, which significantly undermines its legitimacy and trustworthiness. Technically, the site uses standard web technologies including Google Analytics and Google Tag Manager for tracking, and is hosted on Hostinger's DNS system. The design is basic but mobile responsive, with minimal content and no CMS detected. SEO and accessibility features are minimal, and no security headers or HTTPS status information were evident from the provided data. From a security perspective, the site lacks privacy and cookie policies, contact or incident response information, and security best practices such as security headers. The absence of WHOIS data and domain registration irregularities present a critical risk factor. Tracking scripts are present but privacy compliance is poor. Overall, the security posture is weak, and the site should not be considered trustworthy for business or user interactions. Given these factors, the overall risk assessment is high. Strategic recommendations include securing proper domain registration, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear contact and business information to improve trust and compliance.

S

Stewardship

stewardship.org.uk

67

Stewardship is a UK-based Christian non-profit organization focused on helping individuals, churches, and charities manage and maximize their philanthropic giving. The website offers a comprehensive suite of services including giving accounts, donor advised funds, fundraising support, and consultancy. The organization positions itself as a trusted partner in Christian generosity with a strong market presence in the UK non-profit sector. Technically, the website is built on Drupal CMS, leveraging modern analytics and marketing tools such as Google Analytics, Cookiebot, Pardot, and Cloudflare for security and performance. The site is well-structured, mobile-optimized, and provides a rich user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not published. WHOIS data for the www subdomain was unavailable due to an invalid query, but the main domain stewardship.org.uk is known and legitimate. Overall, the website demonstrates good digital maturity and compliance with privacy regulations, making it a reliable platform for its target audience.

C

Campbell Miller Tools

campbellmillertools.co.uk

62

Campbell Miller Tools operates a professional e-commerce website specializing in power tools and accessories, targeting retailers and professional users primarily in the United Kingdom. The company leverages over 70 years of experience and stocks many leading brand names, positioning itself as a trusted supplier in the UK market. The website is built on the Shopify platform, utilizing a modern theme and integrating multiple analytics and marketing tools such as Google Analytics and Facebook Pixel. The technical infrastructure is robust, with fast performance, mobile optimization, and good accessibility features. Security posture is strong with HTTPS enforced, use of hCaptcha for form protection, and cookie consent mechanisms in place. However, explicit privacy and terms of service pages are not clearly found, which could be improved for compliance and transparency. WHOIS data for the www subdomain is unavailable due to naming rules, but this is consistent with it being a subdomain of campbellmillertools.co.uk. Overall, the website presents a professional and trustworthy front with moderate to high legitimacy.

L

Line Group Limited

linegrouplimited.com

51

Line Group Limited is a Gibraltar-based fiduciary services provider specializing in international fiduciary, company management, trust, accounting, and corporate banking services. Established in 2012, the company serves a global clientele with a strong local presence and a team of approximately 70 professionals. Their website reflects a professional and comprehensive presentation of their services and team, targeting clients seeking wealth management, trust services, and corporate solutions in Gibraltar. The business model focuses on providing tailored fiduciary and corporate services with a strong emphasis on trust and compliance. Technically, the website is built on WordPress with modern JavaScript frameworks including Vue.js, Alpine.js, and jQuery, complemented by SEO optimization through Yoast. The site uses Google Analytics and Passle for content marketing and analytics. Hosting appears to be managed via GoDaddy, consistent with the domain registrar. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status protections. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content. There is no visible security policy or incident response contact information, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the website presents a trustworthy and professional image with solid business credibility and technical implementation. Security posture is adequate but could be enhanced by enabling DNSSEC and adding security headers and policies. The domain registration data supports the legitimacy of the business. Strategic recommendations include improving DNS security, publishing security policies, and ongoing monitoring of third-party scripts.

M

Michael Grubb Studio

michaelgrubbstudio.com

56

Michael Grubb Studio is a specialized lighting design consultancy recognized for multiple awards and operating primarily in the UK with international projects. The company offers expert lighting design services across interior, exterior, and masterplanning sectors, targeting architects, developers, and clients seeking professional lighting solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern SEO and analytics tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data reduces domain trustworthiness, though the website's professional presentation supports legitimacy. Overall, the site is a credible digital presence for a small consultancy but would benefit from enhanced privacy compliance and security transparency.

Farrendale Ltd is a UK-based electrical contracting company established in 2001, specializing in domestic electrical services including responsive call outs and planned rewires. The company operates primarily in the Midlands with capacity to serve clients UK-wide. It holds recognized accreditations such as NICEIC approval and Construction Line Gold membership, reinforcing its market credibility. The website is built on WordPress using Elementor, featuring a professional design with clear navigation and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies are absent. Overall, the site reflects a mature business with a solid digital presence and compliance with GDPR requirements.

L

Labosport Group

labosport.com

61

Labosport Group is an established organization specializing in research, testing, and certification of sports surfaces and equipment, recognized as a FIFA Research Institute. Founded in 1993, the company offers consulting, testing services, training, and certification to improve sports surface safety and performance. The website targets sports industry professionals and related stakeholders globally, supporting multiple languages to cater to an international audience. The business model revolves around providing expert services and certifications in the sports surface domain, positioning Labosport as a trusted authority in this niche market. Technically, the website is built on WordPress 7.0 with a modern tech stack including jQuery, various plugins for SEO, translation (Weglot), marketing (Brevo/Sendinblue), push notifications (WonderPush), and analytics (Google Analytics, Snitcher). The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting details are limited but the domain is registered with a reputable registrar (Gandi SAS). From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers. Anti-spam measures are in place via CleanTalk. No explicit privacy, cookie, or security policies are published, which is a compliance gap. No incident response or vulnerability disclosure information is available. Overall, the security posture is moderate but could be improved with better policy transparency and DNS security. The overall risk assessment is low to moderate with recommendations to enhance privacy compliance, enable DNSSEC, implement security headers, and publish clear security and incident response policies. These improvements will strengthen trust and regulatory compliance while maintaining the company’s professional online presence.

Eco Sustainable Solutions Ltd is a well-established company founded in 1995, specializing in sustainable waste management and renewable energy solutions across Southern England. The company focuses on transforming waste into valuable resources through various recycling services and green energy production, positioning itself as a regional leader in the energy sector. Their website reflects a professional and environmentally conscious brand with clear messaging and strong trust indicators such as environmental impact statistics and project involvement with notable initiatives like The Eden Project and a solar farm. Technically, the website is built on WordPress using Elementor and Gravity Forms, integrating modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and CAPTCHA on forms, but lacks some security headers and formal privacy/cookie policies. The absence of WHOIS data due to a domain naming rules error reduces domain registration trustworthiness, though the website content and business information strongly indicate legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a mature digital presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and verifying domain registration details to enhance trust and compliance.

R

ROBER LIMITED

roberlimited.com

59

ROBER LIMITED is a UK-based company specializing in the design, manufacture, and global distribution of advanced pressure relief mattresses using proprietary Zero Pressure Technology. Their products are clinically developed in collaboration with healthcare professionals to prevent and treat pressure ulcers, targeting healthcare providers and institutions. The website demonstrates a professional digital presence built on WordPress with the Avada theme, incorporating SEO best practices and a cookie consent mechanism to address privacy compliance. Security posture is adequate with HTTPS enforced but could benefit from enhanced security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the business content and certifications support credibility. Overall, the website is functional, informative, and trustworthy with room for improvement in privacy and security transparency.

Anglo Pacific World Movers is a UK-based international shipping and removals company, recognized as the UK's largest shipping company with over 20,000 customers annually. The company offers competitively priced international removals and overseas shipping services to numerous global destinations including New Zealand, Australia, USA, South Africa, and UAE. Their business model focuses on providing comprehensive logistics solutions for individuals and businesses moving goods overseas. The website reflects a professional and trustworthy brand with embedded customer reviews and clear contact channels. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, Hotjar, and Cookiebot for analytics, marketing, and privacy compliance. The site is mobile-optimized with good SEO practices and a moderate performance profile. Cookie consent mechanisms and privacy policies are well implemented, indicating a mature approach to data privacy. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks visible security headers in the HTML source. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to domain naming rules error is a notable anomaly but does not detract from the overall legitimacy of the business as evidenced by the professional website and trust signals. Overall, Anglo Pacific demonstrates a solid digital presence with good security and privacy practices. Strategic improvements include adding security headers, publishing explicit security policies, and enhancing accessibility. The WHOIS anomaly should be investigated to ensure domain registration transparency and trust.

R

Roston Castings

rostoncastings.co.uk

51

Roston Castings is a UK-based specialist aluminium casting foundry with over 60 years of experience supplying high-quality aluminium castings to automotive, aerospace, agriculture, and engineering industries. The company maintains a strong market position supported by ISO9001 certification and long-term partnerships with high-profile manufacturers. Their key services include design, toolmaking and CNC machining, and gravity die casting. The website reflects a professional and consistent brand image targeting B2B customers in technical manufacturing sectors. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, with good SEO and mobile optimization. The presence of Google Analytics and Tag Manager indicates moderate user tracking, balanced with GDPR-compliant cookie consent mechanisms. The site is served over HTTPS with no detected blocking or WAF interference, indicating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though explicit security headers and incident response policies are not publicly documented. No vulnerabilities or exposed sensitive data were found. The domain registration is consistent with the business history, registered since 1998 with a reputable UK registrar. Overall, the website presents a trustworthy and professional front for Roston Castings, with good compliance and security practices. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and enhancing security headers to further strengthen the security posture.

M

Marlow Gardner & Cooke Ltd

marlowgardner.co.uk

69

Marlow Gardner & Cooke Ltd is an established UK-based independent insurance brokerage with over 50 years of experience providing tailored insurance solutions for businesses and personal clients. The company offers a wide range of insurance products including commercial, personal, and specialist coverages, acting as an agent for clients with access to multiple insurers including Lloyd’s market. Their market position is supported by memberships in Brokerbility, BIBA, and Chartered Insurance status, reflecting a trusted and professional service. Technically, the website employs modern web technologies such as jQuery, Slick Carousel, and Google Analytics, with good mobile optimization and a professional design. Security is well addressed with HTTPS, HSTS, and multiple Content Security Policy headers, although some header consolidation and additional security headers could improve posture. Privacy compliance is supported by clear privacy and cookie policies with consent mechanisms. The security posture is strong with no visible vulnerabilities or exposed sensitive data. The WHOIS data is unavailable due to an invalid domain query (the domain with 'www.' prefix is not registered), but the website content and business information strongly indicate legitimacy. Overall, the site is professional, secure, and trustworthy, serving a clear business purpose. Recommendations include improving security header management, adding a security.txt file for vulnerability disclosure, and enhancing incident response contact visibility to further strengthen security culture and compliance.

F.E. Maughan Limited is a well-established retail and e-commerce business specializing in DIY, building materials, and garden accessories, serving the Newcastle area for over 80 years. The company operates physical stores in Whitley Bay and Holystone and maintains a BigCommerce-powered online store to reach a broader audience. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to DIY enthusiasts and local customers. Technically, the website leverages modern e-commerce technologies including BigCommerce's Stencil framework, Google Analytics, and Facebook Pixel for marketing and analytics. The site is hosted by 20i Ltd and employs HTTPS with appropriate security headers, indicating a solid technical foundation. Mobile optimization and SEO practices are adequately implemented, though accessibility features could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and security headers but lacks explicit published security policies, incident response contacts, and GDPR cookie consent mechanisms. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

The Diocese of Bristol website serves as the official online presence for the Church of England's Diocese covering Bristol and surrounding areas. It provides comprehensive information about church life, safeguarding, education, and community services, targeting parishioners, clergy, and the local community. The site is well-positioned as a regional religious institution with a medium-sized audience and a focus on community engagement and support. Technically, the website employs a modern technology stack including Google Analytics, Facebook Pixel, Microsoft Clarity, and hCaptcha for security and analytics, hosted partly on Amazon S3. The site is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be made. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, but lacks explicit security policy and incident response disclosures. WHOIS data is privacy protected, which is typical and justified for a non-profit religious organization. Overall, the website is professional, trustworthy, and safe for general audiences.

Shipley Weston is a UK-based electrical services company catering to both government and private sector clients. Their website highlights a broad experience in delivering electrical contracting projects across various service categories, positioning them as a specialized provider in the energy sector. The company targets industrial and governmental clients, offering a holistic approach to electrical contracting. The website is built on the Squarespace platform, leveraging modern web technologies including jQuery and Google Analytics for user tracking. The site is mobile optimized and presents a professional design with clear navigation. However, the absence of a privacy policy, terms of service, and explicit contact information limits the site's compliance and trustworthiness. Security posture is moderate with HTTPS enforced but lacks security headers and published security policies. The WHOIS data indicates a domain registration issue due to invalid domain naming, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but requires improvements in compliance documentation and domain registration clarity.

B

Buxton Brewery

buxtonbrewery.co.uk

59

Buxton Brewery is a UK-based craft brewery specializing in brewing aromatic and full-flavored craft beers. Established in 2008, the company operates an e-commerce platform selling beer and merchandise, complemented by a physical brewery visit experience. The website is professionally designed with a consistent brand identity targeting adult consumers interested in craft beer. Technically, the site is built on WordPress with WooCommerce, integrating modern tools such as Google Analytics, Google Tag Manager, Stripe for payments, and CookieYes for GDPR-compliant cookie consent. The site includes an age verification popup to comply with alcohol sales regulations. Security posture is strong with HTTPS enforced, security headers present, and use of reCAPTCHA to protect forms. However, no explicit security policy or incident response contacts are published, and no vulnerability disclosure mechanism is found. Overall, the website is trustworthy, compliant, and well-optimized for performance and mobile use, with moderate user tracking and good privacy compliance.

Oojufink is a small, eco-conscious men's barbershop located in Cardigan, UK, offering a range of grooming services including haircuts, cut throat shaves, colouring, and hair etchings. The business emphasizes vegan and environmentally friendly products and has a strong local community presence with positive customer reviews. The website is professionally designed with good content quality and clear navigation, supporting the business's market position as a niche high-end barbershop. Technically, the site uses modern web standards and Google Analytics for tracking, but lacks some advanced security headers and privacy policies. Security posture is adequate with HTTPS enabled but could be improved with additional headers and compliance documentation. The absence of public WHOIS data reduces domain trust slightly, though the active and consistent website content supports legitimacy. Overall, the site is safe, professional, and trustworthy with room for improvement in privacy compliance and security best practices.

E

Edginton Racing

edgintonracing.co.uk

47

Edginton Racing is a specialized small business with over 30 years of experience in motor racing, focusing on single seater racing car restoration, maintenance, and driver training. The company targets motor racing enthusiasts and drivers seeking expert services in the UK. Their website reflects a professional and consistent brand presence with clear service offerings and contact channels. Technically, the site is built on WordPress using the Divi theme and includes common plugins such as Gravity Forms and Modula Gallery. It employs Google Analytics for user tracking and has implemented cookie consent mechanisms, indicating good privacy compliance. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. The WHOIS data is unavailable due to domain naming rules errors, which impacts trustworthiness and domain legitimacy assessment. Overall, the website is accessible, well-structured, and safe for general audiences, but could benefit from enhanced security practices and WHOIS transparency.

E

Eagle Engineering (Telford) Ltd

platingbarrels.com

60

Eagle Engineering (Telford) Ltd is a UK-based specialist manufacturer and supplier of high-quality electro-plating barrels, plating barrel units, and related equipment. With over 20 years of industry experience, the company serves a global industrial electroplating market, emphasizing innovative design and durable materials. Their business model focuses on B2B manufacturing and equipment supply, supported by ISO 9001 certification and positive customer testimonials. The website reflects a professional and consistent brand presence, targeting industrial clients worldwide. Technically, the website is built on WordPress using the Divi theme, incorporating common plugins such as Contact Form 7, Formidable Forms, and Google Analytics for tracking. The site is moderately performant, mobile-optimized, and SEO-friendly with structured data and meta tags. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance the posture. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR consent, and secure data collection forms. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age matching the business history. Overall, the website presents a trustworthy, professional, and compliant digital presence for Eagle Engineering, with recommendations to strengthen security headers and incident response transparency to further improve risk management.

S

Straightforward Agency Ltd.

straightforwardsolutions.co.uk

48

Straightforward Agency Ltd. is a small digital marketing and creative studio based in Lichfield, Staffordshire, UK. Founded in 2022, the company offers a range of marketing services including website design, SEO, PPC management, branding, social media, direct mail, print, and content creation. The agency targets ambitious businesses seeking clear, measurable growth and positions itself as a practical, transparent, and results-driven partner. The website is professionally designed using WordPress and Elementor, with modern technologies and good SEO practices. Security posture is solid with HTTPS and DNSSEC enabled, though explicit security policies and privacy documentation are lacking. Contact information is clearly presented, and cookie consent mechanisms are implemented, indicating basic GDPR compliance. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business presence.

A

Audley Villages

audleyretirement.co.uk

75

Audley Villages operates luxury retirement villages in the United Kingdom, offering high-end properties and independent living for seniors. The company positions itself as a premium provider in the retirement real estate sector, targeting affluent retirees seeking quality lifestyle communities. The website reflects this positioning with professional design, clear branding, and detailed property listings. Technically, the site is built on Drupal 10 and integrates multiple modern analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and bot protection implied via Cloudflare, though explicit security headers and policies are not evident. Privacy compliance is partially addressed through a comprehensive cookie consent mechanism, but lacks a clearly accessible privacy policy or terms of service pages. The WHOIS data is unavailable due to domain naming rules, which is inconsistent with the active and professional website presence, slightly reducing trustworthiness. Overall, the site is well-developed and credible but would benefit from enhanced transparency in privacy and security policies.

M

Mr Tax Ltd

mrtax.co.uk

41

Mr Tax Ltd is a well-established, family-run accounting firm based in Blaby, Leicester, UK, founded in 1996. The company offers a range of accounting and tax-related services including bookkeeping, payroll, company formation, tax consultancy, and investigations. The website reflects a professional local business targeting small to medium-sized enterprises and individuals in the Leicester area. Technically, the site is built on WordPress using the Divi theme, with SEO optimizations via Yoast and tracking through Google Analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy of the business with a consistent UK presence since 1998.

Corroy Products is a UK-based specialist supplier of industrial power tools and accessories, focusing on brands such as Bosch, Festool, Fein, and Trend. The company targets specialist contractors and tradespeople, offering advice, onsite demonstrations, and a wide range of fixings and consumables. Their business model centers on wholesale and trade counter sales rather than direct online commerce, with a physical location in Walsall. Technically, the website is basic but functional, using standard HTML, CSS, and JavaScript, with tracking via Facebook Pixel and Google Analytics. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy policies, which impacts compliance and trust. The domain WHOIS data is unavailable and flagged as invalid by the registry, raising legitimacy concerns, though the website content and contact details suggest a legitimate small business. Overall, the site is safe and relevant but requires improvements in security and privacy compliance.

F

Fiveways Insurance Group

fivewaysinsurance.co.uk

55

Fiveways Insurance Group is a well-established UK-based insurance brokerage firm providing professional insurance advice since 1967. The company serves both business and personal clients with a broad portfolio including business combined, liability, motor, home, and private client insurance. Their market position is strengthened by long-standing relationships with insurers and a regional presence in Shropshire and Staffordshire. The website reflects a professional and trustworthy brand with clear contact information and comprehensive service descriptions. Technically, the website is built on WordPress with modern technologies such as jQuery, Google Tag Manager, Google Analytics, Hotjar, and Cookiebot for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR consent mechanisms, and transparent data collection disclosures. Business credibility is high, supported by detailed contact info, testimonials, and consistent branding. However, WHOIS data for the queried subdomain is unavailable due to an invalid query on 'www.fivewaysinsurance.co.uk', which does not affect the legitimacy of the main domain. Overall, Fiveways Insurance Group demonstrates a mature digital presence with strong business credibility and good security and privacy practices. Continued improvements in security headers and incident response disclosures are recommended to further enhance trust and compliance.

T

Trace

traceisys.com

56

Trace is a UK-based company providing business-critical software solutions tailored for insurance and reinsurance brokers globally. Their flagship products, OpenTWINS and OT Messaging, support the entire broking lifecycle and facilitate eTrading, positioning them as a key technology partner in the insurance finance sector. The website reflects a professional and consistent brand image targeting insurance brokers worldwide. Technically, the site is built on WordPress with modern plugins and analytics tools, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks visible security headers and explicit public security policies. The absence of WHOIS registration data is a notable concern, though the website content and contact information suggest a legitimate business. Overall, the site is trustworthy but would benefit from enhanced transparency and security practices.

D

Duraweld

celsur.co.uk

53

Duraweld is a UK-based manufacturer specializing in bespoke office stationery and custom retail packaging, including ring binders, clipboards, document pockets, wallets, presentation boxes, and product packaging. The company positions itself as a leading provider of durable and versatile stationery and packaging solutions for businesses. The website reflects a professional and consistent brand image, targeting business customers seeking custom packaging and stationery products. The business has a long-standing domain registration dating back to 1996, supporting its established market presence. Technically, the website is built on WordPress 7.0, utilizing popular plugins such as Yoast SEO for search engine optimization, Google Tag Manager and Google Analytics for tracking, and a cookie consent plugin to comply with privacy regulations. The site is mobile-optimized with good navigation and content relevance. Hosting and domain registration are managed by NuBlue Ltd, a reputable registrar. From a security perspective, the site enforces HTTPS with a valid SSL certificate and implements a cookie consent mechanism. However, it lacks visible security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with no explicit privacy policy or terms of service pages found, which could be improved to enhance user trust and regulatory compliance. Overall, Duraweld's website demonstrates a solid business and technical foundation with room for improvement in privacy and security transparency. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and providing incident response contact information to strengthen compliance and trust.

M

Merlin Vet Ltd.

merlinvet.co.uk

65

Merlin Vet Ltd. is a UK-based veterinary pharmaceutical wholesaler and exporter with over 15 years of market presence. The company specializes in supplying premium veterinary medicines, equipment, and accessories globally, targeting veterinary surgeons, clinics, distributors, and wholesalers. Their business model leverages membership in a major UK veterinary buying group to offer competitive pricing and quality products. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their B2B audience. Technically, the website is built on WordPress using the Enfold theme, supported by Cloudflare DNS and integrated with Google Analytics and Mailchimp for marketing and analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and anonymized IP tracking, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the security posture is good but could be enhanced by publishing incident response contacts and security.txt files. The domain WHOIS data aligns well with the business claims, showing a consistent and legitimate registration history. No blocking or WAF interference was detected, allowing full content accessibility. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing DNS security, expanding security headers, formalizing vulnerability disclosure, and improving incident response transparency to further strengthen trust and compliance.

Plastech Packaging & Healthcare Ltd is a Scottish-based manufacturer specializing in clear plastic packaging solutions, including tubes, cartons, trays, clamshells, and injection moulding services. With over 50 years of industry experience, the company positions itself as a leading clear plastic packaging specialist in the UK, serving diverse sectors such as healthcare, retail, and industrial markets. Their product range is comprehensive, offering both standard and custom packaging solutions with an emphasis on quality and design. Technically, the website is built on a modern WordPress platform using Elementor and integrates several analytics and tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The site is mobile-optimized, well-structured, and provides a good user experience with clear navigation and professional design. Privacy and cookie policies are implemented with consent mechanisms, indicating GDPR compliance. From a security perspective, the site uses HTTPS and employs cookie consent banners but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, warranting further investigation. Overall, the website presents a professional and trustworthy front for a medium-sized manufacturing business, but the missing WHOIS data is a notable risk factor. Strategic recommendations include enhancing security headers, publishing explicit security policies, and verifying domain registration details to improve trust and compliance.

R

Rossie

rossie.org.uk

44

Rossie Young People's Trust is a well-established Scottish charity dedicated to protecting and improving the wellbeing of young people aged 12-18 through secure care, residential care, education, and health psychology services. The organization positions itself as a multi-disciplinary provider with a strong focus on innovation and ongoing development. Their website reflects a professional and comprehensive digital presence, targeting young people, their families, and professionals involved in care. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS enforced and secure forms, though additional security headers and explicit incident response information could enhance trust. The lack of WHOIS data due to domain naming rules error introduces some uncertainty about domain registration legitimacy, but the accessible and content-rich website supports the organization's credibility. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in privacy compliance and business credibility transparency.

Origo Services Ltd is a UK-based fintech company with over 35 years of experience delivering innovative solutions to the financial services industry. Their offerings include integration hubs, asset migration, transfer tracking, and identity services, targeting financial providers, platforms, and advisers. The company is well-positioned in the UK market, trusted by major financial institutions and advisers, and emphasizes digitizing analogue processes to improve efficiency and connectivity across the sector. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, HubSpot, and Hotjar for analytics and marketing, with a good level of mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in DNSSEC adoption and publishing explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence aligned with their business goals.

S

Steinfeld Law LLP

steinfeldlaw.co.uk

49

Steinfeld Law LLP is a boutique law firm based in London specializing in corporate, finance, commercial, employment, and property law. The firm positions itself as combining expert commercial legal advice with the flexibility of a boutique practice, targeting corporate clients and professionals. The website is professionally designed using WordPress with SEO optimization and analytics integration, reflecting a moderate to high level of digital maturity. Security posture is good with HTTPS and reCAPTCHA implemented, though security headers and cookie consent mechanisms are absent, representing areas for improvement. The WHOIS data is unavailable due to an invalid query format, which slightly reduces trust but the website content and contact information strongly indicate legitimacy. Overall, the site presents a professional and trustworthy online presence for a small legal services provider in the UK.

J

Jolee Tablecloths

joleetablecloths.co.uk

66

Jolee Tablecloths operates a UK-focused e-commerce website specializing in wipe clean tablecloths made from oilcloth, PVC vinyl, and acrylic fabrics. The company positions itself as a leading supplier in this niche market, offering a variety of tablecloths and related homeware products with free delivery on most orders. The website is built on the Magento 2 platform, integrating modern marketing and analytics tools such as Google Analytics, Microsoft Clarity, and Klaviyo, indicating a mature digital infrastructure. The site features a comprehensive cookie consent mechanism aligned with GDPR requirements, enhancing privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no explicit security policies are published. The WHOIS data for the domain is incomplete and indicates registration issues, which slightly detracts from overall trustworthiness. Overall, the website is professional, user-friendly, and secure, serving a general audience with retail products.