Security Directory

2

2buy2 Limited

2buy2.com

60

2buy2 Limited is a business specializing in procurement and energy solutions, offering services such as transformative and operational procurement, energy brokerage, and bespoke retainers. Established in 2006, the company targets organizations seeking to optimize procurement processes and energy management to achieve cost savings and compliance. The website is built on WordPress with Elementor and related plugins, indicating a modern and maintainable technical infrastructure. While the site is professionally designed and SEO-optimized, it lacks explicit privacy and cookie policies, which impacts privacy compliance. Security posture is generally good with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Tracking technologies include Google Analytics and VBOUT marketing automation, reflecting moderate user tracking. Overall, the website presents a credible and professional business presence with room for improvement in privacy and security transparency.

The website catalystmarketingagency.com is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any business-related content. Due to this, no information about the company's services, policies, or contact details is available. The domain is registered with GoDaddy.com, LLC since December 2021, indicating a relatively new registration consistent with a small business or startup. However, the lack of accessible content and security features severely limits the ability to assess the company's digital maturity or security posture. No privacy, cookie, or terms of service policies are found, and no contact or incident response information is available. The website does not expose any adult or explicit content and is rated safe in content safety terms.

A

Allan Morris

allan-morris.co.uk

49

Allan Morris operates as a real estate agency in the United Kingdom, focusing on property sales and lettings. The website presents a professional and modern interface built using React and Gatsby, indicating a good level of digital maturity. The business targets property buyers, sellers, landlords, and tenants within its regional market. Despite the professional presentation, the domain WHOIS data is incomplete and shows an error indicating the domain name is non-standard or misconfigured, which raises questions about domain legitimacy. The website lacks critical privacy and cookie policies, contact information, and security disclosures, which impacts its compliance and trustworthiness.

V

Virgin Media O2

o2.co.uk

68

Virgin Media O2 operates as a leading telecommunications provider in the United Kingdom, combining the largest and most reliable mobile network with a broadband network offering some of the fastest widely-available speeds. The website serves as a corporate news portal, providing updates, press releases, and information about the company's leadership, innovation, and responsible business initiatives. The brand is well-established with consistent and professional digital presence, targeting UK consumers and businesses seeking connectivity solutions. From a technical perspective, the website is built on WordPress with a modern tech stack including Google Tag Manager, YouTube APIs, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and employs SEO best practices, although some accessibility features could be improved. Performance is moderate, with no significant loading issues detected. Security posture is solid with HTTPS enforced and a cookie consent mechanism implemented, reflecting good privacy compliance aligned with GDPR. However, the absence of explicit security headers and publicly available security policies or incident response information suggests room for enhancement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website demonstrates a high level of professionalism and trustworthiness, with clear business information and contact details. The lack of WHOIS data for the subdomain is explained by domain naming rules and does not detract from the legitimacy of the site. Strategic recommendations include improving security headers, publishing security policies, and enhancing accessibility to further strengthen the site's security and compliance posture.

P

Panda Print - colour and digital printers

panda-print.co.uk

60

Panda Print is a family-owned Scottish printing company based in Rosyth, Dunfermline, with over 40 years of experience. They specialize in high-quality litho, digital, and large-format printing services, along with a broad range of promotional products. The company targets businesses and organizations in Scotland seeking reliable and cost-effective print solutions. Their market position is that of a well-established local print partner with a reputation for quality and customer service. Technically, the website is built on WordPress using the Oxygen Builder framework, enhanced with plugins such as Yoast SEO and Oxy Ninja. The site uses modern web technologies including jQuery and Google Fonts, and integrates Google Analytics via the Site Kit plugin. Performance and mobile optimization are good, though accessibility features are basic. Hosting is provided by Heart Internet Limited, a reputable registrar and hosting provider. From a security perspective, the site employs HTTPS with excellent SSL configuration but lacks security headers such as Content-Security-Policy and X-Frame-Options. No visible vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and published security or incident response policies indicates room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and well-aligned with the business's offline reputation. The risk level is moderate due to some compliance gaps and missing security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and maintaining regular updates to plugins and themes.

The website www.safetyforward.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The absence of any business-related information, contact details, or policies on the page prevents a comprehensive understanding of the company's operations or services. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting potential issues with domain registration legitimacy. Technically, the site lacks any detectable scripts, analytics, or security headers, and no SSL or hosting information is available from the provided data. Overall, the website's digital maturity is very low, and the security posture cannot be properly assessed due to lack of access. The domain's registration status raises concerns about the trustworthiness and legitimacy of the entity behind it.

The website www.xtax.org.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable and flagged as invalid by the Nominet UK registry, indicating the domain name contravenes naming rules and cannot be registered. No business information, contact details, privacy policies, or security policies are present on the site. The technical infrastructure appears minimal with no detectable scripts, analytics, or modern web technologies. Security posture is poor due to lack of HTTPS information and absence of security headers. Overall, the site appears non-operational or misconfigured, with very low trust and legitimacy indicators.

The website thepodonline.com operates as an e-commerce platform specializing in pre-owned and pre-loved designer clothes and accessories. It targets consumers interested in sustainable luxury fashion resale, offering curated collections by designer and category. The site is built on the BigCommerce platform, leveraging modern web technologies and integrations such as Google Fonts and Facebook Pixel for marketing and analytics. The website design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Additionally, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is readily available, which may impact user trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and formal security policies.

The website www.microavionics.com is currently inaccessible due to content blocking or rate limiting, as indicated by the minimal HTML content displaying only a 'local_rate_limited' message. No metadata, scripts, or business content could be extracted, preventing a thorough analysis of the company's digital presence or services. The WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, expired, or protected by privacy services with no public information available. This lack of data severely limits the ability to assess the legitimacy or business credibility of the entity behind the domain. From a technical perspective, the absence of accessible content and metadata means no technology stack, frameworks, or hosting details could be identified. The website does not present any security headers or HTTPS configuration, indicating a basic or non-existent security posture. No privacy, cookie, or terms of service policies were found, and no contact information or forms are available, which further reduces trustworthiness and compliance with data protection regulations. Security posture evaluation is constrained by the lack of accessible data, but the absence of HTTPS and security headers, combined with the domain's unclear registration status, represents significant risks. The website is effectively non-functional for analysis and likely not operational for end users. Overall, the risk assessment is high due to the inability to verify legitimacy, security, or compliance. Strategic recommendations include resolving the content blocking issue to enable proper website access, securing the domain registration with transparent WHOIS data, implementing HTTPS with robust security headers, and publishing comprehensive privacy and cookie policies. Establishing clear contact information and business details will enhance credibility and trust for visitors and partners.

L

Landlord Furniture

landlord-furniture.com

46

Landlord Furniture is a UK-based e-commerce retailer specializing in affordable beds, furniture, and appliances targeted primarily at landlords and student accommodation providers. Established in 2008, the company offers a wide range of products including beds, bedroom furniture, sofas, dining sets, and appliances, positioning itself as one of the largest suppliers for student properties in the UK. The website is built on WordPress with WooCommerce, leveraging popular plugins such as LayerSlider and WPBakery Page Builder to deliver a visually appealing and functional shopping experience. The site is mobile optimized and provides clear navigation and product categorization, enhancing user experience. Security posture is adequate with HTTPS enabled and no exposed sensitive data; however, the absence of DNSSEC and security headers like Content-Security-Policy and X-Frame-Options indicates room for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Business credibility is supported by consistent WHOIS data and a long domain age, though contact information is limited to an email address without phone or physical address details. Overall, the website demonstrates a solid foundation for its business model but would benefit from enhanced security and privacy practices.

E

Security Verification

express-transformers.co.uk

47

The website www.express-transformers.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. No actual business content, contact information, or company details are available for analysis. The WHOIS lookup failed due to domain naming rules violations, resulting in no registrar or registration data. This severely limits the ability to assess the legitimacy or business profile of the domain. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA, indicating some modern web technologies, but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site’s security posture is weak due to the lack of accessible content and missing policies. The domain’s legitimacy is questionable given the WHOIS failure and minimal content.

K

Konordo OÜ

konordo.com

46

Konordo OÜ is an Estonia-based technology company specializing in building and operating software platforms focused on education marketplaces, payment processing, and booking systems. Their key products include idietera.gr, Greece's largest tutoring marketplace, Idietera Plus for Stripe Connect payments, and Bookedly, a booking platform for professionals. The company emphasizes long-term platform sustainability with over a decade of operational experience and thousands of active users. Technically, the website is built on Drupal 11 with modern web standards and good mobile optimization, though hosting details and performance metrics are not fully available. Security posture is moderate with HTTPS assumed but lacking visible security headers and policies. The absence of privacy, cookie, and terms of service policies, as well as contact information, limits compliance and trust. WHOIS data is missing or unavailable, raising concerns about domain registration legitimacy despite professional website content. Overall, the site presents a credible business front but requires improvements in transparency, compliance, and security practices to enhance trust and reduce risk.

E

Electrico

electrico.co.nz

49

Electrico is a local New Zealand electrical services company that has recently merged with Silvester Electrical, as prominently announced on their website. The site serves primarily as an informational portal to communicate this change and provide contact details. The technical infrastructure is based on the Rocketspark platform, utilizing older jQuery libraries and Typekit fonts, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance documentation. The absence of WHOIS data reduces domain trustworthiness, though the business appears legitimate and transparent about its merger. Overall, the website is functional but basic, with room for improvement in security and privacy practices.

KAM Project Consultants Ltd is a UK and Germany based consulting firm specializing in the industrial and logistics sectors with expanding real estate services. Founded in 2013 and part of the Contollo Group, KAM offers cost management, project management, and employer’s agent services to high-profile clients. The website reflects a professional and modern digital presence with clear branding and client trust signals. Technically, the site is built on WordPress with modern web standards, Google Tag Manager for analytics, and is mobile optimized. Security posture is good with HTTPS and secure form handling, though security headers and privacy policies are lacking. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains strong. Strategic recommendations include adding privacy and cookie policies, security headers, and incident response contacts to enhance compliance and trust.

D

D & H Autocare

dandhautocare.co.uk

52

D & H Autocare is a small local automotive service provider based in Penrith, United Kingdom, specializing in MOT testing, servicing, and maintenance of cars and light commercial vehicles. The business is operated by experienced partners with over 50 years combined experience, positioning itself as a reliable and competitively priced service provider in the local market. The website is built on the IONOS MyWebsite platform and uses standard web technologies including jQuery and lightbox scripts. It is accessible, mobile-optimized, and uses HTTPS for secure communications. However, the site lacks privacy and cookie policies, security headers, and WHOIS data is unavailable due to domain registration issues, which raises some concerns about domain legitimacy. Overall, the site presents a basic but functional online presence for a small automotive business.

The website www.cocobeauty.com is currently inaccessible, presenting only a minimal HTML page with the message 'local_rate_limited', indicating that access is blocked or rate limited by a security mechanism such as a Web Application Firewall (WAF). No meaningful content, metadata, or structured data is available for analysis. The WHOIS lookup failed to return any registration information, suggesting the domain may be unregistered, expired, or otherwise not active. This severely limits the ability to assess the business, technical, and security posture of the website. The lack of HTTPS, security headers, privacy policies, and contact information further indicates a very low maturity level and raises concerns about legitimacy and trustworthiness.

The website www.kidderminstershuttle.co.uk is currently inaccessible and blocked, displaying only a minimal error message indicating that the request is blocked. The WHOIS lookup for the domain failed due to the domain name violating Nominet UK's naming rules, specifically because it contains too many parts. This indicates that the domain is not properly registered or is invalid. Consequently, no business, contact, or security-related information is available from the website or WHOIS data. The lack of accessible content and domain registration issues severely limit the ability to assess the company's market position, services, or technical infrastructure. The website does not present any metadata, scripts, or forms, and no security headers or SSL configuration details are available.

H

Hutchinson Thomas Solicitors

hutchinsonthomas.com

60

Hutchinson Thomas Solicitors is a well-established law firm based in South Wales, providing specialist commercial and individual legal services. The firm targets businesses and individuals, offering a broad range of legal advice with a focus on client satisfaction and clear communication. The website reflects a professional and consistent brand image, supported by structured data and social media presence. Technically, the site is built on WordPress using Elementor and Yoast SEO, with integrations for Google Analytics and Tag Manager, indicating a moderate level of digital maturity. Security posture is good with HTTPS enabled and GDPR-compliant cookie consent mechanisms, though improvements can be made by adding security headers and enabling DNSSEC. Overall, the website is trustworthy, professional, and compliant with privacy regulations, making it a reliable digital presence for the firm.

A

A & M Nottingham Ltd

aandmnottinghamltd.co.uk

42

A & M Nottingham Ltd is a small local garage business based in Colwick, Nottingham, specializing in servicing and maintenance of Ford, Peugeot, Toyota, and Lexus vehicles. The company targets local domestic and commercial clients offering a range of automotive services including diagnostics, MOT repairs, and tyre services. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website uses a traditional tech stack including jQuery, Bootstrap 3, and Google Analytics, with some outdated components and moderate performance. Security posture is moderate but weakened by the use of an insecure HTTP form submission endpoint and lack of security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable due to domain registration issues, which raises concerns about domain legitimacy despite the accessible and professional website content. Overall, the website is functional and credible for its business purpose but requires improvements in security and compliance to enhance trust and protect user data.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.richardsonrfpd.com is currently inaccessible due to a Web Application Firewall (WAF) or security mechanism blocking access, as evidenced by the 'Access Denied' error page referencing errors.edgesuite.net. This prevents any meaningful content or metadata extraction, severely limiting the ability to analyze the business, technical infrastructure, or security posture. The WHOIS query returned no match for the domain, indicating it may be unregistered, newly registered, or the WHOIS server is restricting access to this data. Consequently, no registrant or domain age information is available, which further complicates trust and legitimacy assessments. From a technical perspective, the lack of accessible content means no technologies, frameworks, or hosting details can be identified. The absence of security headers, SSL configuration data, or privacy and cookie policies suggests the site is either not operational or heavily restricted. No contact information or business details are present, which negatively impacts business credibility and user trust. Security posture evaluation is limited due to the blocked content, but the presence of a WAF indicates some level of security control. However, the inability to access the site content or WHOIS data raises concerns about transparency and legitimacy. No vulnerabilities or compliance gaps can be identified without access. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility due to the lack of accessible data. Strategic recommendations include ensuring the website is accessible for legitimate users and security analysts, publishing essential compliance documents, and providing clear business and contact information to improve trust and transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.whitehallgardencentre.co.uk is currently inaccessible, presenting only a minimal placeholder message indicating local rate limiting or blocking, likely due to a Web Application Firewall or security mechanism. No meaningful content, metadata, or business information is available for analysis. The WHOIS lookup failed with an error indicating the domain name violates Nominet UK's naming rules, suggesting the domain may not be properly registered or is invalid. This severely limits the ability to assess the business or technical posture of the site. From a technical perspective, the site lacks HTTPS, security headers, and any detectable technologies or frameworks. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are found. The site appears non-functional or placeholder only, with no content to evaluate for SEO, accessibility, or user experience. Security posture is weak due to the absence of HTTPS and security headers, combined with the domain registration issues. The lack of WHOIS data and domain legitimacy raises significant trust concerns. Overall, the site is not currently suitable for business or customer engagement and requires substantial remediation. Strategic recommendations include establishing a valid domain registration, implementing HTTPS and security best practices, publishing privacy and cookie policies, and providing clear business contact information to improve trust and compliance.

G

GoDaddy Operating Company, LLC

bertrams.com

62

The website forsale.godaddy.com/forsale/bertrams.com is a domain parking and sales landing page operated by GoDaddy Operating Company, LLC, a major player in the domain registration and aftermarket industry. The page offers domain acquisition services including direct purchase, leasing, and price requests, targeting domain investors and buyers. The site leverages GoDaddy's trusted brand and integrates Afternic for domain resale and Trustpilot for reputation assurance. Technically, the site is built on modern web technologies including React 18 and Next.js, hosted on GoDaddy infrastructure, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. Privacy and cookie policies are present and GDPR compliant, but no terms of service or incident response information is provided. Overall, the site is professional but basic in content and user experience, reflecting its purpose as a domain sales landing page rather than a full business site.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Angel Plastics

angelplastics.co.uk

54

Angel Plastics is a UK-based supplier specializing in plastic building materials such as guttering, fascias, soffits, cladding, and plumbing systems. The company targets construction professionals and DIY enthusiasts, operating primarily through an e-commerce platform. The website presents a professional and consistent brand image with a clear product catalog and social media presence. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google reCAPTCHA Enterprise, ensuring secure user authentication and a responsive design. Security posture is solid with HTTPS enforced and anti-bot measures on login, though additional security headers and public security policies are absent. The lack of WHOIS data due to domain registration issues limits domain trust verification, but the website content and contact information appear legitimate. Overall, the site is functional and secure with room for improvement in privacy compliance and transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

D

DMA Health & Safety Ltd

dmasafety.net

41

DMA Health & Safety Ltd is a UK-based consultancy specializing in health and safety and CDM advisory services, with over twenty years of experience serving a diverse client base including local authorities, housing associations, universities, and various commercial and industrial sectors. The company positions itself as a pragmatic and cost-effective partner, particularly for SMEs and start-ups, emphasizing proactive health and safety management. The website reflects a professional and consistent brand image, with clear contact information and a focus on the construction and real estate sectors. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and FontAwesome, and integrates Google Analytics for user tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. WHOIS data is missing, which raises some concerns about domain registration legitimacy, though the presence of a company registration number and professional website content mitigate this somewhat. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

C

Cadworks South West

cadworks-sw.co.uk

53

Cadworks South West Ltd is a small construction company established in 2006, serving clients in the construction sector. The company maintains a basic online presence through a Wix-hosted website, which provides minimal business information and lacks detailed service descriptions or contact details. The website's technical infrastructure relies on Wix's platform and standard web polyfills, with basic mobile optimization and moderate performance. Security posture is limited, with HTTPS enabled but no advanced security headers or policies implemented. The absence of privacy, cookie, and terms of service policies, along with missing contact and incident response information, indicates gaps in compliance and security readiness. Additionally, the domain WHOIS data is unavailable due to a registration error, raising concerns about domain legitimacy. Overall, the website reflects a basic digital maturity level with room for significant improvements in security, compliance, and business credibility.

J

JBC Roofing

jbcroofing.co.uk

55

JBC Roofing is a small UK-based roofing service provider offering roof repairs, installations, and maintenance. The website is built on the Wix platform and uses standard Wix technologies and scripts. The technical infrastructure is moderate with basic mobile optimization and accessibility features. Security posture is basic with HTTPS enabled but lacking advanced security headers and policies. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy. No privacy, cookie, or terms of service policies are present, and no contact information is explicitly provided. Overall, the website provides minimal business information and lacks key compliance and security features, resulting in a moderate risk profile.

The website www.rdsprojects.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any business or content information. The domain WHOIS data is unavailable and indicates registration issues, which raises concerns about the legitimacy and operational status of the domain. No metadata, structured data, or contact information is present, limiting any meaningful business or security analysis. The technical infrastructure appears minimal, with only external Google Fonts resources loaded, and no evidence of modern CMS or analytics tools. Security posture cannot be assessed due to lack of accessible content and absence of security headers or HTTPS confirmation. Overall, the site is effectively blocked, resulting in a very low trust and credibility score.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website at www.assettrail.com currently appears to be unregistered or expired based on WHOIS data, with no registrar or registrant information available. The website content is minimal, consisting only of a basic HTML skeleton with no visible business information, contact details, or user interaction elements. This suggests the domain is either parked or inactive. The technical infrastructure is limited to loading a React-based JavaScript bundle and CSS from an external domain, with no evidence of a content management system or advanced platform. Security posture is poor due to lack of HTTPS, security headers, and privacy policies. Overall, the site lacks credibility and trust indicators, making it unsuitable for business or customer engagement in its current state.

P

Pivotal Business Services Limited

pivotalbusiness.co.uk

38

Pivotal Business Services Limited is a small UK-based accounting firm offering a broad range of accountancy and taxation services tailored to sole traders, partnerships, limited companies, charities, and non-profit organizations. The company emphasizes trust, confidentiality, and personalized service, providing bookkeeping, statutory accounts, tax returns, payroll, and company formation services. The website presents a professional image with clear contact details and service descriptions, targeting small business clients in the UK. Technically, the website uses modern frontend technologies including Bootstrap, Google Fonts, and Swiper Slider, with responsive design and basic accessibility features. However, no CMS or hosting provider information is evident. Performance is moderate, and SEO optimization is basic. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and published security policies. Forms use POST methods but lack visible anti-CSRF tokens. The WHOIS data for the domain is unavailable due to a registry error indicating the domain name is invalid or improperly registered, which raises concerns about domain legitimacy. No privacy or cookie policies are present, impacting privacy compliance. Overall, the website is functional and professional but has gaps in security posture and privacy compliance. The domain registration issues warrant caution. Strategic improvements in security headers, privacy policies, and domain registration verification are recommended to enhance trust and compliance.

M

MyRuby

myruby.co.uk

67

MyRuby is a UK-based company specializing in outsourced telephone receptionist and switchboard services tailored for offices and clinics. Established in 2006, it offers dedicated live receptionists who manage calls, appointments, and administrative tasks, positioning itself as a professional and reliable partner for businesses seeking to enhance customer communication without the overhead of in-house staff. The website reflects a mature business with clear service offerings, client testimonials, and a professional digital presence. Technically, the website is built on WordPress with modern libraries such as jQuery and Font Awesome, and integrates Google Tag Manager and Google Analytics for marketing and analytics purposes. The site is hosted by Fasthosts Internet Ltd, uses HTTPS with good SSL configuration, and implements a GDPR-compliant cookie consent mechanism, indicating a good level of digital maturity and compliance. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, showing a long-standing and legitimate presence. Overall, MyRuby presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

Manzana Business Solutions Limited is a small UK-based company specializing in English-French translation and localisation services. The company offers comprehensive project management for translation, interpretation, and revision services, targeting businesses and individuals requiring bilingual communication solutions. Their website reflects a niche market position with a professional and consistent brand presence. Technically, the website is built on WordPress using common plugins such as LayerSlider and Yoast SEO, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

The website www.qvsr.org.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK's naming rules, suggesting the domain is either invalid or improperly registered. Consequently, no business information, contact details, or privacy policies are available for analysis. The technical infrastructure appears minimal with no detectable CMS, analytics, or security headers. This lack of accessible content and domain legitimacy severely limits the ability to assess the organization's market position or services. The security posture is weak due to the absence of HTTPS confirmation and security best practices. Overall, the site is effectively blocked, resulting in a very low trust and credibility score.

R

Red Cat Distribution Ltd

redcatdistribution.co.uk

59

Red Cat Distribution Ltd is a UK-based small business specializing in supplying build-to-order PCs and servers to trade clients. The company emphasizes flexible configurations, competitive pricing, and strong customer service including pre-sales consultancy and technical support. Their market position is that of a reliable and flexible supplier with comprehensive warranty and after-sales service. Technically, the website is built on the 123-Reg Website Builder platform, utilizing modern JavaScript libraries and CDN hosting, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and CAPTCHA-protected contact forms, but lacks explicit security headers and formal privacy and terms policies. Overall, the website is professional and trustworthy but could improve compliance and security practices.

J

Jaama Ltd

jaama.com

70

Jaama Ltd is a UK-based company specializing in fleet, asset, and driver management software solutions, serving a diverse range of sectors including public services, commercial fleets, construction, logistics, leasing, and rental. Established in 2004, Jaama has positioned itself as a leader in the UK fleet management market, offering scalable and integrated software solutions designed to improve operational efficiency, compliance, and cost control. Their flagship product, Key2, provides comprehensive fleet management capabilities with strong automation and integration features. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and marketing tools such as Google Analytics 4, Microsoft Clarity, and Google Tag Manager. The site is well-optimized for mobile devices, accessibility, and SEO, reflecting a mature digital presence. Hosting and DNS services involve Cloudflare, though DNSSEC is not enabled, which is a minor security improvement opportunity. From a security perspective, Jaama demonstrates a strong posture with ISO 27001 and ISO 9001 certifications, GDPR compliance, and secure hosting practices. The website enforces HTTPS and includes cookie consent mechanisms. However, explicit incident response contacts and a vulnerability disclosure policy are not publicly visible, representing areas for enhancement. Overall, Jaama's website and business presence reflect a trustworthy, professional, and secure organization with a clear focus on compliance and customer success. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing transparency around incident response to further strengthen trust and security readiness.

P

P+HS Architects

pandhs.co.uk

62

P+HS Architects is a UK-based architectural firm specializing in healthcare and residential design, with offices in Leeds, Newcastle, Stokesley, and Manchester. The company positions itself as an award-winning practice focused on creating inspiring places that enhance lives. Their website showcases a professional portfolio, news updates, and social impact initiatives, targeting clients in the healthcare and residential sectors. The firm maintains a consistent brand presence and is affiliated with recognized industry bodies such as RIBA and CIAT. Technically, the website is built on Craft CMS and leverages modern web technologies including JavaScript, Vimeo Player API, Google Tag Manager, and Mailchimp for marketing and analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and multimedia content. However, some security best practices such as implementing security headers and cookie consent mechanisms are missing. From a security perspective, the site enforces HTTPS and uses secure forms but lacks visible security headers and a published incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to domain naming rules, limiting domain registration insights, but the professional nature of the website and trust indicators mitigate concerns. Overall, P+HS Architects presents a credible and professional online presence with moderate technical maturity and a good security posture. Strategic improvements in privacy compliance and security headers would enhance their risk profile and trustworthiness.

R

R2M Ltd

r2mltd.co.uk

66

R2M Ltd is a UK-based supplier specializing in pipes, valves, and fittings for the water industry, offering extensive stock and 24/7 emergency support. The company is part of the Hawle Austria Group, a global engineering leader in water supply solutions. The website reflects a professional and well-established business with a strong focus on innovation and customer service. Technically, the site uses modern frameworks such as Vue.js and integrates privacy-compliant analytics and consent management tools. Security posture is solid with HTTPS and security headers implemented, though no explicit security policy or incident response contacts are published. The WHOIS data is unavailable due to a domain registration error, which raises some concerns but is offset by the website's professionalism and trust indicators. Overall, the site is trustworthy and well-positioned in its market niche.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Sonor Ltd

sonor.co.uk

59

Sonor Ltd is a well-established UK-based company specializing in luxury smart home design and installation services, including home cinema, multiroom audio, smart lighting, automation, and security systems. With over 20 years of experience and more than 500 projects completed, Sonor holds reputable industry certifications such as CEDIA membership and Control4 authorised dealer status, positioning itself as a trusted local specialist in Cheshire, Wirral, North Wales, and surrounding regions. The company targets affluent homeowners seeking bespoke smart home solutions tailored to their lifestyle and property. Technically, the website demonstrates a modern and professional digital presence, utilizing HTML5, CSS3, JavaScript, and integrations with Google Analytics, Google Tag Manager, and Cloudflare Zaraz for analytics and performance monitoring. The site is mobile-optimized, fast-loading, and SEO-friendly, with clear navigation and comprehensive content showcasing services, projects, and client testimonials. The contact form uses Formspree for secure data submission. From a security perspective, the website enforces HTTPS with a strong SSL configuration and employs best practices such as deferred and async script loading. However, some standard security headers like Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options are not explicitly detected and could be improved. There is no publicly available security policy or incident response contact, which could enhance trust and preparedness. Privacy and cookie policies are present and include a consent mechanism, indicating good GDPR compliance. Overall, Sonor Ltd's website reflects a high level of professionalism, trustworthiness, and technical maturity with minor areas for security enhancement. The domain registration data aligns well with the business claims, supporting legitimacy. No suspicious or malicious content was detected, and the site is safe for general audiences.

T

Titanic Brewery Co Ltd

titanicbrewery.co.uk

68

Titanic Brewery Co Ltd is a well-established brewery based in Staffordshire, United Kingdom, with a history spanning over 40 years. The company specializes in brewing multiple award-winning craft beers and operates a network of traditional pubs and cafe bars. Their business model includes manufacturing, retail via an online shop, loyalty programs, and community engagement through the Titanic Brewery Foundation. The website reflects a mature brand with consistent and professional content aimed at adult consumers interested in craft beer and hospitality experiences. Technically, the website employs a modern technology stack including jQuery, GSAP, and Google reCAPTCHA, ensuring a good user experience with mobile optimization and accessibility features. Security measures such as HTTPS, age verification, and cookie consent are implemented, though some HTTP security headers are missing and no explicit security policy or incident response contacts are published. The WHOIS data for the domain is unavailable due to a domain naming rules error, which raises concerns about domain registration legitimacy but does not detract from the professional appearance and trust signals on the website. Overall, the site scores well on content quality, technical implementation, and security posture, with room for improvement in transparency and domain registration verification.

The website www.bestworkwear.co.uk is currently inaccessible, presenting only a minimal placeholder message 'local_rate_limited' indicating that access is blocked or rate limited by a security mechanism such as a Web Application Firewall (WAF). Due to this, no meaningful website content, metadata, or business information could be extracted or analyzed. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain may be invalid or improperly registered. This raises significant concerns about the legitimacy and operational status of the website. From a technical perspective, the lack of accessible content and metadata prevents any detailed assessment of the website's infrastructure, technology stack, or digital maturity. The absence of HTTPS or security headers further indicates a poor security posture. No privacy, cookie, or terms of service policies were found, and no contact or business information is available, which severely limits trust and compliance evaluation. Security-wise, the site appears to have minimal protections in place, with no visible security best practices or incident response information. The domain registration issues and blocked content suggest a high risk of the site being non-operational or potentially fraudulent. Overall, the risk assessment is high, and the website should be treated with caution until proper registration and content accessibility are confirmed. Strategic recommendations include resolving domain registration issues, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear business contact information to improve trust and compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Q

Queensway Admin Limited

queensway.com

59

Queensway is a well-established, family-owned international hospitality group operating hotels, food & beverage businesses, and a private members’ club. The company has a strong market position with over 50 years of experience and a diverse portfolio including proprietary brands and partnerships with global brands. The website reflects a professional digital presence built on WordPress with modern technologies such as React and jQuery, and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the website is trustworthy and well-maintained but could improve in privacy and security transparency.

The website www.tmbrowneltd.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA invisible challenge, indicating the presence of a Web Application Firewall or bot protection mechanism. No actual business content, contact information, or policies are accessible, severely limiting the ability to assess the company's operations or services. The domain itself is invalid and unregistered according to the raw WHOIS data from Nominet UK, which states the domain contravenes naming rules and cannot be registered. This raises significant concerns about the legitimacy and operational status of the website and associated business. From a technical perspective, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA v3 for bot mitigation. However, no further technical or security headers information is available. The lack of visible HTTPS enforcement, security headers, or privacy policies indicates a low maturity in security and compliance posture. The website quality is poor due to minimal content and lack of navigation or business information. Security-wise, the use of Google reCAPTCHA is a positive measure against automated abuse, but the absence of other security best practices and the invalid domain registration significantly reduce trust. No contact or incident response information is provided, and no GDPR or privacy compliance indicators are present. Overall, the website presents a high risk due to its inaccessibility, invalid domain status, and lack of transparency. Strategic recommendations include resolving domain registration issues, publishing clear business and privacy information, implementing robust security headers and HTTPS, and providing accessible contact channels to improve trust and compliance.

F

FPT Asia Co., Ltd.

fpt-asia.com

50

FPT Asia Co., Ltd. is a Thailand-based company specializing in professional and innovative food processing technology solutions. They provide comprehensive services including consultancy, turnkey design, technology center facilities, and after-sales support, positioning themselves as a market leader in Asia. Their business model focuses on B2B engagements with food manufacturers and industrial clients, emphasizing quality, sustainability, and Industry 4.0 automation. The website is well-structured, professionally designed, and provides clear contact information and social media presence. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and Owl Carousel, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the business presence and content quality suggest legitimacy. Overall, the site scores well on content quality and business credibility but could improve security and privacy compliance.

The website for Scott Direct currently serves as a notice page indicating that United Tooling Solutions Limited and Grahams Machinery Sales Limited are in administration. The site provides information about the joint administrators managing the companies' affairs and includes a contact email for queries. The domain WHOIS data is unavailable, suggesting the domain may be unregistered or expired, which conflicts with the presence of the website content. Technically, the site is minimal with basic HTML and CSS, no visible scripts or analytics, and no privacy or cookie policies. Security posture is weak due to lack of visible HTTPS confirmation and security headers. Overall, the site functions as a static informational page with limited digital maturity and security controls.