High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
1,501–1,550 of 36,503
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other · United Kingdom
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website gabrielplanningsolutions.co.uk currently presents a 403 Forbidden error page, indicating that access to the site content is blocked or restricted. No business-related content, contact information, or policies are accessible, which severely limits the ability to assess the company's online presence or services. The domain is registered since 2013 with Tucows Inc, a reputable registrar, and is valid until 2027, suggesting the domain ownership is legitimate but the website is not publicly available at this time. The lack of accessible content and security headers indicates a poor security posture and technical implementation. No privacy or cookie policies are present, and no contact or incident response information is available, which raises concerns about compliance and user trust. Overall, the site is currently non-functional from a user perspective and requires significant remediation to provide business value and security assurances.
MYSON CONSULTING LTD.mysonpages.com
Technology · United Kingdom
49High
NIS2 10 · GDPR 65
NIS2 10 · GDPR 65
Myson Consulting Ltd., operating under the brand Myson Pages, is a managed IT service provider based in the Northwest of England. The company offers a comprehensive range of IT services including support, cyber security, backup and disaster recovery, Office 365 solutions, hardware supply, and hosted telephony. Their award-winning helpdesk supports over 200 clients ranging from single users to multi-site businesses and third sector organizations. The website reflects a professional and client-focused approach, emphasizing technology partnership and customer understanding. Technically, the website is built on WordPress 7.0.1 with modern JavaScript libraries such as Swiper.js, Splide.js, and GSAP for interactive elements. SEO is enhanced using the Yoast SEO plugin. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security is enforced via HTTPS, but explicit security headers are not detected, and no cookie consent mechanism is present, indicating areas for improvement in compliance and security hardening. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy. Privacy policies and GDPR compliance are addressed, but cookie consent and incident response information are lacking. Overall, the site is trustworthy and professional but would benefit from enhanced security headers, cookie consent implementation, and verified domain registration information. Strategically, Myson Consulting Ltd. should focus on improving transparency around domain registration, enhancing security policies on the website, and implementing cookie consent to strengthen GDPR compliance. These steps will improve trustworthiness and reduce potential compliance risks.
William Hunterwilliam-hunter.co.uk
Retail
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
William Hunter is a small retail business specializing in 100% natural dog chews, including products such as Deer Antler and Yak Cheese chews. The company targets dog owners and pet retailers, offering premium snacks for dogs. The website is built on WordPress using the Divi theme, with a moderate level of technical maturity and good mobile optimization. The site is accessible over HTTPS, but lacks several security headers and privacy compliance documents, which impacts its overall security posture. Contact is available only through a footer contact form, with no direct emails or phone numbers provided. The domain WHOIS data indicates registration issues, as the domain 'www.william-hunter.co.uk' is not properly registered according to Nominet UK, which raises some concerns about domain legitimacy despite the website's professional appearance.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- John Mackirdy Limited
johnmackirdy.com
Transportation · United Kingdom
39High
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
John Mackirdy Limited is a well-established haulage and transport company operating primarily in the Isle of Bute and mainland Scotland. Founded in 1870, the company offers a range of services including haulage of temperature-controlled goods, warehousing, and vehicle maintenance. The business holds notable industry awards, positioning itself as a reputable and innovative player in the Scottish haulage sector. The website reflects a professional image with clear service descriptions and contact information, targeting businesses and customers requiring transport and distribution services in the region. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be further investigated. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but the lack of security headers and cookie consent mechanisms indicates room for improvement in compliance and security best practices. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security features.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- PPolar Heating & Hot Water Ltd
polarheating.co.uk
Energy · United Kingdom
42High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Polar Heating & Hot Water Ltd is a small, local plumbing and heating service provider based in Radcliffe, Bury, UK. The company offers a wide range of services including boiler installation, repair, servicing, central heating, radiators, and gas appliance installation. With over 20 years of experience and accreditations such as Gas Safe registration and Worcester Bosch and Baxi approvals, the business positions itself as a reliable and professional service provider in the local market. The website content is focused on informing potential domestic and commercial clients about their services and contact options. From a technical perspective, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks HTTPS and security headers, which negatively impacts its security posture. Mobile optimization and accessibility are basic, and SEO practices are minimal. There is no evidence of analytics or tracking technologies, and no privacy or cookie policies are present, indicating low privacy compliance. Security-wise, the absence of HTTPS and security headers, along with no visible incident response or vulnerability disclosure policies, suggests a low security maturity level. The website does not expose sensitive data but lacks modern security best practices. The WHOIS lookup failed due to an invalid query for the 'www' subdomain, limiting domain registration verification and reducing trustworthiness from a domain perspective. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and protect users. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and improving mobile and accessibility features.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Swish Building Productsswishbp.co.uk
Manufacturing · United Kingdom
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Swish Building Products is a UK-based manufacturer specializing in UPVC fascias, soffits, gutters, cladding, and window boards primarily serving social housing, newbuild, and trade construction markets. The company operates under Specialist Building Products Limited, a subsidiary of the Epwin Group, and emphasizes environmentally responsible manufacturing practices, including the use of Octyl Tin stabilizers and multiple Environmental Product Declarations (EPDs). Their website provides comprehensive product information, technical support, and installer locator services, targeting construction professionals and industry stakeholders. Technically, the website is built on the Concrete5 CMS platform, utilizing modern frontend technologies such as jQuery, Foundation CSS, and Font Awesome. The site is mobile-optimized with good navigation and SEO practices. Security measures include HTTPS enforcement and CAPTCHA on forms, though explicit security headers are not detected. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. However, the WHOIS lookup for the domain failed due to a domain naming error, which raises concerns about domain registration legitimacy. Despite this, the website content and business information align with a legitimate, established company. Overall, the site scores well on content quality, technical implementation, and business credibility but is slightly penalized for WHOIS inconsistencies and missing security headers. Strategically, Swish Building Products should focus on enhancing security headers, publishing explicit security and incident response policies, and resolving domain registration issues to strengthen trust and compliance. These improvements will support their market position and digital maturity while mitigating potential risks.
- Carlain Student Houses
carlainproperty.co.uk
Real Estate · United Kingdom
42High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Carlain Student Houses operates as a specialist provider of student accommodation in Cheltenham, Gloucestershire, and Oxford. The company focuses on renting quality student houses located near college campuses, targeting students seeking convenient and comfortable living arrangements. Their market position is that of a niche real estate letting agency with a strong local presence and a portfolio of properties tailored to student needs. The website reflects a professional business model centered on property lettings and management services, supported by social media engagement and certifications that enhance trust. Technically, the website employs a moderately modern infrastructure including jQuery, Google Tag Manager, Google Analytics, and Google reCAPTCHA v3 for form security. The CMS appears to be CMS Made Simple, which is a common but somewhat dated platform. The site is mobile-optimized with good navigation and SEO practices, though some technical improvements could be made, such as updating libraries and adding security headers. From a security perspective, the site benefits from HTTPS and anti-bot measures on forms but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance. The absence of WHOIS data and domain registration details is a notable concern, potentially indicating domain registration irregularities. However, the website content and business information are consistent and professional, mitigating some trust concerns. Overall, the site presents a low to moderate risk profile with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, updating technical components, and clarifying domain registration information to strengthen legitimacy and trust.
- Adapt Design and Advertising Limited
adaptdesign.com
Other · Jersey
48High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Adapt Design and Advertising Limited is a small creative agency based in Jersey, Channel Islands, specializing in design, advertising, brand identity, print, and website development. Established in 1997, the company serves startups, large businesses, and marketing teams with a comprehensive suite of creative services. Their market position is strengthened by a long-standing local presence and referrals extending beyond Jersey. The website reflects a professional and consistent brand image with extensive service offerings and client testimonials, indicating a trustworthy and credible business. Technically, the website employs common industry tools such as Google Analytics, Google Tag Manager, jQuery, Owl Carousel, and Revolution Slider. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. However, no CMS or hosting provider details are evident, and some modern security best practices like security headers are missing. From a security perspective, the website uses HTTPS (implied by external scripts loaded over HTTPS), but lacks visible security headers and explicit incident response or security policy information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts trustworthiness. Privacy and cookie policies exist but lack active consent mechanisms, indicating partial GDPR compliance. Overall, the website presents a professional and content-rich experience with moderate technical maturity and some security gaps. The missing WHOIS data and limited security policies suggest areas for improvement to enhance trust and compliance. Strategic recommendations include implementing security headers, enforcing cookie consent, clarifying domain registration details, and enhancing incident response readiness.
Stack Communications Ltdstackagency.co.uk
Other · United Kingdom
49High
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Stack Communications Ltd appears to be a UK-based communications or agency service provider founded in 2023. The website content is minimal but indicates a professional service offering. However, the domain WHOIS data is unavailable due to a domain registration error indicating the domain name contains too many parts and cannot be registered. This raises concerns about the domain's legitimacy and registration status. Technically, the website uses Bootstrap 3.3.7 and standard web technologies but lacks modern security features such as HTTPS and security headers. No privacy or cookie policies are present, and no contact information or social media links are found, limiting trust and compliance indicators.
- CCAMB Machine Knives International Limited
camb-knives.co.uk
Manufacturing · United Kingdom
49High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
CAMB Machine Knives International Limited is a UK-based manufacturer specializing in high-quality machine knives with over 25 years of experience. The company serves a global industrial audience, exporting to over 20 countries and providing additional services such as regrinding and re-sharpening of blades. Their website reflects a professional business with a clear product range and international agent network, positioning them as an established player in the manufacturing sector. Technically, the website is built on the concrete5 CMS platform and employs common web technologies including jQuery and Google Analytics. While the site is functional and moderately optimized for mobile, it uses an older CMS version and lacks some modern security headers and accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of a published security policy and incident response contact reduces transparency. The WHOIS data for the domain is unavailable and indicates the domain name is invalid under Nominet UK rules, which raises concerns about domain legitimacy despite the professional website presence. Overall, the site is safe, business-focused, and trustworthy in content but would benefit from improved privacy compliance and security transparency.
Queen's Arms E17queensarms-e17.co.uk
—
45High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
35High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.freelance-holidays.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any business or service content. The domain WHOIS lookup failed due to the domain name contravening Nominet UK's naming rules, indicating the domain is invalid or improperly registered. Consequently, no registrant or business information is available. The site lacks any privacy, cookie, or terms of service policies, and no contact information or interactive elements are present. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern security headers or HTTPS confirmation. Overall, the website is non-functional and does not provide any business or security assurances.
Group Finance Solutions Consultinggroupfinancesolutions.com
Government · United Kingdom
45High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Group Finance Solutions Consulting (GFSC) is a specialist ERP advisory consultancy focused on supporting UK public sector and enterprise organizations. They provide independent, client-side advisory services across the full ERP program lifecycle, including ERP selection, implementation advisory, transformation, and Oracle Cloud expertise. The company positions itself as a trusted advisor helping organizations adopt best-practice cloud solutions and successfully deliver complex ERP programs. The website content is professional, well-structured, and targets UK public sector and enterprise clients. Technically, the website is built on WordPress using the Kadence theme and Kadence blocks, with modern web technologies such as lazy loading and Google Fonts. While the site is mobile-optimized and SEO-friendly, some technical improvements are possible, including configuring analytics properly and adding security headers. The site uses HTTPS, ensuring secure communication. From a security perspective, the site shows good basic practices but lacks visible security headers and formal privacy or cookie policies. The WHOIS data is missing or unavailable, which is a significant concern regarding domain legitimacy and trust. No signs of WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the site is a credible business presence with room for improvement in privacy compliance and security hardening. The missing WHOIS data warrants further investigation to confirm domain registration legitimacy.
Other
38High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.pawb.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. Due to this restriction, no business information, contact details, or service descriptions are available for analysis. The lack of accessible content and metadata severely limits the ability to assess the company's market position or business model. Technically, the site does not expose any scripts, analytics, or external links, indicating minimal digital footprint in its current state. Security posture cannot be evaluated due to absence of headers or SSL information, and the WHOIS data is unavailable due to a malformed request response, further complicating legitimacy assessment. Overall, the site appears to be protected by access control mechanisms or firewall rules that prevent public access, resulting in a very low trust and credibility score.
- AAlchemy 3dc
alchemy3dc.co.uk
Media · United Kingdom
44High
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Alchemy 3dc is a specialized model and prop making company based just outside London, with over 25 years of experience serving diverse industries including film, TV, advertising, exhibitions, and industrial sectors. Their portfolio includes notable projects for major film franchises and broadcasters, positioning them as a trusted provider in the media production space. The website is built on WordPress using modern plugins and frameworks, providing a professional and user-friendly experience with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit policies are recommended. The WHOIS data query failed due to an invalid domain format, but the website content and branding strongly indicate a legitimate and established business. Overall, the site demonstrates a solid digital presence with room for enhanced security and compliance documentation.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
MWM Distributors Ltdmwmdistributorsltd.co.uk
Energy · United Kingdom
37High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
MWM Distributors Ltd is a UK-based small business specializing in the distribution of plumbing fittings and water utility products. The company targets the plumbing trade and water utilities industry, offering a range of standard and non-standard products, many of which hold WRAS and NSF approvals. The website presents a professional and consistent brand image with clear product categories and contact information. Technically, the site is built on WordPress using popular plugins such as Slider Revolution and WPBakery Page Builder, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy and cookie policies, indicating compliance gaps. The WHOIS lookup failed due to domain naming errors, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and trustworthy from a business perspective but requires improvements in security and compliance documentation.
- SOLO
soloseasalt.com
Retail
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.soloseasalt.com represents a small business focused on manufacturing and distributing a reduced sodium sea salt product called SOLO®. The product is positioned as a healthier alternative to ordinary salt, targeting consumers, food manufacturers, and food service providers. The site content is professional and includes a testimonial from the Vegetarian Society, enhancing trust. However, the website lacks critical business contact information and privacy-related policies, which limits user trust and compliance. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Modernizr, Foundation, and video playback tools, hosted on a GoDaddy-secured server. Google Analytics is employed for user tracking, but privacy compliance is minimal. Security posture is moderate with no visible security headers or HTTPS verification in the provided data. The WHOIS lookup failed to retrieve domain registration data, raising concerns about domain legitimacy and ownership transparency.
Other
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.aspectelectrical.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The domain WHOIS lookup failed with an error indicating the domain name contains too many parts and cannot be registered under Nominet UK rules, suggesting the domain is invalid or misconfigured. No metadata, contact details, privacy policies, or scripts were found, indicating the site is not operational or publicly accessible. The lack of HTTPS and security headers further highlights the absence of a secure and compliant web presence. Overall, the site does not provide any usable business or security information, severely limiting any meaningful analysis.
- TTJ Williams Ltd
tjwilliams.co.uk
Manufacturing · United Kingdom
48High
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
TJ Williams Ltd is a well-established UK-based manufacturer specializing in precision handcrafted pressure, level, and temperature instrumentation with over 150 years of industry presence. The company offers a comprehensive range of products including pressure gauges, calibration and repair services, bespoke designs, and acts as an official distributor for Kobold UK. Their market position is strong within the industrial manufacturing sector, targeting engineers and industrial clients requiring reliable instrumentation solutions. Technically, the website is built on a modern WordPress CMS with WooCommerce integration, leveraging Themify Ultra theme and jQuery libraries. The site is hosted via Cloudflare, ensuring good performance and security at the network level. Mobile optimization and SEO practices are well implemented, although accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several recommended security headers and a cookie consent mechanism, which impacts GDPR compliance. No explicit security policies or incident response contacts are published, indicating room for improvement in security transparency and readiness. Overall, the website is professional, trustworthy, and business-focused with a solid technical foundation. Strategic enhancements in privacy compliance and security best practices would further strengthen the company's digital maturity and customer trust.
- CCar Concierge
carconciergeservice.co.uk
Transportation · United Kingdom
48High
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Car Concierge, operating under the brand Abels Car Concierge Service, is a UK-based company specializing in premium vehicle storage, transportation, and shipping services. Established since at least 2010, the company holds a prestigious Royal Warrant, underscoring its reputation for quality and reliability. The website clearly targets vehicle owners seeking secure and professional car storage and transport solutions across the UK, Europe, and worldwide. The business model focuses on service provision with a strong emphasis on trust and heritage. Technically, the website is built on WordPress with a moderate technology stack including popular plugins for analytics, forms, and UI enhancements. The site is moderately optimized for performance and mobile use, with good SEO practices evident in metadata and structured data. However, accessibility and advanced mobile optimization are basic. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced HTTP security headers and visible security policies. From a security and compliance perspective, the site does not display explicit privacy or cookie consent mechanisms, which may pose GDPR compliance risks. There is no published incident response or vulnerability disclosure information. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is professional and trustworthy but could improve in privacy compliance and security transparency. Strategically, the company should prioritize implementing cookie consent and privacy enhancements, publish clear security policies, and adopt security headers to strengthen its security posture and regulatory compliance. These improvements will enhance customer trust and reduce risk exposure.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Home - Unicut Precisionunicutprecision.com
—
47High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
- JJack Brand Ltd
jackbrandltd.co.uk
Manufacturing · United Kingdom
38High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Jack Brand Ltd is a traditional family-run poultry processing company based in Suffolk, UK, with a long history of over 100 years. The company supplies fresh and frozen poultry products, including Halal options, to wholesalers, caterers, and processors. The website content reflects a medium-sized manufacturing business with a significant production volume and turnover. Technically, the website uses older JavaScript libraries (Prototype.js and Scriptaculous) and lacks modern security features such as HTTPS and security headers. The site is accessible without WAF or blocking mechanisms but shows no privacy or cookie policies, and no contact information is explicitly provided. The WHOIS lookup failed due to domain registration issues, indicating the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy despite the professional business content. Overall, the website has basic design and navigation but requires significant improvements in security, privacy compliance, and domain registration legitimacy.
- SScheduled Maintenance
packology.com
Other
49High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.packology.com currently displays only a scheduled maintenance placeholder page with minimal content and no business or contact information. The lack of WHOIS data suggests the domain may not be registered or the data is unavailable, raising concerns about the legitimacy and operational status of the website. Technically, the site uses WordPress CMS and includes a JavaScript timer script, but lacks security headers, privacy policies, and contact details, indicating a low level of digital maturity. The security posture is weak due to absence of HTTPS confirmation and security best practices. Overall, the site is not currently functional for business purposes and lacks trust signals.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- TTHE RECTORY CARE HOME
weebly.com
Healthcare
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
The Tythegston Estatetythegston.com
Real Estate · United Kingdom
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Tythegston Estate operates a family-run real estate rental business specializing in cottages and industrial estate properties located in South Wales near the M4 motorway and the coast. The website presents a professional and consistent brand image emphasizing the estate's long family history and high-quality rental properties. The target audience includes individuals and families seeking rural rental homes with convenient transport links. Technically, the website is built on the Concrete5 CMS with the Foundation framework, uses jQuery, and integrates Google Analytics for visitor tracking. The site is served over HTTPS, ensuring secure connections, but lacks some security headers and privacy-related policies. Security posture is moderate with no visible vulnerabilities, but improvements are recommended in privacy compliance and security best practices. The absence of WHOIS data for the domain is a concern and warrants further verification to confirm domain legitimacy. Overall, the website is functional, trustworthy in content, but could improve in compliance and security transparency.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Direct Vehicle Glassdirectvehicleglass.co.uk
Transportation · United Kingdom
45High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Direct Vehicle Glass is a well-established UK-based company specializing in mobile windscreen repair and replacement services, primarily serving Liverpool, Warrington, Manchester, and the wider North West region. The company positions itself as a leading independent automotive glazing provider with a focus on quality and responsiveness. Their key services include private and commercial vehicle glass repair, fleet cover, and advanced driver assistance system (ADAS) calibration. The website reflects a medium-sized business with a professional online presence and multiple insurance partnerships that enhance trustworthiness. Technically, the website is built on WordPress and utilizes modern web technologies such as jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile-optimized with good SEO practices implemented via Yoast SEO. Performance is moderate, and accessibility is basic but functional. The site uses HTTPS with an excellent SSL configuration, though it lacks some security headers that could improve its security posture. From a security perspective, the site demonstrates good baseline practices such as HTTPS and no visible sensitive data exposure. However, it lacks published security policies, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and user trust. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the business claims, indicating legitimacy and a strong trust foundation. Overall, the website is professional, credible, and secure enough for its business purpose but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.
FareSharefareshare.org.uk
Non-profit · United Kingdom
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.butterfieldmarketing.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The WHOIS lookup for the domain failed, indicating that the domain may not be registered or the data is unavailable, which raises significant concerns about the legitimacy and operational status of the website. No metadata, contact details, or business descriptions are present, preventing any meaningful assessment of the company's market position or services. Technically, the site lacks any detectable technologies, scripts, or security headers, and no SSL or HTTPS information is available, suggesting a minimal or non-existent digital infrastructure. The security posture is poor due to the lack of accessible content and absence of security best practices. Overall, the site presents a high risk and low trust profile, with critical recommendations to register the domain properly, enable HTTPS, and provide transparent business and security information.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.directeng.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed with an error indicating the domain name is invalid under Nominet UK naming rules, suggesting the domain may not be properly registered or is misconfigured. Due to the lack of accessible content, no business information, contact details, or policies are available for analysis. The technical infrastructure appears minimal with only Google Fonts loaded externally, and no security headers or HTTPS information is present in the provided data. This results in a very low confidence in the website's operational status and legitimacy. From a security perspective, the absence of HTTPS, security headers, and privacy compliance measures indicates a poor security posture. The lack of contact or incident response information further limits trust and compliance assessment. Overall, the site appears either offline, blocked, or misconfigured, and the domain registration issues raise legitimacy concerns. Strategically, the business should address domain registration compliance, ensure the website is accessible with proper HTTP status codes, implement HTTPS with valid SSL certificates, and publish essential policies and contact information to improve trust and compliance. Until these issues are resolved, the website cannot be reliably assessed or trusted.
Jetting Systemsjettingsystems.co.uk
Transportation · United Kingdom
48High
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Jetting Systems is a specialized manufacturer of high-pressure water jet cleaning machines focused on rubber and paint removal for airports and highways. Established in 2003, the company holds a strong market position with worldwide customers and a dedicated professional team. Their product offerings include advanced ultra-high-pressure water jet systems that efficiently remove rubber deposits and paint markings without damaging surfaces, catering primarily to transportation infrastructure sectors. The website reflects a professional digital presence built on WordPress with modern plugins and a clear focus on product and service information. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is credible and trustworthy with good business and technical quality but could improve compliance and security transparency.
- MMy Blog | My WordPress Blog
lussointerior.com
Other
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website lussointerior.com is a newly created WordPress blog using the Divi theme, launched in June 2024. It currently contains minimal content with no clear business description or services offered. The site appears to be in an early development or placeholder state, lacking essential business and compliance information such as privacy policies, cookie consent, and contact details. Technically, the site uses standard WordPress technologies with jQuery and Google Fonts, hosted on HostGator servers. HTTPS is enabled, but no advanced security headers or DNSSEC are implemented, indicating a basic security posture. There are no visible analytics or advertising technologies in use, and social media links are present but mostly placeholders. Overall, the site has low content quality and business credibility, with significant room for improvement in security and compliance.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Blog Town Hubblogtownhub.com
Media
46High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Blog Town Hub operates as a niche content platform specializing in guest posting and providing high-quality dofollow backlinks across multiple niches. The website targets content creators, marketers, and SEO professionals seeking to enhance their online presence through guest articles. The business model centers on content publishing and backlink services, positioning itself as a specialized media hub with a small but focused market presence. Technically, the site is built on WordPress with Elementor and Yoast SEO, leveraging modern web technologies and integrations such as Google Analytics and Tag Manager. Hosting is provided by FastCloudServer, and the site employs HTTPS with a good SSL configuration. Security posture is moderate, with HTTPS and reCAPTCHA implemented, but lacks DNSSEC and comprehensive security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the site is functional, professionally designed, and safe for general audiences but requires improvements in privacy and security policies to enhance trust and compliance.