Security Directory

I

Innovation Group

innovation.group

76

Innovation Group is a leading global technology company specializing in insurance technology solutions, delivering pioneering platforms and operational support to insurers, fleet managers, and automotive manufacturers. Their flagship Gateway platform offers end-to-end claims management and connectivity solutions, positioning them as a key player in the InsureTech sector. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their target audience. Technically, the site is built on WordPress with modern integrations such as Google Analytics and Iubenda for privacy compliance, hosted on Microsoft Azure infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. WHOIS data is privacy protected, which is typical for technology companies, but limits transparency. Overall, the site demonstrates a high level of professionalism and trustworthiness, suitable for their enterprise-level clientele.

D

Doors of Distinction

doorsofdistinction.co.uk

60

Doors of Distinction is a UK-based specialist supplier of quality timber internal and external doors with over 30 years of industry experience. The company offers a broad range of products including oak, walnut, fire, white primed, glazed doors, and door hardware from leading manufacturers. Their market position is that of a reputable, established supplier serving homeowners, builders, and retailers across the UK. The website demonstrates a moderate level of digital maturity, utilizing common web technologies such as jQuery, Google Analytics, Google Tag Manager, and a cookie consent management system. The site is accessible, professionally designed, and provides clear navigation and contact information. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced HTTP security headers and detailed security policies. The WHOIS data for the domain is incomplete and inconsistent, which raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy from a business perspective but would benefit from improved security practices and domain registration transparency.

H

HighView Motors

highviewmotors.co.uk

40

HighView Motors is a small independent automotive garage based in Kingsbury, London, specializing in MOT testing, car servicing, diagnostics, and repairs for premium brands such as BMW, Mercedes, Audi, and Volkswagen, as well as all other makes and models. The company has a well-established online presence with a professional WordPress-based website that provides clear contact information and service descriptions, targeting local vehicle owners seeking reliable automotive services. The website employs modern technologies including WordPress CMS, popular plugins like Slider Revolution and WPBakery Page Builder, and integrates Google Analytics for visitor tracking. Security measures include HTTPS enforcement and use of Google reCAPTCHA on forms, but lack explicit privacy and cookie policies, which are important for GDPR compliance. The domain is registered since 2006 with Fasthosts Internet Ltd, indicating a stable and legitimate business operation. Overall, the website is professional and functional but could improve privacy compliance and security transparency.

J

Jangro

jangro.net

63

Jangro is a leading UK and Ireland-based distributor specializing in catering, janitorial, and cleaning supplies. The company operates the largest network of independent janitorial distributors in the region, offering a wide range of products including cleaning chemicals, equipment, healthcare supplies, and sustainable products. Their website serves as a comprehensive e-commerce platform built on Magento, featuring extensive product catalogs and customer account management capabilities. The business targets commercial and institutional customers requiring cleaning and hygiene solutions. Technically, the website employs modern web technologies such as RequireJS, KnockoutJS, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and search functionalities. Security-wise, the site enforces HTTPS and uses form keys to protect against CSRF, but lacks explicit security headers and a published security policy or incident response contact. The absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency, although the active and professional online presence supports legitimacy. Overall, the site demonstrates a mature digital infrastructure suitable for a large retail distributor but could improve security posture and transparency.

T

TFM Farm & Country Superstore

tfmsuperstore.co.uk

47

TFM Farm & Country Superstore operates as a leading UK retailer specializing in farm, agricultural, and countryside supplies. The company offers a broad range of products through an e-commerce platform supported by physical stores, targeting farmers and countryside enthusiasts. The website is built on WordPress with WooCommerce, leveraging modern web technologies such as Bootstrap, jQuery, and SEO tools like Yoast. Analytics and user behavior tracking are implemented via Google Tag Manager and Hotjar, indicating a focus on digital marketing and user experience optimization. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. The WHOIS lookup failed due to domain registration issues, raising concerns about domain legitimacy that should be addressed promptly. Overall, the website presents a professional and functional retail platform with room for improvement in security and privacy compliance.

A

AMT-Sybex

amt-sybex.com

73

AMT-Sybex is a specialized provider of enterprise asset management (EAM) and mobile solutions, primarily serving asset intensive businesses in the energy, water, and transportation sectors. The company operates as part of Jonas Computing (UK) Limited and has a strong market position supported by over 25 years of industry experience. Their offerings include proprietary EAM software, mobile geospatial solutions, and comprehensive implementation and managed services. The website reflects a professional and well-established business with ISO 9001 and ISO 27001 certifications, indicating a commitment to quality and information security.

F

Feridax (1957) Ltd

feridax.com

52

Feridax (1957) Ltd is a well-established UK-based wholesaler specializing in motorcycle clothing and accessories. With a history dating back to 1957, it holds a strong market position as the largest independent value-added wholesaler in its sector, servicing over 1,200 dealers across the UK, Ireland, and Channel Islands. The company offers a broad portfolio of premium brands and products, supported by a dedicated team and substantial warehousing facilities. Technically, the website is built on WordPress using the Avada theme and integrates several marketing and analytics tools, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS and form protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic but present, with cookie consent and a privacy policy available. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility and business goals.

R

RK Kutting

kutting.co.uk

71

RK Kutting is a medium-sized, family-owned manufacturing company specializing in fluid technology solutions, including hoses, fittings, and custom products tailored for various industrial applications. The company positions itself as a quality and innovation-focused supplier serving B2B clients in manufacturing and related sectors. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting industrial customers. Technically, the website is built on the TYPO3 CMS platform and employs a modern technology stack including jQuery, Bootstrap, and various UI libraries. Hosting is provided by 1und1, and the site demonstrates good mobile optimization and SEO practices. Cookie consent is managed via Cookiebot, ensuring GDPR compliance. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms. However, it lacks some advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Analytics usage is moderate with Google Analytics tracking, disclosed properly in the cookie policy. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The risk profile is low, with recommendations to enhance security headers and publish security policies to further strengthen the security posture.

P

Park School (Bournemouth) Ltd

parkschool.co.uk

69

Park School (Bournemouth) Ltd operates a well-established independent co-educational day school serving children aged 0-11 in Bournemouth, Dorset. Founded in 1928, it holds a strong market position as a leading prep school with a reputation for academic excellence, pastoral care, and a supportive community. The website reflects a professional and comprehensive presentation of their educational services, including nursery and prep school offerings, co-curricular activities, and community engagement. Technically, the site is built on a Juniper Websites CMS platform, leveraging modern JavaScript libraries such as jQuery, Owl Carousel, and FontAwesome for UI and interactivity. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and rich content. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data due to domain naming rules violation is a concern, though the website content and business information appear legitimate. Overall, the site demonstrates a mature digital presence suitable for its educational audience, with room for improvement in security transparency and domain registration clarity.

W

William Haley Engineering Limited

haleyengineering.co.uk

50

William Haley Engineering Limited is a well-established UK-based structural steel contractor and erector, operating since 1998. The company positions itself as one of the largest in the UK, offering fabrication, erection, metal decking, and edge protection services primarily targeting construction industry clients and project managers. Their website reflects a professional and consistent brand image, supported by testimonials and a clear business vision emphasizing sustainability and quality. Technically, the website is built on WordPress using modern plugins such as Elementor and Yoast SEO, with Google Analytics integrated for visitor tracking. The site is hosted by GoDaddy and uses HTTPS with a good SSL configuration, although it lacks some advanced security headers and cookie consent mechanisms. Security posture is solid but could be improved by publishing explicit security policies and implementing cookie consent to enhance GDPR compliance. Overall, the website is trustworthy, professional, and well-optimized for SEO and mobile devices.

A

AJ Marshall

ajmarshall.com

57

AJ Marshall is a well-established UK-based steel stockholder specializing in high-performance steel plates including abrasion resistant, high strength, Corten weathering, and manganese steel. With over 40 years of industry experience and a large warehouse stock, the company serves manufacturing, construction, and engineering sectors nationwide. Their business model focuses on providing quality steel products with flexible ordering options and nationwide delivery, positioning them as a leading independent steel supplier in the UK. The website reflects a professional digital presence built on WordPress with modern technologies and integrated analytics and consent management tools. Security posture is solid with HTTPS and anti-spam measures, though some advanced security headers and DNSSEC are missing. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the site is trustworthy, user-friendly, and aligned with business goals.

M

Mockridge Labels & Nameplates Ltd

mockridge.com

67

Mockridge Labels & Nameplates Ltd is a well-established UK-based manufacturer specializing in high-quality custom labels and nameplates. Founded in 1966, the company holds a leading market position in bespoke label manufacturing, offering a wide range of products including digital labels, domed labels, screen printing, anodised and etched nameplates, asset labels, and roll labels. Their target audience primarily consists of businesses requiring durable and visually appealing product identification solutions. The company demonstrates strong trust indicators such as ISO 9001 and UL certifications, Chamber of Commerce membership, and a comprehensive privacy and cookie compliance framework. Technically, the website is built on WordPress with Oxygen Builder, leveraging modern analytics and marketing tools like Google Analytics, Hotjar, and Facebook Pixel, and is hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS enforced, domain locking, and consent management, though DNSSEC is not enabled and no public security policy or incident response plan is found. Overall, the website is professional, secure, and compliant, reflecting a mature digital presence aligned with business credibility.

Jeep UK operates as a prominent automotive brand specializing in 4x4 vehicles, including hybrid and electric models, targeting consumers in the United Kingdom. The website reflects a mature digital presence with a focus on vehicle sales, brochure downloads, and dealer engagement. The technical infrastructure leverages Adobe Experience Manager CMS, Google Tag Manager, Adobe DTM, and other modern marketing technologies, indicating a well-maintained and scalable platform. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers and explicit security policies are not evident. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting Jeep's market position as a leading automotive brand in the UK.

T

TIMET

timet.com

68

TIMET is a leading global manufacturer and supplier of titanium mill and melted products, serving key industrial sectors such as aerospace, defense, and commercial industries. Established in 1950, TIMET holds a significant market position supplying nearly one-fifth of the world's titanium, with production facilities in the United States and Europe. The company operates under the parent organization Precision Castparts Corp., reflecting a large enterprise scale and strong industry presence. The website content is professional, well-structured, and targets industrial customers and partners.

N

National Association of State Boards of Education

nasbe.org

52

The National Association of State Boards of Education (NASBE) is a specialized non-profit organization dedicated to supporting state boards of education across the United States. Their website clearly communicates their mission to advance equity and excellence in public education through policy support, resources, and professional development. The organization targets state education policymakers and board members, providing them with publications, events, and policy databases. The site is professionally designed, well-structured, and mobile-optimized, reflecting a mature digital presence. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and FontAwesome, hosted likely on DigitalOcean infrastructure. It uses Google Analytics for tracking and includes standard JavaScript libraries. Performance and accessibility are good, though some security best practices like security headers are missing. The site uses HTTPS and implements safe link practices. From a security perspective, the site has a solid foundation with HTTPS and no visible vulnerabilities or exposed sensitive data. However, it lacks visible privacy and cookie policies, security headers, and incident response or vulnerability disclosure information, which are important for compliance and trust. The WHOIS data is unavailable due to a malformed query or privacy protection, which reduces transparency but does not necessarily indicate malicious intent. Overall, NASBE's website is a trustworthy and professional platform serving a niche educational audience. Strategic improvements in privacy compliance and security headers would enhance its security posture and user trust.

H

Hammonds Photography Studio

hammonds-studio.com

59

Hammonds Photography Studio is a small, award-winning professional photography business based in Chelmsford, Essex, UK, established in 2010. The company offers a wide range of photography services including portraits, family shoots, newborn photography, makeovers, and commercial photography. The website presents a professional and well-structured digital presence with good content quality and clear navigation tailored to local clients. Technically, the site uses standard web technologies and integrates social media tools such as Facebook Customer Chat, but lacks advanced security headers and visible privacy policies. The absence of WHOIS domain registration data raises concerns about domain legitimacy, although the business content and certifications suggest a credible operation. Overall, the site is functional and trustworthy but would benefit from improved transparency and security practices.

Sir John Fitzgerald Pubs is a well-established hospitality business operating multiple pub venues in Newcastle and the North East of the UK, specializing in locally sourced cuisine and quality local ales. The website is built on WordPress using Elementor and integrates common plugins for SEO and user experience. The site is professionally designed with good navigation and mobile optimization, providing a positive user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears credible and trustworthy with a strong regional presence, but should improve privacy and security disclosures to enhance compliance and user trust.

Atlantic Bay (Hitchin) is a small local food takeaway business specializing in kebabs, healthy options, fish and chips, English food, desserts, and fast food sweets. The website targets local customers in Hitchin, UK, offering online ordering for delivery and collection. The business appears to be recently established in 2021, with a clear focus on serving the local community with affordable and popular takeaway food options. Technically, the website uses a modern tech stack including Bootstrap, jQuery, FontAwesome, and integrates marketing and analytics tools such as Google Analytics, Zoho SalesIQ, and MoEngage. The site is hosted via Cloudflare, ensuring good performance and security at the infrastructure level. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy policy and terms linked but no detailed GDPR compliance statements or data protection officer information. Overall, the site is functional, professional, and trustworthy for its business scope but could improve in security and privacy transparency.

Maison Care Ltd is a UK-based healthcare service provider specializing in care for individuals with learning and physical disabilities, complex needs, and autistic spectrum disorders. The company operates multiple residential care homes and supported living services, emphasizing person-centered care and positive behaviour support. The website reflects a well-established business with over 25 years of experience and a clear focus on delivering quality care services. Technically, the website is built on WordPress with Bootstrap and jQuery, utilizing several plugins for functionality such as sliders and contact forms. While the site is functional and provides a good user experience, it uses outdated software versions which pose security risks. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks visible security headers and uses outdated libraries. No critical vulnerabilities were detected in the content, but updating the platform and implementing security best practices is recommended to improve the security posture. Overall, the website is credible and professional, with clear business information and contact details. The WHOIS data query failed due to an invalid domain query for the 'www' subdomain, but the main domain appears legitimate and consistent with the business. Strategic improvements in security and privacy compliance would enhance trust and reduce risk.

ZFA Group is a modern property management company operating primarily in London and Dublin, offering services such as guaranteed rent, free maintenance, tenant sourcing, and hospitality management. The company positions itself as a trusted and fast-growing player in the residential asset management sector, managing over 1,300 properties valued at approximately £500 million. Their website reflects a professional business with clear service offerings and customer testimonials, targeting landlords and tenants seeking reliable property management solutions. Technically, the website employs a modern front-end stack including jQuery, Bootstrap, Google Analytics, and Google Tag Manager, with asynchronous script loading to optimize performance. The site is mobile responsive and SEO optimized, though accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of privacy and cookie policies and no incident response contact details indicate gaps in compliance and security transparency. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trustworthiness and reduce risk exposure.

B

BARTEC

bartec.de

61

BARTEC is a well-established global leader in explosion protection and industrial safety solutions, founded in 1975 and operating with a large international footprint. The company offers a broad portfolio of certified products and customized solutions targeting industries such as energy, chemical, pharma, manufacturing, and logistics. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to engineers, plant operators, and safety professionals. Technically, the site is built on WordPress with modern frameworks and integrates advanced analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and consent management, though DNSSEC is not enabled and some security headers are not evident. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, BARTEC demonstrates high business credibility and trustworthiness with consistent branding and active social media engagement.

S

Scarisbrick Hall School

scarisbrickhallschool.co.uk

44

Scarisbrick Hall School is a well-established independent educational institution in the North West of England, offering personalized education from nursery through to sixth form. The school positions itself as a top-tier independent school with excellent academic results and a strong reputation, supported by an ISI Grade 1 rating. The website reflects a professional digital presence built on WordPress with modern plugins and SEO optimizations. Social media integration and testimonials enhance trustworthiness. However, the absence of WHOIS data due to domain naming rules limits domain registration verification. Security posture is good with HTTPS and no obvious vulnerabilities, but cookie consent mechanisms and security headers could be improved. Overall, the site is suitable for its target audience of parents and students seeking quality independent education.

M

Motormech Guildford Limited

motormechguildford.co.uk

58

Motormech Guildford Limited is a small, local automotive service provider based in Guildford, UK, specializing in vehicle servicing, MOT testing, air conditioning recharge, tyre fitting, and general vehicle repairs. The company positions itself as a trusted local garage with Bosch accreditation and Trust My Garage membership, targeting local vehicle owners seeking reliable and professional car maintenance services. The website content is well-structured, informative, and professionally presented, with clear service offerings and pricing, supporting a positive market position in the local transportation sector. The technical infrastructure is built on WordPress CMS, utilizing common plugins such as Contact Form 7, Smart Slider 3, and WP Review Slider Pro. The site integrates Google Analytics, Google Tag Manager, and Facebook Pixel for marketing and analytics purposes. Performance and mobile optimization are good, though accessibility features are basic. SEO is well addressed with proper meta tags and structured data. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and a vulnerability disclosure policy. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. The WHOIS data confirms domain legitimacy and consistency with business claims, supporting a high trust level. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

Mackenzie Jones is a well-established law firm operating primarily in Cheshire and North Wales, with offices in Chester, St Asaph, and Menai Bridge. The firm offers a broad range of legal services including personal injury, conveyancing, family law, wills and probate, clinical negligence, and various business legal services. Their market position is that of a trusted regional legal provider with over two decades of history and a client base built on recommendations and repeat business. Technically, the website is built on the Umbraco CMS platform and integrates modern tools such as Google Analytics, Google Tag Manager, LiveChat, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection, but could improve by adding more comprehensive security headers. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and trust indicators. Overall, the website presents a secure, compliant, and professional digital presence for the law firm.

J

Jigsol

jigsol.com

62

Jigsol is a UK-based hybrid accountancy firm specializing in providing real-time data-driven accountancy, analytics, payroll, and rota management services primarily targeting hospitality, recruitment, and technology sectors. The company differentiates itself by integrating proprietary analytic technology with traditional accountancy services, offering clients instant business insights and operational efficiencies. The website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, and it employs Google Analytics and Tag Manager for tracking. The technical infrastructure is modern and supports mobile optimization, though DNSSEC is not enabled, which is a minor security gap. Security posture is generally good with HTTPS and domain protection statuses in place, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website presents a professional and trustworthy image consistent with a small but mature business.

MemsDIY is a UK-based e-commerce retailer specializing in DIY, building, and construction materials. Established in 2016, the company operates a Shopify-powered online store offering a wide range of products targeting DIY enthusiasts, builders, and contractors. The website features customer reviews powered by Judge.me and employs cookie consent mechanisms to comply with GDPR regulations. The business model focuses on direct online sales with a niche market position in the UK retail sector.

D

Digital Network Solutions

dignetsol.co.uk

59

Digital Network Solutions is a small UK-based IT services company specializing in managed IT solutions for small and medium businesses primarily in East Anglia. Their offerings include networking, consultancy, infrastructure, procurement, and maintenance services. The company positions itself as a trusted IT partner with a strong local presence and client testimonials supporting their reliability. Technically, the website is built on Drupal 10 with modern frontend technologies and demonstrates good mobile optimization and accessibility. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The WHOIS data is unavailable due to domain naming rules violation, which raises questions about domain legitimacy but does not detract from the professional presentation of the website. Overall, the site is functional, professional, and trustworthy with room for security and privacy improvements.

M

Miller Rayner

miller-rayner.co.uk

44

Miller Rayner operates as a specialized e-commerce retailer focusing on marine and aviation crew dress clothing and uniforms. The website offers a wide range of products including men's and women's uniforms, cadet uniforms, epaulettes, insignia, and related accessories, targeting professionals and cadets in the marine and aviation sectors. The business model is retail-oriented with a niche market focus, primarily serving customers in the United Kingdom. The website is built on WordPress with WooCommerce, leveraging modern plugins and technologies to provide a functional and visually appealing shopping experience. Technical infrastructure includes React vendor scripts, LayerSlider for visual content, and PayPal integration for payments, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and secure payment SDK usage; however, the absence of security headers and privacy policies suggests room for improvement. The WHOIS data is incomplete due to a domain registration anomaly, but the website is fully accessible without WAF or blocking mechanisms. Overall, the site presents a professional front with moderate trustworthiness but requires enhancements in privacy compliance and security best practices to strengthen its risk profile.

M

MGC Lighting Ltd

mgc-lighting.com

54

MGC Lighting Ltd is a global distributor specializing in the supply of specialist lamps and industrial lighting products, including medical lighting and batteries. The company targets industrial and medical sectors, providing a broad range of respected brand products. Their business model focuses on B2B distribution with a medium-sized market presence. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with WooCommerce, utilizing modern plugins and technologies such as Google Analytics and live chat support. The site is mobile-optimized and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit privacy and terms pages are recommended. The absence of WHOIS registration data is a notable concern for domain legitimacy verification, though the website itself appears trustworthy and business-focused. Overall, the site presents a good digital maturity level with room for improvement in privacy compliance and security best practices.

M

MP Burke Transport

mpburketransport.com

40

MP Burke Transport is a small, established haulage and logistics company based in Paisley, Scotland, with over 30 years of experience serving food and drink producers across Scotland and the UK. Their services include UK transport, groupage and logistics, warehousing, and freight forwarding. The company emphasizes quality and professionalism, maintaining a fleet of eight vehicles and trailers with high standards for equipment and driver presentation. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Slider Revolution, with moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA on forms, but lack of security headers and privacy policies indicate room for improvement. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional site content. Overall, the website is functional and credible but would benefit from enhanced security and compliance documentation.

P

Pettycur Bay Holiday Park

pettycur.co.uk

50

Pettycur Bay Holiday Park is a family-owned hospitality business offering caravan and camping holidays in Fife, Scotland. The website provides comprehensive information about holiday bookings, caravan sales, leisure facilities, and gift vouchers, targeting families and holidaymakers. The site is well-structured with clear navigation and professional design, supporting a positive user experience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various sliders, with moderate performance and good mobile optimization. Security posture is moderate with cookie consent implemented but lacks visible security headers and incident response information. WHOIS data is unavailable due to domain registration issues, which raises some concerns about domain legitimacy, though the website content is consistent with a legitimate business. Overall, the site is trustworthy but would benefit from enhanced security practices and clearer domain registration transparency.

A

Arcadia (South West) Limited

arcadiasw.co.uk

45

Arcadia (South West) Limited operates as a professional accounting and tax advisory firm serving owner-managed businesses, sole traders, and private individuals primarily in Somerset and Weston super Mare, UK. The company offers a comprehensive range of services including accounts preparation, bookkeeping, payroll, tax planning, and VAT returns, positioning itself as a trusted local financial services provider. The website reflects a professional and consistent brand image with clear contact information and service descriptions, supporting its market position as a small but client-focused firm. Technically, the website is built on Joomla CMS and leverages common web technologies such as jQuery, Bootstrap, and Smart Slider 3 for UI components. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security practices, particularly the implementation of HTTP security headers and verification of SSL/TLS configurations. From a security perspective, the site employs a cookie consent mechanism and maintains a privacy policy, indicating awareness of GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data due to an invalid query limits the ability to fully verify domain registration legitimacy, but the website's professional presentation and contact details support its credibility. Overall, the website presents a low-risk profile with a solid business foundation and adequate privacy compliance. Strategic improvements in security headers, SSL configuration, and incident response documentation would enhance the security posture and trustworthiness further.

Q

Invest in an economical and performant car

quarrycars.co.uk

55

Quarry Cars operates a website focused on providing economical and high-performance vehicle solutions including car rental, leasing, traditional loans, and vehicle accessories. The site targets consumers seeking flexible and affordable vehicle options, including electric and commercial vehicles. The business model centers on vehicle financing and maintenance services, positioning itself as a niche provider in the UK transportation sector. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, offering a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy policies. The WHOIS data is incomplete and inconsistent due to querying the subdomain rather than the registered domain, slightly reducing trustworthiness. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

H

Hemingstone Garage

hemingstonebmw.com

53

Hemingstone Garage is a small, family-run automotive business specializing in used BMW cars and related prestige vehicles, located in Ipswich, Suffolk, UK. The company offers a range of services including car sales, diagnostics, repairs, servicing, and finance options. The website presents a professional and trustworthy image with customer testimonials and warranty offerings, targeting local car buyers and BMW owners. Technically, the site is built using modern web technologies including Hugo static site generator, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no incident response or vulnerability disclosure policies are found. The absence of WHOIS domain registration data is a notable transparency concern but does not detract significantly from the overall legitimacy indicated by the website content. Strategic recommendations include improving security headers, adding explicit security and incident response policies, and verifying domain registration details for enhanced trust.

Newmans Holiday Homes Ltd operates a professional and well-established holiday caravan rental service focused on private caravan hire in Devon and Somerset, UK. The company offers a wide range of holiday caravans and lodges with flexible booking options, local support, and subletting services. The website is well-designed, mobile-optimized, and provides clear navigation and rich content including customer testimonials and detailed park information. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Bootstrap 5, and Swiper for a responsive and interactive user experience. Security posture is good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and incident response information suggests room for improvement. Privacy and cookie policies are present and indicate GDPR compliance. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration transparency and trustworthiness. Overall, the website is professional and trustworthy from a user perspective but would benefit from enhanced security disclosures and WHOIS transparency.

The British Bung Company Ltd is a UK-based manufacturer specializing in traditional wooden cask closures primarily serving the brewing industry. Their product range includes keystones, shives, pegs, plugs, bespoke items, and miscellaneous wooden closures. The company positions itself as a leading manufacturer in this niche market, targeting brewing professionals and other industrial customers. The website content is professional and informative, reflecting a small-sized manufacturing business with a clear focus on quality and tradition. Technically, the website employs a modern front-end stack including jQuery, Modernizr, Foundation CSS framework, and various UI plugins such as Nivo Slider and carouFredSel. The site is moderately optimized for performance and mobile responsiveness but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident from the content. From a security perspective, the site uses HTTPS but lacks visible security headers and advanced security configurations. No privacy, cookie, or terms of service policies are present, indicating gaps in privacy compliance. The WHOIS lookup failed due to domain registration errors, raising concerns about domain legitimacy and registration consistency. No incident response or vulnerability disclosure information is available. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and domain registration legitimacy to enhance trustworthiness and reduce risk.

T

Todd Milburn Partnership Limited

todd-milburn.co.uk

43

Todd Milburn Partnership Limited is a well-established UK-based consultancy specializing in property and construction services, including project management, quantity surveying, employer’s agent roles, and principal designer services. With over 30 years of experience, the company positions itself as a trusted independent specialist serving both public and private sector clients. The website reflects a professional and consistent brand image, supported by recognized industry certifications such as RICS and APS. Contact information is clearly provided, enhancing business credibility. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Slider Revolution, hosted by 20i Ltd. The site is mobile-optimized and performs moderately well, with good SEO practices evident. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks advanced security headers and published security policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet GDPR requirements. Overall, the security posture is good but could be improved by implementing security headers, publishing incident response and vulnerability disclosure information, and enhancing privacy compliance. The site is free from adult or questionable content, targeting a general professional audience. The domain registration is consistent with the business claims, showing a long-standing presence and legitimacy. Strategic recommendations include enhancing privacy and cookie policies, adding security and incident response documentation, and improving accessibility features to further strengthen trust and compliance.

S

Sanford Barnes Ltd

reflexexhibitions.com

63

Reflex Exhibitions, operated by Sanford Barnes Ltd, is a UK-based small business specializing in the design and delivery of exhibition stands, pop-up displays, and large-format print solutions. Established in 2002, the company targets UK businesses and organizations seeking high-impact display solutions for trade shows and events. The website presents a professional and consistent brand image with clear contact information and social media presence, supporting its market position as a trusted provider in the exhibition industry. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good SEO practices, mobile optimization, and moderate performance. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data for the domain raises some concerns about domain legitimacy and registration transparency, which slightly impacts trustworthiness. However, the website content, business information, and compliance with GDPR and cookie consent regulations indicate a legitimate and professional operation. No adult or questionable content is present, making the site safe for general audiences. Overall, Reflex Exhibitions maintains a solid digital presence with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include publishing a security policy, establishing an incident response contact, and verifying domain registration information to enhance trust and compliance.

M

MET Parking Services

metparking.com

45

MET Parking Services operates as a UK-based provider specializing in innovative car park management solutions. The company positions itself as a leading service provider within the transportation sector, targeting car park operators and managers across the UK. The website reflects a professional business model focused on service delivery with a medium-sized organizational footprint, founded around 2017. Technically, the website is built on WordPress using the Avada theme, incorporating modern JavaScript libraries such as jQuery and Splide.js, and integrates SEO tools like Yoast SEO. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. Security-wise, the site employs HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. No privacy or cookie policies were detected, indicating gaps in privacy compliance. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, although the website content and branding appear consistent and professional. Overall, the site presents moderate risk with recommendations to improve privacy compliance, security headers, and verify domain registration status.

V

Vanilla Catering & Events

vanillacatering.co.uk

60

Vanilla Catering & Events is a UK-based small hospitality business specializing in catering services for weddings, corporate events, and private parties. With over seventeen years of experience, the company emphasizes fresh, locally sourced ingredients and professional service. The website reflects a well-established local catering company with a strong reputation supported by client testimonials and clear contact information. Technically, the website uses modern web technologies including jQuery, Google Analytics, and Google Fonts, with good mobile optimization and SEO practices. However, no CMS or backend platform is explicitly identified. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal security policies. Privacy compliance is basic with privacy and cookie policies present but no active cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

G

Greenshields JCB Ltd

greenshieldsjcb.com

54

Greenshields JCB Ltd is a leading UK dealer specializing in JCB construction and industrial machinery. The company offers a comprehensive range of services including new and used machine sales, parts supply, servicing, finance, and insurance. With a strong market position as the premier JCB dealer in the UK, Greenshields JCB targets construction and industrial sectors requiring reliable equipment and support. The website reflects a professional and consistent brand image, supported by active social media channels and detailed business information. Technically, the website is built on WordPress with WooCommerce and uses modern technologies such as Bootstrap 5, LayerSlider, and various tracking and marketing tools including Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility compliance and security headers. Security posture is solid with HTTPS enforced, cookie consent management, and bot protection via Google reCAPTCHA. However, the absence of explicit security headers and lack of WHOIS data for the domain slightly reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence for Greenshields JCB Ltd, though the missing WHOIS information warrants caution. Strategic improvements in security headers and transparency around domain registration would enhance credibility and security posture.

R

R A S Limited

ras.ltd.uk

56

R A S Limited is a UK-based consultancy specializing in process and technical safety, focusing on high hazard risk management for sectors including energy, pharmaceuticals, and specialist chemicals. Established since 1993, the company has grown to serve large corporate clients internationally, offering tailored risk assessment and safety consultancy services. The website reflects a professional and trustworthy business with clear service offerings and client testimonials. Technically, the site is built on WordPress with modern libraries and SEO optimizations, delivering a fast and mobile-optimized experience. Security posture is solid with HTTPS and secure form handling, though it lacks some advanced security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

P

Personal Career Management

personalcareermanagement.com

57

Personal Career Management is a UK-based career coaching and outplacement service provider established in 2003. The company offers a broad range of services including executive outplacement, career change advice, corporate outplacement, and career coaching for individuals and organizations. Their market position is that of a reputable, specialized service provider with a strong focus on client success and career development. The website is professionally designed, mobile-optimized, and incorporates modern technologies such as WordPress CMS, NitroPack for performance, and Google Tag Manager for analytics. Security posture is solid with HTTPS enforced and standard security practices observed, though additional security headers and a formal security policy could enhance their stance. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, which should be further investigated. Overall, the website and business present a trustworthy and professional image with room for minor security and transparency improvements.

S

Sudlows

sudlows.com

72

Sudlows is a UK-based international specialist in data centres and critical infrastructure services, offering design, build, audit, testing, maintenance, and consultancy. The company holds multiple certifications and serves a broad enterprise clientele globally, positioning itself as a leading provider in its sector. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the site uses WordPress with modern JavaScript libraries and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and GDPR compliance, though improvements in security headers and incident response transparency are recommended. The absence of WHOIS data is a notable concern but does not outweigh the strong business indicators present on the site.

I

IBB London

ibblondon.com

53

IBB London is a small retail business specializing in gold, silver, and diamond jewellery, including branded watches such as Lily & Lotty, Toy Watch, and Lulu Guiness. The website serves primarily as a brand showcase and e-commerce platform targeting consumers interested in fine jewellery. The digital infrastructure includes standard tracking technologies like Google Analytics and Google Tag Manager, but lacks advanced technical frameworks or CMS identification. The website is accessible without WAF or security challenges, but the content is minimal and primarily a landing page redirecting users to the /home section. Security posture is basic with no evident security headers or HTTPS status provided, and privacy compliance is weak due to absence of privacy and cookie policies. The WHOIS data is missing, which raises concerns about domain legitimacy and transparency.

C

Castlehaven Community Association

castlehaven.org.uk

51

Castlehaven Community Association is a well-established non-profit organization based in Camden Town, UK, dedicated to providing safe, inclusive spaces and a variety of community programs for all ages and abilities. Their offerings include activities for seniors, youth programs, health and wellbeing initiatives, environmental projects, and emergency food support. The organization maintains a strong local presence and is recognized through awards such as the NCVO Trusted Charity Status and the Green Care Quality Mark. Technically, the website is built on WordPress with modern plugins and analytics tools, demonstrating a good level of digital maturity and user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and serves its community effectively, though WHOIS data is unavailable due to domain naming restrictions, which does not appear to impact legitimacy.

C

CRC North Ltd

crcnorth.com

48

CRC North Ltd is a small, family-owned UK-based firm of Chartered Surveyors established in 1987, specializing in property development, project management, and investment services within the Greater Manchester, Merseyside, and Cheshire regions. The company positions itself as an experienced regional player with a focus on maximizing land and property asset potential through professional expertise and commercial acumen. The website reflects this business focus with clear service descriptions and a professional design, although it lacks comprehensive contact details and policy disclosures. Technically, the website employs common frontend technologies such as jQuery, Bootstrap, and UIkit, with a CMS indicated as MYOB. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. Security-wise, the domain is well-registered with appropriate domain status locks, but the website lacks DNSSEC, security headers, and visible HTTPS enforcement details, which lowers its security posture. The security posture is moderate with no critical vulnerabilities detected in the visible content, but improvements are needed in security headers, DNSSEC, and privacy compliance. The absence of privacy and cookie policies and contact information for incident response reduces compliance and trustworthiness. Overall, the website is safe, professional, and suitable for general audiences, but it could benefit from enhanced security and compliance measures. Strategically, CRC North should prioritize publishing privacy and cookie policies, implementing DNSSEC, adding security headers, and providing clear contact information to improve trust and compliance. These steps will strengthen their security posture and align with GDPR and industry best practices.

The Institute of Risk Management (IRM) is a leading professional body specializing in risk management qualifications, training, advisory services, and publications. It serves a global audience of risk professionals and organizations seeking to enhance their risk management capabilities. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. The organization maintains a strong market position as a trusted provider of risk management education and community services. Technically, the site leverages a modern technology stack including AngularJS, jQuery, HubSpot, and multiple analytics and marketing tools. It uses Umbraco CMS and integrates various third-party scripts for tracking and user engagement. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security header implementation. From a security perspective, the website enforces HTTPS, uses secure login forms with anti-forgery tokens, and implements cookie consent mechanisms compliant with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the IRM website presents a low-risk profile with strong business credibility and good privacy compliance. The lack of WHOIS data due to privacy protection is typical for professional organizations and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility features to further strengthen trust and compliance.

W

WT Hills

wthills.com

46

WT Hills is an established independent firm of Chartered Quantity Surveyors and construction consultants operating primarily in the south of England. With over 100 years of combined experience, they provide a comprehensive range of services including cost consultancy, project management, contract administration, CDM advisory, party wall surveying, and dispute resolution. The company maintains multiple regional offices and is regulated by RICS, reinforcing its professional credibility. Their website reflects a professional and consistent brand image targeting construction industry clients such as developers, contractors, and property owners. Technically, the website is built on WordPress using modern themes and plugins, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is partial, with a cookie consent banner but no privacy or terms of service pages. Overall, the website is trustworthy and professional but could enhance security and privacy transparency.

Tibard is a UK-based company specializing in the provision of uniform products and services tailored to the hospitality sector. Their offerings include chefs wear, restaurant clothing, hotel uniforms, and a range of managed uniform services such as personalization, contract manufacturing, and stock planning. The company targets B2B customers within the UK hospitality industry, positioning itself as an expert and reliable supplier with a professional online presence. The website is built on the Magento platform, leveraging modern web technologies and extensions to deliver a functional and user-friendly e-commerce experience. Security measures such as HTTPS and Google reCAPTCHA are implemented, and privacy compliance is addressed through cookie consent and privacy policies. However, the WHOIS data for the domain is incomplete due to a lookup error, which slightly impacts the trust assessment but does not detract from the overall legitimacy of the business.