High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
1,651–1,700 of 36,503
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Merlin Estates Ltd
merlinestates.com
Real Estate · United Kingdom
49High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Merlin Estates Ltd is a UK-based family-run residential property management company specializing in the administration and maintenance of private residential estates. The company offers a range of services including property management, maintenance, financial management, company secretary services, development site visits, and property insurance. Positioned as a cost-effective and professional service provider, Merlin Estates targets developers and residential property owners seeking reliable estate management solutions. The website content is clear and focused on their core business, with contact information and service details prominently displayed. Technically, the website employs standard web technologies including Google Analytics for visitor tracking, Pinterest scripts, and Google Maps API for location services. The site is accessible and functional but shows basic mobile optimization and limited accessibility features. There is no detected CMS or advanced frameworks, indicating a simple custom-built or static site. Performance is moderate with no major issues detected. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance and user trust. The WHOIS data for the domain is missing, raising concerns about domain registration legitimacy and ownership transparency. No forms or email addresses are present for direct contact, limiting user engagement options. Overall, the security posture is basic and requires improvements to meet modern standards. The overall risk assessment suggests the business is legitimate but would benefit from enhanced transparency, security best practices, and privacy compliance measures. Strategic recommendations include implementing HTTPS with strong SSL, publishing privacy and cookie policies, adding security headers, and clarifying domain registration details to improve trust and compliance.
Start2Stopstart2stop.co.uk
Healthcare · United Kingdom
47High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Start2Stop is a specialized private healthcare provider based in London, offering outpatient and residential addiction treatment services since 2010. The website presents a professional image with detailed descriptions of treatment programs, team information, and client testimonials, positioning the company as a trusted player in the addiction treatment sector. Technically, the site is built on WordPress using the Divi theme and UberMenu plugin, with embedded multimedia content enhancing user engagement. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is functional, trustworthy, and well-targeted but would benefit from enhanced privacy and security transparency.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.verisec.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The WHOIS lookup for the domain failed, showing no registration data, which raises concerns about the domain's registration status or possible restrictions on WHOIS data. Due to the lack of accessible content, no business, contact, or policy information is available for analysis. The technical infrastructure cannot be assessed, and no security headers or HTTPS details are present in the provided data. Overall, the site appears to be either unregistered, expired, or deliberately restricted, which severely limits trust and usability.
- AAtlantic Diesel Services Ltd.
atlanticdiesel.com
Transportation · United Kingdom
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Atlantic Diesel Services Ltd. is a UK-based specialist distributor and service provider focused on commercial marine and industrial diesel engine components, including fuel injection equipment, filtration, and starting & charging systems. They serve a global customer base in sectors such as shipping, rail, power generation, military, and extractive industries. The company offers comprehensive overhaul services from their Southampton workshop. The website content is professional and relevant to their niche market, but lacks modern technical features and security best practices. The technical infrastructure is basic, relying on legacy HTML and JavaScript with Google Analytics for tracking. Mobile optimization and accessibility are minimal, and no CMS or advanced frameworks are detected. Security posture is weak due to absence of HTTPS, security headers, and privacy policies. The WHOIS data is missing or inconsistent, raising concerns about domain legitimacy. Overall, the website provides useful business information but requires significant improvements in security, privacy compliance, and technical modernization.
- WWrexham Electrical Repairs
wrexhamelectricalrepairs.co.uk
Energy · United Kingdom
42High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Wrexham Electrical Repairs is a small UK-based business specializing in electro-mechanical repair and servicing of electric motors, pumps, gearboxes, and related equipment. Established since 1979, the company targets industrial and commercial clients requiring maintenance, repair, and supply of electrical and mechanical components. The website provides basic information about services, supported manufacturers, and contact details but lacks modern digital features such as privacy policies or advanced analytics. Technically, the website uses older JavaScript libraries like jQuery 1.7.1 and a lightweight CSS framework (5grid). The design and mobile optimization are basic, with moderate performance and limited SEO and accessibility features. No CMS or hosting provider information is evident. Security posture is weak due to outdated libraries, absence of visible security headers, and lack of HTTPS confirmation in the provided data. The WHOIS data for the domain is unavailable and flagged as invalid by the UK registry due to domain naming rules violations, raising concerns about domain legitimacy or configuration. Despite this, the website content appears legitimate and business-focused, with clear contact information and no suspicious or adult content. Overall, the website scores moderately on content and business credibility but poorly on security and privacy compliance. Strategic improvements in security, privacy policies, and technical modernization are recommended to enhance trust and compliance.
- Preconomy LTD
preconomy.com
Manufacturing · United Kingdom
42High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Preconomy Ltd is a UK-based manufacturing company specializing in mould and die manufacturing, tooling, modifications, and repairs. It positions itself as the UK's largest 24/7 tool making facility and a first choice manufacturer in its sector. The website presents a professional image with clear contact details and a terms and conditions document, targeting industrial clients requiring tooling services. Technically, the website uses legacy JavaScript libraries such as jQuery 1.5.1 and Modernizr, indicating some technical debt and potential security risks. The site is accessible with no detected WAF or blocking mechanisms, but lacks modern privacy and cookie policies, which impacts compliance. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and outdated libraries. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the site is functional and professional but requires improvements in security, compliance, and domain registration transparency.
- T
—
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Solutions Training & Advisory Ltdsolutionstraining.co.uk
Education · United Kingdom
46High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Solutions Training & Advisory Ltd is a UK-based specialist provider of health and safety training courses, serving sectors such as emergency services, health and social care, special education, and corporate commercial. The company offers a variety of accredited training options including classroom-based, e-learning, and blended learning solutions. Their website reflects a professional and well-established business with clear contact information, social media presence, and comprehensive course offerings. Technically, the website is built on WordPress with modern plugins and tracking tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant. WHOIS data is unavailable due to domain naming issues but the website content and company information support legitimacy. Overall, the site is trustworthy and well-positioned in its niche.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
36High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.advancemi.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain failed with an error indicating the domain name is invalid under Nominet UK naming rules, suggesting the domain is either not properly registered or misconfigured. No business, contact, or compliance information is available on the site, and no metadata or structured data is present. The lack of accessible content and WHOIS data severely limits the ability to assess the company's business operations, technical infrastructure, or security posture. The site does not load any scripts, analytics, or tracking technologies, and no privacy or cookie policies are found. Overall, the domain and website appear non-operational or blocked, resulting in a very low trust and legitimacy score.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.cunard-accom.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content or business information. The domain appears unregistered or inactive as indicated by the WHOIS query returning no match. There is no metadata, structured data, or contact information available to assess the business or its operations. The site only loads a Google Fonts stylesheet and a static error page, indicating no active digital presence. The lack of WHOIS data and website content severely limits any meaningful business or security analysis. The security posture is unknown due to absence of headers or SSL information, and no privacy or cookie policies are present. Overall, the site is effectively blocked and non-functional.
Eco Futureseco-futures.co.uk
Energy · United Kingdom
42High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Eco Futures is a well-established sustainable construction consultancy founded in 2006, specializing in Passivhaus air pressure testing and energy consultancy services across Wales and the West and South West of England. The company serves a diverse client base including major developers, social landlords, architects, and individual developers. Their key services include air pressure testing, energy assessments, SAP, sound testing, and various sustainability-related calculations. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by GoDaddy. It employs modern web technologies and is optimized for mobile devices with good SEO practices. Performance is moderate, and accessibility is basic but functional. Security posture is strong with HTTPS enabled and no visible vulnerabilities, though security headers are missing and no explicit security policies are published. From a security and compliance perspective, the site lacks privacy and cookie policies, which is a notable compliance gap under GDPR. There is no visible incident response or vulnerability disclosure information. Contact details for key personnel are clearly provided, enhancing business credibility. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Read Dunn Connell Limitedreaddunnconnell.co.uk
Real Estate · United Kingdom
47High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Read Dunn Connell Limited operates RDC Solicitors, a small UK-based law firm specializing in property, family law, wills, trusts, tax and probate, dispute resolution, and employment law. The firm targets individuals and businesses primarily in North and West Yorkshire, with offices in Bradford, Ilkley, and Bingley. The website presents a professional image with clear service offerings and client testimonials, positioning the firm as a trusted regional legal service provider. Technically, the website uses modern web technologies including jQuery and Google Tag Manager, with responsive design and good SEO practices. However, some security best practices such as security headers and cookie consent mechanisms are missing or not detected, representing areas for improvement. The WHOIS data is unavailable due to domain naming rules violation, which slightly impacts trust but does not negate the legitimacy indicated by company registration details and professional presentation. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and formal security policies. No forms are present on the homepage, reducing attack surface but also limiting direct data collection. Overall, the site is safe, professional, and trustworthy with room to enhance privacy compliance and security hardening. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing security and incident response policies, and regular audits of third-party scripts to maintain a strong security posture.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.djfoley.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain may not be properly registered or active. Consequently, no business information, contact details, or policies are available for analysis. The technical infrastructure appears minimal, with only Google Fonts loaded externally. Security posture cannot be assessed due to lack of accessible content and absence of security headers or SSL information. Overall, the site is non-functional and lacks any visible digital maturity or compliance indicators.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- BBruce Gillingham Pollard
brucegillinghampollard.com
Real Estate · United Kingdom
48High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Bruce Gillingham Pollard is a specialized real estate consultancy focused on providing creative property solutions to prestigious property owners, developers, retailers, and restauranteurs primarily in the UK. The company has a strong market position with over 20 years of experience, offering services such as retail and leisure leasing, investment advisory, lease consultancy, and tenant mix curation. Their website showcases a comprehensive portfolio of projects and client engagements, reflecting a mature and professional business model. Technically, the website is built on WordPress with modern JavaScript libraries like jQuery and integrates Google Analytics and Google Tag Manager for tracking. The site is well-structured, mobile-optimized, and demonstrates good SEO and accessibility practices. However, some security headers are missing, and no cookie consent mechanism is present, which could be improved to enhance privacy compliance. From a security perspective, the site uses HTTPS with a good SSL configuration and anonymizes IP addresses in analytics, indicating attention to user privacy. The absence of explicit security headers and incident response information suggests room for improvement in security posture. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, although the website content and business information appear consistent and professional. Overall, the website presents a credible and professional business with a solid digital presence but would benefit from enhanced security headers, explicit cookie consent, and verification of domain registration details to strengthen trust and compliance.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.newfleetservices.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed due to a domain naming rules violation, indicating the domain name contains too many parts and cannot be registered under Nominet UK rules. Consequently, no registrar, creation, expiry, or registrant information is available. The lack of accessible content, absence of contact or legal information, and no detectable security or technical infrastructure details suggest the website is either misconfigured or inactive. This severely limits any business or security analysis and indicates a low trustworthiness level.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Etail Fulfilment Servicesetailfs.co.uk
E-commerce · United Kingdom
45High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Etail Fulfilment Services is a UK-based company specializing in multi-channel e-commerce fulfilment, pick and pack services, and warehousing. Operating from Yorkshire, they provide daily worldwide shipping and cloud-based warehouse software, targeting e-commerce businesses seeking reliable fulfilment solutions. The website presents a professional image with clear service descriptions and contact information, positioning the company as a specialist regional provider with global reach. Technically, the website is built on WordPress using the Customizr Pro theme and includes common plugins such as Google Analytics, Google Tag Manager, and live chat support. The site is mobile-optimized with moderate performance and basic accessibility features. However, it lacks advanced security headers and comprehensive privacy or cookie policies, which are important for compliance and user trust. From a security perspective, HTTPS is enabled, but the absence of security headers and formal privacy policies reduces the overall security posture. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS lookup failed due to querying an invalid domain format, but the website itself is active and legitimate, indicating the domain is likely registered without the 'www' prefix. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer incident response policies to strengthen trust and security.
- DDelen Tooling
delentooling.co.uk
Manufacturing · United Kingdom
45High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Delen Tooling is a small UK-based precision toolmaking company specializing in spark and wire erosion, CNC milling, and turning services since 1979. The company serves engineering and manufacturing sectors including motorsport and aerospace, emphasizing precision, reliability, and timely delivery. The website reflects a traditional business with a loyal customer base but lacks modern digital maturity features such as HTTPS and privacy policies. Technically, the site uses basic JavaScript and Google Analytics, running on a SMART(V6) CMS platform with moderate performance and basic mobile optimization. Security posture is weak due to lack of HTTPS, missing security headers, and absence of privacy and cookie policies, exposing the site to potential risks and non-compliance with GDPR. Overall, the domain WHOIS data is unavailable due to domain naming rule violations, raising concerns about domain legitimacy despite professional website content. Strategic improvements in security, privacy compliance, and domain registration transparency are recommended to enhance trust and digital maturity.
Other
49High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.tingdene.co.uk is currently inaccessible, returning a standard HTTP 404 Not Found error page with minimal HTML content and no metadata or structured data. The WHOIS lookup failed due to domain naming rules violations, indicating the domain is either invalid or misconfigured. Consequently, no registrar, registration dates, or registrant information could be extracted. The lack of accessible content and domain registration data severely limits the ability to assess the business, technical infrastructure, or security posture. The site shows no evidence of security best practices, privacy policies, or contact information, which further diminishes trust and credibility.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
44High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- SSmestow Pattern & Tool Co Ltd
smestow.com
Manufacturing · United Kingdom
48High
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Smestow Pattern & Tool Co Ltd is a well-established UK-based manufacturing company specializing in pattern making, tooling, and CAD design services. With a domain age dating back to 2000 and a clear focus on bespoke manufacturing solutions, the company positions itself as a specialist in the West Midlands industrial sector. The website reflects a professional digital presence built on WordPress, leveraging modern plugins such as Yoast SEO and Slider Revolution to enhance user experience and SEO. Contact information is transparent and easily accessible, supporting strong business credibility. Security posture is adequate with HTTPS and reCAPTCHA integration, though improvements in DNSSEC and security headers are recommended. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is functional, professional, and trustworthy, serving its target manufacturing audience effectively.
Alser UK Ltd.alser.co.uk
Retail · United Kingdom
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Alser UK Ltd. is a specialist joinery manufacturer and shopfitting service provider focused on the UK and European retail sectors. Their core offerings include bespoke joinery, display shelving, gondola shelving, storage racking, pallet racking, and cantilever shelving solutions. The company positions itself as a trusted partner for retailers requiring high-quality shop shelving and storage installations. The website reflects a professional business with clear service descriptions and a consistent brand presence supported by social media channels on Facebook and LinkedIn. Technically, the website is built on WordPress using popular plugins such as Slider Revolution, WPBakery Page Builder, and Contact Form 7. It employs Google Analytics for visitor tracking and demonstrates good mobile optimization and SEO practices. However, there is room for improvement in accessibility and security headers implementation. The site uses HTTPS with a good SSL configuration, ensuring secure communications. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. The absence of a security.txt file or incident response contacts limits transparency in vulnerability handling. The WHOIS data for the domain is unavailable due to a Nominet UK registration error, raising concerns about domain legitimacy despite the professional website content. Overall, the website is functional and credible from a business and technical standpoint but requires enhancements in privacy compliance and security best practices. The domain registration anomaly should be investigated to ensure full legitimacy and trustworthiness.
- UUK Health Forum
ukhealthforum.org.uk
Healthcare · United Kingdom
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The UK Health Forum website serves as a legacy portal for a UK-based public health organization that ceased operations in 2019. The site primarily offers archival information and directs users to a new company, HealthLumen, which took over its modeling unit. The organization targeted public health professionals and policymakers, operating as a non-profit entity focused on health research and policy advocacy. The domain is well-established since 2012, consistent with the organization's timeline. Technically, the website is built on WordPress using the Divi theme, with standard libraries such as jQuery and Google Fonts. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking tools are detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks important security headers, privacy policies, and incident response information. No vulnerabilities or exposed sensitive data were found, but the absence of privacy and cookie policies indicates compliance gaps. The WHOIS data is transparent and consistent with the organization's UK presence, supporting legitimacy. Overall, the website is a basic legacy informational site with limited interactivity or data collection. It is safe for general audiences but requires improvements in privacy compliance, security headers, and contact transparency to enhance trust and compliance.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- PPrefs UK
prefsuk.com
Manufacturing · United Kingdom
46High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Prefs UK is a small manufacturing business specializing in bespoke presentation solutions such as ring binders, flooring presenters, and polypropylene packaging. Based in Bolton, UK, they serve clients regionally and nationally with over 50 years of claimed experience. The website presents a professional image with detailed product descriptions and social media presence but lacks visible contact details and modern security features. Technically, the site uses older JavaScript libraries and Adobe Muse-generated code, with no evidence of HTTPS or security headers in the provided data. Privacy and terms documents are available but cookie policies and consent mechanisms are absent. The WHOIS data is missing, raising concerns about domain legitimacy and consistency with the business claims. Overall, the site is functional and business-focused but requires improvements in security posture, privacy compliance, and transparency to enhance trust and compliance.
- CCottam & Preedy Ltd
cottamandpreedy.co.uk
Energy · United Kingdom
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Cottam & Preedy Ltd is a UK-based company specializing in the manufacture and supply of valves and plumbing brassware, including their flagship CP961 Wondervalve product. The website targets trade customers and industry professionals, providing product data, pricing, and technical support. The business operates primarily in the energy sector with a focus on flow control solutions. The website content is basic but functional, with limited mobile optimization and moderate navigation clarity. Technically, the website uses legacy JavaScript libraries such as jQuery 1.6.1 and plugins like Colorbox and Nivo Slider. While the site loads with moderate performance, it lacks modern security headers and uses outdated libraries that pose security risks. Google Analytics and Tag Manager are implemented for user tracking, but no cookie consent mechanism is present, indicating partial privacy compliance. From a security perspective, the site uses HTTPS as indicated by resource URLs, but no explicit security headers or policies are visible. The absence of contact emails, phone numbers, or incident response information reduces transparency. The WHOIS lookup failed due to querying the 'www' subdomain, but the domain appears legitimate and consistent with a small UK business. Overall, the security posture is moderate but could be improved by updating libraries, adding security headers, and enhancing privacy compliance. The overall risk is moderate with recommendations to modernize the technical stack, implement security best practices, and improve transparency and privacy mechanisms to enhance trust and compliance.
Stoneguard Projects Limitedstoneguard.co.uk
Manufacturing · United Kingdom
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Stoneguard Projects Limited is a specialist building envelope contractor based in the United Kingdom, with a history dating back to 1963. The company focuses on façade restoration, maintenance, cladding, and structural framing services, targeting construction industry clients and property managers. The website presents a professional image with clear service offerings and contact information, supporting its market position as an established specialist contractor. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and Google Tag Manager for analytics. The site is mobile-optimized and features multimedia content, though some accessibility features could be improved. Security posture is moderate with HTTPS usage implied but lacking visible security headers and formal privacy or cookie policies, indicating room for compliance enhancements. The WHOIS data for the domain is unavailable due to an error indicating the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy or possible misconfiguration. Despite this, the website content and contact details suggest a legitimate business presence. Overall, the site scores well on content quality and business credibility but needs improvements in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing vulnerability disclosure information, and resolving domain registration inconsistencies to enhance trust and compliance.
- Poshpromotions
poshprezzies.co.uk
Retail · United Kingdom
49High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Poshpromotions is a UK-based e-commerce retailer specializing in promotional items and printed merchandise. The website offers a broad range of product categories targeting businesses and organizations seeking branded gifts and promotional products. The platform is built on OpenCart CMS and utilizes modern web technologies such as jQuery, Bootstrap, and FontAwesome, providing a good user experience with mobile responsiveness and clear navigation. However, the website lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security measures appear basic, with no detected security headers and unknown SSL configuration. The WHOIS data for the domain is unavailable or indicates domain registration issues, which raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and domain registration verification to enhance trust and compliance.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.goringgolf.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable and the raw WHOIS response indicates the domain name is invalid under Nominet UK naming rules, suggesting the domain is either not properly registered or misconfigured. No business, contact, privacy, or security information is present on the site, severely limiting the ability to assess the business or security posture. The technical infrastructure appears minimal with only external font resources loaded, and no analytics or tracking technologies detected. Overall, the site lacks fundamental elements of a professional web presence and is effectively non-operational.
- RRadio XL
radioxl.net
Media
47High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Radio XL is a media broadcasting website offering live radio streaming, program schedules, presenter information, chart shows, and gallery content. The site targets a general audience interested in radio and music entertainment. The technical infrastructure includes modern frontend technologies such as Bootstrap, Font Awesome, Blazor Server, and integration with Facebook SDK for social media engagement. However, the site lacks comprehensive privacy and cookie policies, contact information, and security best practices. The WHOIS data is missing, indicating potential domain registration issues, which significantly impacts trust and legitimacy. Overall, the website is functional but requires improvements in security posture, privacy compliance, and business credibility to enhance user trust and regulatory adherence.
Safe Fire Protectionsafefireprotection.co.uk
Other · United Kingdom
46High
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Safe Fire Protection is a UK-based fire safety company with over 25 years of business operation and more than 40 years of industry experience. The company offers a comprehensive range of fire safety products and services including fire extinguishers, detection and alarm systems, fire doors, and consultancy services. Their market position is that of a reliable and accredited provider, supported by BAFE accreditation and a professional online presence. The website is built on WordPress using the Avada theme and includes modern SEO and cookie consent mechanisms, reflecting a moderate to advanced digital maturity. Security posture is good with HTTPS enforced and bot protection via Google reCAPTCHA, though some security headers and explicit policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR cookie consent requirements, but lacks visible privacy and security policy documentation. Strategic recommendations include adding privacy and security policies, improving accessibility, and publishing vulnerability disclosure information.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
44High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.spectacularopticians.co.uk is currently inaccessible, returning a 403 Forbidden error with no accessible content or metadata. The domain WHOIS lookup failed due to the domain name violating Nominet UK naming rules, indicating the domain is likely invalid or misconfigured. No business information, contact details, or policies are available on the site. Technically, the site lacks security headers, HTTPS enforcement, and any detectable technologies or frameworks. This results in a very low digital maturity and security posture. Overall, the site cannot be evaluated for business credibility or compliance due to lack of access and data. From a security perspective, the absence of HTTPS and security headers, combined with the domain registration issues, represent critical vulnerabilities and trust concerns. There is no evidence of privacy compliance or incident response readiness. The site is effectively non-functional and does not provide any user-facing content or services. Strategically, the business should urgently address domain registration issues, ensure proper DNS and hosting configuration, and implement HTTPS with security headers. Publishing clear privacy and cookie policies, contact information, and business details is essential to establish trust and compliance. Without these improvements, the website cannot serve its intended audience or meet basic security and regulatory standards.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.ambiencelandscapes.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks any meaningful content access. The domain WHOIS lookup failed due to the domain violating Nominet UK's naming rules, indicating the domain is likely invalid or unregistered. Consequently, no business information, contact details, or policies are available for analysis. The technical infrastructure appears minimal with only Google Fonts loaded, and no security headers or HTTPS details are observable. This severely limits the ability to assess the website's digital maturity or security posture. Overall, the site is non-functional and does not provide any business or security assurances.