High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
1,701–1,750 of 36,503
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
46High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.gelec.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed due to an invalid domain format, indicating the domain is either not registered or misconfigured. Consequently, no business information, contact details, or policies are available for analysis. The technical infrastructure appears minimal or non-existent from the accessible content, with no detectable technologies, scripts, or security headers. The security posture cannot be assessed due to lack of access and absence of HTTPS or security headers. Overall, the site is effectively blocked, resulting in a very low trust and credibility score. Strategic recommendations include resolving domain registration issues, enabling proper website access, implementing security best practices, and publishing essential compliance and contact information.
—
41High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
—
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.brightprintuk.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. There is no visible business information, metadata, or structured data to analyze. The domain WHOIS data is unavailable, indicating the domain may not be properly registered or is inactive. This severely limits the ability to assess the company's business model, services, or market position. Technically, the site lacks any detectable technologies, scripts, or security headers, and no privacy or cookie policies are present. Overall, the site appears non-operational or restricted, resulting in a very low trust and credibility profile.
- TThe Freelance FD Ltd
thefreelancefd.co.uk
Finance · United Kingdom
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Freelance FD Ltd operates as a freelance finance director consultancy specializing in providing part-time financial leadership and CFO services to small and medium-sized enterprises (SMEs) and startups, particularly in the UK market. The company targets fast-growing businesses needing flexible, high-level financial expertise without the commitment of full-time recruitment. Their service portfolio includes SME freelance finance, interim assignments, non-executive director roles, projects and investigations, education and training, and inward investment support. Technically, the website employs basic web technologies including jQuery 1.11.1, Spry MenuBar, and Google Fonts. The site is functional with good content quality and navigation but lacks modern security features such as HTTPS and security headers. Mobile optimization and accessibility are basic, and no advanced CMS or analytics tools are detected. From a security perspective, the absence of HTTPS and security headers, use of outdated JavaScript libraries, and lack of privacy or cookie policies indicate a low security posture. No forms or data collection mechanisms are present on the homepage, reducing immediate risk but also limiting user engagement. The WHOIS lookup failed due to domain naming rules violation, raising legitimacy concerns about the domain registration, though the website content appears professional and business-focused. Overall, the site presents a moderate risk profile with recommendations to implement HTTPS, update libraries, add privacy and cookie policies, and improve security headers to enhance trust and compliance.
HighView Motorshighviewmotors.co.uk
Transportation · United Kingdom
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
HighView Motors is a small independent automotive garage based in Kingsbury, London, specializing in MOT testing, car servicing, diagnostics, and repairs for premium brands such as BMW, Mercedes, Audi, and Volkswagen, as well as all other makes and models. The company has a well-established online presence with a professional WordPress-based website that provides clear contact information and service descriptions, targeting local vehicle owners seeking reliable automotive services. The website employs modern technologies including WordPress CMS, popular plugins like Slider Revolution and WPBakery Page Builder, and integrates Google Analytics for visitor tracking. Security measures include HTTPS enforcement and use of Google reCAPTCHA on forms, but lack explicit privacy and cookie policies, which are important for GDPR compliance. The domain is registered since 2006 with Fasthosts Internet Ltd, indicating a stable and legitimate business operation. Overall, the website is professional and functional but could improve privacy compliance and security transparency.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Ronset Printers Ltdronset.co.uk
Other · United Kingdom
47High
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Ronset Printers Ltd is a well-established family-run digital printing company based in Blackburn, UK, with over 50 years of experience. They specialize in a wide range of printing services including business cards, leaflets, posters, brochures, banners, stickers, large format printing, and signage. The company targets local businesses and organizations, offering high-quality print solutions with fast turnaround and excellent customer service. Their market position is that of a trusted local printing specialist with a strong reputation supported by positive Google reviews. Technically, the website is built on WordPress CMS and employs a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Hotjar, and Sendinblue for marketing and analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers are missing and could be improved. From a security and compliance perspective, the site implements cookie consent mechanisms but lacks an explicit privacy policy and terms of service pages on the homepage. No incident response or security policy information is found. WHOIS data lookup failed due to querying the subdomain rather than the registered domain, but this is a technical issue rather than a trust concern. Overall, the site demonstrates a good security baseline with room for improvement in policy transparency and security headers. The overall risk assessment is low, with the site appearing legitimate and professionally maintained. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and maintaining up-to-date software to mitigate vulnerabilities.
- MMartex Paints Ltd
martexpaints.co.uk
Manufacturing · United Kingdom
44High
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Martex Paints Ltd is a UK-based small manufacturing company specializing in powder coating paints and related products such as primers and metallic powders. The company holds industry certifications like Qualicoat and GSB, indicating adherence to quality standards. Their website provides basic information about their products and services targeted at industrial and commercial customers requiring powder coating solutions. The technical infrastructure of the website is outdated, relying on legacy HTML and JavaScript without modern CMS or frameworks. There is no visible HTTPS or advanced security headers, which impacts the security posture negatively. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism. Contact information is clearly displayed, enhancing business credibility. WHOIS data is unavailable due to domain naming errors, which raises concerns about domain registration legitimacy. Overall, the website is functional but requires modernization and security improvements.
AJ Marshallajmarshall.com
Manufacturing · United Kingdom
49High
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
AJ Marshall is a well-established UK-based steel stockholder specializing in high-performance steel plates including abrasion resistant, high strength, Corten weathering, and manganese steel. With over 40 years of industry experience and a large warehouse stock, the company serves manufacturing, construction, and engineering sectors nationwide. Their business model focuses on providing quality steel products with flexible ordering options and nationwide delivery, positioning them as a leading independent steel supplier in the UK. The website reflects a professional digital presence built on WordPress with modern technologies and integrated analytics and consent management tools. Security posture is solid with HTTPS and anti-spam measures, though some advanced security headers and DNSSEC are missing. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the site is trustworthy, user-friendly, and aligned with business goals.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Bridges Insurance Brokers Ltdbridges.insure
Other · United Kingdom
49High
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Bridges Insurance Brokers Ltd is a well-established independent insurance brokerage firm based in the United Kingdom, with over 54 years of experience serving commercial, property, high-net-worth, charity, and community sectors. The company offers tailored insurance solutions and prides itself on personalized service and specialist knowledge, particularly in niche markets such as church and charity insurance. Their market position is supported by strong trust indicators including FCA registration, client testimonials, and partnerships with major insurers. Technically, the website employs modern web technologies including Google Analytics, Facebook SDK, and cookie consent mechanisms, ensuring a user-friendly and compliant digital presence. The site is mobile-optimized with good navigation and content relevance, although some security headers are missing which could be improved. The website is fully accessible without any WAF or blocking mechanisms, indicating stable hosting and infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear policies and GDPR adherence. The WHOIS data is unavailable due to privacy protection, but the business legitimacy is supported by consistent contact information and FCA registration. Overall, Bridges Insurance demonstrates a solid business and digital presence with good security hygiene and privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance their security posture and trustworthiness.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Wwww.executivestay.co.uk
executivestay.co.uk
Other
42High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The provided content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content for the domain is inaccessible or blocked. No business-related content, metadata, or contact information is present. The page is a default offline or error page rendered by the Chrome browser, not a functional website. Consequently, no meaningful business or security insights can be derived from the content. The technical infrastructure appears to be limited to Chromium's internal scripts for the offline game, with no external hosting or CMS detected. Security posture cannot be assessed due to lack of accessible content and headers. Overall, the domain's legitimacy and business credibility cannot be evaluated based on the provided data.
- CClook Internet | Account Setup
berryred.co.uk
—
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
- GGeraint Davies Picture Framing
geraintdaviesframes.co.uk
Retail · United Kingdom
45High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Geraint Davies Picture Framing is a small bespoke picture framing business located in Frome, Somerset, UK. The company specializes in hand-finished bespoke frames, conservation housing for works on paper, and offers art consultancy services. The business targets local customers and art collectors, with additional delivery and collection services in London. The website content is basic but relevant, providing essential information about the business and contact details, primarily a phone number and physical address. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS. There is no evidence of HTTPS or advanced security measures, and no privacy or cookie policies are present. The site lacks forms, social media integration, and analytics tools, indicating a low level of digital maturity and minimal data collection. From a security perspective, the absence of HTTPS and security headers is a concern. The WHOIS lookup failed due to domain naming rules violations, which raises questions about domain legitimacy or configuration, although the website content appears legitimate. No vulnerabilities or tracking technologies were detected. Overall, the site has a low security posture and lacks compliance documentation. The overall risk is moderate due to the lack of HTTPS and privacy compliance, combined with WHOIS inconsistencies. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and clarifying domain registration details to enhance trust and security.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- SSimon James Executive
sjexecutive.co.uk
Transportation · United Kingdom
44High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Simon James Executive is a UK-based small business specializing in executive and corporate transport services, including airport transfers, luxury taxis, and chauffeur-driven vehicles. The company emphasizes professional service with a fleet of Mercedes Benz vehicles and targets corporate clients and private customers seeking high-quality transport solutions. The website is built using Adobe Muse and includes integration with Google Analytics and Twitter widgets, indicating a moderate level of digital maturity. However, the technical infrastructure shows signs of aging, such as the use of outdated jQuery and lack of HTTPS enforcement. Security posture is weak with no visible security headers or privacy policies, exposing potential risks. The WHOIS data is unavailable due to domain registration errors, which negatively impacts trust and legitimacy assessments. Overall, the business appears credible and professional, but the website requires significant improvements in security and privacy compliance to reduce risk and enhance user trust.
- ZZFA Group
zfagroup.com
Real Estate · United Kingdom
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
ZFA Group is a modern property management company operating primarily in London and Dublin, offering services such as guaranteed rent, free maintenance, tenant sourcing, and hospitality management. The company positions itself as a trusted and fast-growing player in the residential asset management sector, managing over 1,300 properties valued at approximately £500 million. Their website reflects a professional business with clear service offerings and customer testimonials, targeting landlords and tenants seeking reliable property management solutions. Technically, the website employs a modern front-end stack including jQuery, Bootstrap, Google Analytics, and Google Tag Manager, with asynchronous script loading to optimize performance. The site is mobile responsive and SEO optimized, though accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of privacy and cookie policies and no incident response contact details indicate gaps in compliance and security transparency. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional website presence. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance, and domain registration transparency to improve trustworthiness and reduce risk exposure.
Scarisbrick Hall Schoolscarisbrickhallschool.co.uk
Education · United Kingdom
44High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Scarisbrick Hall School is a well-established independent educational institution in the North West of England, offering personalized education from nursery through to sixth form. The school positions itself as a top-tier independent school with excellent academic results and a strong reputation, supported by an ISI Grade 1 rating. The website reflects a professional digital presence built on WordPress with modern plugins and SEO optimizations. Social media integration and testimonials enhance trustworthiness. However, the absence of WHOIS data due to domain naming rules limits domain registration verification. Security posture is good with HTTPS and no obvious vulnerabilities, but cookie consent mechanisms and security headers could be improved. Overall, the site is suitable for its target audience of parents and students seeking quality independent education.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- AAvente Limited
avente.co.uk
Technology · United Kingdom
44High
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Avente Limited is a UK-based technology company specializing in comprehensive networking solutions including design, supply, installation, and maintenance of LANs, WANs, voice, and data networks. The company targets businesses seeking secure and flexible network infrastructures, offering tailored systems and consultancy services. Their market position is that of a niche provider with partnerships with recognized technology brands, focusing on delivering reliable and secure IT infrastructure solutions. Technically, the website employs legacy JavaScript libraries such as jQuery 1.8.2 and Modernizr 2.6.2, with UI components like Nivo Slider and Slicknav for navigation. The site lacks HTTPS enforcement and security headers, and loads resources over HTTP, indicating a need for modernization and improved security practices. Mobile optimization and accessibility are basic, and SEO features are minimal. From a security perspective, the site shows weaknesses including outdated libraries with known vulnerabilities, absence of HTTPS, and no visible security headers. The contact form lacks advanced protections such as CAPTCHA or CSRF tokens. No privacy or cookie policies are present, indicating poor privacy compliance. WHOIS data is unavailable due to domain naming rule violations, raising questions about domain legitimacy despite the professional website content. Overall, the website presents a moderate risk profile with good business content but significant technical and security shortcomings. Strategic improvements in HTTPS adoption, library updates, security headers, and privacy compliance are recommended to enhance trust and security posture.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- ARNO Werkzeuge
arno.de
Manufacturing · Germany
47High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
ARNO Werkzeuge is a German manufacturing company specializing in precision cutting tools for turning, long turning, grooving, drilling, and milling applications. The company offers a broad portfolio of tooling systems and tool management solutions, targeting manufacturing professionals and industries requiring high-quality tooling. Their website is professionally designed using TYPO3 CMS, hosted on AWS infrastructure, and supports multiple languages, indicating a global market presence. The technical infrastructure includes modern analytics and consent management tools, reflecting a mature digital presence. Security posture is adequate with HTTPS and cookie consent implemented; however, there is room for improvement in security headers and published security policies. Overall, the website is trustworthy and well-positioned in its industry, though it lacks explicit privacy and terms of service documentation. Strategic improvements in compliance and security transparency would enhance trust and regulatory adherence.
- WWhitcher Wildlife Ltd
whitcher-wildlife.co.uk
Transportation · United Kingdom
48High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Whitcher Wildlife Ltd is a family-run ecological consultancy based in the United Kingdom, specializing in practical ecology surveys and environmental advice across infrastructure, industry, and private sectors. Established since 1998, the company positions itself as a trusted provider delivering high-quality ecological services including species-specific surveys, ecological impact assessments, and biodiversity net gain assessments. Their client base includes reputable organizations and local councils, indicating a strong market presence in the UK ecological consultancy sector. Technically, the website is built on OctoberCMS and leverages modern web technologies such as GSAP for animations, Owl Carousel for content display, and Google Analytics with IP anonymization for user insights. The site is mobile-optimized with good SEO practices and a professional design, providing a positive user experience. Cookie consent mechanisms and a comprehensive privacy policy demonstrate attention to privacy compliance. From a security perspective, the website enforces HTTPS and employs privacy-conscious analytics configurations. However, the absence of visible security headers and lack of explicit security or incident response policies suggest areas for improvement. The WHOIS data for the domain is unavailable due to a domain registration error from Nominet UK, which raises some concerns about domain legitimacy, although the website content and business information appear credible. Overall, the website presents a professional and trustworthy front for Whitcher Wildlife Ltd, but the domain registration anomaly and minor security header omissions should be addressed to enhance trust and security posture.
- SSITE NOT FOUND
acatlow.co.uk
Other
49High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The domain www.acatlow.co.uk is currently not registered due to violation of Nominet UK's naming rules, specifically that the domain name contains too many parts. Consequently, the website is inaccessible and displays a generic 'Site not found' error page indicating it is unpublished or unassigned. There is no business information, contact details, or policies available on the site. The technical footprint is minimal, with only a font stylesheet loaded from an external CDN. No security headers, HTTPS configuration, or analytics scripts are detected, indicating a lack of digital maturity and security posture. Overall, the domain and website appear inactive and not legitimate for business use at this time.
- Miller Rayner
miller-rayner.co.uk
Retail · United Kingdom
46High
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Miller Rayner operates as a specialized e-commerce retailer focusing on marine and aviation crew dress clothing and uniforms. The website offers a wide range of products including men's and women's uniforms, cadet uniforms, epaulettes, insignia, and related accessories, targeting professionals and cadets in the marine and aviation sectors. The business model is retail-oriented with a niche market focus, primarily serving customers in the United Kingdom. The website is built on WordPress with WooCommerce, leveraging modern plugins and technologies to provide a functional and visually appealing shopping experience. Technical infrastructure includes React vendor scripts, LayerSlider for visual content, and PayPal integration for payments, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and secure payment SDK usage; however, the absence of security headers and privacy policies suggests room for improvement. The WHOIS data is incomplete due to a domain registration anomaly, but the website is fully accessible without WAF or blocking mechanisms. Overall, the site presents a professional front with moderate trustworthiness but requires enhancements in privacy compliance and security best practices to strengthen its risk profile.
MP Burke Transportmpburketransport.com
Transportation · United Kingdom
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
MP Burke Transport is a small, established haulage and logistics company based in Paisley, Scotland, with over 30 years of experience serving food and drink producers across Scotland and the UK. Their services include UK transport, groupage and logistics, warehousing, and freight forwarding. The company emphasizes quality and professionalism, maintaining a fleet of eight vehicles and trailers with high standards for equipment and driver presentation. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Slider Revolution, with moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA on forms, but lack of security headers and privacy policies indicate room for improvement. The absence of WHOIS registration data is a notable concern, reducing domain trustworthiness despite the professional site content. Overall, the website is functional and credible but would benefit from enhanced security and compliance documentation.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
First Zipper UK Ltdzippaproducts.co.uk
Retail · United Kingdom
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Zippa Products is a UK-based family business established in 1985 specializing in supplying promotional workwear, branded clothing, PPE, and custom embroidery and printing services. The company serves a diverse range of industries including construction, offshore, hospitality, sports, and education, providing a comprehensive product range to meet operational and branding needs. The website is professionally designed using WordPress and WooCommerce, optimized for performance and mobile responsiveness, and secured with HTTPS and reCAPTCHA on forms. However, the absence of explicit privacy and cookie policies indicates compliance gaps. WHOIS data is unavailable due to domain lookup issues, which slightly impacts trustworthiness from a domain registration perspective. Overall, the business presents a credible and professional online presence with room for improvement in privacy compliance and security headers.
- Money Release, The UK’s specialist Equity Release Company.
moneyrelease.co.uk
—
49High
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Arcadia (South West) Limitedarcadiasw.co.uk
Finance · United Kingdom
45High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Arcadia (South West) Limited operates as a professional accounting and tax advisory firm serving owner-managed businesses, sole traders, and private individuals primarily in Somerset and Weston super Mare, UK. The company offers a comprehensive range of services including accounts preparation, bookkeeping, payroll, tax planning, and VAT returns, positioning itself as a trusted local financial services provider. The website reflects a professional and consistent brand image with clear contact information and service descriptions, supporting its market position as a small but client-focused firm. Technically, the website is built on Joomla CMS and leverages common web technologies such as jQuery, Bootstrap, and Smart Slider 3 for UI components. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security practices, particularly the implementation of HTTP security headers and verification of SSL/TLS configurations. From a security perspective, the site employs a cookie consent mechanism and maintains a privacy policy, indicating awareness of GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data due to an invalid query limits the ability to fully verify domain registration legitimacy, but the website's professional presentation and contact details support its credibility. Overall, the website presents a low-risk profile with a solid business foundation and adequate privacy compliance. Strategic improvements in security headers, SSL configuration, and incident response documentation would enhance the security posture and trustworthiness further.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- SSharp Retail Systems | Premier Partner for the complete range of Sharp cash registers
sharpretailsystems.co.uk
—
44High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
- TThe British Bung Company Ltd
britishbung.co.uk
Manufacturing · United Kingdom
41High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The British Bung Company Ltd is a UK-based manufacturer specializing in traditional wooden cask closures primarily serving the brewing industry. Their product range includes keystones, shives, pegs, plugs, bespoke items, and miscellaneous wooden closures. The company positions itself as a leading manufacturer in this niche market, targeting brewing professionals and other industrial customers. The website content is professional and informative, reflecting a small-sized manufacturing business with a clear focus on quality and tradition. Technically, the website employs a modern front-end stack including jQuery, Modernizr, Foundation CSS framework, and various UI plugins such as Nivo Slider and carouFredSel. The site is moderately optimized for performance and mobile responsiveness but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident from the content. From a security perspective, the site uses HTTPS but lacks visible security headers and advanced security configurations. No privacy, cookie, or terms of service policies are present, indicating gaps in privacy compliance. The WHOIS lookup failed due to domain registration errors, raising concerns about domain legitimacy and registration consistency. No incident response or vulnerability disclosure information is available. Overall, the website is functional and professional but requires improvements in security posture, privacy compliance, and domain registration legitimacy to enhance trustworthiness and reduce risk.
Todd Milburn Partnership Limitedtodd-milburn.co.uk
Real Estate · United Kingdom
41High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Todd Milburn Partnership Limited is a well-established UK-based consultancy specializing in property and construction services, including project management, quantity surveying, employer’s agent roles, and principal designer services. With over 30 years of experience, the company positions itself as a trusted independent specialist serving both public and private sector clients. The website reflects a professional and consistent brand image, supported by recognized industry certifications such as RICS and APS. Contact information is clearly provided, enhancing business credibility. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Slider Revolution, hosted by 20i Ltd. The site is mobile-optimized and performs moderately well, with good SEO practices evident. Security posture is solid with HTTPS enforced and no exposed sensitive data, though it lacks advanced security headers and published security policies. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet GDPR requirements. Overall, the security posture is good but could be improved by implementing security headers, publishing incident response and vulnerability disclosure information, and enhancing privacy compliance. The site is free from adult or questionable content, targeting a general professional audience. The domain registration is consistent with the business claims, showing a long-standing presence and legitimacy. Strategic recommendations include enhancing privacy and cookie policies, adding security and incident response documentation, and improving accessibility features to further strengthen trust and compliance.
Oaks Flooring Limitedoaksflooring.co.uk
Retail · United Kingdom
49High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Oaks Flooring Limited is a well-established, family-run flooring retailer and installer based in Kent, UK, with over 30 years of experience. The company offers a wide range of flooring products including carpets, luxury vinyl tiles, laminate, wood flooring, and smart choice flooring, targeting both homeowners and trade customers in Kent, Surrey, and London. Their market position is strengthened by multiple showrooms, a strong reputation for quality and service, and a comprehensive installation service. The website reflects a professional and trustworthy business with detailed product offerings, customer testimonials, and clear contact information. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and business review integrations. It employs Google reCAPTCHA for form security and has a cookie consent mechanism in place, indicating a good level of digital maturity and privacy compliance. The site is mobile-optimized and SEO-friendly, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and has implemented spam protection on forms. However, no explicit security policies or incident response information is provided, and security headers are not evident in the HTML content. The WHOIS data for the domain is unavailable due to an incorrect query on the subdomain, but the website content and contact details strongly indicate a legitimate business. Overall, the security posture is good but could benefit from enhanced transparency and technical hardening. The overall risk assessment is low, with the main recommendation being to correct WHOIS queries for domain verification, implement security headers, and consider publishing security and incident response policies to further enhance trust and compliance.
- SSue Prince Resourcing Ltd
sueprinceresourcing.com
Hospitality · United Kingdom
45High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Sue Prince Resourcing Ltd is a specialized recruitment agency focusing on senior and managerial roles within the hospitality sector in the UK and internationally. The company serves a diverse client base ranging from large hotel brands and venues to independent hoteliers, offering recruitment services for roles in revenue management, sales, marketing, e-commerce, events, human resources, and general management. The website reflects a niche market positioning with a clear business model centered on personalized recruitment services. Technically, the website is built on WordPress with Bootstrap and jQuery, hosted likely via GoDaddy, and employs standard tracking tools such as Google Analytics and Google Tag Manager. While the site enforces HTTPS and includes basic bot protection on forms, it lacks advanced security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is minimal, with no cookie consent mechanism despite active tracking scripts, and no published security or incident response policies. Overall, the website is professional and functional but would benefit from security and privacy enhancements to strengthen trust and compliance.
Memoria Limitedsouthoxfordmemorial.co.uk
Other · United Kingdom
43High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Memoria Limited operates the South Oxfordshire Crematorium and Memorial Park, providing a range of funeral, cremation, burial, and memorial services across the UK. The company positions itself as a leading crematorium operator with a focus on distinguished service in beautiful settings. Their website is professionally designed, content-rich, and targets bereaved families seeking compassionate and comprehensive funeral services. Technically, the site is built on WordPress with modern libraries and plugins, offering good mobile optimization and accessibility. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit incident response information. Privacy compliance is addressed with a comprehensive privacy policy, though cookie consent mechanisms could be improved. Overall, the website reflects a credible and trustworthy business with strong customer engagement and positive reviews.