High-risk security reports

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Project Quantity Surveyors Ltd is a small, established quantity surveying firm founded in 1991 and operating primarily in Northern Ireland. The company serves a diverse client base including architects, government departments, housing executives, and private developers, offering services such as project management, planning supervision, and expert witness reports. The website reflects a traditional business model focused on professional services within the construction and real estate sectors. Technically, the website is built on outdated technologies including Flash and lacks modern web standards such as HTTPS enforcement and mobile optimization, which impacts user experience and security posture. Security measures are minimal with no visible security headers or privacy policies, indicating compliance gaps especially concerning GDPR. The domain registration is consistent with the business history, showing a stable and legitimate presence since 2007. Overall, the website provides basic content and contact mechanisms but requires modernization and enhanced security and privacy practices to improve trust and compliance.

CS Electrical is a small, locally focused electrical and solar PV installation company based in Cornwall, UK. The company offers a range of services including electrical installations, renewables, solar panel installation, and maintenance. They hold multiple industry certifications such as NICEIC, Part P, MCS, and RECC, which position them as a credible and trustworthy service provider in their market niche. The website is professionally designed using WordPress and Elementor, featuring good SEO practices and structured data to enhance search visibility. Contact options include a phone number and a contact page, with social media presence on Facebook. However, the site lacks explicit privacy and cookie policies, which is a compliance gap.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Howlader & Co is a well-established chartered accountancy firm based in London, offering a comprehensive range of accounting and tax advisory services tailored to businesses of all sizes, including startups and small enterprises. With over 50 years of combined experience, the firm positions itself as a trusted partner for London businesses seeking expert financial guidance and tax efficiency. Their market position is reinforced by strong trust indicators such as professional certifications (ACCA, ICAEW, Xero Silver Partner) and excellent client reviews. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the website is built on WordPress using modern frameworks like Foundation and includes popular libraries such as jQuery and Owl Carousel. It integrates Google Analytics and Tag Manager for tracking and employs Google reCAPTCHA for form security. The site is mobile-optimized and SEO-friendly, though performance is moderate. Cookie consent is implemented with user customization options, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site uses HTTPS with good SSL configuration and includes some security best practices like CAPTCHA and consent banners. However, it lacks visible security headers and formal security or incident response policies. The WHOIS data is consistent with the business claims, showing a long-standing domain registration with a reputable UK registrar, supporting the legitimacy of the entity. Overall, Howlader & Co presents a credible, professional online presence with solid business credibility and moderate technical and security maturity. Enhancements in formal privacy documentation, security headers, and incident response disclosures would further strengthen their security posture and compliance standing.

Quality Environmental Services (QES) is a UK-based asbestos consultancy firm established in 2010, specializing in asbestos surveys and environmental assessments. The website presents a professional image with clear contact information and a focus on asbestos consultancy services. The technical infrastructure is built on WordPress, utilizing common plugins such as WPBakery Page Builder and Slider Revolution, with Google Analytics integrated for visitor tracking. Hosting is provided by GoDaddy.com, LLC, and the site uses HTTPS, indicating a secure connection. However, the absence of visible privacy and cookie policies suggests compliance gaps with GDPR and related privacy regulations. Security posture is moderate, with HTTPS enabled and anti-spam measures in place, but lacking explicit security headers and vulnerability disclosure mechanisms. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The domain www.rivafoods.co.uk is currently inaccessible and WHOIS data retrieval failed due to a domain naming error indicating the domain name contains too many parts and cannot be registered under Nominet UK rules. No website content, metadata, or contact information is available for analysis. This suggests the domain is either not active, improperly registered, or blocked. Consequently, no business, technical, or security insights can be reliably derived from the current data.

Wilson Defraine is a local family-run estate agency based in Newcastle upon Tyne, specializing in property sales, lettings, valuations, and maintenance services. With over 17 years of experience, the company targets buyers, sellers, landlords, and tenants in the local area, emphasizing personalized customer service and local market knowledge. The website reflects a professional and trustworthy business with clear contact information and multiple client testimonials. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Google Fonts, and integrates Google reCAPTCHA for form security. It is built on the 10ninety CMS platform and shows good mobile optimization and user experience. However, the site lacks some advanced security headers and explicit cookie consent mechanisms, which are areas for improvement. From a security perspective, the site uses HTTPS and includes anti-bot measures but does not present comprehensive security headers or detailed privacy compliance features. The WHOIS data for the domain is unavailable due to a registration error, which raises some concerns about domain legitimacy, though the website content and business information appear consistent and professional. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security practices and clearer privacy compliance to improve user trust and regulatory adherence.

Hickleys Ltd operates as a UK-based specialist in diagnostic and garage equipment, complemented by healthcare products, training services, and an automotive workshop. The company targets automotive professionals, locksmiths, healthcare users, and trainees, offering a diversified portfolio of products and services. The website reflects a medium-sized business with a consistent brand presence and good content quality. Technically, the site uses standard web technologies including jQuery and Google Analytics, with moderate performance and basic mobile optimization. Security posture is moderate but lacks visible security headers and explicit HTTPS confirmation in the provided data. Privacy compliance is basic, with a cookie consent banner and a privacy policy page present but no GDPR compliance indicators or detailed security policies. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the active website presence. Overall, the site is professional and safe but would benefit from enhanced security measures and clearer business contact information.

Thames Chase Trust operates as a non-profit organization dedicated to the regeneration and preservation of the Thames Chase Community Forest in the UK. With over 30 years of experience, it engages local communities through volunteering, nature activities, and health and wellbeing programs. The website reflects a well-established community trust with a clear mission and target audience focused on families, volunteers, and nature enthusiasts. Technically, the website employs modern JavaScript libraries, responsive design, and font services, ensuring a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The WHOIS lookup failed due to querying the subdomain rather than the domain, but the domain appears legitimate and consistent with the organization's history. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Cross Concrete Flooring Ltd is a small concrete flooring service provider currently in the process of launching a new website. The company presents itself with ISO certifications (ISO 45001, ISO 9001, ISO 14001) as trust indicators and provides clear contact details including phone and email. The website is built on WordPress using a coming soon maintenance plugin, with basic design and minimal content focused on informing visitors about the upcoming site and providing contact information. Technically, the site uses modern web fonts, Font Awesome icons, and AJAX for subscription forms, indicating moderate digital maturity. However, the absence of security headers and privacy/cookie policies highlights gaps in security and compliance. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy and ownership transparency. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. No tracking or analytics services are detected, suggesting minimal user tracking. Overall, the site is safe with no adult or questionable content but requires improvements in security, privacy compliance, and domain legitimacy to enhance trust and professionalism.

Pronovotech Limited is a UK-based specialist consultancy focused on assisting technology companies in claiming R&D tax incentives. Established in 2006, the company offers a range of tailored services including full claim preparation, technical documentation support, and assistance with HMRC enquiries. The website positions Pronovotech as an independent expert with a strong relationship with HMRC and a client base spanning multiple technology sectors. The digital infrastructure is built on WordPress with modern plugins and SEO tools, hosted by JaguarPC. The site is well-structured, mobile-optimized, and provides clear navigation and contact options. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a professional and credible business with a strong market position in the UK R&D tax relief consulting niche.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Farrendale Ltd is a UK-based electrical contracting company established in 2001, specializing in domestic electrical services including responsive call outs and planned rewires. The company operates primarily in the Midlands with capacity to serve clients UK-wide. It holds recognized accreditations such as NICEIC approval and Construction Line Gold membership, reinforcing its market credibility. The website is built on WordPress using Elementor, featuring a professional design with clear navigation and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies are absent. Overall, the site reflects a mature business with a solid digital presence and compliance with GDPR requirements.

Mark Bates & Sons Ltd is a small, independent family-run business specializing in the supply of ready mix concrete primarily serving the North West of England, including Manchester, Waterfoot, and Westhoughton. The company emphasizes punctual delivery, quality products, and customer service, supported by BSI and ISO certifications. Their market position is that of a trusted local supplier with over 20 years of operational history. The website reflects a professional and consistent brand image with clear business information and multiple branch locations. Technically, the website is built on WordPress with the UIkit framework, leveraging modern JavaScript libraries and Google services such as Tag Manager and reCAPTCHA. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers implementation. SEO practices are adequately addressed with proper metadata and structured data. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data query failed due to an invalid query on the subdomain, but the website's business legitimacy is supported by company registration details and certifications. Overall, the website presents a low risk profile with good business credibility and moderate technical maturity. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the security posture and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

PFS Fire & Security is a UK-based company specializing in fire prevention and security services, targeting residential and corporate clients primarily in Nottingham, Derby, and Leicester. The company offers a range of services including CCTV systems, on-site security, alarm monitoring, and fire protection. The website presents a professional image with clear contact information and client testimonials, positioning PFS as a regional leader with over a decade of experience. Technically, the website is built on WordPress using WooCommerce and Visual Composer, with standard plugins such as Revolution Slider and jQuery. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices evident. However, some plugins appear outdated, and accessibility features are basic. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and HSTS, which are recommended to enhance protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain registration legitimacy, though the website content itself appears legitimate. Overall, the website is functional and professional but would benefit from improved security practices and privacy compliance to enhance trust and reduce risk.

The website www.unionstreetgarage.co.uk is a domain parking and sales landing page operated by URLease.com, a premium domain marketplace. The site offers the domain for sale or lease but does not represent an active business or service. The content is minimal and primarily focused on domain sales with a single contact email provided. Technically, the site uses basic HTML, CSS, and Google Adsense for monetization. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no privacy or cookie policies. The WHOIS lookup failed, indicating the domain is not registered or invalid under Nominet UK rules, which significantly impacts trust and legitimacy. Overall, the site is a simple holding page with low business credibility and minimal technical sophistication.

The website at sherwinhall.com is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. This prevents any meaningful analysis of the business, services, or compliance posture from the website itself. The domain is registered with GoDaddy.com, LLC since 2008, indicating a long-standing registration, but no public-facing content is available to assess business operations or market positioning. The technical infrastructure appears minimal with no detected scripts, analytics, or security headers, and DNSSEC is not enabled. The lack of HTTPS information and security headers suggests a weak security posture. Privacy and cookie policies, terms of service, and contact information are absent, indicating poor privacy compliance and business credibility from the website perspective.

Jameson Lomax is a small, established IT support company based in the East Midlands, UK, specializing in IT support, cloud services including Microsoft 365, cyber security, IT procurement, and backup solutions. The company positions itself as a reliable partner focused on user-centric IT solutions to help businesses improve efficiency and profitability. The website is professionally designed using WordPress and modern plugins, providing a good user experience with clear navigation and mobile optimization. However, the absence of WHOIS registration data raises some concerns about domain transparency. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy and cookie policies are not found, indicating room for compliance improvement. Contact information is clearly provided, enhancing business credibility. Overall, the website reflects a trustworthy small business IT service provider with moderate technical maturity and some compliance gaps.

The website ww1.fowkesauto.com appears to be a minimal placeholder or parked domain with no substantive business content or branding. The page primarily consists of embedded iframes and scripts related to cookie consent management, with no visible company information, contact details, or privacy policies. The lack of WHOIS data for the domain raises significant concerns about its legitimacy and registration status. Technically, the site lacks HTTPS and standard security headers, indicating a weak security posture. The cookie consent mechanism is implemented, but overall privacy compliance is minimal. Given the absence of business information and security best practices, the site does not present itself as a credible or trustworthy business presence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.faun-zoeller.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain failed due to a Nominet UK naming rules violation, indicating the domain name contains too many parts and cannot be registered. This raises significant concerns about the legitimacy and proper registration of the domain. No business, contact, or policy information is available on the site, and no metadata or structured data is present to provide insights into the company or its operations. The technical infrastructure appears minimal with no detectable scripts, frameworks, or external resources, and no security headers or SSL configuration details are available from the content. Overall, the site lacks any visible content or trust indicators, resulting in a very low AI score and high risk from a security and business credibility perspective.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Trafalgar Public Relations is a small, specialized communications consultancy based in Cumbria, UK, led by Chris Nelson with over 30 years of experience. The company serves clients primarily in engineering, manufacturing, defence, energy, public sector, and professional services, offering a broad range of PR and communications services including media relations, corporate communications, and crisis management. The website reflects a professional and consistent brand image with clear service offerings and client case studies. Technically, the site is built on WordPress with common plugins and libraries, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and cookie notice present but no active consent mechanism. Overall, the site is trustworthy and well-positioned for its niche market but could improve in security and compliance transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.battydevelopments.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The domain WHOIS lookup failed due to the domain name violating Nominet UK naming rules, indicating the domain is invalid or improperly registered. Consequently, no business, contact, or compliance information is available from the site. The technical infrastructure appears minimal with only Google Fonts loaded externally, and no security headers or HTTPS information is evident from the content. This severely limits the ability to assess the company's digital maturity or security posture. Overall, the site is effectively non-functional for external visitors and lacks any visible trust or compliance indicators.

Edginton Racing is a specialized small business with over 30 years of experience in motor racing, focusing on single seater racing car restoration, maintenance, and driver training. The company targets motor racing enthusiasts and drivers seeking expert services in the UK. Their website reflects a professional and consistent brand presence with clear service offerings and contact channels. Technically, the site is built on WordPress using the Divi theme and includes common plugins such as Gravity Forms and Modula Gallery. It employs Google Analytics for user tracking and has implemented cookie consent mechanisms, indicating good privacy compliance. Security posture is moderate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. The WHOIS data is unavailable due to domain naming rules errors, which impacts trustworthiness and domain legitimacy assessment. Overall, the website is accessible, well-structured, and safe for general audiences, but could benefit from enhanced security practices and WHOIS transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.covertltd.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The domain is not found in the WHOIS database, indicating it may not be registered or is expired. No metadata, structured data, contact information, or business details are available for analysis. The site uses only Google Fonts externally and contains no scripts or analytics. Due to the lack of accessible content and registration data, the website's legitimacy and trustworthiness cannot be established. The security posture is unknown, with no security headers or SSL information detected. Overall, the site appears inactive or improperly configured, resulting in a very low risk assessment score.

Box and Seal is a small, independent packaging manufacturer based in Wiltshire, UK, specializing in bespoke and stock corrugated boxes with a strong emphasis on sustainable packaging solutions. Established in 2000, the company offers end-to-end packaging services including design, manufacture, and delivery, targeting businesses primarily in the South West of England. The website reflects a professional and customer-focused business with clear service offerings and environmental commitments. Technically, the website is built on the DNN CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Owl Carousel for UI components, along with Google Analytics for tracking and Tawk.to for live chat support. The site is mobile-optimized with good navigation and SEO practices, though some security best practices like HTTP security headers are not evident from the HTML source. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. The site includes cookie consent mechanisms and privacy policies indicating GDPR awareness, but lacks visible incident response or vulnerability disclosure information. WHOIS data is incomplete due to an invalid query format, limiting domain registration trust analysis. Overall, the website presents a trustworthy and professional business front with room for improvement in security transparency and WHOIS data clarity. The risk level is low, but enhancing security headers and providing incident response details would strengthen trust and compliance.

The website www.gradonconstruction.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked. The page contains no business-related content, contact information, or policies, and only loads minimal external resources such as Google Fonts. The domain WHOIS lookup failed with an error indicating the domain name is invalid under Nominet UK rules, suggesting the domain may not be properly registered or configured. This lack of accessible content and domain legitimacy severely limits the ability to assess the business or technical infrastructure. The security posture is poor due to lack of HTTPS and security headers, and no privacy or compliance information is present. Overall, the site appears non-functional or misconfigured, posing a high risk for trust and credibility.