High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,201–2,250 of 36,503
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- SSheringham Museum | conserving and celebrating Sheringham's rich heritage
sheringhammuseum.co.uk
Non-profit · United Kingdom
43High
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Sheringham Museum is a local heritage organization focused on conserving and celebrating the rich history of Sheringham. The website serves as an informational platform for visitors and the local community, providing details about the museum's activities and heritage. The technical infrastructure is based on WordPress with the Divi theme and WooCommerce plugins, indicating some e-commerce or donation capabilities. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. Security posture is basic, with no evident security headers or advanced protections, and the WHOIS data reveals domain registration inconsistencies that may affect trust. Overall, the site is functional but would benefit from enhanced security measures and clearer privacy compliance.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
A1 Waste Management & Skip Hirea1skip-hire.co.uk
Other · United Kingdom
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
A1 Waste Management & Skip Hire is a family-run waste management business operating for over 20 years in the North West of England, specializing in commercial and domestic waste services including skip hire, scrap metal recycling, and hazardous waste disposal. The company holds relevant waste licenses and operates from a licensed waste transfer station in Accrington, Lancashire, positioning itself as a leading integrated waste management provider in the region. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Google Analytics, providing a good user experience with mobile optimization and structured data for SEO. Security posture is solid with HTTPS and reCAPTCHA integration, though lacking some security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
- Sstephens.law
stephensandassociates.com
Other
42High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) rather than an externally hosted website. This page is displayed when Chrome cannot load a requested webpage, often due to network issues or offline status. It includes embedded Chromium open-source scripts for the offline dinosaur game and basic styling but contains no business-related content, metadata, or contact information. Consequently, no meaningful business or security policies are present. The technical infrastructure is limited to client-side scripts embedded within the browser, with no hosting or server-side components visible. Security posture is minimal as this is not a public-facing website but an internal error page. Overall, the page is safe but provides no business or privacy assurances.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
3D Eye3-d-eye.co.uk
Retail · United Kingdom
41High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
3D Eye is a well-established creative production house based in West London, specializing in delivering 3D solutions for the fashion, retail, events, and brand activation industries. Founded in 1999, the company operates from a large workshop and studio, offering integrated design and fabrication services with a skilled in-house team. Their market position is strong, supported by collaborations with high-profile clients and a professional online presence. Technically, the website is built on WordPress with modern plugins and themes, providing good SEO and mobile optimization, though some performance and security enhancements are possible. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, but improvements in privacy and security policies are recommended.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- VViking Hardware
vikinghardware.com
Manufacturing · United Kingdom
46High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Viking Hardware is a UK-based company specializing in architectural ironmongery and building supplies, serving regions including Hull, Scunthorpe, and Grimsby. The company operates physical showrooms and offers a range of products such as internal doors and building plastics, targeting construction professionals and industrial clients. Their website reflects a professional presence with clear business information and active social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, and integrates Google Analytics and Zendesk Chat for customer interaction and analytics. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trust. Security posture is moderate with HTTPS implied but lacking visible security headers and privacy compliance elements such as cookie and privacy policies. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.
Seymour Kitchensseymourkitchens.co.uk
Manufacturing · United Kingdom
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Seymour Kitchens is a well-established, family-run bespoke kitchen manufacturer and supplier based in Guildford, Surrey. With over 30 years of experience, the company offers a range of traditional and contemporary kitchen designs, emphasizing craftsmanship and client-focused service. Their market position is strong within the local bespoke kitchen sector, supported by positive customer testimonials and an active social media presence. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS enabled, though improvements in security headers and privacy compliance are recommended. Overall, the business presents a credible and professional online presence with room for enhanced privacy and security practices.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Westfield Medicalwestmed.co.uk
Healthcare · United Kingdom
46High
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Westfield Medical operates as a specialist supplier of sterilisation barrier solutions, prominently featuring their Humipak product line. The company targets healthcare professionals and organizations requiring high-quality sterilisation products. Their market position is that of a focused B2B supplier within the healthcare sector. The website is built on a modern WordPress platform utilizing WooCommerce for e-commerce capabilities and Gravity Forms for data collection, indicating a mature digital infrastructure. The presence of Yoast SEO and Google Analytics with IP anonymization reflects attention to SEO and privacy considerations. Security posture is generally strong with enforced HTTPS and no visible sensitive data exposure, though the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. The domain WHOIS data is unavailable due to registry naming rules violations, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is functional, secure, and professional but would benefit from enhanced privacy compliance and clearer domain registration legitimacy.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.leshoumets.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain failed to return any registration data, indicating the domain may not be registered, expired, or otherwise unavailable. Due to the lack of accessible content, no business information, contact details, or compliance policies are present on the site. Technically, the site only loads Google Fonts and basic HTML/CSS with no advanced frameworks or CMS detected. Security posture cannot be assessed due to the absence of HTTPS information and security headers. Overall, the site appears inactive or misconfigured, raising significant concerns about legitimacy and trustworthiness.
- Kiddiwinkles Care and Learning Centre Ltd.
kiddiwinkles.co.uk
Education · United Kingdom
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Kiddiwinkles Care and Learning Centre Ltd. operates a regional childcare and pre-school education service with multiple centres in Northern Ireland, including Cookstown, Dungannon, Moneymore, and Castledawson. The website presents a professional and consistent brand image, targeting parents and families seeking quality early childhood education. Key offerings include childcare services, a membership program called The Founder's Circle, and an emotional wellbeing initiative named The Heartstrong Programme. The company has an established market presence since 2006, supported by clear contact information and active social media channels. Technically, the website is built on WordPress and utilizes common JavaScript libraries such as jQuery, Bootstrap, and Mootools. Hosting is provided by Nutty About Hosting Ltd. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO optimization is present but could be improved. Analytics and marketing tools include Google Analytics and Facebook Pixel, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and uses CSRF tokens, but lacks visible security headers and a formal privacy or cookie policy, which are compliance gaps. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data confirms a consistent and legitimate domain registration aligned with the business history. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and formalized policies to strengthen its security posture and regulatory adherence.
- SS H & D Smith
smithsofficesupplies.co.uk
Retail · United Kingdom
37High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
S H & D Smith operates a UK-based office supplies e-commerce website targeting schools and businesses. The company offers a broad range of products including paper supplies, technology, furniture, facilities management, and catering items. The website supports account applications, quick order functionality, and price match offers, positioning itself as a regional supplier with a focus on B2B sales. Technically, the site uses common JavaScript libraries such as jQuery, Typeahead.js, and Google reCAPTCHA for form security, hosted on a PulseStore platform. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. Security posture is moderate, with HTTPS implied but no visible security headers or advanced policies. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain legitimacy, though the website content and contact information appear consistent and professional. Privacy and cookie policies exist but are basic, and no advanced incident response or security certifications are evident.
- TThis app isn't live yet
meridianai.co.uk
Other
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.meridianai.co.uk currently serves as a placeholder page hosted on Replit, indicating that the actual application or service is not live yet. There is no substantive business information, contact details, or service descriptions available. The domain WHOIS lookup failed due to an invalid domain format, suggesting the domain is either not registered or improperly configured. This severely limits the ability to assess the company's legitimacy or market presence. Technically, the site uses basic HTML, CSS, and JavaScript with external resources loaded from Google Fonts and Replit documentation. The hosting platform is Replit, which is commonly used for development and prototyping. The site lacks HTTPS information and security headers, and no analytics or tracking technologies are present. Mobile optimization and accessibility are basic but functional given the minimal content. From a security perspective, the absence of HTTPS, security headers, and privacy policies indicates a very low security posture. The WHOIS data failure and domain registration issues further reduce trustworthiness. There are no forms or data collection points, so data protection risks are minimal but also indicate no active business operations. Overall, the website is non-functional as a business site and presents a high risk due to lack of legitimacy and security controls. Strategic recommendations include properly registering the domain, deploying a secure and fully functional website with clear business information, implementing HTTPS and security best practices, and publishing privacy and cookie policies to comply with regulations.
CPS Cleaning Equipment Ltdcpscleaningequipment.com
Transportation · United Kingdom
49High
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
CPS Cleaning Equipment Ltd is a small UK-based family-run business established in 2008, specializing in the sale, hire, servicing, and repair of cleaning equipment and chemicals primarily for the transport industry. The company maintains a professional online presence with a well-structured WordPress website utilizing WooCommerce for e-commerce capabilities. The website is optimized for SEO with comprehensive metadata and structured data, targeting business customers in the cleaning and transport sectors. Technically, the site uses modern web technologies including jQuery, UIkit, and Yoast SEO, providing a good user experience with mobile responsiveness and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms or publish security policies. Overall, the domain registration details align well with the business claims, indicating legitimacy and stability. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance trust and compliance.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Pure Foods Systemspurefoodssystems.co.uk
Retail · United Kingdom
46High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Pure Foods Systems is a UK-based specialist vending machine supplier headquartered in London, offering a wide range of vending machines, coffee machines, catering equipment, and related services such as rental, lease, and repair. The company targets businesses and organizations across the United Kingdom seeking vending and catering solutions. The website is professionally designed using WordPress with the Divi theme and includes detailed product and service menus, indicating a mature digital presence. Technically, the site uses modern web technologies and plugins, including Yoast SEO and LayerSlider, and is served over HTTPS with Google Analytics tracking implemented. However, some security best practices such as security headers and explicit privacy and cookie policies are missing, which could be improved to enhance compliance and trust. The WHOIS data for the domain is unavailable due to a domain registration error related to the 'www' prefix, but the website itself is accessible and active, suggesting the domain is properly registered without 'www'. Overall, the site presents a moderate security posture with room for improvement in privacy compliance and security hardening.
Exel Foodsexelfoods.com
Retail
41High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Exel Foods is a wholesale and distribution company specializing in food products, targeting wholesale buyers and distributors. The website is built on WordPress with WooCommerce and Elementor, providing a professional and mobile-optimized user experience. The technical infrastructure is modern but could benefit from enhanced security measures such as DNSSEC and security headers. The security posture is moderate with HTTPS enabled but lacks advanced protections and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is legitimate and consistent with a stable business presence since 2011. Strategic improvements in privacy compliance and security practices would enhance trust and reduce risk.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.arcusglobal.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The WHOIS lookup for the domain failed to return any registration data, indicating that the domain may not be registered or the data is not publicly available. Due to the lack of accessible content, no business information, contact details, or policies are present on the site. Technically, the site does not reveal any technologies, scripts, or frameworks in use. The security posture cannot be properly evaluated given the blocked access and absence of security headers or SSL information. Overall, the site appears inactive or improperly configured, posing a high risk for trust and legitimacy.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- IIndex of /
oldenterprise.co.uk
Other
45High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website at www.oldenterprise.co.uk is effectively inaccessible as a functional business site. The content is limited to a basic directory index page with no metadata, no business information, and no interactive elements. The domain itself is invalid per Nominet UK naming rules and cannot be registered, indicating that the domain is either misconfigured or non-existent. Technically, the site lacks HTTPS, security headers, and any modern web technologies, resulting in a poor security posture and minimal technical maturity. There are no privacy or cookie policies, no contact information, and no trust indicators, which further diminishes the site's credibility and compliance standing. Overall, the site appears to be either abandoned or incorrectly set up, with no evidence of active business operations or security best practices.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- LLondon Environmental Pest Control Limited
londonenv.com
Other · United Kingdom
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
London Environmental Pest Control Limited operates a professional website offering environmental health and safety services primarily in London. Their key offerings include pest control, cleaning, washroom services, steel work, and rope access, targeting both commercial and residential clients. The company demonstrates trustworthiness through certifications such as NPTA Accreditation, Constructionline, and SafeContractor. The website is built on WordPress with common plugins and shows good design and usability, though it lacks explicit privacy and cookie policies. Technically, the site uses modern frameworks and libraries but lacks visible security headers and detailed security policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which impacts trust. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency.
- BBarton Fabrications Limited
bartonfabs.co.uk
Manufacturing · United Kingdom
48High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Barton Fabrications Limited is a UK-based company specializing in the design, manufacture, installation, and servicing of aluminium and stainless steel bulk storage silos and pressure vessels. Established in 1981, Barton positions itself as a market leader in the UK for technical silos serving industries such as chemicals, plastics, food, and pharmaceuticals. The company offers a comprehensive range of services including bespoke silo design, installation, ATEX refurbishment, and silo modifications. Their website reflects a professional and consistent brand image, targeting industrial clients requiring bulk storage solutions. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and popular slider and carousel libraries. It is mobile-optimized with good navigation and SEO practices. The presence of multiple Google Analytics and Tag Manager scripts indicates active digital marketing and user behavior tracking. However, the site lacks a cookie consent mechanism, which is a privacy compliance gap. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. However, no security headers were detected, and there is no published security policy or incident response contact information. The WHOIS lookup failed due to domain naming rules errors, which is unusual and reduces domain trustworthiness. Despite this, the website content and business information appear legitimate and professional. Overall, Barton Fabrications presents a credible industrial business with a well-structured website. Security and privacy compliance can be improved by adding security headers, cookie consent, and incident response details. The WHOIS anomaly should be investigated to ensure domain registration legitimacy and continuity.
- OOrchid Farmtech
orchidfarmtech.co.uk
Technology · United Kingdom
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Orchid Farmtech is a UK-based small business specializing in farm computer software and IT support services tailored for livestock farming enterprises including beef, dairy, and sheep management. Established around 2016, the company positions itself as a niche provider helping UK farmers leverage technology for business management and marketing. Their website reflects a professional and consistent brand presence with clear service offerings and certifications such as Microsoft Partner and BCMS approval, enhancing trustworthiness. Technically, the website is built on WordPress using the Weaver Xtreme theme and integrates common technologies like jQuery, MasterSlider, and Google Analytics via MonsterInsights. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are lacking, indicating room for improvement in compliance and defense-in-depth. The security posture is adequate for the business scale, with no detected vulnerabilities or exposed sensitive data. However, the absence of a cookie consent banner and security headers slightly reduces privacy compliance scores. The WHOIS lookup for the domain 'www.orchidfarmtech.co.uk' failed due to naming rules, but the website is accessible and consistent with business claims, suggesting the domain is registered without the 'www' prefix or under a valid variant. Overall, the site demonstrates a trustworthy and professional online presence with minor areas for enhancement in security and privacy compliance.
- SStrefford Tulips Ltd
strefford-tulips.co.uk
Real Estate · United Kingdom
41High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Strefford Tulips Ltd is a medium-sized property law firm based in Hamilton, Scotland, specializing in residential and commercial conveyancing, executry estates, power of attorney, and wills. The firm has a long-standing local presence since the 1980s and offers approachable, client-focused legal services. The website reflects a professional business with clear service offerings and contact information. Technically, the site uses the Foundation CSS framework and jQuery 2.0.0, with moderate performance and good mobile optimization. However, the site lacks HTTPS enforcement and security headers, which are critical for protecting client data and trust. The absence of cookie consent mechanisms and limited privacy compliance features indicate room for improvement in regulatory adherence. WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional appearance of the website. Overall, the site is functional and informative but requires urgent security and compliance enhancements to align with best practices and build stronger trust.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.anthemis.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content or business information. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or otherwise inactive. Due to the lack of accessible content, no metadata, structured data, or contact information is available for analysis. The website shows no signs of modern technical infrastructure, security best practices, or privacy compliance. This severely limits the ability to assess the business, technical, or security posture of the entity behind the domain.
- Hhall vehicle hire
hallvehiclehire.co.uk
Transportation
46High
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
The website 'hall vehicle hire' appears to be a minimal placeholder or parked page related to vehicle hire services, offering links to related search terms such as local vehicle rental and van hire. The domain itself is not legitimately registered according to Nominet UK WHOIS data, which states the domain name contains too many parts and cannot be registered. This raises significant concerns about the authenticity and trustworthiness of the site. The site lacks any verifiable business contact information, company details, or secure HTTPS implementation. Technically, the site uses basic HTML, CSS, and JavaScript with some third-party advertising and tracking scripts from Intive Search and AppReports. There is no evidence of advanced frameworks or CMS usage. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is minimal with only basic privacy and terms pages present but no cookie consent or GDPR indicators. Overall, the site appears to be a low-quality, low-trust advertising placeholder with significant risks for users and no clear business legitimacy.
Kettering Surgical Appliancesketteringsurgical.co.uk
Healthcare · United Kingdom
37High
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Kettering Surgical Appliances is a small, family-run healthcare company specializing in the sales and supply of surgical and medical equipment, primarily serving NHS trusts, clinics, and private customers in the UK. The company emphasizes competitive pricing, customer service, and quality, supported by over 50 years of industry experience. Their website reflects a professional e-commerce platform built on WordPress and WooCommerce, featuring detailed product categories and customer engagement tools such as contact forms and catalog requests. Technically, the site uses modern libraries and plugins, ensuring good mobile optimization and SEO, though performance is moderate. Security posture is solid with HTTPS and reCAPTCHA protections, but lacks some advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible, with clear business information and certifications.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Eclipse Procurement Limitedeclipseprocurement.com
Real Estate · United Kingdom
47High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Eclipse Procurement Limited is a UK-based small enterprise specializing in procurement solutions for the construction industry. Founded in 2010, the company offers a comprehensive range of services including strategic procurement, package procurement, supply chain management, system and process development, ISO certification assistance, and specialist recruitment. Their client base includes contractors, developers, and consultants across both public and private sectors in the UK. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using Elementor and standard web technologies such as jQuery and Bootstrap. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a cookie consent mechanism and GDPR indicators. Overall, the website demonstrates a solid business presence with trustworthy indicators such as ISO certifications and a professional leadership team. However, it would benefit from enhanced security practices, privacy compliance improvements, and clearer contact information to strengthen trust and regulatory adherence.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.townandcity.com is currently inaccessible, returning a 403 Forbidden error page. This indicates that access to the site is blocked or restricted, preventing any meaningful content or business information from being retrieved. The domain WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, expired, or otherwise inactive. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are available, and no contact or business details can be identified. The technical infrastructure cannot be assessed beyond the error page, and no security headers or SSL configuration details are present. Overall, the site appears non-operational or restricted, resulting in a very low trust and credibility score.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- MMacfarlane Concrete Pumping Ltd
macfarlaneconcretepumping.co.uk
Transportation · United Kingdom
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Macfarlane Concrete Pumping Ltd is a small, family-run business specializing in mobile truck mounted concrete pump hire across regions including Cheshire, North West, North Wales, Manchester, Liverpool, and the Midlands. Established in 2009 and operating a diverse fleet, the company serves a broad client base including construction firms, local councils, schools, and retail parks. Their market position is that of a regional specialist with professional operators and recognized certifications such as Constructionline Gold and CPA membership. Technically, the website is built on WordPress 7.0, utilizing Bootstrap 4.2.1, jQuery, and FontAwesome, with Google Analytics and Tag Manager for tracking. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting is inferred to be via GoDaddy, consistent with the WHOIS registrar data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide a privacy or cookie policy, which are compliance gaps. No incident response or vulnerability disclosure information is present. The security posture is moderate but could be improved with better header implementation and privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with the business's operational scope. The main risks relate to privacy compliance and security best practices, which if addressed, would enhance the site's credibility and user trust.
- Coborn Diamond Technology
coborn.com
Manufacturing · United Kingdom
49High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Coborn Diamond Technology (CDT) is a specialized engineering company focused on designing and supplying CNC grinding, polishing, and lapping machines for the diamond and gemstone industries. With over 80 years of engineering heritage since its establishment in 1942, CDT holds a strong market position as a niche manufacturer with a global export footprint exceeding 95%. The company offers a range of precision machinery including reciprocating grinding, planetary grinding, form grinding, and planetary lapping machines, targeting manufacturers and toolmakers in the diamond sector. The website reflects a professional and consistent brand image with detailed product and service information, supported by a network of international representatives and a sister company, Curtis Machine Tools.
- BBaroco Limited
barocolimited.com
Other · United Kingdom
49High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Baroco Limited is a UK-based small business specializing in secure document management services including confidential shredding, storage, and inventory management. Operating from secure premises in the Midlands, they serve professional clients such as insolvency practitioners, solicitors, and accountancy firms. The website content is basic but relevant, providing essential business information and contact details without advanced digital features or modern design elements. The technical infrastructure appears minimalistic, relying on basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. No analytics or tracking technologies are detected, indicating a low digital maturity level. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and missing privacy and cookie policies, which raises compliance concerns especially under GDPR. The domain registration data is consistent and trustworthy, with a long registration history and no privacy protection, supporting the legitimacy of the business. Overall, the website serves as a basic informational portal with room for significant improvements in security, privacy compliance, and technical modernization.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- MMachine Tech Engineering Ltd.
machinetechengineering.co.uk
Manufacturing · United Kingdom
40High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Machine Tech Engineering Ltd. is a UK-based small manufacturing business specializing in precision turned parts for various industries including automotive, construction, and agriculture. The company emphasizes quality and flexibility, holding ISO 9001 certification as a key trust indicator. Their website presents a professional image with clear service descriptions and a focus on customer satisfaction. Technically, the site uses older JavaScript libraries such as jQuery 1.4.2, which introduces security risks. There is no evidence of modern CMS or advanced frameworks, and mobile optimization is basic. Security posture is weak due to lack of visible HTTPS confirmation, missing security headers, and outdated libraries. Privacy compliance is minimal with no privacy or cookie policies found. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy or configuration, though the website content itself appears legitimate and business-focused.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.