Security Directory

A

adm Promotions UK Limited

indicia.com

72

adm Indicia is a global brand activation agency specializing in retail marketing, shopper activation, and marketing execution that transforms insights into measurable sales. The company operates across more than 100 markets with a large workforce and a broad client base, positioning itself as a key player in the retail and media sectors. Their services include activation planning, creative content production, media activation, and procurement logistics, supported by a strong digital presence and comprehensive policy documentation. Technically, the website is built on a modern stack with HubSpot and Google Tag Manager integrations, hosted via GoDaddy, and optimized for mobile and SEO. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and security headers. The WHOIS data shows an anomalous future domain creation date, which is likely a data error but warrants monitoring. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit incident response contacts and vulnerability disclosures.

C

Consols Oils

consolsoils.co.uk

71

Consols Oils is a well-established local supplier of heating oil and fuels based in Cornwall, UK, operating since 2002 and part of the larger NWF Group plc. The company offers premium fuels, smart tank monitors, and AdBlue products, serving both residential and commercial customers with a fleet capable of delivering to difficult access locations. Their market position is strengthened by local expertise, award-winning drivers, and multiple industry certifications. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and tracking tools, and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA protection, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms linked on the parent company domain. Overall, the site reflects a professional, trustworthy business with a moderate to high digital maturity level.

P

Pekalp of London

pekalp.co.uk

42

Pekalp of London is a UK-based luxury furniture manufacturer and retailer with over 40 years of design and manufacturing experience. The company specializes in bespoke and standard furniture collections, serving both residential and commercial clients including hotels and restaurants. Their website is built on WordPress with WooCommerce, featuring a modern e-commerce platform and a professional design that supports good user experience and navigation. Social media presence on Facebook and Instagram supports brand visibility. Technically, the site uses contemporary plugins and frameworks, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. The WHOIS data for the domain is unavailable and shows an error, which is unusual and warrants further investigation to confirm domain legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security posture.

I

Intermusica

intermusica.co.uk

52

Intermusica is a well-established international classical music agency specializing in artist management, international touring, and project development. The company operates primarily out of London with additional offices in New York and Berlin, serving a global clientele of classical musicians and ensembles. Their website reflects a professional and polished digital presence, showcasing news, artist features, and service offerings clearly targeted at industry professionals and classical music audiences. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Vimeo API, and CookieYes for consent management, hosted on a fast CDN infrastructure. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers are not explicitly detected. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the presence of clear contact information and consistent branding supports business credibility. Overall, the site is secure, compliant with privacy regulations, and professionally maintained.

S

Speed Plastics Limited

speedplastics.co.uk

58

Speed Plastics Limited is a UK-based specialist manufacturer with over 25 years of experience in high frequency welding of flexible plastics including PVC and polyurethane films. The company offers bespoke engineering solutions and manufactures products for sectors such as medical, pharmaceutical, defence, and child learning aids. Their website reflects a professional business-to-business model targeting industrial clients and manufacturers. The company holds ISO 9001:2015 certification, reinforcing their commitment to quality. Technically, the website is built on WordPress using common plugins and technologies such as Revolution Slider and Ninja Forms, with Google Analytics and Tag Manager integrated for tracking. The site is mobile-optimized and provides clear navigation and relevant content. Security posture is moderate with HTTPS enabled and secure forms, but lacks security headers and cookie consent mechanisms. WHOIS data query failed due to querying the subdomain rather than the root domain, which slightly reduces trust but does not negate the legitimacy of the business. Overall, the website is professional, trustworthy, and well-positioned in its niche.

L

London Wall

londonwall.co.uk

57

London Wall is a UK-based company specializing in space solutions through movable walls, sliding folding partitions, and acoustic panels, boasting over 30 years of industry experience. The company targets businesses and organizations requiring flexible space management solutions, positioning itself as an established and reputable provider in the real estate and construction sectors. Their website reflects a professional and consistent brand image, supported by a modern WordPress infrastructure with Elementor and Yoast SEO for content and search optimization. The technical setup includes Google Analytics for visitor insights and CookieYes for GDPR-compliant cookie consent management. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit privacy and security policies indicates room for improvement. Overall, the website is well-designed, user-friendly, and trustworthy, but could enhance compliance and security transparency by adding dedicated policy pages and incident response contacts.

G

GAP Dental

gapdental.com

38

GAP Dental is a UK-based manufacturer specializing in dental products for both professional and home use, operating from Northfleet, Kent. Their product portfolio includes home dental treatments such as denture fixatives and temporary filling replacements, as well as professional dental products like mouthwash tablets and polishing pastes. The company emphasizes product customization to meet specific customer and educational needs, positioning itself as a niche player in the dental healthcare sector. The website reflects a small-sized business with a focused market presence and a professional approach to branding and customer engagement. Technically, the website is built on the concrete5 CMS platform and utilizes modern web technologies including jQuery, Bootstrap 3.3.7, and Google Analytics for tracking. The site is mobile-optimized with good navigation and content relevance, though performance is moderate. Security-wise, the site enforces HTTPS and includes a cookie consent banner, but lacks visible security headers and published privacy or security policies, indicating room for improvement in compliance and security posture. The security posture is moderate with no immediate vulnerabilities detected in the provided data, but the absence of WHOIS registration details raises concerns about domain legitimacy verification. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the site is professional and trustworthy from a content perspective but would benefit from enhanced transparency and security practices to improve compliance and trustworthiness.

H

Havas

havas.com

69

Havas is a leading global communications group specializing in a wide range of marketing and communication services including consultancy, creative, media, and public affairs. The company positions itself as a growth enabler powered by desire, targeting businesses seeking impactful brand and communication strategies. The website reflects a mature digital presence with rich multimedia content, clear navigation, and comprehensive corporate information including investor relations and sustainability initiatives. Technically, the site is built on WordPress with modern JavaScript libraries and includes privacy-focused analytics and cookie consent mechanisms, demonstrating a commitment to user privacy and compliance. Security posture is solid with HTTPS and captcha protections, though explicit security headers and incident response information are absent. The absence of WHOIS data is notable and warrants further investigation, but the website content and branding strongly support legitimacy. Overall, Havas presents a professional, trustworthy, and well-structured digital front for its enterprise operations.

M

Maisons Marques et Domaines Limited

mmdltd.com

58

Maisons Marques et Domaines Limited is a UK-based wine importer and distributor specializing in premium French and international wines, established in 1986 by Champagne Louis Roederer. The company maintains a strong market position within the UK wine trade, representing a portfolio of prestigious wine producers. Their website reflects a professional and consistent brand image, targeting wine trade professionals and importers. Technically, the website is built on WordPress with modern web technologies including jQuery and Google Analytics, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and incident response information indicates room for improvement. The lack of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the website scores well in content quality and privacy compliance but should address security and domain legitimacy gaps to enhance trust and compliance.

A

Aperam

aperam.com

73

Aperam is a global manufacturer specializing in stainless steel, electrical steel, and specialty alloys, serving diverse industrial sectors such as energy, transport, and manufacturing. The company emphasizes sustainability, innovation, and circular economy principles, positioning itself as a leading value creator in its industry. The website reflects a mature digital presence with multilingual support and comprehensive investor relations content. Technically, the site is built on WordPress with modern frameworks and includes SEO and accessibility best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the professional presentation and legitimacy of the business. Overall, the site is well-designed, secure, and compliant, supporting Aperam's corporate image and business objectives.

A

ATL Transformers

atltransformers.co.uk

47

ATL Transformers UK is a specialized small business operating in the energy and manufacturing sector, focusing on the supply, repair, and maintenance of electrical transformers. The company targets industrial and commercial clients within the UK market. The website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google reCAPTCHA for form security and CookieYes for cookie consent management. The technical infrastructure is moderate in performance and mobile optimization, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and anti-bot measures, but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service pages. Overall, the website presents a professional image with consistent branding and relevant content, but could improve transparency and security practices.

E

Ebi

easibind.com

49

Ebi is a UK-based creative printed packaging company established in 1996, offering end-to-end sustainable print solutions including packaging, direct mail, and point-of-sale materials. The company positions itself as a full-service partner with in-house design, printing, and assembly capabilities, targeting businesses seeking high-quality and sustainable print products. The website is built on WordPress using the Divi theme and incorporates modern technologies such as Bootstrap and jQuery, with integrations for analytics and marketing tracking. Security posture is adequate with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and additional security headers could improve resilience. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website reflects a professional and credible business with moderate technical maturity and a good security baseline.

R

Reliance International Shipping & Travel Limited (RIST Limited)

ristlimited.com

41

Reliance International Shipping & Travel Limited (RIST Limited) is a UK-based logistics and shipping service provider established in 2015. The company offers a range of services including sea freight, air freight, vehicle shipping, personal effects shipping, warehousing, and airline ticketing. Positioned as a global logistics solutions provider, RIST Limited targets businesses and individuals requiring reliable and cost-effective shipping worldwide. The website presents a professional image with clear service descriptions and contact information, supporting its market positioning. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Owl Carousel, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. The site lacks advanced analytics or tracking tools, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting overall trustworthiness. No incident response or security policy information is provided, limiting transparency on security readiness. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and domain legitimacy verification to enhance trust and reduce risk. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, verifying domain registration, and establishing incident response contacts.

Bostico International is a UK-based translation agency specializing in professional translation and interpreting services across over 750 languages, including rare dialects and certified legal translations. The company serves a diverse clientele including government agencies such as HMCTS, local councils, social services, police, and the NHS, as well as private individuals and businesses. Their service offerings include face-to-face interpreting, telephone and video interpreting, notarised document translation, and legal aid interpreters, positioning them as a trusted provider in the language services market. Technically, the website employs a straightforward HTML5 and JavaScript stack with jQuery and integrates Google Analytics and Google Tag Manager for tracking. The site is mobile optimized with good navigation and SEO practices, although accessibility features are basic. Hosting and domain registration are consistent with UK standards, and the domain has a long registration period indicating business stability. From a security perspective, the website uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. No security or incident response policies are published, which could impact user trust and compliance. Overall, the security posture is moderate but could be enhanced with better policy transparency and technical controls. The overall risk assessment is low with no signs of malicious activity or suspicious content. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and enhancing accessibility. These improvements would strengthen compliance, user trust, and security resilience.

R

Right at Your Feet

rightatyourfeetbath.co.uk

56

Right at Your Feet is a well-established carpet and flooring supplier based in Bath, UK, operating since 1997. The company offers a broad range of flooring products including carpets, vinyl, wood, and fitting services, targeting both residential and commercial customers. Their market position is strong locally, supported by membership in the Carpet Foundation and positive customer testimonials. The website reflects a professional retail business with clear contact information and service descriptions. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as adding security headers to enhance protection. From a security perspective, the site uses HTTPS and includes bot protection via hCaptcha, indicating a reasonable security posture. Cookie consent and privacy policies are implemented, showing compliance with GDPR requirements. The absence of WHOIS data due to domain registration errors introduces some uncertainty about domain legitimacy, but the website content and business information appear trustworthy. Overall, the website presents a credible and professional business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers and domain registration clarity would further enhance trust and security.

D

DHX | Denley Hydraulic Solutions

denleyhydraulics.co.uk

42

DHX | Denley Hydraulic Solutions is a well-established UK-based company specializing in bespoke hydraulic engineering solutions for demanding industrial applications. Founded in 1999 and operating as part of the Kinetic Solutions Group, DHX offers a range of products including hydraulic systems, power units, lubrication systems, cylinders, manifolds, and test rigs. Their market position is strong within the manufacturing and energy sectors, serving clients requiring precision and reliability in harsh environments. The website reflects a professional and consistent brand image, targeting engineering and industrial customers.

A

ANS

ukfast.co.uk

65

ANS is a leading UK-based technology services provider specializing in cloud, security, AI, and digital transformation solutions. Recognized as Microsoft UK Partner of the Year 2024 and the first UK Microsoft Frontier Partner, ANS offers a broad portfolio of managed cloud services, security operations, Dynamics 365 applications, and AI readiness programs. Their market position is strong within the UK technology sector, targeting businesses seeking advanced Microsoft ecosystem solutions and secure digital transformation. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Facebook Pixel, LinkedIn Insight, and Visual Website Optimizer. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, ANS demonstrates good practices with HTTPS enforcement, security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. The WHOIS lookup on the subdomain failed due to an invalid query, but the overall domain legitimacy is supported by strong business and trust indicators. Overall, ANS presents a professional, trustworthy, and technically sound online presence with a strong focus on Microsoft technologies and secure cloud services.

KGS Ltd is an established UK-based market research service provider offering a range of services including quantitative and qualitative research, fieldwork, and standalone services. The company emphasizes quality and independence, holding ISO:20252:2019 certification and being a Market Research Society company partner. Their website targets businesses and organizations seeking reliable market research solutions. Technically, the website is built on WordPress with common plugins and libraries, featuring a responsive design and moderate performance. Security posture is basic with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. The WHOIS data for the domain 'www.kgs.co.uk' is unavailable due to domain registration rules, which slightly impacts trust but the active website presence supports legitimacy. Overall, the site is professional and trustworthy with room for security and compliance improvements.

Coinstar Ireland operates a retail service providing coin counting kiosks that allow customers to convert loose change into cash or other rewards. The website positions itself as part of an international brand with multiple country-specific domains, indicating a strong market presence in the retail coin counting sector. The business model focuses on convenience and accessibility for general consumers and financial institutions. Technically, the website is built on WordPress with Elementor and Gravity Forms, integrating Google Tag Manager and Osano for analytics and privacy compliance. The site is HTTPS secured and includes comprehensive privacy and cookie policies with user consent mechanisms. However, no direct contact emails or phone numbers are present on the homepage or footer, which could impact user trust and support accessibility. The absence of WHOIS data limits domain registration verification, but the website content and branding are consistent with a legitimate enterprise. Security posture is good with HTTPS and consent management, though security headers and explicit security policies could be improved.

HCL Group is a well-established Indian multinational conglomerate with a strong presence in technology, software, healthcare, and corporate social responsibility sectors. Founded in 1976, it has evolved from an IT garage start-up to a global technology leader with diversified subsidiaries including HCLTech, HCLSoftware, HCL Healthcare, and others. The website reflects a mature digital presence with comprehensive information about the group, its subsidiaries, and philanthropic initiatives. Technically, the site is built on WordPress with modern libraries and frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with accessible privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

B

BRE Group

bre.co.uk

69

BRE Group is a well-established organization specializing in delivering innovative products, services, standards, and qualifications to improve buildings for people and the environment. Their market position is strong within the built environment sector, offering key services such as strategic advisory, certification (notably BREEAM), testing, research, and training through BRE Academy. The website reflects a mature digital presence with a modern tech stack based on Liferay and React, ensuring good performance and user experience. Security posture is solid with HTTPS enforcement and privacy compliance, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, BRE Group demonstrates a professional and trustworthy online presence aligned with their business objectives.

St Joseph's College is a well-established private educational institution based in Ipswich, Suffolk, offering comprehensive education services from nursery through sixth form with both day and boarding options. The website reflects a professional and consistent brand presence targeting parents and students seeking quality private education. The digital infrastructure is built on WordPress with WooCommerce integration, supporting e-commerce functionalities likely related to school services or merchandise. The site employs modern analytics and marketing tools including Google Analytics, Facebook Pixel, Hotjar, and Microsoft Clarity, indicating a mature approach to user engagement and data-driven marketing. From a security perspective, the website benefits from HTTPS enforcement, Cloudflare bot management, and a robust cookie consent mechanism, demonstrating adherence to contemporary security and privacy standards. However, the absence of explicit privacy policy and terms of service pages, as well as missing contact information, represents gaps in compliance and user trust facilitation. The WHOIS data reveals a domain registration anomaly, with the queried domain 'www.stjos.co.uk' not registered, which may indicate a misconfiguration or use of a different domain variant. This discrepancy warrants further investigation to confirm domain legitimacy. Overall, the website presents a solid technical and security posture with room for improvement in privacy transparency and contact accessibility. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing accessibility features, and resolving domain registration inconsistencies to strengthen trust and compliance.

H

HITEC Power Protection

hitec-ups.com

66

HITEC Power Protection is a medium-sized international company specializing in the design, development, and manufacturing of advanced Dynamic UPS systems. Established in 2004 and headquartered in the Netherlands, the company serves a broad range of critical industries including telecommunications, manufacturing, semiconductor, data centers, finance, healthcare, and government sectors. With a strong parent company affiliation (Air Water INC) and a global footprint supporting over 500 customers in 60 countries, HITEC positions itself as a reliable provider of continuous power solutions. The website infrastructure is built on WordPress, leveraging modern technologies such as jQuery, Google Tag Manager, Hotjar, and Gravity Forms. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and Cloudflare DNS usage, although some security headers and DNSSEC are not enabled. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of a dedicated security policy or incident response page and lack of vulnerability disclosure mechanisms are areas for improvement. Overall, HITEC Power Protection's website reflects a professional, trustworthy, and business-focused digital presence with solid technical and security foundations, supporting its role as a key player in the power protection industry.

Plantforce.com is a UK-based plant hire and machinery rental company offering a broad range of equipment and skilled operators primarily targeting the construction industry. The company positions itself as one of the largest and most diverse plant hire providers in the UK, with services including self-drive and operated plant hire, safety systems, and multiple specialized divisions. The website is built on WordPress with a modern tech stack including popular plugins for SEO, GDPR compliance, and analytics. The site demonstrates good design quality, mobile optimization, and SEO practices, although some privacy and security documentation is missing or minimal. Security posture is moderate with HTTPS enabled and GDPR cookie consent implemented, but lacks explicit security headers and a published security policy. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Mansell Recruitment Group Ltd

mansell.co.uk

49

Mansell Recruitment Group Ltd is a well-established specialist technical job agency based in the United Kingdom, focusing on placing engineering professionals across various disciplines. Founded in 1991, the company has built a strong reputation in the UK engineering recruitment market, offering services to both candidates and clients. Their website reflects a professional and consistent brand image, targeting engineering companies and professionals seeking roles in manufacturing, design, electronics, and related sectors. Technically, the website is built on modern web technologies including Webflow CMS, JavaScript libraries like jQuery, and integrates Google services such as reCAPTCHA and Tag Manager for security and analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms from abuse. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The WHOIS lookup for the queried subdomain failed due to domain naming rules, but this is consistent with querying a subdomain rather than the registered domain. The main domain is presumed legitimate based on website content and business information. Overall, Mansell Recruitment Group presents a credible and professional online presence with a solid business model and market position. Strategic improvements in security headers, privacy compliance, and WHOIS data clarity would further strengthen their digital trustworthiness and compliance posture.

AMG North Weald Ltd is a UK-based logistics company with over 50 years of experience specializing in road freight, freight forwarding, express courier services, warehousing, distribution, and bespoke project management. The company targets businesses requiring reliable and flexible logistics solutions, particularly with expertise in Swiss and Italian markets. The website is built on WordPress using modern technologies such as Bootstrap 4 and Slider Revolution, providing a professional and mobile-optimized user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. The absence of WHOIS data and domain registration inconsistencies raise concerns about domain legitimacy, warranting further verification. Overall, the site presents a trustworthy business front with room for improvement in security transparency and domain registration clarity.

F

Francesco Hair Salon

francescogroup.co.uk

58

Francesco Hair Salon is a medium-sized, award-winning hairdressing salon chain operating primarily in the United Kingdom. The company offers expert hair cutting, colouring, treatments, and technical hair services in a relaxing environment. Their market position is strong within the regional hospitality sector, supported by a professional and well-branded online presence. The website is built on WordPress using modern technologies and SEO best practices, with integrations for Google Tag Manager and Facebook Pixel to support marketing and analytics efforts. Security posture is good, with HTTPS enforced and standard security headers present, although there is room for improvement in publishing explicit security policies and incident response information. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website and domain appear legitimate and trustworthy, with no signs of malicious activity or content safety concerns.

A

AGM Service

agm-plc.co.uk

52

AGM Service is a UK-based company specializing in the specification, installation, commissioning, and maintenance of water boosting and pressurisation systems. Founded in 2023 and operating under the parent company Fluid Water Group, AGM positions itself as a reliable nationwide service provider with 24/7 availability. The company serves a diverse range of sectors including facilities management, government, healthcare, hospitality, and education. Their website reflects a professional and consistent brand image, emphasizing their authorized partnerships with leading manufacturers. Technically, the site is built on WordPress with modern frameworks and includes comprehensive SEO and analytics integrations. Security posture is strong with HTTPS, bot management, and cookie consent mechanisms, though there is room for improvement in explicit security headers and incident response transparency. Overall, AGM Service presents a credible and trustworthy digital presence aligned with its business objectives.

The Chefs Kitchen is a small, professional catering company based in Rugby, UK, specializing in event catering for private functions, weddings, corporate events, and parties. The company emphasizes quality food made from locally sourced ingredients and offers a variety of catering services including working breakfasts, corporate functions, and outdoor events. Their website is well-structured and designed using WordPress with WooCommerce for online ordering, indicating a moderate level of digital maturity. The presence of Google Analytics and Facebook SDK shows active marketing and user engagement tracking. Security posture is generally good with HTTPS enabled and no exposed sensitive data, though the absence of security headers and cookie consent mechanisms suggests room for improvement. The WHOIS lookup for the www subdomain failed due to domain naming rules, but the main domain is active and consistent with a legitimate business. Overall, the website presents a trustworthy and professional image suitable for its target audience.

Marine Hall is a cultural and event venue located in Fleetwood, UK, managed by Wyre Theatres. The website provides information about shows, weddings, private hire, and ticket bookings, targeting local community members and event attendees. The business model centers on venue management and event hosting, supported by local council investment. The website is professionally designed with consistent branding and good content quality, reflecting a small-sized hospitality entity founded around 2020. Technically, the website uses a modern tech stack including jQuery, Google Analytics, and a cookie consent mechanism from FreePrivacyPolicy.com. It is built on the Jadu CMS platform and demonstrates good mobile optimization and SEO practices. However, some improvements could be made in accessibility and security headers implementation. From a security perspective, the site uses HTTPS and includes cookie consent with opt-in/out mechanisms, but lacks explicit security policies and incident response contact information. The WHOIS data is unavailable due to domain registration issues, which lowers the trust score despite the professional appearance and council affiliation. No vulnerabilities or malicious content were detected. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in security transparency and domain registration legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying contact information for security incidents.

Farmers National Bank is a well-established community bank founded in 1887, offering a broad range of personal and business financial services including loans, mortgages, investments, and wealth management. The bank emphasizes local decision-making and personalized customer service, positioning itself as a trusted regional financial institution. The website reflects this with comprehensive service information, community focus, and investor relations transparency. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and reCAPTCHA, and is hosted with reputable providers. Accessibility and mobile optimization are well addressed, enhancing user experience. Security posture is generally good with HTTPS enforced and secure login portals; however, DNSSEC is not enabled and security headers are not evident, representing areas for improvement. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is professional, trustworthy, and functional, supporting the bank's business credibility effectively.

W J Townsend & Son is a small, family-run business specializing in oil boiler repairs, servicing, replacements, and general plumbing services primarily serving Northamptonshire and surrounding counties in the UK. Established since 1945, the company emphasizes prompt, friendly, and honest service, supported by certifications such as Oftec and a VAT registration. The website reflects a professional local service provider with clear contact information and a focus on customer trust through testimonials and detailed service descriptions. Technically, the website is built on WordPress with common plugins like Yoast SEO and Jetpack, using Bootstrap for responsive design. The site is moderately performant and well-structured with good SEO practices but lacks advanced accessibility features and security headers. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and privacy/cookie policies indicates room for improvement. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which is unusual and raises questions about domain registration legitimacy despite the professional website content. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening.

T

Tanz Limited

tanztanning.co.uk

60

Tanz Limited operates a regional tanning and beauty service business in Scotland, offering sunbeds, spray tans, slimming products, and teeth whitening services. The company maintains a professional online presence with an e-commerce platform and active social media channels, targeting consumers seeking beauty and tanning solutions. The website is built on WordPress with WooCommerce and uses modern plugins and technologies to support booking and sales functionalities. The technical infrastructure is solid with HTTPS enforced and a good level of SEO and mobile optimization. Security posture is generally good, though the absence of security headers and cookie consent mechanisms indicates room for improvement. The WHOIS data for the domain is unavailable due to a registration error, which raises concerns about domain legitimacy, but the website content and business information appear credible and professional. Overall, the site presents a trustworthy business front with moderate technical maturity and some compliance gaps.

T

The Kinetic Co., Inc.

knifemaker.com

59

The Kinetic Co., Inc. is a well-established U.S.-based manufacturer specializing in industrial machine knives and custom blades serving multiple industries including tissue, nonwovens, wood, metal, and packaging. With over 75 years of experience and an ISO 9001:2015 certified manufacturing facility in Milwaukee, WI, the company positions itself as a premier provider offering fast lead times, custom engineering, and contract manufacturing services. Their target audience primarily includes general buyers and procurement teams in industrial sectors seeking high-quality, precision-engineered cutting solutions. Technically, the website is built on WordPress using Elementor, enhanced with performance optimizations such as lazy loading and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and clear navigation, reflecting a mature digital presence. Security posture is solid with HTTPS enforced, though some security headers and explicit security policies are absent. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the security posture is good but could be improved by adding security headers, incident response information, and comprehensive privacy policies. The absence of WHOIS data for the domain is a concern and warrants further investigation to confirm domain legitimacy. However, the website content and business information are professional and consistent with a legitimate manufacturing company. Strategically, the company should focus on enhancing transparency around privacy and security policies, verifying domain registration details, and continuing to leverage their strong market position and customer trust to maintain competitive advantage.

Haddonstone is a specialist company focused on the design and manufacture of high-quality architectural and garden cast stone products. Their website presents a professional e-commerce platform built on WordPress and WooCommerce, targeting architects, builders, and homeowners interested in premium stonework. The site integrates multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, and CrazyEgg, supported by a robust cookie consent mechanism via Cookiebot. Technically, the website is well-structured with modern technologies and good mobile optimization, although some areas such as explicit privacy policy and contact information are lacking. Security posture is strong with HTTPS and consent management, but could be improved with additional security headers and incident response details. WHOIS data is unavailable, which slightly impacts trust but does not negate the overall legitimacy indicated by the website content and technical setup.

Skyline Taxis is a well-established local taxi and private hire company based in Stourbridge, UK, providing a range of transport services including airport transfers, business travel, and community transport. The company leverages technology such as online booking, mobile apps, and Google Places autocomplete to enhance customer experience. Their market position is strong locally, supported by positive customer testimonials and a solid online reputation. Technically, the website is built on WordPress with a modern tech stack, though some components like jQuery are outdated. Security measures include HTTPS and Google reCAPTCHA, but lack visible security headers and cookie consent mechanisms. Overall, the site is professional and trustworthy, with room for improvement in privacy compliance and security hardening.

I

IOP Publishing

ioppublishing.org

73

IOP Publishing is a well-established society-owned scientific publisher specializing in physics and related scientific disciplines. The company operates a portfolio of over 100 open access and hybrid journals, serving the global scientific community. Their business model focuses on providing impactful scientific content with all profits reinvested for public and scientific good. The website reflects a professional and authoritative presence consistent with their market position. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO, Google Analytics, Hotjar, and Crazy Egg. Hosting is provided by Amazon Web Services, and the domain is managed via Amazon Registrar, Inc. The site demonstrates good mobile optimization, accessibility, and performance, with a comprehensive cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site uses HTTPS with strong SSL configuration and implements several security headers. The domain status clientTransferProhibited adds protection against unauthorized transfers. However, DNSSEC is not enabled, and no explicit security or incident response policies are published on the site. The use of multiple third-party scripts requires ongoing vigilance to mitigate potential vulnerabilities. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The risk profile is low, with no critical vulnerabilities detected. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and maintaining regular audits of third-party components.

B

Bowditch & Dewey

bowditch.com

62

Bowditch & Dewey is a professional law firm operating primarily in Massachusetts with offices in Boston, Framingham, Plymouth, and Worcester. The firm offers a broad range of legal and financial strategy services tailored to organizations and individuals, focusing on areas such as litigation, estate planning, business succession, and real estate law. Their website reflects a mature digital presence with comprehensive content, client resources, and multiple communication channels, positioning them as a reputable regional legal service provider. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics, and Hotjar for analytics and user experience insights. The site is well-optimized for SEO, accessibility, and mobile responsiveness, indicating a good level of digital maturity. Cookie consent and privacy mechanisms are implemented in compliance with GDPR, enhancing user trust and regulatory adherence. From a security perspective, the site enforces HTTPS and uses reputable third-party services. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection slightly reduces transparency but is common for professional services. Overall, the security posture is solid with room for improvement in header implementation and form security. The overall risk assessment is low, with the firm demonstrating strong professionalism and compliance. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and ensuring robust form protections. These steps will further strengthen trust and security culture, supporting long-term business resilience.

D

Dant Y Coed Dental Practice

dantycoeddentalpractice.co.uk

55

Dant Y Coed Dental Practice is a UK-based dental clinic offering a wide range of dental services including general dentistry, cosmetic treatments, dental implants, Invisalign, and facial rejuvenation. The practice emphasizes high-quality care and affordable payment plans, targeting patients seeking reliable dental services. The website is professionally designed using WordPress and Elementor, featuring detailed team profiles and service descriptions. Social media integration with Facebook and Instagram enhances their digital presence. Technically, the site uses modern web technologies and plugins, with SSL enabled ensuring secure connections. However, the absence of visible privacy and cookie policies and lack of security headers indicate areas for improvement in compliance and security posture. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the site presents a credible and professional dental practice with moderate technical maturity and good business credibility.

S

Springvale EPS Ltd.

springvale.com

47

Springvale EPS Ltd. is a UK-based company specializing in sustainable insulation solutions for floors, walls, and roofs. With a domain registered since 1996, the company demonstrates a long-standing presence in the energy and construction sector. Their website showcases a range of products including Floorshield, Beamshield, Groundshield, Ecobead, Roofshield, Hydroshield, and Warmsqueez / Warmsark, targeting construction professionals and contractors seeking eco-friendly insulation options. The business model is primarily B2B, focusing on manufacturing and supplying insulation materials with technical support and downloadable resources.

M

MPA Accounting

mpaaccounting.co.uk

51

MPA Accounting is a small, island-based accounting firm specializing in accounting, bookkeeping, payroll, and tax-related services for sole traders, limited companies, partnerships, and individuals primarily in the Isle of Wight area. The company emphasizes personalized customer service and offers a range of specialized services including VAT returns, self-assessment, and construction industry scheme compliance. Their market position is that of a trusted local specialist with an AAT qualified team and positive client testimonials. Technically, the website is built on WordPress using popular plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though some security headers and incident response information are missing. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve in security best practices and transparency. The domain is long-standing and consistent with the business history, supporting legitimacy.

V

Vinyl Frontier

myvinylfrontier.com

44

Vinyl Frontier is a UK-based small business specializing in large format sign and banner printing, printed clothing, and promotional gifts. The company offers a comprehensive range of products and services aimed at helping businesses promote their brands through eye-catching graphics and printed materials. Their market position is that of an established print service provider with a focus on quality and customer service, supported by in-house design and print capabilities. The website is built on WordPress with WooCommerce, indicating a mature e-commerce infrastructure. It integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS and standard security headers in place, though there is room for improvement in privacy compliance, particularly regarding cookie consent and published security policies. Overall, the website is professional, trustworthy, and well-aligned with the business's operational needs.

Devon Oak is a small UK-based company specializing in traditional timber framing, including green oak and softwood frames. They offer services such as timber framing construction, sawing timber with their own Mahoe Sawmill, and transportation of timber and frames. The company targets customers interested in traditional timber buildings, including those who supply their own timber. The website is professionally designed using WordPress, with clear navigation and mobile optimization. Social media presence on Instagram and Facebook supports their market engagement. However, the website lacks formal privacy and cookie policies, which impacts compliance. Technically, the site uses WordPress 6.6.5 with jQuery and Jetpack plugin, and loads Google Fonts. Performance is moderate with good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks security headers and formal vulnerability disclosure mechanisms. No forms collecting sensitive data are present except a search form. The WHOIS query failed due to querying an invalid domain variant ('www.devonoak.co.uk'), but the actual domain 'devonoak.co.uk' appears legitimate. Overall, the site is safe, professional, and trustworthy for its niche market. Strategic improvements include adding privacy and cookie policies, implementing security headers, and enhancing accessibility features to improve compliance and security posture.

O

Oliver Minton

oliverminton.com

60

Oliver Minton is a well-established real estate agency specializing in village and rural properties in Hertfordshire, UK. With over 26 years of experience and multiple local offices, the company offers a range of services including property sales, lettings, auctions, and mortgage advice. The website reflects a professional and user-friendly digital presence built on WordPress with modern tools such as Elementor and Yoast SEO. The site includes a cookie consent mechanism supporting GDPR compliance but lacks explicit privacy policy and terms of service pages. Security posture is generally good with HTTPS and no visible vulnerabilities, though security headers and incident response information are absent. WHOIS data is unavailable or privacy protected, limiting domain trust verification. Overall, the website is credible and functional, serving its target audience effectively.

B

BTS (Europe) Ltd

bts-uk.com

43

BTS (Europe) Ltd is a UK-based company specializing in the supply of soft furnishings and bedroom and bathroom accessories primarily for the hospitality and healthcare sectors. With over 25 years of experience, the company positions itself as a leading provider in its niche market. The website reflects a small business model focused on B2B sales through an e-commerce platform powered by WordPress and WooCommerce. The digital presence is functional but basic, with limited content and minimal direct contact information beyond a contact form. Technically, the site uses modern CMS and SEO tools but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. The domain is well-established, created in 2002, consistent with the company's claimed history.

Thomas & Gentry IFA Ltd is a well-established independent financial advisory firm based in the UK, offering services such as protection, mortgages, savings and investments, and pensions. The company is FCA authorised and regulated, reinforcing its credibility and trustworthiness in the financial sector. The website reflects a professional and consistent brand image with clear contact information and regulatory disclosures. Technically, the site is built on WordPress with Yoast SEO plugin, uses HTTPS, and includes modern web technologies like jQuery. The site is moderately performant and mobile-optimized, providing a good user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are absent. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the website is trustworthy and suitable for its target audience seeking financial advice.

Ocean Partners is a well-established commodity supply chain company founded in 2001, specializing in trading, warehousing, blending, agency, consulting, and structured finance services for metals and minerals. The company operates globally with offices in the UK, USA, Mexico, Peru, and Chile, targeting miners, smelters, refiners, and metal consumers. Their market position is that of a specialized, analytical, and creative partner in commodity supply chains, offering bespoke solutions to long-term clients. Technically, the website is built on WordPress with modern front-end technologies such as jQuery and Typekit fonts. The site is mobile optimized, accessible, and SEO friendly with structured data markup. Performance is moderate, and the site is well-branded and professionally designed. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain transfer protection. However, it lacks DNSSEC, explicit security headers, and published security or incident response policies. No cookie consent mechanism was detected, which is a compliance gap given the GDPR relevance. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is professional, trustworthy, and business credible with a strong domain history and consistent WHOIS data. The main risks relate to privacy compliance and security best practices, which can be improved to enhance trust and regulatory adherence.

E

Euroflo Group Limited

euroflogroup.co.uk

47

Euroflo Group Limited is a specialist engineering contractor operating primarily within the UK construction industry, focusing on commissioning and water treatment services. Established in 2008, the company serves mechanical installation contractors, managing contractors, supervising engineers, and direct clients. Their service portfolio includes precommission cleaning, HVAC commissioning, water system disinfection, chemical and equipment supply, Legionella risk assessments, and system validation. The company has expanded into Europe with a subsidiary, Euroflo BV, reflecting growth in the data centre market. The website is professionally designed, mobile-optimized, and provides clear contact information and trust indicators such as industry certifications. Technically, the site runs on WordPress with standard libraries like jQuery and Bootstrap, delivering moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. No incident response or vulnerability disclosure information is available, indicating room for improvement in transparency and security maturity.

B

Bar Fittings Ltd.

bar-fittings.com

45

Bar Fittings Ltd. is a specialized manufacturer and supplier of architectural metal fittings and furnishings primarily serving the hospitality sector including bars, restaurants, pubs, clubs, and hotels. The company emphasizes quality, reliability, and traditional customer service, offering a broad product range from bar footrails to decorative metalwork. Their market position is that of a trusted small business with a UK base and international reach. Technically, the website is built on WordPress using Elementor and Astra theme, featuring modern web technologies and a responsive design. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and incident response information. The absence of WHOIS data and privacy policy pages are notable gaps. Overall, the website is professional and functional but would benefit from enhanced transparency and security documentation.

M

Mantis World

mantisworld.com

48

Mantis World is a well-established manufacturer and retailer of premium, ethically-made GOTS-certified organic clothing for all ages, operating since 1999. The company targets both businesses and consumers interested in sustainable and organic apparel, offering a broad product range including bespoke made-to-order services. The website reflects a professional e-commerce platform built on WordPress and WooCommerce, with a clear focus on sustainability and ethical manufacturing. The digital infrastructure includes modern technologies and SEO optimizations, supporting a good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as enabling DNSSEC and additional security headers are recommended. The domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.