High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,401–2,450 of 36,503
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Wwww.townofblackstoneva.com
townofblackstoneva.com
Other
42High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is not accessible or blocked. There is no meaningful business content, metadata, or contact information available. The page is a browser-generated offline or error page rather than a functional website. Consequently, no privacy, cookie, or terms of service policies are present. The technical infrastructure is limited to Chromium's offline error page scripts and styles, with no external hosting or CMS detected. Security posture is minimal due to lack of HTTPS and security headers, and no incident response or vulnerability disclosure information is available. Overall, the site cannot be evaluated for business credibility or compliance due to lack of accessible content.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
The Canine Country Club 2020 Ltdthecaninecountryclub.co.uk
Hospitality · United Kingdom
44High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The Canine Country Club 2020 Ltd operates a boutique dog boarding and day care service located near Chesterfield, Derbyshire, on the edge of the Peak District National Park. The business targets local dog owners seeking quality boarding and day care services, offering kennel accommodation and optional extras such as additional walks and one-to-one care. The company holds a 4-star license rating from the local council, indicating a reputable position in the hospitality sector for pet care. Technically, the website is built on WordPress 7.0 using common plugins such as Contact Form 7 and SiteOrigin Panels, hosted by Layershift Limited. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site lacks several best practices such as security headers and published privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. However, no critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy for its business purpose but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.fireboxglobal.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK's naming rules, suggesting the domain is invalid or misconfigured. No metadata, contact information, or business details are available from the site. Technically, the site lacks any scripts, analytics, or security headers, and no HTTPS information is present. This severely limits any meaningful analysis of the company's digital presence or security posture. Overall, the site appears non-operational or improperly configured, raising significant concerns about legitimacy and trustworthiness.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- EELO Experience
elotribute.com
Media
47High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The ELO Experience website represents a UK-based tribute band dedicated to The Electric Light Orchestra. The site provides information about upcoming tour dates, media galleries, biographies, and contact options, positioning itself as a leading tribute act in the UK entertainment sector. The business model revolves around live performances and fan engagement through multimedia content and event promotion. The website is professionally designed with consistent branding and clear navigation, targeting general audiences interested in music and live entertainment. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and popular UI libraries such as FontAwesome and Revolution Slider. Hosting is provided by DTX Host, with design credited to DTX Design. The site is moderately optimized for mobile devices and SEO, though accessibility features are basic. Performance is moderate with no critical errors detected in the HTML structure. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. No contact information for security incidents or data protection officers is provided, and no cookie consent mechanism is present, indicating gaps in privacy compliance. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, despite the professional appearance of the site. Overall, the website is functional and serves its business purpose well but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and reduce risk.
Other
38High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.tailored-living.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or forbidden. The page contains no business information, contact details, or any user-interactive elements such as forms. The WHOIS lookup for the domain failed with an error from the Nominet UK registry stating that the domain name cannot be registered due to contravention of naming rules, specifically that the domain contains too many parts. This suggests the domain is either invalid, misconfigured, or not properly registered, which severely limits the legitimacy and trustworthiness of the site. From a technical perspective, the site loads minimal content, primarily a styled error page with embedded SVG graphics and Google Fonts. There are no detectable scripts, analytics, or tracking technologies. The absence of HTTPS information and security headers further indicates a lack of proper security configuration. No privacy, cookie, or terms of service policies are present, and no contact or business information is available, which negatively impacts business credibility and privacy compliance. Security posture is poor due to the lack of HTTPS, security headers, and the presence of a blocking error page. The domain's WHOIS data absence and registry error raise significant concerns about the domain's legitimacy. Overall, the site appears non-operational or blocked, and no meaningful business or security insights can be drawn from the current content. Strategic recommendations include resolving domain registration issues, implementing HTTPS with valid SSL certificates, adding proper security headers, publishing privacy and cookie policies to comply with GDPR, and providing clear business and contact information to improve trust and credibility.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Barber of Sheffield
barberofsheffield.co.uk
Manufacturing · United Kingdom
40High
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Barber of Sheffield is a well-established UK-based manufacturer and supplier specializing in stainless steel surgical needles and related medical, veterinary, mortuary, funeral, tattoo, and piercing products. With over 40 years of experience, the company has expanded its product range and markets, maintaining a strong niche position supported by ISO9001:2008 certification and multiple sister companies focused on specialized product lines. The website reflects a traditional business with a focus on quality and customer service, targeting professional markets including healthcare, veterinary, and tattoo industries. Technically, the website uses basic web technologies such as HTML, CSS, JavaScript, and jQuery, with Google Analytics for tracking. The site is accessible and functional but lacks modern design features, mobile optimization, and comprehensive privacy or security policies. Security posture is moderate with HTTPS implied but no visible security headers or advanced protections. WHOIS data could not be retrieved due to querying a subdomain rather than the registered domain, limiting domain registration insights. Overall, the site presents a legitimate business with room for technical and security improvements.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- WWRS Fornham Financial Partners Ltd
wrsfornham.co.uk
Finance · United Kingdom
48High
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
WRS Fornham Financial Partners Ltd is a specialist financial advisory firm based in Colchester, UK, providing personalized financial planning and investment advice. The company operates under the regulatory umbrella of Sandringham Financial Partners Ltd, ensuring FCA compliance and trustworthiness. Their key services include investment planning and pension access advice, targeting individuals seeking tailored financial solutions. The website reflects a professional and consistent brand image with clear contact information and regulatory disclosures. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. The site is hosted by Easyspace Ltd and benefits from HTTPS and DNSSEC for secure communications. Performance and mobile optimization are good, though accessibility features are basic. No major technical issues or vulnerabilities were detected in the content provided. From a security perspective, the site uses HTTPS and DNSSEC, but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. There is no publicly visible incident response or security policy, which could improve trust and preparedness. No forms were detected on the homepage, reducing immediate attack surface, but contact is available via email and phone. Overall, the website presents a trustworthy and professional front for a small financial advisory business with a solid regulatory backing. Strategic improvements in privacy compliance and security headers would enhance the security posture and regulatory adherence.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- PPly-Line Services Ltd.
ply-lineservices.co.uk
Transportation · United Kingdom
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Ply-Line Services Ltd. is a specialized provider of custom van solutions, focusing on ply lining kits, roof racks, shelving, bulkheads, and security accessories tailored for commercial vehicles. With nearly 30 years of experience serving businesses across the North of England, the company positions itself as a trusted regional expert offering mobile fitting services. The website reflects a professional and consistent brand image with clear contact channels and service descriptions. Technically, the site is built on WordPress with Elementor, employing modern web technologies and responsive design, ensuring good user experience across devices. Security posture is solid with HTTPS and CAPTCHA-protected contact forms, though it lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. The WHOIS data is unavailable due to domain naming issues, but the website's legitimacy is supported by its content and contact transparency. Overall, the site is a reliable digital presence for a small transportation sector business, with room for improvement in privacy and security disclosures.
Sterling Hydrotechsterling-hydrotech.co.uk
Other · United Kingdom
40High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Sterling Hydrotech is a well-established UK-based specialist in swimming pool filtration and water treatment, operating since 1988. The company offers a comprehensive range of services including design, supply, installation, servicing of filtration and water treatment equipment, and training for pool plant operators. Their market position is strong within commercial leisure facilities, local authorities, schools, NHS, military, and other institutional clients. The website reflects a professional and consistent brand image with clear service offerings and accreditations that enhance trust. Technically, the website is built on WordPress using the Uncode theme, leveraging modern web technologies such as jQuery, Owl Carousel, and Google reCAPTCHA for security. The site is hosted by a reputable UK registrar and shows good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and implements cookie consent mechanisms aligned with GDPR. However, it lacks visible security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, Sterling Hydrotech presents a low-risk profile with a mature online presence, good business credibility, and adequate security posture. Strategic improvements in security transparency and accessibility could further enhance trust and compliance.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Harris DAF Grays
harrisdaf.com
Transportation · United Kingdom
48High
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Harris DAF Grays is a well-established UK-based dealership group specializing in DAF trucks, offering new and used truck sales, servicing, and parts supply. The company operates multiple locations across Essex, Hertfordshire, and Buckinghamshire, providing comprehensive transport solutions including finance and leasing options. Their affiliation with PACCAR and multiple dealership sites positions them as a significant player in the UK truck dealership market. The website reflects a professional business presence with clear service offerings and contact information. Technically, the site employs modern web technologies such as Google Maps API, jQuery, and UIkit, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement and use of Google reCAPTCHA, although some security headers and explicit policies are absent. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the website is functional, professional, and trustworthy from a user perspective but could improve transparency in domain registration and security policies.
- Wwww.duchini.com
duchini.com
Other
42High
NIS2 0 · GDPR 25
NIS2 0 · GDPR 25
The analyzed URL corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is not accessible. No business or company information is present, and the page serves as a browser error placeholder rather than a functional website. Consequently, no meaningful business overview, market position, or services can be identified. The technical infrastructure is limited to Chromium-based JavaScript and canvas game code, which appears to be part of the Chrome offline dinosaur game, not a commercial website. Security posture cannot be evaluated due to lack of accessible content and absence of HTTPS or security headers. Overall, the site is non-functional for analysis and represents a blocked or error state rather than a live domain.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
The Cartlodge Companythecartlodgecompany.co.uk
Real Estate · United Kingdom
48High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Cartlodge Company is a small UK-based business specializing in bespoke oak framed buildings such as cart lodges, garages, and garden rooms, primarily serving the Essex region. The website is built on WordPress and optimized with Yoast SEO, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and hosting by Fasthosts Internet Ltd, with HTTPS enabled ensuring secure communications. However, the site lacks visible privacy and cookie policies, explicit contact information, and security headers, which are important for compliance and trust. The security posture is adequate but could be improved by implementing best practices and transparency measures. Overall, the website presents a professional image with relevant content but requires enhancements in privacy compliance and security transparency to reduce risk and improve user trust.
- IIndependent Mercedes, BMW & Mini Specialists Skipton
mercspec.co.uk
Transportation · United Kingdom
49High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Independent Mercedes, BMW & Mini Specialists Skipton operates as a local automotive servicing and repair business focused on these premium car brands. The company offers a range of services including manufacturer-standard servicing, computer diagnostics, MOT testing, and tyre services. Their market position is that of a trusted independent alternative to main dealers, providing quality service at competitive prices. The website reflects a small business with a well-structured online presence targeting car owners in Skipton and nearby areas. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Yoast SEO, hosted by Krystal Hosting Ltd. The site uses jQuery and Revolution Slider for interactive elements. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; a privacy and cookie policy page exists but lacks a consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and suitable for its business purpose. Strategic improvements in security headers, cookie consent implementation, and adding terms of service would enhance compliance and security posture.
Brixton Hill Studiosbrixtonhillstudios.com
Other · United Kingdom
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Brixton Hill Studios is a small, locally focused business providing high-quality rehearsal and live recording studio spaces in South London. The company offers multiple studios with acoustic optimization, live and multitrack recording capabilities, storage, and equipment hire. Their market position is that of a specialized service provider catering to musicians and bands in the Brixton area. The website is built on WordPress with common plugins and technologies, showing moderate technical maturity and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.
- Ee-trackit
e-trackit.co.uk
Retail · United Kingdom
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
e-trackit is a UK-based company founded in 2010 specializing in multi-channel retailing solutions, including EPOS systems, back office integration, and marketplace synchronization with platforms like eBay and Amazon. The company targets retail businesses seeking integrated stock control and sales management solutions. Their website reflects a mature digital presence built on WordPress, leveraging popular plugins and marketing tools such as Google Analytics and Tag Manager. The site offers clear product information, case studies, and multiple contact channels including a secured contact form with Google reCAPTCHA. Security posture is solid with HTTPS and CAPTCHA implementation, though it lacks some advanced security headers and published privacy or cookie policies, which are recommended for compliance and trust. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- BBrunton Design
bruntondesign.com
Real Estate · United Kingdom
49High
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Brunton Design is a small architectural firm based in Angus and Carnoustie, UK, specializing in house extensions, renovations, and planning applications. The company positions itself as an award-winning local specialist, targeting homeowners and property developers in the region. The website is professionally designed, built on WordPress, and incorporates modern web technologies and SEO best practices. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. However, no explicit contact emails or phone numbers are found, with contact primarily via a form. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy. Security posture is good with HTTPS enforced and anti-spam measures, but lacks advanced security headers and incident response information. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security disclosures.
Other
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website owlsecuritycameras.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. This prevents extraction of business, security, or compliance information from the site itself. The domain is registered since 2014 with Tucows Domains Inc. and uses SiteGround hosting, indicating a mature domain but with no visible active website content. No privacy, cookie, or terms of service policies are present, nor any contact information or forms. The technical infrastructure lacks security headers and DNSSEC is not enabled, reflecting a basic security posture. Overall, the site appears inactive or restricted, limiting digital maturity and trustworthiness.
Other
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website www.delve-nankervis.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the requested resource is blocked. The domain itself is not properly registered as per the Nominet UK WHOIS lookup, which reports that the domain name contains too many parts and contravenes naming rules. Consequently, no legitimate WHOIS registrant or technical data is available. The website content is minimal and consists solely of an error message with no business or service information, policies, or contact details beyond a webmaster email with a suspicious appended domain. The hosting platform is identified as cPanel, but no further technical or security infrastructure details are available. Overall, the site lacks any meaningful digital presence or business credibility.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- AAce Ceiling Products Ltd
ace-ceilings.co.uk
Manufacturing · United Kingdom
48High
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Ace Ceiling Products Ltd is a UK-based manufacturer specializing in metal ceiling tiles, panels, and bespoke metal ceiling solutions for the interior fit-out industry. Established in 1978, the company is recognized as a leading supplier in the UK market, offering a wide range of metal ceiling systems and custom solutions. Their manufacturing capabilities include precision sheet metal profiling, perforating, folding, punching, fabrication, welding, and powder coating. The website reflects a professional and consistent brand image with comprehensive product information and contact options including a callback form with reCAPTCHA protection. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern optimization techniques such as LiteSpeed cache and asynchronous CSS loading. It uses Google Tag Manager for analytics and tracking, and includes social sharing via AddToAny. The site is mobile optimized and SEO friendly with proper meta tags and structured data. However, some technical improvements are recommended such as updating the jQuery library and implementing security headers. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks HTTP security headers which could improve protection against common web attacks. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy and cookie policy present, but no active cookie consent mechanism was found. WHOIS data for the domain could not be retrieved due to querying the 'www' subdomain, but the website content and business information appear legitimate and consistent. Overall, the site presents a low risk profile with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, updating outdated libraries, and adding incident response contact information to strength…
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Dale Brothers UK Ltddalebrothers.co.uk
Transportation · United Kingdom
47High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Dale Brothers UK Ltd operates as a transportation and logistics company serving both local and international markets. The company emphasizes efficient, fresh, and timely delivery of goods, supported by strong communication, flexibility, honesty, and technology integration. Their market position is that of a reputable medium-sized logistics provider in the UK, with certifications such as BRCGS AA+ status reinforcing their credibility. The website reflects a professional digital presence built on WordPress with the Divi theme, incorporating modern plugins for enhanced user experience and content delivery. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partial, with privacy and cookie policies present but no active consent mechanisms. WHOIS data is unavailable due to domain registration issues, which introduces some uncertainty about domain legitimacy, though the website content and branding are consistent with a legitimate business. Overall, the site is functional, professional, and trustworthy but would benefit from improved security and privacy practices.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.pureglutenfree.co.uk is currently inaccessible, returning a 403 Forbidden error page. The content is minimal and does not provide any business information, metadata, or contact details. The domain WHOIS lookup failed with an error indicating the domain name contains too many parts and cannot be registered, suggesting the domain registration is invalid or improperly configured. No security headers, HTTPS information, or privacy policies are present, indicating a lack of basic security and compliance measures. Overall, the site appears non-operational or blocked, preventing any meaningful business or technical analysis.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Business World Travel Ltd
businessworldtravel.net
Energy · United Kingdom
49High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Business World Travel Ltd is a UK-based specialist travel management company established in 1989, focusing on the Marine and Offshore sectors within the energy industry. Operating from offices in Aberdeen and Great Yarmouth, it offers tailored corporate travel solutions with a reputation for cost-effective and reliable service. The website reflects a professional business presence with clear contact details and certifications such as IATA and Galileo, supporting its market position as a trusted travel provider in its niche. Technically, the website is built on the SilverStripe CMS platform and utilizes legacy JavaScript libraries like jQuery 1.10.2 alongside Google Analytics and Tag Manager for tracking. The site is accessible and moderately optimized for performance and mobile use, though some modernization and accessibility improvements are advisable. Security posture is adequate with HTTPS enabled but lacks important security headers and cookie consent mechanisms, which are critical for compliance and protection. The WHOIS data is notably absent or inaccessible, which raises concerns about domain registration transparency. While the website content and business information appear legitimate and consistent, the lack of WHOIS data and privacy compliance features suggest areas for improvement in trust and regulatory adherence. Overall, the site presents a solid business front but would benefit from enhanced security and privacy practices to align with modern standards.
- DDerwent Buyers Group
derwentbuyersgroup.com
Other · United Kingdom
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Derwent Buyers Group is a UK-based agricultural buying group established in 2001, providing farmers and agricultural businesses with collective purchasing power for agrochemicals, fertilisers, seed, fuel, and recycling services. The company positions itself as a trusted partner offering a simple, honest, and transparent service to help members save time and money. The website reflects a professional and consistent brand image with good content quality and positive customer testimonials, supported by excellent Google reviews. Technically, the site is built on WordPress with a variety of plugins including SEO and social media integrations, and it is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- KKE Supplies Ltd
kesupplies.co.uk
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
KE Supplies Ltd's website is currently under construction and provides minimal information beyond a contact email. The domain WHOIS lookup failed due to an invalid domain format, indicating potential misconfiguration or improper registration. The website uses basic technologies such as Bootstrap, jQuery, and Font Awesome but lacks essential content, security features, and compliance documentation. The absence of HTTPS and security headers further weakens the site's security posture. Overall, the digital maturity is low, with no visible analytics, tracking, or business information. The risk profile is elevated due to the invalid domain status and lack of security best practices.
Deen Buildersdeenbuilders.co.uk
Real Estate · United Kingdom
49High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Deen Builders is a small, family-run building and decorating business operating primarily in Cirencester, The Cotswolds, and surrounding areas. Established in 1968, the company has a long-standing reputation for quality workmanship and customer satisfaction. Their services include building, decorating, cabinet making, and specialized projects such as bathrooms, kitchens, refurbishments, and extensions. The website reflects a professional and consistent brand image targeting homeowners and property owners seeking reliable building solutions in their region. Technically, the website employs a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, and Google Tag Manager. The CMS appears to be MODX, and hosting is provided by Ionos SE. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. The presence of cookie consent and terms of service pages indicates some compliance awareness, but the absence of a privacy policy is a notable gap. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, no security headers were detected, and there is no published security or incident response policy. Third-party scripts are used for analytics and social media integration, which should be regularly reviewed for vulnerabilities. Overall, the security posture is adequate but could be improved with additional headers and policies. The overall risk assessment is moderate with a good business credibility score but some privacy compliance shortcomings. Strategic recommendations include adding a comprehensive privacy policy, implementing security headers, and publishing incident response contacts to enhance trust and compliance.
Kitchens & Bathroomskitchensandbathroomskent.com
Real Estate · United Kingdom
44High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Kitchens & Bathrooms is a small, family-run home improvement business based in Kent, UK, specializing in bespoke kitchen, bathroom, bedroom, and home office designs with full project management and installation services. The company enjoys a strong local market position with a significant portion of work coming from repeat clients and referrals. The website is professionally designed using WordPress and Elementor, featuring rich content, client testimonials, and integration with reputable manufacturers. Technically, the site uses modern web technologies and is hosted by a UK-based registrar, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks some advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Wwww.immersivedisplay.co.uk
immersivedisplay.co.uk
Other · United Kingdom
48High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website immersivedisplay.co.uk currently displays a critical PHP fatal error related to the WordPress SEO plugin, rendering the site content inaccessible. The domain is registered since 2006 under a UK hosting provider, UKHost4u.com, but no company-specific information or business content is available on the site. The lack of privacy policies, contact information, and security headers indicates a low level of digital maturity and security posture. The site uses WordPress CMS but suffers from technical issues that prevent proper functionality and SEO optimization. Security vulnerabilities include the exposed PHP error and absence of security best practices. Overall, the site presents a high risk due to poor maintenance and lack of compliance features.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Arkote Grouparkote.com
Manufacturing
46High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Arkote Group is a manufacturing business specializing in cutting knives and related industrial products, serving primarily B2B clients in manufacturing and industrial sectors. The website presents a professional and consistent brand image with clear navigation and relevant product offerings. Technically, the site is built on WordPress using the Divi theme and integrates SEO and analytics tools such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or security policies, which are areas for improvement. The absence of WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security and compliance disclosures.