Security Directory

T

Thai Golf Holidays

thaigolfholidays.co.uk

39

Thai Golf Holidays is a UK-based travel service specializing in golf holiday packages in Thailand, offering flights, hotels, golf course bookings, and transfers. The website positions itself as a niche provider for golf enthusiasts seeking quality and value in Thailand's extensive golf offerings. The business has been established since 2006, indicating a mature presence in the market. Technically, the site is built on WordPress using a variety of plugins including Yoast SEO and Pootle Page Builder, providing a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security measures.

T

Three Daws

threedaws.co.uk

45

Three Daws is a historic riverside inn located in Gravesend, Kent, UK, offering hospitality services including a pub, food menus, event hosting, and function room hire. The business targets local residents and visitors seeking a welcoming atmosphere with real ales, fine wines, and community events. The website reflects a small hospitality business with a consistent brand and active social media presence. Technically, the site is built on WordPress using common plugins such as WPBakery Page Builder, Contact Form 7, and Events Calendar Pro. It employs HTTPS with Google reCAPTCHA for form security but lacks some security headers and explicit cookie consent mechanisms. The WHOIS data is unavailable due to domain registration issues, which raises concerns about domain legitimacy but does not detract from the apparent authenticity of the business. Overall, the site is functional, moderately optimized, and suitable for mature audiences due to its alcohol-related content.

N

Niplast

niplast.com

70

Niplast is a UK-based manufacturer specializing in bespoke industrial bulk liquid plastic storage tanks designed for water, chemicals, acids, and other liquids. The company positions itself as a leading manufacturer within the UK market, targeting industrial and commercial customers requiring reliable storage solutions. The website reflects a professional business presence with clear branding and relevant content focused on their manufacturing services. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and Elementor, indicating a moderate level of digital maturity. The inclusion of Google Tag Manager and reCAPTCHA suggests awareness of analytics and security best practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS enabled, but the lack of security headers and explicit privacy policies indicates room for improvement. Overall, the website is functional and professional but would benefit from enhanced compliance and transparency measures.

A

ASB (Engineers) Ltd

asbspraycentre.co.uk

55

ASB (Engineers) Ltd is a small, established company based in Glasgow, Scotland, specializing in the hire and servicing of paint spraying equipment and related products since 1957. The company offers a comprehensive range of equipment including airless and turbine sprayers, high pressure washers, and stocks spare parts and accessories. Their market position is that of a trusted local business with a strong emphasis on customer service and quality equipment. The website is built on WordPress using common plugins such as Yoast SEO and Beaver Builder, with Google Analytics and Tag Manager integrated for tracking. The site is well-structured, mobile-optimized, and professionally designed, providing clear contact information and service descriptions. However, the absence of privacy and cookie policies indicates compliance gaps with data protection regulations. Security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but security headers are missing and no incident response or vulnerability disclosure information is provided. WHOIS data is unavailable due to domain registration issues, which slightly impacts trustworthiness but the website content and contact details appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

S

S & D Bookmakers Ltd

sdbet.co.uk

35

S & D Bookmakers Ltd is a well-established independent bookmaker company founded in 1966, operating multiple physical betting shops primarily in the Peterborough area of the UK. The company offers a variety of sports betting services including football, horse racing, tennis, rugby, and cricket, supported by a workforce with long-term employee retention. Their website serves as an informational portal with branch locations, betting guides, and contact details, reflecting a local retail business model focused on customer service and responsible gambling. The presence of multiple gambling regulatory and responsible gambling certifications underscores their compliance with UK gambling laws. Technically, the website is built on WordPress with common plugins such as Yoast SEO and MasterSlider, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS lookup for the domain 'www.sdbet.co.uk' failed due to domain naming rules, suggesting the registered domain is likely 'sdbet.co.uk' without the 'www' prefix. This discrepancy should be clarified to ensure domain registration transparency. Overall, the website is professional, trustworthy, and targeted at adult bettors, with clear contact information and responsible gambling messaging. However, the absence of privacy and cookie policies and incomplete WHOIS data reduce the privacy compliance and domain legitimacy scores. Strategic improvements in security headers, privacy disclosures, and domain registration clarity would enhance the site's security and compliance posture.

H

Helexco Company Ltd

helexco.eu

46

Helexco Company Ltd is a well-established maritime safety equipment and ship services provider with over 40 years of experience, operating primarily in the UK and Greece. Their offerings include calibration gases, gas detection equipment and training, antifouling systems, oil mist detection, and smart monitoring solutions tailored for the shipping industry. The company targets maritime operators and safety professionals, positioning itself as a trusted supplier with long-term partnerships and a solid market presence. Technically, the website is built on WordPress with common plugins such as WPBakery, Slider Revolution, and Contact Form 7, integrating Google Analytics and Tag Manager for tracking. The site is moderately optimized for performance and mobile use, with good SEO practices and structured data markup enhancing search visibility. From a security perspective, the site uses HTTPS and employs Google reCAPTCHA on forms, but lacks some recommended security headers and may be running outdated WordPress and plugin versions, which could pose risks. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected, which is a GDPR compliance gap. Overall, the website is professional and trustworthy with a good business credibility score. However, improvements in security headers, software updates, and privacy compliance mechanisms are recommended to enhance the security posture and regulatory adherence.

C

Cards n Candy

ccballoons.co.uk

48

Cards n Candy is a small, locally established retail business based in Wirral, UK, specializing in party supplies including balloons, cards, gifts, and party accessories. The company has been operating for over 16 years, run by a husband and wife team, and targets local customers seeking party decorations and gifts. The website reflects a well-structured retail storefront with clear product categories and customer engagement through testimonials and social media integration. Technically, the website is built on WordPress with popular plugins for page building, spam protection, and SEO, hosted by Krystal Hosting Ltd, a reputable UK provider. Performance and mobile optimization are adequate for a small business site. Security posture is moderate with HTTPS enabled and anti-spam measures, but lacks advanced security headers and explicit incident response policies. Privacy and cookie policies exist but are hosted externally and lack consent mechanisms, indicating partial GDPR compliance. Overall, the site is trustworthy and professional for its business scope but could improve security and privacy practices.

A

A & D Door Systems Ltd

addoorsystems.co.uk

43

A & D Door Systems Ltd is a well-established family-owned business specializing in the installation, repair, and maintenance of industrial and commercial doors, roller shutters, and security systems across the UK. With over 25 years of experience, the company offers a comprehensive range of products and services including emergency 24/7 repair, multi-site contracts, and tailored maintenance plans. Their market position is strengthened by strong customer loyalty, certifications, and a focus on quality and service. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating modern technologies such as Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized with good SEO practices, though some accessibility features could be improved. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS with good SSL configuration but lacks some security headers that could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a comprehensive privacy policy present but no visible cookie consent mechanism. Contact information is clear and comprehensive, supporting business credibility. Overall, the website presents a professional and trustworthy front for the business, though improvements in security headers and privacy compliance would enhance its posture. The WHOIS data is unavailable due to querying the 'www' subdomain, but the website content and business information indicate legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, and enhancing incident response transparency.

D

Disappearing Ink » Professional Laser Aesthetics

disappearing-ink.co.uk

42

Disappearing Ink is a small UK-based professional laser aesthetics service provider with a domain registered since 2010. The website is built on WordPress using WPBakery Page Builder and UIkit framework, indicating a moderate level of technical maturity. The site integrates Facebook SDK for social media but lacks visible privacy, cookie, or terms of service policies, which impacts its compliance posture. Security headers are not detected, and no explicit contact information is found in the analyzed content, suggesting areas for improvement in transparency and security. Overall, the business appears legitimate with a stable domain history but would benefit from enhanced privacy and security practices.

Intergears Ltd is a well-established automotive service provider specializing in gearbox, axle, differential, and clutch reconditioning with over 35 years of experience. The company operates primarily in the West Midlands and Black Country region of the UK, targeting both public and trade customers. Their business model focuses on quality service backed by warranties and free collection options, positioning them as a trusted local specialist in their niche market. The website reflects a professional and consistent brand presence with clear service offerings and customer testimonials reinforcing trust. Technically, the website is built on WordPress using the Enfold theme, integrating modern technologies such as Google Tag Manager and Yoast SEO for analytics and search optimization. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security headers and detailed security policies. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid for a small business website, with room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with clear policies and consent mechanisms. The domain registration data aligns well with the business claims, supporting legitimacy. The website is safe for general audiences with no adult or questionable content. Strategically, the company should focus on enhancing security best practices, adding incident response information, and maintaining up-to-date technical components to sustain trust and compliance in the evolving digital landscape.

D

Dorset HealthCare University NHS Foundation Trust

dorsethealthcare.nhs.uk

73

Dorset HealthCare University NHS Foundation Trust is a large regional healthcare provider delivering comprehensive mental health and community-based physical health services across Dorset, UK. The organization operates under the NHS framework, serving patients, visitors, carers, and healthcare professionals with a focus on accessibility and quality care. The website reflects a mature digital presence with clear navigation, professional design, and strong trust indicators including an Outstanding CQC rating. Technically, the site is built on Concrete CMS with modern web technologies such as Bootstrap, jQuery, and Owl Carousel, and includes accessibility tools and multilingual support via Google Translate. Security posture is good with HTTPS enforced and cookie consent mechanisms, though explicit security headers and vulnerability disclosure policies are absent. WHOIS data is unavailable due to the domain being a subdomain under nhs.uk, which is consistent with NHS domain management practices. Overall, the site is trustworthy, compliant with GDPR, and well-positioned to serve its audience effectively.

The website totalcontrolracing.com appears to be a minimal WordPress-based site with very limited content and no clear business description or services offered. The site uses common technologies such as WordPress CMS, jQuery, Font Awesome, and the Yoast SEO plugin, hosted likely on Hostinger infrastructure. The site lacks essential business and legal information such as privacy policies, cookie consent, terms of service, and contact details beyond a personal Gmail address exposed in a blog post. Security posture is weak with no DNSSEC, no security headers, and exposed personal email increasing risk. The domain WHOIS data is inconsistent, showing a creation date in the future and no registrant details, which raises legitimacy concerns. Overall, the site is low quality, with poor content and minimal technical sophistication, resulting in a low trust and security score.

T

Three Pears Brands | International Fragrance, Skin and Personal Care Supplier

threepears.co.uk

51

Three Pears Brands is a UK-based company specializing in international fragrance, skin, and personal care products. Established in 1973, the company has evolved from a distribution powerhouse into a leading brand partner, focusing on brand licensing, brand management, and manufacturing. They serve major retail partners such as Tesco, Morrisons, Superdrug, and B&M, bridging the gap between world-class intellectual property and retail shelves. The website reflects a mature digital presence with professional design, clear navigation, and modern technology stack including WordPress, WooCommerce, and Elementor. Technically, the website is well-structured, mobile-optimized, and uses secure HTTPS connections. However, it lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and user trust. The WHOIS data for the domain is unavailable due to a domain registration error, which raises some concerns about domain legitimacy despite the professional business presence. Security posture is generally good with HTTPS and no visible vulnerabilities, but improvements are recommended in security headers and privacy compliance. Overall, the website presents a trustworthy and professional business front, but domain registration inconsistencies and missing compliance documents should be addressed to enhance credibility and reduce risk.

The website represents 安徽长泰, a Chinese company specializing in information security products and services targeting enterprise and government sectors. Their offerings include security auditing products, data protection solutions, and comprehensive management platforms, alongside professional services such as network security consulting, software development, IT outsourcing, and system integration. The company positions itself as a leading domestic expert in data security management. Technically, the website employs common JavaScript libraries like jQuery and Swiper for interactive UI elements and demonstrates moderate performance and good mobile optimization. However, there is no evidence of advanced frameworks or CMS usage. Security posture is moderate but lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating compliance gaps. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is business-focused, safe for general audiences, but requires improvements in security and compliance transparency.

Stokes & Sons Security Limited is a long-established, family-run locksmith and security specialist serving Gloucestershire and surrounding areas since 1857. The company offers a comprehensive range of locksmith services including key cutting, master key systems, lock fitting, safe services, and access control systems. Their market position is strong locally, supported by membership in the Master Locksmiths Association and a reputation built over generations. The website reflects a professional and trustworthy business with clear contact information and service descriptions. Technically, the site is built on WordPress using Elementor, with modern JavaScript libraries and responsive design, providing a good user experience across devices. Security posture is solid with HTTPS and secure form inputs, though it lacks some security headers and formal privacy/cookie policies, which are recommended for compliance and trust. The WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy despite the professional web presence. Overall, the site is functional, professional, and trustworthy but would benefit from improved privacy compliance and domain registration transparency.

Engine Room Technology Ltd is a UK-based full-service digital agency specializing in web design, ecommerce development, hosting, and bespoke automotive website solutions. Established since 1996, the company offers a comprehensive range of services including domain registration, WordPress maintenance, and specialized dealer management systems for automotive clients. Their market position is that of a trusted, experienced provider with a strong portfolio and client support infrastructure. Technically, the website is built on WordPress using the Avada theme, leveraging modern JavaScript libraries, Google reCAPTCHA, and analytics tools, hosted on Hetzner servers. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS, security headers, and secure forms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-maintained, with room for improvement in formal security disclosures and DNS security.

Myrene Signs Ltd is a UK-based small business specializing in the creation of various signage solutions, including vehicle graphics, banners, engraving, and digital print. Established in 2000, the company leverages both modern technologies and traditional sign writing methods to serve businesses seeking effective branding and signage. Their website reflects a professional and consistent brand image targeting business clients in need of signage services. Technically, the website is built on WordPress using the Total theme and LiteSpeed Cache, hosted by IONOS SE. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is trustworthy and functional but would benefit from enhanced security and compliance measures.

G

Gregory & Seeley Cranleigh

gregory-seeley.co.uk

61

Gregory & Seeley Cranleigh is a small independent optician business located in Cranleigh, United Kingdom, specializing in eye care services and designer eyewear. The company positions itself as a leading local provider with award-winning optometrists and a range of specialized services including dry eye clinics, myopia management, and hearing care. The website is built on WordPress using modern themes and plugins, demonstrating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is generally strong with HTTPS enforced and use of Google reCAPTCHA, though there is room for improvement in security headers and privacy compliance. The absence of WHOIS data due to domain naming rules is a notable anomaly but the website content and contact information suggest a legitimate business. Overall, the site is professional, trustworthy, and serves its target audience effectively.

C. Brumpton Butchers Ltd is a longstanding family-run butcher business operating in Nottingham with physical stores in Cotgrave and West Bridgford. The company emphasizes quality, local sourcing, and traditional recipes, offering a wide range of meat products and home-baked goods. Their website serves primarily as an informational platform showcasing their offerings and contact details, supported by a professional design and embedded promotional video. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile responsiveness. Security posture is solid with HTTPS and anti-spam measures, though it lacks advanced security headers and formal privacy policies, which are areas for improvement. The domain WHOIS data is unavailable due to a registration error, which raises some concerns about domain legitimacy from a technical standpoint but does not detract from the business's apparent authenticity. Overall, the website is functional, professional, and safe for general audiences.

B

B.Kent Electrical Ltd

bkentelectrical.co.uk

49

B Kent Electrical Ltd is a small UK-based electrical contracting company specializing in domestic, commercial, and industrial electrical services. Their market position is that of a local specialist serving Leighton Buzzard, Milton Keynes, Bedford, and surrounding areas. Key services include electrical contracting, testing and inspecting, lighting solutions, fire and security services, and data solutions. The website presents basic but relevant content with certifications from NIC and CHAS, indicating industry compliance and trustworthiness. Technically, the website is built on Joomla CMS with Bootstrap 5 and jQuery libraries, providing a moderately optimized and mobile-friendly experience. However, the site lacks advanced SEO and accessibility features and does not display any analytics or tracking tools. Security-wise, the site includes a CSRF token but lacks visible security headers and explicit HTTPS enforcement details. No privacy or cookie policies are present, which is a compliance gap. The WHOIS lookup failed due to domain registration issues, indicating the domain name is invalid under Nominet UK rules. This raises concerns about the domain's legitimacy or registration status, although the website content appears professional and legitimate. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website scores moderately on content quality and technical implementation but scores low on privacy compliance and domain legitimacy. Strategic improvements in security headers, privacy policies, and domain registration verification are recommended to enhance trust and compliance.

U

Universal Metals

universalmetals.co.uk

48

Universal Metals is a small, family-run scrap metal merchant business operating in the United Kingdom, specifically serving areas such as Crawley, Lancing, and Hastings. The company specializes in recycling both ferrous and non-ferrous metals with a focus on zero waste, positioning itself as a responsible and environmentally conscious local business. Their website reflects a professional and consistent brand image, targeting businesses and individuals seeking scrap metal recycling services in their region. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with no significant issues detected in loading or navigation. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA, but lacks several important security headers and does not provide explicit security or incident response policies. The absence of a privacy policy and terms of service pages indicates gaps in compliance and transparency. Additionally, the domain WHOIS data is unavailable due to a domain registration error, which raises concerns about domain legitimacy despite the website's operational status. Overall, the website presents a trustworthy and professional front for a small local business but would benefit from enhanced security practices, improved privacy compliance, and resolution of domain registration inconsistencies to strengthen its credibility and reduce risk.

P

Park Lane Windows

parklanewindows.co.uk

55

Park Lane Windows is a well-established family-run business specializing in the supply and installation of high-quality, energy-efficient windows, doors, conservatories, and home extensions primarily serving Northamptonshire and surrounding counties in the UK. The company holds multiple trust certifications including FENSA registration and Which? Trusted Trader status, reflecting a strong market position and customer trust. Their website effectively showcases their product range and services, targeting homeowners and property owners seeking reliable home improvement solutions. Technically, the website is built on WordPress with Elementor and integrates modern tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no exposed sensitive data, although the absence of a public security policy and incident response information suggests room for improvement. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, with moderate tracking and analytics usage. Strategic recommendations include publishing comprehensive privacy and security policies and enhancing accessibility features to further strengthen compliance and user trust.

J

Jo Potts

jopotts.net

44

Jo Potts is a professional video producer and editor offering comprehensive video production, editing, and motion design services. The website serves as a portfolio showcasing recent projects and notable clients, targeting businesses and individuals seeking high-quality video content. The business operates as a small-scale service provider within the media industry. Technically, the website is built on WordPress using the Vantage theme, with common plugins such as WPForms Lite and W3 Total Cache. The site is moderately optimized for performance and mobile devices, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting the contact form, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. The absence of WHOIS registration data raises concerns about domain legitimacy, though the active and professional website partially mitigates this risk. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

P S Bookkeeping & Accountancy is a well-established small business specializing in bookkeeping, payroll, company accounts, VAT, and tax services primarily serving clients in Colchester and the wider UK. Founded in 1988, the company emphasizes personal, reliable, and cost-effective accounting solutions tailored to businesses of all sizes. Their market position is that of a trusted local specialist with a loyal client base and a reputation for quality service. The website reflects this with clear service descriptions and contact information. Technically, the website is built on Drupal 7 with the Foundation CSS framework, utilizing modern JavaScript libraries such as jQuery and integrating Google Analytics and reCAPTCHA for analytics and security. Hosting is via Cloudflare, providing robust SSL/TLS encryption. The site is moderately performant and mobile-optimized, though some technical debt is evident due to the older CMS version. From a security perspective, the site benefits from HTTPS and spam protection via reCAPTCHA, but lacks several recommended security headers and explicit privacy or security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Contact information is comprehensive and professional, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and a solid technical foundation. Strategic improvements in privacy compliance and security headers would enhance trust and security posture further.

J

JE Consulting

je-consulting.co.uk

63

JE Consulting is a UK-based marketing consultancy specializing in professional sectors such as accounting, legal, and healthcare. The company offers integrated services including social media management, web design, direct marketing, graphic design, and PR. Positioned as a niche expert, JE Consulting targets professional firms seeking to enhance their market presence with innovative and unified marketing strategies. The website reflects a mature digital presence with comprehensive content, client testimonials, and clear business information, supporting its credibility and market position. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, Yoast SEO, Google Tag Manager, and reCAPTCHA v3 for form security. The site is mobile-optimized, SEO-friendly, and employs GDPR-compliant cookie consent mechanisms. Performance is moderate with good accessibility and navigation, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and use of reCAPTCHA to prevent spam. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent management. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The WHOIS data is unavailable due to a query error related to the www subdomain, but this does not detract from the legitimacy of the business as evidenced by consistent company information and professional presentation. Strategic recommendations include enhancing security headers and conducting regular security audits to maintain a robust security posture.

A

Ashton Cleaning Services

ashtoncleaning.co.uk

38

Ashton Cleaning Services is a small, established cleaning company based in Exeter, UK, offering a wide range of domestic, commercial, and specialist cleaning services. With over 20 years of industry experience, the company positions itself as a reliable and professional service provider with a strong local presence and a portfolio of high-profile clients. Their service offerings include house cleaning, school cleaning, trauma cleaning, floor restoration, and COVID-19 cleansing among others. The website is built on WordPress using Elementor, hosted via Cloudflare, and employs modern technologies such as Google reCAPTCHA v3 for form security. While the site is well-designed and provides clear contact information and trust signals such as certifications and testimonials, it lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS and DNSSEC enabled, but could be improved by adding security headers and formal security policies. Overall, the website is professional and trustworthy for its business domain but would benefit from enhanced privacy and security disclosures.

A

Autopak

autopakmachinery.co.uk

62

Autopak Machinery is a UK-based company specializing in the design and manufacture of bespoke bag filling and handling equipment, with over 20 years of industry experience. Their website presents a professional and comprehensive overview of their product range and services, targeting manufacturing companies requiring customized industrial machinery solutions. The company emphasizes technical expertise, customer support, and tailored solutions to meet unique customer requirements. The digital infrastructure is built on WordPress with WooCommerce, enhanced by SEO and analytics tools, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal security policies. The absence of WHOIS data due to domain registration issues slightly impacts trustworthiness, though the website content and business presentation remain credible and professional. Overall, the site is well-structured, mobile-optimized, and provides clear contact channels, supporting a positive user experience.

G

Garnetts Gardens

garnettsgardens.co.uk

49

Garnetts Gardens is a well-established, family-run retail plant nursery located in Hacheston, United Kingdom. Founded in 1994, the business has expanded from a small shed to a comprehensive garden centre offering a farm shop, café, gift area, and caravan site. The website reflects a local community focus with services tailored to gardening enthusiasts and local customers. The business model centers on retail and hospitality services with a strong emphasis on homegrown plants and knowledgeable customer support. Technically, the website is built using the Site.pro website builder platform, incorporating standard JavaScript libraries and Google Fonts. The site is moderately optimized for performance and mobile use, with basic SEO and accessibility features. Hosting is provided by 123-Reg Limited, a reputable UK registrar and hosting provider. The website is accessible without any WAF or security challenges, indicating good availability. From a security perspective, the site uses HTTPS but lacks important security headers and policies such as privacy, cookie, and terms of service documents. There is no evidence of advanced security frameworks or incident response mechanisms. The site collects minimal user data via a simple Google Maps directions form but does not implement consent mechanisms or privacy compliance features. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk assessment suggests a legitimate small business website with moderate technical maturity and some compliance gaps. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and enhancing data protection practices to improve trust and compliance.

Boward is a small treesurgery business operating a WordPress-based website focused on gardening and tree care content. The site features a blog authored by 'Jack Boomer' with posts dating from 2022. The business appears to be a local or small-scale service provider with no evident parent company or subsidiaries. Technically, the website uses standard WordPress technologies including jQuery and several JavaScript libraries for UI enhancements. Hosting is provided by OVH, a reputable provider. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. No contact emails, phone numbers, or social media links are provided, which limits business credibility and user trust. WHOIS data is consistent with the business profile, showing domain registration in 2022 with OVH. Overall, the website is functional and content-rich but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and compliance.

H

Hearns Specialised Joinery Ltd

hearnsjoinery.co.uk

58

Hearns Specialised Joinery Ltd is a small, established bespoke joinery business based in Dorking, Surrey, with a history dating back to 1982. The company specializes in custom doors, staircases, windows, and bespoke furniture, targeting homeowners and property owners in Surrey and South West London. Their website reflects a professional and consistent brand image, emphasizing craftsmanship and quality materials. Technically, the website uses modern JavaScript libraries, cookie consent management, and Google Analytics, with good SEO and mobile optimization. Security posture is adequate with HTTPS and consent mechanisms, but lacks explicit security headers and a published security policy. The WHOIS data is unavailable due to domain naming rule violations, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is functional, trustworthy in content, but domain registration issues reduce full trust.

W

Walden Steels Ltd

waldensteels.co.uk

57

Walden Steels Ltd is a small manufacturing business specializing in bespoke steelwork based in Newport, Gwent, United Kingdom. The company targets local businesses and contractors across South Wales, offering high-quality engineering and steel fabrication services. The website reflects a professional presence with clear contact information and a focus on service offerings. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google reCAPTCHA for form security. SEO and structured data are well implemented, enhancing discoverability and brand presentation. Security posture is adequate with HTTPS enabled and basic anti-bot measures, though additional security headers and policies could improve resilience. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website is trustworthy and functional, supporting the company's business objectives effectively.

Bidvest Noonan is a well-established facilities management service provider operating primarily in the United Kingdom and Ireland. The company offers a broad range of services including security, cleaning, technical services, energy management, and integrated facilities management solutions. Positioned as a leading provider in its sector, Bidvest Noonan targets corporate clients across multiple industries such as healthcare, education, transport, government, and retail. The website reflects a professional but basic content presentation with clear navigation and consistent branding, although some pages return 404 errors indicating minor content management issues. Technically, the website is built on WordPress using the Genesis Framework, leveraging modern analytics tools like Google Analytics, Ahrefs, and Plausible, alongside a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and uses Cloudflare for DNS, but lacks DNSSEC and explicit security headers, which are areas for improvement. Performance is moderate, and accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent best practices but does not publicly disclose a security policy or incident response plan. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business profile, showing a domain age appropriate for the company's history and no privacy protection, which aligns with transparency expectations for this business type. Overall, Bidvest Noonan's digital presence is credible and compliant with privacy regulations, though there is room to enhance security posture and content completeness. Strategic improvements in security headers, DNS security, and comprehensive policy disclosures would strengthen trust and resilience.

M

Morson Edge

anderselite.com

72

Morson Edge is a specialist recruitment and workforce solutions provider focused on delivering talent for mission critical industries. Positioned as the UK's leading technical recruiter, it offers a broad range of services including talent acquisition, statement of work, HR partnership, and executive search. The company operates as part of the larger Morson Group, with several subsidiary brands enhancing its service portfolio. The website demonstrates a high level of professionalism, with comprehensive service descriptions and strong branding consistency. Technically, the site is built on WordPress with modern frameworks and is optimized for performance and mobile use. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC are missing. The WHOIS data shows an unusual future domain creation date, which may warrant further verification but does not detract significantly from the overall trustworthiness. No adult or questionable content is present, making the site safe for general audiences.

BCD Travel is a global leader in corporate travel management, offering a comprehensive suite of services including booking and trip management, spend analytics, meetings and events management, and consulting. The company targets corporate clients and procurement leaders, aiming to optimize travel spend and enhance traveler safety and productivity. Their UK presence is well-established with multiple office locations and a strong digital footprint. Technically, the website is built on WordPress with modern performance and accessibility optimizations, leveraging tools like Google Tag Manager and Usercentrics for privacy compliance. Security posture is strong with HTTPS enforced and consent management in place, though explicit security headers could be improved. The absence of WHOIS data slightly impacts trust but is mitigated by the professional presentation and external trust signals. Overall, BCD Travel demonstrates a mature, enterprise-level digital presence aligned with its market position.

Stanley Motta Limited is a publicly listed real estate development company based in Jamaica, specializing in commercial office space leasing and property management. The company owns and operates 58 HWT, a major business process outsourcing and technology park in Kingston, offering over 300,000 square feet of commercial office space on prime land. Their business model focuses on triple-net leases denominated in US dollars, targeting investors and commercial tenants in the Caribbean region. Technically, the website is built on WordPress using the Elementor framework, integrating modern web technologies such as jQuery and YouTube API for multimedia content. Google Analytics is employed for visitor tracking, complemented by a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website uses HTTPS with a valid SSL certificate and employs domain transfer protection. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website presents a professional and trustworthy digital presence for Stanley Motta Limited, with a solid security posture and compliance framework. Strategic improvements could include enhancing security headers, publishing a security policy, and expanding accessibility features to further strengthen trust and compliance.

H

Hearst Communications, Inc.

hearst.com

70

Hearst Communications, Inc. operates a large, diversified media and information services business with a global footprint. The website reflects a mature enterprise with multiple business units including magazines, newspapers, television, real estate, and healthcare information services. The digital presence is built on modern technologies such as React and Liferay, providing a responsive and accessible user experience. Privacy and cookie policies are comprehensive and include consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data is a notable gap but does not detract significantly from the overall legitimacy given the strong corporate branding and content. Strategic recommendations include publishing security policies, vulnerability disclosure information, and enhancing transparency around incident response.

W

Wilkes-Green + Hill Ltd

wilkesgreenhill.co.uk

59

Wilkes-Green + Hill Ltd is an independent, award-winning estate agency based in Penrith, Cumbria, established in 1996. The company specializes in property sales, lettings, valuations, and landlord/tenant services, targeting local property buyers, sellers, landlords, and tenants. The website reflects a professional and trustworthy business with clear branding, comprehensive service descriptions, and multiple trust indicators including certifications and customer testimonials. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Swiper.js, and Google reCAPTCHA v3, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a credible and professional digital presence for a small real estate business.

D

Dream Days Bridal Wear Ltd.

dreamdaysbridalwear.co.uk

62

Dream Days Bridal Wear Ltd. is a small retail bridal boutique located in Dudley, UK, specializing in wedding dresses, plus size bridal wear, and mother of the bride outfits. The business operates primarily on an appointment-only model, offering personalized and in-house alteration services. The website reflects a professional and customer-focused approach with clear communication about COVID-19 policies and appointment scheduling. Technically, the site is built on the Webflow platform, leveraging modern web technologies and integrating Google Analytics and Tag Manager for marketing insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and published security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. The WHOIS lookup failed due to domain naming rules issues, which raises some concerns about domain registration legitimacy, though the website content and business information appear trustworthy. Overall, the site scores well in business credibility and content quality but should improve security and privacy compliance to enhance trust and regulatory adherence.

B

Baruch College

cuny.edu

63

Baruch College is a nationally recognized public higher education institution located in New York City, operating under the City University of New York (CUNY) system. The website serves students, faculty, staff, alumni, and prospective students by providing comprehensive academic program information, news, events, and resources. The institution emphasizes diversity, equity, and inclusion, and maintains a strong digital presence with official social media channels and a well-structured website. Technically, the website is built on WordPress CMS and leverages modern web technologies including jQuery, Typekit fonts, and multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile optimized and accessible, with good SEO practices and a professional design. Performance is moderate, with asynchronous loading of scripts enhancing user experience. From a security perspective, the site enforces HTTPS and uses several tracking and marketing scripts responsibly. However, it lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The WHOIS data is unavailable due to .edu domain registry policies, but the domain's legitimacy is supported by consistent branding and institutional affiliation. Overall, the website is trustworthy, professionally maintained, and serves its educational mission effectively. Strategic improvements in security headers and privacy compliance would further strengthen its posture.

A

American Society for Engineering Education

asee.org

59

The American Society for Engineering Education (ASEE) operates a comprehensive and professionally designed website serving the engineering education community. ASEE is a well-established non-profit organization with over 130 years of history, providing membership services, conferences, publications, and professional development resources. The website targets educators, students, and professionals in engineering education, offering a broad range of services including job classifieds, fellowships, and community engagement. Technically, the site leverages modern web technologies such as jQuery, Bootstrap, and integrates analytics tools like Google Analytics and Hotjar, hosted on Microsoft Azure CDN, ensuring moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are recommended to enhance compliance and protection. Overall, ASEE.org presents a trustworthy, content-rich platform aligned with its educational mission.

F

Folkekirkens Nødhjælp

noedhjaelp.dk

59

Folkekirkens Nødhjælp is a well-established Danish non-profit humanitarian organization operating since 1922, focused on disaster relief, fighting inequality, and building resilient communities both in Denmark and internationally. The website reflects a professional and consistent brand presence with comprehensive content in Danish, targeting donors, volunteers, and stakeholders interested in humanitarian aid. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, uses modern JavaScript libraries such as Swiper.js, and integrates privacy-conscious analytics via Matomo. The site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR, demonstrating a mature approach to privacy and user data protection. However, the absence of publicly available WHOIS data due to privacy protection limits domain registration transparency. Security posture is solid with encrypted connections and no visible vulnerabilities, but could be improved by adding explicit security headers and publishing security policies or incident response contacts. Overall, the site is trustworthy, professional, and well-suited for its non-profit mission.

S

Specialised Process Solutions Ltd

spsmachinery.co.uk

46

Specialised Process Solutions Ltd is a small UK-based manufacturing company specializing in triple roll mills, mixers, press outs, and table systems primarily serving the ink, paint, adhesive, and food industries. Established in 2002 by industry veterans with over 75 years combined experience, the company emphasizes customer-focused, tailored machinery solutions including sales of new and refurbished equipment and relocation services. The website reflects a niche industrial business with a professional but modest online presence. Technically, the website is built on Joomla CMS with common JavaScript libraries such as jQuery, Bootstrap, and MooTools. The site is mobile-optimized and has a moderate performance profile. However, there is a lack of advanced SEO and accessibility features. Security posture is moderate with cookie consent implemented but missing key security headers and unclear SSL enforcement. No forms or email contacts are present, limiting direct digital engagement. The WHOIS data is unavailable due to a domain naming rules error, which raises concerns about domain registration legitimacy and reduces trustworthiness. Despite this, the website content and business information appear consistent and professional. The company holds ISO9001:2015 certification, which is a positive trust indicator. Overall, the website is functional and informative but would benefit from improved security practices, clearer domain registration transparency, and enhanced privacy and incident response disclosures to strengthen trust and compliance.

W

WM Lee

wmlee.co.uk

55

WM Lee Limited operates as a cast iron foundry specializing in manufacturing cast iron components for diverse sectors including automotive, commercial trucks, rail, trailers, and general engineering. The company provides comprehensive foundry services such as moulding, core making, finishing, machining, assembly, and quality assurance. Positioned as a medium-sized manufacturing business in the UK, WM Lee is part of the Castings Group plc, indicating a solid corporate backing. The website reflects a professional and consistent brand image with detailed information about their manufacturing capabilities and market sectors served. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and plugins for language translation and cookie compliance. The site is mobile-optimized and demonstrates good SEO and accessibility basics, although there is room for improvement in security headers and accessibility features. Performance is moderate, with no major issues detected in loading or responsiveness. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, the absence of security headers and lack of explicit incident response or vulnerability disclosure information suggest areas for enhancement. The WHOIS data for the domain is unavailable due to a naming rules violation error from Nominet UK, which is unusual and warrants further investigation to confirm domain legitimacy. Overall, WM Lee's digital presence is professional and business-focused, with good privacy compliance and a solid technical foundation. The main risk lies in the unclear domain registration status, which should be addressed to strengthen trust and security posture. Strategic recommendations include improving security headers, publishing incident response contacts, and verifying domain registration details.

A

Alfred H Knight

ahkgroup.com

55

Alfred H Knight is a well-established company with over 140 years of experience providing independent inspection, analytical, and technical consultancy services to support global trade in commodities such as metals, minerals, solid fuels, and agricultural products. The company positions itself as a trusted partner in the industry, supported by ISO certifications and a professional online presence. The website is built on WordPress and integrates modern technologies and analytics tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits domain trust verification but does not detract from the professional business presentation. Overall, the website is secure, privacy compliant, and professionally maintained, serving a business audience effectively.

Clan & Plant Tools Ltd, part of the Emergency One Group, is a UK-based company specializing in the supply of equipment and manufacturing of emergency vehicles, including fire engines and rescue vehicles. The company targets a broad audience ranging from large organizations to private individuals, positioning itself as a reputable supplier in the transportation and emergency services sector. The website reflects a professional business presence with detailed product offerings and a clear brand identity aligned with its parent group. Technically, the site is built on WordPress using modern plugins such as Elementor and WooCommerce, ensuring a flexible and scalable platform. SEO and structured data implementations are well executed, enhancing search visibility and content clarity. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though it lacks some advanced security headers and explicit privacy and cookie policies, which are important for compliance and user trust. Overall, the website is functional, professional, and trustworthy, but could benefit from enhanced privacy compliance and security hardening to meet best practices and regulatory requirements.

M

Michael Bailey Associates

michaelbaileyassociates.com

53

Michael Bailey Associates is a well-established international recruitment consultancy specializing in IT & Technology, Life Sciences, Finance, and Energy sectors. With over 30 years of experience, the company offers recruitment and project resource solutions to a global client base, emphasizing strong local networks and market-focused relationships. The website reflects a professional and consistent brand image, targeting job seekers and corporate clients alike. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google reCAPTCHA v3 for security. It is mobile-optimized with good SEO practices and integrates Google Tag Manager for analytics. The site uses HTTPS exclusively, ensuring secure data transmission. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA integration on forms. However, it lacks visible security headers and explicit incident response or security policy documentation. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, but the missing WHOIS data and lack of explicit security policies suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing incident response policies, and verifying domain registration details to strengthen trust and compliance.

A

Additional Aids Mobility

aamobility.co.uk

47

Additional Aids Mobility is a UK-based small business specializing in providing high quality and cost effective mobility aids and related services. Established since 2002, the company appears to serve a general audience seeking mobility solutions. The website is built on WordPress using WooCommerce and the Divi theme, indicating a moderate level of digital maturity with e-commerce capabilities. Technical infrastructure includes modern web technologies and hosting by 20i Ltd, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, security headers, and reCAPTCHA integration, although formal privacy and terms policies are absent, which could impact compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

C

Claridge Interiors

claridgeinteriors.co.uk

65

Claridge Interiors is a UK-based small business specializing in interior design and home renovation services, including kitchens, bathrooms, bedrooms, and offices. The company emphasizes a collaborative design-to-build process and leverages over 30 years of experience to deliver high-quality workmanship and customer satisfaction. Their website reflects a professional and consistent brand image with clear contact information and customer testimonials that enhance trust. Technically, the website is built on WordPress using modern technologies such as Bootstrap 4, jQuery, and FontAwesome. It is mobile-optimized and includes SEO best practices. Google Analytics is implemented for user tracking and external link event monitoring. However, some security best practices like security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS with a good SSL configuration and secure forms. There are no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are present, indicating some level of GDPR compliance, though the absence of a cookie consent banner is a gap. No incident response or security policy information is publicly available. Overall, the website is trustworthy and professionally maintained with a good security posture for a small business. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance compliance and user trust.

B

Bridgewater Funeral Service Ltd

bridgewaterfuneralservice.co.uk

56

Bridgewater Funeral Service Ltd is a family-owned and operated funeral director business serving Boothstown, Worsley, Walkden, Astley, and surrounding areas in Manchester, UK. Established in 2013, the company offers a range of funeral services including tailored, simple, and direct funerals, as well as pre-paid funeral plans and memorial jewellery. The business holds recognized industry memberships such as the National Association of Funeral Directors and the British Institute of Funeral Directors, reinforcing its professional standing and commitment to quality service. The website features 64 verified 5-star reviews, indicating strong customer satisfaction and trust. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as jQuery, Google reCAPTCHA for form security, and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good SEO practices with proper metadata and structured data. Hosting is managed via Ionos SE, consistent with the domain registrar information. Performance is moderate with room for optimization. From a security perspective, the website enforces HTTPS and uses reCAPTCHA to protect its contact forms. However, it lacks explicit security headers and a published security policy or incident response plan, which are recommended for enhanced security posture. Privacy compliance is partially addressed with a privacy and cookie policy present, but no active cookie consent mechanism is implemented. Overall, the site maintains a good security baseline but could improve in transparency and compliance. The overall risk assessment is low with no signs of malicious activity or vulnerabilities detected in the content or technical setup. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing a security policy, and maintaining regular updates to the CMS and plugins to mitigate potential risks. These steps will enh…

K

Ken Gamble International Horse Transport Limited

kengamble.co.uk

54

Ken Gamble International Horse Transport Limited is a UK-based specialist company providing international horse transportation services since 1987. The website presents a professional and focused business offering, targeting clients needing equine logistics and transport solutions. The digital infrastructure is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and includes cookie consent mechanisms, but lacks explicit privacy and terms of service pages, as well as clear contact information. Security posture is generally good with HTTPS enabled, but security headers and vulnerability disclosures are absent. The domain WHOIS data is unavailable due to a registration error, which impacts trust and legitimacy assessment. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.