Security Directory

R

Reed Professional Services

reedps.com

74

Reed Professional Services is a consultancy arm of the Reed Global Group specializing in digital and business transformation solutions. The company serves a broad range of clients across public and private sectors, offering services such as project management, software development, IT strategy, change management, and HR transformation. The website reflects a mature digital presence with comprehensive content, client testimonials, and case studies that reinforce its market position as a trusted transformation partner. Technically, the website is built on WordPress with modern plugins and tracking technologies including HubSpot, Google Tag Manager, Microsoft Clarity, and LinkedIn Insight. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good SSL configuration. However, explicit security headers are not fully implemented, and WHOIS data for the domain is missing, which raises some concerns about domain registration transparency. From a security perspective, the site follows good practices with consent management and secure form handling, but lacks a public security policy or incident response contacts. The extensive use of third-party analytics and marketing scripts indicates a high level of user tracking, balanced by GDPR-compliant privacy and cookie policies. Overall, the website presents a professional and trustworthy image with strong business credibility. The main risk lies in the lack of WHOIS transparency and incomplete security headers, which should be addressed to enhance trust and security posture.

Bow House Digital Ltd is a small, established digital agency based in York, United Kingdom, specializing in web design, SEO, WordPress websites, e-commerce, branding, and digital marketing services. With over 25 years of industry experience, the company targets businesses in York and North Yorkshire seeking to enhance their online presence and digital marketing effectiveness. The website reflects a professional and consistent brand image, supported by client testimonials and a portfolio of recent projects, positioning Bow House as a trusted local partner in digital services. Technically, the website is built on WordPress CMS, leveraging modern JavaScript libraries such as jQuery, GSAP, and Slick Carousel for enhanced user experience. It integrates Google Tag Manager and LinkedIn Insight for analytics and marketing, and employs Google reCAPTCHA to secure its contact forms. The site is mobile-optimized and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to mitigate spam. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which are recommended to strengthen security posture. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy and cookie policies are present and indicate GDPR compliance, supporting responsible data handling. Overall, the website demonstrates a strong digital maturity and business credibility with minor areas for security enhancement. The absence of WHOIS data due to a domain query error does not detract from the legitimacy of the business, as corroborated by company registration details and consistent branding. Strategic recommendations include implementing additional security headers, enhancing accessibility, and maintaining up-to-date software to mitigate potential risks.

C

Cavendish Medical Ltd

cavendishmedical.com

63

Cavendish Medical Ltd is a UK-based financial planning firm specializing in services tailored for medical and NHS professionals. Established in 2005, the company offers pension planning, investment advice, and a unique empowerment pathway to help clients achieve their financial goals. The website reflects a focused business model targeting a niche audience within the healthcare sector, positioning itself as a trusted advisor with FCA authorization and clear regulatory compliance. The content is professionally presented, with clear navigation and relevant service information.

S

Sustainable Seas Ltd

sustainableseas.co.uk

56

Sustainable Seas Ltd is a UK-based consultancy specializing in climate change adaptation and coastal zone management. The company operates globally, providing expert advice and project delivery services to coastal communities, businesses, and governments. Their website reflects a mature business with over 15 years of experience, supported by professional content, testimonials, and a downloadable brochure. Technically, the site is built on WordPress using modern plugins and includes a comprehensive cookie consent mechanism, indicating good privacy compliance. Security posture is solid with HTTPS and secure forms, though formal security policies and incident response details are absent. Overall, the website presents a trustworthy and professional image suitable for its target audience.

T

The National Association for Children of Alcoholics

nacoa.org.uk

55

Nacoa is a well-established UK charity dedicated to supporting children, young people, and adults affected by parental alcohol misuse. The organization provides a free confidential helpline, online message boards, and extensive information and advice. It has a strong market position supported by notable patrons, awards, and a clear mission to raise awareness and provide support. The website reflects a professional and trustworthy presence with comprehensive content tailored to its target audience. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers and policies could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and digital maturity.

T

Total Solutions Group (TSG) Jersey

tsg.je

61

Total Solutions Group (TSG) Jersey is a leading information management and technology services provider based in Jersey, serving clients across the Channel Islands, UK, Gibraltar, Mauritius, and South Africa. The company offers a broad range of services including document management, scanner hardware support, robotic process automation, GDPR consultancy, and information security. Their market position is strong regionally, supported by partnerships with recognized technology providers such as Kofax and Mitratech. The website reflects a professional business model focused on B2B services with clear contact channels and trust indicators such as Cyber Essentials certification. Technically, the website is built on WordPress using modern plugins like WPBakery Page Builder and LayerSlider. It employs HTTPS with good SSL configuration and includes responsive design elements for mobile optimization. However, some technical improvements are recommended, including the implementation of security headers and proper configuration of analytics tools. The website's performance is moderate with basic SEO and accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. The presence of Cyber Essentials certification indicates a commitment to security standards. However, the absence of security headers and lack of an incident response or vulnerability disclosure policy are areas for improvement. Privacy compliance is partially met with privacy and cookie policies present, but the lack of a cookie consent mechanism reduces compliance confidence. Overall, the website is trustworthy, professional, and well-positioned in its market niche. Strategic recommendations include enhancing security headers, implementing cookie consent, configuring analytics properly, and publishing explicit security and incident response policies to strengthen compliance and trust.

C

Cullimore Dutton Solicitors Limited

cullimoredutton.co.uk

56

Cullimore Dutton Solicitors Limited is a well-established legal and financial advisory firm based in Cheshire, UK, with a heritage dating back to 1792. The company offers a broad range of services including family law, property conveyancing, estate planning, and independent financial advice, targeting individuals, families, and business owners in the Cheshire and Chester region. The firm positions itself as a trusted local advisor providing joined-up legal and financial services under one roof, emphasizing clarity, respect, and professionalism. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Yoast SEO for search optimization, Contact Form 7 for user inquiries, and Google reCAPTCHA for spam protection. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for improvement in security headers and some external tracking domains. From a security perspective, the website enforces HTTPS and uses reCAPTCHA on forms, indicating a good baseline security posture. However, there is no explicit evidence of advanced security headers or a published security policy or incident response plan. The WHOIS lookup for the domain failed due to a naming rules error, but the domain is active and professionally maintained, suggesting legitimacy despite incomplete WHOIS data. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR. The main risks relate to incomplete WHOIS data and minor security header omissions. Strategic improvements in security policy transparency and header implementation would enhance the security posture and trustworthiness further.

Balls2Marketing Ltd is a well-established marketing agency based in Derby, UK, founded in 2010. The company offers a comprehensive range of marketing services including public relations, digital marketing, creative branding, marketing strategy, social media management, and event management. Their client base spans various sectors such as glazing, construction, home improvements, sustainability, and both B2B and B2C markets. The agency positions itself as a creative and strategic partner focused on delivering measurable marketing results. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, demonstrating a mature digital presence. Security measures include HTTPS, reCAPTCHA on forms, and anti-spam honeypots, though additional security headers could enhance protection. Overall, the website is professional, user-friendly, and compliant with privacy regulations, reflecting a credible and trustworthy business.

M

Mitchell Maguire

mitchellmaguire.co.uk

59

Mitchell Maguire is a specialized recruitment consultancy focusing on sales and technical roles within the UK construction sector. Established in 2009, it has developed a strong market presence with a professional website offering job listings, candidate services, and client engagement. The company targets construction manufacturers, distributors, and sales professionals, providing tailored recruitment solutions. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good SEO, mobile responsiveness, and user experience. Security measures include HTTPS, Google reCAPTCHA, and cookie consent, though some HTTP security headers and formal security policies are absent. Overall, the site is trustworthy and professionally maintained, with minor recommendations to enhance security posture and compliance documentation.

Prestige Roofing Ltd is a well-established roofing company based in London, providing residential and commercial roofing services including new roof installations, re-roofing, emergency repairs, and cladding installation. The company has over 40 years of experience and holds reputable certifications such as Which? Trusted Trader and membership in the Guild of Master Craftsmen, positioning it as a trusted service provider in its market segment. The website reflects a professional business with clear service offerings and customer testimonials supporting its credibility. Technically, the website is built on WordPress with a modern tech stack including popular plugins for analytics, forms, and sliders. It uses HTTPS and has moderate performance and good mobile optimization. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. Security-wise, the site shows no immediate vulnerabilities or exposed sensitive data, but the absence of security headers and incident response information indicates room for improvement. The WHOIS data is unavailable due to domain naming rules errors, which limits domain trust verification, but the website content and certifications provide compensating trust signals. Overall, the website is professional and trustworthy with moderate technical maturity and a good security baseline. Strategic improvements in privacy compliance and security hardening are recommended to further strengthen the company's digital presence and trustworthiness.

Burton Beavan is a small, established accounting firm based in Northwich, Cheshire, UK, offering a range of financial and accounting services primarily targeting local businesses, contractors, and tech start-ups. The company emphasizes forward-thinking and proactive client service, with a strong local market presence and positive trust indicators such as high customer ratings and testimonials. The website is professionally designed using WordPress, with good SEO and mobile optimization, and integrates common technologies such as Google Analytics and reCAPTCHA for security. Security posture is solid with HTTPS and form protections, though additional security headers and explicit policies could enhance compliance and trust. WHOIS data is unavailable due to domain registration lookup limitations, but the website content and domain usage align with legitimate business operations. Overall, the site presents a trustworthy and professional image suitable for its target audience.

U

UKP Worldwide

ukpworldwide.com

46

UKP Worldwide is a specialist service provider focusing on customs clearance for eCommerce parcels and mail to and from the UK, including returns management and duty reclaim services. The company targets businesses involved in eCommerce logistics, offering niche expertise in customs and returns processes. The website presents a professional and consistent brand image with clear business descriptions and social media presence, indicating a small but focused operation founded around 2019. Technically, the website is built on WordPress using the Divi theme and common plugins such as Yoast SEO and Contact Form 7. It employs tracking and analytics tools like Microsoft Clarity and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. From a security perspective, the website lacks visible security headers and explicit privacy or cookie policies, which reduces its compliance posture. The WHOIS data is incomplete or unavailable, raising concerns about domain registration transparency. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices and compliance documentation are recommended. Overall, the website is functional and professional but would benefit from enhanced security configurations, transparent privacy policies, and verified domain registration information to improve trust and compliance.

Universal Converting Equipment is a UK-based manufacturer and supplier specializing in converting machinery such as slitter rewinders, core cutters, salvage rewinders, and hot melt coating systems. The company positions itself as a leading global supplier with a focus on substantial construction, simple operation, and worldwide support. Their business model targets industrial manufacturers and converting industry professionals worldwide, leveraging a B2B approach. The website reflects a professional and consistent brand image with clear product offerings and UK-based contact information. Technically, the website is built on WordPress using a modern stack including Yoast SEO, Google Tag Manager, and GDPR-compliant cookie management. The site is mobile-optimized with good SEO and accessibility basics. Analytics and marketing tools such as Google Analytics, Hotjar, Facebook Pixel, and LinkedIn Insight Tag are integrated with user consent mechanisms. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for forms, but lacks explicit security policy or incident response disclosures. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and trustworthiness, warranting further verification. Overall, the website presents a solid digital presence for an industrial equipment supplier with good privacy compliance and marketing practices. Strategic recommendations include enhancing security headers, publishing security policies, and resolving WHOIS data inconsistencies to improve trust and compliance.

O

Ogle Models & Prototypes Ltd

oglemodels.com

55

Ogle Models & Prototypes Ltd is a well-established UK-based company specializing in rapid prototyping, model making, and 3D printing services. With over 70 years of experience, the company serves a diverse range of industries including aerospace, automotive, medical, and product design. Their key services include advanced manufacturing techniques such as SLS, SLA, FDM 3D printing, CNC machining, vacuum casting, and finishing processes. The website reflects a mature digital presence with comprehensive service descriptions, client testimonials, and a professional design that supports their market position as a leading prototype engineering firm. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and LiveChat for customer engagement and data insights. The site is mobile-optimized, SEO-friendly, and includes structured data for enhanced search engine visibility. Security measures include HTTPS enforcement, reCAPTCHA on forms, and cookie consent mechanisms, although additional HTTP security headers could further strengthen the security posture. From a security and compliance perspective, the site demonstrates good privacy and cookie policy implementations aligned with GDPR requirements. However, no explicit security policy or incident response contact information is published, which could be improved. The WHOIS data for the domain is unavailable, which raises some transparency concerns, but the overall legitimacy is supported by the professional content, certifications, and client base. Overall, Ogle Models presents a trustworthy and professional online presence suitable for its B2B manufacturing audience. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency to further bolster trust and compliance.

V

VOW Wholesale

voweurope.com

63

VOW Wholesale operates a business-oriented website focused on wholesale services, as indicated by the company name and website title. The site is built on WordPress using the Divi theme and incorporates common plugins such as Contact Form 7 and Yoast SEO. The technical infrastructure includes modern tracking and marketing tools like Google Analytics, Google Tag Manager, Force24, and Cookiebot for cookie consent management. The website is accessible without any WAF or security challenge blocking content. However, the absence of WHOIS data due to a Nominet UK error raises concerns about domain registration legitimacy. The site lacks visible privacy policies, terms of service, and contact information, which impacts trust and compliance assessments. Security posture is moderate with HTTPS enabled and reCAPTCHA used, but missing security headers and no visible vulnerability disclosures reduce the security maturity. Overall, the website presents a basic but functional online presence for a wholesale business with room for improvement in compliance, security, and transparency.

C

CLAC

clac.org.uk

56

CLAC is a small, family-run educational organization founded in 1985, specializing in summer language courses for students aged 11 to 17 in the United Kingdom. The website presents a professional and well-structured digital presence, offering English and Spanish courses combined with social and sports activities. The business emphasizes personal attention, welfare, and safety, targeting both overseas and British students. The website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery, and Google Analytics, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. However, the absence of security headers and the lack of WHOIS registration data for the domain introduce some concerns. Overall, the website is trustworthy and professional but would benefit from enhanced security configurations and clearer domain registration transparency.

J

JMD Accounting Ltd

jmdaccounting.com

60

JMD Accounting Ltd is a small, professional accounting and bookkeeping service provider based in Surrey, United Kingdom. The company specializes in tax accounting services tailored for small businesses, offering a comprehensive range of services including Making Tax Digital support, payroll, VAT returns, self-assessment, and company filings. The business is led by Janette Dalgliesh, a qualified CIMA member since 1996, emphasizing expertise and trustworthiness in the financial services sector. The website reflects a focused local market position with clear contact channels and professional branding. Technically, the website is built on WordPress using Elementor and several popular plugins such as Slider Revolution, Yoast SEO, and WPForms. It employs modern web technologies and integrates Google Analytics and Google reCAPTCHA v3 for user tracking and form security. The site is mobile-optimized and demonstrates good SEO practices, although some security headers are missing and DNSSEC is not enabled, which are areas for improvement. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements reCAPTCHA on forms to mitigate spam. Privacy and cookie policies are present and GDPR compliant, with a functional consent mechanism. However, there is no explicit security policy or incident response information published, and no vulnerability disclosure or security.txt file is found. The WHOIS data is consistent with the business claims, showing a domain registered since 2007, supporting the legitimacy and stability of the company. Overall, JMD Accounting Ltd presents a trustworthy and professional online presence with solid business credibility and a good security posture. Minor enhancements in security headers, DNSSEC, and transparency around incident response could further strengthen their digital maturity and customer trust.

N

NS Print

shropshireprinter.com

51

NS Print is a well-established printing and design service provider based in Shropshire, UK, with a domain age dating back to 2000. The company offers a comprehensive range of print services including litho, digital, large format printing, and finishing services, targeting business clients seeking quality and personalized print solutions. Their website reflects a professional and consistent brand image, optimized for SEO and mobile devices, and includes clear contact information and privacy policies, indicating a mature digital presence. Technically, the site is built on WordPress with modern plugins and uses HTTPS with good security practices such as Cloudflare Turnstile captcha on forms. However, there is room for improvement in security headers and explicit security policy disclosures. Overall, the security posture is solid with no critical vulnerabilities detected. The website is safe for general audiences with no adult or questionable content. The domain registration data supports the legitimacy of the business, showing consistency and transparency. Strategic recommendations include enhancing security headers, formalizing incident response policies, and improving accessibility compliance to further strengthen trust and security.

R

Rollasons Solicitors LLP

rollasons.com

47

Rollasons Solicitors LLP is a well-established UK-based legal services firm founded in 1994, providing a broad range of legal support to individuals, families, and businesses. With offices in Daventry, Lutterworth, and Leamington Spa, the firm emphasizes professionalism, knowledge, and approachability, serving a loyal client base with services including conveyancing, employment law, litigation, wills and probate, corporate and commercial law, debt recovery, and insolvency. The website reflects a mature business with consistent branding and trust indicators such as client testimonials and regulatory badges.

F

Fletchers Engineering

fletchersengineering.co.uk

47

Fletchers Engineering is a well-established UK-based engineering company specializing in HVAC fabrication, installation, and maintenance services. With over 30 years of industry experience, the company serves a diverse range of sectors including energy, manufacturing, hospitality, and government. Their website reflects a professional and comprehensive presentation of their services, supported by multiple industry accreditations and certifications, positioning them as a reputable player in their market segment. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Slick Slider, and integrates key tools like Google Analytics, Hotjar, and Google reCAPTCHA for analytics and security. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, indicating a mature digital presence. However, some improvements in accessibility and security headers could enhance the technical posture. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks explicit security policies and incident response information. The WHOIS data is unavailable due to a query on the subdomain rather than the registered domain, which slightly reduces trustworthiness from a domain registration standpoint. Overall, the security posture is good but could benefit from additional transparency and technical hardening. The overall risk assessment is moderate-low, with the main concerns being the incomplete WHOIS data and absence of published security policies. Strategic recommendations include verifying domain registration details, implementing security.txt and incident response pages, and enhancing HTTP security headers to improve trust and compliance.

Kingston Cleaning Services (KCS) is a UK-based commercial and industrial cleaning company specializing in a wide range of interior and exterior cleaning services across Yorkshire and the UK. The company serves diverse sectors including commercial, industrial, and domestic clients, offering services such as building fabric cleaning, window cleaning, pressure washing, and high-level cleaning. KCS emphasizes health and safety, with trained teams and strong site compliance, positioning itself as a reliable and reputable cleaning partner with over 70 years of combined experience in the industry. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics integrated. The site is mobile-optimized with good navigation and content structure, though some security headers could be improved. The website uses HTTPS and reCAPTCHA for form security, reflecting a moderate to good security posture. Security-wise, the site demonstrates good practices including HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit incident response contacts and a vulnerability disclosure policy, which are recommended for enhanced security maturity. Privacy and cookie policies are present and appear GDPR compliant, supporting privacy compliance. Overall, the website is professional, trustworthy, and well-maintained, though the WHOIS data is unavailable due to domain registration lookup issues. This does not detract from the legitimacy of the business, but it is recommended to verify domain registration details through alternative means. Strategic improvements in security headers and incident response transparency would further strengthen the security posture.

Harpers Salon is a small, established hair salon located in Belper, Derbyshire, UK, operating since 2012. The business offers a variety of haircare services including wedding hair, hair extensions, and general treatments, targeting local customers seeking professional and personalized hair styling. The website is built on WordPress using the Crush theme and integrates common plugins such as Contact Form 7 and Instagram Feed. The site is well-designed with good mobile optimization and clear navigation, reflecting a professional local business presence. However, it lacks critical privacy and cookie policies, which impacts compliance and user trust. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but security headers and incident response information are missing. Overall, the website is trustworthy and safe for general audiences but would benefit from enhanced privacy compliance and security best practices.

A

Airco

airco.co.uk

58

Airco Refrigeration & Air Conditioning Limited is a well-established UK-based HVAC service provider specializing in design, supply, installation, commissioning, servicing, and maintenance of air conditioning, refrigeration, heating, ventilation, electrical, and carbon reduction solutions. The company operates nationally with multiple offices and safe storage units, serving a broad range of sectors. Their website reflects a mature digital presence with professional design, comprehensive service descriptions, and multiple trust signals including certifications and case studies. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use. Security posture is good with HTTPS and reCAPTCHA implemented, though some improvements in security headers and explicit policies could be made. Overall, the site is trustworthy, business-focused, and compliant with GDPR, though cookie consent mechanisms are absent.

Tomtom Coffee House is a specialist coffee shop located in Belgravia, London, known for its high-quality coffee made from Allpress roast beans. The business targets coffee enthusiasts and local customers in the West End area, operating a retail coffee shop model with a strong local reputation. The website is built on WordPress using common plugins and frameworks such as Bootstrap, jQuery, and Contact Form 7, indicating a moderate level of digital maturity. The site includes marketing and analytics tools like Google Analytics and Crazy Egg, and offers newsletter signup forms for customer engagement. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and explicit incident response or security policies. Privacy and cookie policies are present but basic, with some GDPR compliance indicators. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name is invalid under Nominet UK rules, which raises concerns about domain legitimacy or configuration. Overall, the website is professional and functional but would benefit from enhanced security practices and clearer compliance documentation.

N

Nexus Chafer

cropsprayers.com

53

Nexus Chafer operates as a specialized manufacturer of crop spraying and granular application machinery, targeting agricultural businesses and farmers. The company emphasizes custom-built, technologically advanced equipment designed for performance and productivity. The website reflects a professional presence with clear business focus but lacks explicit contact details and privacy policy documentation. Technically, the site is built on WordPress using the Avada theme, integrating SEO and GDPR compliance plugins, and employs Google Analytics with consent management. Security posture is moderate with HTTPS enabled but could benefit from enhanced security headers and regular plugin updates. The absence of WHOIS registration data is a notable concern, impacting domain trustworthiness. Overall, the site is functional and professional but requires improvements in transparency and security practices.

A

Amity Insulation Services Limited

amitygroup.co.uk

47

Amity Insulation Services Limited is a well-established UK-based company specializing in asbestos surveying, removal, and related environmental and safety training services. With over 30 years of industry experience, the company holds multiple certifications including ARCA awards and ISO 9001 accreditation, positioning it as a trusted leader in the Oxfordshire region. The website reflects a professional business presence with clear service offerings and comprehensive contact information. Technically, the site is built on WordPress with standard plugins and Google Analytics integration, offering good performance and mobile optimization. Security posture is solid with HTTPS enabled, though additional security headers and explicit security policies could enhance protection. Privacy compliance is addressed with visible cookie and privacy policies including consent mechanisms. The absence of WHOIS data due to querying the 'www' subdomain limits domain registration trust verification, but overall business credibility remains high based on website content and certifications.

S

Shepherd Chartered Surveyors

shepherd.co.uk

52

Shepherd Chartered Surveyors is a leading property surveying and valuation firm based in Scotland, with a history dating back to 1880. The company offers a broad range of services including residential home reports, commercial property search, valuations, lease advisory, and asset management. Their market position is strong within Scotland, supported by a nationwide office network and a merger with Hardies Property and Construction Consultants. The website reflects a professional and well-established business with a focus on property clients and investors. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution. It integrates Google Analytics and Tag Manager for tracking and marketing purposes, alongside customer review widgets from Reviews.io. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses spam protection on forms and cookie consent mechanisms, indicating a reasonable security posture. However, explicit security headers and detailed security policies are not publicly visible, suggesting room for improvement in transparency and hardening. The WHOIS data query was unsuccessful due to an invalid domain format, which slightly impacts trust but does not detract from the professional appearance and content of the site. Overall, the website presents a credible and trustworthy business with good technical implementation and moderate privacy compliance. Strategic improvements in security transparency and privacy policy visibility would enhance the site's trustworthiness and compliance posture.

P

Pink Green

pinkgreencreative.co.uk

58

Pink Green is an independent brand activation agency specializing in fintech clients globally. Their services focus on brand, digital, and campaign activation, positioning themselves as a niche player in the financial marketing sector. The website demonstrates a professional and modern digital presence with multimedia case studies and client testimonials, indicating a mature digital marketing approach. Technically, the site is built on WordPress with a modern tech stack including GSAP, Bootstrap, and Google Analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though the absence of security headers and privacy policy pages suggests room for improvement. Overall, the site is trustworthy and professional, with a moderate risk profile primarily due to incomplete privacy compliance documentation.

R

Readings Property Group

readingspropertygroup.com

54

Readings Property Group is a small, established real estate agency based in Leicestershire, United Kingdom, specializing in residential and commercial property sales and lettings. Founded in 2010, the company positions itself as a local expert on the Leicestershire property market, offering services to buyers, renters, and sellers. The website reflects a professional business with clear branding and a focus on property services in the local area. The target audience includes individuals and businesses seeking property transactions in Leicestershire. Technically, the website is built on WordPress, leveraging modern frameworks such as Bootstrap and Font Awesome, and integrates several plugins tailored for real estate listings and customer reviews. Hosting and DNS services are managed via Cloudflare, providing a reliable infrastructure. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook SDK are implemented, alongside a cookie consent mechanism via CookieYes. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, but lacks explicit security headers and publicly available security or incident response policies. Forms include reCAPTCHA to mitigate spam. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age. Overall, the website demonstrates a solid business presence with good technical implementation and moderate security posture. However, improvements in privacy compliance documentation and security policy transparency are recommended to enhance trust and regulatory adherence.

S

Slate

helloslate.co.uk

48

Slate is a small, specialized web design and marketing agency based in East London, focusing on WordPress website design, development, and ongoing maintenance. The company has an established domain since 2009 and maintains a consistent brand presence across social media platforms. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Analytics, Hotjar, and Mailchimp. The site demonstrates good SEO practices and mobile optimization, providing a professional user experience. Security-wise, the website uses HTTPS and includes cookie consent mechanisms and Google reCAPTCHA for form protection, but lacks explicit privacy policies, terms of service, and incident response information, which are areas for improvement. Overall, the website is trustworthy and professional, with moderate technical and security maturity.

C

County Vets

county-vets.co.uk

41

County Vets is a well-established veterinary practice based in Ayrshire, UK, providing comprehensive veterinary services for small animals, farm animals, and horses. The business operates two surgeries in Maybole and Ayr, offering a wide range of diagnostics, treatments, and health plans tailored to the needs of their clients. Their market position is that of a trusted local mixed veterinary practice with a clear focus on quality care and client service. Technically, the website is built on WordPress using modern technologies such as Bootstrap 4, jQuery, and FontAwesome. It employs Google reCAPTCHA v3 for form security and enforces HTTPS, ensuring secure communications. The site is moderately performant, mobile-optimized, and has good SEO and accessibility basics, though there is room for improvement in security headers and privacy compliance. From a security perspective, the site demonstrates good practices with HTTPS and anti-bot measures but lacks formal security policies, incident response information, and cookie consent mechanisms, which are important for GDPR compliance. No vulnerabilities or suspicious content were detected, and the domain registration data supports the legitimacy of the business. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

Norgine is a well-established European specialist pharmaceutical company founded in 1906, with a strong global partnership network. The company focuses on acquiring, developing, and commercializing innovative pharmaceutical products that impact patient lives positively, serving approximately 25 million patients annually. The website reflects a professional and consistent brand image, targeting healthcare professionals, partners, and patients. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and user engagement, delivering a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is strong, with clear policies and consent banners. Overall, the website demonstrates high business credibility and trustworthiness.

L

Livework

liveworkstudio.com

54

Livework is a global business transformation consultancy specializing in design-led change and service design. With over 24 years of experience and multiple global studios, they serve diverse sectors including retail, manufacturing, public sector, financial services, healthcare, and urban development. Their key services focus on envisioning and planning change, delivering tangible initiatives, embedding change operations, and enhancing service culture. The website reflects a mature, professional consultancy with strong market positioning and client success stories.

B

Black Apricot Creative

blackapricot.com

57

Black Apricot Creative is a Midlands-based multi-platform design agency specializing in branding, marketing, print, digital, and photographic services for local and international clients. The company positions itself as a small but professional agency focused on maximizing brand impact and marketing budgets for its customers. The website reflects a consistent and professional brand image with clear service offerings and contact information. Technically, the site is built on WordPress, utilizing common plugins such as Yoast SEO and Contact Form 7, and integrates Google Analytics for user tracking. The site demonstrates good mobile optimization and SEO practices but lacks advanced accessibility features and some security best practices. Security posture is moderate; HTTPS is used, but no security headers were detected, and no explicit privacy or cookie policies are present, indicating compliance gaps. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website presence. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

C

Concept Recruitment Group Ltd

conceptrecruitment.com

60

Concept Recruitment Group Ltd operates a professional recruitment website focused on providing temporary, permanent, and contract staffing solutions primarily in the North of England. The company has an established market presence since 2006 and offers a range of recruitment services including on-site services, branch network support, and professional staffing. The website is well designed with clear navigation, job listings, and multiple contact channels, targeting job seekers and employers in their regional market. Technically, the site is built on WordPress with modern SEO and user experience practices, including mobile optimization and use of Google reCAPTCHA for form security. Security posture is adequate with HTTPS and some best practices but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Assured Stairlifts Ltd

assuredstairlifts.co.uk

45

Assured Stairlifts Ltd is a UK-based company specializing in the supply and installation of fully reconditioned and second hand stairlifts, serving private homes and public sector properties. With over 20 years of industry experience, they offer a range of stairlift brands including Stannah, Minivator, Brooks, and Acorn, with pricing starting at £650 inclusive of installation and warranty. The company positions itself as a leading supplier in the UK market with a national network of engineers and emergency call out services. Technically, the website is built on WordPress using Elementor and integrates Google Analytics and Google Ads for marketing and tracking. The site is secured with HTTPS and employs Google reCAPTCHA on forms, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to domain registration errors, which impacts trust from a domain registration perspective. Overall, the website is professional, content-rich, and trustworthy from a business standpoint but could improve privacy compliance and security posture.

A

ADLIB Recruitment

adlib-recruitment.co.uk

68

ADLIB Recruitment is a purpose-driven recruitment agency based in the United Kingdom, proudly B Corp certified and operating since 2001. The company specializes in permanent, contract, integrated recruitment partnerships, and senior appointments across multiple sectors including technology, data, engineering, and sustainability. Their market position is that of a trusted partner supporting growth and change with a strong emphasis on ethical business practices and diversity. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular plugins and analytics tools such as Google Analytics and Bing Ads. The site is well-optimized for SEO and mobile devices, with good content quality and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. Overall, the website presents a professional and trustworthy image with strong compliance to privacy regulations.

D

Doorstore (Wirral) Ltd

doorstorewirral.co.uk

51

Doorstore (Wirral) Ltd is a small, family-run business specializing in the supply and installation of wooden, composite, and UPVC doors and windows in the Wirral and Chester areas. The company positions itself as a local leader with over 30 years of experience, targeting homeowners and property owners seeking quality door and window solutions. The website reflects this with clear service descriptions and contact information. Technically, the site is built on WordPress using common plugins such as Contact Form 7 and Google reCAPTCHA, indicating a moderate level of digital maturity. However, the Google Analytics plugin is present but not configured, suggesting incomplete analytics implementation. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks advanced security headers and explicit security policies. The WHOIS data is unavailable due to domain registration errors, which raises some concerns about domain legitimacy but does not negate the professional presentation and business consistency observed. Overall, the website is functional and trustworthy but could benefit from enhanced security and privacy compliance measures.

L

Labosport Group

labosport.com

61

Labosport Group is an established organization specializing in research, testing, and certification of sports surfaces and equipment, recognized as a FIFA Research Institute. Founded in 1993, the company offers consulting, testing services, training, and certification to improve sports surface safety and performance. The website targets sports industry professionals and related stakeholders globally, supporting multiple languages to cater to an international audience. The business model revolves around providing expert services and certifications in the sports surface domain, positioning Labosport as a trusted authority in this niche market. Technically, the website is built on WordPress 7.0 with a modern tech stack including jQuery, various plugins for SEO, translation (Weglot), marketing (Brevo/Sendinblue), push notifications (WonderPush), and analytics (Google Analytics, Snitcher). The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting details are limited but the domain is registered with a reputable registrar (Gandi SAS). From a security perspective, the site uses HTTPS and has domain transfer protection enabled, but lacks DNSSEC and security headers. Anti-spam measures are in place via CleanTalk. No explicit privacy, cookie, or security policies are published, which is a compliance gap. No incident response or vulnerability disclosure information is available. Overall, the security posture is moderate but could be improved with better policy transparency and DNS security. The overall risk assessment is low to moderate with recommendations to enhance privacy compliance, enable DNSSEC, implement security headers, and publish clear security and incident response policies. These improvements will strengthen trust and regulatory compliance while maintaining the company’s professional online presence.

J

Jameson Lomax

jamesonlomax.com

45

Jameson Lomax is a small, established IT support company based in the East Midlands, UK, specializing in IT support, cloud services including Microsoft 365, cyber security, IT procurement, and backup solutions. The company positions itself as a reliable partner focused on user-centric IT solutions to help businesses improve efficiency and profitability. The website is professionally designed using WordPress and modern plugins, providing a good user experience with clear navigation and mobile optimization. However, the absence of WHOIS registration data raises some concerns about domain transparency. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy and cookie policies are not found, indicating room for compliance improvement. Contact information is clearly provided, enhancing business credibility. Overall, the website reflects a trustworthy small business IT service provider with moderate technical maturity and some compliance gaps.

R

Roston Castings

rostoncastings.co.uk

51

Roston Castings is a UK-based specialist aluminium casting foundry with over 60 years of experience supplying high-quality aluminium castings to automotive, aerospace, agriculture, and engineering industries. The company maintains a strong market position supported by ISO9001 certification and long-term partnerships with high-profile manufacturers. Their key services include design, toolmaking and CNC machining, and gravity die casting. The website reflects a professional and consistent brand image targeting B2B customers in technical manufacturing sectors. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, with good SEO and mobile optimization. The presence of Google Analytics and Tag Manager indicates moderate user tracking, balanced with GDPR-compliant cookie consent mechanisms. The site is served over HTTPS with no detected blocking or WAF interference, indicating a mature digital infrastructure. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though explicit security headers and incident response policies are not publicly documented. No vulnerabilities or exposed sensitive data were found. The domain registration is consistent with the business history, registered since 1998 with a reputable UK registrar. Overall, the website presents a trustworthy and professional front for Roston Castings, with good compliance and security practices. Strategic improvements could include publishing a dedicated security policy, incident response contacts, and enhancing security headers to further strengthen the security posture.

T

Trafalgar Public Relations

trafalgar-pr.co.uk

43

Trafalgar Public Relations is a small, specialized communications consultancy based in Cumbria, UK, led by Chris Nelson with over 30 years of experience. The company serves clients primarily in engineering, manufacturing, defence, energy, public sector, and professional services, offering a broad range of PR and communications services including media relations, corporate communications, and crisis management. The website reflects a professional and consistent brand image with clear service offerings and client case studies. Technically, the site is built on WordPress with common plugins and libraries, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and cookie notice present but no active consent mechanism. Overall, the site is trustworthy and well-positioned for its niche market but could improve in security and compliance transparency.

Warnhill Tool & Fasteners is a small UK-based supplier specializing in fasteners, fixings, screws, and tools, primarily serving businesses and consumers in Cheshire. The company has established itself over 15 years with competitive pricing and partnerships with major brands, positioning itself as a reliable regional supplier. The website reflects a professional business presence with clear contact information and product offerings. Technically, the site is built on WordPress using common plugins and frameworks such as Bootstrap and Yoast SEO, with moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA v3, but lack advanced security headers and DNSSEC, indicating room for improvement in security posture. Privacy compliance is basic with a cookie consent banner and privacy policy, but no terms of service or incident response policies are published. Overall, the website is functional and trustworthy but would benefit from enhanced security practices and compliance documentation.

E

Eagle Engineering (Telford) Ltd

platingbarrels.com

60

Eagle Engineering (Telford) Ltd is a UK-based specialist manufacturer and supplier of high-quality electro-plating barrels, plating barrel units, and related equipment. With over 20 years of industry experience, the company serves a global industrial electroplating market, emphasizing innovative design and durable materials. Their business model focuses on B2B manufacturing and equipment supply, supported by ISO 9001 certification and positive customer testimonials. The website reflects a professional and consistent brand presence, targeting industrial clients worldwide. Technically, the website is built on WordPress using the Divi theme, incorporating common plugins such as Contact Form 7, Formidable Forms, and Google Analytics for tracking. The site is moderately performant, mobile-optimized, and SEO-friendly with structured data and meta tags. Security measures include HTTPS enforcement, Google reCAPTCHA on forms, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance the posture. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR consent, and secure data collection forms. The WHOIS data confirms domain legitimacy with consistent registration details and appropriate domain age matching the business history. Overall, the website presents a trustworthy, professional, and compliant digital presence for Eagle Engineering, with recommendations to strengthen security headers and incident response transparency to further improve risk management.

M

Mulberry Waste

mulberrywaste.co.uk

42

Mulberry Waste is a UK-based company specializing in hazardous and non-hazardous waste management services, including collection, treatment, recycling, and disposal. The company positions itself as a market leader with a strong commitment to sustainability and advanced technological capabilities. Their website is professionally designed using WordPress and associated plugins, providing clear service descriptions and contact information. Technically, the site is well-implemented with HTTPS and modern web technologies, though some security headers and policies are missing. The WHOIS data is incomplete and indicates domain registration issues, which raises some trust concerns despite the professional web presence. Overall, the website presents a credible business with room for improvement in privacy compliance and security transparency.

S

Steinfeld Law LLP

steinfeldlaw.co.uk

49

Steinfeld Law LLP is a boutique law firm based in London specializing in corporate, finance, commercial, employment, and property law. The firm positions itself as combining expert commercial legal advice with the flexibility of a boutique practice, targeting corporate clients and professionals. The website is professionally designed using WordPress with SEO optimization and analytics integration, reflecting a moderate to high level of digital maturity. Security posture is good with HTTPS and reCAPTCHA implemented, though security headers and cookie consent mechanisms are absent, representing areas for improvement. The WHOIS data is unavailable due to an invalid query format, which slightly reduces trust but the website content and contact information strongly indicate legitimacy. Overall, the site presents a professional and trustworthy online presence for a small legal services provider in the UK.

D

Dask Timber Products Ltd

dasktimber.co.uk

50

Dask Timber Products Ltd is a small, family-run manufacturing business specializing in high-quality timber joinery products serving the UK, Northern Ireland, and Ireland markets. With a claimed 40 years of experience, the company offers a diverse product range including conservation, contemporary, renovation timber products, staircases, conservatories, and secondary glazing. The website reflects a professional and consistent brand presence with clear contact information and social media integration. Technically, the website is built on WordPress using the Divi theme, incorporating common plugins such as Yoast SEO and Contact Form 7. It uses Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and explicit privacy or cookie policies. No vulnerability disclosure or incident response information is provided. The WHOIS data is unavailable and indicates domain registration issues, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is functional and professional but would benefit from enhanced security practices, clear privacy compliance documentation, and verification of domain registration details to improve trustworthiness and compliance.

S

SureScaff Limited

surescaff.co.uk

34

SureScaff Limited is a small family-owned business specializing in providing safe access scaffolding and working platforms primarily serving North Wales and the North West of England. The company targets local builders, roofers, decorators, construction companies, and local authorities, positioning itself as a leading supplier in its regional market. The website reflects a professional service provider with clear contact details and a focus on safety and reliability in scaffolding services. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Contact Form 7, with a moderate performance profile and good mobile optimization. The hosting is provided by Heart Internet Limited, a reputable registrar and hosting provider. The site uses HTTPS but lacks advanced security headers and privacy compliance features, indicating room for improvement in security and regulatory adherence. From a security perspective, the site has basic protections with no visible vulnerabilities or WAF blocking. However, the absence of privacy and cookie policies and missing security headers reduce its compliance posture. There is no evidence of incident response or vulnerability disclosure mechanisms. Overall, the security posture is moderate but could be enhanced with standard best practices. The overall risk assessment is moderate with a recommendation to implement privacy and cookie policies, improve security headers, and establish incident response contacts. These steps will enhance trust, compliance, and security maturity, supporting the company’s professional image and business continuity.

P

Petrolab Limited

petrolab.co.uk

41

Petrolab Limited is a specialized UK-based laboratory offering mineralogical and petrographic analysis services primarily to the mining, construction, and real estate sectors. Their expertise includes automated mineralogy, optical microscopy, sample preparation, and screening tests such as Mundic and IS465. The company has a niche market position with a strong regional presence and a history dating back to 1991. The website is built on WordPress with WooCommerce and the Divi theme, reflecting a moderate level of digital maturity with good content quality and user experience. Security posture is adequate with HTTPS enforced and use of security plugins, but lacks some advanced security headers and formal security policies. Privacy compliance is basic, with no visible cookie consent or GDPR-specific disclosures. Overall, the website is professional and trustworthy, though the absence of WHOIS data due to domain registration issues introduces some uncertainty about domain legitimacy.

P

Preferred Plastics & Packaging Co.

prefplastics.com

44

Preferred Plastics & Packaging Co. is a large wholesale distributor of product packaging supplies in the United States, offering over 700 products across 65 product lines including stretch film, tape, palletizing, packaging equipment, and janitorial supplies. The company positions itself as a leading supplier with a strong market presence and a history dating back to 1983. Their website reflects a professional and consistent brand image targeting businesses in need of packaging solutions. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Tag Manager and reCAPTCHA for form security. The site is mobile-optimized and accessible with good navigation and content quality. Security posture is solid with HTTPS and spam protection, though lacking some advanced security headers and explicit security policies. WHOIS data is missing or unavailable, which slightly reduces trust but does not negate the professional appearance and business legitimacy. Overall, the website is safe, business-focused, and well-maintained.