High-risk security reports
36,503 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,451–2,500 of 36,503
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- MMonogram
monogram.co.uk
Retail · United Kingdom
42High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Monogram is a UK-based specialist in personalised teamwear, sportswear, workwear, and promotional items with over 20 years of experience. The company targets sports teams, businesses, and organizations seeking customised clothing and promotional goods. Their website features an interactive Teamwear Builder, indicating a customer-centric approach to product customization. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies such as jQuery, Google Fonts, and push notification services like WonderPush. SEO is enhanced with Yoast SEO plugin, and the site is served over HTTPS, ensuring secure communications. However, the absence of visible privacy and cookie policies, security headers, and WHOIS data for the queried subdomain limits the completeness of the security and compliance assessment. Overall, the website presents a professional and trustworthy front but would benefit from enhanced transparency and security best practices.
- WWordPress › Error
dynamicarc.co.uk
Other · United Kingdom
49High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at dynamicarc.co.uk is currently non-functional, displaying a critical WordPress error page. This indicates a misconfiguration or failure in the website's backend, preventing access to any meaningful content or business information. The domain is registered with JustHostMe Ltd since 1999, suggesting a long-standing registration, but the current site status severely limits its digital presence and user engagement. No privacy, cookie, or terms of service policies are present, and no contact information is available, which further diminishes the site's credibility and compliance posture. Technically, the site is built on WordPress, hosted by JustHostMe Ltd, but lacks visible security headers, SSL configuration details, or modern performance and accessibility features. The absence of analytics, advertising, or tracking scripts suggests minimal digital marketing or user tracking activity. The site is not blocked by any WAF or security challenge but is inaccessible in terms of content due to the critical error. From a security perspective, the critical error page is a significant vulnerability as it exposes the site as non-operational and potentially susceptible to further attacks or data loss. The lack of security policies, incident response contacts, and privacy compliance mechanisms indicates a low maturity level in security and compliance. The domain registration is consistent and legitimate, but the website's current state undermines trust and business credibility. Overall, the website scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Immediate remediation is required to restore website functionality, implement security best practices, and establish compliance policies to improve trust and user experience.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.technofilm.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The WHOIS lookup for the domain failed due to a registry error indicating the domain name contains too many parts and cannot be registered, suggesting the domain is invalid or misconfigured. No business, contact, privacy, or security policy information is available on the site. The technical infrastructure appears minimal with no detectable scripts, analytics, or external links. Overall, the site lacks digital maturity and is not currently usable for business or customer engagement.
Turbo Vacuumentation Limitedturbo-vac.co.uk
Manufacturing · United Kingdom
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Turbo Vacuumentation Limited is a UK-based company specializing in the manufacture, supply, and installation of vacuum lifting and handling equipment. They serve industrial and manufacturing sectors with a broad range of products including vacuum gripping systems, crane systems, manual handling equipment, bespoke vacuum lifting solutions, and vacuum components. The company is a trusted UK distributor for J. Schmalz GmbH, emphasizing technical expertise and customer support. Their market position is that of a niche, specialized provider with a longstanding presence since at least 1996. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Email Subscribers Lite, with frontend technologies including jQuery and Bootstrap 3. The site is moderately performant, mobile-optimized, and SEO-friendly. Security measures include HTTPS enforcement and reCAPTCHA on forms, but lack advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security hardening. The security posture is generally good with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent may pose compliance risks, especially under GDPR. The WHOIS lookup for the domain 'www.turbo-vac.co.uk' failed due to domain naming rules, but the website is accessible and professional, suggesting the actual domain is 'turbo-vac.co.uk'. Overall, the website presents a credible and professional business front with solid technical foundations but would benefit from enhanced security headers, privacy compliance improvements, and clearer incident response policies to strengthen trust and regulatory adherence.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- EEBL Group
eblgroup.co.uk
Real Estate · United Kingdom
42High
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
EBL Group is a UK-based construction and property development company with over 30 years of experience, specializing in roofing, construction, insurance repairs, and residential development. The company serves commercial and residential clients primarily in the North West of England but also operates nationally for blue-chip clients. Their website reflects a professional business with clear service offerings, multiple industry certifications, and a focus on health and safety. Technically, the website uses CMS Made Simple with common web technologies such as jQuery and Google Analytics, but some components like jQuery are outdated, posing potential security risks. The site includes a cookie consent mechanism and a basic data protection policy, indicating some privacy compliance. Security posture is moderate with no visible security headers and no public incident response or security policies. WHOIS data for the domain 'www.eblgroup.co.uk' is unavailable due to domain naming rules, but the website is accessible and legitimate. Overall, the site is professional and trustworthy but could improve technical and security aspects.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.sportstoursinternational.co.uk is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or forbidden. The domain WHOIS lookup failed with an error stating that the domain cannot be registered due to contravention of Nominet UK's naming rules, specifically that the domain name contains too many parts. This suggests the domain is either invalid or improperly registered, severely limiting the ability to analyze the website's business or technical details. The website content is minimal, consisting solely of an error page with no business information, contact details, or policies. Technically, the site uses basic HTML and CSS with Google Fonts but lacks any modern frameworks, analytics, or security headers. Overall, the digital maturity is very low, and the site is effectively non-functional.
- HHobden Group – A UK property group
hobden-group.co.uk
—
48High
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
- CComputer Business Forms Ltd
computerbusinessforms.co.uk
Retail · United Kingdom
37High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Computer Business Forms Ltd is a UK-based small business specializing in supplying printing services, labelling supplies, office supplies, and betting supplies primarily targeting professional and business customers. Established in 2000, the company positions itself as a total office solution provider with a focus on cost-effective and comprehensive product offerings. The website reflects a consistent brand image and provides clear contact information, supporting its credibility in the regional market. Technically, the website is built on the ASP.NET WebForms framework using the DNN CMS platform, incorporating common web technologies such as jQuery and FontAwesome. While the site is functional and moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. The presence of Google Analytics and DoubleClick scripts indicates moderate user tracking without a visible cookie consent mechanism. From a security perspective, the site uses HTTPS but lacks visible security headers such as Content-Security-Policy or HSTS, which are recommended to enhance protection. No incident response or security policy information is publicly available, and GDPR compliance indicators are minimal. The WHOIS data shows a long-established domain with consistent registration details, supporting the legitimacy of the business. Overall, the website is professional and trustworthy but would benefit from enhanced security practices, privacy compliance improvements, and better mobile and accessibility optimization to strengthen its digital maturity and user trust.
KM Grantkmgrant.co.uk
Real Estate · United Kingdom
42High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
KM Grant is a well-established bespoke home building and refurbishment company based in Surrey, UK, with a claimed 40 years of experience. The company specializes in constructing and remodeling private residences, working closely with architects and designers to deliver high-quality bespoke homes primarily in the Guildford and Surrey region. The website reflects a professional and consistent brand image with clear messaging targeting private homeowners seeking bespoke residential construction services. Technically, the website employs a traditional tech stack including jQuery and related plugins, with Typekit fonts for typography. The site is accessible, uses HTTPS, and has good SEO metadata, but lacks modern security headers and privacy policies. The Google Analytics script is present but commented out, indicating a cautious or incomplete approach to user tracking. Mobile optimization and accessibility are basic but functional. From a security perspective, the site shows moderate maturity with HTTPS enabled and no visible vulnerabilities in the provided content. However, the absence of security headers, privacy and cookie policies, and contact information for incident response reduces the overall security posture. The WHOIS lookup failed due to querying an invalid domain variant ('www.kmgrant.co.uk'), but the website itself is legitimate and active, suggesting the actual domain is 'kmgrant.co.uk'. Overall, KM Grant's website is professional and trustworthy for its business domain but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.
Hellens Grouphellens.co.uk
Real Estate · United Kingdom
45High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Hellens Group is a well-established UK-based real estate development company specializing in residential, commercial, and retail environmental regeneration primarily in the North East, Tees Valley, and Yorkshire regions. Founded in 1973, the company has a strong market position with recognized projects such as Burtree Garden Village and a portfolio that includes affordable housing, land, and property management. Their business model integrates land acquisition, planning, construction, and property management, targeting regional developers, investors, and community stakeholders. Technically, the website is built on WordPress with a moderate tech stack including jQuery, Google reCAPTCHA, and Yoast SEO. The site is mobile-optimized with good SEO practices and moderate performance. However, the use of an outdated jQuery version presents a security risk. The site employs HTTPS and integrates Google Analytics and Tag Manager for tracking, though cookie consent mechanisms are absent. From a security perspective, the site benefits from HTTPS and spam protection via reCAPTCHA but lacks advanced security headers and explicit security or incident response policies. No critical vulnerabilities were detected, but updating libraries and enhancing security policies would improve posture. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, the website is professional, trustworthy, and content-rich, supporting the company's credibility and business goals. Strategic improvements in security and privacy compliance would further strengthen the site’s risk profile and user trust.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.davecasey.co.uk is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed due to the domain name violating Nominet UK naming rules, indicating the domain is either invalid or not properly registered. Consequently, no business, contact, or security information is available from the site. The lack of metadata, structured data, or any external links further limits the ability to assess the business or technical infrastructure. Security posture is poor due to absence of HTTPS confirmation, security headers, or privacy policies. Overall, the site appears non-operational or misconfigured, posing a high risk for trust and legitimacy.
Other
44High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.digitalorchardit.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any business or service information. The domain WHOIS data is unavailable and indicates that the domain name is invalid under Nominet UK rules, suggesting it is either misconfigured or not legitimately registered. Due to the lack of accessible content, no metadata, contact information, or business details can be extracted. The technical infrastructure appears minimal with no detectable technologies or security headers. The security posture is weak as no SSL or security best practices are evident. Overall, the site presents a high risk of being non-operational or fraudulent. Strategic recommendations include resolving domain registration issues, enabling HTTPS, and publishing clear business and privacy information.
Other
42High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website learnd.co.uk is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content or business information. The WHOIS data is also unavailable due to query quota limits, preventing verification of domain registration details. As a result, no metadata, contact information, privacy policies, or business descriptions are present. The site appears to be protected by access controls or firewall rules restricting public access. Technically, the site loads minimal external resources limited to font styles, with no analytics or tracking scripts detected. Security posture cannot be assessed due to lack of accessible headers or SSL information. Overall, the site is not currently usable for analysis or business intelligence purposes.
Other
40High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.expatmatters.co.uk is currently inaccessible, returning a 403 Forbidden error page with no accessible content. The domain WHOIS lookup failed with an error indicating the domain cannot be registered due to naming rules violation, suggesting the domain is invalid or unregistered. No business information, contact details, or policies are available on the site. Technically, the site lacks any detectable technologies, scripts, or metadata, and no security headers or HTTPS information is present. The security posture is poor due to lack of accessibility and absence of security best practices. Overall, the site appears non-operational or misconfigured, resulting in a very low trust and credibility score.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- GGeneral Demolition
general-demolition.co.uk
Real Estate · United Kingdom
48High
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
General Demolition is a UK-based company specializing in demolition, strip out, and structural alterations with a strong focus on sustainability and health and safety. The company has over 40 years of experience delivering complex enabling works projects primarily in London, positioning itself as a reputable and established player in the construction and real estate sectors. The website reflects this with professional design, clear branding, and a portfolio of landmark projects. Technically, the site is built on WordPress using Elementor and integrates modern web technologies such as Bootstrap, Swiper.js, and Google Tag Manager. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS enabled and use of reCAPTCHA, but could be improved by adding explicit security headers and vulnerability disclosure information. Overall, the site is trustworthy and professional but should address privacy compliance gaps and enhance contact information visibility.
- BBody Conditioning Studio
bodyconditioning.net
Other
36High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Body Conditioning Studio is a small local business focused on health improvement and wellbeing through Pilates and relaxation classes, primarily serving the Gamlingay and Sandy areas. The website presents basic information about their services and encourages visitors to connect via Facebook for more details. The business model is service-oriented, targeting a general audience interested in fitness and wellness. Technically, the website is built on WordPress using the Divi theme, with standard web technologies such as jQuery and Google Fonts. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is minimal with no detected security headers or policies, and the site lacks privacy and cookie policies, which impacts compliance and user trust. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional but requires improvements in security, privacy compliance, and business transparency to enhance credibility and user confidence.
Other
45High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.k2b.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is invalid, indicating the domain is not properly registered or is in violation of registry rules. Due to the lack of accessible content, no business information, contact details, or compliance policies are available for analysis. The technical infrastructure cannot be assessed beyond the presence of basic fonts and minimal HTML structure. Security posture is unknown due to lack of accessible headers or HTTPS information. Overall, the site is effectively blocked and cannot be evaluated for business credibility or security maturity.
- DDebach - Warehousing & Distribution
debach.com
—
45High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- CCustom Profiles Ltd
custom-profiles.com
Manufacturing · United Kingdom
43High
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Custom Profiles Ltd is a UK-based leading independent supplier and stockholder of aluminium extrusions, serving manufacturing industries since 2005. They offer a comprehensive range of services including supply, fabrication, finishing, and stockholding of aluminium profiles, targeting customers across the UK, Europe, and worldwide. The website is professionally designed, well-structured, and optimized for SEO, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and Contact Form 7, and integrates Google Analytics and Google reCAPTCHA for analytics and security. Security posture is strong with HTTPS enforced and use of CAPTCHA, but lacks some security headers and explicit incident response or security policy disclosures. WHOIS data is missing, raising concerns about domain registration legitimacy, which impacts overall trust. Contact information and social media presence are comprehensive, supporting business credibility. Overall, the website is functional, secure, and business-focused but would benefit from improved privacy compliance and domain registration transparency.
Realinvest Ltd / Realitaliarealinvest.co.uk
Real Estate · United Kingdom
41High
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Realinvest Ltd / Realitalia operates as a specialized real estate consulting firm focusing on large-scale property development opportunities, particularly second homes and hotels, in the geographic corridor from Portofino to Saint Tropez. With over 25 years of experience, the company offers services ranging from feasibility studies, planning, acquisitions, conceptualization, to sales strategy. Their business model includes initial consulting and management fees plus performance-based fees, targeting multi-family offices, private family offices, and building companies. The website reflects a professional and consistent brand presence with clear contact information and a London-based physical address. Technically, the website is built on WordPress using the Divi theme, incorporating jQuery and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced, though lacking some security headers and formal privacy/cookie policies. No WAF or blocking mechanisms were detected, and the site content is fully accessible. A notable concern is the domain WHOIS data, which is unavailable due to a registration error indicating the domain name contravenes Nominet UK naming rules. This inconsistency lowers trustworthiness but does not negate the professional presentation and contact transparency of the business. Overall, the site scores well in business credibility and technical implementation but should improve privacy compliance and clarify domain registration status. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing a vulnerability disclosure policy, and resolving domain registration inconsistencies to enhance trust and compliance.
Other
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.custompharma.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any business or content information. The domain WHOIS lookup failed with an error indicating the domain name is invalid per Nominet UK registry rules, suggesting the domain is either misconfigured or not legitimately registered. No metadata, contact details, or business information is available from the site. Technically, the site lacks security headers, privacy policies, or any visible compliance indicators. This severely limits the ability to assess the company's market position, services, or security posture. Overall, the site appears non-operational or improperly configured, representing a high risk for trust and credibility.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- WWater Gardening Direct Ltd
watergardening-direct.co.uk
Retail · United Kingdom
47High
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Water Gardening Direct Ltd operates as a UK-based retailer specializing in water gardening products including pond supplies, water features, aquarium products, and spare parts. The website content provided is minimal and primarily serves as a redirect or placeholder page pointing users to the main site watergardeningdirect.com. The business targets gardening enthusiasts and pond owners within the UK market. The company appears to be a small-sized retail entity with a physical presence in Peterborough, UK. From a technical perspective, the website content is basic with no detected modern technologies, CMS, or analytics tools. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present. The domain www.watergardening-direct.co.uk is not registered or invalid per WHOIS data, which raises concerns about the legitimacy of this specific domain, though the main business likely operates under the .com domain. Security posture is weak due to lack of HTTPS, absence of security headers, and no visible incident response or vulnerability disclosure information. The website does not collect data via forms and has minimal tracking, reducing privacy risks but also indicating low digital maturity. Overall, the risk is moderate due to domain registration issues and lack of security best practices. Strategic recommendations include securing the domain properly, implementing HTTPS, adding privacy and cookie policies to comply with GDPR, improving SEO and accessibility, and publishing security and incident response information to enhance trust and compliance.
Libra Construction Services Ltdlibraconstruction.co.uk
Real Estate · United Kingdom
40High
NIS2 14 · GDPR 35
NIS2 14 · GDPR 35
Libra Construction Services Ltd is a well-established construction company based in Kent, UK, with over 40 years of experience providing a wide range of residential and commercial building services. Their offerings include major refurbishment works, insurance reinstatement, planned maintenance, emergency services, and construction for education and public buildings. The company positions itself as a reliable and proficient service provider with recognized industry accreditations and a strong community presence. Technically, the website is built on WordPress using Elementor and incorporates modern web technologies such as Bootstrap, jQuery, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and includes interactive elements like Instagram feeds and contact forms secured with Google reCAPTCHA v3. However, some accessibility features and security headers could be enhanced. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms, but lacks explicit security headers and comprehensive privacy and cookie policies, which are important for GDPR compliance. The WHOIS data for the domain is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional appearance and content of the website. Overall, the website presents a professional and trustworthy front for Libra Construction, but the domain registration issues and missing compliance policies suggest areas for improvement to strengthen trust and security posture.
Other
45High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.servicelinemanagement.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content or metadata. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or otherwise inactive. Due to the lack of content, no business information, contact details, or policies are available for analysis. The technical infrastructure appears minimal or non-existent, with no evidence of HTTPS or security headers. This results in a very low trust and security posture assessment. The site is effectively blocked or misconfigured, preventing any meaningful user or security interaction.
- BBirkdale Plastics Limited
birkdaleplastics.com
Manufacturing · United Kingdom
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Birkdale Plastics Limited is a small UK-based manufacturing company specializing in plastic products such as rigid profiles, PVC tubes, flexible PVC, bended tubes, welded seals, and tooling. Founded in 2021, the company provides advisory services guiding customers through tooling design and product suitability. The website is professionally designed using WordPress and the Divi theme, with moderate performance and good mobile optimization. Contact information is clearly presented, enhancing business credibility. However, the site lacks privacy, cookie, and terms of service policies, which are important for compliance and trust. Security posture is adequate with HTTPS enabled but lacks security headers and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and no suspicious domains or external partners were found. Overall, the website is functional and trustworthy but would benefit from enhanced privacy and security practices.
Conundrum Consulting Ltdconundrum.co.uk
Other · United Kingdom
47High
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Conundrum Consulting Ltd is a UK-based HR consultancy specializing in tailored human resources support, executive search, people development, and strategic business consulting. The company positions itself as a personalized service provider focused on understanding unique business needs to help both people and businesses flourish. The website reflects a professional and consistent brand image targeting businesses seeking expert HR and people management services. Technically, the website is built on WordPress and employs modern web technologies including jQuery, Google Tag Manager, and Google Analytics for tracking. The site is mobile-optimized with good navigation and performance, though accessibility features could be enhanced. Security is well-handled with HTTPS enforced and cookie consent mechanisms in place, but lacks some advanced security headers and published security policies. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a security policy, incident response contacts, and vulnerability disclosure reduces transparency. The WHOIS data for the domain www.conundrum.co.uk is unavailable due to domain naming rules violation, indicating the domain may be a subdomain or alias rather than a registered domain, which slightly impacts trustworthiness from a domain registration perspective. Overall, the website is professional, secure, and compliant with privacy regulations, serving its business audience effectively. Strategic improvements in security transparency and accessibility would further enhance trust and compliance.
Other
48High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.abbeyglassuk.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. The absence of WHOIS registration data further complicates trust and legitimacy assessments. No metadata, structured data, or business information is available, indicating either a non-operational site or a site under strict access control. The technical infrastructure appears minimal with no detectable scripts, frameworks, or security headers. This severely limits the ability to evaluate the company's digital maturity or security posture. Overall, the site presents a high risk due to lack of transparency and accessibility.
Trenton Constructiontrentonconstruction.co.uk
Real Estate · United Kingdom
48High
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Trenton Construction is a UK-based small business specializing in full design and build construction services, collaborating with local architectural practices. The website is built on WordPress using Elementor and incorporates anti-spam measures via CleanTalk. The site is accessible without any WAF or blocking mechanisms, indicating good availability. However, the absence of privacy and terms of service policies and the lack of visible contact information reduce the overall compliance and trustworthiness. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and formal security policies. Overall, the website presents a professional front but would benefit from enhanced compliance and security transparency.
Bromwall Ltdbromwall.co.uk
Finance · United Kingdom
43High
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
Bromwall Ltd is a specialist commercial insurance brokerage based in the United Kingdom, offering tailored insurance solutions for commercial, business, and industrial clients. With over 50 years of expertise, the company positions itself as a trusted partner providing bespoke coverage across multiple insurance sectors including goods in transit, liability, financial, property, business, and motor fleet insurance. The website reflects a professional and consistent brand image, targeting businesses seeking comprehensive insurance protection. Technically, the site is built on WordPress with modern frameworks such as UIkit and integrates SEO and user engagement tools like Yoast SEO and Chaty plugin. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks explicit security headers and formal security policies on the site. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Quaife Engineeringquaife.co.uk
Transportation · United Kingdom
48High
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Quaife Engineering Ltd is a well-established British manufacturer specializing in automotive drivetrain products, including performance transmissions, gearkits, and differentials. The company targets motorsport professionals, OEMs, and classic car enthusiasts, positioning itself as a reputable player in the transportation and manufacturing sectors. Their business model focuses on manufacturing and direct sales, supported by technical and customer service offerings such as warranty registration and technical support. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO optimization via Yoast SEO Premium. It integrates essential marketing and analytics tools such as Google Analytics and Facebook Pixel, and employs security measures like HTTPS and Google reCAPTCHA for form protection. The site demonstrates good mobile optimization and accessibility, though some security headers could be enhanced. From a security perspective, the site maintains a strong posture with encrypted connections and secure form handling. However, it lacks publicly available security policies and incident response information, which could be improved to enhance trust and compliance. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, offering a positive user experience and clear business credibility. The WHOIS lookup failure is due to querying a non-registrable subdomain rather than the main domain, and does not detract from the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts.
Bibby Engineers LTDbibbyengineers.co.uk
Manufacturing · United Kingdom
46High
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Bibby Engineers LTD is a well-established manufacturing company specializing in plastic injection moulding and precision engineering services. With over 75 years of history and a strong presence in Cornwall, UK, the company offers a comprehensive range of services including tool making, secondary operations, product design, and recycling initiatives. Their market position is that of a quality-focused, customer-centric manufacturer serving diverse production volumes from prototypes to mass production. The website reflects a professional and consistent brand image with clear service offerings and a focus on reshoring and sustainability. Technically, the website is built on WordPress with WooCommerce, leveraging modern plugins and integrations such as PayPal for payments and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced, secure forms, and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with visible cookie consent and privacy policies aligned with GDPR. Overall, the website presents a credible and trustworthy digital presence for the business.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- SSeaProducks, Inc.
seaproducks.com
Other · United States
49High
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
SeaProducks, Inc. is a specialized wholesale supplier of geoduck clams based in Tacoma, Washington, serving customers in the USA and Canada. The company offers both aquaculture and wild geoduck clams, sourcing from local growers and tribal harvests. Their market position is niche, focusing on quality seafood products for wholesale buyers. The website is built on WordPress and hosted likely via GoDaddy, featuring a professional but basic design with clear contact information. Technical infrastructure is moderate with room for improvement in mobile optimization and SEO. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.
Irr Supply Centers, Inc.irrsupply.com
Manufacturing · United States
49High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Irr Supply Centers, Inc. is a well-established wholesale distributor specializing in plumbing, heating, cooling, refrigeration, and electrical equipment and supplies. With a strong market presence in Western New York and Pennsylvania, the company serves contractors and businesses with multiple physical locations and a comprehensive product offering. The website reflects a professional business model focused on B2B distribution, supported by online ordering and customer loyalty programs. The company emphasizes service guarantees and customer satisfaction, reinforcing its market position as a leading distributor in its sectors. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Maps API for location services, and Google reCAPTCHA for form security. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. The infrastructure is supported by Network Solutions as the registrar, with HTTPS enabled but lacking advanced DNS security features like DNSSEC. From a security perspective, the site demonstrates basic security hygiene with HTTPS and reCAPTCHA on forms but lacks published privacy, cookie, or security policies. No security headers were detected, and DNSSEC is not enabled, which presents opportunities for improvement. The absence of vulnerability disclosure or incident response information indicates a gap in transparency and readiness. Overall, the security posture is moderate but could be enhanced to meet higher compliance and trust standards. The overall risk assessment suggests a legitimate and trustworthy business with a solid online presence but with room to improve privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response contacts to enhance trust and compliance.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
- Wwww.al-consulting.co.uk
al-consulting.co.uk
Other
41High
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.al-consulting.co.uk currently displays only a minimal placeholder message indicating it is under construction, with no additional content, metadata, or contact information. The domain WHOIS lookup failed due to a naming rules violation, suggesting the domain is invalid or improperly registered. This severely limits the ability to assess the business or technical maturity of the site. Technically, the site lacks HTTPS, security headers, and any detectable technologies or CMS, indicating a very low digital maturity level. Security posture is weak due to absence of SSL and security best practices. Overall, the site presents a high risk due to lack of content, invalid domain status, and no visible security or compliance measures.
—
35Partial
DNS & email only
DNS & email only
TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.
Linda Johnson Interiorslindajohnsoninteriors.co.uk
Other · United Kingdom
43High
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Linda Johnson Interiors is a small, family-run bespoke interior design business established in 1987, specializing in made-to-measure curtains, blinds, roman blinds, and soft furnishings primarily serving Derby and surrounding areas. The company emphasizes personalized service, quality workmanship, and customer satisfaction, supported by a strong local reputation and testimonials. The website is built on WordPress using the Divi theme and incorporates SEO best practices via Yoast SEO, with integration of social media and WhatsApp for customer engagement. Technically, the site is moderately performant and mobile-optimized but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks formal security policies, incident response contacts, and security headers such as Content-Security-Policy. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable compliance gap. Overall, the business is credible and trustworthy with a well-presented online presence but should improve privacy and security disclosures to enhance compliance and user trust.
- SSalop Towing Ltd
saloptowing.co.uk
Transportation · United Kingdom
48High
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Salop Towing Ltd is a small, family-run business established in 2002, specializing in the supply and installation of towbars, towing electrics, and vehicle accessories primarily serving the motor trade and the general public in Shrewsbury, UK. The company holds recognized certifications such as NTTA Quality Secured Towbar Centre and Thatcham Certified Installer, positioning it as a trusted local service provider with a strong reputation and customer guarantees. The website reflects a professional and consistent brand image with clear service offerings and customer-focused features such as disabled access and free parking. Technically, the website employs a traditional tech stack including jQuery 1.11.3, Bootstrap, Font Awesome, and Google Analytics. The site is mobile responsive with good navigation and content quality, although some modernization opportunities exist, such as updating JavaScript libraries and enhancing accessibility. The absence of structured data and limited SEO optimization suggests room for improvement in digital maturity. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit cookie consent mechanisms, which are important for compliance and protection. No forms or sensitive data collection points were detected, reducing immediate risk exposure. The WHOIS lookup for the domain 'www.saloptowing.co.uk' failed due to an invalid domain name format, but the website is accessible, indicating the actual domain is likely 'saloptowing.co.uk'. This discrepancy slightly impacts trust but does not indicate malicious activity. Overall, the website is safe, professional, and trustworthy with moderate technical and security posture. Strategic improvements in security headers, privacy compliance, and technical modernization would enhance the site's resilience and compliance standing.