Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,951–3,000 of 99,069
Edinburgh Sciencesciencefestival.co.uk
Education · United Kingdom
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Edinburgh Science is a well-established educational charity founded in 1989, dedicated to delivering the annual Edinburgh Science Festival along with schools and community engagement programs. The organization positions itself as a leader in science education and public engagement within the UK, targeting a broad audience including schools, families, and community groups. Their business model is non-profit, focusing on educational outreach and charitable activities. The website reflects a professional and consistent brand image, with comprehensive content and clear navigation tailored to their audience. Technically, the website is built on WordPress 7.0.1, utilizing modern web technologies such as jQuery, Gravity Forms, Google Tag Manager, and various analytics and tracking tools including Google Analytics, Facebook Pixel, Hotjar, and Microsoft Clarity. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Cookie consent and privacy compliance are well implemented, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms to mitigate spam. While explicit security headers are not clearly detected, the site follows good practices by avoiding exposed sensitive data and using consent management tools. No vulnerabilities or malicious indicators were found. The lack of WHOIS data is due to a domain query error and does not reflect on the legitimacy of the organization, which is supported by consistent branding and external trust signals. Overall, Edinburgh Science presents a low-risk profile with strong business credibility and a good security posture. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and improving incident response transparency to further strengthen trust and compliance.
Handsel Presshandselpress.org.uk
Other · United Kingdom
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Handsel Press is a small, established not-for-profit publishing company based in the United Kingdom, specializing in Christian academic and popular books, poetry, and related literature. Founded in 1976 and owned by the Handsel Trust, it operates a professional WordPress-based e-commerce website to market and sell its publications. The company targets readers interested in theology, history, and the arts, emphasizing interdisciplinary dialogue and the Scottish democratic intellect tradition. The website features a clean design, clear navigation, and a moderate level of mobile optimization, supporting a positive user experience. Technically, the website leverages WordPress with WooCommerce and Elementor, integrating Google reCAPTCHA v3 for form security and Google Tag Manager for analytics. While the site uses HTTPS with excellent SSL configuration, it lacks explicit security headers and privacy/cookie policies, which are important for compliance and security best practices. Contact information is primarily available through a contact form, with no direct emails or phone numbers published. Social media presence is limited to Facebook. From a security perspective, the site demonstrates basic good practices such as HTTPS and spam protection but could improve by implementing security headers and publishing privacy and cookie policies to enhance GDPR compliance. The domain registration data is consistent with the business history, showing a long-standing and legitimate presence. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security measures to reduce compliance risks and improve user trust.
Daniel Cobb Estate Agents Ltddanielcobb.co.uk
Real Estate · United Kingdom
72Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Daniel Cobb Estate Agents Ltd is a well-established independent real estate agency founded in 1994, specializing in property sales, lettings, and management across central London. The company emphasizes family values such as honesty, support, and trust, and operates multiple offices in key London areas including Kennington, Westminster, and London Bridge. Their service portfolio includes property sales, lettings, property management, valuations, land and developments, and in-house maintenance, positioning them as a leading independent agency in the London property market. Technically, the website is built on Joomla CMS and integrates modern web technologies including Google Analytics, Facebook Pixel, Google Maps API, and Google reCAPTCHA for security. The site is mobile-optimized with good SEO practices and includes cookie consent mechanisms compliant with GDPR. The presence of multiple social media channels and tracking tools indicates a mature digital marketing strategy. From a security perspective, the website enforces HTTPS and uses reCAPTCHA on forms to mitigate spam and abuse. However, some security headers like Content-Security-Policy and X-Frame-Options are not detected, which could be improved to enhance security posture. No vulnerabilities or exposed sensitive data were found in the HTML content. The cookie consent and privacy policies are comprehensive and GDPR compliant. A notable concern is the WHOIS data failure for the domain www.danielcobb.co.uk, which the registry indicates as invalid due to naming rules. This discrepancy suggests possible domain misconfiguration or use of a subdomain, which impacts domain registration trustworthiness. Despite this, the website content, certifications, and social presence strongly support the legitimacy of the business. Overall, the website presents a professional, trustworthy, and user-friendly platform for real estate services in London, with minor technical and security improvements recommended to further st…
- SSecurity Verification
farrellco.co.uk
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.farrellco.co.uk currently serves a security verification page protected by Google reCAPTCHA v3 invisible challenge, indicating the presence of a Web Application Firewall or bot protection mechanism. The actual business content is inaccessible without passing this verification, limiting the ability to analyze the company's services, market position, or contact details. The WHOIS lookup for the domain failed with an error indicating the domain name is invalid due to UK Nominet naming rules, suggesting a misconfiguration or incorrect domain usage. No registrant, registrar, or registration dates are available, which severely impacts trust and legitimacy assessments. Technically, the site uses Bootstrap 5.3.3 for styling and Google reCAPTCHA v3 for bot mitigation. No other frameworks, CMS, or hosting details are discernible. The page lacks visible security headers and privacy or cookie policies, and no contact information or business identifiers are present. This results in a low security posture and poor privacy compliance. Overall, the site is effectively blocked for normal users, and the lack of WHOIS data combined with the security challenge page suggests a high risk of misconfiguration or potential illegitimacy. Strategic recommendations include resolving domain registration issues, publishing clear privacy and cookie policies, adding contact and business information, and improving security headers and HTTPS configuration. Due to the blocking mechanisms and missing data, the overall risk assessment is high, and the site should be treated with caution until proper business and security transparency is established.
London Aeronslondonaerons.co.uk
Retail · United Kingdom
65Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
London Aerons is a niche e-commerce retailer specializing in premium Herman Miller Aeron office chairs targeted at office workers and home office users in London. The website presents a professional and consistent brand image with a focus on ergonomic office furniture, aiming to enhance comfort and productivity. The business appears to be a small-sized entity founded in 2012, with a clear market position in the retail sector for high-quality office chairs. Technically, the website is built on WordPress with WooCommerce, utilizing modern plugins such as WPBakery Page Builder and MonsterInsights for analytics. The site is hosted by Fasthosts Internet Ltd and employs HTTPS with strong SSL configuration, ensuring secure communications. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site demonstrates good practices including HTTPS enforcement, security headers, and a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and terms of service pages, which are recommended for enhanced trust and compliance. Overall, the website is trustworthy and professionally maintained with a solid security posture and privacy compliance. Strategic improvements in security documentation and contact transparency would further strengthen its risk profile and user confidence.
Gabb & Co Solicitorsgabb.co.uk
Real Estate · United Kingdom
68Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Gabb & Co Solicitors is a well-established UK law firm founded in 1760, specializing in a broad range of legal services including commercial and residential property, company and commercial law, probate, tax advice, trusts, and wills. The firm serves individuals, businesses, and the agricultural community across the UK, maintaining a reputation for high-quality, approachable legal advice. Their market position is strengthened by longstanding client relationships and regulatory compliance with the Solicitors Regulation Authority. Technically, the website is built on WordPress with modern technologies such as jQuery, Contact Form 7, and Cloudflare Turnstile captcha for security. The site demonstrates good performance, excellent mobile optimization, and solid SEO and accessibility practices. Privacy and cookie policies are comprehensive and GDPR compliant, with clear consent mechanisms. From a security perspective, the site enforces HTTPS, uses captchas on forms, and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts. The WHOIS data is unavailable due to a domain query error, but the website's professional presentation and regulatory information support its legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers and transparency around security policies would further enhance trust and compliance.
—
67Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Smart City Locating, LLCsmartcityapartments.com
Real Estate · United States
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Smart City Locating, LLC is a well-established apartment locating service founded in 2013, operating across nine major U.S. metro markets. The company offers free, personalized apartment search services through licensed local agents, complemented by moving concierge, utility setup, renters insurance, and internet setup services. Their market position is strong, supported by multiple industry awards and recognitions, indicating a reputable and trusted brand in the real estate sector. The website is professionally designed using WordPress and optimized with NitroPack, ensuring fast performance and excellent mobile responsiveness. The technical infrastructure includes extensive use of modern analytics and marketing tools, although privacy compliance mechanisms such as cookie consent and privacy policies are currently lacking. Security posture is solid with HTTPS enforced and domain registration protections in place, but DNSSEC is not enabled, representing a minor security gap. Overall, the site is trustworthy and business credible but would benefit from enhanced privacy compliance and security transparency.
Emsleys Solicitorsemsleys.co.uk
Real Estate · United Kingdom
67Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Emsleys Solicitors is a well-established, award-winning law firm based in Leeds, UK, providing a broad range of legal services including conveyancing, family law, employment law, dispute resolution, and wills & probate. The firm targets individuals and businesses primarily in Yorkshire and surrounding areas, positioning itself as a leading regional legal service provider with a strong reputation evidenced by multiple industry awards and excellent client reviews. Their business model focuses on client-centric, practical legal advice with fixed fee options to enhance transparency and accessibility. Technically, the website is built on a modern stack including Craft CMS, jQuery, Google Tag Manager, and Cookiebot for consent management, complemented by Plausible Analytics for privacy-friendly traffic analysis. The site is well-optimized for mobile and accessibility, with good SEO practices and fast loading performance. The presence of comprehensive metadata, structured data, and social media integration reflects a mature digital presence. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and integrates cookie consent mechanisms, demonstrating adherence to best practices. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers like X-Frame-Options and Content-Security-Policy should be verified and enhanced if missing. The absence of a published incident response or vulnerability disclosure policy is noted. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The WHOIS data could not be retrieved due to querying a subdomain rather than the registered domain, but this does not detract from the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and maintaining up-to-date third-party libraries.
Budget Medical UKbudgetmedical.co.uk
Healthcare · United Kingdom
62Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Budget Medical UK operates as a specialist supplier and wholesaler of medical disposables and equipment, primarily targeting NHS GP surgeries, schools, government entities, and trade accounts within the United Kingdom. The company emphasizes its 25 years of expertise and offers value-added services such as free delivery over a certain order value and instant credit facilities for NHS GP surgeries. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Shopify Pay and hCaptcha for security. The digital infrastructure is moderately optimized for performance and mobile responsiveness, with a clear navigation structure and professional design. From a security perspective, the website enforces HTTPS and integrates CAPTCHA protections on forms, indicating a baseline security posture. However, explicit security headers and published security policies are absent, which could be improved to enhance trust and compliance. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages detected in the homepage content. The WHOIS lookup for the domain failed due to domain naming rules, limiting the ability to verify domain registration details and impacting trust assessment. Overall, Budget Medical UK presents a credible and professional online presence within the healthcare supply sector, supported by a robust e-commerce platform. Strategic improvements in privacy disclosures, security headers, and domain registration transparency would further strengthen its security posture and business credibility.
Chartwell Land & New Homeschartwellpropertygroup.com
Real Estate · United Kingdom
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Chartwell Land & New Homes is a UK-based property development company specializing in unlocking land, securing planning permissions, and building bespoke quality homes primarily across Surrey, Sussex, Kent, Hampshire, Buckinghamshire, and Berkshire. The company targets home buyers and property investors seeking bespoke residential properties in these regions. The website presents a professional and well-structured digital presence built on WordPress with the Divi theme and Slider Revolution, indicating a moderate level of digital maturity. SEO practices are supported by Yoast SEO, and Google Fonts and reCAPTCHA are used for enhanced user experience and security. Security posture is generally good with HTTPS enforced and use of reCAPTCHA; however, the absence of security headers and privacy/cookie policies indicates room for improvement. The WHOIS data is unavailable or protected, which reduces domain trustworthiness, though the website content and branding suggest a legitimate business. Overall, the site scores well on content quality and business credibility but needs to address privacy compliance and domain registration transparency to improve trust and security.
TravelhouseUKtravelhouseuk.co.uk
Transportation · United Kingdom
60Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
TravelhouseUK is a London-based travel agency offering a wide range of travel services including flight bookings, holiday packages, and Umrah packages. With over two decades of experience, the company positions itself as a trusted travel partner for UK residents, providing competitive pricing and personalized travel solutions. The website is professionally designed, mobile-optimized, and features comprehensive content and interactive booking forms. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates analytics and marketing tools such as Google Analytics and Facebook Pixel, and employs security measures like HTTPS and reCAPTCHA. However, the absence of explicit cookie consent and security headers indicates room for improvement in privacy compliance and security posture. The WHOIS data is unavailable due to domain naming issues, which slightly impacts trust but does not detract from the overall professionalism and legitimacy of the business.
- SSecurity Verification
jmdaltd.co.uk
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.jmdaltd.co.uk currently serves only as a security verification page employing Google reCAPTCHA v3 invisible challenge to prevent automated access. The domain WHOIS lookup failed due to a domain naming rules violation, indicating the domain may not be properly registered or is invalid under Nominet UK policies. No business, contact, or policy information is available on the site, and the content is minimal, blocking meaningful analysis of the company's operations or services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation. Overall, the site appears to be protected by a web application firewall or bot mitigation service, limiting accessibility and transparency.
Fidelity Groupfidelity-group.co.uk
Telecommunications · United Kingdom
60Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Fidelity Group is a UK-based medium-sized business specializing in providing integrated telecoms, broadband, mobile, IoT, energy, and payment solutions to over 4,000 business customers. Established in 2008, the company positions itself as a customer-centric XaaS provider with ISO 9001 certification, emphasizing trusted partnerships and comprehensive service offerings. Their website reflects a mature digital presence built on WordPress with modern technologies such as Bootstrap, jQuery, and Google Tag Manager, ensuring fast performance and mobile responsiveness. Security measures include HTTPS enforcement, Google reCAPTCHA, and reputable third-party integrations, although explicit security headers could be enhanced. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the company demonstrates high professionalism, trustworthiness, and a solid market position in the UK telecommunications and energy sectors.
Roslynsroslyns.co.uk
Hospitality · United Kingdom
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Roslyns is a UK-based company providing specialized business services to the hospitality sector, including accounts, stocktaking, payroll, and business plans. Their website is professionally designed and hosted on the Wix platform, targeting hospitality businesses across the United Kingdom. The company positions itself as a market leader offering specialist advice and support to its clients. Technically, the website leverages modern web technologies and Wix's Thunderbolt framework, ensuring moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and visible privacy or cookie policies. The absence of WHOIS data due to domain naming rules errors raises some concerns about domain registration legitimacy, although the website content and business information appear credible. Overall, the site demonstrates a solid business presence but would benefit from enhanced privacy compliance and security practices.
TaylorMade Financetaylormade-finance.co.uk
Finance · United Kingdom
64Medium
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
TaylorMade Finance is a UK-based independent mortgage brokerage firm established in 2008. The company offers mortgage consultation services with access to over 100 lenders and more than 20,000 mortgage deals, targeting UK home buyers and mortgage seekers. Their website is professionally designed, mobile-optimized, and integrates modern technologies such as WordPress, Gravity Forms, and SEO tools to provide a seamless user experience. The business maintains a consistent brand presence with clear contact information and social media engagement. Technically, the website employs HTTPS with good SSL configuration and uses analytics tools like Microsoft Clarity and Google Analytics for user insights. However, it lacks explicit privacy and terms of service pages, as well as a published security policy or incident response contacts. Security headers are not fully implemented, and no vulnerability disclosure or data protection officer information is provided. Overall, the site demonstrates a good security posture but could improve compliance and transparency aspects. The domain registration is consistent and long-standing, supporting the legitimacy of the business.
- Daltec AI Limited
dal-tec.com
Transportation · United Kingdom
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Daltec AI Limited is a UK-based company specializing in automotive engineering products with a focus on vehicle safety technology and tools. The company offers a broad range of products including camera systems, vehicle lighting, workshop essentials, power management, and digital storage solutions. With over two decades of experience, Daltec positions itself as a trusted partner for automotive professionals and fleet operators, emphasizing quality and innovation through partnerships with leading brands such as Virtus Fleet and Tesa. The website is built on the Odoo CMS platform, leveraging modern web technologies and analytics tools to provide a professional and user-friendly e-commerce experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and vulnerability disclosure information suggests room for improvement. The lack of WHOIS data raises concerns about domain registration legitimacy, warranting further verification. Overall, Daltec presents a credible and professional online presence with strong business and technical foundations.
- Bbuckleywatson.co.uk | 526: Invalid SSL certificate
buckleywatson.co.uk
Other
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.buckleywatson.co.uk is currently inaccessible due to an invalid SSL certificate on the origin server, as indicated by Cloudflare's Error 526 page. The domain WHOIS lookup failed with an error stating the domain cannot be registered because it contravenes Nominet UK's naming rules, suggesting the domain is either invalid or improperly registered. No business content, metadata, or contact information is available on the site, preventing any meaningful business or technical analysis. The site is protected by Cloudflare but is effectively blocked for visitors due to SSL misconfiguration. From a technical perspective, the site relies on Cloudflare as a proxy and security provider, but the origin server lacks a valid SSL certificate, causing the site to be inaccessible via HTTPS. No CMS, analytics, or marketing technologies are detected. The site lacks privacy, cookie, or terms of service policies, and no contact or security policies are present. Security posture is poor due to the invalid SSL certificate and absence of security headers or best practices. The domain registration issues further reduce trust and legitimacy. Overall, the site is not operational and presents significant risks and trust concerns. Strategic recommendations include promptly installing a valid SSL certificate on the origin server, resolving domain registration issues, implementing standard security headers, and publishing privacy and cookie policies to improve compliance and trust.
Carpenter Farradaycarpenterfarraday.com
Finance
56Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Carpenter Farraday is a specialist executive search and advisory firm serving global financial markets, including private markets, asset management, and wealth management sectors. The company emphasizes rigorous search methodologies, proprietary data platforms, and deep market insight to build high-performance teams. Their website reflects a professional and consistent brand presence with global reach through offices in major financial hubs. Technically, the site uses modern web technologies such as Google Tag Manager, Google Analytics, and CookieControl for GDPR compliance, though it relies on an older version of jQuery which may pose security risks. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and updated libraries. WHOIS data is missing, which raises concerns about domain registration legitimacy, though the website content and design suggest a legitimate business. Overall, the site is well-structured, user-friendly, and compliant with privacy regulations, targeting financial institutions and professionals.
- Wwww.wilhemina.com
wilhemina.com
Other
60Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.wilhemina.com/lander currently serves only a minimal parking or placeholder page with no substantive content or business information. The WHOIS lookup indicates that the domain is not registered or has expired, which strongly suggests that the domain is inactive or not legitimately maintained. There is no evidence of privacy policies, contact information, or security measures on the site. The technical infrastructure is minimal, relying on basic JavaScript and external static resources from img1.wsimg.com. No CMS, analytics, or advertising technologies are detected. The security posture is weak due to lack of HTTPS and security headers, and the site does not comply with privacy or data protection standards. Overall, the site is not suitable for business use and presents a high risk of being untrustworthy or abandoned.
- SSecurity Verification
vanguardpacking.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.vanguardpacking.co.uk currently serves a security verification page employing Google reCAPTCHA v3, indicating that access to the actual site content is blocked by a Web Application Firewall or similar security mechanism. Due to this blocking, no meaningful business content, contact information, or policies are accessible. The domain WHOIS lookup failed with an error citing domain naming rule violations, suggesting potential issues with domain registration legitimacy. The technical infrastructure is minimal, relying on Bootstrap for styling and Google reCAPTCHA for bot protection, with no evidence of HTTPS enforcement or security headers in the provided data. Overall, the site exhibits a low level of digital maturity and poor content quality, limiting the ability to assess business credibility or security posture comprehensively.
- PPrivate Healthcare & Private Hospitals | Circle Health Group
circlehealth.co.uk
—
69Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
RT Software Ltdrtsw.co.uk
Media · United Kingdom
58Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
RT Software Ltd is a UK-based company specializing in advanced broadcast graphics technologies, serving major broadcasters globally. Their product portfolio includes 3D augmented reality, virtual studios, newsroom graphics, and channel branding solutions. The company has a strong market position supported by a long domain history and client testimonials from reputable broadcasters. Technically, the website is built on WordPress with WooCommerce, integrating modern libraries and analytics tools, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS, cookie consent management, and anti-spam measures, though explicit security policies and incident response details are absent. Overall, the website reflects a professional and trustworthy business with room for enhanced security transparency.
Kelvin Francis Estate Agentskelvinfrancis.com
Real Estate · United Kingdom
53Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Kelvin Francis Estate Agents is a well-established independent real estate agency based in Cardiff, UK, with over 46 years of experience. The company specializes in residential sales, lettings, valuations, and property management, serving Cardiff and surrounding areas through multiple offices. Their market position is strong, supported by multiple industry certifications and awards, reflecting a trusted and reputable brand in the local property market. The website effectively communicates their services and trust signals to their target audience of property buyers, sellers, landlords, and tenants. Technically, the website is built on WordPress using modern plugins and technologies such as WPBakery Page Builder, LayerSlider, Google Maps API, and Google Analytics. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security measures include HTTPS, Google reCAPTCHA v3, and a cookie consent mechanism, although some advanced security headers and DNSSEC are not implemented. The security posture is solid but could be improved by enabling DNSSEC, adding security.txt for vulnerability disclosure, and implementing additional HTTP security headers. Privacy compliance is good with a comprehensive privacy policy and cookie consent banner. Contact information is clearly provided, enhancing business credibility. No signs of malicious content or suspicious domains were detected, and the domain registration data aligns well with the business claims, indicating high legitimacy. Overall, Kelvin Francis Estate Agents presents a professional, trustworthy, and user-friendly online presence with room for security enhancements to further strengthen their digital maturity and compliance posture.
Other
71Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The website www.cwtls.co.uk appears to be hosted on the Wix platform but is associated with an unregistered domain according to the WHOIS data. The domain is invalid per Nominet UK naming rules and cannot be registered, which raises significant concerns about the legitimacy and operational status of the website. The site content is minimal, lacking essential business information, privacy policies, contact details, and security configurations. Technically, the site uses standard Wix scripts and polyfills but lacks advanced security headers or SSL configuration details. Overall, the security posture is weak, and the absence of compliance documentation further reduces trustworthiness. Strategic recommendations include registering a valid domain, implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear business contact information to improve credibility and compliance.
TheWisdomNetwork.comthewisdomnetwork.com
Other
72Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
TheWisdomNetwork.com is currently a placeholder website indicating an upcoming launch. The site provides minimal business information, primarily a 'Launching Soon' message and a contact form with Google reCAPTCHA for user inquiries. The website is built using GoDaddy Website Builder and hosted by GoDaddy.com, LLC. Technical infrastructure is basic but includes modern elements such as service workers and web fonts. Security posture is moderate with HTTPS enabled and spam protection via reCAPTCHA; however, the absence of security headers and explicit privacy/security policies limits the overall security maturity. WHOIS data presents a suspicious future creation date, which raises concerns about domain legitimacy. Overall, the site is in early development with limited content and business details, resulting in a moderate risk profile.
Angel Plumbing Servicesangelplumbingservices.co.uk
Energy · United Kingdom
69Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Angel Plumbing Services is a small, family-run plumbing and heating service provider based in London, with over 40 years of experience. The company offers a broad range of services including plumbing repairs, central heating installation, bathroom and kitchen installations, landlord gas safety inspections, and emergency call outs. The website positions the company as reliable, affordable, and professional, targeting residential and commercial customers in North London. The business holds certifications such as Gas Safe registration and APHC membership, which enhance its credibility in the energy sector. Technically, the website is built using a custom CMS platform provided by Yell Multiscreensite, leveraging modern JavaScript libraries like jQuery and analytics tools such as Snowplow. The site uses HTTPS with a valid SSL certificate and includes cookie consent mechanisms, but lacks explicit privacy and security policies. Performance and mobile optimization are moderate, with basic accessibility features and good SEO practices. From a security perspective, the site employs HTTPS and CAPTCHA services to protect forms, but no advanced security headers were detected. The absence of a privacy policy and incident response information indicates gaps in compliance and security transparency. The WHOIS data for the domain is unavailable due to a naming error, which raises concerns about domain legitimacy despite the professional appearance of the website. Overall, the website is functional, professional, and trustworthy from a user perspective but would benefit from improved transparency in privacy and security policies, enhanced security headers, and clarification of domain registration details to strengthen trust and compliance.
Wendy Jones Blackettwendyjonesblackett.co.uk
Retail · United Kingdom
66Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Wendy Jones Blackett operates an e-commerce website specializing in original, hand finished greeting cards, primarily targeting independent shops and direct consumers in the UK. The business emphasizes supporting local independent retailers while providing an online shopping alternative. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies, with moderate performance and good mobile optimization. Security posture is moderate but lacks key security headers and privacy compliance documentation. The WHOIS data for the domain is unavailable due to a naming rules violation, which raises concerns about domain registration legitimacy, though the website content and business information appear professional and trustworthy. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance trust and compliance.
- Rate limit exceeded.
allaboutyoudt.com
Other
51Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.allaboutyoudt.com is currently inaccessible due to a rate limit exceeded error (HTTP 429) served by Tumblr, indicating that automated or high-volume access has been blocked. The site content is minimal and consists solely of an error message with no business or contact information. WHOIS data for the domain is not found in the VeriSign registry, suggesting the domain may be unregistered, expired, or otherwise inactive. This lack of registration data and website content severely limits the ability to assess the business, technical infrastructure, or security posture. The site is hosted on the Tumblr platform but lacks any visible security headers, privacy policies, or contact details. Overall, the site presents a very low trust and credibility profile due to these factors.
Plesseyplesseysemi.com
Technology · United Kingdom
70Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Plessey is a UK-based technology company specializing in photonics with over 70 years of innovation. They develop MicroLED displays, optical computing, and optical interconnect technologies primarily for AR, AI, and next-generation wearable devices. Their integrated facility in Plymouth enables research through volume production, positioning them as a trusted partner for large technology companies. The website reflects a mature, professional business with clear branding and comprehensive content. Technically, the site is built on WordPress with modern libraries and SEO optimizations, hosted likely by UKFast. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with clear cookie consent and privacy policies. The WHOIS data shows an anomalous future domain creation date, which may be a data error, but overall domain registration status is consistent with a legitimate business. Contact information is complete with phone, address, and contact forms, supported by active social media channels.
PAL Machinery Ltdpalmachinery.co.uk
Manufacturing · United Kingdom
62Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
PAL Machinery Ltd is a well-established UK-based supplier specializing in quality glass machinery and equipment, serving the UK and Ireland markets. The company represents multiple manufacturers and offers a range of products including reconditioned machines and engineering services. Their website reflects a professional B2B business model focused on the glass manufacturing sector. Technically, the site is built on WordPress with WooCommerce, utilizing popular plugins such as WPBakery and Slider Revolution, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and implements GDPR-compliant cookie consent via the Complianz plugin. However, some security headers are missing, and there is no visible security policy or incident response information. Overall, the site demonstrates a solid security posture but could improve by updating software and adding explicit security policies. The domain is long-standing and consistent with the business history, enhancing trustworthiness.
Yorkshire Air Ambulanceyaa.org.uk
Transportation · United Kingdom
62Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Yorkshire Air Ambulance is a well-established UK-based charitable organization providing rapid emergency air ambulance services to approximately 5 million people across Yorkshire. The website serves as a key platform for community engagement, fundraising, and information dissemination. It is professionally designed with clear navigation and strong branding consistency, targeting donors, volunteers, and the general public interested in emergency medical services. The business model relies heavily on donations and fundraising events, positioning Yorkshire Air Ambulance as a critical regional healthcare service provider. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, integrated with modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. Cookiebot is used for comprehensive cookie consent management, reflecting good privacy compliance practices. Security-wise, the site enforces HTTPS with strong security headers and no visible vulnerabilities, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data is due to an invalid query on the www-prefixed domain, but the website content and external references strongly support its legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in transparency around security policies and incident response.
- Prenax
prenax.co.uk
Other · United Kingdom
63Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Prenax is a specialist B2B company focused on outsourced procurement and subscription management services for companies and institutions globally, with a strong presence in the United Kingdom. Their website presents a professional image with clear navigation, detailed service descriptions, and a customer success team localized to client regions. The business model centers on simplifying subscription management and optimizing procurement processes, targeting corporate and academic/public sectors. The company holds sustainability accreditation (Ecovadis), enhancing its market credibility. Technically, the website is built on Drupal CMS with Bootstrap framework, incorporating modern libraries such as FontAwesome and Matomo Analytics for tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a comprehensive cookie consent mechanism that respects user privacy. However, some security best practices like security headers are not evident, and SSL configuration details are not provided. From a security perspective, the site uses HTTPS and respects DoNotTrack signals in Matomo, but lacks visible security headers and published security policies or incident response contacts. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the professional website content and contact information mitigate these concerns somewhat. Overall, Prenax's website is a well-structured, professional platform suitable for its B2B audience, but improvements in security transparency and domain registration verification are recommended to enhance trust and compliance.
Strand Preservations Ltdstrandpreservations.co.uk
Other · United Kingdom
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Strand Preservations Ltd is a UK-based specialist company focused on preservation services, likely within the construction or building maintenance sector. The website presents a professional image with clear contact details and a focused business description. The company targets clients seeking expert preservation solutions, positioning itself as a niche service provider. Technically, the website is built on WordPress using the Divi theme, leveraging Google Fonts for typography. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy or cookie notices. WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and credible from a business perspective but would benefit from enhanced security and compliance measures.
- SStratton Glass & Windows Ltd
strattonglasswindows.co.uk
Real Estate · United Kingdom
55Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Stratton Glass & Windows Ltd is a well-established local home improvement company based in Norfolk, UK, specializing in the supply and installation of premium aluminium and uPVC windows, composite doors, conservatories, and home extensions. With over 40 years of experience, the company positions itself as a trusted partner for homeowners in Norfolk and Suffolk, offering quality products backed by a 10-year insurance-backed warranty and recognized industry certifications such as FENSA and GGF. Their services include a wide range of window and door types, conservatory designs, and roof replacement solutions, targeting residential customers seeking durable and energy-efficient home improvements. Technically, the website is built on ASP.NET WebForms using the Bongo CMS platform, incorporating legacy JavaScript libraries like jQuery 1.4.4 and MooTools, alongside modern tools such as Facebook Pixel for marketing and tracking. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. However, some outdated libraries and missing security headers suggest room for technical modernization and enhanced security hardening. From a security perspective, the website enforces HTTPS, uses captchas on forms, and provides clear privacy and cookie policies, reflecting a mature privacy posture. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the queried subdomain is due to domain naming rules, but the website content and contact information strongly indicate legitimacy and consistency with the business claims. Overall, Stratton Glass & Windows Ltd presents a professional and trustworthy online presence with solid business credibility and a good security posture. Strategic improvements in updating legacy scripts, implementing security headers, and publishing explicit security policies would further enhance their digital maturity and risk management.
Monogram Collectivethe-vineyard.co.uk
Hospitality · United Kingdom
60Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The Vineyard is a luxury hospitality business located in Berkshire, UK, operated under the Monogram Collective brand. It offers premium accommodation, dining experiences including Michelin-recognized culinary services, event hosting, and a forthcoming spa. The website reflects a high level of professionalism with excellent design, clear navigation, and comprehensive content tailored to affluent travelers seeking refined hospitality experiences. The business model focuses on delivering exceptional guest experiences through multiple service offerings including rooms, restaurants, wine shop, and events. Technically, the website employs modern web technologies such as TypeScript, Bootstrap, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The WHOIS data is unavailable due to domain registration errors, which slightly impacts trustworthiness from a domain registration perspective but does not detract from the evident legitimacy of the business and website content. Overall, the site is secure, compliant with privacy regulations, and professionally maintained.
Deekay Propertydeekayproperty.com
Real Estate · United Kingdom
66Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Deekay Property is a UK-based real estate investment company established in 1972, offering property investment, asset management, and finance services. The website presents a professional image with a consistent brand and clear market positioning focused on the UK property market. The technical infrastructure is based on the Squarespace platform, providing a modern and mobile-optimized experience with good SEO practices. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.
Ogilvie Groupogilvie.co.uk
Real Estate · United Kingdom
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Ogilvie Group is a well-established family-owned business founded in 1946, operating multiple divisions including construction, fleet management, home building, surveying, and IT security solutions. The company holds a strong market position in Scotland as one of the largest privately owned construction firms and has diversified into complementary sectors. Their website reflects a professional and consistent brand image targeting business clients and partners across these industries. Technically, the website is built on WordPress using modern plugins and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and published policies. The absence of WHOIS data due to domain naming query issues slightly impacts domain trust but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain registration transparency.
Other
59Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.redblugraphics.co.uk is currently inaccessible, returning a 403 Forbidden error indicating that access is blocked by server permissions. The domain WHOIS lookup failed due to the domain name being invalid per Nominet UK rules, which state that the domain contains too many parts. No registrar, registrant, or domain status information is available. The lack of accessible content, metadata, or contact information prevents any meaningful business or technical analysis. The site appears misconfigured or the domain is not properly registered. From a technical perspective, no technologies, scripts, or frameworks could be detected due to the absence of content. The site lacks security headers and HTTPS enforcement cannot be confirmed, indicating a weak security posture. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. Security posture is poor due to the site being inaccessible and the domain registration being invalid. The absence of WHOIS data and the 403 error significantly reduce trust and legitimacy. There are no indications of adult or unsafe content; the site is simply blocked. Overall, the website is not operational or accessible, and the domain registration status is questionable. Strategic recommendations include resolving domain registration issues, configuring proper server permissions to allow access, implementing HTTPS and security headers, and publishing standard compliance and contact information to improve trust and security posture.
Roma Financeromafinance.co.uk
Finance · United Kingdom
73Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Roma Finance is a UK-based finance company specializing in property investment and development lending solutions, including bridging loans, development finance, buy-to-let, and commercial mortgages. The company positions itself as a borrower-first lender with flexible products tailored to unique property transactions. The website reflects a medium-sized enterprise with a professional online presence, detailed case studies, and a comprehensive team section, indicating a mature business with a strong market position in the UK property finance sector. Technically, the website is built on WordPress with modern plugins and tools such as Yoast SEO, Cookiebot for consent management, and Google Tag Manager, demonstrating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience with clear navigation and relevant content.
Empower Generationempowergeneration.com
Energy · United Kingdom
62Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
Empower Generation is a small energy sector company focused on integrating diesel generators and hybrid energy solutions to support renewable energy goals in the UK and Ireland, particularly Northern Ireland. Their business model involves managing aggregated generator units to provide backup power and grid support, enabling clients to earn revenue from their generators while contributing to greener energy. The website is professionally designed using WordPress and Elementor, hosted by Automattic Inc., and provides clear contact information and business descriptions. However, it lacks privacy and cookie policies, and explicit security policies, which are compliance gaps. The site uses HTTPS with a valid SSL certificate but does not implement DNSSEC or security headers, representing areas for security improvement. Overall, the website is trustworthy and business credible but could enhance privacy compliance and security posture.
Jackie Stanley Limitedjackie-stanley.co.uk
Real Estate · United Kingdom
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Jackie Stanley Limited operates as a specialized real estate agency focused on the North Cornwall region, providing property sales and client support services. The company positions itself as a trusted local expert with a strong emphasis on personalized service and reliability. The website reflects a professional and well-branded digital presence, targeting home buyers and sellers in the area. Technically, the site is built on WordPress CMS, leveraging popular plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. Google Analytics is integrated with a consent management mechanism, indicating attention to privacy compliance. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected and no public security or incident response policies are available. The WHOIS data is notably missing due to a domain registration error, which raises concerns about domain legitimacy and requires further investigation. Overall, the website is professional, user-friendly, and compliant with privacy regulations, but the domain registration anomaly is a critical point for trust assessment.
Flip Outflipout.co.uk
Hospitality · United Kingdom
74Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Flip Out operates as a leading UK indoor adventure and trampoline park chain, offering family-friendly entertainment across 30 locations with 6 million visitors annually. Their services include trampolines, soft play, birthday parties, and food & drink, targeting families and children. The website is professionally designed, mobile-optimized, and uses modern technologies such as Vimeo for video content, Google Tag Manager for analytics, and Mapbox for location services. The site implements cookie consent mechanisms but lacks explicit privacy and terms of service pages in the provided content. Security posture is generally good with HTTPS and some security best practices, though explicit security headers and incident response information are missing. WHOIS data is unavailable due to domain registration errors, raising concerns about domain legitimacy, but the website content and branding are consistent with a reputable business. Overall, the site is safe, trustworthy, and well-positioned in the hospitality sector, though improvements in privacy compliance and domain registration transparency are recommended.
Homebumblesdaynursery.org.uk
—
58Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
IPW1ipw1.co.uk
Hospitality · United Kingdom
70Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
IPW1 is a London-based specialist digital and lithographic printing company serving hospitality, retail, creative agencies, finance, and law sectors. Positioned as a leading print company in London, IPW1 offers a wide range of services including large format printing, foiling, embossing, binding, and visual merchandising. The company emphasizes quality, innovation, and partnership with clients, highlighted by its exclusive involvement with Xerox's Iridesse digital press pre-launch. Technically, the website is built on a modern CMS platform with integration of popular analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and service worker usage, though it lacks some security headers and explicit incident response policies. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy business, though WHOIS data inconsistencies warrant cautious monitoring.
Jaguar Shoesjaguarshoes.com
Media · United Kingdom
66Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Jaguar Shoes is an East London-based arts collective focused on music, arts, creativity, and community events. Their website showcases exhibitions, events, merchandise, prints, media content, and publications, targeting arts and music enthusiasts primarily in the UK. The business operates on a Shopify e-commerce platform, leveraging modern web technologies and providing a professional user experience with good mobile optimization and SEO. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the site itself appears professionally maintained and trustworthy. Security posture is solid with HTTPS and standard Shopify protections, but lacks explicit security policies or incident response information.
- SSecurity Verification
wowtraining.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.wowtraining.co.uk currently serves a security verification page employing Google reCAPTCHA v3 to prevent automated access. The domain WHOIS lookup failed due to domain naming rules violations, indicating the domain may be invalid or misconfigured. No business, contact, or policy information is accessible on the site, limiting the ability to assess the company's operations or market position. Technically, the site uses modern libraries such as Bootstrap and Google reCAPTCHA but lacks visible security headers or SSL confirmation in the provided data. The security posture is weak due to minimal content and lack of transparency. Overall, the site is effectively blocked for normal users, resulting in a low trust and credibility score.
- Island Waste Ltd
islandwaste.gg
Other · Guernsey
55Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Island Waste Ltd is a Guernsey-based waste management company providing a range of services including battery disposal, bin hire, skip hire, and hazardous waste management. The company positions itself as a sustainable waste solutions provider with a commitment to diverting waste from landfill. Their website reflects a professional and consistent brand image, targeting local businesses and residents seeking reliable waste disposal and recycling services. The parent company is GRG, indicating a stable corporate backing. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery, Google Fonts, and Google Analytics. The site is mobile-optimized with good SEO practices and moderate performance. While the hosting provider is not explicitly identified, the site uses HTTPS with a good SSL configuration and some security best practices, though additional security headers could be implemented. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contact information, which are recommended for enhanced trust and compliance. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. No vulnerabilities or suspicious domains were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in security policy transparency and advanced security headers. The risk profile is low, with no critical issues identified.
Anglesey Activities, Accommodation & Glampingangleseyoutdoors.com
Hospitality
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Anglesey Outdoors is a small hospitality and outdoor adventure business specializing in family, group, school, and solo adventure holidays based in Anglesey. The company offers accommodation, glamping, and a variety of outdoor activities such as coasteering. The website is built on WordPress using the Divi theme and includes modern plugins like Nextend Smart Slider and Yoast SEO, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, the absence of privacy and cookie policies, lack of visible contact information, and missing WHOIS registration data raise concerns about compliance and legitimacy. Security posture is moderate with HTTPS implied but no security headers detected. Overall, the site presents a professional front but requires improvements in compliance, transparency, and security to enhance trust and reduce risk.
Cinemascapecinemascape.co.uk
Other · United Kingdom
64Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Cinemascape is a specialized UK and Ireland-based company focused on cinema seating, acoustic solutions, and complete auditorium fit-outs. Founded in 1977, it has evolved from an upholstery workshop to a trusted leader in its niche, serving major multiplex brands, independent venues, and educational institutions. The company emphasizes bespoke design, craftsmanship, and minimal disruption during refurbishment projects. Technically, the website is built on a modern Angular framework with Tailwind CSS, providing a professional and responsive user experience. Security posture is moderate with HTTPS enforced and secure form handling, but lacks advanced security headers and formal privacy policies. The absence of WHOIS data due to query errors limits domain trust verification. Overall, the site is professional, content-rich, and trustworthy, but could improve privacy compliance and security transparency.