High-risk security reports

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

403 - Forbidden

arcusglobal.com

39

The website www.arcusglobal.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The WHOIS lookup for the domain failed to return any registration data, indicating that the domain may not be registered or the data is not publicly available. Due to the lack of accessible content, no business information, contact details, or policies are present on the site. Technically, the site does not reveal any technologies, scripts, or frameworks in use. The security posture cannot be properly evaluated given the blocked access and absence of security headers or SSL information. Overall, the site appears inactive or improperly configured, posing a high risk for trust and legitimacy.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website at www.oldenterprise.co.uk is effectively inaccessible as a functional business site. The content is limited to a basic directory index page with no metadata, no business information, and no interactive elements. The domain itself is invalid per Nominet UK naming rules and cannot be registered, indicating that the domain is either misconfigured or non-existent. Technically, the site lacks HTTPS, security headers, and any modern web technologies, resulting in a poor security posture and minimal technical maturity. There are no privacy or cookie policies, no contact information, and no trust indicators, which further diminishes the site's credibility and compliance standing. Overall, the site appears to be either abandoned or incorrectly set up, with no evidence of active business operations or security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

London Environmental Pest Control Limited operates a professional website offering environmental health and safety services primarily in London. Their key offerings include pest control, cleaning, washroom services, steel work, and rope access, targeting both commercial and residential clients. The company demonstrates trustworthiness through certifications such as NPTA Accreditation, Constructionline, and SafeContractor. The website is built on WordPress with common plugins and shows good design and usability, though it lacks explicit privacy and cookie policies. Technically, the site uses modern frameworks and libraries but lacks visible security headers and detailed security policies. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or registration issues, which impacts trust. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency.

The website www.trumedia.co.uk is currently inaccessible beyond a standard 404 Not Found error page, indicating the requested resource is not available. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, suggesting the domain is either invalid or improperly registered. There is no visible business information, contact details, or policies on the site. The technical infrastructure is minimal, with only a LiteSpeed Web Server identified, and no CMS or frameworks detected. Security posture is poor with no HTTPS or security headers evident. Overall, the site lacks any meaningful content or compliance indicators, resulting in a very low trust and credibility rating.

The website at https://www.stjohnsnursinghome.co.uk/lander is effectively a minimal placeholder or parking page with no substantive content, business information, or user engagement features. The domain itself is flagged by Nominet UK as invalid due to naming rules violations, indicating it is not legitimately registered or active. The site uses minimal JavaScript and CSS resources from a parking service provider, with no visible privacy, cookie, or terms of service policies. There are no contact details or social media links, and no forms or data collection mechanisms are present. Technically, the site is very basic with limited optimization for SEO, accessibility, or mobile responsiveness. No security headers or HTTPS enforcement are evident, which poses security risks if any sensitive data were to be handled. The WHOIS lookup failure and domain invalidation further reduce trust and legitimacy. Overall, the site lacks any meaningful business or security posture. From a security perspective, the absence of HTTPS, security headers, and privacy compliance measures are critical weaknesses. The domain's invalid status and lack of registrant data suggest the site is not a trustworthy or operational business entity. The minimal content and lack of user interaction reduce exposure to vulnerabilities but also indicate no real business presence. Given these factors, the overall risk is high due to lack of legitimacy and security controls. Strategic recommendations include securing a valid domain, implementing HTTPS, adding comprehensive privacy and cookie policies, publishing clear business contact information, and improving technical and security best practices to establish trust and compliance.

Barton Fabrications Limited is a UK-based company specializing in the design, manufacture, installation, and servicing of aluminium and stainless steel bulk storage silos and pressure vessels. Established in 1981, Barton positions itself as a market leader in the UK for technical silos serving industries such as chemicals, plastics, food, and pharmaceuticals. The company offers a comprehensive range of services including bespoke silo design, installation, ATEX refurbishment, and silo modifications. Their website reflects a professional and consistent brand image, targeting industrial clients requiring bulk storage solutions. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and popular slider and carousel libraries. It is mobile-optimized with good navigation and SEO practices. The presence of multiple Google Analytics and Tag Manager scripts indicates active digital marketing and user behavior tracking. However, the site lacks a cookie consent mechanism, which is a privacy compliance gap. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. However, no security headers were detected, and there is no published security policy or incident response contact information. The WHOIS lookup failed due to domain naming rules errors, which is unusual and reduces domain trustworthiness. Despite this, the website content and business information appear legitimate and professional. Overall, Barton Fabrications presents a credible industrial business with a well-structured website. Security and privacy compliance can be improved by adding security headers, cookie consent, and incident response details. The WHOIS anomaly should be investigated to ensure domain registration legitimacy and continuity.

Orchid Farmtech is a UK-based small business specializing in farm computer software and IT support services tailored for livestock farming enterprises including beef, dairy, and sheep management. Established around 2016, the company positions itself as a niche provider helping UK farmers leverage technology for business management and marketing. Their website reflects a professional and consistent brand presence with clear service offerings and certifications such as Microsoft Partner and BCMS approval, enhancing trustworthiness. Technically, the website is built on WordPress using the Weaver Xtreme theme and integrates common technologies like jQuery, MasterSlider, and Google Analytics via MonsterInsights. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are lacking, indicating room for improvement in compliance and defense-in-depth. The security posture is adequate for the business scale, with no detected vulnerabilities or exposed sensitive data. However, the absence of a cookie consent banner and security headers slightly reduces privacy compliance scores. The WHOIS lookup for the domain 'www.orchidfarmtech.co.uk' failed due to naming rules, but the website is accessible and consistent with business claims, suggesting the domain is registered without the 'www' prefix or under a valid variant. Overall, the site demonstrates a trustworthy and professional online presence with minor areas for enhancement in security and privacy compliance.

Strefford Tulips Ltd is a medium-sized property law firm based in Hamilton, Scotland, specializing in residential and commercial conveyancing, executry estates, power of attorney, and wills. The firm has a long-standing local presence since the 1980s and offers approachable, client-focused legal services. The website reflects a professional business with clear service offerings and contact information. Technically, the site uses the Foundation CSS framework and jQuery 2.0.0, with moderate performance and good mobile optimization. However, the site lacks HTTPS enforcement and security headers, which are critical for protecting client data and trust. The absence of cookie consent mechanisms and limited privacy compliance features indicate room for improvement in regulatory adherence. WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional appearance of the website. Overall, the site is functional and informative but requires urgent security and compliance enhancements to align with best practices and build stronger trust.

The website www.anthemis.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content or business information. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or otherwise inactive. Due to the lack of accessible content, no metadata, structured data, or contact information is available for analysis. The website shows no signs of modern technical infrastructure, security best practices, or privacy compliance. This severely limits the ability to assess the business, technical, or security posture of the entity behind the domain.

The website pipcom.co.uk currently serves as a minimal placeholder 'Coming Soon' page hosted on the Squarespace platform. It lacks any substantive business content, contact information, or policies, indicating it is not yet operational or publicly launched. The domain WHOIS lookup failed due to a Nominet UK naming rules violation, suggesting the domain may not be properly registered or is invalid. Technically, the site uses standard Squarespace assets and Google Fonts but lacks advanced SEO, accessibility, or security features. Security posture is weak with no visible security headers or privacy compliance mechanisms. Overall, the site presents a low trust profile and minimal digital maturity.

The website 'hall vehicle hire' appears to be a minimal placeholder or parked page related to vehicle hire services, offering links to related search terms such as local vehicle rental and van hire. The domain itself is not legitimately registered according to Nominet UK WHOIS data, which states the domain name contains too many parts and cannot be registered. This raises significant concerns about the authenticity and trustworthiness of the site. The site lacks any verifiable business contact information, company details, or secure HTTPS implementation. Technically, the site uses basic HTML, CSS, and JavaScript with some third-party advertising and tracking scripts from Intive Search and AppReports. There is no evidence of advanced frameworks or CMS usage. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is minimal with only basic privacy and terms pages present but no cookie consent or GDPR indicators. Overall, the site appears to be a low-quality, low-trust advertising placeholder with significant risks for users and no clear business legitimacy.

The website www.airquick.co.uk currently serves a security verification page implementing Google reCAPTCHA v3 invisible challenge, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. This blocks direct access to any meaningful content, preventing a full assessment of the business or services offered. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, suggesting the domain is invalid or misconfigured. No registrar, creation, or expiry data is available, which severely impacts trust and legitimacy assessments. The technical infrastructure is minimal, relying on Bootstrap for styling and Google reCAPTCHA for security verification. No privacy, cookie, or terms of service policies are present, and no contact or business information is disclosed on the page.

S

Sovereign Group

sov-group.co.uk

48

Sovereign Group is a UK-based manufacturer and installer specializing in PVC-U windows, doors, composite doors, and sealed units primarily serving social housing and residential projects. Established in 1973, the company has over 45 years of experience and operates extensive manufacturing and warehousing facilities. The website reflects a mature business with a strong market position and multiple industry certifications, targeting local authorities, housing associations, and educational institutions. Technically, the site is built on WordPress using modern frameworks like Bootstrap and integrates SEO and accessibility features, though some improvements are possible. Security posture is solid with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Overall, the site is professional and trustworthy, though privacy and cookie policies are absent, which impacts compliance scores.

K

Kettering Surgical Appliances

ketteringsurgical.co.uk

40

Kettering Surgical Appliances is a small, family-run healthcare company specializing in the sales and supply of surgical and medical equipment, primarily serving NHS trusts, clinics, and private customers in the UK. The company emphasizes competitive pricing, customer service, and quality, supported by over 50 years of industry experience. Their website reflects a professional e-commerce platform built on WordPress and WooCommerce, featuring detailed product categories and customer engagement tools such as contact forms and catalog requests. Technically, the site uses modern libraries and plugins, ensuring good mobile optimization and SEO, though performance is moderate. Security posture is solid with HTTPS and reCAPTCHA protections, but lacks some advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible, with clear business information and certifications.

The website www.bankandclients.com is currently inaccessible, returning a 403 Forbidden error page indicating that access to the content is blocked or restricted. The WHOIS lookup for the domain failed to return any registration data, suggesting the domain may be unregistered or inactive. Due to the lack of accessible content, no business information, contact details, or policies are available for analysis. Technically, the site uses basic HTML and CSS with Google Fonts but lacks any advanced frameworks, CMS, or analytics tools. Security posture cannot be assessed due to absence of security headers or HTTPS information. Overall, the site appears non-operational or under restricted access, which severely limits trust and credibility.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

E

Eclipse Procurement Limited

eclipseprocurement.com

45

Eclipse Procurement Limited is a UK-based small enterprise specializing in procurement solutions for the construction industry. Founded in 2010, the company offers a comprehensive range of services including strategic procurement, package procurement, supply chain management, system and process development, ISO certification assistance, and specialist recruitment. Their client base includes contractors, developers, and consultants across both public and private sectors in the UK. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using Elementor and standard web technologies such as jQuery and Bootstrap. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a cookie consent mechanism and GDPR indicators. Overall, the website demonstrates a solid business presence with trustworthy indicators such as ISO certifications and a professional leadership team. However, it would benefit from enhanced security practices, privacy compliance improvements, and clearer contact information to strengthen trust and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.townandcity.com is currently inaccessible, returning a 403 Forbidden error page. This indicates that access to the site is blocked or restricted, preventing any meaningful content or business information from being retrieved. The domain WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered, expired, or otherwise inactive. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are available, and no contact or business details can be identified. The technical infrastructure cannot be assessed beyond the error page, and no security headers or SSL configuration details are present. Overall, the site appears non-operational or restricted, resulting in a very low trust and credibility score.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Macfarlane Concrete Pumping Ltd is a small, family-run business specializing in mobile truck mounted concrete pump hire across regions including Cheshire, North West, North Wales, Manchester, Liverpool, and the Midlands. Established in 2009 and operating a diverse fleet, the company serves a broad client base including construction firms, local councils, schools, and retail parks. Their market position is that of a regional specialist with professional operators and recognized certifications such as Constructionline Gold and CPA membership. Technically, the website is built on WordPress 7.0, utilizing Bootstrap 4.2.1, jQuery, and FontAwesome, with Google Analytics and Tag Manager for tracking. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Hosting is inferred to be via GoDaddy, consistent with the WHOIS registrar data. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide a privacy or cookie policy, which are compliance gaps. No incident response or vulnerability disclosure information is present. The security posture is moderate but could be improved with better header implementation and privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with the business's operational scope. The main risks relate to privacy compliance and security best practices, which if addressed, would enhance the site's credibility and user trust.

The website www.dancing-times.co.uk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents retrieval of any meaningful content or metadata. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK naming rules, resulting in no registrar or registrant information being available. Consequently, no business, contact, or compliance information can be extracted or verified. The technical infrastructure appears to rely on Cloudflare for security and hosting, but the blocking mechanism severely limits analysis of the site's digital maturity or performance. Security posture cannot be properly assessed due to lack of access to headers or SSL details. Overall, the site presents a high risk of misconfiguration or legitimacy issues given the WHOIS failure and lack of accessible content.

The website www.twelvetreesengineering.co.uk is currently not connected to any active website content and instead displays a Wix error page indicating the domain is not linked to a website. The domain WHOIS lookup failed due to a naming rule violation by the registry (Nominet UK), suggesting the domain is invalid or misconfigured. No business information, contact details, or policies are present on the site, severely limiting any meaningful analysis of the business or its operations. The technical infrastructure is based on Wix platform technologies including AngularJS and jQuery, but no custom or advanced implementations are evident due to the error state. Security posture is minimal with no visible security headers or SSL configuration data available. Overall, the site is inaccessible for normal use and lacks any trust or credibility indicators.

Baroco Limited is a UK-based small business specializing in secure document management services including confidential shredding, storage, and inventory management. Operating from secure premises in the Midlands, they serve professional clients such as insolvency practitioners, solicitors, and accountancy firms. The website content is basic but relevant, providing essential business information and contact details without advanced digital features or modern design elements. The technical infrastructure appears minimalistic, relying on basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. No analytics or tracking technologies are detected, indicating a low digital maturity level. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and missing privacy and cookie policies, which raises compliance concerns especially under GDPR. The domain registration data is consistent and trustworthy, with a long registration history and no privacy protection, supporting the legitimacy of the business. Overall, the website serves as a basic informational portal with room for significant improvements in security, privacy compliance, and technical modernization.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.rapidgrid.co.uk appears to be inaccessible or blocked, with its content replaced by an iframe redirecting to an unrelated external domain. The WHOIS lookup for the domain failed due to the domain being invalid per Nominet UK naming rules, indicating potential misconfiguration or misuse. No business information, contact details, or privacy policies are present on the site. The only notable feature is the presence of a cookie consent mechanism provided by ConsentManager. The technical infrastructure is minimal, lacking visible security headers or SSL configuration data. The overall security posture is weak, with potential risks from third-party iframe content. Given these factors, the website's legitimacy and trustworthiness are very low, and it is likely under a WAF or content blocking mechanism.

Machine Tech Engineering Ltd. is a UK-based small manufacturing business specializing in precision turned parts for various industries including automotive, construction, and agriculture. The company emphasizes quality and flexibility, holding ISO 9001 certification as a key trust indicator. Their website presents a professional image with clear service descriptions and a focus on customer satisfaction. Technically, the site uses older JavaScript libraries such as jQuery 1.4.2, which introduces security risks. There is no evidence of modern CMS or advanced frameworks, and mobile optimization is basic. Security posture is weak due to lack of visible HTTPS confirmation, missing security headers, and outdated libraries. Privacy compliance is minimal with no privacy or cookie policies found. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy or configuration, though the website content itself appears legitimate and business-focused.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Northern Broadsides Theatre Company is a professional touring theatre company based in Halifax, UK, specializing in Shakespearean productions delivered in northern English dialects. The company is positioned as a multi-award winning regional theatre group with a focus on accessible drama and cultural enrichment. Their website reflects a well-maintained digital presence built on WordPress with the Divi theme and WooCommerce for e-commerce capabilities. The technical infrastructure includes standard analytics tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable and inconsistent, which raises some concerns about domain registration transparency but does not detract from the professional appearance and content quality of the website. Overall, the site is safe, well-designed, and serves its target audience effectively.

S

Solid Rock Accountancy Ltd

solidrockaccountancy.co.uk

49

Solid Rock Accountancy Ltd is a UK-based family run accounting firm established in 2008, offering tailored accounting, tax, and business support services primarily to small and medium-sized businesses. The website is built on WordPress using the Astra theme and Ultimate Addons for Gutenberg, reflecting a moderate level of digital maturity with good mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though lacking explicit privacy and security policies. Overall, the site presents a professional image with room for improvement in privacy compliance and security best practices.

The website www.combivent.co.uk is currently inaccessible, returning a 403 Forbidden error page. The domain WHOIS lookup failed with an error indicating the domain cannot be registered due to contravention of Nominet UK naming rules, suggesting the domain is either invalid or unregistered. No business content, contact information, or policies are available on the site. The lack of accessible content and domain registration data indicates the website is not operational or legitimate at this time. Technically, the site does not present any modern technologies or security features, and no analytics or tracking mechanisms are detected. The security posture is poor due to lack of HTTPS confirmation and absence of security headers or policies. Overall, the site presents a high risk and should not be trusted for business or personal use.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.boldfort.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any business or content information. The domain itself is not registered according to the raw WHOIS data, which indicates it violates Nominet UK's naming rules and cannot be registered. This severely limits any meaningful analysis of the business or its digital presence. The technical infrastructure appears minimal, with only basic HTML and CSS and no detectable CMS or advanced technologies. Security posture is poor due to lack of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site is non-functional for end users and lacks trust and credibility indicators.

A

Astrapac Midlands Ltd

astrapac.co.uk

45

Astrapac Midlands Ltd is a UK-based manufacturer specializing in heat sealing machines serving industrial, medical, pharmaceutical, and food sectors. With over 45 years of experience and ISO 9001 certification, the company positions itself as a leading provider of heat sealing solutions in the UK market. Their business model focuses on manufacturing, direct sales, and after-sales services including calibration, repairs, and technical support. The website reflects a professional and consistent brand image targeting industrial and medical clients. Technically, the website is built on WordPress with WooCommerce, utilizing common JavaScript libraries such as jQuery and MasterSlider. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Tracking is implemented via Google Analytics and WhoIsVisiting, but no cookie consent mechanism is present. From a security perspective, the site enforces HTTPS and uses CAPTCHA on its contact form, but lacks security headers and published security policies. The WHOIS lookup failed due to querying an invalid domain format, which impacts domain registration trust assessment. Overall, the security posture is moderate with room for improvement in headers and privacy compliance. The overall risk is moderate; the business appears legitimate and professional, but domain registration inconsistencies and missing security headers suggest areas for enhancement. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response policies, and correcting WHOIS domain queries for accurate domain data.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The domain www.aspen-electronics.com currently appears unregistered or parked, as indicated by the WHOIS query returning no registration data and the website content consisting solely of a minimal landing page with no business information. There is no evidence of an active business presence or digital infrastructure beyond placeholder scripts. The technical infrastructure is minimal, relying on basic React scripts served from a parking service domain, with no visible security or privacy policies, contact information, or business content. Security posture is weak due to lack of HTTPS and security headers, and the site does not comply with privacy regulations such as GDPR. Overall, the website is not operational as a legitimate business site, representing a high risk for trust and credibility. Strategic recommendations include registering the domain properly, deploying a secure and content-rich website, and implementing standard security and privacy practices.

L

L Hawkins & Sons Ltd.

lhawkinsandsonsltd.co.uk

46

L Hawkins & Sons Ltd. is an independent, family-run funeral director business based in Leatherhead, Surrey, with a history dating back to the 1880s. The company offers a range of funeral services including cremation, religious and non-religious funerals, and burials, supported by affiliations with recognized industry organizations and a reputation for compassionate service. Their website reflects a professional and trustworthy local business with clear contact channels and service descriptions. Technically, the website is built using Vue.js and hosted likely via Namecheap, with WordPress CMS elements inferred. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were found, but the absence of cookie consent and incident response information indicates compliance gaps. Overall, the security posture is moderate but could be enhanced to meet best practices and regulatory requirements. The overall risk is low given the nature of the business and website content, but strategic improvements in privacy compliance, security headers, and incident response transparency are recommended to strengthen trust and regulatory adherence.

M

Maher Limited

maher.com

47

Maher Limited is a well-established UK-based manufacturing company specializing in precision machining and superalloys, serving demanding industrial sectors such as aerospace, defense, and energy. The company boasts a long history since 1952 and holds key certifications including ISO 9001:2015 and AS9100 Rev D, underscoring its commitment to quality and compliance. Their website reflects a professional and comprehensive digital presence, targeting B2B clients with detailed service offerings and strong trust indicators. Technically, the website employs modern web technologies including Google Tag Manager and Google Analytics with privacy-conscious configurations. The site is mobile-optimized, well-structured, and SEO-friendly, though it lacks explicit CMS identification and some advanced accessibility features. Hosting and domain registration are stable and consistent with the company's history. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the absence of security headers and incident response contacts suggests room for improvement. Overall, the security posture is solid but could be enhanced with additional best practices. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, publishing a vulnerability disclosure policy, and enhancing accessibility compliance to further strengthen trust and security culture.

R

Rogers Skip Hire Ltd

rogersskiphire.co.uk

45

Rogers Skip Hire Ltd is a small UK-based waste management and skip hire service provider operating primarily in West Dunbartonshire and surrounding areas. The company emphasizes environmentally responsible waste disposal with over 20 years of industry experience and owns a waste transfer station in Alexandria. Their services target both business and residential customers, positioning them as a trusted local provider in their sector. The website reflects a professional business presence with clear service descriptions and contact information. Technically, the site uses modern web standards including Google Fonts and FontAwesome icons, and is mobile responsive with a user-friendly navigation structure. However, the site lacks advanced SEO and accessibility features and does not include structured data or social media integration. Security posture is moderate; HTTPS is implied but no security headers or incident response information are present. Privacy and cookie policies exist but are basic and lack explicit GDPR compliance details. The WHOIS lookup failed due to domain registration errors, which raises concerns about domain legitimacy despite the professional website content. Overall, the website is functional and trustworthy from a user perspective but would benefit from enhanced security practices and domain registration verification.

C

Home | Mysite

covercrew.co.uk

48

The website www.covercrew.co.uk appears to be a minimal placeholder site hosted on the Wix platform with no substantive business content or contact information. The domain WHOIS lookup failed due to an invalid domain name error from Nominet, indicating the domain is not properly registered or active. The site lacks privacy, cookie, and terms of service policies, and no security or incident response information is present. Technically, the site uses Wix's standard JavaScript libraries and polyfills but lacks advanced SEO, accessibility, or security features. Overall, the security posture is weak due to missing headers and unknown SSL configuration. The domain's legitimacy is highly questionable given the WHOIS failure and lack of business data. Strategic recommendations include proper domain registration, adding privacy and security policies, improving content quality, and implementing security best practices.

The website at www.nevisrange.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating a Web Application Firewall or similar security mechanism is blocking direct access to content. The WHOIS lookup for the domain failed with an error from Nominet UK stating the domain name contains too many parts and cannot be registered, suggesting that the exact domain 'www.nevisrange.co.uk' is invalid or misconfigured. Consequently, no business information, contact details, or policies are available on the site. The technical infrastructure includes Bootstrap 5.3.3 and Google reCAPTCHA, but no CMS or hosting details are discernible. Security posture is limited to bot verification with no visible security headers or policies. Overall, the site is not accessible for meaningful content or business evaluation, resulting in a low trust and legitimacy score.

The Stile Group is a small, family-run fencing construction and installation company based in Peterborough, UK, with over 25 years of experience. They specialize in bespoke timber and metal fencing, gates including automated gates, decking, and metal fabrication services. Their market position is that of a leading local supplier and installer in their region, targeting both domestic and commercial customers primarily in East Anglia. The website presents a professional image with a clear focus on their core services and includes a photo gallery showcasing their work. Technically, the website uses a traditional tech stack including jQuery 1.12.0, Materialize CSS framework, and Amazing Slider for image galleries. While the site is functional and moderately optimized for mobile, it uses outdated libraries and lacks modern security headers, which could expose it to vulnerabilities. The site is accessible without any WAF or security challenges, but it lacks privacy and cookie policies, which impacts compliance. From a security perspective, the site uses HTTPS but does not present additional security headers or advanced protections. The contact form is basic and lacks anti-spam measures. The outdated jQuery version and missing security headers are notable weaknesses. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and business information appear genuine. Overall, the website scores moderately on content quality and business credibility but scores lower on security posture and privacy compliance. Strategic improvements in security headers, library updates, and privacy policy implementation are recommended to enhance trust and compliance.

A

Ausenco

ausenco.com

49

Ausenco is a global engineering, consulting, and project delivery firm specializing in the mining, metals, and industrial sectors. With over 30 years of experience and operations in more than 80 countries, Ausenco offers a comprehensive suite of services including consulting studies, project delivery, asset operations, maintenance solutions, and digital innovations such as AI and environmental planning. The company positions itself as a partner to clients, helping navigate complex mining challenges with sustainable and innovative solutions. Technically, the website is built on Craft CMS and leverages modern JavaScript libraries such as jQuery, Flickity for carousels, and Vanilla LazyLoad for performance optimization. It integrates Google Tag Manager and LinkedIn Insight for analytics and marketing. The site is hosted with Amazon Registrar, indicating likely AWS infrastructure. The website demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and there is a lack of explicit security headers and a published security policy or incident response contact. Privacy compliance is partially met with a privacy policy present, but no visible cookie consent mechanism or GDPR-specific disclosures. The business credibility is high with clear company information, professional content, and strong trust signals. Overall, Ausenco's website reflects a mature, professional organization with a solid digital presence and good security fundamentals. To enhance trust and compliance, it is recommended to enable DNSSEC, implement security headers, provide explicit cookie consent, and publish security and incident response policies.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Cumming and Co is a well-established architectural firm based in the United Kingdom, founded in 2002. The company focuses on delivering client-centered architectural design and project collaboration services, emphasizing integrity, openness, and innovation. Their website reflects a professional and consistent brand image targeting clients seeking architectural expertise. Technically, the website is built on WordPress using Elementor, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website presents a trustworthy and professional digital presence with room for security enhancements.