Security Directory

C

Community Integrated Care

c-i-c.co.uk

67

Community Integrated Care is a leading UK social care charity dedicated to supporting people with learning disabilities, autism, and complex needs. The organization provides a broad range of tailored social care services including supported living, registered care homes, extra care, community support, technology-enabled care, and supported employment. Their market position is strong within the non-profit social care sector, emphasizing quality, innovation, and inclusivity. The website reflects a professional and accessible digital presence with comprehensive privacy and cookie policies, and active engagement through social media channels. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Google reCAPTCHA, and accessibility tools like UserWay. SEO is enhanced through Yoast SEO plugin and structured data (JSON-LD) is implemented for better search engine understanding. Performance is moderate with good mobile optimization and accessibility features, though some improvements in security headers could be made. From a security perspective, the site uses HTTPS and includes anti-bot measures and cookie consent mechanisms, indicating a good baseline security posture. However, the absence of explicit security headers and lack of visible incident response or security policy pages suggest areas for enhancement. The WHOIS data is unavailable due to domain naming rules violation, which slightly reduces trust but the website content and structure support legitimacy. Overall, the site is well-designed, content-rich, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and trustworthiness.

C

Clayton Vehicle Systems

claytoncc.co.uk

51

Clayton Vehicle Systems is a specialist supplier in the transport industry, providing heating, ventilation, air conditioning, and fire suppression systems for buses, coaches, trains, and off-road vehicles. Established since 2002, the company maintains a professional online presence with a well-structured website built on WordPress, optimized for SEO and mobile devices. The website employs modern technologies including Google Tag Manager for analytics and a cookie consent mechanism to comply with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the website reflects a trustworthy and credible business with a clear focus on the transport sector.

G

George P. Johnson

gpj.co.uk

58

GPJ UK is a globally recognized strategic experience marketing agency specializing in live, virtual, and hybrid events. The company positions itself as a leader in delivering immersive brand experiences for major corporate clients across multiple sectors. Their website reflects a mature digital presence with comprehensive content, strong branding, and a clear focus on client engagement and case studies. Technically, the site is built on WordPress with modern tools such as Yoast SEO, Google Analytics, and GDPR-compliant cookie consent mechanisms, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response policies are absent. The WHOIS data is unavailable due to a domain registration error, which limits domain trust assessment, but the website content and affiliations suggest legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations, making it a credible digital asset for the company.

C

Calber

calber.co.uk

62

Calber is a UK-based, family-managed facilities management company established in 2003, offering a broad range of services including cleaning, property maintenance, security, and ancillary services. The company positions itself as a personal yet comprehensive service provider targeting businesses seeking integrated facilities management solutions. The website reflects a professional and consistent brand image with clear service descriptions and customer testimonials, supported by recognized certifications such as Safe Contractor and Cyber Essentials. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Analytics, and reCAPTCHA for security. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and anti-bot measures on forms, but lacks explicit security headers and published security policies. Overall, the website demonstrates a mature digital presence with good privacy compliance, including GDPR cookie consent mechanisms and clear privacy and cookie policies. Contact information is comprehensive and easily accessible. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and considering a vulnerability disclosure program to further strengthen trust and security posture.

The website www.blythmachinery.co.uk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block triggered by the visitor's IP ASN. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK's naming rules, suggesting the domain may be invalid or improperly registered. Consequently, no actual website content, metadata, or business information is available for analysis. The site displays only an access denied error page with no contact or policy information, severely limiting any assessment of business operations or security posture. Technically, the site is protected by Cloudflare, but the blocking of ASN 24940 restricts access, indicating a restrictive security posture that may impact legitimate users. No security headers or SSL details could be assessed due to lack of content. The absence of privacy, cookie, and terms of service policies further reduces compliance confidence. From a security perspective, the domain's WHOIS data absence and naming violation raise legitimacy concerns. The lack of accessible content prevents evaluation of vulnerabilities or incident response readiness. Overall, the site scores very low on content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include resolving domain registration issues with Nominet UK, reviewing Cloudflare WAF rules to avoid blocking legitimate traffic, publishing essential privacy and contact information, and conducting a comprehensive security audit once the site is accessible.

C

Capel Court Ltd

capelcourt.com

64

Capel Court Ltd is a small UK-based financial advisory firm specializing in bespoke wealth management and financial planning services. It operates as a partner practice of Clifton Wealth Partnership, providing restricted advice on a curated selection of financial products. The website clearly targets private individuals, family estates, and business owners seeking long-term financial planning and investment advice. The company is FCA authorized, reinforcing its legitimacy and regulatory compliance. Technically, the website is built on a WordPress platform with Bootstrap framework, integrating Google Tag Manager and Analytics for user tracking with a compliant cookie consent mechanism. The site is mobile optimized and presents a professional, consistent brand image. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and published policies could enhance trust. WHOIS data is unavailable due to domain naming rules, but the subdomain relationship to a known partner domain supports legitimacy. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility.

Paul Ducksbury Ltd is a small UK-based company specializing in farm services and amenity sector services. The website serves as an informational portal inviting potential clients to explore their offerings and contact them for further details. The company appears to target agricultural businesses and clients in the amenity sector, positioning itself as a local service provider. The website is hosted on the Weebly platform, utilizing standard web technologies such as jQuery and Google Analytics for visitor tracking. The technical infrastructure is basic but functional, with moderate performance and mobile optimization. Security posture is average; HTTPS is implied but no advanced security headers or explicit privacy compliance mechanisms are present. The absence of WHOIS data due to domain naming rules errors limits the ability to fully verify domain legitimacy. Overall, the website is safe, professional, and suitable for general audiences, but could benefit from enhanced security and privacy features.

The website www.game-engineering.com is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot mitigation mechanism. No substantive business content, contact information, or policies are available for analysis. The domain WHOIS query returned no registration data, suggesting the domain may be unregistered, expired, or privacy-protected with no public data. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or SSL enforcement details. The overall security posture is weak due to lack of transparency and missing security best practices. Business credibility cannot be established due to absence of company information or trust indicators.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

T

Transfoam Ltd

transfoamltd-pudsey.co.uk

59

Transfoam Ltd is a small, established UK-based manufacturing business specializing in furniture reupholstery foam and related products. Founded in 1983, it serves clients primarily in West Yorkshire including Leeds, Bradford, and surrounding areas. The company offers bespoke foam conversion services, cut-to-size foam, and fibre and feather products tailored to upholstery and contract furniture sectors. The website reflects a professional local business with clear contact phone number and relevant product information. Technically, the site is built on the MultiScreenSite platform powered by Yell, utilizing modern JavaScript libraries and analytics tools. The site is accessible, uses HTTPS, and includes cookie consent mechanisms, though lacks a dedicated privacy policy page. Security posture is moderate with room for improvement in security headers and explicit policies. WHOIS data is unavailable due to domain registration issues, which raises some legitimacy concerns despite the professional site content. Overall, the site is functional and credible but would benefit from enhanced privacy and security disclosures.

A

AMAZONE Ltd.

amazone.co.uk

65

AMAZONE Ltd. is a well-established manufacturer specializing in agricultural and municipal machinery, offering intelligent crop production systems and digital farming solutions. The company maintains a strong market position with a comprehensive product portfolio and international presence, supported by a professional website that reflects its manufacturing expertise and customer-centric services. The website is built on CoreMedia CMS and integrates modern technologies such as Google Tag Manager and a robust cookie consent mechanism, demonstrating digital maturity and compliance with privacy regulations. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, although some security headers could be explicitly confirmed. Overall, the site provides clear contact information, legal notices, and certifications, reinforcing trust and legitimacy. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security and compliance.

S

Stour Valley Group

stourvalley.com

50

Stour Valley Group is a well-established family-run real estate business specializing in commercial and residential property leasing in Kent, UK. With nearly 50 years of operation, the company manages a diverse portfolio including retail, industrial, office, hospitality, and residential spaces. Their business model focuses on direct landlord-tenant relationships, emphasizing long-term partnerships and in-house property management. The website reflects a professional and trustworthy image with detailed property listings and tenant testimonials. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Contact Form 7, and Complianz GDPR for privacy compliance. It uses Google reCAPTCHA for form security and Google Analytics for visitor tracking. The site is mobile-optimized with good SEO practices and moderate performance. Hosting and domain registration are consistent with the UK location and business profile. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent and privacy policies are comprehensive and GDPR compliant. However, security headers are not explicitly detected, and there is no published security policy or incident response contact. Overall, the security posture is good but could be improved with additional headers and formal security disclosures. The overall risk assessment is low, with no WAF or blocking detected, no suspicious WHOIS patterns, and strong business credibility. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing a security policy, and adding a security.txt file to improve vulnerability disclosure and incident response readiness.

C

Compton Care Group Ltd

comptoncare.org.uk

60

Compton Care Group Ltd is a well-established UK-based non-profit organization specializing in providing specialist palliative and bereavement support to individuals and families living with life limiting conditions. With over 40 years of experience, the charity operates a comprehensive range of services including clinical care, education, fundraising events, retail shops, and volunteer programs. The organization maintains a strong market position within the healthcare charity sector, supported by trust indicators such as a Good rating from the Care Quality Commission (CQC) and official charity registration. The website reflects a professional and user-friendly digital presence, leveraging WordPress and WooCommerce platforms with modern technologies and compliance with privacy regulations.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

P

Powerstax

powerstax.com

50

Powerstax is a UK-based manufacturer specializing in the design and production of AC-DC and DC-DC power supplies, including custom and modular solutions for industrial sectors such as defense, medical, and energy. The company has a well-established online presence with a professional website that clearly outlines its product offerings and services. The technical infrastructure is built on a modern WordPress CMS with WooCommerce, leveraging popular libraries and SEO tools to ensure good performance and visibility. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security policies and DNSSEC implementation. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, reflecting a credible business entity with a long domain history.

The website www.practicon.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to prevent automated access. The domain WHOIS lookup failed due to a Nominet UK naming rules violation, indicating the domain is either invalid or misconfigured. No business, contact, or policy information is available on the site, severely limiting the ability to assess the company's operations or legitimacy. Technically, the site uses modern frontend frameworks like Bootstrap and Google reCAPTCHA but lacks visible security headers and HTTPS confirmation. Overall, the site appears to be blocked by a web application firewall or bot protection mechanism, resulting in a very low trust and security posture score.

The Leading Hotels of the World operates a comprehensive luxury hotel and resort booking platform targeting affluent travelers worldwide. The website offers a broad range of luxury vacation packages, spa and golf resorts, and safari getaways, positioning itself as a leading global hospitality brand. The platform supports multiple languages and provides secure user account management and reservation services. Technically, the website employs modern web technologies including Google Tag Manager, OneTrust for cookie consent, and Bootstrap for responsive design, ensuring a good user experience across devices. Security posture is strong with HTTPS enforced and secure login forms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, WHOIS data is unavailable, which reduces transparency but does not detract from the site's professional appearance and trustworthiness. Overall, the website is a well-executed digital presence for a luxury hospitality business with moderate to high trust and security levels.

T

TRAC Aircon

trac-aircon.co.uk

46

TRAC Aircon is a UK-based small business specializing in air conditioning installation and maintenance services. The company targets residential and commercial customers within the UK energy sector. The website is professionally designed with good content quality and clear navigation, supporting the business model of service provision. The technical infrastructure is based on WordPress with WooCommerce, integrating modern analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Mobile optimization and SEO practices are good, though accessibility is basic. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and formal privacy policies. The absence of WHOIS registration data due to domain registration errors introduces some legitimacy concerns, though the website content and structure suggest a legitimate business presence. Overall, the risk is moderate with recommendations to improve security headers, privacy compliance, and domain registration transparency.

C

Coln Valley

colnvalley.co.uk

50

Coln Valley is a UK-based small business specializing in the production and sale of traditionally kiln smoked Scottish salmon and related smoked fish products. The company targets both retail consumers and business clients such as hotels and restaurants, positioning itself as a premium supplier with authentic recipes and traditional smoking techniques. The website supports e-commerce functionality and provides detailed product listings and customer service information. Technically, the site uses legacy JavaScript libraries including jQuery 1.7.1 and integrates Google Analytics and Tag Manager for tracking. While the site is accessible and professionally designed, it lacks modern security headers and uses outdated libraries, which could expose it to vulnerabilities. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The WHOIS data is unavailable due to domain registration errors, raising concerns about domain legitimacy, though the website content itself appears legitimate and professional. Overall, the site demonstrates moderate digital maturity with room for security and compliance improvements.

Y

Yahoo

yahoo.com

72

Yahoo operates as a major global internet services company offering products such as search, email, news, and advertising. This specific page is dedicated to managing user privacy and consent in compliance with GDPR, targeting German users. The company maintains a strong market position with a comprehensive privacy framework and transparent user consent mechanisms. Technically, the site uses modern web technologies including JavaScript and CSS, and integrates analytics via YAHOO.i13n.Rapid. Security is robust with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and user trustworthiness.

The website www.kustommedia.co.nz currently displays an expired Squarespace account placeholder page, indicating that the domain is either not registered or the hosting account has lapsed. There is no accessible business content, contact information, or service descriptions available. The domain WHOIS query returned no registration data, confirming the domain is inactive or unregistered. Technically, the site is built on the Squarespace platform but is non-operational and lacks any meaningful content or user engagement features. Security posture is minimal to non-existent, with no HTTPS or security headers detected and no privacy or cookie policies present. Overall, the site poses a high risk for trust and credibility and is unsuitable for business or customer interaction in its current state.

The website www.modbod.co.nz is currently inaccessible due to rate limiting or blocking mechanisms, as indicated by the minimal HTML content containing the message 'local_rate_limited'. The domain WHOIS query returned no registration data, suggesting the domain may be unregistered or inactive. Consequently, no business, contact, or technical information could be extracted from the site. The lack of HTTPS, security headers, and privacy policies further indicates a very low security posture and digital maturity. Overall, the site appears non-operational or protected by a security mechanism that prevents content access, resulting in a very low trust and legitimacy score.

The website foggydalefarm.co.nz is currently inaccessible due to rate limiting or blocking mechanisms, as evidenced by the minimal HTML content displaying only 'local_rate_limited'. This prevents any meaningful extraction of business, security, or compliance information from the site itself. The domain is registered since 2015 under a New Zealand registrar with standard domain protection statuses, indicating a legitimate registration consistent with a small business farm entity. However, no metadata, contact details, or policy documents are available for review. The lack of accessible content severely limits the ability to assess the company's digital maturity, security posture, or compliance status. Given the blocking, the overall AI score is low, reflecting the inability to perform a comprehensive analysis.

G

G & J Joinery

gjjoinery.co.nz

51

G & J Joinery is a small, local master joiner business based in Glen Eden, Auckland, New Zealand, specializing in high-quality timber joinery for residential, commercial, architectural, and heritage projects. The company emphasizes craftsmanship, customer satisfaction, and guarantees their joinery work for 15 years, positioning themselves as a trusted provider with over 50 years of collective experience. Their website reflects a professional and consistent brand image targeting local clients seeking bespoke timber joinery solutions. Technically, the website is built on the Rocketspark CMS platform, utilizing jQuery, Vue.js, and Typekit fonts, hosted with Cloudfront CDN. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No advanced analytics or tracking tools are detected, indicating a privacy-conscious or minimal tracking approach. From a security perspective, the site uses HTTPS and does not expose sensitive data, but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and contact information appear genuine and professional. Overall, the website presents a trustworthy and professional business front but would benefit from improved privacy compliance, enhanced security headers, and verification of domain registration to strengthen trust and security posture.

T

Home | www.Thai-English-Translation.org

thai-english-translation.org

56

The website thai-english-translation.org is a small-scale service provider focused on Thai-English translation and language resources. Established in 2012, it targets individuals and businesses seeking translation assistance. The site is built on WordPress, leveraging common technologies such as Google Fonts and Cloudflare DNS for hosting and performance. While the site is accessible and uses HTTPS, it lacks comprehensive privacy and terms of service documentation, which impacts its compliance posture. Security measures are basic, with no DNSSEC or advanced security headers detected. Contact options are limited to a contact form without explicit email or phone contacts. Overall, the site presents a basic but functional online presence with moderate trustworthiness and room for improvement in privacy and security practices.

B

Bø volleyballklubb

bovolleyball.no

57

Bø volleyballklubb is a local sports club based in Bø, Vesterålen, Norway, dedicated to promoting volleyball and sandvolleyball activities across all age groups. The club offers a variety of training programs, organizes tournaments, and engages actively with the community through events and social media. Their digital presence is built on WordPress, leveraging common plugins for event management and social media integration. The website is well-structured, mobile-friendly, and provides relevant content for its target audience. However, the absence of a privacy policy and terms of service pages indicates a gap in compliance with data protection regulations. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and vulnerability disclosure mechanisms. WHOIS data is unavailable, limiting domain trust verification. Overall, the site is trustworthy and serves its community well but would benefit from enhanced compliance and security practices.

S

ConnectYourDomain Error | Wix.com

sunna.no

51

The domain www.sunna.no currently resolves to a Wix default error page indicating that the domain is not connected to any active website. There is no accessible business content, metadata, or structured data to analyze. The WHOIS lookup returned no registration data, suggesting the domain may be unregistered, privacy-protected, or the WHOIS service restricts access to registrant information. The technical infrastructure is limited to Wix platform scripts and fonts, with no additional technologies or CMS detected beyond Wix. Security posture cannot be assessed due to lack of HTTPS and security headers information. Overall, the site is non-functional and provides no business or security insights.

The website www.mortensoldtown.com is currently inaccessible beyond a Cloudflare Turnstile security verification page, indicating it is protected by a Web Application Firewall (WAF) that blocks automated or suspicious traffic. No actual business content, contact information, or company details are available on the page, preventing a meaningful assessment of the business or its services. The domain WHOIS data is unavailable, suggesting the domain may be unregistered, newly registered, or privacy-protected, which raises concerns about legitimacy. The technical infrastructure relies on Cloudflare for security and bot mitigation, but no further technologies or CMS platforms are identifiable due to the blocked content. Security posture is moderate given the use of Cloudflare and Content-Security-Policy headers, but the lack of accessible content and policies limits compliance and trust evaluation. Overall, the site is not currently suitable for detailed security, compliance, or business analysis due to access restrictions and missing registration data.

J

Joe's Seafood, Prime Steak & Stone Crab

joes.net

51

Joe's Seafood, Prime Steak & Stone Crab is a well-established restaurant brand operating multiple locations in major US cities including Las Vegas, Chicago, and Washington, D.C. The business focuses on high-quality seafood, prime steaks, and signature stone crab dishes, targeting a general audience seeking upscale dining experiences. The website reflects a professional hospitality business with consistent branding and comprehensive customer engagement features such as gift cards and a frequent diner club. The parent company is Lettuce Entertain You® Restaurants, a recognized entity in the hospitality sector. Technically, the website employs a modern technology stack including React and Next.js frameworks, with integration of Google Tag Manager for analytics and Yoast SEO for search engine optimization. The site is mobile-optimized, accessible, and performs well with fast loading times. Privacy and cookie policies are prominently presented, indicating good compliance with GDPR and related regulations. However, explicit security headers are not detected, and no public security or incident response policies are available, which are areas for improvement. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but the absence of WHOIS data for the domain www.joes.net raises concerns about domain registration transparency. This inconsistency slightly reduces trustworthiness despite the professional appearance and legitimate business operations. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is good but could be enhanced with additional policies and technical controls. The overall risk assessment suggests a reputable hospitality business with minor gaps in domain registration transparency and security policy disclosures. Strategic recommendations include publishing a security policy, adding security headers, and clarifying domain registration details to improve trust and …

S

Stiftelsen hjelp til vanskeligstilte

shtv.no

55

Stiftelsen hjelp til vanskeligstilte is a small Norwegian non-profit foundation focused on providing financial support to elderly and disadvantaged individuals residing in Øygarden Kommune, as well as supporting local organizations and clubs. The website is built on the Wix platform, leveraging standard Wix scripts and polyfills, indicating a moderate level of technical maturity suitable for small organizations. The site content is primarily in Norwegian and targets the local community. From a security perspective, the website uses HTTPS but lacks advanced security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. No contact information or incident response details are visible, limiting direct communication channels. Overall, the site appears legitimate but would benefit from enhanced security and compliance features.

The website at https://entreprise-sicanet.business.site/ currently serves a standard 404 error page indicating that the requested content is not found. Despite the domain being registered since 2017 with a reputable registrar (MarkMonitor Inc.) and having locked domain status, the absence of any accessible content, business information, or contact details severely limits the ability to assess the company's operations or market position. The site lacks any privacy, cookie, or terms of service policies, and no security headers or advanced configurations are present. This results in a low trust and security posture assessment. From a technical perspective, the domain is hosted on Google Domains name servers but does not have DNSSEC enabled, which is a recommended security enhancement. The website's performance and mobile optimization cannot be fully evaluated due to the lack of content. No analytics, advertising, or tracking technologies are detected, indicating minimal digital maturity. Security-wise, the site uses HTTPS but lacks additional security headers and policies, which reduces its security score. The absence of privacy and cookie policies also indicates non-compliance with GDPR and related regulations. Overall, the website is not currently functional or representative of an active business presence, posing a risk to credibility and user trust. Strategic recommendations include restoring website content promptly, implementing comprehensive privacy and cookie policies, enabling DNSSEC, and deploying security headers to improve security posture and compliance. These steps will enhance trustworthiness and provide a foundation for further digital maturity and business growth.

B

Body & Strumpf

body-strumpf.de

58

Body & Strumpf is a German-based e-commerce retailer specializing in hosiery, bodysuits, and related accessories. The company emphasizes its over 45 years of experience and offers free shipping within Germany, targeting consumers interested in quality hosiery products. The website is built on the plentymarkets platform using Vue.js, integrating PayPal for payment processing. The site demonstrates a good level of digital maturity with responsive design and clear navigation, although some accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and published security policies. Overall, the business presents a professional and trustworthy online presence with room for enhanced privacy and security compliance.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Schuller & Lier Transporte Gmbh & Co. KG

schuller-transporte.de

39

Schuller & Lier Transporte Gmbh & Co. KG is a German transportation company established in 1951, specializing in the transport of various goods, container rental, and delivery of construction materials. The company operates a sizable fleet and emphasizes traditional, familial, and efficient service. Their website is professionally designed using WordPress and Elementor, providing clear information about their services and contact details. The site is fully accessible with no blocking mechanisms detected, indicating good digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the business presents a credible and professional front, though WHOIS data is missing, which slightly reduces trustworthiness.

A

A. Kißling Galvanische Werke GmbH

kissling-galvanik.de

40

A. Kißling Galvanische Werke GmbH is a well-established German company specializing in galvanic surface finishing and restoration services since 1932. The company offers a broad range of electroplating and chemical coating services, including hard chrome plating, chemical nickel plating, zinc plating, silver plating, and specialized restoration of vintage car parts. Their market position is strong within the manufacturing sector, supported by certifications such as ISO 9001 and environmental awards. The website is professionally designed using WordPress and Elementor, hosted on a reputable German provider, and provides clear contact information and service descriptions. However, the site lacks a cookie consent mechanism and explicit security headers, which are areas for improvement in privacy compliance and security posture. Overall, the company demonstrates a solid business presence with good technical infrastructure and a trustworthy online footprint.

F

Fahrrad Schill

fahrrad-schill.de

58

Fahrrad Schill is a small local bicycle retailer and service provider based in Germany, specializing in sales and maintenance of bicycles including E-Bikes and children's bikes. The website is built on WordPress using the Gutenberg editor and Go-X theme, providing a modern and responsive user experience suitable for local customers. The site is well-structured with clear navigation and professional branding, although it lacks advanced privacy and security policies. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and cookie consent mechanisms. Overall, the website presents a trustworthy and professional image for a small business but would benefit from enhanced privacy compliance and security best practices.

G

Gaetano Biondo GmbH

gaetano-biondo-stuckateur.de

49

Gaetano Biondo GmbH is a small, specialized master craftsman company based in Saarbrücken, Germany, providing high-quality plastering, stucco, drywall, and thermal insulation services since 2006. The company targets private customers, architects, and businesses within Saarland and nearby regions, emphasizing traditional craftsmanship combined with modern techniques. Their website reflects a professional local business with clear service offerings and contact information but lacks comprehensive privacy and security policies. Technically, the site is built on WordPress with Elementor, showing moderate performance and good mobile optimization but missing key security headers and privacy compliance features. The security posture is adequate with HTTPS enabled but could be improved by adding security headers and privacy mechanisms. Overall, the website is trustworthy and professional but should address compliance and security gaps to enhance user trust and regulatory adherence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Steurer GmbH

steurer-metallbau.de

57

Steurer GmbH is a family-owned metal construction company based in Kehl am Rhein, Germany, specializing in steel and metal constructions including staircases, balconies, railings, and custom metal art. With a heritage spanning three generations, the company emphasizes quality craftsmanship combined with modern technology to deliver durable and functional solutions. The website reflects a professional and consistent brand presence targeting both business and end customers in the manufacturing sector. Technically, the site is built on the Chayns CMS platform using React and modern JavaScript libraries, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Overall, the website is trustworthy and safe, with clear contact information and certifications mentioned, though it would benefit from enhanced privacy and security disclosures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

F

FAHR MINERALÖLE GmbH

fahr-mineraloele.de

44

Fahr Mineralöle GmbH is a small, regionally focused energy supplier based in Gottmadingen, Germany, with a history spanning over 60 years. The company specializes in supplying heating oil, diesel, bio heating oil, lubricants, and AdBlue® to private and commercial customers primarily in the Hegau region. Their business model centers on personalized service and direct delivery, emphasizing reliability and trust. The website reflects this local, customer-centric approach with clear contact information and product offerings. Technically, the website is built on the Contentserver24 CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and FontAwesome Pro. The site is mobile responsive and includes a cookie consent mechanism, indicating awareness of privacy compliance. Performance is moderate, with room for improvement in accessibility and SEO optimization. No advanced frameworks or analytics services are detected. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is minimal but does not raise suspicion, though it lacks detailed registrant information. Overall, the security posture is adequate for a small business but could benefit from enhancements. The overall risk assessment is low, with no critical issues found. Strategic recommendations include implementing security headers, publishing security policies, and enhancing technical SEO and accessibility to improve digital maturity and trust.

R

Restaurant DELPHI

restaurant-delphi.com

41

Restaurant DELPHI is a small, local Greek specialty restaurant located in Karlsruhe, Germany, offering a variety of traditional Greek dishes and beverages in a Mediterranean ambiance. The website is built on WordPress using the Avada theme and includes common plugins such as Yoast SEO and LayerSlider, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, enhancing customer engagement. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and an incident response contact, which could be improved. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be investigated further to ensure trustworthiness. Overall, the website presents a professional and trustworthy front for the restaurant business with room for technical and security enhancements.

S

SFS Maschinen- und Gerätebau GmbH

sfs-brachttal.de

50

SFS Maschinen- und Gerätebau GmbH is a small manufacturing company based in Germany specializing in machinery and device construction, including hydraulic and pneumatic cylinders, welding, repairs, and maintenance services. With over 25 years of experience, the company targets industrial clients requiring specialized manufacturing and repair solutions. The website is built on Joomla CMS and uses common JavaScript libraries such as jQuery and MooTools, indicating a moderately modern technical infrastructure. The site is accessible and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is moderate with presence of CSRF tokens but absence of security headers and unclear SSL configuration. Privacy compliance is weak due to missing privacy and cookie policies. Advertising scripts from a third-party ad network are present, which may impact user privacy. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

R

Raumausstattung Ulrich Thomas

raumausstattung-u-thomas.de

32

Raumausstattung Ulrich Thomas is a small German retail business specializing in interior decoration products such as flooring, wall coverings, fabrics, and sun protection solutions. The website is professionally designed using TYPO3 CMS and targets local homeowners and clients interested in home decoration in Bad Endbach, Germany. The site provides clear contact information but lacks advanced privacy and security features such as cookie consent and security headers. The business appears legitimate with consistent WHOIS data and no suspicious indicators. The website is accessible with no blocking or WAF challenges detected.

A

Alcaldía de Santa Rosa de Osos

santarosadeosos-antioquia.gov.co

58

The website of Alcaldía de Santa Rosa de Osos serves as the official digital portal for the municipal government of Santa Rosa de Osos in Antioquia, Colombia. It provides citizens with access to transparency information, public services, online payments, news, and municipal projects. The site targets local residents and government stakeholders, positioning itself as a key resource for municipal governance and citizen engagement. Technically, the site is built on Microsoft SharePoint with modern frontend technologies such as Tailwind CSS and FontAwesome, ensuring a responsive and accessible user experience. The integration of Google Tag Manager and Analytics indicates a moderate level of digital maturity in tracking and analytics. Security-wise, the site enforces HTTPS and uses some security headers but lacks explicit security policies and incident response information. No critical vulnerabilities were detected in the visible content. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

Impact Research Ltd

impactmr.com

63

Impact Research Ltd is a UK-based market research consultancy specializing in consumer, utilities, services, and sustainability sectors. Established in 2010, the company offers strategic market research and consultancy services including advanced analytics, behavioural science, and sustainability consulting. The firm holds ISO 20252 accreditation and is a recognized MRS company partner, positioning it as a credible player in its market niche. The website reflects a professional and consistent brand image targeting businesses seeking customer-centric and sustainable market insights. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, WPBakery Page Builder, and various slider plugins. SEO is well implemented with Yoast SEO, and the site is mobile optimized with moderate performance. Hosting appears to be via GoDaddy, consistent with the domain registrar information. Analytics are implemented via Google Analytics, with moderate user tracking. Security posture is adequate with HTTPS enabled and domain status protections in place. However, the absence of DNSSEC and security headers indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. No incident response or vulnerability disclosure information is present. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

G

Groupon

groupon.co.uk

66

Groupon UK operates as a prominent online marketplace offering local deals and discounts across restaurants, shopping, events, and travel. The website targets a broad general audience seeking savings on various activities and products. The business model centers on aggregating and promoting discounted offers to consumers, positioning itself as a leading player in the retail and e-commerce sectors within the UK market. The site branding and content quality are consistent and professional, supporting a large-scale enterprise presence.

The website www.iac-recruit.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any meaningful content. No business information, metadata, or structured data is available for analysis. The domain WHOIS query returned no match, indicating the domain may not be registered or WHOIS data is restricted, which raises significant concerns about the legitimacy and trustworthiness of the domain. The technical infrastructure appears minimal with only a Google Fonts external resource loaded. No security headers, SSL configuration, or privacy compliance indicators are present. Overall, the site lacks any visible business or security posture, making it impossible to assess its operational maturity or compliance status.