Security Directory

M

MACK

mackbooks.co.uk

63

MACK is a UK-based global publisher specializing in award-winning books on art, photography, and critical studies. The company operates an e-commerce platform built on Shopify, offering a curated selection of books, special editions, and collections targeting art enthusiasts, academics, and collectors. The website demonstrates a consistent brand presence with professional design and clear navigation, supported by active social media channels. Technically, the site leverages modern web technologies including Shopify's platform, jQuery, Facebook Pixel, and Google Analytics, ensuring a robust digital infrastructure with moderate performance and good mobile optimization. Security measures include HTTPS with DNSSEC enabled and form protection via hCaptcha, though additional security headers and published policies could enhance the security posture. Privacy compliance is currently weak due to the absence of explicit privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and established entity.

S

SPAZIO

spaziomilano.org

52

SPAZIO is a small architecture gallery and bookstore based in Milan, Italy, serving as an independent platform for critical reflection and discussion on architecture, urban design, and related spatial disciplines. The website showcases a rich archive of exhibitions and cultural events dating back to 2017, positioning itself as a niche cultural institution with a focus on thoughtful engagement and storytelling. Technically, the site is built on the Cargo Collective platform, utilizing modern web fonts and Google Tag Manager for analytics, with good mobile optimization and a professional design. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices.

H

Haus der Architektur

hda-graz.at

50

Haus der Architektur (HDA) is a cultural and educational institution based in Graz, Austria, dedicated to promoting architectural culture through exhibitions, lectures, workshops, and networking. The website serves as a comprehensive platform for event information, cooperation projects, and architectural documentation, targeting architects, students, and the general public interested in architecture. The institution holds a strong regional position with partnerships involving government and cultural bodies. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries and frameworks, and is secured with HTTPS and appropriate security headers. However, it lacks visible privacy and cookie policies, which impacts its compliance posture. Overall, the site is professional, content-rich, and trustworthy, with moderate user tracking via Google Analytics.

A

Archi Urbain

archiurbain.be

46

Archi Urbain is a specialized media platform dedicated to architectural and urbanistic content, primarily serving the Belgian market with a focus on Walloon architects and cultural events. The website offers video documentaries, news articles, and an agenda of architecture-related cultural activities, targeting professionals and enthusiasts in the architecture and urban planning sectors. Supported by a network of partners and donations, it operates as a niche media outlet with a small organizational size. Technically, the website is built on WordPress 6.8.3, utilizing common plugins such as MonsterInsights for Google Analytics, Jetpack for stats, and jQuery. The site is mobile-optimized with good SEO practices but lacks some advanced accessibility features. Performance is moderate, and HTTPS is enforced, ensuring secure communication. From a security perspective, the site demonstrates basic best practices such as HTTPS and secure form handling but lacks important security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. The WHOIS data is restricted due to .be domain policies, limiting transparency but the website content and partner ecosystem suggest legitimacy. Overall, Archi Urbain presents a professional and trustworthy platform with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and enhancing accessibility to strengthen user trust and regulatory compliance.

V

Vlaams Architectuurinstituut vzw

vai.be

70

The Vlaams Architectuurinstituut (VAi) is a prominent non-profit cultural institution serving as the primary reference point for architectural culture in Flanders and Brussels. It offers a comprehensive range of services including information dissemination, research, advice, exhibitions, and publications aimed at architects, designers, researchers, and the general public interested in architecture. The organization positions itself as a meeting place and knowledge hub to promote well-designed living environments. Technically, the website is built on modern JavaScript frameworks such as Alpine.js, employs advanced image optimization via Imgix, and integrates Google Analytics and Tag Manager for analytics. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data, though it could improve by adding explicit security headers like CSP and X-Frame-Options. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence. The WHOIS data is restricted by the registry, but the domain appears legitimate and consistent with the organization's profile. Strategic recommendations include enhancing security headers and maintaining regular audits of third-party scripts to sustain a strong security posture.

K

Kunsthalle Bielefeld

kunsthalle-bielefeld.de

48

Kunsthalle Bielefeld is a well-established cultural institution and museum dedicated to modern and contemporary art located in Bielefeld, Germany. The website serves as a comprehensive platform offering information about exhibitions, events, educational programs, and visitor services. It targets a broad audience including art enthusiasts, families, students, and the local community. The institution operates as a non-profit entity with a strong regional presence and a focus on cultural education and engagement. Technically, the website is built on WordPress with modern front-end technologies such as Bootstrap and Swiper.js, ensuring a responsive and accessible user experience. Multilingual support is provided via WPML, and newsletter management is handled through Sendinblue. The site demonstrates good SEO practices and performance, with clear navigation and professional design. From a security perspective, the site employs HTTPS with strong SSL configuration and appropriate security headers. Forms are secured and no sensitive data exposure was detected. However, the site lacks explicit cookie consent mechanisms and does not publish a security policy or incident response contacts, which are areas for improvement. Tracking is minimal and privacy compliance is generally good, supported by a comprehensive privacy policy. Overall, Kunsthalle Bielefeld's website reflects a professional and trustworthy digital presence with strong content quality and technical implementation. Strategic enhancements in privacy consent and security transparency would further strengthen its security posture and compliance standing.

L

L'Ordre des architectes

ordredesarchitectes.be

44

L'Ordre des architectes is the official professional association representing architects in the francophone and germanophone regions of Belgium. The website serves as a comprehensive resource for architects, trainees, and the public, offering directories, news, job listings, and architectural project showcases. The organization holds a strong market position as the authoritative body for architectural practice in Belgium. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and utilizes libraries such as Swiper.js and Redactor editor. The site is hosted by OVH, a reputable provider, and demonstrates good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and formal security policies. Overall, the site is professional, trustworthy, and content-rich, though it could improve privacy policy visibility and security disclosures.

S

Slovenská technická univerzita v Bratislave (STU)

stuba.sk

61

Slovenská technická univerzita v Bratislave (STU) is a leading technical university in Slovakia, providing comprehensive higher education, research, and innovation services. The website serves a broad audience including prospective and current students, staff, alumni, and partners, offering detailed information on faculties, study programs, research activities, and cooperation opportunities. The university maintains a strong market position as a key educational institution in the region. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics with consent mechanisms, Bootstrap framework, and optimized fonts, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and privacy-conscious analytics implementation, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-structured, reflecting the university's credibility and commitment to compliance.

M

Malmö Konsthall AB

malmokonsthall.se

52

Malmö Konsthall AB operates one of northern Europe's largest and most beautiful contemporary art exhibition spaces located in Malmö, Sweden. The organization focuses on providing cultural and artistic experiences to the general public, hosting exhibitions and events that engage visitors with contemporary art. The website reflects this mission with clear branding, relevant content, and a professional presentation. Technically, the website is built on WordPress CMS with a modern tech stack including Yoast SEO Premium for search optimization, Cookiebot for cookie consent management, and event management plugins. The site is hosted by NMU Group, consistent with the domain registration data. Performance and mobile optimization are good, with basic accessibility features implemented. From a security perspective, the site uses HTTPS with a good SSL configuration and employs cookie consent mechanisms to comply with GDPR. However, security headers are not explicitly detected, and there is no visible security policy or incident response information published. No vulnerabilities or suspicious domains were found, indicating a generally secure posture. Overall, the website is trustworthy, professional, and compliant with privacy regulations. Strategic recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and considering a vulnerability disclosure program to further enhance security and trust.

S

Stiftung für die Auszeichnung guter Bauten im Kanton Zürich

architekturpreis.ch

51

The website architekturpreis.ch represents the Stiftung für die Auszeichnung guter Bauten im Kanton Zürich, a foundation dedicated to awarding exemplary architectural projects within the Canton of Zurich. It serves as a platform to promote architectural quality, sustainability, and public engagement through awards and a public voting system. The foundation has a long-standing history of about 25 years, positioning itself as a reputable entity in the regional real estate and architectural sector. Technically, the website is built on WordPress with Elementor and uses modern plugins such as Formidable Forms and interactive 3D flipbook features. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security is well-managed with HTTPS and Google reCAPTCHA integration, although some security headers and explicit privacy and cookie policies are missing, indicating room for compliance improvement. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies and lack of incident response contacts are notable gaps. The WHOIS data aligns well with the website's claims, showing consistent registration details and domain age appropriate for the foundation's history. Overall, the website is trustworthy, professionally maintained, and serves its purpose effectively. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information to improve compliance and user trust.

H

Heureka Group a.s.

produktroku.sk

58

ProduktRoku.sk is a Slovak independent shopping advisory website operated by Heureka Group a.s., focusing on announcing the most popular products of the year 2024 across multiple categories based on consumer preferences. The site serves Slovak internet consumers by providing product rankings and insights to aid purchasing decisions. The business model revolves around e-commerce product popularity and consumer guidance, positioning itself as a trusted source in the Slovak retail market. Technically, the website employs modern JavaScript technologies, Google Analytics, Google Tag Manager, and a GDPR-compliant consent management platform (Didomi). The site is mobile-optimized with good SEO and basic accessibility features. Security posture is strong with HTTPS enforced and consent mechanisms in place, though additional security headers and published security policies could enhance trust. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks direct contact information and terms of service pages. The domain registration aligns well with the business history and branding, indicating legitimacy.

4

4evac

4evac.com

46

4evac presents itself as a provider of advanced voice evacuation and alarm control solutions compliant with EN54-16 and EN54-4 standards, targeting commercial and industrial safety projects. The website is professionally designed using the Wix platform, featuring relevant business content and a clear focus on voice alarm technology. However, the absence of WHOIS registration data for the domain www.4evac.com raises concerns about domain legitimacy and ownership, which impacts overall trust. Technically, the site uses modern web technologies and polyfills to ensure compatibility and performance, but lacks visible security headers and privacy compliance documentation. The security posture is moderate with HTTPS usage and some script hardening, but could be improved with better policy disclosures and contact information. Overall, the site is accessible and safe, but the domain registration ambiguity and missing compliance policies suggest caution and further verification.

H

HÖRBURGER GmbH

hoerburger.de

57

HÖRBURGER GmbH is a German-based specialist company focused on building automation, switch cabinet construction, retail facility management, energy management, and machine automation. The company operates primarily in the energy and manufacturing sectors, serving business clients with integrated technical solutions. It is affiliated with the Bosch Group, enhancing its market position and credibility. The website is professionally designed, content-rich, and targets organizations seeking smart building and energy efficiency solutions. Technically, the site uses TYPO3 CMS, integrates Google Tag Manager for analytics, and employs modern web technologies including service workers. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published incident response policies. Overall, the site reflects a mature digital presence aligned with corporate standards and compliance requirements.

B

Bosch Building Automation GmbH

digicontrol.info

57

DIGICONTROL, a brand under Bosch Building Automation GmbH, specializes in providing comprehensive building automation and management solutions focused on energy efficiency, comfort, and security. The company targets building automation professionals and enterprises requiring scalable and interoperable systems. The website reflects a mature digital presence built on TYPO3 CMS with modern web technologies and good mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are recommended in security headers and incident response transparency. Privacy policies are present and GDPR compliant, but cookie consent mechanisms could be enhanced. Overall, the site projects high business credibility and professionalism with clear contact channels and Bosch brand trust.

B

Bosch Sicherheitssysteme GmbH

boschsecurity.com

69

Bosch Sicherheitssysteme GmbH operates a professional corporate website focused on security and safety systems, particularly fire alarm and detection technologies. The company is positioned as a large enterprise within the technology and manufacturing sectors, serving industrial and commercial clients globally. The website reflects a mature digital presence with consistent branding and comprehensive content about their realignment and product offerings. Technically, the site employs modern web technologies including Google Tag Manager and custom privacy consent management, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a dedicated security policy page are absent. WHOIS data is unavailable from the raw output, which is unusual but the website's professional nature and corporate branding strongly support legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

C

CAF America

cafamerica.org

54

CAF America is a well-established non-profit organization specializing in global grantmaking and philanthropic services. The organization assists corporations, foundations, individuals, and financial advisors to facilitate international giving with compliance and risk mitigation. Their market position is strong, supported by over 30 years of experience and a comprehensive suite of donor services including donor advised funds, legacy giving, and grant management. The website reflects a professional and trustworthy brand with clear messaging and a focus on global impact. Technically, the site is built on WordPress with modern plugins and tracking tools, demonstrating a mature digital infrastructure. Security posture is good with HTTPS, content security policies, and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is accessible, well-structured, and compliant with privacy regulations, making it a reliable platform for its target audience. Strategic recommendations include enhancing security headers, publishing a formal security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

E

Elevate

elevate.ca

63

Elevate is a Canadian impact-driven non-profit organization founded in 2015 that unites innovators to address society's greatest challenges. The organization positions itself as a leader in fostering innovation and social change within Canada, primarily targeting innovators and leaders of change. The website is built on WordPress and employs a modern technology stack including Google Analytics, Microsoft Clarity, PostHog, and various marketing and tracking tools, indicating a mature digital infrastructure. The site is well-structured with SEO optimizations and uses structured data to enhance search visibility. Security posture is generally good with HTTPS enabled and some security best practices observed, though there is room for improvement in security headers and published policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies and consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

D

DRDH Architects

drdharchitects.co.uk

41

DRDH Architects is a London-based architectural practice with a portfolio showcasing cultural, residential, and civic projects across Europe, including Belgium and the UK. The firm targets clients seeking architectural design and masterplanning services, positioning itself as an established mid-sized player in the real estate and architectural sector. The website presents a professional portfolio with clear contact information but lacks modern privacy and security disclosures. Technically, the site relies on legacy JavaScript libraries and does not show evidence of modern CMS or hosting details. Security posture is weak due to missing HTTPS confirmation and security headers, and no privacy or cookie policies are present, which may impact compliance. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content itself appears professional and trustworthy. Overall, the site demonstrates moderate digital maturity but requires improvements in security and compliance to enhance trust and risk posture.

C

Carmody Groarke

carmodygroarke.com

68

Carmody Groarke is a London-based architecture practice established in 2006, specializing in cultural, heritage, and innovative architectural projects. The website serves as a professional portfolio showcasing their key projects, publications, and news updates, targeting clients and stakeholders in the architecture and real estate sectors. The firm positions itself as an established player with a focus on research, innovation, and urban heritage. Technically, the website is built using modern web technologies including React and Next.js, with content managed via Sanity CMS. The site demonstrates good mobile optimization and user experience, though some SEO and accessibility features could be enhanced. Performance is moderate with a well-structured layout and clear navigation. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and security headers, which are recommended to improve security posture. No explicit security policies or incident response information is provided, indicating room for improvement in transparency and compliance. Overall, the website is professional and trustworthy with no signs of malicious content or blocking mechanisms. Privacy and cookie policies are present but basic, and no contact emails or phone numbers are explicitly listed on the homepage. Strategic recommendations include enhancing security headers, adding detailed security and incident response policies, and improving privacy compliance disclosures.

C

Caruso St John Architects

carusostjohn.com

54

Caruso St John Architects is an internationally recognized architecture firm specializing in well-crafted architectural projects, renovations, and exhibition designs. The firm has a strong market position with numerous awards, lectures, and publications highlighting their expertise and influence in the architecture sector. Their website reflects a professional and consistent brand image targeting clients and stakeholders interested in high-quality architectural services. The business operates primarily in the real estate and architectural design industry, based in the United Kingdom, with a domain age consistent with a mature and established practice. Technically, the website employs standard web technologies such as HTML5, CSS3, and JavaScript, hosted by GoDaddy.com, LLC. The site is moderately performant with good mobile optimization and accessibility features. However, there is room for improvement in security configurations, including enabling DNSSEC and implementing security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. The security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. The website content is safe for general audiences, with no adult or questionable content. Overall, the site demonstrates high professionalism and trustworthiness but would benefit from enhanced privacy and security practices to align with best practices and regulatory requirements. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear incident response and vulnerability disclosure channels to strengthen trust and compliance.

C

Caro Communications

carocommunications.com

61

Caro Communications is a well-established London-based communications agency specializing in architecture and design PR. The company has a strong market position within its niche, offering services that connect cultural and design communities. The website reflects a professional brand image with consistent messaging and a clear focus on its target audience of design professionals and lifestyle brands. The business model centers on providing PR and communications services tailored to the architecture and design sectors. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics. The hosting appears to be managed via GoDaddy, inferred from the nameservers. The site demonstrates good mobile optimization and moderate performance, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, indicating awareness of privacy regulations like GDPR. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, DNSSEC, and publishing security policies would enhance the security posture and trustworthiness further.

C

Chris Dyson Architects

chrisdyson.co.uk

51

Chris Dyson Architects is a small, award-winning architecture firm based in London, specializing in diverse projects ranging from private commissions to public buildings and urban planning across Europe and Asia. The firm emphasizes context-driven design, historic building restoration, and innovative modern architecture. Their website showcases a professional portfolio and maintains a consistent brand image, targeting clients seeking architectural services. Technically, the website is built on WordPress with common plugins and integrates Google Analytics for user tracking. The site is mobile-optimized with good SEO practices but lacks some accessibility features and cookie consent mechanisms. Security posture is solid with HTTPS and secure forms, though security headers and incident response information are absent. WHOIS data is unavailable due to domain naming issues, but the website is active and legitimate. Overall, the site reflects a credible and professional business presence with room for security and privacy improvements.

A

Al-Jawad Pike

aljawadpike.com

47

Al-Jawad Pike is a London-based architectural practice specializing in architectural design and project development. The website presents a professional portfolio showcasing various projects, including award-winning and shortlisted works recognized by RIBA. The business appears to be a small-sized firm founded in 2014, with a clear focus on the real estate and architectural sector. The website is well-structured with good design quality and navigation, targeting a general audience interested in architectural services. From a technical perspective, the site uses jQuery 3.4.1 and custom JavaScript, hosted on a domain registered with PDR Ltd. The site shows moderate performance and good mobile optimization but lacks advanced frameworks or CMS indications. SEO optimization is good with proper meta tags and Open Graph data, although accessibility features are basic. Security posture is moderate; the domain uses HTTPS (implied by canonical URLs), and domain transfer is protected. However, DNSSEC is not enabled, and no security headers were detected. There are no privacy or cookie policies, nor incident response or security policy disclosures, which limits compliance and trust. No contact information or forms are present, reducing direct user engagement and support options. Overall, the website is professional and credible but would benefit from enhanced security practices, privacy compliance, and clearer contact channels to improve trust and regulatory adherence.

Bureaux Andrew Phillips is a small architectural firm specializing in contemporary and sustainable architecture, primarily operating in Luxembourg and London. Their website serves as a professional portfolio showcasing their projects, including commercial office buildings and residential architecture. The firm targets clients seeking high-quality architectural and urban design services. Technically, the website is built on Squarespace, leveraging modern web technologies such as jQuery and Typekit fonts, and is hosted on Squarespace's CDN. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security-wise, the site enforces HTTPS with HSTS, employs standard security best practices, and does not expose sensitive data or use vulnerable libraries. However, it lacks explicit privacy policies, terms of service, and incident response information, which are important for compliance and trust. Overall, the website is professional and trustworthy but could improve privacy compliance and security transparency.

A

AKT II

akt-uk.com

60

AKT II is a globally recognized interdisciplinary engineering design firm specializing in structural, civil, infrastructure, façade, bioclimatic, geotechnical, and transport engineering. The company operates multiple offices worldwide, including a recent expansion into Toronto, and is part of the Tyréns Group. Their website reflects a mature, professional business with a strong market position in the built environment sector, emphasizing sustainability through B Corporation certification. Technically, the website is built on WordPress with modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and Hotjar, providing moderate user tracking and good performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit incident response policies suggests room for improvement. The WHOIS data is missing or unavailable, which is unusual for a professional entity and slightly reduces domain trustworthiness. Overall, the website is professional, trustworthy, and well-optimized for its audience.

The website adamarchitecture.com currently serves a security challenge page that blocks direct access to its main content. This challenge includes a CAPTCHA and a JavaScript-based proof-of-work mechanism, indicating the presence of a Web Application Firewall (WAF) or similar security protection. Due to this blocking, no substantive business content, contact information, or policies are accessible for analysis. The domain is mature, registered since 2008 with Tucows Domains Inc., and has domain transfer protections enabled, suggesting legitimate domain management. However, DNSSEC is not enabled, and no security headers or HTTPS enforcement details are visible in the provided data. The website's technical infrastructure includes modern JavaScript features and uses AWS Cloudfront CDN for content delivery. Overall, the site’s security posture is limited by the lack of visible security headers and policies, and the content quality is poor due to the blocking mechanism. Privacy compliance and business credibility cannot be assessed due to lack of accessible information.

A

ACME

acme.ac

70

ACME is a London-based architecture and design firm established in 2007, specializing in contemporary architecture, urban planning, interior design, and product design. The company serves private, corporate, and public clients and has a portfolio of notable projects such as Liverpool Street Station and developments in Berlin and Earls Court. The website is professionally designed and hosted on Shopify, leveraging modern web technologies and integrations such as Vimeo for video content and Google Analytics for tracking. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with cookie consent and GDPR-aligned privacy policy. Overall, the business presents a credible and trustworthy online presence.

W

Wright & Wright Architects LLP

wrightandwright.co.uk

68

Wright & Wright Architects LLP is a London-based award-winning architectural practice specializing in sustainable, contextual, and innovative design primarily for the culture and education sectors. Their portfolio includes Passivhaus-certified projects and a strong commitment to carbon reduction and energy efficiency. The website reflects a professional and well-established firm with a clear focus on quality and sustainability. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Vimeo video integration, Google Tag Manager, and Typekit fonts. It is well-optimized for performance, mobile responsiveness, and accessibility, providing a seamless user experience. The presence of cookie consent management and privacy policies indicates good digital maturity and compliance with privacy regulations. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS lookup failed due to querying a subdomain rather than the domain itself, but the website's professionalism and trust indicators suggest legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility features to further strengthen security posture and user trust.

W

Walters & Cohen Architects

waltersandcohen.com

65

Walters & Cohen Architects is a London-based architectural practice specializing in education, community, and cultural projects. The firm is recognized for its award-winning portfolio and serves clients primarily in the education sector. The website reflects a professional and consistent brand image with a clear focus on showcasing their projects and expertise. The target audience includes educational institutions and community organizations seeking architectural services. Technically, the website employs modern web technologies including Google Analytics and Google Tag Manager for tracking, and uses a CDN for asset delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements could be made, such as implementing security headers and expanding accessibility features. From a security perspective, the site uses HTTPS and has a cookie consent mechanism indicating basic privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern and lowers the domain trustworthiness score, though the active and professional nature of the website suggests legitimacy. No explicit contact or security incident response information is provided, which could be improved. Overall, the website presents a solid digital presence for a small architectural firm with room for enhancements in security posture and transparency. Strategic recommendations include improving WHOIS transparency, adding security headers, and providing clearer contact and privacy information to strengthen trust and compliance.

Orms is a London-based architecture firm focused on delivering ultrapractical, deeply functional, and generous architectural solutions. Their website reflects a professional and modern digital presence built with Nuxt.js and Tailwind CSS, targeting clients seeking architectural design and consultancy services. The firm positions itself as an established player in the real estate sector with a clear focus on quality and client engagement. Technically, the website is well-structured, mobile-optimized, and uses modern frameworks, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data and domain registration details introduces some trust concerns, though the website content and contact information support business credibility. Overall, the site is professional but would benefit from enhanced privacy compliance and security best practices.

M

Metropolitan Workshop

metwork.co.uk

47

Metropolitan Workshop is a well-established architectural and urban planning practice founded in 2005, with offices in London and Dublin. The company offers professional services in architecture, urbanism, and design, targeting clients interested in these sectors. Their website reflects a professional and consistent brand image, with clear navigation and relevant content tailored to their audience. The business operates primarily within the real estate sector and maintains a small company size with a focused market position. Technically, the website is built on WordPress and leverages modern web technologies including Google Analytics, Google Tag Manager, Vimeo embeds, and Google Maps API. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Hosting is provided by GoDaddy, consistent with the domain registrar information. From a security perspective, the website uses HTTPS with an excellent SSL configuration but lacks several recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy and cookie policy present but no explicit cookie consent mechanism. Contact information is comprehensive, but no dedicated security policy or incident response details are available. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers, privacy consent mechanisms, and incident response transparency would enhance the security posture and compliance standing.

M

Maccreanor Lavington

maccreanorlavington.com

61

Maccreanor Lavington is a professional architecture and urbanism firm operating from London and Rotterdam, offering design and planning services. The website presents a well-structured portfolio of projects and clear contact information, targeting clients and professionals in the real estate and urban development sectors. The firm positions itself as an established medium-sized business with a consistent brand and professional online presence. Technically, the website is built on WordPress with modern libraries and CDN hosting, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and anonymized analytics, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

M

Morris+Company

morrisand.company

56

Morris+Company is a professional architecture and design firm with a strong portfolio covering housing, workplace, community, education, healthcare, placemaking, tall buildings, interiors, re-use, hospitality, and mission-critical projects. The firm operates primarily in the UK and Europe, with offices in London and Copenhagen, targeting clients seeking sustainable and innovative architectural solutions. The website reflects a medium-sized, established company with consistent branding and a professional online presence. Technically, the website employs modern web technologies including jQuery, SimpleBar, Google Analytics, Google Tag Manager, and Google Maps API. Hosting of media assets on Amazon S3 indicates a scalable infrastructure. The site is mobile-optimized with good design quality and navigation, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No vulnerability disclosures or incident response contacts are provided. WHOIS data is unavailable due to privacy protection, which is common and likely justified for this business type. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

J

Jamie Fobert Architects

jamiefobertarchitects.com

47

Jamie Fobert Architects is a reputable architectural firm specializing in innovative design across residential, retail, and arts sectors. The company has a strong market presence with a portfolio of completed and ongoing projects internationally, including high-profile cultural and retail spaces. The website serves as a professional portfolio showcasing their work and expertise. Technically, the website is built on WordPress with Yoast SEO for optimization and uses modern JavaScript libraries for interactive elements. Google Analytics is implemented for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security transparency. Overall, the domain is well-established and trustworthy, supporting the firm's credibility.

H

Hopkins Architects

hopkins.co.uk

48

Hopkins Architects is an established architectural practice with over 40 years of experience, focusing on clear and logical design, material honesty, and contextual respect. The website showcases a broad portfolio of architectural projects across various sectors including education, healthcare, hospitality, and civic culture. The technical infrastructure employs modern JavaScript libraries such as jQuery, HeadJS, and lazy loading techniques, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, and no contact emails or phone numbers are explicitly provided on the homepage, which may impact user trust and compliance. Security posture is moderate with no detected security headers and incomplete WHOIS data due to domain naming rules, though the site is accessible without WAF or blocking mechanisms. Overall, the site is professional and content-rich but would benefit from enhanced privacy compliance and security best practices.

H

Hawkins\Brown

hawkinsbrown.com

51

Hawkins\Brown is a UK-based architecture firm focused on societal impact and human-centered design. The website presents a professional and modern digital presence with rich content including conversations, projects, and thought leadership. The firm holds a B Corp certification, indicating commitment to social and environmental performance. Technically, the site is built on WordPress with modern JavaScript and analytics integrations, optimized for performance and accessibility. Security posture is good with HTTPS enforced and secure forms, though explicit security policies and incident response details are absent. The lack of WHOIS data for the domain is a notable anomaly, reducing trust slightly despite the professional site content. Overall, the website reflects a mature business with strong branding and digital maturity.

D

David Chipperfield Architects

davidchipperfield.com

63

David Chipperfield Architects is a well-established international architectural practice founded in 1985, with offices in multiple global cities. The company provides architectural design and related cultural and research services, targeting clients interested in high-quality architectural projects. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about projects and news. Technically, the site uses modern web standards, is mobile optimized, and employs privacy-focused analytics. Security posture is good with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professionally managed, supporting the company's market position as a leading architectural firm.

A

Allies and Morrison

alliesandmorrison.com

71

Allies and Morrison is a London-based architectural and urbanist practice focused on designing beautiful buildings and shaping enduring places with attention to detail and context uniqueness. The firm serves clients interested in architecture, urban planning, and sustainable development, positioning itself as a reputable medium-sized player in the real estate and design sector. Their website showcases a comprehensive portfolio of projects, research, and talks, reflecting a mature and professional business model. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Imgix for image delivery, and JavaScript ES6, ensuring fast performance and excellent mobile optimization. The site is well-structured with good SEO and accessibility features, although no CMS or hosting provider details are explicitly identified. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling for newsletter subscriptions. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No vulnerability disclosures or incident response contacts are published, representing an area for improvement. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's credibility given the quality of content and contact transparency. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

Z

Zaha Hadid Architects

zaha-hadid.com

51

Zaha Hadid Architects is a globally recognized architecture and design firm with a large portfolio of projects across multiple sectors including cultural, corporate, and residential. The website serves as an interactive archive showcasing their work and provides contact information and social media links. Technically, the site is built on WordPress with jQuery and includes embedded Vimeo videos and Mixpanel analytics for user tracking. The security posture is generally good with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal privacy or cookie policies. The WHOIS data is missing or unavailable, which is unusual and warrants further investigation. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

F

Foster + Partners

fosterandpartners.com

68

Foster + Partners is a globally recognized architecture and design firm specializing in sustainable architecture, urbanism, engineering, and design services. Founded in 1967 by Norman Foster, the company positions itself as a leader in innovative and sustainable building solutions. The website reflects a professional and modern digital presence, leveraging advanced web technologies such as Angular, Google Analytics, Hotjar, and CookiePro for user experience and compliance. The site is well-structured, mobile-optimized, and provides a seamless user experience with clear branding and relevant content focused on their core services. From a technical perspective, the website employs modern frameworks and tracking tools, indicating a mature digital infrastructure. Hosting appears to be on Microsoft Azure, and the site uses HTTPS with good SSL configuration. However, some security best practices such as explicit security headers and published security policies are missing. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is generally good with HTTPS and consent management, but the absence of WHOIS data and lack of published security or incident response policies reduce overall trust slightly. No vulnerabilities or exposed sensitive data were detected. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the website is professional and trustworthy from a business and technical standpoint, but improvements in transparency regarding privacy, security policies, and domain registration information are recommended to enhance credibility and compliance.

Eric Parry Architects Ltd is a well-established architectural practice founded in 2000, with studios in London and Singapore. The company specializes in sustainable and creative architectural design, serving clients in commercial, cultural, healthcare, and hospitality sectors. Their website reflects a professional and consistent brand image, showcasing a portfolio of projects and providing clear contact information. The business targets clients seeking high-quality architectural services and maintains a reputable market position with an international presence. Technically, the website is built on WordPress with modern JavaScript libraries such as Glide.js and LazySizes, offering good mobile optimization and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and published security policies. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

D

Derwent London

derwentlondon.com

67

Derwent London is a prominent British property investment and development company headquartered in London, recognized as the largest London office-focused Real Estate Investment Trust (REIT) and a constituent of the FTSE 250 Index. The company manages a substantial portfolio of commercial real estate valued at £5.2 billion as of mid-2025, focusing on long-term value creation through property regeneration. Their services include office and retail space leasing, flexible furnished workspaces, and community-focused DL/Members lounges. The website reflects a mature digital presence with comprehensive content targeting investors, tenants, and partners. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and cookie consent management, ensuring compliance with privacy regulations such as GDPR. The site is mobile-optimized, accessible, and SEO-friendly, although no CMS or hosting provider details are explicitly identified. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with granular controls. However, no explicit security headers were detected in the HTML source, and there is no published security policy or vulnerability disclosure program. The absence of WHOIS data limits domain trust verification, but the professional presentation and multiple industry certifications support legitimacy. Overall, Derwent London’s website demonstrates strong business credibility and privacy compliance, with room for improvement in security best practices and transparency. The domain’s WHOIS data absence warrants monitoring but does not currently undermine the site’s trustworthiness.

H

Herbert Smith Freehills Kramer

herbertsmithfreehills.com

69

Herbert Smith Freehills Kramer is a top 20 global law firm formed by the merger of Herbert Smith Freehills and Kramer Levin, boasting over 2,700 lawyers across 26 offices worldwide. The firm specializes in litigation, regulatory, and transactional legal services across multiple key sectors including energy, banking, real estate, and transportation. Their website reflects a high level of professionalism with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on Magnolia CMS and incorporates modern web technologies such as Google Tag Manager and SproutVideo for media delivery, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, warranting further investigation. Overall, the site demonstrates a mature digital presence suitable for an enterprise-level law firm.

A

Almacantar

almacantar.com

46

Almacantar is a property investment company specializing in large-scale, complex developments in Central London. The website presents a professional image with detailed information about key properties and team members, targeting property investors and real estate professionals. The business model focuses on property investment and development, positioning itself as a specialist in the London real estate market. The domain is mature, registered since 2011, and the website uses HTTPS with Cloudflare DNS, indicating a stable technical infrastructure. Technically, the website employs common JavaScript libraries such as jQuery and FitText, and integrates Vimeo for video content. Google Analytics is used for visitor tracking via Google Tag Manager. The site is moderately optimized for performance and mobile devices, with good SEO practices evident in meta tags and Open Graph data. However, accessibility features are basic, and no CMS or advanced frameworks are detected. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and important security headers like Content-Security-Policy. No privacy or cookie policies are present, which is a compliance gap. No incident response or vulnerability disclosure information is found. The absence of contact emails and phone numbers on the site reduces transparency. Overall, the security posture is moderate but could be improved with better policies and headers. The overall risk is moderate with no critical issues detected. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response information to enhance trust and compliance.

B

Ben Chernett

benchernett.com

56

Ben Chernett is a freelance web developer operating primarily in the UK, with over 10 years of experience. The website serves as a professional portfolio showcasing bespoke web development services, primarily using WordPress as a CMS. The business targets UK-based organizations seeking custom web solutions and ongoing site maintenance. The site demonstrates a solid market position with a portfolio of reputable clients in architecture and cultural sectors. Technically, the website is built on modern frameworks such as Next.js and React, with Cloudflare providing DNS and likely CDN services, resulting in fast performance and excellent mobile optimization. Security posture is generally good with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and security headers, which are recommended improvements. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is professional, trustworthy, and technically sound, but could improve in privacy and security policy transparency.

R

Robly Ltd.

robly.com

68

Robly Ltd. is a well-established company specializing in email marketing automation solutions targeted primarily at small and medium-sized businesses. The company offers a comprehensive suite of services including proprietary technologies like OpenGen and Robly AI, along with features such as landing page builders, email templates, A/B testing, and integrations with popular platforms like Shopify and WordPress. The website demonstrates strong market positioning supported by numerous customer testimonials and industry awards, reflecting a reputable and trusted brand in the email marketing space. Technically, the website employs a modern technology stack with extensive use of analytics and marketing tools, hosted on AWS infrastructure, and built with responsive design principles to ensure good user experience across devices. Security posture is solid with HTTPS enforced and domain transfer protections in place, though there is room for improvement by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a cookie consent mechanism despite extensive tracking technologies. Overall, the website is professional, trustworthy, and well-optimized, with minor gaps in privacy and security transparency that should be addressed to enhance compliance and user trust.

L

LPO Arkitekter

lpo.no

60

LPO Arkitekter is Norway's largest independent architectural firm specializing in architecture for cities, places, buildings, and spaces with a strong focus on innovation, sustainability, and inclusive design processes. The company positions itself as a leader in the Norwegian architectural market, serving a broad audience including municipalities, developers, and the general public interested in urban development. Their business model centers on delivering comprehensive architectural and urban planning services with an emphasis on human-centric solutions. Technically, the website employs modern web technologies such as jQuery, Google Analytics, Google Tag Manager, and Plausible Analytics for tracking, alongside lazy loading for performance optimization. The site is mobile-optimized and features good SEO practices, although some accessibility features could be enhanced. The infrastructure appears stable and professionally maintained, with no signs of outdated or vulnerable libraries. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide a visible cookie consent mechanism or detailed privacy and security policies, which are important for GDPR compliance. The WHOIS data is not publicly available due to Norid's policies, but the domain and website content align with a legitimate and professional business entity. Overall, the website presents a strong business credibility and technical foundation but would benefit from improved privacy compliance and security best practices to enhance trust and regulatory adherence.

K

Kulturdirektoratet

kulturradet.no

70

Kulturdirektoratet is a Norwegian government agency under the Ministry of Culture and Equality, dedicated to promoting arts and culture across Norway. It administers cultural grants, provides guidance to applicants, and serves as the secretariat for several independent cultural bodies. The website reflects a professional government presence with comprehensive information and resources for cultural stakeholders. Technically, the site uses modern technologies including Craft CMS, Alpine.js, and privacy-focused Matomo analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and well-maintained, serving its public sector mission effectively.

A

Add arkitekter AS

addarkitekter.no

65

Add arkitekter AS is a Norwegian architectural firm established in 1998, specializing in architectural design and urban development. The company recently rebranded to Add arkitekter and serves clients primarily in Norway, including municipalities and private sector entities. Their website reflects a professional and consistent brand image with clear contact information and relevant project articles. Technically, the site is built using modern frameworks such as Next.js and React, with some creative use of p5.js for visual effects. The site is mobile optimized and has good SEO practices, though accessibility could be improved. From a security perspective, the website uses HTTPS as indicated by the Open Graph URL, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WHOIS data is publicly available due to .no domain privacy restrictions, which is typical but reduces transparency. No signs of malicious content or tracking scripts were found, indicating a low-risk profile. However, the absence of privacy and cookie policies and security headers are notable gaps. Overall, the website is professional and trustworthy from a business perspective but could improve its security posture and privacy compliance to meet modern standards. The domain registration information is not publicly accessible, which is common for Norwegian domains but should be considered when assessing transparency.