Security Directory

B

Bestattungsinstitut H. Schollmann GmbH

bestattungen-schollmann.de

56

Bestattungsinstitut H. Schollmann GmbH is a small, local funeral service provider based in Duisburg, Germany. The company offers compassionate support and comprehensive funeral services including pre-planning and grief counseling. Their website is well-structured, informative, and targets individuals and families dealing with bereavement or planning ahead. The business holds recognized industry certifications and memberships, enhancing trust and credibility. Technically, the website is built on the AmphiCMS platform using standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. It is mobile-optimized with good navigation and SEO practices. However, there is room for improvement in security headers and explicit security policies. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. Security posture is moderate with HTTPS implied but no explicit security headers found in the provided data. The site includes a cookie consent banner and a privacy policy compliant with GDPR, but lacks a terms of service and incident response information. No WAF or blocking mechanisms were detected, and the WHOIS data aligns with a legitimate small business. Overall, the website presents a professional and trustworthy digital presence suitable for its sensitive service area. Strategic improvements in security headers, incident response transparency, and enhanced technical performance could further strengthen its posture and user trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Leder Delheid is a small, established German business specializing in shoemaking, orthopedic shoe technology, and leather goods, operating since 1926. The website presents a professional and consistent brand image targeting shoemakers, orthopedic specialists, and hobby craftsmen. Technically, the site is built on WordPress using jQuery and the Nicepage plugin, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking security headers and formal privacy or cookie policies, indicating compliance gaps. No contact emails or phone numbers were explicitly found in the provided content, limiting direct customer engagement. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance measures.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Sven Kadenbach Installationen

meisterbetrieb-kadenbach.de

44

Meisterbetrieb Kadenbach is a small German company specializing in modern sanitary and heating installations, including solar, gas, and heat pump systems. The company emphasizes quality workmanship and customer service, targeting local homeowners and businesses. The website is professionally designed using WordPress with popular plugins such as Elementor and LayerSlider, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though security headers and incident response information are lacking. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Overall, the website reflects a legitimate and credible small business with a solid digital presence.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Autodienst Wecker GmbH

autodienst-wecker.de

42

Autodienst Wecker GmbH is a well-established local automotive service provider based in Dringenberg, Germany, with over 40 years of operational history. The company offers a range of services including vehicle repairs, sales of new and used cars, rental vehicles, and a car wash facility. Their business model focuses on serving local customers with personalized services such as a pickup and delivery option. The website reflects a professional and consistent brand presence, targeting local vehicle owners and drivers. Technically, the website is built on WordPress 6.9.5 with common plugins like All in One SEO, Contact Form 7, and a cookie consent plugin. The site uses HTTPS with a good SSL configuration and includes modern JavaScript libraries such as jQuery and Modernizr. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. Hosting appears to be provided by rzone.de based on nameserver data. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating awareness of privacy regulations. However, explicit security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The site uses Google Analytics for tracking with a moderate user tracking level and good privacy compliance. Overall, the website is trustworthy and professional with a strong local business focus. Recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to improve security posture further. The absence of contact emails on the site is noted but phone and physical contact details are clearly provided.

T

Teichmann Umzüge GmbH

teichmann-umzuege.de

51

Teichmann Umzüge GmbH is a German moving company specializing in affordable and comprehensive relocation services for private individuals and businesses. With offices in Aue-Bad Schlema, Auerbach, and Zwickau, they serve regional clients and also offer European long-distance moves. Their service portfolio includes private moves, senior moves, office relocations, household clearances, furniture assembly, packing, and storage solutions. The website is professionally designed using WordPress with common plugins and themes, providing a good user experience and clear navigation. Contact information is prominently displayed, enhancing business credibility. Technically, the website uses a standard WordPress CMS with WPBakery Page Builder and jQuery libraries. The site is HTTPS secured with no detected WAF or blocking mechanisms, indicating good accessibility. However, the absence of security headers and cookie consent mechanisms suggests room for improvement in security and privacy compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. Security posture is moderate with HTTPS enabled but lacking advanced headers and explicit incident response policies. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the website is trustworthy and professional but could enhance security and privacy features to align with best practices and regulatory requirements. Recommendations include implementing security headers, adding a cookie consent banner, publishing a security policy and incident response contacts, and considering vulnerability disclosure mechanisms to improve transparency and trust.

D

Dr. Rösler & Weiss KG

roepack.de

42

Dr. Rösler & Weiss KG is a medium-sized German manufacturer specializing in sustainable packaging solutions made from paper, cardboard, foil, and plastic. With over 70 years of experience, the company emphasizes resource conservation and circular economy principles, targeting businesses requiring environmentally friendly packaging. The website is built on Joomla CMS with modern frameworks and provides a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers and explicit policies could be improved. The domain registration aligns well with the business identity, indicating legitimacy and trustworthiness.

Jackson County MO operates an official government website providing comprehensive services and information to residents, businesses, and visitors within Jackson County, Missouri. The site serves as a central hub for property tax payments, public records access, job opportunities, parks and recreation, permits, municipal court information, and legislative updates. It targets a broad audience including local citizens, government officials, and business entities, positioning itself as a trusted local government authority. The business model is focused on public service delivery and community engagement. Technically, the website is built on the Granicus OpenCities CMS platform with ASP.NET WebForms backend, leveraging jQuery, Google Maps API, and various analytics tools such as Matomo, Microsoft Clarity, and Google Analytics. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although performance is moderate. The presence of multiple language options enhances accessibility for diverse users. From a security perspective, the site enforces HTTPS and uses secure external scripts. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and should be implemented to enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism, though GDPR compliance is not explicitly indicated. The WHOIS data is unavailable due to query failure or privacy protection, which is common for government domains and does not detract from the site's legitimacy. Overall, Jackson County MO's website is a well-structured, professional government portal with a solid security posture and good user experience. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen trust and complian…

N

Nixon Peabody LLP

nixonpeabody.com

77

Nixon Peabody LLP is a large, global law firm offering sophisticated legal solutions to businesses across the United States, Europe, and Asia. With over 650 attorneys, the firm provides comprehensive legal services including corporate law, litigation, and regulatory compliance. The website reflects a professional and well-established business with a clear focus on serving corporate clients worldwide. The firm's market position is strong, supported by extensive practice areas and a global presence. Technically, the website is built on modern frameworks such as Next.js and React, ensuring fast performance, mobile responsiveness, and good accessibility. The site employs HTTPS with strong security headers, indicating a mature security posture. Privacy and cookie policies are present and comprehensive, demonstrating compliance with GDPR and other privacy regulations. However, explicit security policies and incident response information are not publicly available, which could be improved. Security-wise, the site shows good practices with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data is a concern for domain legitimacy and trust but does not detract significantly from the overall professional presentation. The site does not employ advertising or affiliate marketing, focusing solely on professional services. Overall, Nixon Peabody LLP's website is a high-quality, secure, and privacy-conscious platform that effectively supports the firm's business objectives. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and ensuring WHOIS data is accurate and publicly available to enhance trust.

Aaron Industries is a well-established manufacturer and distributor specializing in recycled polymer compounds, including post-consumer and post-industrial resins such as polyethylene, polypropylene, polystyrene, and elastomers. With over 30 years of expertise, the company offers a range of services including custom compounding, toll compounding, blending, pulverizing, and resin distribution. Their focus on sustainability and cost-effective recycled materials positions them as a leader in their niche market. The website reflects a professional and consistent brand image targeting manufacturers and businesses requiring recycled polymer materials. Technically, the website is built on WordPress using the Elementor framework, leveraging modern JavaScript libraries such as jQuery, Bootstrap, Owl Carousel, and Swiper for enhanced user experience. Hosting and DNS are managed via Cloudflare, providing CDN and security benefits. The site is mobile-optimized with good performance and basic accessibility features, though SEO and privacy compliance could be improved. From a security perspective, the site enforces HTTPS and has domain-level protections such as EPP status locks. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. No privacy, cookie, or terms of service policies are found, indicating gaps in compliance. No incident response or vulnerability disclosure information is provided, which could be a concern for security transparency. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from enhanced privacy compliance, security headers, and explicit policies to improve user trust and regulatory adherence.

B

Banc of California

bancofcal.com

70

Banc of California is a relationship-focused, full-service business bank established in 2013, offering financial solutions aimed at maximizing operational efficiency for business clients. The website reflects a professional banking institution with a clear market position as a premier business bank. The technical infrastructure leverages modern web technologies including Zurb Foundation 6 framework, NitroPack for performance optimization, and Google Tag Manager for analytics and marketing. Hosting is provided by Cloudflare, ensuring reliable and secure delivery. Security posture is solid with HTTPS enabled and domain transfer protections in place, though there are gaps in privacy compliance and incident response transparency. Overall, the site is well-designed, mobile-optimized, and trustworthy, but would benefit from enhanced privacy and security disclosures.

T

TD SYNNEX USA

techdata.com

76

TD SYNNEX USA is a large enterprise-level technology distribution company specializing in IT distribution, services, and consulting to help businesses scale and lead in technology. The website presents a professional and consistent brand image, targeting IT professionals, resellers, and service providers in the United States. The digital infrastructure is built on WordPress with modern frameworks like Bootstrap and SEO tools such as Yoast, indicating a mature technical setup. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable, which slightly impacts trust but the website content and branding suggest legitimacy. Overall, the site is well-designed and functional with room for improvement in privacy and security transparency.

Ply Gem is a leading North American manufacturer of residential exterior building materials, offering a comprehensive portfolio of products designed for various home exterior needs. The company operates under the parent organization Cornerstone Building Brands, reflecting a strong market position in the manufacturing sector. Their website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Bootstrap framework, and extensive use of analytics and marketing tools including Google Tag Manager and FullStory. Privacy and cookie consent mechanisms are robust, indicating compliance with GDPR and other privacy regulations. However, the absence of detailed WHOIS data and explicit security policies suggests areas for improvement in transparency and security communication. Overall, the website is professional, well-branded, and trustworthy, serving a broad audience of builders, contractors, and homeowners.

Forever Warm Homes is a small business specializing in the design and manufacture of energy efficient timber frame homes and commercial buildings, serving clients primarily in Ireland and the UK Mainland. Their offerings include homes, apartments, hotels, nursing homes, offices, and schools, supported by in-house design and technical services. The website content is focused and relevant to their niche market, though the design is somewhat dated and lacks modern mobile optimization. Technically, the website uses basic JavaScript and Google Analytics for tracking but lacks modern CMS or frameworks. There is no evidence of HTTPS enforcement or security headers, which presents a security risk. The absence of privacy and cookie policies indicates poor compliance with GDPR and related regulations. The WHOIS data is missing, raising concerns about domain registration legitimacy. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure information is provided. The website does not collect user data via forms, reducing exposure but also limiting engagement. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and protect users. Strategic recommendations include implementing HTTPS, adding comprehensive privacy and cookie policies, improving mobile responsiveness, and clarifying domain registration status to improve legitimacy and trustworthiness.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Apple Orchard Construction

appleorchardgroup.ie

46

Apple Orchard Construction is a well-established commercial construction company operating primarily in Ireland and the UK, with nearly two decades of industry experience since its founding in 1999. The company offers a broad range of services including commercial construction, building maintenance, refurbishments, fit outs, and specialist trades such as metal studding and joinery. Their website reflects a professional business with a skilled workforce and a portfolio of notable projects, positioning them as a reliable mid-sized player in the construction sector. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a modern and maintainable digital infrastructure. The site is mobile-optimized and provides good SEO metadata and structured data, although performance is moderate and accessibility features are basic. No advanced analytics or tracking services were detected, suggesting a minimal data collection approach. From a security perspective, the site uses HTTPS and a security plugin (WP Simple Firewall), but lacks visible security headers such as CSP or HSTS in the provided data. No exposed sensitive data or obvious vulnerabilities were found, but improvements in security header implementation and form protections are recommended. The absence of privacy and cookie policies is a compliance gap, especially under GDPR regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. The lack of WHOIS data limits domain trust verification, but the business content and contact information support legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and conducting regular security audits to maintain a strong security posture.

The website www.wcr-uk.co.uk currently serves only as a security verification page implementing Google reCAPTCHA v3 to prevent automated access. There is no accessible business content, contact information, or policies available on the site. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain is either invalid or misconfigured. This severely limits the ability to assess the business legitimacy or operational maturity. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation. Overall, the site is effectively blocked by bot protection mechanisms, resulting in a low AI score and limited analysis capability.

The website represents a Chinese energy sector company focused on natural gas infrastructure investment and operation, including LNG liquefaction, pipeline construction, and urban gas supply projects. The company appears to be medium-sized with a regional focus in China, headquartered in Chongqing. The website content is primarily in Chinese and provides business descriptions and project showcases. Technically, the site uses jQuery and slick carousel libraries with a full-page scrolling interface but lacks modern CMS or advanced frameworks. Security posture is weak due to absence of HTTPS enforcement, missing security headers, and no visible privacy or cookie policies. The domain WHOIS data is unavailable, raising concerns about domain legitimacy and trustworthiness. Overall, the site provides basic business information but lacks critical security and compliance features, limiting its credibility and user trust.

HBSL Accountants is a small UK-based accounting firm specializing in providing a comprehensive range of accountancy services including company formations, bookkeeping, VAT returns, and end of year accounts. The firm targets individuals and small businesses primarily in South Hampshire and surrounding areas, emphasizing personalized service and compliance support. The website reflects a professional and focused business model with clear contact details and relevant service descriptions. Technically, the site uses standard web technologies such as jQuery, Bootstrap, and Font Awesome, delivering a moderate performance with good mobile optimization and basic SEO. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The WHOIS data is unavailable due to domain registration issues flagged by Nominet UK, which raises concerns about domain legitimacy or configuration but does not directly impact the professional presentation of the business online. Overall, the website is functional and trustworthy from a user perspective but requires enhancements in security posture and compliance documentation.

Dow Jones Architects is a small architectural firm specializing in heritage, cultural, residential, and masterplanning projects. The website presents a professional portfolio showcasing various projects such as embassies, schools, and museums, targeting clients seeking specialized architectural services. The technical infrastructure includes standard web technologies such as jQuery and Google Analytics, hosted on domain control servers with no CMS detected. While the website is functional and moderately optimized for mobile, it lacks comprehensive privacy and cookie policies, and no contact information is directly visible in the provided content. Security posture is basic with no DNSSEC and missing security headers, though HTTPS usage is implied by external script sources. Overall, the domain is well-established and consistent with the business history, indicating legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

J

James Innes & Son

jiandson-stonemasons.com

58

James Innes & Son is a small, specialized stonemasonry company based in Scotland, with a long heritage dating back to 1850. The company focuses on the conservation and restoration of historic buildings, targeting property owners and heritage custodians in the Scottish region. The website is professionally designed using the Wix platform, featuring moderate performance and good mobile optimization. However, the site lacks visible contact information and privacy-related policies, which impacts user trust and compliance. Security posture is adequate with HTTPS enabled, but the absence of security headers and incident response details suggests room for improvement. The domain WHOIS data is missing or inaccessible, raising concerns about domain registration legitimacy despite the professional online presence. Strategic recommendations include adding privacy and cookie policies, improving contact transparency, and addressing domain registration clarity to enhance trust and compliance.

T

The Brand Surgery

thebrandsurgery.co.uk

56

The Brand Surgery is a specialized branding agency focused on healthcare, heritage, and community sectors, delivering creative brand strategies that foster trust, clarity, and connection. The website reflects a niche market positioning with professional design and consistent branding. Technically, the site is built on WordPress with WooCommerce and Divi theme, integrating modern marketing and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks advanced security headers and formal security policies. WHOIS data is unavailable due to domain naming rules violation, which raises some legitimacy concerns, though the website content and presentation suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

W

Woodcroft Vets

woodcroftvets.com

70

Woodcroft Vets is a well-established veterinary care provider serving the Greater Manchester and Stockport areas since 1976. The company operates multiple branches and offers a comprehensive range of services including veterinary hospital care, pet health plans, insurance, referrals, and emergency services. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at pet owners in the region. Technically, the site is built on WordPress and integrates modern analytics and consent management tools, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, but the website content and business presence suggest legitimacy. Overall, the site is trustworthy and professionally maintained, with room for technical and security enhancements.

P

Pan Autos

panautos.co.uk

38

Pan Autos is a small, family-run automotive service business based in Harpenden, UK, with over 40 years of local presence. They offer a comprehensive range of vehicle services including tyres, MOTs, servicing, exhausts, brakes, clutches, air conditioning, and electronic fault diagnosis. The website reflects a traditional local business model focused on serving vehicle owners in the Harpenden area with honest and competitively priced services. The market position is that of a trusted local premier tyre retailer and service provider with longstanding customer relationships. Technically, the website is built on basic HTML, CSS, and JavaScript with legacy Flash content still present. Google Analytics is used for visitor tracking, but there is no visible cookie consent or privacy policy, indicating low privacy compliance. The site lacks modern CMS or frameworks and shows basic mobile and accessibility optimization. Performance is moderate but could benefit from modernization and removal of deprecated technologies. From a security perspective, the site does not show evidence of HTTPS or security headers, and no privacy or cookie policies are present. The use of Flash is a security risk, and the absence of secure forms or data protection policies indicates a low security posture. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional appearance of the website content. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, removing deprecated technologies, and improving security headers and compliance documentation.

Solvology is a UK-based business solutions provider specializing in consulting, business mentoring, executive coaching, non-executive directorship, interim management, and access to finance and shared services. The company targets a broad audience ranging from SMEs to multinational corporations, emphasizing a cooperative and referral-driven approach to delivering sustainable business solutions. The website reflects a professional and consistent brand image with clear service offerings and a focus on business clients. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Matomo analytics, and implements cookie consent mechanisms via Iubenda. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data for the domain is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in security and compliance documentation.

V

Venturebright

venturebright.co.uk

65

Venturebright is a specialized consulting firm focused on creating and finding high-growth technology ventures for large corporations. Established in 2009, the company targets corporate leaders seeking innovation and adjacent market growth. Their key services include growth strategy, innovation programs both outside-in and inside-out, and building new ventures through agile pilots and experiments. The website presents a professional and consistent brand image, showcasing reputable global clients and a clear business focus. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Analytics, Lottie animations, and jQuery. Hosting is managed via Webflow's CDN with DNS on Azure. The site is mobile optimized with good SEO and accessibility basics, though performance is moderate. Privacy and cookie policies are present but lack advanced consent mechanisms. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and security headers. No explicit security or incident response policies are published. Analytics and marketing tools track user behavior moderately, with no evident privacy compliance beyond basic policies. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and professional with a solid business credibility score. Security posture and privacy compliance could be improved by adding security headers, enabling DNSSEC, and publishing detailed security and incident response policies. Contact information is limited to a contact form and social media presence on Twitter.

O

One Touch Laser Kent | Laser Cutting & Engraving Experts

onetouchlaser.com

55

The website www.onetouchlaser.com appears to be a business site built on the Wix platform, likely related to laser technology or services. However, the content provided is minimal and mostly technical, with no clear business description, contact information, or trust signals. The domain WHOIS data is unavailable, which raises concerns about the legitimacy and registration status of the domain. Technically, the site uses Wix's standard scripts and Sentry for error monitoring but lacks advanced security headers and privacy compliance indicators. Overall, the security posture is weak, and the site lacks essential compliance and business credibility elements. Strategic recommendations include establishing clear privacy and cookie policies, adding contact and incident response information, improving security headers, and verifying domain registration details to enhance trustworthiness.

The website www.pbscreative.co.uk is currently inaccessible beyond a security verification challenge page that employs Google reCAPTCHA v3 and Cloudflare Insights beacon. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to content. Due to this, no business-related content, contact information, or policies are accessible for analysis. The WHOIS lookup for the domain failed with an error citing domain naming rules violations, suggesting potential issues with domain registration legitimacy or configuration. The technical infrastructure shows use of modern frontend libraries and security tools but lacks visible security headers or SSL configuration details. Overall, the site’s security posture is limited by the blocking mechanism, and the lack of accessible content severely restricts comprehensive evaluation.

ABC-garage.com is a small business specializing in custom garage construction and related services in Eastern Iowa and Western Illinois, particularly the Quad City area. The company emphasizes quality workmanship, custom builds, and competitive pricing, positioning itself as a leading garage builder in its regional market. The website content supports this business focus with detailed service descriptions and project galleries. Technically, the website is built using outdated technology (Microsoft FrontPage 6.0) and lacks modern web standards such as HTTPS, mobile optimization, and accessibility features. Security posture is weak due to missing HTTPS, absence of security headers, and lack of published privacy or security policies. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness. Overall, the website provides basic business information but requires significant improvements in technical infrastructure and security to enhance trust and compliance.

A

Server Shopping

anisatech.com

47

ServerShopping.com is an e-commerce website specializing in the sale of servers, workstations, and related hardware components primarily targeting IT professionals and businesses in the UK. The site offers a broad catalog of products including Dell and HP rack servers, tower servers, workstations, memory modules, processors, and other server components. The platform appears to be built on a mature e-commerce CMS, likely CS-Cart, with a structured navigation system and product categorization. Technically, the website uses modern web standards and includes secure login forms, but lacks visible advanced security headers and explicit privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and structure suggest an operational business. Overall, the site demonstrates moderate technical maturity and business credibility but requires improvements in privacy compliance and security best practices.

B

Brook Lane Community Church

blcchurch.org.uk

45

Brook Lane Community Church is a small non-profit religious organization based in the United Kingdom, with a history dating back to 1928. The church focuses on community outreach, spiritual growth, and providing worship services both in-person and via live streaming. Their website serves as a portal for engagement, learning, sharing testimonies, and connecting with the church community. The organization is registered as a company limited by guarantee and a registered charity, indicating formal legal and charitable status. Technically, the website uses legacy JavaScript libraries such as jQuery 1.11.1 and jQuery UI 1.10.4, along with plugins like Cycle2 for slideshows. Some external resources are loaded over HTTP, which is a security concern. The site appears moderately optimized for mobile and accessibility but lacks advanced SEO and modern frameworks. The contact form collects user data securely via POST but lacks advanced anti-spam protections. From a security perspective, the site lacks visible security headers and uses outdated libraries with known vulnerabilities. The WHOIS data for the domain is unavailable due to a domain naming rules error, which raises concerns about domain registration legitimacy. No cookie consent or comprehensive privacy compliance mechanisms are present, though a basic privacy policy is linked. Social media presence is active across major platforms, enhancing community engagement. Overall, the website is functional and serves its community purpose but requires technical and security improvements. The domain registration issues and outdated technology stack reduce trustworthiness and security posture. Strategic improvements in security headers, HTTPS enforcement, updated libraries, and privacy compliance would enhance the site's reliability and user trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

P

Protek Fencing Limited

protek-fencing.co.uk

52

Protek Fencing Limited is a UK-based company specializing in the installation, repair, and maintenance of highway fencing systems, safety barriers, parapets, and pedestrian guardrails. Established in 1987, the company holds several industry certifications including ISO 9001:2008 and BSI accreditations, positioning itself as a reputable player in the transportation and infrastructure sector. Their website reflects a professional business model targeting construction and highway authorities with a focus on compliance and quality service delivery. Technically, the website is built on WordPress using CherryFramework and Bootstrap, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. WHOIS data is unavailable due to domain registration errors, which slightly impacts trust but does not detract from the legitimacy of the business as evidenced by consistent website content and certifications. Overall, the site is professional, content-rich, and trustworthy with room for improvement in privacy compliance and security best practices.

D

Dr. Doug - Chiropractor in Brampton

drdoug.ca

63

Dr. Doug is a local chiropractic healthcare provider based in Brampton, Ontario, Canada. The business offers chiropractic services and has a strong local reputation evidenced by a perfect 5-star aggregate rating from 30 reviews. The website is built on the Wix platform, leveraging standard Wix technologies and third-party analytics tools such as Google Tag Manager, Facebook Pixel, and Ahrefs Analytics. The technical infrastructure is modern and mobile-optimized, though some accessibility and SEO improvements could be made. Security posture is generally good with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses using Wix. Overall, the website presents a professional and trustworthy front for a small healthcare business.

C

Castle Trust Bank

castletrust.co.uk

71

Castle Trust Bank operates as a UK-based financial services provider specializing in savings accounts, ISAs, and property finance solutions including bridging loans and buy-to-let financing. The website targets retail customers and property investors seeking competitive savings products and property investment financing. The business positions itself as a niche player in the UK finance and real estate sectors, offering tailored financial products to its audience. Technically, the website is built on WordPress using the Elementor page builder and Astra theme, incorporating modern web technologies such as Google Analytics, Google Tag Manager, and CookieYes for consent management. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search engine visibility. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks some recommended security headers and explicit privacy and terms of service pages. The WHOIS data for the domain is unavailable due to a naming rules violation error from Nominet UK, which is unusual and warrants further investigation. Overall, the website is professional and trustworthy in appearance, but the domain registration anomaly slightly reduces confidence.

T

Tata Steel Netherlands

tatasteeleurope.com

70

Tata Steel Netherlands operates as a major steel manufacturer and supplier, offering a wide range of steel products and services through its business units including IJmuiden and Downstream Solutions. The company targets industrial and business clients across Europe, maintaining a strong market position as a leading steel producer. The website reflects a professional corporate presence with clear navigation, multilingual support, and comprehensive product information. Technically, the site is built on Drupal 10, leveraging modern libraries such as Bootstrap and Font Awesome, and integrates advanced analytics and consent management tools like Google Tag Manager and Cookiebot. Security posture is solid with HTTPS enforced and monitoring via Dynatrace, although explicit security headers could be improved. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. However, the WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness despite the reputable branding. Overall, the site demonstrates good digital maturity and business credibility.

D

Dando Drilling International

dando.co.uk

54

Dando Drilling International is a UK-based manufacturer specializing in drilling rigs and equipment for water well, mineral exploration, geotechnical, and multipurpose sectors. With over 150 years of experience and a parent company FAUN Trackway Limited, it holds a strong market position as a trusted industrial equipment supplier. The website reflects a professional and consistent brand image, targeting industrial clients and drilling contractors globally. Technically, the site is built on WordPress with modern plugins and frameworks, offering good SEO and mobile optimization. Security measures include HTTPS, CAPTCHA-protected forms, and GDPR-compliant cookie consent, though explicit security policies are absent. Overall, the site demonstrates a solid security posture with room for improvement in formal security documentation and header implementation. The domain's WHOIS data confirms legitimacy with a long registration history and consistent business claims.

M

Micronics Ltd

micronicsflowmeters.com

65

Micronics Ltd is a well-established UK-based manufacturer and supplier of ultrasonic flow meters, specializing in non-invasive clamp-on, portable, and fixed ultrasonic flow meters for various sectors including water management, energy, and building services. Founded in 1985, the company holds a strong market position as a trusted supplier with ISO 9001 certification and a comprehensive product range. The website reflects a professional business presence with clear contact information, distributor engagement, and detailed product offerings. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics and Google Tag Manager. Security posture is good with HTTPS enabled and domain protections in place, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is adequate with privacy and cookie policies present, but lacks an explicit cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its target industrial audience effectively.

K

Krueger

krueger.co.uk

56

Krueger is a specialized UK-based company focused on supplying and installing Eberspacher diesel heating systems for marine and vehicle applications. As an official Eberspacher main dealer, they offer exclusive products and services including installation, servicing, and warranty validation. Their market position is that of a trusted niche provider with strong industry relationships and a clear focus on quality and customer service. Technically, the website is built on WordPress with WooCommerce and uses modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, though improvements can be made by adding security headers and cookie consent mechanisms. The lack of WHOIS data due to domain registration errors reduces trust slightly but does not detract from the professional presentation and business legitimacy. Overall, the site is well-maintained and serves its target audience effectively.

The website www.ciprecision.com is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or content information. The WHOIS lookup for the domain failed, indicating the domain may not be registered or the data is unavailable, which raises significant concerns about the legitimacy and operational status of the website. No metadata, structured data, or contact information is present, preventing any meaningful analysis of the business or its services. The technical infrastructure appears minimal or non-existent from the accessible content, with no scripts, analytics, or security headers detected. Overall, the site lacks any visible security posture or privacy compliance indicators, and the absence of WHOIS data further diminishes trust. Strategic recommendations include resolving access issues, registering the domain properly, and implementing standard website security and compliance features.

G

Gurteen & Sons

gurteen.co.uk

65

Gurteen & Sons operates a professional e-commerce website specializing in premium menswear, including shirts, trousers, jackets, shorts, and outerwear. Established in 1784, the company positions itself as a heritage brand targeting discerning male customers seeking quality tailored clothing. The website is well-structured with clear navigation, mobile optimization, and integrated marketing and analytics tools, reflecting a mature digital presence. Security measures such as HTTPS, CSRF tokens, and cookie consent mechanisms are implemented, although some advanced security headers and policies are absent. The WHOIS data is unavailable due to domain naming rules errors, limiting domain registration trust verification, but the website content and branding strongly indicate legitimacy. Overall, the site demonstrates good business credibility, technical implementation, and privacy compliance, with room for improvement in security policy transparency and vulnerability disclosure.

T

The Olayan Group

olayan.com

67

The Olayan Group website represents a well-established global investment enterprise specializing in listed equities, private equity, debt, and real estate investments. The company positions itself as a privately-owned global enterprise with a diversified investment portfolio. The website content is professionally presented, targeting investors and business partners, with a clear focus on corporate investment services. The domain age and WHOIS data support the legitimacy and long-standing presence of the business. Technically, the website is built on WordPress with modern SEO practices implemented via the Yoast SEO plugin. Hosting and DNS are managed through Cloudflare, providing performance and security benefits. Cookie consent mechanisms are in place, indicating attention to privacy compliance, although explicit privacy and terms of service pages were not detected in the provided content. The site demonstrates good mobile optimization and moderate performance. From a security perspective, HTTPS is enabled and domain transfer protections are active. However, DNSSEC is not enabled, and security headers were not detected in the provided data. There is no visible security policy, incident response information, or vulnerability disclosure, which are areas for improvement. No critical vulnerabilities or suspicious indicators were found. Overall, the website is professional, trustworthy, and aligned with the business's corporate investment focus. Strategic recommendations include enhancing security headers, enabling DNSSEC, publishing privacy and security policies, and adding incident response contacts to improve compliance and trust.

K

Kilted Christmas Tree Company

kiltedchristmastree.co.uk

43

The Kilted Christmas Tree Company operates an e-commerce platform specializing in the sale and home delivery of fresh Christmas trees in the United Kingdom. Established in 2006, the company targets consumers seeking quality seasonal trees with convenient online ordering. The website is built on WordPress using WooCommerce and the Divi theme, incorporating SEO optimization via Yoast and security features such as HTTPS and Google reCAPTCHA. While the technical infrastructure is modern and secure, the site lacks critical compliance documentation including privacy and cookie policies, terms of service, and explicit contact information, which are essential for GDPR compliance and customer trust. Security posture is strong with proper SSL and security headers, but privacy compliance gaps reduce the overall risk profile. Strategic improvements in compliance documentation and transparency would enhance trust and legal standing.

H

Henfield Funeral Services Ltd. t/a Willows Funeral Service

willowsfuneralservices.co.uk

44

Willows Funeral Service is a small, family-owned independent funeral director business based in Eastbourne, East Sussex, operating under Henfield Funeral Services Ltd. The company offers a comprehensive range of funeral-related services including funeral directing, prepaid plans, memorials, and floral tributes. They maintain a strong regional presence with sister sites in Henfield and Hastings, and hold industry trust indicators such as SAIF membership and FCA-regulated prepaid plans. The website is professionally designed, well-structured, and optimized for SEO and mobile use, reflecting a mature digital presence for a small business. Technically, the site runs on WordPress with modern plugins and includes Google Analytics for tracking, alongside a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are absent and incident response information is not provided. WHOIS data is unavailable due to domain registration error, limiting domain trust verification, but website content and business information appear consistent and legitimate. Overall, the site presents a trustworthy and professional front for a regional funeral services provider.

C

Colchester Officers' Club

cgoclub.co.uk

50

The Colchester Officers' Club is a private members' club located in the heart of Colchester, UK, offering a range of sporting, social, conference, and event facilities. The club positions itself as the oldest and most prestigious in the area, targeting local members interested in tennis, other sports, and social gatherings. The website reflects this with detailed information about membership, events, and venue hire, supported by a consistent brand presence and active social media links. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Jetpack, with a legacy Bootstrap 2.3.2 framework for styling. The site is moderately optimized for performance and mobile use, with good SEO practices and basic accessibility features. Security is adequate with HTTPS enforced and secure contact forms, but lacks advanced security headers and explicit security policies. The security posture is generally sound with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS data due to domain registration errors raises concerns about domain legitimacy, although the website content and business information appear authentic and professional. Overall, the site presents a trustworthy and professional image for a small hospitality business but should address domain registration issues and enhance security policies and technical modernization to improve trust and resilience.

T

Torque Racing Services Ltd

torqueracing.net

51

Torque Racing Services Ltd is a UK-based specialist company focused on off-road motorcycle suspension servicing, rally preparation, and performance tuning for enduro, rally-raid, and adventure motorcycles. Established in 2010, the company operates from Cambridgeshire and serves both weekend riders and professional racers. Their services include suspension servicing, race preparation, integration of navigation equipment, and rider training. The website reflects a niche market position with clear branding and professional presentation. Technically, the website is built on WordPress using Elementor and related plugins, with modern web technologies and a cookie consent mechanism compliant with GDPR. The site is hosted with DNS servers linked to the registrar 123-Reg Limited, and uses HTTPS with a valid SSL certificate, ensuring secure communications. Performance and mobile optimization are good, though some security headers could be improved. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent management but lacks explicit security policies or incident response information. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving a specialized market effectively. Strategic improvements could include adding security headers, publishing a security policy, and enhancing accessibility features.

C

Claytons & The Glasshouse

claytonsbarnstaple.co.uk

49

Claytons & The Glasshouse is a small hospitality business based in Barnstaple, UK, offering premium lounge bar services, a glasshouse restaurant, and rooftop terrace dining. The website reflects a mature business with a domain registered since 2003, presenting a professional and consistent brand image. The site uses WordPress with the Divi theme and integrates common analytics and marketing tools such as Google Analytics and Facebook SDK. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance features such as a privacy policy or cookie consent mechanism. No forms are present on the homepage, but booking links direct users to reservation pages. Overall, the site is safe, well-structured, and targets general audiences seeking dining and lounge experiences.