High-risk security reports

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

G

GAP Dental

gapdental.com

38

GAP Dental is a UK-based manufacturer specializing in dental products for both professional and home use, operating from Northfleet, Kent. Their product portfolio includes home dental treatments such as denture fixatives and temporary filling replacements, as well as professional dental products like mouthwash tablets and polishing pastes. The company emphasizes product customization to meet specific customer and educational needs, positioning itself as a niche player in the dental healthcare sector. The website reflects a small-sized business with a focused market presence and a professional approach to branding and customer engagement. Technically, the website is built on the concrete5 CMS platform and utilizes modern web technologies including jQuery, Bootstrap 3.3.7, and Google Analytics for tracking. The site is mobile-optimized with good navigation and content relevance, though performance is moderate. Security-wise, the site enforces HTTPS and includes a cookie consent banner, but lacks visible security headers and published privacy or security policies, indicating room for improvement in compliance and security posture. The security posture is moderate with no immediate vulnerabilities detected in the provided data, but the absence of WHOIS registration details raises concerns about domain legitimacy verification. The website does not appear to be blocked or protected by a WAF, allowing full content access. Overall, the site is professional and trustworthy from a content perspective but would benefit from enhanced transparency and security practices to improve compliance and trustworthiness.

E

Engineering Factory Supplies

efsltd.co.uk

45

Engineering Factory Supplies (EFS) is a UK-based industrial and commercial product supplier founded in 1985. The company offers a broad range of products including engineering supplies, hand and power tools, workwear and PPE, janitorial supplies, and fixings and fasteners. Positioned as one of the region's largest independent suppliers, EFS targets industrial and commercial customers primarily in manufacturing sectors. The website is built on WordPress with a moderate technical infrastructure, including jQuery and a custom theme, providing a good user experience with clear navigation and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The domain www.whitechurch.co.uk is not registered and the website is inaccessible, returning an error message indicating no such site exists. There is no available content, metadata, or business information to analyze. The domain WHOIS lookup failed due to the domain name violating Nominet UK's naming rules, specifically that it contains too many parts. Consequently, no registrant or registration data is available. The absence of a website and domain registration means there is no active business presence at this URL. From a technical perspective, the site does not exist, so no infrastructure, CMS, or hosting details can be assessed. There are no security headers, HTTPS, or privacy mechanisms in place. The lack of content and technical implementation results in a very low digital maturity level. Security posture is minimal due to the absence of any active website or domain registration. No vulnerabilities or security best practices can be evaluated. The domain is not legitimate, and no trust or compliance indicators are present. Overall, the risk assessment is high due to the non-existence of the domain and website. Strategic recommendations include registering a valid domain name compliant with Nominet rules, establishing a secure and compliant website infrastructure, and implementing standard security and privacy policies to build trust and credibility.

A

ATL Transformers

atltransformers.co.uk

47

ATL Transformers UK is a specialized small business operating in the energy and manufacturing sector, focusing on the supply, repair, and maintenance of electrical transformers. The company targets industrial and commercial clients within the UK market. The website is built on WordPress using the Divi theme, incorporating modern web technologies such as Google reCAPTCHA for form security and CookieYes for cookie consent management. The technical infrastructure is moderate in performance and mobile optimization, with basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and anti-bot measures, but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service pages. Overall, the website presents a professional image with consistent branding and relevant content, but could improve transparency and security practices.

E

Ebi

easibind.com

49

Ebi is a UK-based creative printed packaging company established in 1996, offering end-to-end sustainable print solutions including packaging, direct mail, and point-of-sale materials. The company positions itself as a full-service partner with in-house design, printing, and assembly capabilities, targeting businesses seeking high-quality and sustainable print products. The website is built on WordPress using the Divi theme and incorporates modern technologies such as Bootstrap and jQuery, with integrations for analytics and marketing tracking. Security posture is adequate with HTTPS enabled and domain transfer protections, though DNSSEC is not enabled and additional security headers could improve resilience. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the website reflects a professional and credible business with moderate technical maturity and a good security baseline.

Overland Transport is a small UK-based transportation company specializing in the movement of temperature controlled produce and dry freight between the UK and France. The website presents basic information about the company’s services and history, targeting businesses requiring specialist transport solutions. The digital presence is functional but lacks modern features such as privacy policies, contact details, and HTTPS security. The technical infrastructure relies on legacy technologies with Google Analytics for tracking but no visible compliance mechanisms. Security posture is weak due to absence of HTTPS and security headers, and the domain registration is invalid according to Nominet UK, raising legitimacy concerns. Overall, the website provides basic business information but requires significant improvements in security, compliance, and domain legitimacy to enhance trust and professionalism.

R

Reliance International Shipping & Travel Limited (RIST Limited)

ristlimited.com

41

Reliance International Shipping & Travel Limited (RIST Limited) is a UK-based logistics and shipping service provider established in 2015. The company offers a range of services including sea freight, air freight, vehicle shipping, personal effects shipping, warehousing, and airline ticketing. Positioned as a global logistics solutions provider, RIST Limited targets businesses and individuals requiring reliable and cost-effective shipping worldwide. The website presents a professional image with clear service descriptions and contact information, supporting its market positioning. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Owl Carousel, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate with good mobile optimization but basic accessibility and SEO features. The site lacks advanced analytics or tracking tools, indicating minimal user tracking. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting overall trustworthiness. No incident response or security policy information is provided, limiting transparency on security readiness. Overall, the website is functional and professional but requires improvements in privacy compliance, security best practices, and domain legitimacy verification to enhance trust and reduce risk. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, verifying domain registration, and establishing incident response contacts.

M

Moore People Recruitment Ltd

moorepeople.com

45

Moore People Recruitment Ltd is a specialized recruitment and career coaching firm focusing on HR and Accountancy professionals primarily in Kent and London. The company is led by Melanie Moore, who brings over 27 years of recruitment experience and holds leadership roles within the CIPD Kent branch. The website presents a professional image with clear service offerings including recruitment, career coaching, CV writing, and interview preparation. Technically, the site is built on WordPress with a modern theme and uses standard analytics and social media integrations. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. The absence of WHOIS data is a notable concern and should be investigated further to confirm domain legitimacy. Overall, the site is well designed, user-friendly, and trustworthy for its target audience.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Number One Port Hill is a luxury bed and breakfast located in Hertford, UK, offering boutique accommodation, exclusive bridal packages, and event hosting services. The business is well-established with multiple industry awards and positive customer testimonials, positioning it as a leading hospitality provider in its region. The website is professionally designed using WordPress with modern technologies such as Bootstrap and Revolution Slider, providing a visually appealing and user-friendly experience. However, the site lacks a privacy policy and cookie consent mechanism, which are important for GDPR compliance. Security posture is moderate with HTTPS enforced but missing key security headers. The WHOIS lookup failed due to domain naming rules, but the website is fully accessible and legitimate, indicating the domain is registered correctly without the 'www' prefix. Overall, the site demonstrates strong business credibility and good technical implementation but should improve privacy and security compliance.

The website www.randjpipework-norwich.co.uk is currently not connected to any active website and displays a Wix error page indicating the domain is not linked to a Wix site. The domain itself is not properly registered according to Nominet UK WHOIS data, which states the domain name violates naming rules and cannot be registered. There is no business information, contact details, or policies available on the site. Technically, the site uses Wix platform technologies including AngularJS and jQuery, but no actual content or business presence is established. Security posture is minimal with no HTTPS or security headers detected in the provided data. Overall, the site is non-functional and lacks any trust or credibility indicators.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

D

DHX | Denley Hydraulic Solutions

denleyhydraulics.co.uk

42

DHX | Denley Hydraulic Solutions is a well-established UK-based company specializing in bespoke hydraulic engineering solutions for demanding industrial applications. Founded in 1999 and operating as part of the Kinetic Solutions Group, DHX offers a range of products including hydraulic systems, power units, lubrication systems, cylinders, manifolds, and test rigs. Their market position is strong within the manufacturing and energy sectors, serving clients requiring precision and reliability in harsh environments. The website reflects a professional and consistent brand image, targeting engineering and industrial customers.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Kingston Marine Services Ltd is a UK-based specialist company providing diesel and gas engine repairs, maintenance, and spare parts with over 25 years of experience. Established in 1998 by factory-trained Deutz engineers, the company offers a wide range of services including emergency breakdown response, engine overhaul, workshop reconditioning, and specialist machining services. They operate worldwide, serving marine and industrial sectors with a strong emphasis on customer service and health & safety. Technically, the website is built on WordPress with modern plugins such as WPBakery Page Builder and LayerSlider, delivering a professional and mobile-optimized user experience. SEO is supported by Yoast SEO plugin, and the site uses Google Fonts for typography. Performance is moderate with good navigation and content relevance. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security posture. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the website content and business information appear professional and trustworthy. Overall, the website presents a credible business front with strong service offerings but should address privacy compliance and security best practices to enhance trust and reduce risk.

The website www.pieuk.co.uk currently serves only a security verification page implementing Google reCAPTCHA v3 to prevent automated access. The domain WHOIS lookup failed due to a naming rules violation by Nominet UK, indicating the domain is either improperly registered or invalid. No business, contact, or policy information is accessible on the site, severely limiting the ability to assess the company or its services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation. The security posture is weak, and the site is effectively blocked by a WAF or similar security mechanism, preventing full content access and analysis.

T

Security Verification

themanorfarm.co.uk

47

The website www.themanorfarm.co.uk currently serves only a security verification page employing Google reCAPTCHA v3 to prevent automated access. No actual business content, metadata, or contact information is accessible, indicating that the site is effectively blocked by a Web Application Firewall or similar security mechanism. The WHOIS lookup for the domain failed with an error from Nominet UK stating the domain cannot be registered due to naming rules violations, suggesting the domain is invalid or misconfigured. This raises significant concerns about the legitimacy and operational status of the website. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation in the provided data. Privacy and cookie policies are absent, and no business or compliance information is available.

The website www.bdsoffice.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content or business information. The domain WHOIS data is missing, indicating the domain may be unregistered, expired, or the data is withheld. Due to the lack of accessible content, no metadata, structured data, or contact information is available for analysis. The technical infrastructure appears minimal with no detectable technologies, scripts, or security headers. The security posture is poor with no HTTPS or security best practices observed. Overall, the site is effectively blocked, preventing meaningful business or security assessment.

Total Management Development PLC operates as an independent survey organization specializing in questionnaire and survey services, including design, data processing, and analysis. The company positions itself as a trusted partner within the survey and market research industry, offering a broad range of services aimed at businesses and organizations requiring customer satisfaction and market research solutions. The website content is minimal but clearly focused on these core services. From a technical perspective, the website is basic with no modern frameworks or CMS detected. There is no evidence of HTTPS or security headers, and the site lacks mobile optimization and accessibility features. The absence of privacy and cookie policies indicates low digital maturity and potential compliance gaps. Security posture is weak due to missing HTTPS and lack of security best practices. The WHOIS data is unavailable, raising concerns about domain legitimacy and registration status. No contact information or incident response details are provided, limiting trust and transparency. Overall, the website presents a professional but minimal online presence with significant room for improvement in security, compliance, and technical sophistication. Strategic enhancements in these areas are recommended to improve trustworthiness and regulatory compliance.

M

Mansell Recruitment Group Ltd

mansell.co.uk

49

Mansell Recruitment Group Ltd is a well-established specialist technical job agency based in the United Kingdom, focusing on placing engineering professionals across various disciplines. Founded in 1991, the company has built a strong reputation in the UK engineering recruitment market, offering services to both candidates and clients. Their website reflects a professional and consistent brand image, targeting engineering companies and professionals seeking roles in manufacturing, design, electronics, and related sectors. Technically, the website is built on modern web technologies including Webflow CMS, JavaScript libraries like jQuery, and integrates Google services such as reCAPTCHA and Tag Manager for security and analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA v3 to protect forms from abuse. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The WHOIS lookup for the queried subdomain failed due to domain naming rules, but this is consistent with querying a subdomain rather than the registered domain. The main domain is presumed legitimate based on website content and business information. Overall, Mansell Recruitment Group presents a credible and professional online presence with a solid business model and market position. Strategic improvements in security headers, privacy compliance, and WHOIS data clarity would further strengthen their digital trustworthiness and compliance posture.

The website www.marchlaboratories.co.uk is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS lookup failed with an error indicating the domain name contains too many parts and cannot be registered, suggesting the domain is invalid or misconfigured. No metadata, structured data, contact information, or business details are available from the site. Technically, the site lacks visible security headers, SSL information, or modern web technologies. The absence of privacy policies, cookie consent mechanisms, or terms of service further indicates a lack of compliance and professionalism. Overall, the site is not operational or accessible for users or analysis.

Contact Packaging Ltd is a well-established family-run business founded in 1980, specializing in the import, manufacture, and distribution of packaging products including adhesive tapes, printed tapes, stretch films, and packaging machinery. They hold a strong market position as the largest importer of Vibac self-adhesive tapes in the UK and maintain a significant stock holding to serve both trade and end users. The company also offers eco-friendly packaging solutions and has an in-house graphics department for custom printed tapes. Technically, the website employs modern JavaScript libraries, Google Analytics, and Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled, though security headers and explicit policies could be improved. Privacy compliance is supported by a cookie policy and consent mechanism, but lacks a dedicated privacy policy page and incident response information. Overall, the website and business demonstrate professionalism and trustworthiness, with room for enhanced security and compliance maturity.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

AMG North Weald Ltd is a UK-based logistics company with over 50 years of experience specializing in road freight, freight forwarding, express courier services, warehousing, distribution, and bespoke project management. The company targets businesses requiring reliable and flexible logistics solutions, particularly with expertise in Swiss and Italian markets. The website is built on WordPress using modern technologies such as Bootstrap 4 and Slider Revolution, providing a professional and mobile-optimized user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. The absence of WHOIS data and domain registration inconsistencies raise concerns about domain legitimacy, warranting further verification. Overall, the site presents a trustworthy business front with room for improvement in security transparency and domain registration clarity.

The website www.craneandpartners.com is currently inaccessible, returning a 403 Forbidden error page with no accessible content or business information. The domain appears unregistered or inactive based on WHOIS data, which returned no registration details. There is no metadata, structured data, or contact information available to assess the business or its services. Technically, the site lacks HTTPS, security headers, and any modern web technologies. The security posture is poor due to lack of accessible content and absence of security best practices. Overall, the site presents a high risk due to lack of legitimacy and accessibility, and no meaningful business or security information can be derived from the current state.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The domain www.fireworksni.com/lander currently resolves to a minimal placeholder or parking page with no substantive business content. The WHOIS query returned no registration data, indicating the domain is either unregistered, expired, or parked. The website contains only a root div and scripts related to advertising and parking services, with no visible business information, contact details, or policies. This suggests the domain is not actively used for a legitimate business or service at this time. The technical infrastructure is minimal, relying on basic JavaScript and React scripts for rendering an empty page. Security posture is weak due to lack of HTTPS information and absence of security headers. Overall, the site is not operational and provides no meaningful content or business presence.

The website www.teesdaleglazing.co.uk currently presents a security verification page that requires users to pass a Google reCAPTCHA v3 challenge before accessing any content. This indicates the presence of a bot protection mechanism or a web application firewall (WAF) that restricts access to the site. Due to this, no meaningful business content, contact information, or policies are accessible for analysis. The domain WHOIS lookup failed with an error indicating the domain name is invalid per Nominet UK rules, suggesting potential misconfiguration or non-legitimate domain registration status. The site uses modern frontend technologies such as Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible SEO, accessibility, or privacy compliance features. Overall, the site is inaccessible for normal users without passing the security challenge, limiting the ability to assess its business or security posture comprehensively.

The website www.terrystimber.com is currently inaccessible or blocked, serving an empty HTML page with no metadata, content, or visible business information. The WHOIS lookup failed to return any registration data, indicating the domain may not be registered or WHOIS data is unavailable. This severely limits the ability to analyze the business, technical infrastructure, or security posture. The absence of HTTPS, security headers, and any contact or policy information further indicates a very low maturity level and high risk for users. Without content or registration data, the website cannot be considered trustworthy or credible at this time.

The website www.highcroftnursinghome.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to content. The WHOIS lookup failed due to domain naming rules violations, resulting in no available registrar, registrant, or domain status information. This lack of data and the security challenge page severely limit the ability to assess the business, its services, or its digital maturity. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection but lacks visible HTTPS enforcement and security headers, which are critical for a secure web presence. Privacy and cookie policies, contact information, and business details are absent, further reducing trust and compliance posture. Overall, the site appears either misconfigured or intentionally protected, resulting in a low trust and security score.

W J Townsend & Son is a small, family-run business specializing in oil boiler repairs, servicing, replacements, and general plumbing services primarily serving Northamptonshire and surrounding counties in the UK. Established since 1945, the company emphasizes prompt, friendly, and honest service, supported by certifications such as Oftec and a VAT registration. The website reflects a professional local service provider with clear contact information and a focus on customer trust through testimonials and detailed service descriptions. Technically, the website is built on WordPress with common plugins like Yoast SEO and Jetpack, using Bootstrap for responsive design. The site is moderately performant and well-structured with good SEO practices but lacks advanced accessibility features and security headers. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and privacy/cookie policies indicates room for improvement. The WHOIS data is unavailable due to a domain naming rules violation error from Nominet UK, which is unusual and raises questions about domain registration legitimacy despite the professional website content. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security hardening.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

Jardine’s Joinery (Wirral) Ltd is a small bespoke joinery manufacturer specializing in high-quality staircases, windows, doors, gates, and conservatories serving the Wirral, Cheshire, and Merseyside regions. The company emphasizes craftsmanship and fine detail, positioning itself as a leading local provider in bespoke joinery. The website is built on WordPress with legacy plugins and scripts, indicating a moderate level of digital maturity but with outdated technology components. Security posture is weak due to lack of HTTPS enforcement, missing security headers, and outdated software versions, exposing the site to potential vulnerabilities. The absence of privacy and cookie policies further reduces compliance with modern data protection standards. Additionally, the domain WHOIS data is missing or indicates no registration, which raises concerns about domain legitimacy despite the active website presence. Overall, the site provides good business information and contact details but requires significant improvements in security, compliance, and technical modernization.

Gusto Design Ltd is a UK-based industrial design consultancy specializing in product creation, design, and innovation for international markets. The company serves a diverse client base including major brands such as Intel, Boots, and The Body Shop, offering services from initial concept through to production and sustainability evaluation. The website reflects a professional and consistent brand image with detailed descriptions of projects, processes, and activities. Technically, the site uses modern web technologies including Bootstrap and Google Fonts, with Google Analytics integrated for visitor tracking. However, there is no evidence of privacy or cookie policies, and no social media presence is linked. Security posture is moderate but lacks visible HTTPS confirmation and security headers. The WHOIS data for the domain www.gusto.co.uk is missing and indicates the domain is not registered under Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is accessible and informative but requires improvements in security, privacy compliance, and domain registration transparency.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.eveleighsgarage.co.uk is currently inaccessible, serving a 403 Forbidden error page that blocks access to any business or service-related content. The domain WHOIS lookup failed with an error indicating the domain name contains too many parts and cannot be registered under Nominet UK rules, suggesting the domain is invalid or misconfigured. No business information, contact details, or policies are available on the site, severely limiting the ability to assess the company or its operations. Technically, the site only loads a static error page with minimal external resources (Google Fonts) and no analytics or tracking scripts. Security posture cannot be evaluated due to lack of accessible content and missing security headers or SSL information. Overall, the site appears non-operational or improperly configured, posing a high risk for trust and legitimacy.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

S

Springvale EPS Ltd.

springvale.com

47

Springvale EPS Ltd. is a UK-based company specializing in sustainable insulation solutions for floors, walls, and roofs. With a domain registered since 1996, the company demonstrates a long-standing presence in the energy and construction sector. Their website showcases a range of products including Floorshield, Beamshield, Groundshield, Ecobead, Roofshield, Hydroshield, and Warmsqueez / Warmsark, targeting construction professionals and contractors seeking eco-friendly insulation options. The business model is primarily B2B, focusing on manufacturing and supplying insulation materials with technical support and downloadable resources.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

V

Vinyl Frontier

myvinylfrontier.com

44

Vinyl Frontier is a UK-based small business specializing in large format sign and banner printing, printed clothing, and promotional gifts. The company offers a comprehensive range of products and services aimed at helping businesses promote their brands through eye-catching graphics and printed materials. Their market position is that of an established print service provider with a focus on quality and customer service, supported by in-house design and print capabilities. The website is built on WordPress with WooCommerce, indicating a mature e-commerce infrastructure. It integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS and standard security headers in place, though there is room for improvement in privacy compliance, particularly regarding cookie consent and published security policies. Overall, the website is professional, trustworthy, and well-aligned with the business's operational needs.

Devon Oak is a small UK-based company specializing in traditional timber framing, including green oak and softwood frames. They offer services such as timber framing construction, sawing timber with their own Mahoe Sawmill, and transportation of timber and frames. The company targets customers interested in traditional timber buildings, including those who supply their own timber. The website is professionally designed using WordPress, with clear navigation and mobile optimization. Social media presence on Instagram and Facebook supports their market engagement. However, the website lacks formal privacy and cookie policies, which impacts compliance. Technically, the site uses WordPress 6.6.5 with jQuery and Jetpack plugin, and loads Google Fonts. Performance is moderate with good mobile responsiveness. Security posture is adequate with HTTPS enabled but lacks security headers and formal vulnerability disclosure mechanisms. No forms collecting sensitive data are present except a search form. The WHOIS query failed due to querying an invalid domain variant ('www.devonoak.co.uk'), but the actual domain 'devonoak.co.uk' appears legitimate. Overall, the site is safe, professional, and trustworthy for its niche market. Strategic improvements include adding privacy and cookie policies, implementing security headers, and enhancing accessibility features to improve compliance and security posture.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.