Low-risk security reports
14,240 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,148001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
301–350 of 14,240
—
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Home Group | Welcome to Home Grouphomegroup.org.uk
—
82Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
—
80Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Titanium Oyjtitanium.fi
Finance · Finland
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Titanium Oyj is a Finnish independent financial group specializing in asset management, investment funds, and insurance representation. The company serves a broad audience including private individuals, companies, and institutions across Finland. It holds a reputable market position with its shares listed on Nasdaq Helsinki's First North Growth Market Finland. The website reflects a professional and trustworthy image with clear business information and comprehensive service descriptions. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, including Google Analytics, Microsoft Clarity, and Cookiebot for consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with detailed policies and a granular cookie consent mechanism. Overall, the site demonstrates a mature digital presence suitable for a financial services provider.
Technology · Finland
79Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Oy Sailer Research & Development Ltd. is a Finnish technology company specializing in delivering actionable insights through research and development services. Established in 2014, the company positions itself as a niche provider focused on data-driven consulting and innovative solutions. Their website reflects a professional and modern digital presence, leveraging WordPress with Elementor and integrating advanced SEO and analytics tools. The company maintains active social media profiles on major platforms, enhancing their market visibility. Technically, the website is well-structured with proper use of security headers, HTTPS encryption, and cookie consent mechanisms compliant with GDPR standards. The use of Cookiebot for cookie management and MonsterInsights for analytics indicates a commitment to privacy and data transparency, although explicit privacy and terms of service pages are currently missing. Performance and mobile optimization are adequate, supporting a good user experience. From a security perspective, the site demonstrates strong fundamentals with no detected vulnerabilities or exposed sensitive data. The WHOIS data corroborates the legitimacy of the domain registration, showing consistency between the registrant information and the website's business claims. However, the absence of a security incident response contact and vulnerability disclosure policy suggests areas for improvement. Overall, the website and business present a low-risk profile with a solid foundation in security and compliance. Strategic enhancements in privacy documentation and incident response transparency would further strengthen trust and regulatory adherence.
LK Systemslksystems.fi
Manufacturing · Finland
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
LK Systems is a leading Nordic manufacturer and supplier of heating and domestic water systems, offering easy-to-install and customized prefabricated solutions. The company operates primarily in Finland, Sweden, and Norway, with a strong market position as a regional leader. Their website reflects a professional B2B focus targeting installers and contractors in the HVAC sector. Technically, the site uses modern tools such as Google Tag Manager and Cookie Information for consent management, and it is built on the Episerver CMS platform. The website is well-optimized for mobile and accessibility, with good SEO practices and a clear cookie consent mechanism compliant with GDPR. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not found. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency of contact and legal information.
TAGtag-group.com
Transportation · United Kingdom
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
TAG is a specialized travel service provider focusing on seamless and safe travel solutions for businesses in touring, production, sport, investment management, and corporate sectors. Their offerings include comprehensive management of flights, accommodation, ground transportation, and ancillary services, positioning them as a niche player in the transportation industry. The website is professionally designed and hosted on Squarespace, indicating a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms in place, though there is room for improvement in publishing formal security policies and enhancing security headers. The absence of WHOIS data raises questions about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website presents a credible business front with clear contact channels and social media presence.
Tishman Speyertishmanspeyer.com
Real Estate · United States
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Tishman Speyer is a globally recognized real estate development and investment firm that focuses on shaping cities worldwide through iconic properties and community building. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. The company offers a broad range of services including property management, investment management, flexible workspace solutions, and technology ventures. Technically, the website leverages modern frameworks such as Next.js and integrates multiple analytics and marketing tools, ensuring good performance and user experience across devices. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, though it could benefit from additional security headers and a published security policy. Overall, the website demonstrates a strong security posture with no evident vulnerabilities or exposed sensitive data. The absence of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given the professional presentation and comprehensive legal disclosures.
Conyersconyersdill.com
Finance
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Conyers is a globally recognized offshore law firm specializing in legal services related to Bermuda, British Virgin Islands, and Cayman Islands laws. The firm serves a broad client base including FTSE 100 and Fortune 500 companies, international finance houses, and asset managers. Their market position is strong, supported by offices in key financial centers such as Hong Kong, London, and Singapore. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS with modern SEO and accessibility tools. The technical infrastructure includes integrations with Google Tag Manager, Cookiebot for cookie consent, and UserWay for accessibility, indicating a mature digital strategy. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. The absence of WHOIS registrant data is a concern for domain legitimacy but does not detract significantly from the overall trustworthiness given the professional content and branding. Strategic recommendations include publishing comprehensive privacy and security policies, adding vulnerability disclosure mechanisms, and enhancing contact transparency to improve compliance and trust.
Brooke Weston Trustbrookewestontrust.org
Education · United Kingdom
81Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Brooke Weston Trust operates as a family of academies focused on delivering high-quality education and raising aspirations in the East Midlands region of the United Kingdom. The website presents a professional and consistent brand image, targeting students, parents, and educators. The business model is that of a non-profit educational trust managing multiple academies, with a medium-sized organizational footprint. The site content is relevant and well-structured, supporting the trust's educational mission. Technically, the website employs modern web technologies including Bootstrap CSS, FontAwesome icons, Google Tag Manager for analytics, and Swiper.js for interactive elements. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. The absence of a detected CMS suggests a custom or static site build. From a security perspective, the site enforces HTTPS and includes a Content Security Policy nonce, indicating some security awareness. However, the lack of explicit security headers and absence of privacy or cookie policies highlight areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for this type of organization, and no suspicious patterns were found. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.
- Purple Strategies, LLC
purplestrategies.com
Other · United States
84Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Purple Strategies, LLC is a bipartisan corporate reputation firm specializing in blending political campaign speed and strategy with brand communications. The company targets Fortune 500 companies, trade associations, and major brands, helping them navigate reputation, public affairs, and issue advocacy. The website reflects a strong market position with professional branding and clear communication of services. Technically, the site is built on modern frameworks such as Next.js and React, hosted likely on Vercel, and integrates advanced analytics and marketing tools including Google Analytics, HubSpot, and Matomo. The site is fast, mobile-optimized, and SEO-friendly. Security posture is strong with HTTPS enforced, use of reCAPTCHA, and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the site presents a trustworthy and professional digital presence consistent with an established corporate consultancy.
Aldermore Bankaldermore.co.uk
Finance · United Kingdom
85Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Aldermore Bank is a UK-based specialist bank offering a range of financial products including mortgages, savings accounts, and business finance solutions. The website presents a professional and well-structured digital presence with clear branding and product segmentation. The technical infrastructure leverages modern web technologies, including Google Tag Manager, Microsoft Application Insights for monitoring, and OneTrust for cookie consent management, indicating a mature digital setup. Security posture is strong with HTTPS enforced and standard security practices observed, though some advanced headers could be added for enhanced protection. Privacy compliance is supported by a cookie consent mechanism, but explicit privacy policy and terms of service pages were not detected in the provided content. WHOIS data could not be retrieved due to querying a subdomain rather than the registered domain, which slightly impacts trust but the website content and branding strongly indicate legitimacy. Overall, Aldermore Bank's website is professional, secure, and user-friendly, serving its target audience effectively.
Thanet Earth Limitedthanetearth.com
Energy · United Kingdom
86Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Thanet Earth Limited operates the largest glasshouse complex in the UK, specializing in the production of tomatoes, cucumbers, and peppers. Positioned as a leading domestic producer, the company emphasizes innovation, sustainability, and quality to compete with international growers. Their website reflects a mature digital presence with clear branding, comprehensive content, and active community engagement. The business targets consumers, partners, and potential employees, offering detailed information about products, sustainability efforts, and career opportunities. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO, Google Analytics, and Cookiebot for GDPR-compliant cookie management. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. The absence of WHOIS data for the domain is a notable anomaly, warranting further verification to confirm domain legitimacy. Overall, the website presents a professional and trustworthy image with room for improvement in transparency and security documentation.
Roc Searchroc-search.com
Technology · United Kingdom
83Low
NIS2 55 · GDPR 83
NIS2 55 · GDPR 83
Roc Search is a specialized recruitment agency focusing on STEM sectors including Technology, Engineering, Life Sciences, Energy, and the Public Sector. The company provides a range of staffing solutions such as contingent recruitment, retained search, embedded talent, and brand marketing services, positioning itself as a leading global partner for talent acquisition in these industries. The website reflects a professional and well-structured digital presence, targeting both candidates and clients with clear navigation and comprehensive resources. Technically, the website employs modern frameworks such as Bootstrap 5 and integrates advanced analytics tools including Google Analytics and Microsoft Clarity. The use of CookieYes for cookie consent demonstrates a commitment to privacy compliance. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured navigation. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, some standard security headers like Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options are missing, which could be improved to enhance protection against common web vulnerabilities. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. The main concern lies in the absence of WHOIS data, which raises questions about domain registration transparency. This should be investigated further to ensure full legitimacy. Strategic recommendations include enhancing security headers, verifying domain registration details, and maintaining ongoing compliance with data protection regulations.
Heraeus Groupheraeus.com
Technology · Germany
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Heraeus Group is a globally recognized, family-owned technology company headquartered in Hanau, Germany, with a rich history spanning over 350 years. The company specializes in advanced materials and innovative technology solutions across multiple sectors including metals and recycling, healthcare, semiconductor and electronics, and industrial applications. Their business model focuses on providing customized, technology-driven solutions to industrial and healthcare customers worldwide. The website reflects a mature digital presence with comprehensive content, strong branding, and a clear focus on sustainability and innovation. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, supported by a Magnolia CMS backend. It employs industry-standard analytics and consent management tools, ensuring compliance with privacy regulations like GDPR. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registry issues, which slightly impacts trustworthiness. Overall, Heraeus Group's website demonstrates a strong business and technical foundation with good security practices, though improvements in security header implementation and transparency in domain registration are recommended to enhance trust and compliance.
- Ecclesiastical
ecclesiastical.com
Finance · United Kingdom
76Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Ecclesiastical is a well-established specialist insurance and financial services provider with over 135 years of experience, focusing primarily on churches, charities, and faith-based organizations. The company operates under the Benefact Group umbrella and maintains a strong market position in niche insurance sectors. Their website reflects a professional and comprehensive digital presence, offering a wide range of insurance products and financial advice tailored to their target audience. The site is well-branded, consistent, and provides clear navigation and relevant content for customers and brokers alike. Technically, the website employs modern technologies including Cookiebot for consent management, Google Tag Manager for analytics, and Dynatrace for performance monitoring, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and bot detection mechanisms in place, although explicit security headers could be more clearly documented. Privacy compliance is robust, with clear cookie policies and GDPR adherence. However, the absence of publicly available WHOIS data for the main domain introduces some uncertainty regarding domain registration transparency. Overall, the website and business demonstrate high professionalism and trustworthiness, with minor areas for improvement in security policy transparency and WHOIS data availability.
- CCellhire Ltd.
cellhire.co.uk
Telecommunications · United Kingdom
88Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Cellhire Ltd. is a medium-sized UK-based telecommunications company specializing in IoT solutions, mobile communications, eSIM, and data connectivity services targeted primarily at enterprise clients and indirect partners worldwide. The company positions itself as a leading global telecoms provider with a strong focus on innovation and customer-centric connectivity solutions. Their website reflects a professional and modern digital presence, showcasing multiple industry awards and a comprehensive portfolio of services including wholesale connectivity and satellite solutions. Technically, the website is built on modern frameworks such as Next.js and React, leveraging advanced analytics and marketing tools like Google Analytics, Bing Ads, and Demandbase. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a robust cookie consent mechanism ensuring GDPR compliance. Security best practices are observed, including HTTPS enforcement and security headers, though explicit security policy and incident response information are not publicly detailed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency, which slightly impacts the overall trust score. Despite this, the professional business presentation and consistent branding support the legitimacy of the company. Strategic recommendations include publishing a dedicated security policy, vulnerability disclosure program, and incident response contacts to enhance trust and compliance. Overall, Cellhire demonstrates a mature digital infrastructure and a solid market position in the telecommunications and IoT sectors, with room for improvement in transparency and security communication to stakeholders.
Travel South Yorkshiresupertram.com
Transportation · United Kingdom
77Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Travel South Yorkshire operates the Sheffield Supertram, a key public transportation service in South Yorkshire, UK. The website provides comprehensive information on tram routes, tickets, journey planning, and accessibility, targeting residents and visitors. The business is publicly owned and operates a significant number of weekly tram services, positioning itself as an essential regional transport provider. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Kentico CMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers and explicit policies are missing. The WHOIS data is unavailable, which raises some concerns about domain transparency, but the website content and external references support legitimacy. Overall, the site is professional, user-friendly, and compliant with privacy regulations.
Tarmactarmac.com
Transportation · United Kingdom
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Tarmac is a leading UK-based construction materials and solutions provider specializing in aggregates, concrete, cement, asphalt, and related services. The company serves a broad range of construction and infrastructure projects nationwide, positioning itself as a key player in the transportation and manufacturing sectors. The website reflects a mature digital presence with comprehensive product and service offerings, including logistics, contracting, and innovation initiatives. Technically, the site is built on WordPress with modern plugins and APIs, delivering a professional and responsive user experience. Security posture is strong with HTTPS enforcement and anti-clickjacking measures, though explicit security policies and incident response details are not publicly available. The absence of WHOIS registration details is a notable anomaly but does not detract from the overall legitimacy of the site. Strategic recommendations include publishing detailed privacy and security policies and enhancing accessibility features to further strengthen trust and compliance.
JLAjla.com
Manufacturing · United Kingdom
84Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
JLA is a well-established UK-based company specializing in commercial equipment solutions, including laundry, catering, heating, and water services. The company targets businesses and organizations requiring reliable commercial equipment and maintenance services. Their market position is strong, supported by a long domain history and consistent branding. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and security headers, though improvements such as DNSSEC and a formal security policy could enhance trust. Privacy compliance is good with clear policies and consent mechanisms. Overall, JLA presents a credible and trustworthy online presence suitable for its business sector.
- The Hyde Group
hyde-housing.co.uk
Real Estate · United Kingdom
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Hyde Group website represents an established UK housing provider focused on delivering homes and community services. The site branding and content emphasize their mission to provide quality housing and serve communities, positioning them as a reputable entity in the real estate sector. The website is professionally designed with good content relevance and user experience, targeting residents and stakeholders in the housing market. Technically, the site uses modern web technologies including asynchronous script loading, web fonts, and social sharing tools, with HTTPS enforced ensuring secure communications. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of visible contact information, indicates gaps in privacy compliance and user support. The WHOIS data is unavailable due to domain naming rules errors, which raises concerns about domain registration transparency but does not necessarily reflect on the business legitimacy. Overall, the site demonstrates a solid security posture with room for improvement in compliance and transparency.
Institute of Directorsiod.com
Government · United Kingdom
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Institute of Directors (IoD) operates as a prominent UK-based membership organization dedicated to supporting business leaders and directors through professional development, networking, and advocacy. The website presents a comprehensive suite of services including membership tiers, training programs, events, and policy influence, positioning the IoD as a key player in UK business leadership. The digital infrastructure is built on WordPress with modern SEO and analytics tools, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response details are absent. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which slightly impacts overall trust. Strategic recommendations include publishing detailed security and incident response policies, providing direct contact information, and clarifying domain registration details to enhance credibility and trust.
Procure Plus Holdings Limitedprocure-plus.com
Non-profit · United Kingdom
82Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Procure Plus Holdings Limited is a UK-based not-for-profit organization specializing in social housing procurement frameworks. Established in 2020, it serves public sector housing providers and contractors by delivering value through equitable supply chain partnerships and community-focused employment initiatives. The company positions itself as a leader in social housing procurement with a strong emphasis on social value and community impact. The website reflects a professional and consistent brand image, supported by industry accreditations and case studies that reinforce trust and credibility. Technically, the site is built on WordPress with modern plugins and libraries, offering good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS and GDPR compliance, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or data source limitations, but the website's professionalism mitigates immediate trust issues. Overall, the site presents a low-risk profile with strong business credibility and technical maturity.
Atomzephyr.bar
E-commerce
77Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The website domains.atom.com/lpd/name/www.zephyr.bar is a premium domain sales landing page operated by Atom, offering the domain Zephyr.Bar for purchase. The business model focuses on domain marketplace services, providing premium domain sales with options for installment payments and transaction support. The site targets startups and entrepreneurs seeking memorable and brandable domain names, particularly in the hospitality or bar industry. The website is professionally designed with good content relevance and consistent branding, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and reCAPTCHA for bot protection. However, the absence of WHOIS data and lack of explicit privacy, cookie, and terms of service policies limit the transparency and trustworthiness of the domain registration and business operations. Security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but missing security headers and incident response information are areas for improvement. Overall, the site presents a functional and professional front for domain sales but would benefit from enhanced compliance and transparency measures.
The Water Industry Commissionwatercommission.co.uk
Government · United Kingdom
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The Water Industry Commission for Scotland (WICS) is a small, essential government regulatory body responsible for overseeing the Scottish water industry. Their mission is to ensure high-quality water services and value for money for customers through economic regulation, performance monitoring, and market oversight. The website reflects a professional and authoritative presence with comprehensive information about their role, consultations, publications, and transparency commitments. Technically, the site is built on Drupal 11, uses modern web technologies, and implements a cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and publishing a security.txt file. Overall, the website is trustworthy, well-maintained, and serves its public sector regulatory function effectively.
Ore Valley Housing Associationorevalleyha.co.uk
Real Estate · United Kingdom
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Ore Valley Housing Association is a registered social landlord and charitable organization providing social and affordable housing services primarily in Fife, Scotland. The organization offers a range of tenant services including rent payment, repairs, community initiatives, and energy projects. The website reflects a medium-sized, community-focused non-profit with a strong local presence and regulatory compliance. Technically, the website employs a modern tech stack including jQuery, RoyalSlider, Matomo analytics, and accessibility tools such as ReadSpeaker and Google Translate. The site is mobile-optimized, accessible, and includes a comprehensive cookie consent mechanism. Security posture is good with HTTPS enforced and privacy-conscious analytics, though there is room for improvement in security headers and published policies. WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which slightly reduces trustworthiness but the website content and business information are consistent and professional. Overall, the site is safe, trustworthy, and well-maintained, serving a general audience without any adult or explicit content.
Cambridge & Counties Bankccbank.co.uk
Finance · United Kingdom
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Cambridge & Counties Bank is a niche financial institution specializing in property finance, asset finance, specialist car finance, and business savings accounts. Established in 2012, the bank positions itself as a partner to businesses and intermediaries, offering tailored financial solutions to support business growth. The website reflects a professional and consistent brand image, targeting business clients primarily in the United Kingdom. The digital presence is built on a WordPress CMS with integrations for SEO, analytics, and marketing, demonstrating a mature technical infrastructure. Hosting and domain registration are managed through reputable providers, ensuring reliability and security. Security posture is strong with HTTPS enforcement, Cloudflare protection, and bot mitigation via Google reCAPTCHA. Cookie consent and GDPR compliance are well implemented through Cookiebot, providing transparency and user control over data privacy. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, supporting the bank's credibility in the financial sector.
Agile Collective Ltdagile.coop
Technology · United Kingdom
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Agile Collective Ltd is a UK-based worker-owned digital agency specializing in designing, building, and supporting websites for purpose-driven organizations that prioritize environmental sustainability, social responsibility, equality, and human rights. Founded in 2012, the company operates as a worker co-operative, emphasizing ethical business practices and community engagement. Their core technical expertise lies in Drupal CMS, supported by a team of digital strategists, designers, developers, and project managers located across the UK, Italy, and Sweden. The agency maintains a strong market position within the ethical and non-profit sectors, leveraging open source technologies and active participation in cooperative networks such as Co-Tech and Workers.coop.
- Clarion
whitefield.barnet.sch.uk
Education · United Kingdom
80Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Clarion is an ambitious and inclusive secondary school located in Barnet, North London, recently rebranded from Whitefield School in 2025. The institution focuses on delivering excellent academic results and opportunities for students, emphasizing character development and resilience. The website reflects a professional educational institution with comprehensive information for students, parents, and staff, including admissions, sixth form details, and safeguarding policies. The school maintains an active presence on major social media platforms and provides multiple channels for contact and engagement.
Northwood Hygiene Products Ltdnorthwood.co.uk
Manufacturing · United Kingdom
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Northwood Hygiene Products Ltd is a UK-based group specializing in the manufacturing, supply, and transportation of paper hygiene and wiping products for both away-from-home and consumer markets. The company positions itself as a leading provider in this sector, offering a comprehensive supply chain to ensure quality and reliability. Their website reflects a professional and business-focused approach, targeting commercial clients and consumers alike. The presence of a customer login portal and product finder tool enhances user engagement and service delivery. Technically, the website is built on WordPress with modern SEO and security practices, including HTTPS and reCAPTCHA integration. However, the absence of WHOIS data due to domain naming rules limits full verification of domain legitimacy. Security posture is solid with standard headers and encrypted connections, though explicit security policies and incident response contacts are missing. Overall, the site is trustworthy and well-maintained, with room for improvement in transparency and security documentation.
Reignwood Investments UK Ltd.wentworthclub.com
Hospitality · United Kingdom
82Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Wentworth Club is a prestigious private golf and country club located in Surrey, England, offering world-class golf courses, tennis and health facilities, dining, and spa services. The club has a rich history dating back to 1922 and is home to major golf tournaments such as the BMW PGA Championship. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting affluent individuals interested in exclusive club memberships and sports. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses common libraries such as jQuery and Slick Slider. It integrates Google Tag Manager for analytics and employs GDPR-compliant cookie management. Security posture is good with HTTPS enforced and no visible sensitive data exposure, though security headers could be improved. The absence of WHOIS data reduces domain trust slightly, but overall the site appears legitimate and well-maintained.
- OOptima Legal Services Limited
optimalegal.co.uk
Real Estate · United Kingdom
80Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Optima Legal Services Limited is a UK-based specialist property law firm operating under an Alternative Business Structure (ABS) status. The company focuses on remortgage and property legal services, providing dedicated customer service and case tracking solutions. Their market position is supported by regulatory compliance with the Solicitors Regulation Authority (SRA) and public transparency through gender pay gap and modern slavery statements. The website is professionally designed with clear navigation and consistent branding, targeting property owners and clients seeking legal conveyancing services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and the Tabler.io UI framework. The site is mobile-optimized and includes a cookie consent mechanism that restricts tracking cookies, reflecting a strong privacy posture. However, no advanced security headers were detected, and no visible contact information or security incident response details are provided on the main site. From a security perspective, the site uses HTTPS and enforces strict cookie policies, but lacks published vulnerability disclosure or incident response contacts. The absence of WHOIS data due to domain naming rules violation introduces uncertainty about domain registration legitimacy, although the website content and regulatory references support a legitimate business presence. Overall, the website presents a professional and trustworthy front for a legal services firm but would benefit from enhanced transparency in contact information and security disclosures. The domain registration anomaly should be investigated to ensure full legitimacy and trustworthiness.
- Lissan Coal Company
lccoil.com
Energy · United Kingdom
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
LCC Oil is a small, family-owned energy supplier specializing in home heating oil and coal, serving the Cookstown area and beyond. Established in 1997 as part of Lissan Coal Company, it has grown steadily with a focus on competitive pricing, fast delivery, and customer satisfaction. The company offers online ordering and instant price quotes, targeting both domestic and commercial customers including the agriculture sector. The website reflects a professional and consistent brand image with clear business information and a customer login portal. Technically, the website is built using modern frameworks such as Blazor and Bootstrap, with Google reCAPTCHA integrated for bot protection. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. Hosting appears to be managed via GoDaddy, consistent with the domain registrar information. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. From a security perspective, the site uses HTTPS and implements basic security best practices, but lacks DNSSEC and standard security headers. No incident response or vulnerability disclosure policies are published, which could be improved to enhance security posture. The domain registration data is consistent with the business claims, showing a long-established domain with appropriate protections against unauthorized changes. Overall, the website is trustworthy and professionally maintained, with room for improvement in security policies and contact information transparency. Strategic recommendations include enabling DNSSEC, adding security headers, publishing incident response contacts, and enhancing transparency around security practices.
Macquarie Telecommacquarietelecom.com
Telecommunications · Australia
79Low
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Macquarie Telecom is a prominent Australian telecommunications provider specializing in business communication solutions including cloud, data networking, voice, and cybersecurity services. The company targets enterprise and government sectors, positioning itself as a trusted partner with a strong focus on secure and reliable IT infrastructure. The website reflects a professional and consistent brand image, supporting its market position with clear service offerings and contact channels. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and frameworks such as Bootstrap and jQuery UI, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and security headers, though the absence of a published security policy and vulnerability disclosure reduces transparency. The lack of WHOIS registration data is a notable anomaly that impacts domain trustworthiness, though the overall website and business credibility remain high. Strategic recommendations include publishing a formal security policy, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further strengthen trust and compliance.
Healthcare · Germany
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
apotheken.de is a well-established German healthcare and pharmacy information portal offering extensive content on diseases, symptoms, therapies, medications, and pharmacy services including emergency pharmacy locators and medication pre-orders. The website targets the general German-speaking public seeking reliable health information and pharmacy-related services. The business model appears to be based on providing valuable health content and services, likely monetized through advertising and partnerships. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, hosted on Amazon AWS infrastructure. The site is responsive and optimized for mobile devices with good SEO and accessibility features. Security-wise, the website enforces HTTPS, uses security headers, and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or suspicious patterns were detected. Overall, apotheken.de demonstrates a strong security posture, good privacy compliance, and high content quality, making it a trustworthy source for health information. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts.
Yahooyahoo.com
Technology · Germany
82Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Yahoo operates as a major global internet services company offering products such as search, email, news, and advertising. This specific page is dedicated to managing user privacy and consent in compliance with GDPR, targeting German users. The company maintains a strong market position with a comprehensive privacy framework and transparent user consent mechanisms. Technically, the site uses modern web technologies including JavaScript and CSS, and integrates analytics via YAHOO.i13n.Rapid. Security is robust with HTTPS enforced and CSRF protections in place, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and user trustworthiness.
Britannia Jinky Jersey Limitedpontins.com
Hospitality · United Kingdom
84Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Sand Bay Holiday Village is a UK-based adults-only holiday resort located near Weston-super-Mare, Somerset. The business offers seaside accommodation, live entertainment, and leisure activities targeting adult travelers seeking a peaceful and sociable coastal break. The website presents a professional and well-structured digital presence with clear navigation, mobile optimization, and comprehensive content about the facilities and services. Technically, the site uses modern JavaScript libraries, Google Maps API, and tracking tools such as Google Analytics and DotDigital, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. The WHOIS data is unavailable due to domain naming rules issues, but the website content and contact information support legitimacy. Overall, the site is trustworthy, compliant with privacy regulations, and well-positioned in the hospitality market niche.
- RRobust Details Limited
robustdetails.com
Real Estate · United Kingdom
76Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Robust Details Limited operates a UK-based compliance scheme providing an alternative to pre-completion sound testing under Part E of the Building Regulations. The company is positioned as a market leader in sound testing compliance, targeting construction professionals and regulatory bodies. Their services include guidance, plot registration, monitoring, and assessment of sound insulation details. The website is professionally designed with clear navigation and relevant content, supporting their business model effectively. Technically, the site employs a modern JavaScript stack including jQuery, Knockout.js, and various analytics tools such as Google Analytics and Microsoft Application Insights. The site is mobile optimized and uses cookie consent mechanisms, indicating a reasonable level of digital maturity. However, explicit security headers are not detected, and the SSL configuration details are not fully available, suggesting room for improvement in security hardening. From a security perspective, the site shows moderate maturity with HTTPS usage and cookie consent but lacks visible security headers and incident response contact information. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and business information appear consistent and professional. Overall, the site presents a moderate security posture with recommendations to enhance header security and verify domain registration. The overall risk assessment is moderate with strategic recommendations focusing on improving security headers, verifying domain registration, enhancing incident response readiness, and maintaining compliance with privacy regulations to strengthen trust and security culture.
Switch to Woodswitchtowood.co.uk
Retail · United Kingdom
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Switch to Wood is a UK-based company specializing in the design, manufacture, and distribution of bespoke electrical wiring accessories including wood, bakelite, and metal switches and sockets. Established in 1999, the company serves both domestic and international markets with a focus on craftsmanship and timeless design. Their e-commerce platform offers a broad range of products with detailed categorization and customer support. Technically, the website employs modern web technologies such as Google Tag Manager, Google Fonts, and Slick Carousel, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and consent management for analytics and advertising, though some security headers are missing and no explicit vulnerability disclosure or security policy pages are found. The domain WHOIS data is unavailable due to a Nominet UK naming rules violation error, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site is trustworthy and well-maintained but would benefit from improved domain registration transparency and enhanced security headers.
Feltonfleet Schoolfeltonfleet.co.uk
Education · United Kingdom
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Feltonfleet School is a well-established UK preparatory school catering to children aged 3 to 13, located in Surrey. The website reflects a professional educational institution with a strong emphasis on core values, academic excellence, and a nurturing environment. The school recently announced a merger with Reed's School, indicating strategic growth and expansion. Technically, the website employs modern web technologies including jQuery, Bootstrap, and a proprietary CMS, with integrated analytics and cookie consent management, demonstrating digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data due to domain registration errors limits domain trust verification but does not detract from the professional presentation and content quality. Overall, the site is user-friendly, well-structured, and compliant with privacy regulations.
Greencorebakkavor.com
Manufacturing · United Kingdom
82Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Greencore is a leading UK-based producer of convenience foods, serving retailers and foodservice customers with a broad product portfolio and a strong focus on sustainability and innovation. The website reflects a mature, professional business with comprehensive investor relations, media, and career resources. Technically, the site is built on WordPress with modern analytics and tracking tools, optimized for performance and mobile use. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though some standard compliance documents like privacy policy and terms of service are not explicitly found. WHOIS data is unavailable, likely due to privacy protection, but the website's content and external signals support legitimacy. Overall, the site demonstrates a high level of digital maturity and business credibility.
- Coeur Mining, Inc.
coeur.com
Energy · United States
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Coeur Mining, Inc. is a well-established U.S.-based precious metals producer operating multiple mines across North America and Mexico. The company focuses on sustainable mining practices and operational excellence, targeting investors and stakeholders interested in precious metals. The website is professionally designed, mobile-optimized, and provides comprehensive investor relations content including stock information, filings, and corporate governance details. Technically, the site leverages modern JavaScript libraries, Google Analytics, and Q4 Inc.'s investor relations platform, ensuring a robust digital presence. Security measures include HTTPS enforcement, Content Security Policy, and reCAPTCHA for form protection, reflecting a mature security posture. However, the absence of explicit cookie consent mechanisms and missing WHOIS data slightly reduce trust. Overall, the site is credible, secure, and well-suited for its business purpose.
- Kroll
duffandphelps.com
Finance · United States
79Low
NIS2 67 · GDPR 88
NIS2 67 · GDPR 88
Kroll is a leading independent provider of financial and risk advisory solutions, serving a broad range of corporate clients, financial institutions, legal professionals, and government agencies. The company leverages unique insights, data, and technology to address complex demands in financial advisory, risk management, cyber risk, and compliance. Their market position is strong as a trusted enterprise-level consultancy with a global presence. Technically, the website is built on modern frameworks such as Next.js and React, with integration of Google Tag Manager and OneTrust for consent management. The site demonstrates good performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. The use of structured data and comprehensive metadata supports SEO and content discoverability. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses consent management tools to comply with privacy regulations. However, the absence of a public security policy, incident response contact, and vulnerability disclosure reduces transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence for Kroll. The main risk factor is the lack of WHOIS data, which slightly impacts domain trustworthiness but is mitigated by strong brand signals and content quality. Strategic recommendations include publishing security policies and incident response information to enhance trust and compliance visibility.
- Barry University
barry.edu
Education · United States
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Barry University is a well-established higher education institution based in Miami, Florida, offering a wide range of undergraduate and graduate degree programs. The university focuses on fostering positive change in local and global communities through hands-on learning experiences. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its academic mission. Technically, the site employs modern web technologies including ASP.NET Core, Google Tag Manager, and multiple analytics and marketing tools, hosted likely on Microsoft Azure infrastructure. Security posture is strong with HTTPS enforcement, anti-forgery protections, and consent management, though explicit security headers could be more visible. Privacy compliance is robust, featuring detailed cookie and privacy policies with user consent mechanisms. The absence of WHOIS data slightly impacts trust but does not detract from the overall legitimacy given the professional presentation and known entity status. Overall, Barry University’s website demonstrates a high level of digital maturity and security awareness appropriate for an educational institution.
Fairstone Group Ltduskvalefinancial.co.uk
Finance · United Kingdom
81Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Fairstone Group Ltd is a UK-based financial advisory firm offering a broad range of services including independent financial advice, wealth management, retirement and estate planning, mortgage advice, and corporate financial planning. The company targets UK residents seeking professional financial planning and wealth management solutions, positioning itself as a trusted and established player in the financial services sector. The website reflects a mature digital presence with consistent branding and comprehensive service descriptions, supported by trust signals such as FCA registration and Trustpilot reviews. Technically, the website is built on WordPress with modern integrations including Gravity Forms, Google Tag Manager, Cookiebot for consent management, and analytics tools like Google Analytics and Plausible. The site is mobile optimized, accessible, and employs standard security best practices such as HTTPS and cookie consent mechanisms. Performance is moderate with room for optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement. The WHOIS data is unavailable due to domain naming rules errors from Nominet UK, limiting domain registration verification. Despite this, the website content and business information strongly indicate legitimacy. Overall, Fairstone presents a professional and trustworthy online presence suitable for its financial advisory business. Strategic recommendations include publishing detailed security and incident response policies, implementing a security.txt file, and continuous monitoring of third-party scripts to maintain security and compliance.
Penketh Packaginglancopak.co.uk
Manufacturing · United Kingdom
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Penketh Packaging is a UK-based packaging supplier offering a wide range of packaging products and solutions tailored for business customers. Their website demonstrates a solid market position with a focus on sustainable and automated packaging options, supported by next-day delivery services. The technical infrastructure includes modern JavaScript libraries, Google Analytics, and Cookiebot for consent management, indicating a mature digital presence. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Overall, the website is professional and trustworthy, though the lack of WHOIS data introduces a minor trust gap. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms.
THE GAP PARTNERSHIPthegappartnership.com
Other · United Kingdom
81Low
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
The Gap Partnership is a well-established global negotiation consultancy founded in 1997, specializing in negotiation consulting, training, and coaching services enhanced by AI technologies. The company serves a broad international client base with a strong market position, delivering significant commercial impact and ROI. The website reflects a mature digital presence with professional design, multi-language support, and comprehensive content showcasing their expertise and certifications such as Qualiopi. Technically, the site uses modern web technologies including Google Tag Manager, Usercentrics for consent management, and Cloudflare Turnstile for bot protection, indicating a focus on security and privacy compliance. Security posture is strong with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS domain registration data is a notable concern, potentially impacting trust and legitimacy verification. Overall, the site is professional, secure, and privacy-conscious, serving a business audience effectively.
Menard UKvibromenard.co.uk
Energy · United Kingdom
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Menard UK is a well-established national specialist in ground improvement engineering, providing soil stabilization and foundation strengthening services primarily to construction and infrastructure sectors in the United Kingdom. The company operates under the parent Menard Group and has a strong market position supported by a professional and informative website. The technical infrastructure is based on WordPress with modern SEO and performance optimizations, ensuring good user experience and accessibility. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website demonstrates compliance with GDPR and cookie regulations, reflecting a mature digital presence. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.
Fruitnetfruitnet.com
Media
79Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Fruitnet is a professional media publisher specializing in news, analysis, and commentary for the global fresh produce industry. The website serves industry professionals by providing up-to-date information, event promotion, podcasts, and video content. It holds a leading market position as a fresh produce business publisher with multiple branded sub-sites targeting different regional markets. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and OneTrust for cookie consent, hosted behind Amazon CloudFront CDN. The site is mobile-optimized with good navigation and content quality. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is supported by a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service pages. The WHOIS data is missing or indicates the domain is unregistered, which is a significant anomaly that reduces trustworthiness from a domain registration perspective. Overall, the site is professional and trustworthy in content but should address domain registration transparency and improve security and privacy disclosures.
Bébécarbebecar.com
Retail · Spain
84Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Bébécar is a medium-sized retail and manufacturing company specializing in baby pushchairs, car seats, accessories, and nursery furniture. The company targets parents and caregivers seeking high-quality, safe baby products. Their website reflects a professional e-commerce platform built on WordPress and WooCommerce, offering a user-friendly experience with good mobile optimization and clear navigation. The brand maintains consistent and trustworthy branding with active social media presence and compliance with privacy regulations such as GDPR. Technically, the site uses common and reliable technologies including jQuery, WooCommerce, and RevSlider, ensuring moderate performance and good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data is unavailable or privacy protected, which slightly reduces trust but does not negate the legitimacy of the business given the professional online presence. Overall, the website is safe, well-maintained, and suitable for its target audience.