Security Directory

The Marsh Agency is a UK-based literary agency established in 1997, offering international representation services to writers, literary agents, and publishing companies. The website reflects a professional and consistent brand presence targeting literary professionals and publishing industry stakeholders. The business model centers on representation and rights management, positioning the agency as an established player in the media sector with a small company size. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, hosted by Zen Internet Limited. It employs Google Analytics and Tag Manager for user tracking and marketing insights. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices appear adequate with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers such as CSP or HSTS. Forms include basic anti-spam measures but no visible cookie consent or privacy compliance mechanisms beyond a privacy policy page. No incident response or security policy information is published, indicating room for improvement in security transparency and GDPR compliance. Overall, the website is trustworthy and professionally maintained, with a solid business credibility score. However, enhancements in privacy compliance, security headers, and incident response disclosures would strengthen the security posture and regulatory adherence.

Tomtom Coffee House is a specialist coffee shop located in Belgravia, London, known for its high-quality coffee made from Allpress roast beans. The business targets coffee enthusiasts and local customers in the West End area, operating a retail coffee shop model with a strong local reputation. The website is built on WordPress using common plugins and frameworks such as Bootstrap, jQuery, and Contact Form 7, indicating a moderate level of digital maturity. The site includes marketing and analytics tools like Google Analytics and Crazy Egg, and offers newsletter signup forms for customer engagement. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and explicit incident response or security policies. Privacy and cookie policies are present but basic, with some GDPR compliance indicators. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name is invalid under Nominet UK rules, which raises concerns about domain legitimacy or configuration. Overall, the website is professional and functional but would benefit from enhanced security practices and clearer compliance documentation.

K

Kingston Recruitment Ltd

kingstonrecruitment.co.uk

46

Kingston Recruitment Ltd is a well-established recruitment agency based in Hull, East Yorkshire, specializing in office and commercial recruitment services including temporary, contract, and permanent placements. Founded in 1985, the company serves both candidates and clients with a strong regional presence and a reputation for quality service. The website reflects a professional business model focused on staffing solutions for a variety of sectors. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Owl Carousel, and integrates live chat via Tawk.to and analytics through Google Analytics and Tag Manager. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is implied but no security headers were detected in the provided data, and no explicit security or incident response policies are published. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. WHOIS data could not be retrieved due to domain naming issues, which raises concerns about domain registration consistency but does not directly impact the legitimacy of the business as presented on the site. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

E

Ethical Technology Ltd t/a Ethitec

ethitec.com

69

Ethitec, trading as Ethical Technology Ltd, is a UK-based software company established in 1975 specializing in healthcare and public sector software solutions. Their flagship products include ELMS2, a community equipment management system, and Tiara9, a clinical management system widely used by NHS and allied health professionals. The company positions itself as a trusted provider with a strong focus on quality, evidenced by ISO 9001:2015 and Cyber Essentials Plus certifications. Their target audience includes public sector organizations, healthcare providers, and private sector clients requiring bespoke software solutions. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized with good navigation and content quality. However, some security best practices like security headers are missing, and WHOIS data for the domain is unavailable, which slightly reduces transparency. Security posture is solid with HTTPS enforced, privacy and cookie consent mechanisms in place, and certifications that indicate a mature security approach. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with GDPR-aligned policies and consent management. Business credibility is high due to clear contact information, certifications, and professional content. Overall, Ethitec presents a professional and trustworthy online presence with room for improvement in domain transparency and security headers. Strategic recommendations include publishing security headers, adding incident response contacts, and maintaining up-to-date software to enhance security and trust.

N

Nationwide Cleaning

nationwidecleaning-fm.co.uk

49

Nationwide Cleaning is a family-owned, private limited company based in Croydon, UK, specializing in commercial and transport cleaning services. The company targets businesses in sectors such as transport, education, healthcare, and leisure, emphasizing long-term client relationships and personalized service. The website presents a professional image with clear service offerings and contact information, supported by client logos and accreditations. Technically, the site uses common web technologies including Bootstrap and jQuery, though some libraries are outdated. Security measures are basic, with cookie consent implemented but lacking advanced protections such as security headers or CAPTCHA on forms. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and trustworthy from a content perspective but would benefit from improved security and compliance documentation.

F

Fountain Court

fountaincourt.co.uk

69

Fountain Court Chambers is a prestigious set of commercial barristers based in London with an additional office in Singapore. They specialize in commercial disputes, litigation, and arbitration, serving clients both in the UK and internationally. The chambers are recognized as leaders in their field, with numerous accolades and a strong reputation for expertise and professionalism. Their website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with their market position. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses industry-standard SEO and analytics tools including Yoast SEO and Google Analytics. The site is mobile-optimized, accessible, and performs moderately well, with room for improvement in security headers and performance tuning. The presence of cookie consent mechanisms and GDPR compliance indicates a good level of privacy awareness. From a security perspective, the site uses HTTPS and Cloudflare bot management, but lacks explicit security headers and a published vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Contact information is clearly provided, but incident response contacts are not explicitly stated. Overall, Fountain Court Chambers presents a trustworthy, professional, and well-maintained online presence suitable for their legal services business. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer incident response contacts to further strengthen their security posture and compliance.

A

Anglian Timber Ltd

angliantimber.co.uk

50

Anglian Timber Ltd is a UK-based supplier and manufacturer specializing in timber and landscaping products. The company serves trade and merchant customers primarily in the building and landscaping sectors, offering a range of products including pressure-treated timber, fencing, decking, and bespoke timber solutions. Their regional presence between Ipswich and Colchester positions them as a local trusted supplier. The website is built on Joomla! CMS with modern front-end technologies such as Bootstrap and jQuery, and includes interactive elements like sliders and embedded Google Reviews. Security measures include HTTPS and Google reCAPTCHA v3, though some security headers are missing. Privacy policy is present but lacks a cookie consent mechanism, indicating partial privacy compliance. Contact information is clearly provided, enhancing business credibility. WHOIS data for the exact domain queried is unavailable due to domain naming rules, but the website content and structure suggest a legitimate business.

P

Project8ball

project8ball.com

40

Project8ball is a UK-based digital agency presenting itself as a disruptive creative and functional service provider. The website indicates a transition to a new brand, VerticalVertical.com, suggesting a strategic rebranding after 8 years of operation. The company targets businesses seeking digital agency services, emphasizing creativity and timely project delivery. The site is built on WordPress with modern plugins and frameworks, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, though the website content and branding appear professional. Overall, the site is safe, professional, and moderately trustworthy but would benefit from enhanced privacy compliance and security practices.

W H Malcolm Ltd operates as a well-established UK-based company specializing in logistics, rail, construction, maintenance, and sports surfaces. The company demonstrates a strong market position with multiple service divisions and recognized industry awards, targeting business customers and partners in transportation and construction sectors. The website content is professionally presented, consistent in branding, and provides comprehensive information about the company's services and corporate details. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Fonts, and multiple analytics platforms, with good mobile optimization and SEO practices. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The WHOIS lookup failed due to querying an invalid subdomain, but company registration details and website content support legitimacy. Overall, the site is secure, compliant with GDPR, and trustworthy, with room for improvement in security policy transparency and technical security headers.

C

CWO Design Studio

cwodesignstudios.com

51

CWO Design Studio is a small architectural and construction service provider focusing on solutions for construction, management, and restoration projects. Their key services include architecture planning, building regulations compliance, refurbishment, extensions, new build projects, and project coordination. The website is built on WordPress using Elementor and related plugins, presenting a professional and well-structured digital presence. However, the domain WHOIS data is missing, raising concerns about domain registration legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and proper privacy compliance. The Google Analytics plugin is present but not configured, indicating incomplete analytics setup. Overall, the website is functional and relevant to its target audience but requires improvements in security, compliance, and transparency to enhance trust and credibility.

P

Piranha AV

piranhaaudiovisual.co.uk

58

Piranha AV is a UK-based company specializing in advanced audio visual solutions tailored for sectors including public sector, visitor attractions, education, churches, and corporate environments. Their services encompass AV system design, installation, integration, maintenance, upgrades, and repairs, aiming to make technology seamless and accessible. The website demonstrates a professional digital presence with customer testimonials and case studies highlighting their expertise and reliability. Technically, the site is built on WordPress with modern libraries such as jQuery, Bootstrap, and Swiper.js, and integrates marketing and review tools like Klaviyo and REVIEWS.io. Security posture is moderate with HTTPS implied but lacks explicit security headers and formal privacy or incident response policies. WHOIS data is unavailable or invalid, which raises some concerns about domain registration legitimacy. Overall, the website is functional, trustworthy in content, but would benefit from enhanced security and compliance documentation.

A

Alliance Automotive UK

carspares.co.uk

58

Alliance Automotive UK is a prominent distributor and service provider in the UK automotive aftermarket sector, affiliated with the Genuine Parts Company (GPC). The company operates multiple automotive brands and offers logistics, garage networks, and digital commerce platforms targeting automotive professionals and retailers. The website is built on WordPress and employs modern web technologies including jQuery, Bootstrap, and analytics tools such as Google Analytics and Matomo. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear cookie consent mechanism implemented. Security posture is good with HTTPS enforced, though some security headers could be improved. The website is professional, well-branded, and trustworthy, though the specific member page requested is a 404 error, indicating the page is missing or removed.

W

Welcom Digital Limited

welcom.co.uk

70

Welcom Digital Limited is a UK-based company specializing in digital lending solutions, primarily through their flagship Financier loan management platform. They serve a broad range of clients including smaller firms and FTSE100 companies, positioning themselves as a trusted provider in the fintech and financial services sectors. Their platform supports consumer, commercial, and secured finance lending with a focus on automation, compliance, and customer experience. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting digital lenders and fintech businesses. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and Google Fonts, with integrations for Google Analytics, Cookiebot for consent management, and Lead Forensics for visitor tracking. The site is mobile-optimized and uses HTTPS with strong SSL configuration. Forms are protected with Google reCAPTCHA and anti-CSRF tokens, indicating attention to security best practices. However, some security headers are not explicitly detected, and no dedicated security or incident response pages are present. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy and cookie policy, GDPR compliance indicators, and a consent mechanism. Business credibility is supported by clear company information, client testimonials, and social media presence. Overall, the website is trustworthy and professionally maintained. Strategically, Welcom Digital should consider publishing explicit security and incident response policies to enhance transparency and trust. Regular security audits and accessibility improvements would further strengthen their digital maturity and compliance posture.

V

Volunteer Cornwall

volunteercornwall.org.uk

54

Volunteer Cornwall is a UK-based registered charity dedicated to promoting voluntary action and community engagement throughout Cornwall. The organization provides a variety of services including volunteer recruitment, community projects, training programs, transport services, and health and social care volunteer initiatives. The website reflects a well-established regional charity with a strong local presence and trusted reputation. Technically, the site is built on Joomla CMS using common libraries such as jQuery and Bootstrap, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its target audience effectively.

Supreme Freight Services Ltd is a well-established independent freight forwarding company based in Southampton, UK, with over 40 years of experience. The company offers a comprehensive range of import and export services by sea, air, and road, including customs clearance, warehousing, insurance, and specialist customs procedures. Their market position is supported by multiple accreditations and a strong client testimonial presence. The website reflects a professional and consistent brand image targeting businesses requiring international freight and logistics solutions. Technically, the website is built on WordPress with Bootstrap and uses modern web technologies including Google Analytics and Google Tag Manager for tracking and marketing. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is good with HTTPS enforced and use of reCAPTCHA on forms, but could be improved by adding explicit security headers and a vulnerability disclosure mechanism. Overall, the security posture is solid for a medium-sized business, with no critical vulnerabilities detected. Privacy compliance is adequate with a comprehensive privacy policy, though cookie consent mechanisms are lacking. The domain WHOIS data is consistent with the business claims, showing a long registration history and no privacy protection, enhancing trustworthiness. Strategic recommendations include improving security headers, implementing cookie consent, and adding a vulnerability disclosure policy to further enhance trust and compliance.

Sherwood Bed Centre is a well-established retail business specializing in beds, mattresses, and bedroom furniture, operating primarily in the East Midlands of the UK. Founded in 1976, it has multiple physical branches and positions itself as the largest independent retailer in its sector within the region. The website serves as a digital storefront showcasing their product range and brand partnerships, supporting their in-store sales and delivery services. Technically, the site is built on WordPress with WooCommerce and the Avada theme, leveraging modern web technologies and providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and policies are lacking. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is legitimate but relatively new compared to the business age, suggesting recent domain acquisition or migration. Strategic improvements in privacy compliance and security policies would enhance trust and regulatory adherence.

GAC is a globally recognized enterprise specializing in shipping, logistics, and marine services. The company offers a comprehensive range of services including ship agency, bunker fuels, contract logistics, freight forwarding, and marine support. With a strong market position and a global footprint, GAC targets businesses requiring integrated logistics and marine solutions. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site employs modern frameworks such as Bootstrap, integrates advanced mapping via Mapbox, and uses industry-standard analytics and consent management tools. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance evident. However, the absence of WHOIS data is a notable anomaly that warrants further investigation to confirm domain registration legitimacy. Overall, the site demonstrates high professionalism and trustworthiness, suitable for enterprise clients worldwide.

N

Northern Visions Media Centre

northernvisions.org

49

Northern Visions Media Centre is a small media organization focused on community broadcasting and media production. The website is currently under redesign and redirects users to their NVTV partner site. The technical infrastructure is based on WordPress with common web technologies such as jQuery and Bootstrap, providing a basic but functional user experience. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. No privacy or cookie policies are published, indicating gaps in compliance. Overall, the site is legitimate with a mature domain but requires improvements in security and privacy practices to enhance trust and compliance.

M

Mike Thomas Preservation

mtpreservation.co.uk

32

Mike Thomas Preservation is a small UK-based company specializing in building preservation services such as damp proofing, dry and wet rot treatment, and wall tie replacement. Established in 1986 as a division of Mike Thomas Building Services, the company targets property owners and mortgage companies primarily in South Wales. The website presents a professional image with clear service descriptions and PCA membership as a trust indicator. Technically, the site uses common JavaScript libraries and CSS frameworks to deliver a responsive and visually appealing experience, though no CMS or hosting details are evident. Security posture is weak due to lack of HTTPS enforcement and missing security headers, and no privacy or cookie policies are present, indicating compliance gaps. The domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and informative but requires significant improvements in security and compliance to enhance trust and protect user data.

M

Moores Ltd

moorescoleraine.com

59

Moores of Coleraine is a well-established independent department store in Northern Ireland, operating since 1925. The business offers a wide range of premium brands across multiple retail categories including menswear, womenswear, childrenswear, beauty, homeware, and interiors. It also provides in-store dining options and personal styling services, with an online shopping platform to complement its physical store. The website reflects a medium-sized retail business with a consistent brand presence and a focus on customer experience. Technically, the website is built on the Umbraco CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and Slick Carousel. It integrates Google Analytics, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA v3 for analytics, marketing, and security purposes. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no publicly available security policy or incident response contact information. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or data unavailability, which impacts domain legitimacy assessment. Overall, the website is professional, user-friendly, and trustworthy in content and design, but the lack of WHOIS transparency and some security header omissions suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to strengthen trust and compliance.

J

James F. Kidd & Son Ltd

jameskidd.co.uk

49

James F. Kidd & Son Ltd is a well-established Scottish company specializing in the distribution of catering supplies, hygiene products, and packaging solutions primarily serving the hospitality and public sector industries. With a history dating back to 1928 and a strong network of over 350 trusted suppliers, the company maintains a significant market position in Scotland, supported by dedicated local delivery fleets and physical showrooms in Edinburgh and Glasgow. Their business model combines wholesale distribution with an e-commerce platform and trade counter sales, targeting hospitality businesses and public sector clients. Technically, the website is built on a mature e-commerce platform (OpenCart) with a technology stack including jQuery, Bootstrap, and various UI plugins. The site demonstrates good mobile optimization, clear navigation, and integration of analytics tools such as Google Analytics and Hotjar for user behavior insights. Hosting is provided by Zen Internet Limited, a reputable UK hosting provider. From a security perspective, the site enforces HTTPS and uses secure login forms and cookie consent mechanisms. However, it lacks explicit security headers like Content-Security-Policy and uses an outdated jQuery version, which could pose vulnerabilities. No incident response or detailed security policies are publicly available, indicating room for improvement in security maturity. Overall, the website presents a professional and trustworthy front for the business with strong compliance to privacy and cookie regulations. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, updating libraries, and publishing security policies to further strengthen trust and compliance.

C

County Vets

county-vets.co.uk

41

County Vets is a well-established veterinary practice based in Ayrshire, UK, providing comprehensive veterinary services for small animals, farm animals, and horses. The business operates two surgeries in Maybole and Ayr, offering a wide range of diagnostics, treatments, and health plans tailored to the needs of their clients. Their market position is that of a trusted local mixed veterinary practice with a clear focus on quality care and client service. Technically, the website is built on WordPress using modern technologies such as Bootstrap 4, jQuery, and FontAwesome. It employs Google reCAPTCHA v3 for form security and enforces HTTPS, ensuring secure communications. The site is moderately performant, mobile-optimized, and has good SEO and accessibility basics, though there is room for improvement in security headers and privacy compliance. From a security perspective, the site demonstrates good practices with HTTPS and anti-bot measures but lacks formal security policies, incident response information, and cookie consent mechanisms, which are important for GDPR compliance. No vulnerabilities or suspicious content were detected, and the domain registration data supports the legitimacy of the business. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

Norgine is a well-established European specialist pharmaceutical company founded in 1906, with a strong global partnership network. The company focuses on acquiring, developing, and commercializing innovative pharmaceutical products that impact patient lives positively, serving approximately 25 million patients annually. The website reflects a professional and consistent brand image, targeting healthcare professionals, partners, and patients. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and user engagement, delivering a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is strong, with clear policies and consent banners. Overall, the website demonstrates high business credibility and trustworthiness.

Bright Blue Foods Ltd operates as BBF Limited, a UK-based ambient cake manufacturer with a strong market presence supplying high-quality cake products to leading retailers and export partners. Their product range includes celebration cakes, fruit pies, tarts, chocolate enrobed cakes, Christmas cakes, mince pies, and chilled desserts. The company operates multiple bakeries in the UK and Poland, emphasizing quality and timely delivery. The website reflects a professional business with clear branding and comprehensive corporate policies, including GDPR privacy and anti-slavery statements. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, with Google reCAPTCHA v3 implemented for form security. The site is mobile optimized and includes cookie consent mechanisms, indicating a good level of digital maturity. However, no HTTP security headers were detected, which is an area for improvement. From a security perspective, the site uses HTTPS and has implemented reCAPTCHA and cookie consent, but lacks published security policies and incident response contacts. The absence of WHOIS data for the domain is a notable anomaly that reduces trustworthiness, although the website content and business information appear legitimate and professional. Overall, the website presents a medium-sized manufacturing business with good digital presence and compliance posture but would benefit from enhanced security headers and transparency in domain registration data to improve trust and security posture.

Dayton Group is a well-established food solutions provider with a century-long history, operating primarily in the Baltic region and Finland. The company specializes in sales, service, and support of equipment for retail, manufacturing, and hospitality sectors. Their market position is strong regionally, supported by multiple subsidiaries and a consistent brand presence. The website reflects a professional business with clear service offerings and contact channels. Technically, the site is built on WordPress with Bootstrap and uses standard analytics tools, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing security headers and explicit privacy and cookie policies. No blocking or WAF challenges were detected, allowing full content access. Overall, the site is trustworthy and business credible but has room for enhanced privacy compliance and security best practices.

C

Clacton Business Services Ltd

clactonbusinessservices.co.uk

50

Clacton Business Services Ltd is a small, established UK-based chartered accountancy firm with over 30 years of experience. The company offers a broad range of financial and accounting services including bookkeeping, payroll, VAT, tax assistance, and specialized services for sectors such as care homes, charities, and educational institutions. The website reflects a professional and consistent brand image targeting small to medium-sized businesses seeking reliable accounting support. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging common web technologies and Google reCAPTCHA for form security. While HTTPS is properly implemented, the absence of security headers and cookie consent mechanisms indicates room for improvement in security posture and privacy compliance. Overall, the site is functional, well-structured, and trustworthy, but could benefit from enhanced security policies and GDPR compliance features.

360 FWD Ltd is a UK-based specialist consultancy focused on continuous sustainable improvement in health and educational sectors, emphasizing person-centred care culture transformation through its proprietary 360 Standard Framework. The company offers audit, training, consultancy, and accreditation services aimed at improving care quality and organizational culture. The website reflects a professional and consistent brand presence with clear contact information and trust signals such as expert testimonials and privacy policies. Technically, the site is built on WordPress with common plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and reCAPTCHA, though lacks advanced security headers and published security policies. WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the overall business presentation is credible and professional.

PowerScribe Internet Solutions Limited is a UK-based small business specializing in custom website design, SEO, web hosting, ecommerce solutions, and digital marketing services. The company targets businesses and individuals seeking affordable and professional internet solutions primarily in the UK and abroad. Their website showcases a range of services including web design, ecommerce platforms, email marketing, and mobile app development, supported by client testimonials and a physical UK address. Technically, the website employs a standard modern tech stack including Bootstrap, jQuery, and popular slider and popup libraries. The site is moderately optimized for mobile and SEO, with a professional design and clear navigation. However, there are security concerns due to the lack of HTTPS confirmation, presence of mixed content (HTTP scripts), and absence of security headers. Privacy and cookie policies are missing, indicating low privacy compliance. The security posture is weak with no visible incident response or security policy information. The WHOIS lookup failed to retrieve domain registration data, raising questions about domain legitimacy and ownership consistency. Despite this, the site content is accessible and professional, with clear contact details and social media presence. Overall, the website presents a credible small business offering web services but requires urgent improvements in security, privacy compliance, and domain registration transparency to enhance trust and reduce risk.

T

Total Pump Solutions Ltd.

totalpumpsolutions.co.uk

43

Total Pump Solutions Ltd. is a UK-based independent distributor specializing in pumps and related equipment for HVAC, process, and industrial markets. Established in 2004, the company leverages extensive industry experience and strong manufacturer partnerships to provide competitive pricing, technical expertise, and comprehensive stock availability. Their website reflects a professional business with clear service offerings and a focus on technical knowledge and customer support. Technically, the website uses a modern Bootstrap framework with common JavaScript libraries but lacks advanced analytics or tracking. Security posture is moderate with no visible HTTPS enforcement or security headers, and privacy compliance is limited by the absence of cookie consent mechanisms. Overall, the business appears credible and trustworthy with a solid market position in its niche.

保

保柏(亞洲)有限公司

bupa.com.hk

57

保柏(亞洲)有限公司 operates a comprehensive medical insurance website targeting individuals and corporate clients in Hong Kong. The company offers a wide range of insurance products including voluntary health insurance schemes, critical illness coverage, family plans, and health support services. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It leverages modern web technologies and analytics tools to enhance user experience and marketing effectiveness. The company maintains a strong market position as a trusted healthcare insurance provider with over 400,000 members and thousands of corporate clients.

A

Arbor Vitae Arboriculture Ltd

avtree.co.uk

56

Arbor Vitae Arboriculture Ltd is a small, specialized tree consultancy and arboriculture service provider based in Scotland, primarily serving Edinburgh and surrounding areas. Founded in 2011 and led by an experienced consulting arborist, the company offers a comprehensive range of services including tree inspections, BS5837 surveys, tree protection, and woodland management. The website reflects a professional and well-established business with strong local trust indicators such as industry memberships and accreditations. Technically, the website is built on WordPress with modern plugins for SEO and GDPR compliance, including Google Tag Manager for analytics and Complianz for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. The performance is moderate, with a clean and navigable design. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively but lacks explicit security policy documentation and some advanced security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable due to a Nominet registration error, which is unusual but does not appear to impact the legitimacy or operation of the website. Overall, the website presents a trustworthy and professional front for Arbor Vitae Arboriculture Ltd, with minor recommendations to improve security posture and accessibility. The domain WHOIS anomaly should be investigated further to ensure full compliance and transparency.

B

Blade Motor Cycles Limited

blademotorcycles.co.uk

75

Blade Motorcycles is a well-established UK motorcycle dealership founded in 1995, specializing in new and used motorcycles from leading brands such as Ducati, Harley-Davidson, Honda, and Triumph. The company operates multiple physical locations across the Southwest UK and offers a comprehensive range of services including motorcycle servicing, MOTs, repairs, finance brokering, and an online shop for motorcycle gear and accessories. The website reflects a professional and consistent brand presence with clear navigation and rich content tailored to motorcycle enthusiasts and buyers in the UK market. Technically, the site employs modern web technologies, including Bootstrap, Google Analytics, Facebook Pixel, and AdRoll for marketing and analytics, and uses DealerWebs CMS as its platform.

The Timber Decking and Cladding Association (TDCA) operates as an independent, not-for-profit advisory body focused on timber decking and cladding in the UK. The organization provides technical guidance, supplier accreditation, membership services, and quality assurance schemes such as DeckMark and CladMark. Their target audience includes commercial organizations and DIY enthusiasts seeking expert advice and trusted suppliers. The website reflects a professional and consistent brand presence with clear navigation and relevant content.

W

Wamco, Inc.

wamcoinc.com

46

Wamco, Inc. is a well-established company specializing in providing lighting solutions across multiple sectors including military, aerospace, automotive, industrial, medical, and stage and studio applications. With over 58 years of experience, the company positions itself as a reliable B2B supplier offering sourcing, custom development, and timely delivery of lighting products globally. The website reflects a professional and consistent brand image, targeting specialized industrial and commercial clients. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Google Analytics, and Google Maps API, indicating a moderate level of digital maturity. The site is mobile-optimized and provides clear navigation and relevant content. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and cookie consent mechanisms, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that slightly impacts trust but does not outweigh the professional presentation and business credibility. Overall, the website is functional, professional, and trustworthy with room for enhanced security and privacy compliance.

Wilson Defraine is a local family-run estate agency based in Newcastle upon Tyne, specializing in property sales, lettings, valuations, and maintenance services. With over 17 years of experience, the company targets buyers, sellers, landlords, and tenants in the local area, emphasizing personalized customer service and local market knowledge. The website reflects a professional and trustworthy business with clear contact information and multiple client testimonials. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Google Fonts, and integrates Google reCAPTCHA for form security. It is built on the 10ninety CMS platform and shows good mobile optimization and user experience. However, the site lacks some advanced security headers and explicit cookie consent mechanisms, which are areas for improvement. From a security perspective, the site uses HTTPS and includes anti-bot measures but does not present comprehensive security headers or detailed privacy compliance features. The WHOIS data for the domain is unavailable due to a registration error, which raises some concerns about domain legitimacy, though the website content and business information appear consistent and professional. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced security practices and clearer privacy compliance to improve user trust and regulatory adherence.

St Pauls Associates Ltd is a UK-based small real estate and architectural services company specializing in residential, commercial, student accommodation, and community projects. The company has an established online presence with a website created on the WordPress platform, featuring a modern tech stack including Bootstrap, jQuery, and GSAP. The website is moderately optimized for performance and mobile devices, with good SEO practices and structured data implemented. Security posture is adequate with HTTPS enabled and secure form submission, but lacks important security headers and privacy compliance documentation such as privacy and cookie policies. No direct contact emails or phone numbers are publicly listed, relying solely on a contact form. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Pronovotech Limited is a UK-based specialist consultancy focused on assisting technology companies in claiming R&D tax incentives. Established in 2006, the company offers a range of tailored services including full claim preparation, technical documentation support, and assistance with HMRC enquiries. The website positions Pronovotech as an independent expert with a strong relationship with HMRC and a client base spanning multiple technology sectors. The digital infrastructure is built on WordPress with modern plugins and SEO tools, hosted by JaguarPC. The site is well-structured, mobile-optimized, and provides clear navigation and contact options. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a professional and credible business with a strong market position in the UK R&D tax relief consulting niche.

Country Love Crafts is a UK-based small retail business specializing in supplying ready-to-decorate craft shapes and pottery materials. The company serves craft studios, hobbyists, and pottery businesses with a broad product range including bisque blanks, clay, glazes, kilns, and decorating supplies. They operate an e-commerce platform powered by Odoo and maintain partnerships with global brands such as DecoArt and Duncan Ceramics. The website is professionally designed with good content quality and clear navigation, targeting craft enthusiasts and studios. Technically, the website uses modern web technologies including Odoo CMS, Bootstrap, FontAwesome, and Google Tag Manager for analytics. The site is mobile optimized and performs moderately well. However, there is a lack of visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The cookie consent mechanism is implemented, indicating some level of privacy compliance. From a security perspective, the site uses HTTPS and includes CSRF tokens, but the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. No critical vulnerabilities or adult content were detected. Overall, the security posture is moderate but could be enhanced by adding security headers, privacy policies, and incident response information. The overall risk assessment suggests the business is operational and credible in its niche but should address domain registration transparency and strengthen security and privacy compliance to improve trust and reduce risk exposure.

SFA (Oxford) is a specialized consulting firm providing bespoke market intelligence and research services focused on critical metals, battery materials, green hydrogen, and fuel cells. The company positions itself as a leading value chain consultancy with a strong track record and a global client base including miners, processors, fabricators, end-users, investors, and recyclers. Their offerings include detailed market reports, consulting solutions, and industry events, supported by a professional and content-rich website. Technically, the website employs modern web technologies including Bootstrap, JavaScript libraries, and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and dedicated security or incident response policies, which are areas for improvement. The absence of WHOIS domain registration data raises some concerns about domain legitimacy and registration transparency, although the website content and business information appear professional and trustworthy. Overall, the website demonstrates a mature digital presence with strong content and marketing practices but could enhance its security posture and transparency regarding domain registration to improve trust and compliance.

Peak Electromagnetics Ltd is a specialized service provider operating since 2004, focusing on electromagnetic effects including EMC, lightning, EMP, and non-ionising radiation exposure. Their primary market sectors include Commercial, Defence, Aerospace, and Oil industries. The company positions itself as a niche expert offering consulting and testing services tailored to these critical sectors. The website content reflects a professional and consistent brand image, targeting industry professionals and organizations requiring electromagnetic expertise. Technically, the website is built on the HubSpot CMS platform, leveraging common web technologies such as jQuery, Bootstrap, and FontAwesome. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The presence of HubSpot marketing and analytics tools indicates a moderate level of digital maturity, though no advanced frameworks or custom backend technologies are evident. From a security perspective, the site lacks visible security headers and explicit SSL configuration details, which suggests room for improvement in hardening the web presence. No sensitive data exposure or vulnerable libraries were detected, but the absence of privacy and cookie policies, as well as incident response information, indicates gaps in compliance and security transparency. The WHOIS data is unavailable due to a domain registration error, which negatively impacts trust and legitimacy assessments. Overall, the website is functional and professional but requires enhancements in privacy compliance, security posture, and transparency to improve trustworthiness and regulatory adherence. Strategic improvements in these areas will strengthen the company's digital presence and stakeholder confidence.

T

Trojan Sheetmetal

trojansheetmetal.co.uk

51

Trojan Sheetmetal is a small, family-run manufacturing business based in Ashford, Kent, specializing in metal fabrication including gates, railings, balustrades, fire hoods, and powder coating services. The company emphasizes over 30 years of experience and offers design, build, and finishing services to local customers. The website reflects a professional and consistent brand image with clear contact details and service descriptions, targeting local businesses and individuals requiring metalwork solutions. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and SVG.js, ensuring good mobile responsiveness and user experience. However, there is no evidence of a CMS or advanced hosting details. Performance is moderate with good SEO practices but basic accessibility features. The site lacks analytics and tracking scripts, indicating minimal user tracking. From a security perspective, the site does not display HTTPS status or security headers, and no privacy or cookie policies are present, which lowers its security posture. The WHOIS lookup failed due to domain naming rules violations, raising concerns about domain legitimacy or configuration, although the website content itself appears legitimate and professional. Overall, the website is functional and informative but requires improvements in security, privacy compliance, and domain registration clarity to enhance trust and reduce risk.

PFS Fire & Security is a UK-based company specializing in fire prevention and security services, targeting residential and corporate clients primarily in Nottingham, Derby, and Leicester. The company offers a range of services including CCTV systems, on-site security, alarm monitoring, and fire protection. The website presents a professional image with clear contact information and client testimonials, positioning PFS as a regional leader with over a decade of experience. Technically, the website is built on WordPress using WooCommerce and Visual Composer, with standard plugins such as Revolution Slider and jQuery. The site is moderately optimized for performance and mobile responsiveness, with good SEO practices evident. However, some plugins appear outdated, and accessibility features are basic. From a security perspective, the site uses HTTPS but lacks important security headers such as Content-Security-Policy and HSTS, which are recommended to enhance protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which raises some concerns about domain registration legitimacy, though the website content itself appears legitimate. Overall, the website is functional and professional but would benefit from improved security practices and privacy compliance to enhance trust and reduce risk.

S

Sinclair Group

sinclairgroup.co.uk

71

Sinclair Group is a well-established, family-run automotive dealership group operating primarily in Wales and Shropshire, UK. With over 75 years of experience, it represents prestigious automotive brands including Audi, Jaguar, Land Rover, Mercedes-Benz, Volkswagen, and others. The company offers a comprehensive range of services including new and used car sales, vehicle servicing, MOT, repairs, finance and leasing, Motability schemes, fleet management, and bodyshop services. The website reflects a large, professional business with multiple dealership locations and a strong regional market presence. Technically, the website is built on a modern stack including Bootstrap, jQuery, and Font Awesome, with Umbraco CMS inferred from backend resource patterns. It employs Google Tag Manager and Matomo for analytics, along with cookie consent mechanisms, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site uses HTTPS and includes cookie consent, but lacks explicit security policy or incident response information. Security headers are partially inferred but not explicitly confirmed. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS lookup for the exact domain 'www.sinclairgroup.co.uk' failed due to Nominet UK naming rules, suggesting the domain is a subdomain or alias; however, the main domain is presumably registered and legitimate. Overall, Sinclair Group's website demonstrates a strong business credibility and technical maturity with good privacy compliance. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further improve trust and security posture.

F

Federal Bureau of Investigation

fbi.gov

70

The Federal Bureau of Investigation (FBI) is the principal federal investigative and intelligence agency of the United States, operating under the Department of Justice. The website serves as the official digital presence, providing comprehensive information about the FBI's mission, investigative priorities, news updates, and public engagement channels. It targets a broad audience including the general public, law enforcement partners, and government entities. The site highlights key services such as counterterrorism, cybercrime investigations, and public safety initiatives, reinforcing the FBI's role in national security and law enforcement. Technically, the website is built on the Plone CMS platform with modern frameworks like Bootstrap 5 and integrates trusted external resources such as Google Fonts and Google Tag Manager. It is mobile-optimized, accessible, and demonstrates good SEO practices. The site employs HTTPS with strong SSL configuration, ensuring secure communications. While explicit security headers are not fully documented in the HTML, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. From a security and compliance perspective, the site includes a comprehensive privacy policy but lacks a visible cookie consent mechanism and a published vulnerability disclosure or security.txt file. Contact information is provided primarily through physical addresses and contact forms, but no direct company emails or phone numbers are explicitly listed. The WHOIS data is unavailable or privacy protected, which is typical for government domains, and does not detract from the site's legitimacy. Overall, the FBI website presents a highly professional, trustworthy, and secure digital platform that effectively supports its mission. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing vulnerability disclosure information, and explicitly documenting security headers to further streng…

A

A. L. Cox & Sons Ltd

cox4grain.com

57

A. L. Cox & Sons Ltd is a family-owned corn merchant business operating since 1958, specializing in the trading of combinable crops such as cereals, pulses, and oilseeds. The company operates its own transport fleet with two operating centers and holds a National Operators Licence, positioning itself as a trusted supplier and logistics provider in the agricultural sector. Their services include commodity trading, haulage, and storage programs, targeting agricultural suppliers and buyers. The website reflects a small-sized, established business with consistent branding and good content quality. Technically, the website is built on WordPress 5.3.21 with common libraries such as jQuery and Bootstrap. It employs Cookiebot for cookie consent management, indicating attention to privacy compliance. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features and security headers. No hosting provider information was identified, and the domain WHOIS data is missing, which raises some concerns about domain registration transparency. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms, but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy policies and cookie policies are present and appear GDPR compliant. However, the absence of contact information and WHOIS data reduces overall trustworthiness. Overall, the website is professional and safe, serving a niche agricultural market. The main risks relate to domain registration opacity and limited security best practices. Strategic improvements in security headers, contact transparency, and WHOIS data clarity are recommended to enhance trust and compliance.

B

Box and Seal

boxandseal.co.uk

49

Box and Seal is a small, independent packaging manufacturer based in Wiltshire, UK, specializing in bespoke and stock corrugated boxes with a strong emphasis on sustainable packaging solutions. Established in 2000, the company offers end-to-end packaging services including design, manufacture, and delivery, targeting businesses primarily in the South West of England. The website reflects a professional and customer-focused business with clear service offerings and environmental commitments. Technically, the website is built on the DNN CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Owl Carousel for UI components, along with Google Analytics for tracking and Tawk.to for live chat support. The site is mobile-optimized with good navigation and SEO practices, though some security best practices like HTTP security headers are not evident from the HTML source. Security posture is moderate; HTTPS is implied but no explicit security headers were detected. The site includes cookie consent mechanisms and privacy policies indicating GDPR awareness, but lacks visible incident response or vulnerability disclosure information. WHOIS data is incomplete due to an invalid query format, limiting domain registration trust analysis. Overall, the website presents a trustworthy and professional business front with room for improvement in security transparency and WHOIS data clarity. The risk level is low, but enhancing security headers and providing incident response details would strengthen trust and compliance.

Creativebrief operates as a next-generation agency search consultancy and intelligence hub, targeting progressive brands and agencies seeking to enhance their marketing impact. The company offers a range of services including pitch consultancy, marketing capability development, and industry thought leadership content. Positioned as a modern and strategic partner, Creativebrief leverages technology and expert advice to connect brands with agencies effectively. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website is built on Concrete5 CMS and utilizes modern web technologies such as jQuery, Bootstrap, HubSpot forms, and Osano for consent management. The site is mobile-optimized, accessible, and integrates analytics and marketing tools like Google Tag Manager and HubSpot. Performance is moderate, with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a notable concern, potentially impacting domain legitimacy trust. Overall, the site maintains a good security posture but could improve transparency and security best practices. The overall risk assessment is moderate with recommendations to enhance security headers, publish incident response and vulnerability disclosure policies, and verify domain registration details to strengthen trust and compliance.

B

Brisant

brisant-secure.com

43

Brisant appears to be a business-oriented website with a focus on security and compliance services, as suggested by the domain name and website title. The site is built on WordPress and uses modern web technologies such as Bootstrap, jQuery, and various JavaScript libraries to enhance user experience. The presence of cookie consent mechanisms and Google Tag Manager indicates an awareness of privacy and analytics needs. However, the website lacks explicit privacy policies, terms of service, and contact information, which are critical for trust and compliance. The WHOIS data is unavailable, raising concerns about domain legitimacy and transparency. Overall, the site presents a professional front but requires improvements in transparency and security disclosures.

L

Lodgecrest Developments Limited

lodgecrest.co.uk

44

Lodgecrest Developments Limited operates as a property developer specializing in modern, traditional, and contemporary style homes throughout the South-East of England. The company focuses on creating luxury residential properties with high-quality finishes and materials sourced from reputable European manufacturers. Their market position is that of an established regional developer with multiple completed and current developments, targeting home buyers and renters seeking quality homes in the region. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Owl Carousel, Font Awesome, and integrates a third-party live chat service (Tawk.to). The site is mobile optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, and the site uses HTTPS as indicated by the base URL. From a security perspective, the website shows basic good practices such as HTTPS usage and cookie consent mechanisms. However, no explicit security headers were detected, and no dedicated security or incident response policies are published. The WHOIS lookup for the exact domain 'www.lodgecrest.co.uk' failed due to a naming rules violation, but this is consistent with it being a subdomain rather than a registered domain. Overall, the security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is professional and trustworthy with no signs of malicious activity or adult content. The lack of explicit contact emails or phone numbers on the homepage reduces direct contactability but social media links and a live chat are present. The WHOIS data limitation slightly impacts trust but does not detract from the business credibility. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility compliance.

AVZ GeoEng Ltd is a UK-based independent ground investigation company specializing in geotechnical consulting and site investigation services. With over 25 years of experience, the company targets construction, infrastructure, and residential projects primarily in London and surrounding counties such as Kent, Essex, Sussex, and Surrey. Their service portfolio includes geotechnical assessments, in situ testing, water well drilling, and various drilling and sampling techniques. The website presents a professional image with clear contact information and a focus on regional service delivery. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and SEO practices. However, there is no evidence of a CMS or hosting provider details. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and reduces overall trustworthiness despite the professional presentation. Overall, the website is functional and professional but would benefit from enhanced security practices, transparent privacy compliance, and verification of domain registration to improve trust and compliance posture.