Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

157326
Websites
130
Industries
113
Countries
52
Avg Score
Page 7 of 162|Showing 301-350 of 8072
watermans.org.uk favicon

Watermans

watermans.org.uk

69
Non-profitUnited KingdommediumMEDIUM

Watermans is a well-established non-profit arts organisation based in West London, focused on community engagement through cultural and creative arts programming. It operates as a producer, curator, and connector, delivering outdoor theatre, new media arts, exhibitions, and workshops primarily in the London Borough of Hounslow. The organisation is funded by Arts Council England and the local government, with additional support from donations. The website reflects a professional and community-oriented brand with a strong digital presence and active social media engagement. Technically, the website is built on WordPress with modern web technologies including Google Tag Manager, Google Analytics, and Cloudflare for performance and security. The site is mobile-optimized, SEO-friendly, and implements privacy and cookie consent mechanisms compliant with GDPR. Security measures include HTTPS, Google reCAPTCHA, and cookie management, although some security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. The WHOIS lookup for the full hostname failed due to a query error, but this does not impact the legitimacy of the domain or organisation. Overall, the website demonstrates a mature digital infrastructure suitable for a non-profit arts entity. Strategically, Watermans should continue to enhance security headers, maintain up-to-date software, and monitor privacy compliance to sustain trust and operational resilience.

65
47
75
100
95
85
2
artscommunitynon-profitcultureevents+5 more
WordPressYoast SEOGoogle Tag ManagerGoogle Analytics+5

Partner Domains:

watermans.ticketsolve.com
service
www.artscouncil.org.uk
partner

+2 more partners

2026-07-11T07:26:31.839Z
gama.aero favicon

General Aviation Manufacturers Association

gama.aero

53
TransportationUnited StatesmediumMEDIUM

The General Aviation Manufacturers Association (GAMA) operates a professional and well-structured website serving as an industry association for the global general aviation manufacturing sector. The site provides advocacy, data, publications, career resources, and event information targeting industry stakeholders, members, media, and students. The website demonstrates a mature digital presence with multilingual support and modern web technologies including WordPress CMS, Google Analytics, and Google Maps integration. SEO and content quality are good, with clear navigation and consistent branding. From a security perspective, the site uses HTTPS and includes some security best practices such as nonce usage in logout URLs. However, it lacks explicit security headers and visible incident response or security policy pages. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. WHOIS data confirms the domain's legitimacy, showing consistent registration details aligned with the business entity and a long domain age appropriate for an established association. Overall, the website is trustworthy and professional with moderate security posture and some room for improvement in privacy and security transparency. There are no indications of malicious or suspicious content, and the site is safe for general audiences.

47
75
65
40
17
85
15
aviationgeneralaviationmanufacturingindustryassociationaviationjobs+2 more
jQueryGoogle AnalyticsGoogle Tag ManagerYoast SEO+5
2026-07-11T07:24:29.539Z
meagher.com favicon

Meagher + Geer, P.L.L.P.

meagher.com

57
OtherUnited StatesmediumMEDIUM

Meagher + Geer, P.L.L.P. is a well-established law firm founded in 1929, offering a broad range of legal services with over 80 lawyers across multiple U.S. offices. The firm specializes in civil litigation and insurance coverage, serving corporations and individuals nationally. Their website reflects a professional and comprehensive presentation of their services and locations, supporting their market position as a leading litigation defense firm. Technically, the website is built on WordPress with a modern tech stack including Google Analytics and responsive design elements. The site performs moderately well with good SEO and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and policies could enhance protection. The absence of WHOIS data limits domain registration transparency, but the website content and business indicators strongly suggest legitimacy. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious content were found. Overall, the site is professional, trustworthy, and suitable for its target audience. Strategic recommendations include improving security headers, publishing a security policy and incident response information, and enhancing privacy compliance disclosures to strengthen trust and compliance posture.

80
85
27
100
15
17
50
lawfirmlegalserviceslitigationinsurancecorporatelaw+1 more
Google AnalyticsjQueryMonsterInsightsShiftNav Responsive Mobile Menu+2
2026-07-11T07:23:17.344Z
avdf.org favicon

The Arthur Vining Davis Foundations

avdf.org

63
Non-profitN/amediumMEDIUM

The Arthur Vining Davis Foundations (AVDF) is a non-profit philanthropic organization focused on funding projects and organizations across the United States that advance religious, charitable, scientific, literary, and educational purposes. The foundation supports multiple program areas including private higher education, public educational media, interfaith leadership, environmental solutions, and palliative care. The website presents a professional and well-structured digital presence that clearly communicates its mission and grant opportunities to its target audience of non-profit organizations, educational institutions, and grant seekers. Technically, the website is built on WordPress with common plugins such as Gravity Forms for form handling, Yoast SEO for search optimization, and tracking tools including Google Tag Manager and Hotjar. The site is mobile optimized, accessible, and performs moderately well. Security best practices are observed with HTTPS enforcement and appropriate security headers, although no explicit security or incident response policies are published. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a visible cookie consent mechanism. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data reduces domain trust verification, which slightly impacts the overall legitimacy score. The site is free from adult or questionable content and is safe for general audiences. Overall, AVDF's website reflects a mature and credible non-profit foundation with room for improvement in privacy compliance and transparency around security policies. Strategic recommendations include implementing a cookie consent banner, publishing security and incident response policies, and enhancing domain registration transparency to strengthen trust and compliance.

100
85
25
17
53
85
54
non-profiteducationgrantmakingphilanthropypublicmedia+3 more
WordPressGravity FormsjQueryGoogle Tag Manager+2

Partner Domains:

avdf.fluxx.io
partner
2026-07-11T07:21:26.102Z
thompsonavc.co.uk favicon

The Thompson Group

thompsonavc.co.uk

54
TechnologyUnited KingdommediumMEDIUM

The Thompson Group is a UK-based company specializing in security, fire safety, communications, and audio visual technologies. They offer a broad range of services including access control, CCTV, fire safety, intruder detection, public address systems, and integrated systems. The company targets businesses and organizations requiring advanced security and communication solutions, positioning itself as an innovative and reliable service provider with recognized industry certifications and a diverse client base. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. However, there is a lack of visible privacy and cookie policies, which indicates a compliance gap. From a security perspective, the site uses HTTPS and secure contact forms but lacks explicit security headers and a published security policy or incident response information. The WHOIS data query failed due to an invalid domain query, but the website content and certifications suggest legitimacy. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the HTML content. Overall, the website presents a professional and trustworthy business presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding vulnerability disclosure information.

60
100
57
70
53
15
2
securityfiresafetycommunicationsaudiovisualaccesscontrol+6 more
WordPressYoast SEOGoogle AnalyticsContact Form 7+1
2026-07-11T07:17:03.422Z
lee-evans.co.uk favicon

Lee Evans Partnership LLP

lee-evans.co.uk

51
Real EstateUnited KingdomsmallMEDIUM

Lee Evans Partnership LLP is a UK-based award-winning architecture, planning, heritage, and interior design practice with offices in Canterbury and London. The company targets clients seeking professional architectural and planning services. Their website reflects a professional and consistent brand image with clear service offerings and a focus on quality design. The business appears to be a small-sized firm founded around 2016, with a solid market position in the real estate and design sector. Technically, the website is built on WordPress CMS using modern technologies such as jQuery, Bootstrap, Google Analytics, and Google Maps API. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and cookie consent mechanisms are lacking. The security posture is solid but could be improved by adding security headers, publishing security policies, and implementing GDPR-compliant cookie consent. The absence of WHOIS data due to an invalid query limits domain trust verification but the professional website and social media presence support legitimacy. Overall, the site is safe, professional, and trustworthy with room for privacy and security enhancements. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, publishing incident response contacts, and regular security audits to maintain trust and compliance.

60
70
100
27
53
2
15
architectureplanningheritageinteriorsprofessionalservices+1 more
jQueryBootstrapGoogle AnalyticsGoogle Maps API+2
2026-07-11T07:07:24.054Z
masonandstokes.co.uk favicon

Mason & Stokes

masonandstokes.co.uk

57
OtherUnited KingdomsmallMEDIUM

Mason & Stokes is a well-established, family-run funeral service provider based in Cheltenham, UK, with a history dating back to 1853. The company offers a range of funeral-related services including pre-paid funerals, bereavement support, and funeral arrangement guidance. Their market position is that of a trusted local business serving Cheltenham and Gloucestershire residents. The website reflects a professional and consistent brand image with good content quality and clear business information. Technically, the website is built on WordPress using the Salient theme and WPBakery Page Builder, leveraging modern web technologies such as jQuery and Google Fonts. The site is mobile-optimized and includes SEO best practices like meta tags and structured data. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and explicit security or incident response policies. The WHOIS data for the exact domain queried is unavailable due to domain naming rules, which introduces some uncertainty about domain registration details, though the website content and business information appear legitimate. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and security posture.

65
62
100
55
80
2
15
funeralfuneraldirectorscheltenhamfamilybusinesspre-paidfunerals+3 more
WordPressPHPjQueryYoast SEO+4
2026-07-10T07:24:51.840Z
londontravelwatch.org.uk favicon

London TravelWatch

londontravelwatch.org.uk

62
TransportationUnited KingdommediumMEDIUM

London TravelWatch operates as the statutory transport watchdog for London, advocating on behalf of the public to improve transport services across the capital. The organization maintains a strong market position as an independent watchdog, partnering with Transport Focus to enhance its reach and effectiveness. Their key services include transport advocacy, handling complaints, conducting research, and providing public advice. The website reflects a professional and trustworthy image with consistent branding and comprehensive content tailored to London transport users and stakeholders. Technically, the website is built on WordPress with a modern tech stack including jQuery, Yoast SEO, Algolia Search, and Plausible Analytics. It demonstrates good performance, mobile optimization, accessibility, and SEO practices. The site uses HTTPS and includes cookie consent mechanisms aligned with GDPR requirements, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent with denied personalization and tracking by default. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a security.txt or vulnerability disclosure page is noted as an area for improvement. Overall, the security posture is solid but could be enhanced with additional headers and formal vulnerability disclosure. The WHOIS data is unavailable due to domain naming rules errors, limiting direct verification of domain registration details. Despite this, the website content, certifications, and partner references strongly indicate legitimacy. The overall risk is low, but the lack of WHOIS transparency slightly reduces trustworthiness. Strategic recommendations include improving security headers, publishing a security.txt file, and ensuring WHOIS data availability or transparency to enhance domain trust.

27
100
85
70
100
2
30
transportadvocacylondonpublicservicenon-profit+2 more
WordPressjQueryYoast SEOAlgolia Search+3

Partner Domains:

transportfocus.org.uk
partner
2026-07-10T07:24:46.519Z
denholm-seafoods.com favicon

Denholm Seafoods Limited

denholm-seafoods.com

50
ManufacturingUnited KingdommediumMEDIUM

Denholm Seafoods Limited is a UK-based seafood processing company specializing in pelagic fish sourced from sustainable fisheries in the North East Atlantic. The company operates under the Denholm Group umbrella and maintains strong partnerships with local fishing vessel owners. Their business model focuses on processing, freezing, and distributing high-quality pelagic fish products to customers in the UK and internationally. The website reflects a professional and well-structured digital presence with clear business information and certifications such as BRCGS Grade AA, indicating a commitment to food safety and quality. Technically, the website is built on WordPress 7.0 with modern web technologies including jQuery and Font Awesome. It employs SEO best practices and GDPR-compliant cookie consent mechanisms, demonstrating digital maturity and regulatory awareness. Performance and mobile optimization are good, though some improvements in security headers could enhance the security posture. Security-wise, the site uses HTTPS and has implemented GDPR cookie compliance, but lacks visible security headers and published security policies or incident response plans. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registry issues, which slightly reduces trustworthiness. Overall, the site is secure and professional but could benefit from enhanced transparency and security hardening. Strategically, Denholm Seafoods should focus on publishing clear security and incident response policies, improving HTTP security headers, and verifying domain registration details to strengthen trust. These steps will enhance their security posture and business credibility in a competitive seafood processing market.

75
40
37
55
2
15
95
seafoodpelagicfishprocessingsustainabilitybrcgs+2 more
WordPress 7.0jQuery 3.7.1Font AwesomeYoast SEO+2

Partner Domains:

www.denholm-fishselling.co.uk
subsidiary
www.denholm-group.co.uk
parent

+1 more partners

2026-07-10T07:24:03.841Z
sepha.com favicon

SEPHA

sepha.com

65
ManufacturingUnited KingdommediumMEDIUM

SEPHA Ltd is a well-established UK-based manufacturer specializing in non-destructive leak testing, blister packing, and deblistering equipment primarily for the pharmaceutical and medical device industries. With over 40 years of industry experience and a strong reputation among leading pharmaceutical manufacturers, SEPHA offers a range of products and services including quality control solutions, packaging machinery, and contract packaging services. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its B2B audience. Technically, the site is built on WordPress with integrations of HubSpot marketing tools, Google Analytics, and other modern web technologies, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS and some security headers, though improvements such as enabling DNSSEC and adding a Content-Security-Policy header are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, SEPHA demonstrates strong business credibility and digital maturity, though it could enhance transparency by publishing explicit security policies and incident response information.

57
80
100
80
15
17
83
pharmaceuticalleaktestingblisterpackingmedicaldevicepackagingqualitycontrol+2 more
WordPressYoast SEOHubSpot FormsGoogle Tag Manager+5

Partner Domains:

tasigroup.com
partner
2026-07-10T07:23:42.501Z
bridgegate-security.co.uk favicon

Bridgegate Security (UK) Limited

bridgegate-security.co.uk

62
HospitalityUnited KingdomlargeMEDIUM

Bridgegate Security (UK) Limited is a well-established security service provider specializing in hospitality security, door supervision, and event security across the United Kingdom. Founded in 1978, the company has grown to become one of the largest independent security contractors in the UK, serving bars, pubs, nightclubs, and venues with experienced SIA-licensed personnel. Their market position is reinforced by certifications such as the SIA Approved Contractor status and founding membership in the UK Door Security Association (UKDSA). The website reflects a professional and trustworthy business with clear service offerings and strong client testimonials. Technically, the website is built on WordPress with modern plugins including Yoast SEO and Cookie Law Info, ensuring good SEO and privacy compliance. The site is mobile-optimized, fast-loading, and accessible, with a comprehensive cookie consent mechanism that aligns with GDPR requirements. Hosting and domain registration are consistent with the business's UK location and history, registered with a reputable UK registrar. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks explicit security headers and incident response contact details. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site demonstrates a mature security posture suitable for its business sector. The overall risk assessment is low, with recommendations to enhance security headers, publish incident response contacts, and consider a vulnerability disclosure policy to further strengthen trust and compliance.

60
62
100
85
20
2
80
securityhospitalitydoorsupervisioneventsecuritysiaapproved+2 more
WordPressYoast SEOSwiper SliderGoogle Tag Manager+1

Partner Domains:

bridgegatesecurity.live-website.com
partner
whistleblowing.paperform.co
service
2026-07-10T07:19:27.540Z
dalrod.co.uk favicon

DALROD

dalrod.co.uk

52
OtherUnited KingdommediumMEDIUM

DALROD UK Ltd is a professional drainage service provider offering expert 24/7 rapid response drainage solutions across the United Kingdom. Their services include drain cleaning, unblocking, repairs, CCTV surveys, liquid waste disposal, and emergency drainage services. The company positions itself as a trusted and accredited provider with over 35 years of experience, serving both residential and commercial customers nationwide. The website reflects a mature digital presence with comprehensive service descriptions, customer testimonials, and multiple industry certifications, indicating a strong market position. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, integrating modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Trustist reviews. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism in place to comply with privacy regulations. The technical infrastructure is solid, though some security headers could be improved to enhance security posture further. From a security perspective, the site enforces HTTPS and employs consent-based tracking, demonstrating good privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS lookup for the subdomain 'www.dalrod.co.uk' failed due to a naming rules violation, likely because the query was made on the subdomain rather than the registered domain 'dalrod.co.uk'. This does not detract from the legitimacy of the business as evidenced by the website content and structured data. Overall, DALROD presents a trustworthy and professional online presence with strong business credibility and compliance. Strategic improvements in security headers and ongoing monitoring of third-party scripts are recommended to maintain and enhance security posture.

40
57
65
75
80
15
2
drainagedrainrepairdrainunblockingcctvdrainsurveysemergencyservices+3 more
WordPressElementorYoast SEOGoogle Tag Manager+3
2026-07-10T07:16:30.535Z
B

Blackstone Mortgage Trust

blackstonemortgagetrust.com

71
Real EstateUnited StateslargeMEDIUM

Blackstone Mortgage Trust (BXMT) is a publicly traded commercial mortgage REIT specializing in real estate credit investments across North America, Europe, and Australia. Managed by Blackstone Inc., the largest owner of commercial real estate globally, BXMT leverages significant data, resources, and a global platform to underwrite complex transactions and partner with leading sponsors. The website presents comprehensive investor information, financial disclosures, and market positioning that reflect a mature and professional business entity. Technically, the website is built on WordPress with modern SEO and accessibility practices, integrating advanced analytics and monitoring tools such as New Relic and Google Tag Manager. The site is well-optimized for performance and mobile responsiveness, with a clear navigation structure and consistent branding. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. While explicit security policies and incident response contacts are not published, the use of monitoring tools and privacy policies indicates a reasonable security posture. The absence of WHOIS registration data is a concern but is mitigated by the strong brand presence and external references to Blackstone domains. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its investor audience. Strategic recommendations include publishing explicit security policies, incident response contacts, and improving WHOIS transparency to enhance trust further.

70
32
85
100
80
17
100
realestatereitfinanceinvestorrelationsmortgagetrust+1 more
WordPressYoast SEOBrightcove video playerNew Relic monitoring+2

Partner Domains:

www.blackstone.com
parent
ir.blackstonemortgagetrust.com
subsidiary
2026-07-10T07:13:22.515Z
directvehicleglass.co.uk favicon

Direct Vehicle Glass

directvehicleglass.co.uk

46
TransportationUnited KingdommediumHIGH

Direct Vehicle Glass is a well-established UK-based company specializing in mobile windscreen repair and replacement services, primarily serving Liverpool, Warrington, Manchester, and the wider North West region. The company positions itself as a leading independent automotive glazing provider with a focus on quality and responsiveness. Their key services include private and commercial vehicle glass repair, fleet cover, and advanced driver assistance system (ADAS) calibration. The website reflects a medium-sized business with a professional online presence and multiple insurance partnerships that enhance trustworthiness. Technically, the website is built on WordPress and utilizes modern web technologies such as jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile-optimized with good SEO practices implemented via Yoast SEO. Performance is moderate, and accessibility is basic but functional. The site uses HTTPS with an excellent SSL configuration, though it lacks some security headers that could improve its security posture. From a security perspective, the site demonstrates good baseline practices such as HTTPS and no visible sensitive data exposure. However, it lacks published security policies, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and user trust. No vulnerabilities or suspicious content were detected. The domain registration data aligns well with the business claims, indicating legitimacy and a strong trust foundation. Overall, the website is professional, credible, and secure enough for its business purpose but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

70
65
20
47
53
17
15
windscreenrepairvehicleglassmobileserviceadascalibrationfleetcover+4 more
jQuerySlick CarouselGoogle AnalyticsYoast SEO
2026-07-10T07:07:53.481Z
rms.ltd favicon

Rock Management Services

rms.ltd

69
OtherUnited KingdomsmallMEDIUM

Rock Management Services Ltd. is a UK-based company offering comprehensive business support services to organizations aiming to remain lean and focus on their core operations. Their service portfolio includes administrative support across HR, IT, finance, compliance, and consulting, positioning them as a trusted outsourcing partner with a proven track record and senior experienced personnel. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, Slider Revolution, and Google Analytics integrations, indicating a mature digital infrastructure. The site is mobile-optimized and employs cookie consent mechanisms, demonstrating awareness of privacy regulations. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and includes cookie consent banners but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable due to a domain naming error, which is unusual but does not appear to affect the legitimacy of the website. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance.

37
100
70
85
83
80
17
businesssupportoutsourcinghrservicesitservicescompliance+3 more
WordPressYoast SEOSlider RevolutionjQuery+7

Partner Domains:

bedrocksoftware.co.uk
partner
2026-07-09T07:16:07.693Z
bouygues-uk.com favicon

Bouygues UK

bouygues-uk.com

59
Real EstateUnited KingdomlargeMEDIUM

Bouygues UK is a prominent construction and property development company operating in the United Kingdom, specializing in sectors such as healthcare, education, residential, and commercial developments. As a subsidiary of the global Bouygues Construction group, it leverages extensive expertise and resources to deliver innovative and sustainable building projects. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency, targeting business and public sector clients. Technically, the site is built on WordPress with modern libraries and plugins enhancing user experience, SEO, and accessibility. The presence of cookie consent mechanisms and privacy policies indicates good privacy compliance. However, the absence of explicit security headers and missing WHOIS data represent areas for improvement in security transparency and trust. Security posture is generally strong with HTTPS enforced and a visible fraud alert to protect users. No critical vulnerabilities or exposed sensitive data were detected. The lack of an incident response contact or vulnerability disclosure policy suggests room for enhancing security readiness. Overall, the website is professional and trustworthy, though the WHOIS inconsistency and minor security header omissions slightly reduce the trust score. Strategic improvements in security transparency and incident response communication would further strengthen the company's digital security stance.

82
64
40
85
50
2
68
constructionpropertydevelopmentuksustainabilityhealthcare+2 more
WordPressYoast SEOjQueryLeaflet.js+5

Partner Domains:

careers.bouygues-construction.com
partner
2026-07-09T07:08:12.815Z
F

First Step

firststep.org.uk

41
Non-profitUnited KingdomsmallHIGH

First Step is a UK-based non-profit organization dedicated to providing family support services for children with special needs and/or disabilities. With over 35 years of operation, it holds a reputable position in its local community, offering services such as fundraising, events, and volunteering opportunities. The website reflects a focused mission to support families, with clear contact channels and social media presence enhancing its outreach. Technically, the website is built on WordPress using popular plugins like Yoast SEO, Contact Form 7, and Smart Slider 3. It employs Google Analytics and Google reCAPTCHA for analytics and form security respectively. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features are basic. Performance is moderate, with room for optimization. Security posture is generally good with HTTPS enforced and reCAPTCHA protecting forms. However, the absence of security headers and lack of visible privacy and cookie policies indicate areas for improvement. The WHOIS data is unavailable due to a domain query error, but the website content and contact information suggest legitimacy. Overall, the website is professional and trustworthy, but enhancing privacy compliance and security headers would strengthen its security and user trust. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and maintaining regular updates to plugins and CMS.

70
20
47
65
15
2
35
non-profitfamilysupportdisabilitiescharityuk+1 more
WordPressYoast SEOContact Form 7Google reCAPTCHA+4
2026-07-08T07:19:33.026Z
researchbydesign.co.uk favicon

Research by Design Ltd

researchbydesign.co.uk

58
OtherUnited KingdomsmallMEDIUM

Research by Design Ltd is a specialized market research agency focused on serving membership organizations. Established in 1994 and operating under the parent company Box Delta Insights, it holds a leading position in its niche market. The company offers a broad range of services including member engagement, value proposition development, diversity and inclusion research, and sector benchmarking. Their client base includes prominent professional bodies and associations, supported by strong testimonials and case studies. The website reflects a professional and trustworthy brand image with clear communication of services and client success stories. Technically, the website is built on WordPress and leverages modern web technologies such as Google reCAPTCHA for form security, Yoast SEO for search optimization, and Cloudflare for hosting and domain registration. The site is mobile-optimized, fast-loading, and accessible, with comprehensive SEO metadata and structured data enhancing its digital maturity. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs clientTransferProhibited status on the domain to prevent unauthorized transfers. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Incident response and security policy documents are not publicly available, which could be enhanced to improve transparency and readiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing security policies to further strengthen the security posture and trustworthiness.

37
70
85
100
68
15
2
marketresearchmembershipconsultingprofessionalservicesuk
JavaScriptGoogle reCAPTCHAYoast SEOContact Form 7

Partner Domains:

boxdeltagroup.com
parent
memcom.com
partner
2026-07-08T07:09:42.868Z
eco-futures.co.uk favicon

Eco Futures

eco-futures.co.uk

42
EnergyUnited KingdomsmallHIGH

Eco Futures is a well-established sustainable construction consultancy founded in 2006, specializing in Passivhaus air pressure testing and energy consultancy services across Wales and the West and South West of England. The company serves a diverse client base including major developers, social landlords, architects, and individual developers. Their key services include air pressure testing, energy assessments, SAP, sound testing, and various sustainability-related calculations. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by GoDaddy. It employs modern web technologies and is optimized for mobile devices with good SEO practices. Performance is moderate, and accessibility is basic but functional. Security posture is strong with HTTPS enabled and no visible vulnerabilities, though security headers are missing and no explicit security policies are published. From a security and compliance perspective, the site lacks privacy and cookie policies, which is a notable compliance gap under GDPR. There is no visible incident response or vulnerability disclosure information. Contact details for key personnel are clearly provided, enhancing business credibility. WHOIS data confirms domain legitimacy and consistency with the business history. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

85
57
-
60
35
2
15
sustainableconstructionpassivhausairpressuretestingenergyconsultancywales+1 more
WordPressElementorYoast SEOjQuery
2026-07-07T07:10:38.613Z