Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
3,701–3,750 of 99,069
- MMackenzie Jones
macjones.com
Real Estate · United Kingdom
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Mackenzie Jones is a well-established law firm operating primarily in Cheshire and North Wales, with offices in Chester, St Asaph, and Menai Bridge. The firm offers a broad range of legal services including personal injury, conveyancing, family law, wills and probate, clinical negligence, and various business legal services. Their market position is that of a trusted regional legal provider with over two decades of history and a client base built on recommendations and repeat business. Technically, the website is built on the Umbraco CMS platform and integrates modern tools such as Google Analytics, Google Tag Manager, LiveChat, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection, but could improve by adding more comprehensive security headers. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional presentation and trust indicators. Overall, the website presents a secure, compliant, and professional digital presence for the law firm.
Jigsoljigsol.com
Hospitality · United Kingdom
67Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Jigsol is a UK-based hybrid accountancy firm specializing in providing real-time data-driven accountancy, analytics, payroll, and rota management services primarily targeting hospitality, recruitment, and technology sectors. The company differentiates itself by integrating proprietary analytic technology with traditional accountancy services, offering clients instant business insights and operational efficiencies. The website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, and it employs Google Analytics and Tag Manager for tracking. The technical infrastructure is modern and supports mobile optimization, though DNSSEC is not enabled, which is a minor security gap. Security posture is generally good with HTTPS and domain protection statuses in place, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website presents a professional and trustworthy image consistent with a small but mature business.
Convergence Group – Networking at speedait-pg.co.uk
—
50Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
- MMemsDIY
memsdiy.co.uk
Retail · United Kingdom
69Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
MemsDIY is a UK-based e-commerce retailer specializing in DIY, building, and construction materials. Established in 2016, the company operates a Shopify-powered online store offering a wide range of products targeting DIY enthusiasts, builders, and contractors. The website features customer reviews powered by Judge.me and employs cookie consent mechanisms to comply with GDPR regulations. The business model focuses on direct online sales with a niche market position in the UK retail sector.
- SSecurity Verification
mpsprint.co.uk
Other
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.mpsprint.co.uk is currently inaccessible beyond a security verification page implementing Google reCAPTCHA v3. This indicates the presence of a Web Application Firewall (WAF) or bot protection mechanism blocking normal user access. Due to this, no meaningful business content, contact information, or company branding is available for analysis. The WHOIS lookup failed because the domain name 'www.mpsprint.co.uk' violates Nominet UK's naming rules, suggesting the domain is either misconfigured or invalid. This severely limits the ability to assess the legitimacy or business operations of the entity behind the domain. From a technical perspective, the site uses Bootstrap 5.3.3 and Google reCAPTCHA v3, but no other modern frameworks or CMS platforms are detectable. The security posture is minimal, relying solely on client-side bot verification without visible HTTPS enforcement or security headers. Privacy and cookie policies are absent, and no contact or business information is presented, which negatively impacts trust and compliance. Overall, the site presents a high risk due to its inaccessibility, lack of transparency, and invalid domain registration status. Without access to actual business content or contact details, the site cannot be reliably evaluated for security, compliance, or business credibility. Strategic recommendations include resolving domain registration issues, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear business contact information to improve trust and compliance.
- SSecurity Verification
hallandensom.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.hallandensom.co.uk is currently inaccessible beyond a Google reCAPTCHA v3 security verification challenge, which blocks access to any meaningful content. The domain itself appears invalid or improperly registered according to the Nominet UK WHOIS lookup, which failed with an error indicating the domain name contains too many parts and cannot be registered. No business information, contact details, or policies are available on the site. The technical infrastructure includes Bootstrap 5.3.3 and Google reCAPTCHA for bot protection, but no CMS or hosting details are discernible. Security posture is minimal with no visible HTTPS enforcement or security headers, and privacy compliance is absent. Overall, the site lacks trustworthiness and business credibility due to the lack of accessible content and invalid domain registration.
- SSecurity Verification
cumbriacomputerrepairs.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.cumbriacomputerrepairs.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, which blocks automated access and prevents viewing of actual business content. The WHOIS lookup for the domain fails due to a Nominet UK naming rules violation, indicating the domain is invalid or misconfigured. No business information, contact details, or policies are accessible, severely limiting the ability to assess the company's market position or services. Technically, the site uses Bootstrap for styling and Google reCAPTCHA for bot protection but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site exhibits a minimal security posture focused solely on bot mitigation, with no evidence of broader security or privacy compliance measures.
- Digital Network Solutions
dignetsol.co.uk
Technology · United Kingdom
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Digital Network Solutions is a small UK-based IT services company specializing in managed IT solutions for small and medium businesses primarily in East Anglia. Their offerings include networking, consultancy, infrastructure, procurement, and maintenance services. The company positions itself as a trusted IT partner with a strong local presence and client testimonials supporting their reliability. Technically, the website is built on Drupal 10 with modern frontend technologies and demonstrates good mobile optimization and accessibility. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The WHOIS data is unavailable due to domain naming rules violation, which raises questions about domain legitimacy but does not detract from the professional presentation of the website. Overall, the site is functional, professional, and trustworthy with room for security and privacy improvements.
- MMankind
mankind.co.uk
Retail · United Kingdom
70Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Mankind is a UK-based e-commerce retailer specializing in men's grooming, toiletries, and beauty products. The website offers a broad selection of leading male grooming brands and features promotional offers to attract customers. The platform is built using modern web technologies including Astro, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a positive user experience. Security posture is strong with HTTPS enforced, security headers implied, and anti-bot measures like invisible reCAPTCHA in place. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the domain and website present a trustworthy and professional online retail presence with no signs of malicious activity or content blocking.
- PPrivate Site
cpea.co.uk
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website cpea.co.uk is currently a private site hosted on WordPress.com, requiring user login to access any content. No public-facing business information, contact details, or policies are available, which limits the ability to assess the business operations or market positioning. The domain is well-established, registered since 2001 with a reputable registrar, indicating legitimacy in terms of domain ownership. Technically, the site uses WordPress CMS and standard WordPress.com hosting infrastructure, but lacks visible advanced security headers or privacy compliance features. The security posture is moderate due to HTTPS usage and WordPress.com hosting but is limited by the absence of explicit security policies or contact channels for incident response. Overall, the site is inaccessible to the public, resulting in a low AI score and limited insights.
Other
73Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website www.theaccessgroup.com is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks automated access and content scraping. This prevents extraction of meaningful business, contact, or policy information. The domain WHOIS data is not publicly available, with no registrar or registrant details found, though the domain expiry date is valid and set for 2026. The site uses Cloudflare for security and performance, indicating a professional hosting setup. However, the lack of accessible content and WHOIS transparency limits the ability to fully assess the company's business model, market position, or security posture. No privacy, cookie, or terms of service policies are detectable, nor are any contact details or forms. Security headers such as Content-Security-Policy are present, reflecting some security best practices. Overall, the site appears legitimate but is currently inaccessible for detailed analysis.
- WWatsonHelsby
watsonhelsby.co.uk
Other · United Kingdom
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
WatsonHelsby presents a professional website hosted on the Squarespace platform, featuring a clean design and basic branding elements. The company name is clearly displayed, and social media presence is established via Twitter and LinkedIn. However, the website lacks detailed business descriptions, contact information, and policy documents, limiting the ability to fully assess the business model and market position. The domain registration is problematic, as WHOIS data is unavailable and the domain appears invalid per the registry error, which raises concerns about domain legitimacy despite the website being accessible and secured via HTTPS. Technically, the website employs modern web technologies typical of Squarespace, including JavaScript, Google Fonts, and JSON-LD structured data for basic SEO. The site is mobile-optimized and performs moderately well, but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and HSTS enabled, but missing other important security headers and privacy compliance mechanisms. From a security perspective, the site shows no signs of malware or vulnerabilities but lacks privacy and cookie policies, incident response information, and contact details for security concerns. The absence of WHOIS data and domain registration issues negatively impact trust and legitimacy scores. Overall, the website is functional and professional but requires improvements in transparency, compliance, and domain legitimacy to enhance trustworthiness and security posture.
MGC Lighting Ltdmgc-lighting.com
Manufacturing
59Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
MGC Lighting Ltd is a global distributor specializing in the supply of specialist lamps and industrial lighting products, including medical lighting and batteries. The company targets industrial and medical sectors, providing a broad range of respected brand products. Their business model focuses on B2B distribution with a medium-sized market presence. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with WooCommerce, utilizing modern plugins and technologies such as Google Analytics and live chat support. The site is mobile-optimized and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit privacy and terms pages are recommended. The absence of WHOIS registration data is a notable concern for domain legitimacy verification, though the website itself appears trustworthy and business-focused. Overall, the site presents a good digital maturity level with room for improvement in privacy compliance and security best practices.
Kibblekibble.org
Education · United Kingdom
68Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Kibble is a well-established non-profit social enterprise based in the United Kingdom, specializing in providing integrated care, education, and therapeutic services to young people facing adversity or trauma. With a history spanning over 160 years, Kibble offers a comprehensive range of services including residential care, fostering, secure care, specialist interventions, and community support. The organization targets vulnerable youth aged 5-26, their families, carers, and staff, positioning itself as a trusted leader in youth care and education. Technically, the website is built on WordPress 7.0 with modern JavaScript libraries such as jQuery and integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Cookie consent mechanisms and privacy policies indicate strong compliance with GDPR and privacy regulations. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. While explicit security headers were not fully detected, the overall security posture is good with no visible vulnerabilities or exposed sensitive data. The lack of WHOIS registrant data is attributed to privacy protection, which is justified for a non-profit entity. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Kibble's website reflects a professional, trustworthy, and privacy-conscious organization with a strong market position in youth care and education. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response contact visibility to further strengthen security and trust.
- Pettycur Bay Holiday Park
pettycur.co.uk
Hospitality · United Kingdom
54Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Pettycur Bay Holiday Park is a family-owned hospitality business offering caravan and camping holidays in Fife, Scotland. The website provides comprehensive information about holiday bookings, caravan sales, leisure facilities, and gift vouchers, targeting families and holidaymakers. The site is well-structured with clear navigation and professional design, supporting a positive user experience. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and various sliders, with moderate performance and good mobile optimization. Security posture is moderate with cookie consent implemented but lacks visible security headers and incident response information. WHOIS data is unavailable due to domain registration issues, which raises some concerns about domain legitimacy, though the website content is consistent with a legitimate business. Overall, the site is trustworthy but would benefit from enhanced security practices and clearer domain registration transparency.
- HHighway Plant
planthirecornwall.net
Transportation · United Kingdom
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Highway Plant is a small, local plant hire service provider operating in Cornwall and surrounding areas, offering a wide range of machinery including diggers, rollers, and forklifts. The company emphasizes over 55 years of experience, positioning itself as a reliable and experienced local business in the transportation sector. The website is built on the Squarespace platform, leveraging standard web technologies and Google Maps integration for location services. The technical infrastructure is modern and mobile-optimized, providing a good user experience with moderate performance. Security posture is adequate with HTTPS and HSTS enabled, but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active website presence suggests operational business activity. Overall, the site is professional and safe but would benefit from enhanced transparency and security practices.
- SSecurity Verification
garrards-timber.co.uk
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.garrards-timber.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access. No actual business content, contact information, or company details are accessible, preventing a thorough analysis of the business or its services. The WHOIS lookup for the domain failed due to an invalid domain format error, suggesting the domain 'www.garrards-timber.co.uk' is not a registered domain but rather a subdomain or misconfigured domain name. This lack of registration data severely impacts the trust and legitimacy assessment of the domain. Technically, the site uses modern libraries such as Bootstrap 5.3.3 and Google reCAPTCHA, but no further infrastructure or CMS details are available. Security posture is limited to the presence of reCAPTCHA, with no visible HTTPS or security headers information. Overall, the site is currently blocked from analysis, resulting in a low AI score and limited insights.
- YYour Safari
yoursafari.co.uk
Hospitality · United Kingdom
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Your Safari is a UK-based bespoke safari tour operator specializing in personalized African and Asian wildlife adventures, including Namibia self-drive tours, Okavango fly-in safaris, and Bengal Tiger expeditions. The business leverages the expertise of Kathryn Haylett, an experienced guide and author, to deliver tailored safari experiences. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a high level of digital maturity. Technically, the site uses modern technologies such as Google Tag Manager, Formspree for secure form handling, and Cloudflare for hosting and CDN services, ensuring good performance and security. Security posture is strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and cookie consent mechanisms are missing. The WHOIS data is unavailable due to a domain registration error, which raises some concerns about domain legitimacy but does not detract from the business credibility demonstrated on the site. Overall, the site is trustworthy, professional, and well-positioned in the niche luxury safari market.
Royal Armouriesroyalarmouries.org
Government · United Kingdom
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The Royal Armouries website represents a well-established national museum dedicated to arms and armour in the United Kingdom. The site provides extensive content including museum information, exhibitions, educational resources, and entertainment licensing. The business model is non-profit and government-affiliated, targeting a broad audience including general visitors, educators, and researchers. The website demonstrates a mature digital presence with modern technologies such as Drupal 10, responsive design, and integration of analytics and cookie consent tools. Security posture is generally good with HTTPS and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy or terms of service found in the analyzed content. Overall, the site is professional, trustworthy, and content-rich, supporting its role as a national cultural institution.
Parfetts Go Localgolocalextra.co.uk
Retail · United Kingdom
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Parfetts Go Local operates as a symbol group retail network in the UK, supporting over 1,000 independent retailers under various fascia options including Go Local, The Local, and Go Local Extra. The company positions itself as the fastest growing symbol group in the UK retail sector, targeting independent retailers seeking brand affiliation and support. The website currently serves as a placeholder with a 'New Website Coming Soon' message, indicating ongoing redevelopment. Technically, the website is built using modern web technologies such as React and Next.js, hosted likely via a CDN. However, the current site content is minimal, lacking comprehensive SEO, accessibility features, and performance optimizations. No analytics or marketing tools are detected, and mobile optimization is basic. The site does not yet provide privacy, cookie, or terms of service policies, nor contact information, which limits user engagement and trust. From a security perspective, the site uses HTTPS but lacks visible security headers and documented security policies. No forms or data collection mechanisms are present, reducing immediate risk exposure. WHOIS data indicates a well-established domain registered since 2012 with consistent registrant information, supporting legitimacy. However, the absence of privacy and cookie policies and contact details represents compliance gaps. Overall, the website is in an early or transitional state with limited content and features. Strategic recommendations include completing the website with full business and legal information, implementing security best practices including headers and policies, enhancing SEO and accessibility, and adding contact channels to improve trust and compliance.
Lancaster Signslancastersigns.co.uk
Other
51Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Lancaster Signs operates a website focused on signage services, presenting itself as a small business with a straightforward branding message "Always a good sign." The website is built on WordPress using the Divi theme and incorporates Google Analytics via MonsterInsights for visitor tracking. The site content is accessible without any WAF or security challenge interference, indicating good availability. However, the absence of privacy, cookie, and terms of service policies suggests limited compliance with data protection regulations. The WHOIS lookup failed due to a domain naming rules violation, which raises concerns about the domain's registration legitimacy and reduces overall trust in the domain ownership details. Technically, the site shows moderate performance and mobile optimization but lacks advanced security headers and visible security best practices.
Neath Port Talbot Councilnpt.gov.uk
Government · United Kingdom
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Neath Port Talbot Council operates as the local government authority for the Neath Port Talbot county borough in Wales, UK. The website serves residents, businesses, and council members by providing access to a wide range of public services including social care, waste management, planning, and community engagement. The site is well-structured with clear navigation and a focus on online service delivery, reflecting a mature digital presence for a government entity. Technically, the website employs modern frameworks such as Bootstrap 5.3 and the Gov.uk Frontend toolkit, alongside Font Awesome for iconography and Google Analytics for user tracking. The CMS appears to be Umbraco, inferred from HTML element attributes. Performance and mobile optimization are good, with accessibility features implemented. Cookie consent mechanisms are in place, though explicit privacy and terms of service pages were not found in the provided content. Security posture is moderate with HTTPS usage implied and no visible security headers in the HTML content. No vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies and incident response contacts suggests room for improvement in transparency and compliance. WHOIS data was unavailable, but the .gov.uk domain and consistent branding strongly indicate legitimacy. Overall, the website is a reliable and professional portal for local government services, with recommendations to enhance privacy disclosures, security headers, and contact transparency to further strengthen trust and compliance.
- TThe Regimental Shop
regimentalshop.com
Retail
69Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
The Regimental Shop operates as a niche e-commerce retailer specializing in regimental and military-themed apparel and gifts. The website is built on the Shopify platform, leveraging a modern tech stack including jQuery, Slick Slider, and various Shopify apps for product options and upselling. The site targets military personnel, veterans, and enthusiasts seeking official regimental merchandise. While the site demonstrates good technical implementation and security practices such as HTTPS and hCaptcha integration, it lacks visible privacy and cookie policies, and no explicit contact information is provided, which impacts privacy compliance and business credibility scores. The absence of WHOIS data raises some concerns about domain registration transparency but does not negate the site's operational legitimacy given its Shopify infrastructure and content quality.
- Invest in an economical and performant car
quarrycars.co.uk
Transportation · United Kingdom
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Quarry Cars operates a website focused on providing economical and high-performance vehicle solutions including car rental, leasing, traditional loans, and vehicle accessories. The site targets consumers seeking flexible and affordable vehicle options, including electric and commercial vehicles. The business model centers on vehicle financing and maintenance services, positioning itself as a niche provider in the UK transportation sector. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, offering a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy policies. The WHOIS data is incomplete and inconsistent due to querying the subdomain rather than the registered domain, slightly reducing trustworthiness. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.
Hemingstone Garagehemingstonebmw.com
Transportation · United Kingdom
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Hemingstone Garage is a small, family-run automotive business specializing in used BMW cars and related prestige vehicles, located in Ipswich, Suffolk, UK. The company offers a range of services including car sales, diagnostics, repairs, servicing, and finance options. The website presents a professional and trustworthy image with customer testimonials and warranty offerings, targeting local car buyers and BMW owners. Technically, the site is built using modern web technologies including Hugo static site generator, jQuery, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no incident response or vulnerability disclosure policies are found. The absence of WHOIS domain registration data is a notable transparency concern but does not detract significantly from the overall legitimacy indicated by the website content. Strategic recommendations include improving security headers, adding explicit security and incident response policies, and verifying domain registration details for enhanced trust.
Food Store Internationalfoodstoreint.co.uk
Retail · United Kingdom
58Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Food Store International is a family-owned business specializing in the export of British food and grocery brands since 1998. The company targets markets in the Middle East, Africa, the United Kingdom, and internationally, consolidating supply from popular British and global brands. Their business model focuses on reliable delivery and margin protection for their clients. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on WordPress 6.9.4 with modern tools such as Google Tag Manager and the Yoast SEO plugin. The site is mobile-optimized and uses a CDN for media assets, indicating a moderate to good digital maturity. However, there is room for improvement in accessibility and performance tuning. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response details are available, limiting transparency and trust. No vulnerabilities or suspicious content were detected. Overall, the website is safe and professional but requires enhancements in privacy compliance, security headers, and contact transparency to improve trust and regulatory adherence.
- Wwww.minosrestaurant.com
minosrestaurant.com
Other
56Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.minosrestaurant.com appears to be a restaurant-related site but contains minimal visible content beyond technical scripts for cookie consent management. The absence of metadata, structured data, and business information limits the ability to fully assess the business profile. The domain WHOIS data is unavailable or unregistered, raising concerns about domain legitimacy and transparency. Technically, the site uses a Consent Management Platform indicating some GDPR compliance efforts, but lacks visible security headers and SSL configuration details. No contact or privacy policy information is present, which negatively impacts trust and compliance posture. Overall, the site shows a low level of digital maturity and security readiness.
- NNPW Group
npwgifts.com
Retail · United States
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
NPW Group operates a professionally designed e-commerce website focused on retail and wholesale distribution of branded products including NPW, Drinking Buddies, and Glow Mood. The company targets consumers and wholesale partners primarily in the United States, with a medium-sized business profile founded in 2019. The website leverages the Shopify platform, ensuring a modern and mobile-optimized user experience with integrated marketing and analytics tools. Security posture is solid with HTTPS and secure payment mechanisms, though improvements are recommended in DNS security and explicit privacy and cookie policies. Overall, the website presents a trustworthy and professional front with clear contact information and brand consistency.
- Clifton Wealth Partnership Ltd
tailormade-ifa.com
Finance · United Kingdom
68Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Clifton Wealth Partnership Ltd is a UK-based financial advisory and wealth management firm with a history dating back to 1986. The company recently acquired Tailormade Financial Services and operates under the Clifton group of companies. Their services target UK businesses and individual clients seeking specialist financial advice. The website reflects a professional and consistent brand image with clear contact details and regulatory disclosures. Technically, the site uses modern web technologies including Google Tag Manager and Bootstrap, with good mobile optimization and SEO practices. Security posture is moderate; while HTTPS is implied and cookie consent is implemented, the absence of HTTP security headers and published security policies indicates room for improvement. The WHOIS data for the domain is unavailable due to a domain naming rules error, which impacts domain trust verification but does not detract from the professional presentation of the website. Overall, the site is safe, compliant with privacy regulations, and trustworthy from a business perspective.
The Collectors Companythecollectorscompany.com
Retail · United Kingdom
65Medium
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
The Collectors Company is a small independent retail business specializing in collectible teddy bears, diecast models, and calendars, operating primarily through mail order. The website presents a professional and consistent brand image, targeting collectors and enthusiasts in the UK market. The business leverages reputable collectible brands and maintains physical store presence alongside online operations. Technically, the website is built on the Wix platform using Wix Thunderbolt framework, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the website is functional and trustworthy from a business perspective but would benefit from enhanced security and compliance documentation.
Sanford Barnes Ltdreflexexhibitions.com
Other · United Kingdom
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Reflex Exhibitions, operated by Sanford Barnes Ltd, is a UK-based small business specializing in the design and delivery of exhibition stands, pop-up displays, and large-format print solutions. Established in 2002, the company targets UK businesses and organizations seeking high-impact display solutions for trade shows and events. The website presents a professional and consistent brand image with clear contact information and social media presence, supporting its market position as a trusted provider in the exhibition industry. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good SEO practices, mobile optimization, and moderate performance. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS registration data for the domain raises some concerns about domain legitimacy and registration transparency, which slightly impacts trustworthiness. However, the website content, business information, and compliance with GDPR and cookie consent regulations indicate a legitimate and professional operation. No adult or questionable content is present, making the site safe for general audiences. Overall, Reflex Exhibitions maintains a solid digital presence with room for improvement in transparency around security policies and domain registration details. Strategic recommendations include publishing a security policy, establishing an incident response contact, and verifying domain registration information to enhance trust and compliance.
- SSecurity Verification
oakhamphysio.co.uk
Other
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.oakhamphysio.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No actual business content, contact information, or policies are accessible, severely limiting the ability to assess the company's market position or services. The domain WHOIS lookup failed due to an invalid domain format, raising legitimacy concerns about the domain registration itself. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers, privacy policies, or SEO optimizations. Overall, the site exhibits a low digital maturity and poor business credibility due to lack of accessible content and transparency.
- NNew Beginnings Day Nursery
newbeginningsnursery.co.uk
Education · United Kingdom
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
New Beginnings Day Nursery is a small, family-owned childcare provider based in Buckinghamshire, UK, offering full day care and early childhood education services. The website presents a professional and consistent brand image with clear contact information and social media presence. The business targets parents seeking quality nursery services and emphasizes a nurturing environment with qualified staff. Technically, the website is built on the Webador CMS platform, uses HTTPS with valid SSL, and incorporates Google reCAPTCHA for form security. However, it lacks published privacy and cookie policies, which impacts compliance. The WHOIS data is unavailable due to a domain naming rule violation error, which raises questions about domain registration legitimacy but does not directly affect the website's operational credibility. Overall, the site is functional, secure, and trustworthy but would benefit from improved compliance documentation and security headers.
- EElectric Orange
electric-orange.co.uk
Technology · United Kingdom
62Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Electric Orange is a specialist home cinema, audio, and smart home installation company serving Liverpool, Wirral, Cheshire, and the Northwest of England. The company offers bespoke design and installation services including home cinema rooms, multi-room audio systems, intelligent lighting, and media walls. They hold industry certifications and awards, positioning themselves as a trusted regional provider with over 15 years of experience. The website is built on Squarespace, featuring professional design, clear navigation, and mobile responsiveness. Technical infrastructure includes standard web technologies and analytics tools such as Google Analytics and Tag Manager. Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. The WHOIS data for the domain is unavailable due to a registration error, which raises some concerns about domain legitimacy, but the website content and business information appear credible and professional. Overall, the site demonstrates a good balance of business credibility and technical implementation with room for improvement in privacy compliance and security best practices.
JH Shouksmith & Sons Ltdshouksmiths.co.uk
Energy · United Kingdom
52Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
JH Shouksmith & Sons Ltd is a well-established UK-based mechanical and electrical contracting company with over 200 years of family-led experience. The company specializes in delivering comprehensive mechanical and electrical packages for construction projects ranging from £50k to over £7m. Their services include plumbing, heating, air conditioning, fire alarms, security, data, PV, and plantroom installations. The business targets construction industry clients across the UK and maintains a strong market position supported by multiple industry certifications and a professional online presence. Technically, the website is built on the SeeCMS platform and utilizes a range of JavaScript libraries including jQuery, Slick Slider, and FontAwesome. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Hosting is provided by NetHosted Ltd, consistent with the domain registration data. Analytics are implemented via Google Tag Manager and Google Analytics, with moderate user tracking. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerable libraries, though it lacks visible security headers and explicit security policies. The use of an outdated jQuery version and absence of cookie consent mechanisms indicate areas for improvement. No incident response or vulnerability disclosure information is present, which could be enhanced to improve security posture. Overall, the website is professional, trustworthy, and aligned with the company's business claims. Recommendations include updating JavaScript libraries, implementing security headers, adding cookie consent mechanisms, and publishing terms of service and security policies to strengthen compliance and trust.
Other
50Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at www.quadrantabs.co.uk is inaccessible, returning a 403 Forbidden error page with no content or metadata available. The domain itself is invalid according to the Nominet UK WHOIS data, which states the domain name contravenes naming rules and cannot be registered. Consequently, no business information, contact details, or technical infrastructure details can be derived from the site. The lack of accessible content and invalid domain status severely limits any meaningful analysis of the business or its digital presence. From a technical perspective, the site shows no signs of modern web technologies, security headers, or HTTPS configuration. The absence of any metadata, scripts, or external links further indicates the site is either misconfigured or non-existent. Security posture is very weak due to the lack of HTTPS and security headers, and the site is effectively blocked from public access. Given the domain is invalid and unregistered, the legitimacy of the website is highly questionable. There are no privacy, cookie, or terms of service policies present, and no contact or business information is available. Overall, the site presents a high risk of being non-legitimate or abandoned, and no trust indicators are present. Strategically, it is recommended to verify the domain registration status and correct any domain naming issues. If this is a legitimate business, they should ensure proper domain registration, configure HTTPS, and publish relevant business and security information to build trust and comply with privacy regulations.
- Design Pomegranate
designpomegranate.com
Real Estate · United Kingdom
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Design Pomegranate is a small architectural studio based in Islington, London, specializing in bespoke residential architecture. Their website presents a professional image with a focus on quality and delivery of beautiful living spaces. The company targets clients seeking personalized architectural services for residential projects. The site is built on the Squarespace platform, leveraging modern web technologies such as Typekit fonts and JSON-LD structured data for SEO and semantic clarity. While the technical infrastructure is adequate with moderate performance and good mobile optimization, there is room for improvement in accessibility and SEO practices. From a security perspective, the website lacks visible security headers and privacy-related policies, which are important for compliance and user trust. The absence of WHOIS data raises concerns about domain registration legitimacy, although the website content and contact information suggest a legitimate business operation. No signs of adult or questionable content were detected, making the site safe for general audiences. Overall, the website demonstrates a solid business presence with professional design and clear contact information but requires enhancements in security posture and privacy compliance to strengthen trust and regulatory adherence. Verification of domain registration status is recommended to ensure legitimacy and reduce risk.
- SSecurity Verification
gemmells.co.uk
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.gemmells.co.uk is currently inaccessible beyond a security verification page implementing Google reCAPTCHA v3 invisible challenge, indicating the presence of a Web Application Firewall or bot protection mechanism. The domain WHOIS lookup failed with an error stating the domain name contains too many parts and cannot be registered under Nominet UK rules, suggesting the domain is invalid or non-registered. Consequently, no registrant or business information is available to verify legitimacy or business operations. The website content is minimal, providing no privacy, cookie, or terms of service policies, nor any contact details or business descriptions. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site exhibits a low security posture and poor business credibility due to lack of accessible information and domain legitimacy concerns.
- HHarry Charles Estate Agents
harrycharles.co.uk
Real Estate · United Kingdom
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Harry Charles Estate Agents is a well-established real estate business founded in 2002, specializing in residential and commercial sales and lettings in the Watford and Hemel Hempstead areas of Hertfordshire, UK. The company positions itself as a leading local estate agent with a strong focus on customer service and comprehensive property solutions including valuations and auction services. Their website reflects a professional and consistent brand image, supported by positive customer testimonials and recognized industry certifications. Technically, the website is built on Joomla CMS with modern frontend technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security practices include HTTPS enforcement and cookie consent management, although some security headers could be improved. The WHOIS data for the domain is unavailable due to a domain registration error, which slightly impacts trust but does not detract from the overall legitimacy of the business presence online. Overall, the site demonstrates a mature digital infrastructure and a solid market position in the real estate sector.
- SSecurity Verification
airconditioningwales.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.airconditioningwales.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. No actual business content, contact information, or policies are available for review. The domain WHOIS lookup failed with an error indicating the domain name is invalid per Nominet UK rules, suggesting the domain may not be properly registered or is misconfigured. This severely limits the ability to assess the business or security posture comprehensively. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection, but no other frameworks or CMS are detectable. The lack of visible security headers and absence of HTTPS information further reduce confidence in the site's security maturity. Privacy and cookie policies are missing, and no contact or business details are presented, which negatively impacts trust and compliance. From a security perspective, the use of reCAPTCHA is a positive control against automated abuse, but the absence of other security best practices and the domain registration issues raise concerns. The site is effectively blocked for analysis, resulting in a low security score and overall AI rating. Overall, the site appears to be either under construction, misconfigured, or protected by aggressive security controls that prevent meaningful external analysis. Strategic recommendations include resolving domain registration issues, providing full website content and business information, implementing HTTPS and security headers, and publishing privacy and cookie policies to improve trust and compliance.
- OOrchard Press
orchardpress.co.uk
Other · United Kingdom
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Orchard Press is a small, established print and design business based in Olney, UK, founded in 2004. The company offers a broad range of services including general printing, photocopying, office services, invitations, poster printing, photo printing, and has an in-house design team. They also partner with Prickly Pear Web Design to provide website design and development services. The website is built on WordPress using Elementor, featuring a professional design and good user experience with clear navigation and mobile optimization. Contact information is prominently displayed with multiple channels including email, phone, and contact forms. Security posture is adequate with HTTPS and Google reCAPTCHA v3 implemented, though security headers are missing and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website reflects a trustworthy and credible small business with room for improvement in privacy and security best practices.
Vanilla Catering & Eventsvanillacatering.co.uk
Hospitality · United Kingdom
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Vanilla Catering & Events is a UK-based small hospitality business specializing in catering services for weddings, corporate events, and private parties. With over seventeen years of experience, the company emphasizes fresh, locally sourced ingredients and professional service. The website reflects a well-established local catering company with a strong reputation supported by client testimonials and clear contact information. Technically, the website uses modern web technologies including jQuery, Google Analytics, and Google Fonts, with good mobile optimization and SEO practices. However, no CMS or backend platform is explicitly identified. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal security policies. Privacy compliance is basic with privacy and cookie policies present but no active cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.
RA Dalton Ltdradalton.co.uk
Energy · United Kingdom
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
RA Dalton Ltd is a UK-based specialist company providing installation, servicing, and maintenance of Klargester sewage treatment systems and off-mains drainage solutions. They hold multiple industry certifications and accreditations, positioning themselves as a leading wastewater specialist across the UK. Their website is professionally designed, mobile-optimized, and rich in relevant content, targeting both domestic and commercial customers. Technically, the site runs on WordPress with the Avada theme and integrates Google Analytics and YouTube APIs, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, though improvements can be made by adding HTTP security headers and formal vulnerability disclosure mechanisms. Privacy compliance is adequate with privacy and cookie policies present, but lacks explicit consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and customer testimonials.
Oops !atos.net
Other
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website atos.net is currently inaccessible due to a web application firewall block by Claranet WebFence, preventing access to any meaningful content or metadata. The domain is well-established, created in 1997, and registered with CSC Corporate Domains, Inc., indicating a legitimate and mature business presence. Due to the blocked content, no detailed analysis of business operations, technical infrastructure, or security posture can be performed. The lack of accessible content also prevents evaluation of privacy compliance, contact information, or marketing practices. Overall, the site appears to be protected by security mechanisms that restrict external analysis.
- MMaximum Protection Services Ltd
maximumprotectionservices.com
Other · United Kingdom
64Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Maximum Protection Services Ltd is a UK-based security service provider with over 40 years of experience delivering intelligent, innovative, and cost-effective security solutions. The company holds prestigious NSI Gold accreditation and operates an in-house alarm receiving center compliant with BS8418 and BS5979 standards. Their key services include CCTV systems, intruder alarms, access control, fire alarms, rapid deployment, canine services, remote monitoring, and automated gates and barriers. The website reflects a professional and consistent brand image targeting businesses requiring comprehensive security solutions. Technically, the website is built on the Squarespace platform, utilizing modern web technologies such as Google Fonts and Google reCAPTCHA for form security. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is good with HTTPS and HSTS enabled, though DNSSEC is not enabled and advanced security headers are missing. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent banner is present. Overall, the security posture is solid but could be improved by publishing security policies, enabling DNSSEC, and adding vulnerability disclosure mechanisms. The domain registration data is consistent with the business claims, supporting legitimacy. The website content is safe for general audiences and professionally presented.
- DDatabase Error
drainagespares.com
Other
70Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.drainagespares.com is currently non-functional, displaying a database connection error page with no accessible content or metadata. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or inactive. There is no evidence of business information, contact details, privacy or cookie policies, or any security measures such as HTTPS or security headers. This severely limits the ability to assess the business or technical maturity of the site. The lack of content and registration data suggests the domain is not currently in legitimate use or is under misconfiguration or development. From a technical perspective, the site lacks any detectable CMS, frameworks, or technologies. The error page indicates a backend database failure, which is a critical operational issue. No security headers or HTTPS were detected, exposing the site to potential security risks if it were live. No analytics, advertising, or tracking technologies are present, consistent with the site being down. Security posture is poor due to the absence of HTTPS, security headers, and the presence of a database error. No privacy or compliance policies are found, indicating non-compliance with GDPR or other regulations. The domain's WHOIS absence further undermines trust and legitimacy. Overall, the site is not currently operational and poses a high risk for users attempting to access it. Strategic recommendations include restoring database connectivity immediately, securing the site with HTTPS, implementing standard security headers, and ensuring proper domain registration and WHOIS data accuracy. Establishing privacy policies and contact information is essential for compliance and trust. Until these issues are resolved, the site should be considered non-operational and untrustworthy.
Greenshields JCB Ltdgreenshieldsjcb.com
Transportation · United Kingdom
56Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Greenshields JCB Ltd is a leading UK dealer specializing in JCB construction and industrial machinery. The company offers a comprehensive range of services including new and used machine sales, parts supply, servicing, finance, and insurance. With a strong market position as the premier JCB dealer in the UK, Greenshields JCB targets construction and industrial sectors requiring reliable equipment and support. The website reflects a professional and consistent brand image, supported by active social media channels and detailed business information. Technically, the website is built on WordPress with WooCommerce and uses modern technologies such as Bootstrap 5, LayerSlider, and various tracking and marketing tools including Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility compliance and security headers. Security posture is solid with HTTPS enforced, cookie consent management, and bot protection via Google reCAPTCHA. However, the absence of explicit security headers and lack of WHOIS data for the domain slightly reduce trustworthiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional digital presence for Greenshields JCB Ltd, though the missing WHOIS information warrants caution. Strategic improvements in security headers and transparency around domain registration would enhance credibility and security posture.
Kudos Software Ltdkudos-software.co.uk
Retail · United Kingdom
70Medium
NIS2 55 · GDPR 95
NIS2 55 · GDPR 95
Kudos Software Ltd is a UK-based company specializing in providing innovative software solutions tailored for the charity retail sector. Their offerings include a comprehensive Charity Retail System, Charity EPoS, Business Intelligence tools, Retail Gift Aid processing, and Dealer Management Software. The company is well-positioned in the UK charity retail market, trusted by over 150 charity and hospice retailers, and emphasizes ease of use for volunteers and staff. Their website reflects a professional and consistent brand image with strong client testimonials and recognized certifications such as Cyber Essentials and Sage Partner status. Technically, the website is built on WordPress 7.0, utilizing modern plugins like Gravity Forms for form management and Yoast SEO for search engine optimization. The site employs Google Tag Manager and Google reCAPTCHA v3 for analytics and security respectively. The website is mobile-optimized, accessible, and demonstrates good SEO practices, although some security headers could be improved. From a security perspective, the site enforces HTTPS, uses CAPTCHA on forms, and provides a cookie consent mechanism with revocation options, indicating a mature approach to privacy and security. However, the absence of explicit security headers and a vulnerability disclosure policy suggests room for enhancement. The WHOIS lookup failed due to a query format error, but the website's content and certifications support its legitimacy. Overall, Kudos Software Ltd presents a secure, professional, and user-friendly digital presence aligned with its business goals. Strategic improvements in security headers and incident response transparency would further strengthen their security posture and trustworthiness.
Matricamatrica.co.uk
Energy · United Kingdom
71Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Matrica is a UK-based company specializing in advanced energy forecasting software solutions aimed at optimizing energy predictions and improving efficiency for businesses. The website presents a professional image with clear business focus and structured data supporting local business information. The technical infrastructure is based on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies. While the site is mobile optimized and well designed, it lacks visible privacy and cookie policies, and no security headers were detected, indicating room for improvement in security posture. The WHOIS lookup failed due to domain naming rules violation, suggesting the domain may be a subdomain or alias, which impacts trustworthiness. Overall, the site is functional and business-oriented but requires enhancements in security and compliance to strengthen its risk profile.
Excel Packaging & Insulation Co. Limitedexcelpackaging.co.uk
Manufacturing · United Kingdom
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Excel Packaging & Insulation Co. Limited is a UK-based manufacturer and wholesale supplier specializing in protective packaging solutions including foam packaging, wooden crates, pallets, and sustainable packaging options. The company targets businesses requiring custom packaging solutions and positions itself as a specialist with a focus on quality and sustainability. The website is built on Drupal 10, integrating modern technologies such as Google Tag Manager and reCAPTCHA, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and policies are not explicitly published. Overall, the website is professional and trustworthy, supporting the company's business credibility. However, the absence of explicit privacy and terms of service pages suggests room for improvement in compliance documentation.