Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
3,901–3,950 of 99,069
Express Export Servicesexpress-exports.co.uk
Transportation · United Kingdom
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Express Export Services Limited is a UK-based international shipping and logistics company with over 50 years of experience. The company offers a broad range of services including parcel delivery, pallet and crate shipping, container shipping, vehicle shipping, international removals, antiques and artwork shipping, oversized cargo handling, professional packing, and customs/documentation assistance. Their target audience includes individuals, families, and businesses requiring reliable and secure international shipping solutions. The website presents a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring good mobile responsiveness and user experience. The site uses Google reCAPTCHA to protect forms from spam. However, there is no evidence of advanced security headers or cookie consent mechanisms, which are important for GDPR compliance and security hardening. From a security perspective, the website is accessible without WAF or blocking mechanisms, but lacks several security best practices such as security headers and explicit incident response contacts. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name contains too many parts and cannot be registered, which raises concerns about domain legitimacy and ownership consistency. Overall, the website is professional and functional with good content quality and business credibility. However, the domain registration anomaly and missing security headers reduce the overall trust score. Strategic improvements in domain registration verification, security header implementation, and privacy compliance are recommended to enhance trust and security posture.
Worcester Tyres & Exhausts Ltdworcestertyres.co.uk
Transportation · United Kingdom
69Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Worcester Tyres & Exhausts Ltd is a small, established automotive service provider based in Worcester, UK, specializing in tyre fitting, servicing, MOT testing, and repairs. The company targets local vehicle owners and prides itself on quality, reliability, and competitive pricing. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity. It includes an online booking widget and integrates Google Analytics and Tag Manager for tracking. Security posture is moderate with HTTPS usage but lacks visible security headers and published security policies. The absence of privacy and cookie policies indicates compliance gaps. WHOIS data is unavailable due to a domain naming rules error, which raises some concerns about domain legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security transparency.
- RRoyal Devon University Healthcare NHS Foundation Trust
northdevonhealth.nhs.uk
Healthcare · United Kingdom
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Royal Devon University Healthcare NHS Foundation Trust operates as a large regional healthcare provider within the UK NHS system, delivering acute hospital services, patient and visitor support, and healthcare professional resources. The website is well-branded and professionally designed, targeting patients, visitors, healthcare workers, and job seekers in the Devon region. The digital infrastructure leverages modern JavaScript frameworks such as Alpine.js and Splide.js, with Umbraco CMS managing content. The site includes cookie consent mechanisms and privacy policies aligned with GDPR requirements, reflecting a mature approach to privacy compliance. Security posture is moderate with HTTPS implied but lacks explicit security headers and published incident response policies. Overall, the website is trustworthy, accessible, and provides comprehensive healthcare information and services.
Bothams Estate Agentsbothams.co.uk
Real Estate · United Kingdom
53Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Bothams Estate Agents is a well-established independent real estate firm based in Chesterfield, UK, with a history dating back to 1871. The company offers a comprehensive range of property services including residential and commercial sales, lettings, valuations, and property management. The website reflects a professional and trustworthy business with strong customer testimonials and recognized industry certifications. Technically, the site is built on Joomla CMS with modern JavaScript libraries and is mobile-optimized, providing a good user experience. Security measures include HTTPS and Google reCAPTCHA on forms, although some security headers are missing. The WHOIS data for the domain is unavailable due to a domain registration anomaly, which slightly impacts trust but does not detract from the business credibility. Overall, the website is secure, compliant with privacy regulations, and professionally maintained.
Capacitycapacitymedia.com
Media
62Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Capacity is a well-established media company founded in 2009, specializing in news, insights, events, and market intelligence for the connectivity and digital infrastructure sectors including telecoms, data centres, wireless, and subsea industries. The website serves industry professionals and stakeholders by providing relevant and timely content. Technically, the site is built on WordPress and leverages modern analytics and marketing tools such as Google Analytics 4, Google Tag Manager, Marketo, and CookieYes for cookie consent management. Hosting infrastructure is supported by Microsoft Azure DNS services. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and security headers which could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is professional, trustworthy, and content-rich, but could enhance compliance and security transparency.
Quaypoint Security | Locksmiths Newryquaypointlocksmiths.com
Retail · United Kingdom
50Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Quaypoint Security is a well-established locksmith business based in Newry, Northern Ireland, with over 27 years of industry experience. The company offers a comprehensive range of locksmith and security services including key cutting, domestic, commercial, automotive locksmith services, access control systems, and safes. Their market position is that of a trusted local locksmith serving customers across the UK and Ireland, supported by positive Google reviews and partnerships with reputable clients. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, with SEO optimizations and moderate performance. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks security headers and DNSSEC, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration is consistent with the business profile, showing legitimacy and no privacy protection, which is appropriate for this business type.
- Wwww.msjoyners.com
msjoyners.com
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at www.msjoyners.com/lander currently serves as a minimal placeholder or parking page with no substantive content or business information. The domain appears unregistered or expired as indicated by the WHOIS query returning no match. There is no visible company branding, contact information, or policies, which severely limits the ability to assess the business or its market position. Technically, the site uses basic JavaScript and React framework scripts loaded from external sources but lacks any meaningful content or SEO optimization. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present to indicate compliance with data protection regulations. Overall, the site is not operational as a business website and presents a high risk for trust and credibility.
Plextekplextek.com
Technology · United Kingdom
75Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Plextek is a UK-based engineering and consulting company specializing in advanced technology solutions, particularly in radar, communications, and data systems. With over 35 years of experience, they serve government and industry sectors, offering a broad range of services including software and electronics engineering, AI and data science, and production manufacturing. The website reflects a mature and professional digital presence with comprehensive service descriptions and a clear market focus. Technically, the site is built on WordPress with modern frameworks and includes multiple analytics and marketing tools, indicating a digitally mature infrastructure. Security posture is generally good with HTTPS and cookie consent implemented, but lacks some advanced security headers and explicit privacy policies. Overall, the site is trustworthy and professional, though the absence of WHOIS data and explicit privacy documentation suggests areas for improvement in transparency and compliance.
MRK Servicesmrkservices.co.uk
Manufacturing · United Kingdom
66Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
MRK Services is a small, family-run UK business specializing in powder coating, blast cleaning, automotive restoration, and garden furniture restoration services. Established in 1990, the company emphasizes quality, service, and experience, targeting both consumer and business clients seeking surface preparation and restoration solutions. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials, positioning MRK Services as a trusted local specialist in their industry. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA Enterprise for security and analytics. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be enhanced. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and anti-bot measures in place, but lacks explicit security headers such as CSP and X-Frame-Options. Privacy compliance is partial; a cookie consent banner is present, but no explicit privacy policy or terms of service pages were detected in the provided content. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and professional, but domain registration details are unavailable due to WHOIS query issues, which slightly impacts trust assessment. Strategic improvements in privacy documentation and security headers would strengthen compliance and security posture.
Cullimore Dutton Solicitors Limitedcullimoredutton.co.uk
Real Estate · United Kingdom
58Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Cullimore Dutton Solicitors Limited is a well-established legal and financial advisory firm based in Cheshire, UK, with a heritage dating back to 1792. The company offers a broad range of services including family law, property conveyancing, estate planning, and independent financial advice, targeting individuals, families, and business owners in the Cheshire and Chester region. The firm positions itself as a trusted local advisor providing joined-up legal and financial services under one roof, emphasizing clarity, respect, and professionalism. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Yoast SEO for search optimization, Contact Form 7 for user inquiries, and Google reCAPTCHA for spam protection. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for improvement in security headers and some external tracking domains. From a security perspective, the website enforces HTTPS and uses reCAPTCHA on forms, indicating a good baseline security posture. However, there is no explicit evidence of advanced security headers or a published security policy or incident response plan. The WHOIS lookup for the domain failed due to a naming rules error, but the domain is active and professionally maintained, suggesting legitimacy despite incomplete WHOIS data. Overall, the website is professional, trustworthy, and compliant with privacy regulations, including GDPR. The main risks relate to incomplete WHOIS data and minor security header omissions. Strategic improvements in security policy transparency and header implementation would enhance the security posture and trustworthiness further.
Welcome to Culture Warrington - Culture Warringtonculturewarrington.org
—
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
- Wwww.mad-sheep.co.uk
mad-sheep.co.uk
Other
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website mad-sheep.co.uk is currently a parked domain with minimal content primarily consisting of advertising placeholders and consent management scripts. The domain is invalid according to the official Nominet UK WHOIS lookup, indicating it is not properly registered and likely not in active business use. There is no identifiable business information, contact details, or privacy policies present on the site. Technically, the site uses JavaScript and a ConsentManager CMP for cookie consent but lacks evidence of HTTPS or security headers. The overall security posture is weak, and the site does not demonstrate compliance with privacy regulations such as GDPR. Given the lack of legitimate content and domain registration issues, the site has a low trustworthiness and credibility score.
- Wwww.rainbowfactorykids.com
rainbowfactorykids.com
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at www.rainbowfactorykids.com/lander currently serves only a minimal parking or placeholder page with no substantive content or business information. The domain WHOIS query returned no registration data, indicating the domain is either unregistered or expired. There is no evidence of an active business presence or digital infrastructure beyond basic JavaScript and CSS files related to parking services. The technical infrastructure is minimal, relying on React and some progressive web app indicators, but lacks any meaningful content or SEO optimization. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present. Overall, the site appears inactive or abandoned, posing a high risk for trust and legitimacy. Strategic recommendations include securing domain registration, deploying a secure HTTPS site with proper policies, and establishing clear business and contact information to build credibility.
- SSecurity Verification
vetruus.com
Other
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.vetruus.com is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No substantive business content, contact information, or policies are publicly available, severely limiting the ability to assess the company's operations or credibility. The WHOIS lookup failed to retrieve any registration data, suggesting the domain may be unregistered, privacy protected, or otherwise obscured. Technically, the site uses modern frontend frameworks like Bootstrap and integrates Google reCAPTCHA, but lacks visible security headers or HTTPS enforcement details in the provided data. Overall, the security posture is minimal and the trustworthiness is low due to the lack of accessible information and domain registration transparency.
Dovendi - acrefarm.co.uk is now for saleacrefarm.co.uk
—
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
- BBalls2Marketing Ltd
balls2marketing.co.uk
Other · United Kingdom
51Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Balls2Marketing Ltd is a well-established marketing agency based in Derby, UK, founded in 2010. The company offers a comprehensive range of marketing services including public relations, digital marketing, creative branding, marketing strategy, social media management, and event management. Their client base spans various sectors such as glazing, construction, home improvements, sustainability, and both B2B and B2C markets. The agency positions itself as a creative and strategic partner focused on delivering measurable marketing results. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, demonstrating a mature digital presence. Security measures include HTTPS, reCAPTCHA on forms, and anti-spam honeypots, though additional security headers could enhance protection. Overall, the website is professional, user-friendly, and compliant with privacy regulations, reflecting a credible and trustworthy business.
PB Associatespb-a.co.uk
Finance · United Kingdom
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
PB Associates is a small accounting firm based in Hampton, Middlesex, UK, providing a range of financial services including taxation, compliance, business start-up support, consultancy, and pensions advice. The website presents a professional image with clear contact details and a focus on serving local businesses and individuals. The firm positions itself as a cost-effective, high-value provider of accounting and advisory services. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and ASP.NET frameworks, delivering a responsive and accessible user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is basic with a privacy notice and cookie information present but no active consent mechanism. The domain WHOIS data is unavailable due to a registry error indicating the domain name is invalid, which raises concerns about domain legitimacy despite the professional website content. Overall, the website scores well on content quality and business credibility but should improve security and privacy practices and resolve domain registration inconsistencies.
Mitchell Maguiremitchellmaguire.co.uk
Other · United Kingdom
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Mitchell Maguire is a specialized recruitment consultancy focusing on sales and technical roles within the UK construction sector. Established in 2009, it has developed a strong market presence with a professional website offering job listings, candidate services, and client engagement. The company targets construction manufacturers, distributors, and sales professionals, providing tailored recruitment solutions. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring good SEO, mobile responsiveness, and user experience. Security measures include HTTPS, Google reCAPTCHA, and cookie consent, though some HTTP security headers and formal security policies are absent. Overall, the site is trustworthy and professionally maintained, with minor recommendations to enhance security posture and compliance documentation.
Ambassador Fire & Securityambassadorfs.com
Other · United Kingdom
59Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Ambassador Fire & Security is a UK-based company specializing in comprehensive compliance solutions including fire protection, security, and electrical services. Their service portfolio covers fire risk assessments, alarm systems, extinguishers, suppression, training, electrical installations, and more, serving businesses, organizations, and homes across the United Kingdom. The company positions itself as a trusted regional provider with multiple industry certifications such as NSI, SSAIB, and BAFE, enhancing its credibility in the fire and security sector. Technically, the website is built on WordPress using the Elementor and Elementor Pro frameworks, leveraging modern web technologies including jQuery and Font Awesome. The site is mobile-optimized with good design quality and user experience, although SEO and accessibility features are basic. The absence of analytics scripts suggests minimal user tracking, aligning with privacy-conscious practices. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism with granular controls, indicating GDPR awareness. However, the lack of visible security headers and absence of a privacy policy page represent gaps in compliance and security best practices. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency despite the professional appearance and certifications displayed. Overall, the website demonstrates a solid business presence with good technical implementation but requires improvements in privacy documentation, security headers, and domain registration transparency to enhance trust and compliance.
Other
55Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.citybikeservice.co.uk is currently inaccessible and only serves a 404 Not Found error page, indicating no active content or business presence. The domain WHOIS data shows that the domain is invalid and cannot be registered due to contravention of Nominet UK naming rules, suggesting the domain is not legitimately registered or operational. There is no metadata, structured data, contact information, or any business-related content available on the site. Technically, the site lacks HTTPS and security headers, and no scripts or analytics are detected. The overall security posture is poor with no privacy or cookie policies, and no evidence of compliance with GDPR or other regulations. This results in a very low trust and credibility score for the domain and website.
- SSecurity Verification
vasight.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.vasight.co.uk currently presents only a security verification page employing Google reCAPTCHA v3 invisible challenge, indicating the presence of a Web Application Firewall (WAF) or bot protection mechanism. Due to this, no substantive website content, business information, or contact details are accessible for analysis. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK's naming rules, suggesting the domain is either invalid or improperly registered. This severely limits the ability to assess the company's legitimacy or business operations. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Privacy and cookie policies are absent, and no compliance indicators are present.
- SSampling International Enterprises Ltd
samplingint.co.uk
Manufacturing · United Kingdom
57Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Sampling International Enterprises Ltd is a UK-based manufacturing company specializing in bespoke sampling and display solutions primarily for the textile industry. With over 45 years of experience, the company offers a wide range of products including sample books, shade cards, fabric swatch books, and consumer sample fulfilment services. Their market position is strong within the UK, serving manufacturers and major retailers with a reputation for quality and innovation. The website reflects a professional business model focused on manufacturing and fulfilment with an in-house design studio to support client needs. Technically, the website is built on WordPress using Elementor, enhanced with modern tools such as Google Analytics, Google Tag Manager, and reCAPTCHA v3 for security. The site is hosted by Zen Internet Limited, a reputable UK hosting provider. Performance and mobile optimization are good, with SEO and accessibility at a basic to good level. Security best practices are observed, including HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security and incident response policies are not publicly available. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance indicators. Contact information is comprehensive and easily accessible, enhancing business credibility. Overall, the website is trustworthy, professional, and well-maintained, supporting the company’s market position. Strategically, the company should consider publishing explicit security policies and incident response contacts to further enhance trust and compliance. Regular audits of third-party scripts and improvements in accessibility would also benefit the site’s security and user experience.
Harris Hillharrishill.co.uk
Non-profit · United Kingdom
71Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Harris Hill is a UK-based specialist recruitment agency focused on the charity sector, connecting professionals with rewarding roles in fundraising, marketing, finance, and executive leadership. The company positions itself as a trusted partner with experienced consultants and holds a B Corp certification, underscoring its commitment to social responsibility. The website is professionally designed with clear navigation and relevant content targeting charity professionals and organizations in the UK. Technically, the site uses modern web technologies including service workers for PWA capabilities and Google Tag Manager for analytics, hosted via Amazon Cloudfront CDN. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing and privacy compliance mechanisms like cookie consent are absent. WHOIS data for the domain is unavailable due to a domain naming error, which slightly impacts trust but the website content and structured data support legitimacy. Overall, the site is a credible and professional digital presence for a mid-sized charity recruitment business.
- P
Finance
54Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Pyramid Property Finance Limited is a small UK-based financial services company specializing in bespoke commercial and corporate finance solutions. The company leverages over 100 years of combined banking and accountancy experience to serve a national clientele from its Wolverhampton serviced offices. Key services include consultancy, commercial mortgages, property investment, equity funding, and treasury management. The website content is professional but basic, lacking modern design elements and mobile optimization. Technically, the site uses simple HTML, CSS, and JavaScript without advanced frameworks or CMS, and no analytics or tracking scripts are detected. Security posture is weak due to absence of HTTPS, security headers, and privacy policies, which poses risks for user trust and compliance. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance credibility and user experience.
Nika Casinofourseasonsfrance.co.uk
Other
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Nika Casino operates as an international online gambling platform offering a wide range of casino games including slots, live dealer games, and instant games. The platform emphasizes a colorful, user-friendly design with a strong focus on bonuses, promotions, and a tiered VIP loyalty program. It targets adult players interested in online casino entertainment, providing a mobile-optimized experience and multiple payment options. The business model centers on attracting and retaining players through generous bonuses and a large game portfolio from numerous providers. Technically, the website is built with standard web technologies (HTML, CSS, JavaScript) and is hosted via Namecheap. It demonstrates good performance, mobile optimization, and SEO practices. However, it lacks visible CMS or advanced frameworks. The site uses HTTPS and encrypted payment processing, but security headers and advanced security policies are not evident. From a security perspective, the site shows strengths in secure payment handling and user support but lacks publicly available privacy, cookie, and terms of service policies. No incident response or vulnerability disclosure information is provided. The WHOIS data is inconsistent, showing a domain creation date in the future, which raises concerns about registration legitimacy. No contact emails or phone numbers are provided, limiting transparency. Overall, the website is professional and content-rich but requires improvements in privacy compliance, transparency, and WHOIS legitimacy. Strategic recommendations include publishing privacy and cookie policies, adding terms of service, enhancing security headers, and clarifying domain registration details to improve trust and compliance.
- TThe Society of Later Life Advisers (SOLLA)
societyoflaterlifeadvisers.co.uk
Finance · United Kingdom
61Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Society of Later Life Advisers (SOLLA) operates as a UK-based non-profit organization focused on accrediting and supporting financial advisers specializing in later life financial planning. Established in 2008, SOLLA provides a trusted accreditation standard, resources, and training to ensure high-quality advice for older adults and their families. The website serves as a portal for consumers to find accredited advisers and for members to access professional development resources. Technically, the site is built on ASP.NET Web Forms with modern JavaScript libraries such as jQuery, AngularJS, and Knockout.js, and integrates Google Analytics and reCAPTCHA Enterprise for analytics and security. The site is hosted under a reputable registrar and uses HTTPS with good SSL configuration. Security posture is solid with room for improvement in HTTP security headers and published security policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy, though GDPR compliance could be enhanced with clearer data retention disclosures. Overall, the website is professional, trustworthy, and well-aligned with its business mission.
- BBlack Rock Grill
blackrockgrill.com
E-commerce · United Kingdom
73Medium
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Black Rock Grill is a specialized e-commerce business focused on hot stone cooking products, including steak stones, pizza ovens, and related accessories. Established in 2005, it positions itself as a market leader in the Steak on the Stone concept, targeting both restaurant and home users. The company operates primarily through its Shopify-based online store, offering worldwide shipping and a range of custom packages. The website reflects a professional and consistent brand image with good content quality and clear navigation.
Acrovision – Leading supplier of automatic identificationacrovision.co.uk
—
57Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Juice Moving Imagesitsjuice.com
Media · United Kingdom
70Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Juice Moving Images is a well-established creative agency based in the United Kingdom, founded in 2002. The company specializes in brand, content, and digital services, targeting businesses seeking to enhance their brand presence and digital products. The website reflects a professional and modern digital presence built on WordPress with advanced SEO and animation technologies, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, although some improvements such as enabling DNSSEC and adding security headers could enhance protection. The absence of a privacy policy and terms of service in the provided content is a compliance gap that should be addressed. Overall, the website projects high professionalism and trustworthiness with strong client testimonials and clear contact information.
- MMatrix Precision Engineering Ltd
matrixprecision.com
Manufacturing · United Kingdom
50Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Matrix Precision Engineering Ltd is a UK-based precision manufacturing company specializing in a wide range of machining and engineering services including CNC milling, 5-axis machining, mill/turn machining, EDM machining, and project management. The company has been established since 2004 and targets industrial clients requiring high precision engineering solutions. The website is built on WordPress using a standard theme and provides navigation to detailed service pages, although the homepage content is minimal. From a technical perspective, the website uses HTTPS and is hosted likely via GoDaddy based on nameservers. The site shows moderate performance and basic mobile optimization. However, it lacks advanced security headers and DNSSEC is not enabled, which could be improved to enhance security posture. No privacy or cookie policies are present, indicating gaps in compliance with data protection regulations. Security posture is moderate with HTTPS enabled but missing several best practices such as security headers and incident response information. No vulnerabilities or malware were detected in the content. The domain registration is consistent with the business profile, showing a long-standing presence since 2004, registered with a reputable registrar. Overall, the website is functional but could benefit from improved privacy compliance and security hardening. Recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and providing clear contact information to improve trust and compliance. Enhancing technical SEO and content richness would also improve user experience and business credibility.
- WWill Writing and Probate Services Ltd.
wtponline.co.uk
Other · United Kingdom
62Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Will Writing and Probate Services Ltd. is a small UK-based company specializing in legal services related to wills, probate, powers of attorney, and property trusts. With over 25 years of experience, the company targets individuals in the Bristol, Gloucester, and Wiltshire areas seeking professional assistance in estate planning and related legal matters. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website uses JavaScript and Google Analytics for tracking, and is built on the itseeze CMS platform. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with no major technical issues detected in the HTML content. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were found in the content. However, the WHOIS lookup failed due to domain registration errors, which raises concerns about domain legitimacy and trustworthiness despite the professional website content. Overall, the website presents a trustworthy and professional front for its business, but the domain registration anomaly should be investigated further. Enhancing security headers and publishing clear security and incident response policies would improve the security posture and compliance standing.
- TTC Group
ollisandco.com
Finance · United Kingdom
68Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
TC Group is a large UK-based professional services firm specializing in accountancy, tax, legal, financial planning, and business advisory services. Positioned as a Top 25 firm by Accountancy Age, TC Group has expanded its footprint through strategic mergers, including the recent acquisition of Ollis & Co in Warwickshire. The company targets business and individual clients seeking comprehensive financial and advisory solutions. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a fast and mobile-optimized user experience. Security posture is good with HTTPS and no obvious vulnerabilities, though the absence of security headers and published security policies suggests room for improvement. The missing WHOIS data for the domain is a concern but does not outweigh the professional presentation and trust signals on the site. Overall, TC Group demonstrates a mature digital presence aligned with its business stature, though verification of domain registration details is recommended to enhance trust.
Vehicle Tracking Ltdvtlive.co.uk
Transportation · United Kingdom
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Vehicle Tracking Ltd operates the website vtlive.co.uk, providing GPS vehicle tracking solutions primarily targeting businesses managing vehicle fleets in the UK. The company offers subscription-based services including live tracking, alerts, reporting, and fleet safety features. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience. The technical infrastructure is based on WordPress with several jQuery versions and third-party widgets for feedback and tracking. While HTTPS is enabled and basic security practices are observed, the presence of multiple outdated jQuery libraries and lack of explicit security headers present moderate security risks. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, including a UK toll-free phone number and social media presence on Facebook. The domain is well-established since 2009, consistent with the business history, and shows no suspicious WHOIS patterns.
- Wwww.oakmontconstruction.co.uk
oakmontconstruction.co.uk
Other
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The domain oakmontconstruction.co.uk is currently a parked domain hosted by GoDaddy and does not host any active business content or services. The WHOIS lookup failed due to the domain name violating Nominet UK naming rules, indicating the domain is not properly registered or is invalid. The website content is minimal, consisting primarily of a placeholder page with advertising and a Trustpilot widget. There is no contact information, company details, or privacy and cookie policies present. Technically, the site uses JavaScript and React-like structures but lacks modern security and SEO features. The absence of HTTPS and security headers further weakens the security posture. Overall, the domain shows low legitimacy and minimal digital maturity.
Bluminblumin.co.uk
Technology · United Kingdom
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Blumin is an award-winning full service design agency operating primarily in Cornwall, Manchester, and Cheshire, UK. They specialize in branding, website design and development, bespoke web software, and marketing strategies aimed at launching, growing, and transforming businesses. Their market position is strong regionally with a focus on integrating brand and digital services to deliver comprehensive solutions. The website is professionally designed with excellent content quality and clear navigation, targeting business clients seeking digital and branding services. Technically, the website leverages modern web technologies including Webflow CMS, Google Tag Manager, Microsoft Clarity, LinkedIn Insight Tag, and Sentry for error monitoring. The site is hosted on Webflow's CDN, ensuring fast performance and mobile optimization. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. However, explicit security headers are not detected in the HTML, which could be improved. Security posture is good with HTTPS enforced and no exposed sensitive data, but the absence of security headers and incident response information suggests room for enhancement. The WHOIS lookup failed due to a domain registration error indicating the domain name contravenes Nominet UK naming rules, which is unusual and reduces trust slightly. Despite this, the website content and business information appear legitimate and professional. Overall, the website presents a low risk with strong business credibility and technical maturity. Strategic recommendations include implementing security headers, publishing incident response and security policies, and resolving domain registration inconsistencies to enhance trust and compliance.
Odesa Limitedodesa.co.uk
Other · United Kingdom
56Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Odesa Limited is a well-established professional cleaning company based in Southwest London, with over 20 years of experience. The company specializes in cleaning services across multiple sectors including offices, schools, retail, and communal areas. Their market position is that of a trusted local expert with a strong client retention rate, supported by recognized certifications such as ISO 14001 and OHSAS 18001. The website reflects a professional business model focused on service delivery to local institutions and businesses. Technically, the website is built on WordPress and employs modern web technologies including Google reCAPTCHA for form security and ShortPixel for image optimization. Hosting is provided by Krystal Hosting Ltd, a reputable UK-based provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in loading speed and accessibility. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy header, which are positive indicators. However, additional security headers are missing, and there is no visible formal security or incident response policy. The absence of a cookie consent mechanism suggests partial GDPR compliance. No vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. Overall, the website is professional, trustworthy, and well-aligned with the company's business claims. Strategic improvements in privacy compliance and security policy transparency would enhance the site's risk profile and user trust.
Peter Milnes Motors Ltdpetermilnesmotors.co.uk
Transportation · United Kingdom
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Peter Milnes Motors Ltd is a small, family-run used car dealership established in 1982, located in Filey, North Yorkshire, UK. The company offers a range of quality used vehicles, servicing, repairs, and finance brokerage services. Their market position is that of a trusted local dealer with a focus on customer satisfaction and repeat business. The website reflects a professional and consistent brand image with clear contact details and service information. Technically, the site uses a custom CMS by Autoweb Design, integrates Google Tag Manager for analytics, and implements basic security headers including a Content Security Policy. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR standards. Security posture is good with HTTPS enforced, but could be improved by adding additional security headers and publishing formal security policies. WHOIS data extraction was unsuccessful due to querying an invalid domain format, but the website content and business information appear legitimate. Overall, the site is well-structured, secure, and trustworthy for its business purpose.
Nolan Partnersnolanpartners.com
Other · United Kingdom
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Nolan Partners is a professional executive search and advisory firm with an established presence since 2011, operating offices in London, New York, and Texas. The company targets corporate clients seeking specialized executive search and advisory services. Their website reflects a medium-sized business with consistent branding and a professional online presence. Technically, the site is built on WordPress using modern plugins such as Yoast SEO and Revolution Slider, hosted behind Cloudflare DNS services. The site is mobile optimized and performs moderately well, with good SEO practices in place. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, DNSSEC is not enabled and security headers are missing, indicating room for improvement. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the domain registration data aligns well with the business history, supporting legitimacy. The site uses Google Analytics and Tag Manager for user tracking with consent mechanisms in place. No adult or questionable content is present, making the site safe for general audiences.
SwiftPOS Pty Ltdverteda.com
Hospitality · Australia
50Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
SwiftPOS Pty Ltd is a leading Australian provider of hospitality point of sale (POS) systems, offering smart and scalable software solutions tailored for clubs, pubs, restaurants, stadia, convention centres, bars, and hotels. The company positions itself as a market leader with over 25 years of industry experience, supporting more than 8000 venues globally and deploying over 40,000 POS systems. Key services include their flagship POS software, TouchMini terminals, Order Away QR code ordering, and Oolio Pay integrated payment solutions, complemented by extensive API integrations and 24/7 local support.
- LLintott
lintottcs.co.uk
Energy · United Kingdom
63Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Lintott is a specialized process solutions provider focused on the design, manufacture, and after-care of factory-built packaged water and wastewater treatment systems, along with process software integration and electrical control panels. The company positions itself as a pioneering and multi-award-winning entity serving industrial and business clients primarily in the energy and manufacturing sectors. The website is professionally designed and hosted on the Squarespace platform, indicating a moderate level of digital maturity with good mobile optimization and SEO practices. However, the absence of critical compliance documents such as privacy and cookie policies, as well as the lack of explicit contact information, limits the overall transparency and user trust. Security-wise, the site benefits from HTTPS and HSTS, but could improve by adding additional security headers and visible security policies. The WHOIS data is unavailable and indicates domain registration irregularities, which raises concerns about domain legitimacy despite the active website presence. Overall, the site is functional and professional but requires enhancements in privacy compliance and domain legitimacy verification to improve trust and security posture.
- SSpeeds Pharmacy Ltd
speedspharmacy.co.uk
Healthcare · United Kingdom
61Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Speeds Pharmacy Ltd is a well-established healthcare provider based in Flintshire, UK, operating since 2001. The company offers a range of pharmacy services including prescription ordering, pharmacist appointments, and NHS funded services such as flu vaccinations and emergency contraception. The website reflects a local community pharmacy with digital service integration, targeting general public customers in the region. Technically, the website is built on WordPress using Elementor and Jetpack plugins, providing a modern and responsive user experience with moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and formal security policies. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the business credibility is high with clear company information, NHS affiliation, and trust indicators. The website is safe for general audiences with no adult or explicit content detected.
- LLCI Productions
lciproductions.com
Media
64Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
LCI Productions is a specialized media company focused on creating immersive and memorable experiences worldwide through 3D projection mapping, laser special effects, water shows, and other experiential technologies. Their market position is that of a niche service provider catering to attractions, brands, and venues seeking high-quality show production and design consultancy. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Yoast SEO, and Google Tag Manager, indicating a good level of digital maturity. Security posture is generally strong with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy, but the lack of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy.
- Home | WeDu
adaptiveit.co.uk
Other
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.adaptiveit.co.uk appears to be a Wix-hosted site with minimal content and no meaningful business information presented. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK naming rules and cannot be registered, which raises significant concerns about the legitimacy and ownership of the domain. The site lacks privacy and cookie policies, contact information, and security best practices such as security headers or SSL configuration details. Technically, the site uses standard Wix platform scripts and polyfills but does not demonstrate advanced technical maturity or optimization. Overall, the security posture is weak due to lack of visible security controls and policies. The risk assessment for this site is high due to domain registration issues and lack of compliance and security indicators.
- CarSupermarket.com
motordepot.co.uk
Transportation · United Kingdom
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
CarSupermarket.com is a UK-based large used car retailer offering thousands of used vehicles with a minimum 12-month warranty, home delivery, and store collection options. The business is part of the Aramis Group, a major European used car sales leader, which enhances its market credibility. The website is professionally designed with excellent content quality, clear navigation, and good mobile optimization. It leverages modern technologies including Nuxt.js, Stripe for payments, and multiple analytics and advertising platforms such as TikTok Pixel and Bing Ads. Security posture is good with HTTPS and security headers implemented, though no explicit security policy or incident response information is published. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. The absence of WHOIS data for the domain is a notable anomaly, slightly reducing trust, but the overall business and website presentation are professional and trustworthy.
- EBM Electrical services Ltd
ebmelec.com
Energy · United Kingdom
64Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
EBM Electrical services Ltd is a small local business based in England providing electrical services. The website is built on the Wix platform and presents basic business information including contact phone number and postal address. The site lacks comprehensive privacy, cookie, and terms of service policies, which limits its compliance posture. Technically, the site uses standard Wix scripts and styles with moderate mobile optimization and basic SEO features. Security posture is limited with no detected security headers or incident response contacts. The domain WHOIS data is missing or unregistered, which raises concerns about domain legitimacy and trustworthiness. Overall, the website serves its basic business purpose but requires improvements in security, compliance, and domain registration transparency.
- Bloxwich Environmental Services Ltd
bloxwichasbestos.co.uk
Other · United Kingdom
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Bloxwich Environmental Services Ltd is a small UK-based company specializing in asbestos removal and surveys, serving the West Midlands and nationwide. Established in 2004, the company emphasizes professional service, competitive pricing, and holds industry accreditations such as CHAS and ARCA. Their website reflects a professional and clear presentation of services targeted at residential and commercial clients. Technically, the site uses modern web technologies including Google Analytics and Tag Manager, hosted on a MultiScreenSite platform with good mobile optimization and SEO practices. Security posture is generally good with HTTPS enforced and secure forms, though explicit security headers and a published security policy are absent. Privacy and cookie policies are present but basic, with GDPR compliance implied. The WHOIS data for the domain is unavailable and indicates domain registration issues, which raises legitimacy concerns despite the professional web presence. Overall, the site scores well on business credibility and content quality but is penalized for domain registration inconsistencies and some security best practices gaps.
Other
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at www.integral.co.uk is currently inaccessible, returning a 403 Forbidden error page served by nginx. The domain WHOIS lookup failed due to the domain name violating Nominet UK's naming rules, indicating the domain is invalid or misconfigured. Consequently, no business, contact, or policy information is available from the site. The lack of accessible content and absence of metadata or scripts suggests the site is either under maintenance, misconfigured, or not properly registered. From a technical perspective, the site lacks HTTPS and security headers, and no modern technologies or CMS platforms are detectable. The minimal HTML content and error status severely limit any meaningful technical or SEO analysis. The absence of privacy and cookie policies indicates non-compliance with common data protection regulations. Security posture is weak due to the lack of HTTPS and security headers, and the domain's invalid status raises concerns about legitimacy. No vulnerabilities or incident response information can be assessed due to the blocked content. Overall, the site presents a high risk from a trust and security perspective. Strategic recommendations include resolving domain registration issues, enabling HTTPS with a valid SSL certificate, implementing security headers, and publishing privacy and cookie policies to improve compliance and trustworthiness.
- DDiagnostic Imaging Ltd
diagimaging.com
Healthcare · United Kingdom
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Diagnostic Imaging Ltd is a UK-based supplier specializing in Nuclear Medicine products and related healthcare equipment, serving the UK healthcare market with over 30 years of experience. Their offerings include radiopharmaceuticals, radioisotopes, theranostics, gamma cameras, and related consumables. The company operates primarily as a B2B supplier with direct sales, marketing support, service engineering, and distributor assistance. The website content reflects a focused healthcare niche with clear contact details and certifications indicating quality management standards. Technically, the website is basic with static HTML content, lacking modern CMS or frameworks. There is no evidence of HTTPS or security headers from the provided data, and the site is not optimized for mobile devices or accessibility. SEO is minimal but includes relevant meta tags. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the absence of WHOIS registration data is concerning and suggests either a very recent domain registration or privacy protection that is not reflected in the WHOIS output. The lack of HTTPS and security headers reduces the security posture. No privacy or cookie policies are present, which is a compliance gap. The site does display ISO certifications, which are positive trust indicators. Overall, the website presents a moderate risk profile due to missing domain registration transparency and security best practices. Strategic improvements in HTTPS implementation, privacy compliance, and WHOIS transparency are recommended to enhance trust and security.
UKP Worldwideukpworldwide.com
Other · United Kingdom
50Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
UKP Worldwide is a specialist service provider focusing on customs clearance for eCommerce parcels and mail to and from the UK, including returns management and duty reclaim services. The company targets businesses involved in eCommerce logistics, offering niche expertise in customs and returns processes. The website presents a professional and consistent brand image with clear business descriptions and social media presence, indicating a small but focused operation founded around 2019. Technically, the website is built on WordPress using the Divi theme and common plugins such as Yoast SEO and Contact Form 7. It employs tracking and analytics tools like Microsoft Clarity and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks advanced accessibility features. From a security perspective, the website lacks visible security headers and explicit privacy or cookie policies, which reduces its compliance posture. The WHOIS data is incomplete or unavailable, raising concerns about domain registration transparency. No critical vulnerabilities or exposed sensitive data were detected, but improvements in security best practices and compliance documentation are recommended. Overall, the website is functional and professional but would benefit from enhanced security configurations, transparent privacy policies, and verified domain registration information to improve trust and compliance.
Non-profit · United Kingdom
72Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The Association of Charitable Foundations (ACF) is a well-established UK non-profit membership association serving foundations and independent grant-makers. The website reflects a mature digital presence with comprehensive content, including research, events, and member resources. The technical infrastructure is based on ASP.NET with modern analytics and tracking tools integrated, supported by a reputable registrar and hosting environment. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness suitable for its sector.