Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
4,001–4,050 of 99,069
- NNolan Recycling Ltd
nolanrecycling.co.uk
Other · United Kingdom
64Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Nolan Recycling Ltd is a small, family-run waste management and recycling company based in South Wales, serving both domestic and commercial clients primarily in Bridgend, Pyle, and Porthcawl. The company offers a comprehensive range of services including skip hire, wheelie bin hire, weighbridge facilities, and recycling of various materials. With over 30 years of experience, Nolan Recycling positions itself as a trusted local leader focused on sustainable waste diversion and recycling. Technically, the website employs modern front-end technologies such as Bootstrap, Font Awesome, and jQuery, with integrations for Google Tag Manager and Google Ads for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, there is no evidence of a CMS or hosting provider from the HTML content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and a privacy or cookie policy, which are important for compliance and user trust. The WHOIS lookup failed due to querying the 'www' subdomain rather than the base domain, limiting domain registration verification. Despite this, the website content and contact information support the legitimacy of the business. Overall, Nolan Recycling Ltd's website is professional and trustworthy with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.
- SSecurity Verification
thetinboxcompany.co.uk
Other
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.thetinboxcompany.co.uk is currently inaccessible beyond a security verification page implementing Google reCAPTCHA v3. The domain itself appears invalid according to Nominet UK WHOIS data, which states the domain cannot be registered due to naming rules violations. No business information, contact details, or policies are accessible on the site. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible content, security headers, or HTTPS enforcement in the provided data. This severely limits the ability to assess the company's business operations or security posture. The security verification mechanism indicates an attempt to block automated access, but it also prevents legitimate content access, resulting in a low trust and credibility score.
DBFSdbfs.co.uk
Technology · United Kingdom
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
DBFS is a professional consultancy and advisory firm specializing in finance, technology, and IT solutions. The company offers a broad range of services including Salesforce outsourcing, regulatory consulting, knowledge management, and recruitment. Positioned as a leading global provider, DBFS targets businesses in financial and technological sectors, supported by a parent company, AMAN GROUP. The website reflects a mature digital presence with clear branding and comprehensive service descriptions. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern JavaScript libraries such as jQuery and Slick Carousel. Security measures include HTTPS, Google reCAPTCHA, and Cloudflare Turnstile for form protection, indicating a good security posture. However, some security headers are not explicitly detected, and no dedicated security or incident response pages are found. The WHOIS data is incomplete and indicates domain registration issues with Nominet UK, which may be due to the domain being a subdomain or alias. Despite this, the website content and business information appear legitimate and professional. Contact information is complete and includes a physical address in London and a verified phone number. Overall, DBFS demonstrates a solid business and technical foundation with room for improvement in security transparency and WHOIS registration clarity.
Satelliet UK Contract Furnituresatelliet.co.uk
Hospitality · United Kingdom
60Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Satelliet UK Contract Furniture is a well-established supplier of contract furniture tailored for the UK hospitality industry, including restaurants, hotels, bars, and cafés. The company emphasizes durable, stylish designs compliant with UK fire and safety regulations, targeting hospitality businesses and interior design professionals. The website demonstrates a solid market position as a leading UK supplier with a medium-sized business profile founded in 1999. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern tracking and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized and uses HTTPS, but lacks explicit privacy and security policies, which are critical for compliance and trust. Security posture is good with HTTPS and bot protection but could be improved with additional security headers and published policies. Overall, the website is professional and trustworthy but should enhance privacy compliance and security transparency.
West Dorset Leisure Holidayswdlh.co.uk
Hospitality · United Kingdom
54Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
West Dorset Leisure Holidays is a well-established UK-based hospitality business operating six family-run holiday parks along the Jurassic Coast in Dorset. The company offers a diverse range of accommodation options including lodges, caravans, apartments, camping pitches, and glamping, targeting families and holiday home buyers. Their digital presence is built on a WordPress platform with modern technologies such as Google Maps API, FacetWP for search, and SEO optimizations via Yoast. The website is professionally designed with good content quality and navigation, optimized for mobile users. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy and cookie policies are not found, indicating a compliance gap. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic improvements in privacy compliance and security best practices would enhance trust and regulatory adherence.
- The Rivington Press Limited
rivprint.com
Other
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Rivington Press Limited operates a website built on the Wix platform, presenting itself as a local printing service provider. The website includes basic business information such as a phone number and company name but lacks comprehensive contact details, privacy policies, or terms of service. The technical infrastructure relies on Wix's standard hosting and scripts, with moderate performance and basic mobile optimization. Security posture is limited, with no detected security headers or advanced protections, and the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the website serves its basic business purpose but requires improvements in security, compliance, and trust signals to enhance credibility and user confidence.
- SSociety of Radiographers
sor.org
Healthcare · United Kingdom
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Society of Radiographers (SoR) is a UK-based professional body and trade union representing the diagnostic imaging and radiotherapy workforce. It provides professional support, career development resources, employment advice, and organizes events and conferences to support its members. The organization maintains a strong market position within the healthcare sector in the UK, targeting radiography professionals and students. The website reflects a mature digital presence with comprehensive content and member-focused services. Technically, the website is built on the Kentico CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Performance is moderate, with room for optimization. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks visible HTTP security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for professional organizations, and the domain appears actively maintained. Overall, the SoR website is a professional, trustworthy, and well-maintained platform that effectively serves its target audience. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.
Windermere Lake Cruiseswindermere-lakecruises.co.uk
Transportation · United Kingdom
73Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Windermere Lake Cruises operates as a prominent tourism and leisure service provider in the Lake District, UK, offering a variety of lake cruises, self-drive boat rentals, group bookings, and private hire services. The website reflects a well-established business with a clear market position as a leading local attraction. The digital infrastructure leverages modern web technologies including Vue.js, Google Tag Manager, and a CDN hosted on Amazon S3, supporting a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and standard security headers, though there is room for improvement in publishing formal security policies and incident response contacts. The absence of WHOIS data due to domain naming rules error is a notable anomaly, slightly impacting trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving a general audience interested in tourism and outdoor activities.
- SSecurity Verification
tennantsuk.com
Other
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.tennantsuk.com is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. No actual business content, contact information, or policies are accessible, severely limiting the ability to assess the company's operations or services. The WHOIS lookup returned no registration data, suggesting the domain may be unregistered, inactive, or protected by privacy measures that prevent data disclosure. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site exhibits a low security posture and minimal digital maturity due to the lack of accessible content and metadata.
- GGRS Contractors
grscontractors.com
Transportation
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
GRS Contractors is a regional civil engineering contractor specializing in infrastructure projects such as roads, sewers, and groundworks with over 60 years of experience. The website presents a professional image built on the Framer platform, targeting businesses and public sector clients in the North West region. However, the domain WHOIS data is unavailable, raising concerns about domain registration legitimacy. The technical infrastructure is modern but lacks visible security best practices such as security headers and privacy policies. No contact or incident response information is provided, limiting transparency and trust. Overall, the site is functional and content-rich but requires improvements in security posture and compliance to enhance credibility and reduce risk.
Iain Semple Chemicalsiainsemplechemicals.co.uk
Manufacturing · United Kingdom
50Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Iain Semple Chemicals operates as a supplier of industrial cleaning products primarily targeting industrial and commercial clients within the United Kingdom. The company positions itself as a leading supplier in its niche, focusing on the distribution of specialized chemical products for industrial cleaning applications. The website reflects a small-sized business with a B2B business model, catering to industrial sectors requiring cleaning solutions. Technically, the website is built on WordPress using the Divi theme and WooCommerce for e-commerce capabilities, indicating a moderate level of digital maturity. The site is mobile-optimized and uses modern web fonts and scripts, but lacks advanced analytics or marketing integrations. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks published security policies or vulnerability disclosures. The absence of WHOIS data due to domain naming rules violations raises some concerns about domain legitimacy, although the website content itself appears professional and business-focused. Overall, the site presents a moderate security posture with room for improvement in privacy compliance and transparency.
The NWH Groupnwhgroup.co.uk
Transportation · United Kingdom
55Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
The NWH Group is a leading UK-based waste management and recycling company operating primarily in Scotland and Northeast England. The company offers a wide range of services including trade waste collection, skip hire, concrete supplies, and recycling solutions, serving industrial, commercial, construction, and domestic customers. Their market position is strong as a regional leader with a family-owned business model emphasizing sustainability and community wellbeing. Technically, the website is built on the concrete5 CMS and employs modern web technologies and analytics tools, indicating a mature digital infrastructure. The site is mobile-optimized and well-structured, providing a professional user experience. Security-wise, the site uses HTTPS and several tracking and marketing scripts but lacks explicit security headers and a published security policy or incident response contact. The WHOIS data is unavailable due to domain naming rules error, but the website content and trust indicators strongly support legitimacy. Overall, the website demonstrates a good security posture, strong privacy compliance, and high business credibility.
- RRMSupply
rmsupply.co.uk
Manufacturing · United Kingdom
75Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
RMSupply is a UK-based company specializing in process control, electrochemical sensors, hygiene monitoring, and water analysis products. With over 50 years of experience, they position themselves as a leader in their niche market, serving industrial and commercial clients primarily in the UK and Europe. Their business model revolves around B2B e-commerce via a Shopify platform, offering precision instruments and expert support. The website reflects a professional and consistent brand image with clear contact information and compliance with privacy regulations including GDPR. Technically, the site is built on Shopify with modern web technologies, optimized for mobile, and includes SEO best practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are absent. Overall, the site is trustworthy, well-maintained, and compliant with relevant privacy standards.
Scottish Drugs Forumsdf.org.uk
Non-profit · United Kingdom
68Medium
NIS2 29 · GDPR 88
NIS2 29 · GDPR 88
Scottish Drugs Forum is a well-established non-profit organization dedicated to improving Scotland's approach to drug-related issues. The website serves as a national resource offering expertise, events, podcasts, and news to professionals and stakeholders in the drug policy and support sectors. The organization has a strong market position in Scotland, supported by a domain registered since 1998 and consistent branding. Technically, the website is built on WordPress with modern plugins such as Elementor, Yoast SEO, and GiveWP for donations, integrating secure payment processing via Stripe. The site demonstrates good SEO and mobile optimization, with a cookie consent mechanism in place. Security posture is adequate with HTTPS enforced and secure payment integration, though explicit security headers and published security policies are lacking. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional, trustworthy, and safe for general audiences, with recommendations to enhance security headers and publish privacy and incident response policies to improve compliance and trust further.
- Cranmore
cranmoreconsulting.com
Government · United Kingdom
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Cranmore is a specialized public sector software development company founded in 2017, focusing on delivering AI-enabled transformation, managed digital services, and consultancy primarily to government, healthcare, utilities, and transportation sectors in the UK. The company positions itself as a trusted partner with a triple-lock guarantee emphasizing transparency, collaboration, and diligent delivery. Their website reflects a mature digital presence built on WordPress with Elementor, featuring professional design, clear navigation, and compliance with privacy regulations including GDPR. The use of modern technologies and integrations such as Microsoft Power Platform and AI innovations highlights their technical maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, Cranmore presents a credible and professional business with a strong focus on public sector digital transformation.
Turbett & Coturbettaccountants.co.uk
Finance · United Kingdom
59Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Turbett & Co is a small, established accounting and tax consultancy firm based in Omagh, UK, founded in 2009. The company offers tailored financial services including accounts and bookkeeping, tax compliance, business consultancy, and tax consultancy primarily targeting small and medium businesses, startups, and individuals. Their market position is that of trusted local experts with professional accreditations such as Chartered Tax Advisors. The website reflects a professional business model with clear service offerings and client engagement options. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile optimized, SEO friendly, and uses HTTPS with a valid SSL certificate. Google Analytics is used for visitor tracking with a compliant cookie consent mechanism. Performance is moderate with good accessibility and navigation. From a security perspective, the site enforces HTTPS and uses a cookie consent banner with opt-in categories, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, showing a mature and legitimate online presence. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements could include adding security headers, publishing a security policy, and enhancing accessibility features to further strengthen trust and compliance.
- UUform
uform.co.uk
Retail · United Kingdom
69Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Uform is a UK and Ireland based supplier specializing in kitchen and bedroom doors and components, targeting trade professionals. The website presents a professional and market-leading image with a clear focus on B2B supply of kitchen and bedroom doors. Technically, the site is built on WordPress with WooCommerce and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, Facebook Pixel, and Algolia search. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacking visible security headers and explicit form protections. Privacy and cookie policies are not evident in the provided content, indicating compliance gaps. The WHOIS data reveals a critical issue: the domain www.uform.co.uk is reported by Nominet as invalid due to naming rules, raising concerns about domain legitimacy. Overall, the website is functional and professional but requires improvements in compliance and security transparency.
Herriots Hotelherriotsforleisure.co.uk
Hospitality · United Kingdom
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Herriots Hotel is an independent boutique hotel located in Skipton, UK, offering quality accommodation, dining at the Rhubarb Restaurant, and event hosting including weddings and celebrations. The business positions itself as a luxury yet warm and personal hospitality provider with a focus on Yorkshire hospitality and local experiences. The website is professionally designed with clear navigation and content relevant to leisure travelers and event clients. Technically, the site uses modern frameworks such as Bootstrap and jQuery, integrates Google Analytics for tracking, and offers a booking form powered by Guestline. However, the absence of WHOIS data and domain registration details introduces uncertainty about domain legitimacy. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. Overall, the site is functional and trustworthy from a user perspective but would benefit from enhanced security and privacy compliance measures.
PPE Workwear Directppeworkweardirect.co.uk
Retail · United Kingdom
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
PPE Workwear Direct is a UK-based e-commerce retailer specializing in personal protective equipment, workwear, high-visibility clothing, and work footwear. Established in 2015, the company targets businesses and individuals requiring safety and work apparel, offering a range of stocked brands and free UK delivery on orders over £50. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience and moderate trustworthiness. Technically, the website runs on the OpenCart platform with the Journal2 theme, leveraging common JavaScript libraries such as jQuery and Owl Carousel. It integrates marketing and analytics tools including Google Analytics, Google Tag Manager, and Facebook Pixel, enabling moderate user tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and does not provide a visible security policy or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may pose GDPR compliance risks. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, PPE Workwear Direct presents a legitimate and functional online retail presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.
All Secure Securityallsecuresecurity.co.uk
Other · United Kingdom
70Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
All Secure Security is a UK-based small business specializing in home and business security solutions, including burglar alarms, CCTV, access control, and fire safety systems. The company positions itself as a trusted local expert with NSI Gold accreditation and a strong reputation on Checkatrade, supported by positive customer reviews. Their website is professionally designed, mobile-optimized, and uses modern web technologies such as Webflow CMS, Google Tag Manager, and reCAPTCHA for security. However, the domain WHOIS data is unavailable due to a registration error, which slightly impacts trustworthiness. The site lacks explicit privacy and cookie policies, which is a compliance gap. Overall, the company demonstrates a solid market presence and credible service offerings.
- Love Inn: What's On
theloveinn.com
Hospitality
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website 'Love Inn: What's On' appears to be a small hospitality venue or event location providing information about events and what's on at the venue. The site is built using the Wix platform, leveraging Wix's standard scripts and hosting infrastructure. The content is basic, focusing on event listings and venue information, targeting a general audience. Technical infrastructure is standard for Wix sites, with moderate performance and good mobile optimization but limited SEO and accessibility features. Security posture is minimal with no advanced headers or policies detected, and no privacy or cookie policies are present, indicating potential compliance gaps. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site is functional but lacks comprehensive business and security information, which impacts its credibility and compliance standing.
Upper Ouse Water Management Boardidbs.org.uk
Government · United Kingdom
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Upper Ouse Water Management Board website represents a statutory public body responsible for stormwater management and drainage services in Bedfordshire and surrounding areas. The organization is an amalgamation of three former drainage boards and provides technical guidance to local authorities and developers. The website content is professional, well-structured, and includes relevant information such as FAQs, resources, consent and planning guidance, and contact details. The site targets residents, local authorities, and developers within its drainage district. Technically, the website uses modern web technologies including the ArcGIS JavaScript API for mapping, Google Fonts, and modular JavaScript. The site is mobile optimized and includes accessibility features such as skip links. Performance is moderate with good SEO and metadata implementation. However, no CMS or hosting provider details are evident. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. There is no published incident response or vulnerability disclosure information. The WHOIS data is unavailable due to domain registration errors, which impacts trust from a domain registration standpoint, but the website content and contact information support legitimacy. Overall, the website is a credible and professional representation of a government-related water management entity, with room for improvement in security posture and domain registration transparency.
- Lansdowne Green Ltd
lansdownegreen.co.uk
Real Estate · United Kingdom
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Lansdowne Green Ltd is a UK-based company specializing in the supply and erection of Structural Insulated Panels (SIPs) for innovative and sustainable home and extension construction. The company positions itself as an expert in SIPs, targeting homeowners, architects, and builders interested in efficient and environmentally friendly building solutions. The website reflects a small-sized business with a professional online presence, including industry certification and client testimonials that enhance trust. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts and Vimeo for multimedia content. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS with HSTS, indicating good SSL configuration. However, it lacks several recommended security headers and does not provide privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data due to domain naming rules limits transparency but does not necessarily indicate illegitimacy. Overall, Lansdowne Green Ltd presents a credible and professional business with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas will strengthen the company's digital trustworthiness and regulatory adherence.
- PPremier Display Systems (UK) Ltd.
premier-framework.com
Manufacturing · United Kingdom
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Premier Display Systems (UK) Ltd. operates as a manufacturer and worldwide distributor of exhibition and display systems, including banner stands, pop-up displays, and conference kits. The company positions itself as the sole EU manufacturer of the Premier range, targeting businesses and organizations requiring exhibition solutions. The website content is minimal but provides essential business contact information and product categories. The business appears small-sized and UK-based, founded in 2007, with a clear manufacturing focus.
- BBrannie Ties
brannieties.co.uk
Retail · United Kingdom
66Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Brannie Ties is a small, family-run UK-based business specializing in the design and supply of bespoke ties, scarves, and accessories. The company emphasizes custom designs with free artwork and no hidden charges, targeting schools, clubs, corporate clients, and Masonic societies. The website reflects a well-established business with over 35 years of experience, offering a range of bespoke woven and printed products with a focus on quality and customer service. Technically, the website is built on the IONOS Website Builder platform, utilizing modern JavaScript libraries such as jQuery and analytics tools including Google Analytics and Snowplow. The site is mobile-optimized and provides a good user experience with clear navigation and contact options. Security posture is solid with HTTPS and reCAPTCHA on forms, though additional security headers could enhance protection. Privacy compliance is addressed with visible cookie and privacy policies, indicating GDPR awareness. However, the WHOIS data for the domain is unavailable and indicates the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site scores well on content and technical implementation but is impacted by domain registration inconsistencies.
- TThe Travel Company Edinburgh
ttce.com
Hospitality · United Kingdom
60Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Travel Company Edinburgh is a well-established independent travel agency operating since 1991, specializing in business travel, MICE, holidays, and travel planning services primarily in Scotland and the UK. The company positions itself as a comprehensive travel management and destination management provider with strong industry memberships such as ABTA, IATA, and ATOL, enhancing its credibility and trustworthiness. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to both corporate and leisure travelers. Technically, the site is built on the Weebly/EditMySite platform, integrating modern analytics and payment technologies, though some legacy components like an outdated jQuery version are present. Security posture is solid with HTTPS and payment integration but lacks some advanced security headers and explicit cookie consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not overshadow the overall legitimacy indicated by the website content and certifications. Strategic recommendations include improving privacy compliance, updating technical components, and publishing security policies to enhance trust and compliance.
Branding Sciencebranding-science.com
Healthcare
67Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Branding Science is a global pharmaceutical insight-led consultancy specializing in brand lifecycle management and strategic insights for the healthcare sector. The company offers a suite of services including metAInsights™, A3i™, Brand Plan IQ™, and various assessments and segmentation strategies tailored to pharmaceutical clients. The website reflects a professional and consistent brand image with a focus on delivering expert consultancy services to pharmaceutical companies worldwide. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and multilingual capabilities, and hosted with reputable providers including IONOS SE and Cloudflare DNS. Security posture is solid with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and additional security headers could improve defenses. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. However, contact information and explicit security policies are not prominently displayed, which could be improved to enhance trust and transparency. Overall, the site is professional, secure, and compliant, suitable for its target audience in the pharmaceutical consultancy market.
- WWordPress › Error
totaldesignworks.com
Other
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.totaldesignworks.com is currently non-functional, displaying a critical WordPress error page. There is no accessible content, metadata, or business information available on the site. The domain WHOIS query returned no registration data, indicating the domain may be unregistered, expired, or inactive. This lack of registration and website functionality suggests the domain is not currently used for legitimate business purposes. Technically, the site runs WordPress but is broken, with no evidence of security headers, HTTPS status, or modern technical implementation. No privacy, cookie, or terms of service policies are present, and no contact or business details are available. Overall, the website is of very low quality and trustworthiness, with a high risk of being abandoned or inactive.
- Redwood Estates
redwoodestates.co.uk
Real Estate · United Kingdom
62Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Redwood Estates operates as a small real estate agency focused on property sales and lettings within specific London areas such as Woolwich, Thamesmead, Plumstead, and Docklands. The website presents a professional front with clear business descriptions and targeted services for property buyers and renters in these locales. The inclusion of a Trustpilot widget suggests an effort to build trust and credibility with visitors. Technically, the site employs modern front-end technologies including Bootstrap, jQuery, FontAwesome, and Google Fonts, indicating a moderate level of digital maturity and responsiveness. The cookie consent mechanism is implemented via a third-party tool, reflecting some attention to privacy compliance. However, the absence of privacy policy and terms of service pages limits full compliance assessment. Security posture is moderate with no detected security headers or explicit vulnerabilities, but the lack of WHOIS registration data and domain registration inconsistencies raise concerns about domain legitimacy. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.
- EError
theryescollege.org.uk
Other
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.theryescollege.org.uk currently resolves to a Wix error page indicating that the domain is not connected to any active website. There is no accessible business content, contact information, or policies available on the site. The domain WHOIS lookup failed due to the domain name being invalid per Nominet UK rules, suggesting misconfiguration or non-registration. Technically, the site uses Wix platform technologies including AngularJS and jQuery but lacks any meaningful content or security configurations. The security posture is weak with no visible HTTPS or security headers, and no privacy or cookie policies are present. Overall, the site is non-functional and does not provide any business or compliance assurances.
Sunoco LPnustarenergy.com
Energy · United States
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Sunoco LP operates as a leading energy infrastructure operator and the largest independent fuel distributor in the Americas. The company manages an extensive network of pipelines, terminals, and a refinery, serving a broad commercial and retail customer base. Their market position is strong, supported by a comprehensive portfolio of fuel distribution and infrastructure services. The website reflects a mature digital presence with professional design, clear navigation, and integration of advanced technologies such as Google Maps and Tag Manager. However, the absence of public WHOIS registration data raises questions about domain legitimacy and transparency. Security posture is generally good with HTTPS and some security best practices, but could be improved by implementing full security headers and publishing explicit security policies. Privacy compliance is addressed with policies and consent mechanisms, though more detailed GDPR compliance indicators would enhance trust. Overall, the website is professional and trustworthy, but domain registration opacity slightly reduces confidence.
- NNordson Corporation
nordson.com
Manufacturing · United States
73Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Nordson Corporation is a global enterprise specializing in precision engineering and manufacturing technology solutions. Their website reflects a mature B2B business model targeting industrial and manufacturing sectors with products such as adhesive dispensing equipment and fluid dispensing systems. The company maintains a professional online presence with comprehensive privacy and cookie policies, leveraging modern web technologies including Sitecore CMS, Azure CDN, and advanced analytics tools. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent. The lack of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the overall website quality and business credibility remain high. Strategic recommendations include enhancing transparency on security policies, providing direct contact information, and publishing vulnerability disclosure mechanisms.
Other
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.zelle.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents retrieval of any meaningful content or metadata. This blockage results in a lack of visibility into the company's business description, services, or contact information. The domain WHOIS lookup failed to return any registration details, indicating either privacy protection or an unregistered domain under the queried name. Consequently, the technical infrastructure, security posture, and compliance status cannot be properly assessed. The site shows no visible forms, scripts, or external links beyond Cloudflare's own domains, further limiting analysis. Overall, the site is effectively blocked from external analysis, resulting in a low trust and legitimacy score.
Americans for Prosperityamericansforprosperity.org
Non-profit · United States
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Americans for Prosperity is a large, well-established non-profit advocacy organization founded in 2003, focused on grassroots mobilization and policy advocacy across all 50 U.S. states. The organization aims to empower citizens to advance policies that improve lives, emphasizing freedom and opportunity. Their digital presence is robust, featuring a professionally designed WordPress website with extensive use of modern marketing and analytics technologies including Google Tag Manager, Facebook Pixel, LinkedIn Insight, and others. The site is mobile optimized, accessible, and SEO-friendly, supporting a positive user experience. Security posture is good with HTTPS enforced and domain registration consistent with the organization's profile, though improvements such as DNSSEC and security policy disclosures are recommended. Privacy compliance is basic, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the website reflects a credible and professional organization with strong digital maturity but room for enhanced security and privacy practices.
Online Casino België 2026 Vergunde Casino Online Gidscharmillesus.com
Other · Belgium
65Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Online-CasinosBE.com is a niche affiliate and comparison website focused on the Belgian online casino market. It provides comprehensive listings, reviews, and bonus information for legally licensed online casinos in Belgium, targeting adult players interested in gambling. The site is professionally designed with good SEO and mobile optimization, leveraging WordPress and modern JavaScript libraries such as jQuery. It uses Google Tag Manager and Microsoft Clarity for analytics and user behavior tracking. However, the site lacks explicit privacy, cookie, and terms of service policies, which impacts privacy compliance. The WHOIS data shows inconsistencies, including a future domain creation date and lack of registrant information, which raises some trust concerns. Overall, the site is functional and professional but would benefit from improved transparency and security disclosures.
City of Saint Paulstpaul.gov
Government · United States
68Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The City of Saint Paul operates an official municipal government website providing a broad range of services and information to residents, businesses, and visitors. The site is well-structured, professionally designed, and targets a diverse audience including local citizens and government stakeholders. It offers comprehensive resources such as permits, licenses, public safety information, parks and recreation, and community engagement platforms. The website leverages modern technologies including Drupal 11 CMS, Google Analytics, and Font Awesome icons, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced and standard security headers implemented, although explicit security policies and incident response contacts are not prominently published. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with data protection regulations. Overall, the site demonstrates a high level of professionalism and trustworthiness consistent with an official government entity.
Other
64Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.southmill.com is currently inaccessible, returning a 403 Forbidden error page protected by Cloudflare's Web Application Firewall (WAF). The domain WHOIS lookup indicates no registration record exists, suggesting the domain may be unregistered, expired, or inactive. Due to the lack of accessible content, no business information, contact details, or policies are available for analysis. The technical infrastructure appears minimal with only Cloudflare challenge scripts detected, and no metadata or technologies identified. Security posture is weak due to the absence of accessible content and lack of security headers or SSL information. Overall, the site presents a high risk due to unavailability and lack of transparency.
Energy · United States
53Medium
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
Bridgers & Paxton Consulting Engineers, Inc. is a well-established engineering consulting firm specializing in mechanical, electrical, plumbing, technology, and energy engineering services primarily for government and commercial projects. With a history dating back to 1951, the company emphasizes sustainable design and innovative engineering solutions, positioning itself as a trusted partner in the energy and government sectors. Their website reflects a professional and consistent brand image, targeting government agencies and commercial clients seeking advanced engineering expertise. Technically, the website is built on WordPress using the Cornerstone theme framework, incorporating modern web technologies such as jQuery, Google Analytics, and Typekit fonts. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. The security posture is moderate with no critical vulnerabilities detected in the visible content, but the absence of WHOIS data for the domain www.bpce.com raises concerns about domain registration legitimacy. The site does not display privacy or cookie policies, nor incident response or vulnerability disclosure information, which are important for compliance and trust. Overall, Bridgers & Paxton presents a credible and professional online presence with strong business credibility but should address privacy, security headers, and domain registration transparency to enhance trust and compliance.
Other
66Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website www.gatesheadhousing.co.uk is currently inaccessible beyond a Cloudflare security challenge page, which blocks direct content access. This prevents extraction of meaningful business, contact, or policy information. The domain WHOIS lookup failed due to a domain naming rules violation, indicating potential misconfiguration or legitimacy concerns. The site uses Cloudflare's Turnstile captcha and strict Content-Security-Policy headers, reflecting a strong security posture at the perimeter level but limiting content visibility. Overall, the digital maturity appears limited due to blocked content and lack of accessible information.
Woolner Freight Ltdwoolnerfreight.co.uk
Transportation · United Kingdom
51Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Woolner Freight Ltd is a UK-based small transportation company specializing in palletised distribution and haulage services for local, national, and international deliveries. The company is a recognized Pallex partner, indicating a solid market position within the freight distribution sector. The website is professionally built on WordPress using the Divi theme and optimized with Yoast SEO, reflecting a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as security and incident response documentation, indicates gaps in compliance and security transparency. The site uses HTTPS, but lacks security headers and explicit contact information, which could be improved to enhance trust and security posture. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.
- MFD Capacitors (1991) Ltd
mfdcapacitors.co.uk
Manufacturing · United Kingdom
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
MFD Capacitors (1991) Ltd is a UK-based specialist manufacturer of plastic film capacitors including polypropylene, polyester, and polycarbonate types. Established in 1969, the company offers a broad range of standard and custom capacitor products serving sectors such as power filtering, communications, defence, and railway signalling. The website presents the company as an independent manufacturer with ISO9001 certification and a focus on innovative design and reliability. Technically, the website is built on legacy HTML and CSS without modern frameworks or CMS, showing basic mobile optimization and limited SEO features. Security posture is weak due to lack of HTTPS, missing security headers, and absence of privacy or cookie policies. The WHOIS lookup failed due to an invalid domain query, raising concerns about domain registration legitimacy. Overall, the website is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.
- Prestige Elite Records Limited
prestige-elite.com
Media · United Kingdom
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Prestige Elite Records Limited is a UK-based independent record label and music publisher established in 1988. The company manages a diverse catalogue of musical works and licenses them globally to recording outlets and advertising agencies. Their website reflects a professional and consistent brand presence, targeting music industry professionals and licensing clients worldwide. Technically, the website uses modern JavaScript libraries, integrates an Ecwid e-commerce store with Stripe payments, and is hosted via Amazon Cloudfront CDN, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and CAPTCHA on contact forms, but lacks important security headers and privacy policies, indicating room for compliance improvement. The absence of WHOIS data reduces domain transparency and slightly impacts trust, though the overall business credibility remains high due to consistent contact information and professional content.
Richard Lang & Son Ltdrichardlang.co.uk
Retail · United Kingdom
57Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Richard Lang & Son Ltd operates as a wholesale supplier specializing in gifts, home decor, and greeting cards, primarily serving the UK market with localized presence in Germany and the Netherlands. The company emphasizes contemporary design and imports, catering to garden centers and wholesale buyers. Their digital presence is built on a Magento e-commerce platform with German localization, integrating modern marketing and analytics tools such as HubSpot and Google Tag Manager. The website demonstrates good content quality, clear navigation, and mobile optimization, supporting a professional user experience. Security measures include HTTPS enforcement and CAPTCHA on login forms, though explicit security headers and vulnerability disclosure policies are absent. Overall, the site reflects a legitimate and established wholesale business with room for enhanced security and privacy compliance.
Gazelle Book Services | UK and European Book Distribution Since 1987gazellebookservices.co.uk
—
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Ladder Manufacturer | Lyte Ladders & Towers Limited | UKlyteladders.co.uk
—
72Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
- SSecurity Verification
edgetransport.co.uk
Transportation
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.edgetransport.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, which blocks automated access and prevents viewing of actual site content. The WHOIS lookup for the domain failed with an error indicating the domain name violates Nominet UK naming rules and cannot be registered, suggesting the domain may not be legitimately registered or active. Due to these factors, no business description, contact information, or policies are publicly available. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection but lacks visible security headers or HTTPS information in the provided data. The overall security posture is weak due to limited accessible content and missing security best practices. Privacy compliance is absent, and no business credibility indicators are present. The site is rated low trustworthiness and poor quality due to these limitations.
MK Marking Systemsmkmarking.co.uk
Manufacturing · United Kingdom
65Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
MK Marking Systems is a well-established signage company based in Milton Keynes, UK, specializing in the design, manufacture, and installation of a wide range of signage products. With over 40 years of experience, the company serves local businesses and organizations with high-quality signage solutions including vehicle graphics, exterior and interior signs, and safety signage. Their market position is strong locally, supported by industry certifications and positive customer testimonials. The website demonstrates a mature digital presence built on modern technologies such as Nuxt.js and Sanity CMS, with good performance and mobile optimization. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for potential customers.
- IIsle of Wight Hotels
isleofwighthotels.co.uk
Hospitality · United Kingdom
54Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Isle of Wight Hotels.co.uk is a small hospitality-focused website providing accommodation listings and travel information for visitors to the Isle of Wight. The site offers hotel, self catering, and bed & breakfast options, targeting tourists planning holidays in the region. The business model centers on being an online directory and referral platform for local accommodations. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is weak, with no HTTPS enforcement or security headers evident, and no published privacy or terms policies. The cookie consent mechanism is implemented, indicating some privacy awareness. WHOIS data is unavailable due to domain registration issues, raising legitimacy concerns despite the accessible and relevant content. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.
- WWisepress Ltd.
wisepress.com
Healthcare
72Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Wisepress Ltd. operates as an online retailer specializing in medical and veterinary books, serving medical professionals worldwide. The company has a longstanding presence in the market, participating in medical conferences across the UK and Europe. Their website offers a comprehensive e-commerce platform with categorized medical literature, corporate sales, and voucher options. The target audience includes healthcare professionals, students, and veterinary practitioners. Technically, the website employs modern JavaScript libraries such as jQuery and Bootstrap, integrates Google Analytics and Facebook SDK for tracking, and uses HTTPS to secure communications. Mobile optimization and accessibility are basic but functional. Security posture is moderate with HTTPS enabled but lacks explicit security headers and public security policies. Privacy and cookie policies are present and indicate GDPR compliance. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the website is professional and trustworthy in content and design but would benefit from enhanced security practices and clearer business contact information.
Transdrive Engineering Services Ltdtransdrive.co.uk
Manufacturing · United Kingdom
52Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Transdrive Engineering Services Ltd operates as a leading European distributor and stockist of power transmission products, including industrial motors, gearboxes, and drives. The company targets industrial and manufacturing sectors, offering over 6000 product lines and technical support services. Their website reflects a professional business presence with clear contact information and product offerings, positioning them as a key player in their niche market. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Umbraco CMS, and integrates Google Analytics and live chat support. The site is mobile-optimized with good navigation and content quality, though some accessibility features are basic. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible security headers and explicit privacy or security policies. The WHOIS data is unavailable due to domain registration errors, raising concerns about domain legitimacy. No critical vulnerabilities were detected in the content, but improvements in security headers and privacy compliance are recommended. Overall, the website presents a moderate risk profile with good business credibility but requires enhancements in security posture and compliance documentation to strengthen trust and reduce potential risks.