Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
4,301–4,350 of 99,069
Hayling Garagehaylinggarage.co.uk
Transportation · United Kingdom
56Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Hayling Garage is a small automotive dealership based in Hayling Island, UK, specializing in used cars with a niche focus on classic American vehicles. The business offers a range of automotive services including carbon cleaning, DPF cleaning, custom exhausts, and MOT servicing. The website is professionally designed with good content relevance and clear navigation, targeting local car buyers and enthusiasts. Technically, the site uses modern JavaScript libraries and Google Analytics for tracking, with a cookie consent mechanism implemented inline. Security posture is good with HTTPS enabled and reCAPTCHA used, but lacks some security headers and a formal privacy policy page. WHOIS data is unavailable due to an invalid query format, limiting domain legitimacy verification. Overall, the website presents a trustworthy and professional front for the business, though improvements in privacy and security disclosures are recommended.
- HHCA Healthcare UK
theharleystreetclinic.com
Healthcare · United Kingdom
71Medium
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
HCA Healthcare UK operates The Harley Street Clinic, a leading private healthcare provider in London offering a broad range of specialist medical services including cancer care, cardiac care, neurology, orthopaedics, and women's health. The clinic is recognized for its outstanding care quality, supported by a CQC Outstanding rating and thousands of verified patient reviews. The website reflects a mature digital presence with comprehensive service descriptions and patient resources, targeting private healthcare patients both locally and internationally. Technically, the site leverages modern frameworks such as Next.js and Sitecore CMS, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response information are not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source for healthcare information and services.
- TThe Barrel Inn
thebarrelinn.co.uk
Hospitality · United Kingdom
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The Barrel Inn is a small, traditional hospitality business located in the Peak District, UK, offering accommodation and food services with a strong local and historical identity dating back to 1597. The website provides detailed business information, including contact details and awards, targeting tourists and visitors to the region. Technically, the site uses older web technologies such as jQuery 1.5.2 and lacks modern CMS or frameworks, resulting in a basic user experience and moderate performance. Security posture is weak due to outdated libraries, absence of security headers, and no visible HTTPS enforcement. The WHOIS data is unavailable due to domain registration errors, which impacts trust and legitimacy verification. Overall, the site is functional but requires significant improvements in security, privacy compliance, and technical modernization.
Hull's Environmental Serviceshullsenvironmental.com
Energy · United States
53Medium
NIS2 29 · GDPR 68
NIS2 29 · GDPR 68
Hull's Environmental Services is a medium-sized company specializing in emergency environmental services including spill response, waste management, industrial cleaning, and remediation across the Southeast and South-Central United States. The company targets industrial clients in energy, transportation, manufacturing, and government sectors, positioning itself as a regional leader with a comprehensive service offering. The website reflects a professional business model focused on service delivery with clear navigation and consistent branding. Technically, the website is built on WordPress with modern marketing and analytics tools integrated, including Google Analytics, Google Tag Manager, and Visual Website Optimizer. The site uses Cloudflare DNS and has HTTPS enabled, but lacks DNSSEC and some security headers, indicating room for improvement in security hardening. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance gap. Overall, the security posture is moderate with good practices in place but missing explicit security and incident response disclosures. The website content is safe, professional, and business-oriented, with no adult or questionable content detected.
- Man with Van Pimlico SW1 Get the Best Offers
manwithvanpimlico.co.uk
—
56Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
- Access Underwriting Limited
accessinsurance.co.uk
Non-profit · United Kingdom
59Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Access Underwriting Limited operates the website Access Insurance, a specialist insurance broker focused on the third sector including charities, churches, community organizations, and related groups. The company is part of the Benefact Group and is FCA authorized, providing tailored insurance policies with a strong emphasis on sector expertise and client trust. The website offers a comprehensive range of insurance services and resources, supported by customer testimonials and awards, positioning the company as a reputable player in its niche market. Technically, the website is built on WordPress with modern SEO and analytics tools, delivering a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers are missing and no explicit security policy or incident response contacts are published. The WHOIS data for the exact domain queried is unavailable due to a domain registration error, which raises concerns about domain registration consistency but does not detract from the professional presentation and trust signals on the site. Overall, the site demonstrates a mature digital presence with room for security enhancements and clearer domain registration alignment.
Moores Ltdmoorescoleraine.com
Retail · United Kingdom
65Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Moores of Coleraine is a well-established independent department store in Northern Ireland, operating since 1925. The business offers a wide range of premium brands across multiple retail categories including menswear, womenswear, childrenswear, beauty, homeware, and interiors. It also provides in-store dining options and personal styling services, with an online shopping platform to complement its physical store. The website reflects a medium-sized retail business with a consistent brand presence and a focus on customer experience. Technically, the website is built on the Umbraco CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and Slick Carousel. It integrates Google Analytics, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA v3 for analytics, marketing, and security purposes. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, and there is no publicly available security policy or incident response contact information. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or data unavailability, which impacts domain legitimacy assessment. Overall, the website is professional, user-friendly, and trustworthy in content and design, but the lack of WHOIS transparency and some security header omissions suggest areas for improvement. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to strengthen trust and compliance.
- SSITE NOT FOUND
roncostellatyres.co.uk
Other
60Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.roncostellatyres.co.uk is currently inaccessible and displays a standard 'Site not found' error page indicating that the site is not published or lacks a domain assignment. There is no meaningful content, metadata, or business information available on the site. The WHOIS lookup for the domain failed with an error stating that the domain name contains too many parts and cannot be registered under Nominet UK rules, suggesting the domain is either invalid or misconfigured. This severely limits the ability to assess the business, technical infrastructure, or security posture. From a technical perspective, the site lacks HTTPS, security headers, and any detectable technologies or frameworks. The absence of privacy, cookie, or terms of service policies further indicates a lack of compliance and maturity. No contact information or trust indicators are present, which negatively impacts business credibility. Security posture is minimal with no visible security best practices implemented. The domain's invalid WHOIS status and lack of SSL represent critical vulnerabilities and trust issues. Overall, the site is not operational and cannot be reliably analyzed for business or security insights. Strategic recommendations include properly registering a valid domain, deploying HTTPS with a valid SSL certificate, publishing meaningful website content including privacy and cookie policies, and implementing standard security headers and compliance measures to establish trust and legitimacy.
Wantage Gymnastics Centrewantagegymnasticscentre.co.uk
Education · United Kingdom
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Wantage Gymnastics Centre is a small UK-based educational service provider specializing in gymnastics classes for children and teenagers. The company offers a broad range of services including pre-school classes, recreational gymnastics, summer camps, and birthday parties. The website reflects a well-structured and professionally designed platform with clear navigation and relevant content targeted at parents and young gymnasts. The presence of a customer portal and mobile applications indicates a moderate level of digital maturity and customer engagement. Technically, the site uses modern JavaScript libraries and analytics tools, hosted on reliable CDNs, and supports HTTPS with service worker registration for PWA capabilities. Security posture is generally good, though the absence of explicit security headers and lack of WHOIS data reduces overall trust slightly. Privacy and cookie policies are present, supporting GDPR compliance. Overall, the site is trustworthy and professionally maintained, though improvements in security headers and domain registration transparency are recommended.
- AAudus Kitchens
auduskitchens.co.uk
Real Estate · United Kingdom
75Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Audus Kitchens is a small, regionally focused luxury kitchen design and installation company serving the St Albans, Wokingham, and Windlesham areas in the United Kingdom. The company specializes in high-end German kitchen designs and offers a range of fitted furniture solutions including living rooms, bedrooms, and home offices. Their website is professionally designed using the Squarespace platform, featuring rich multimedia content and clear navigation tailored to their target audience of homeowners seeking premium kitchen solutions. The business maintains an active social media presence across multiple platforms, enhancing their market visibility and customer engagement. Technically, the website leverages modern web technologies and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Microsoft Clarity, and CrazyEgg. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers implementation. The absence of explicit privacy and terms of service pages is a notable gap in compliance documentation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks several recommended security headers that could enhance protection against common web threats. The WHOIS lookup for the domain failed due to an invalid domain name format with the 'www' prefix, which is inconsistent with the active website presence. This discrepancy slightly reduces the trust score but does not outweigh the professional appearance and operational status of the business. Overall, Audus Kitchens presents a credible and professional online presence with good business credibility and technical implementation. Strategic improvements in security headers, privacy documentation, and domain registration clarity would further strengthen their security posture and compliance standing.
Haris Solutionsharissolutions.co.uk
Education · United Kingdom
53Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Haris Solutions is a UK-based small education company specializing in PRINCE2® certification training and related online courses. Established in 2014, the company positions itself as a niche provider empowering individuals who manage projects. The website is built on WordPress with a modern LMS framework (LearnDash) and integrates e-commerce capabilities via WooCommerce. The digital infrastructure includes SEO optimization and social media integration, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and privacy/cookie policies indicates areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Lucy & Samlucyandsam.com
E-commerce · United Kingdom
69Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Lucy & Sam operates a specialized e-commerce platform focused on organic, ethically made baby and kids clothing in the UK market. The company emphasizes gender-neutral designs and GOTS certification, positioning itself as a niche leader in sustainable children's apparel. The website is built on Shopify, leveraging a modern tech stack with integrations for marketing, analytics, and customer reviews, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response details suggests room for improvement. The lack of WHOIS data introduces some uncertainty about domain legitimacy, but the professional presentation and comprehensive privacy and cookie policies support business credibility. Overall, the site is well-optimized for performance, mobile use, and SEO, targeting parents and caregivers seeking sustainable children's clothing.
Slatehelloslate.co.uk
Technology · United Kingdom
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Slate is a small, specialized web design and marketing agency based in East London, focusing on WordPress website design, development, and ongoing maintenance. The company has an established domain since 2009 and maintains a consistent brand presence across social media platforms. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Analytics, Hotjar, and Mailchimp. The site demonstrates good SEO practices and mobile optimization, providing a professional user experience. Security-wise, the website uses HTTPS and includes cookie consent mechanisms and Google reCAPTCHA for form protection, but lacks explicit privacy policies, terms of service, and incident response information, which are areas for improvement. Overall, the website is trustworthy and professional, with moderate technical and security maturity.
Durham Dogs & Cats Homestrayaid.org.uk
Non-profit · United Kingdom
57Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Durham Dogs & Cats Home is a UK-based non-profit charity dedicated to rescuing, rehabilitating, and rehoming dogs and cats in need, primarily in the North East of England. The organization operates through donations, volunteer support, and charity shops, emphasizing compassion and high standards of animal welfare. Their website reflects a professional and consistent brand with clear calls to action for adoption, volunteering, and donations. The charity is registered and displays trust indicators such as membership in recognized associations and regulatory bodies. Technically, the website is built on WordPress with modern plugins and libraries, including Yoast SEO, Contact Form 7, and Owl Carousel. It is hosted by ANS Group Ltd (UKFAST) and uses HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features and security headers. Tracking technologies like Google Analytics and Facebook Pixel are used without a visible cookie consent mechanism, which may pose privacy compliance risks. From a security perspective, the site employs HTTPS and avoids exposing sensitive data but could improve by implementing security headers and publishing formal security policies. The WHOIS data shows inconsistencies with future domain creation dates, which reduces trust in domain registration information but does not necessarily reflect on the charity's legitimacy, supported by external trust signals. Overall, the website is trustworthy and professional, serving its target audience effectively. However, improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.
Cabot Credit Managementcabotcm.com
Finance · United Kingdom
74Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Cabot Credit Management is a finance sector company specializing in debt purchase and credit management services, aiming to restore consumers' financial health. The website presents a professional image with clear branding and multiple subsidiaries across the UK and Europe, indicating a large enterprise with a broad market presence. The technical infrastructure includes modern web technologies and a cookie consent mechanism, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the professional content and corporate affiliations. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact information visibility.
John Nichollsjohnnicholls.co.uk
Retail · United Kingdom
59Medium
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
John Nicholls is a UK-based retailer specializing in luxury bespoke kitchens and bathrooms. The company offers a comprehensive service including free design consultations, 3D CAD visualizations, home surveys, free local delivery, and installation. Their market position is supported by partnerships with leading suppliers and a well-equipped showroom. The website is built on WordPress with modern plugins and technologies, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and privacy compliance, though improvements in security headers and incident response transparency are recommended. Overall, the site is professional and trustworthy with no signs of malicious activity or content blocking.
- SSytner Group
sytner.co.uk
Transportation · United Kingdom
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Sytner Group is the UK's largest franchised car dealer group, specializing in premium and luxury automotive brands with over 140 dealerships nationwide. The company operates under the parent organization Penske Automotive Group and has a strong market position in the UK automotive retail sector. Their website reflects a professional and modern digital presence, leveraging technologies such as Next.js and Google Tag Manager to deliver a responsive and user-friendly experience. The site includes structured data for SEO and business information, enhancing discoverability and trust. From a security perspective, the website enforces HTTPS and implements cookie consent via OneTrust, indicating awareness of privacy regulations. However, explicit privacy policies and security disclosures are not evident in the provided content, and no security headers were detected, suggesting room for improvement in security posture. The absence of WHOIS data for the exact domain queried is due to domain naming rules, but the website content and branding strongly support legitimacy. Overall, the site demonstrates good technical implementation and business credibility, with moderate privacy compliance and security practices. The risk level is low, but enhancements in privacy transparency and security headers would strengthen the security posture and user trust.
- WWordPress › Error
saralbs.co.uk
Other
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.saralbs.co.uk is currently non-functional, displaying a WordPress error page indicating technical difficulties. No business information, contact details, or policies are present on the site. The domain WHOIS lookup failed due to an invalid domain name format as per Nominet UK rules, suggesting the domain may not be properly registered or is misconfigured. Technically, the site uses WordPress but lacks any visible content or metadata, and no security headers or HTTPS status could be confirmed. The security posture is weak due to the lack of accessible content and absence of security best practices. Overall, the site presents a high risk due to inaccessibility and lack of transparency, and it is not possible to verify the legitimacy or credibility of the business behind it.
- VVulcan Stove Enamelling Ltd
vulcanse.com
Manufacturing
50Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Vulcan Stove Enamelling Ltd is a small manufacturing business specializing in metal finishing services such as powder coating, stove enamelling, screen printing, phosphating, and blast cleaning. Established in 1973 and under current ownership since 1988, the company serves industrial clients including military, electronics, and sheet metal fabrication sectors. The website is currently under refurbishment but provides essential contact information and a brief company overview. Technically, the website is basic with static HTML and CSS, lacking modern frameworks or CMS. There is no evidence of HTTPS or security headers, and no privacy or cookie policies are present, indicating limited digital maturity and compliance. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the site provides minimal but relevant business information with room for significant security and compliance improvements.
Mentzendorffmentzendorff.co.uk
Real Estate · United Kingdom
53Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Mentzendorff is a well-established company specializing in the representation and management of a portfolio of luxury estates, primarily in the wine and spirits sector. The website reflects a professional and consistent brand presence, targeting industry professionals and connoisseurs. The company leverages a modern WordPress-based technical infrastructure with popular plugins for content management, e-commerce, and analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact channels, supporting a medium-sized business profile with a long history dating back to 1996.
RW Armstrongrwarmstrong.co.uk
Real Estate · United Kingdom
59Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
RW Armstrong is a UK-based company specializing in high-end construction, restoration, and master craftsmanship services primarily across London and the South of England. The company operates multiple complementary brands offering services including construction, master trades, joinery, cabinetry, fine furniture, and heritage conservation. Their clientele includes discerning private clients, architects, heritage trusts, and luxury hospitality venues. The website reflects a professional and consistent brand image with a focus on luxury and quality craftsmanship. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries and frameworks such as GSAP, Swiper.js, and Usercentrics for cookie management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit privacy policies are missing. The WHOIS data for the domain is unavailable and indicates the domain name is invalid under Nominet UK rules, suggesting a possible misconfiguration or that the domain is a subdomain or alias rather than a registered domain. Overall, the website presents a trustworthy and professional front but would benefit from improved transparency in privacy and security policies.
Eskenzi PReskenzipr.com
Technology · United Kingdom
61Medium
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Eskenzi PR is a specialized cybersecurity public relations and content agency with a strong global presence and over 30 years of industry experience. The company focuses on transforming cybersecurity pioneers into recognized brands through a variety of services including media relations, analyst relations, crisis management, and event hosting. The website reflects a mature digital presence built on WordPress with modern marketing and analytics tools integrated. Security posture is generally good with HTTPS and some security best practices observed, though explicit security headers and policies could be improved. The absence of WHOIS registration data raises some concerns about domain legitimacy, but the professional content and trust signals mitigate risk. Privacy compliance is basic, with no explicit privacy or cookie policies found in the provided content. Overall, the website is well-designed, user-friendly, and professionally maintained.
- Wwww.assetz.co.uk
assetz.co.uk
Other
57Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The domain www.assetz.com appears to be unregistered or inactive as indicated by the WHOIS data which returned no match and no registrar information. The website content is completely empty with no metadata, scripts, or visible content, suggesting the site is either not launched or blocked. Due to the lack of content and registration data, no business information or services can be identified. The technical infrastructure cannot be assessed beyond the absence of any detectable technologies or security features. Security posture is minimal with no HTTPS or security headers detected, and no privacy or compliance policies are present. Overall, the website is not accessible or functional, resulting in a very low trust and legitimacy score.
- SSecurity Verification
regent-travel.co.uk
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.regent-travel.co.uk currently serves a security verification page protected by Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. Due to this, the actual website content is inaccessible, preventing a full analysis of business operations or services. The WHOIS lookup failed with an error indicating the domain name is invalid under Nominet UK rules, suggesting possible misconfiguration or an unregistered domain. No business or contact information, privacy policies, or terms of service are publicly available. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible security headers or HTTPS enforcement in the provided data. Overall, the site’s security posture is minimal, and the legitimacy of the domain is questionable.
York Boutique Letsyorkboutiquelets.co.uk
Real Estate · United Kingdom
57Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
York Boutique Lets is a small UK-based real estate and hospitality business specializing in holiday let management and property rentals in York. The company offers fully managed services for property owners and a curated collection of boutique properties for travelers seeking short to long term stays. The website is professionally designed, mobile-optimized, and integrates modern WordPress technologies and SEO tools to enhance user experience and visibility. The business targets travelers and property owners in the York area, positioning itself as a boutique provider with a focus on quality and location.
Thyson Technology Limitedthyson.com
Energy · United Kingdom
54Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Thyson Technology Limited, operating under the Bilfinger nZero brand, is a UK-based company specializing in analytical engineering services focused on energy security, decarbonisation, and net zero initiatives. With a history of over 40 years and thousands of projects completed, the company serves energy producers, transporters, storage facilities, and industrial users by integrating advanced measurement and safety technologies. Their offerings include systems integration, biomethane solutions, emissions monitoring, and service and maintenance, positioning them as a trusted player in the energy sector's transition to cleaner energy sources. Technically, the website is built on a WordPress platform using modern technologies such as jQuery, Modernizr, Font Awesome, and Google Tag Manager, complemented by a cookie consent mechanism via Cookiebot. The site demonstrates good SEO practices, mobile optimization, and accessibility features, providing a solid digital presence. However, some technical improvements are recommended, including enhanced security headers and a published security policy. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected, indicating a generally sound security posture. The absence of WHOIS data for the domain raises some concerns about registration transparency, although the website content and business information support legitimacy. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility, with an overall AI score of 78. Strategic recommendations include improving WHOIS transparency, publishing security policies, and enhancing security headers to strengthen trust and compliance.
West Sussex Musicwestsussexmusic.co.uk
Education · United Kingdom
65Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
West Sussex Music is a well-established regional organization dedicated to providing high-quality and inclusive music education and performance opportunities to children and young people across West Sussex. The website reflects a professional and comprehensive service offering, including instrumental and vocal lessons, group ensembles, community projects, and instrument hire. The organization serves a large audience, reaching over 34,000 children annually, positioning itself as a key player in the local educational sector. Technically, the website is built on a modern WordPress CMS platform with popular plugins such as WooCommerce, Yoast SEO, and Events Calendar Pro, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and user experience. Security measures include HTTPS enforcement, Google reCAPTCHA integration, and cookie consent mechanisms, demonstrating awareness of privacy and security best practices. The security posture is solid with no detected vulnerabilities or exposed sensitive data. However, the absence of explicit security policies or incident response information suggests room for improvement in formalizing security governance. The WHOIS lookup failed due to domain naming rules, but this does not detract from the website's legitimacy given its professional content and consistent branding. Overall, West Sussex Music presents a trustworthy and credible online presence with strong business and technical foundations. Strategic recommendations include enhancing security policies, publishing incident response and vulnerability disclosure information, and verifying WHOIS registration details to improve transparency and trust.
- RRedirecting...
np-print.com
Other · Germany
51Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.np-print.com currently serves a minimal redirect page with no accessible content or business information. The domain WHOIS query returned no registration data, indicating the domain may be unregistered or parked. The lack of privacy policies, contact information, and security headers suggests the site is not actively maintained or intended for public business use. Technically, the site uses JavaScript for redirection and contacts an external domain (router.parklogic.com), which may indicate domain parking or monetization attempts. Security posture is very weak with no HTTPS or security best practices observed. Overall, the site presents a high risk for trust and credibility and is not suitable for business or customer engagement in its current state.
Nautoguide Ltd.nautoguide.com
Technology · United Kingdom
60Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Nautoguide Ltd. is a UK-based technology company specializing in interactive map-based platforms for location data capture, management, and publishing. Their key offerings include the Geovey platform for immersive local tours, the open-source Locaria data publishing platform, and a boundary management tool operated by Civica. The company targets organizations and communities seeking innovative GIS and digital engagement solutions. Technically, the website uses modern JavaScript libraries and cloud infrastructure, with good mobile optimization and a professional design. However, the absence of privacy and cookie policies, lack of visible security headers, and missing WHOIS registration data present concerns. Security posture is moderate with no visible vulnerabilities but could be improved with enhanced HTTPS and security headers. Overall, the website is functional and professional but would benefit from improved compliance and transparency measures.
- SSecurity Verification
astutelighting.co.uk
Other
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.astutelighting.co.uk is currently inaccessible beyond a security verification page that employs Google reCAPTCHA v3 to block automated access. The WHOIS lookup for the domain fails with an error indicating the domain name violates Nominet UK's naming rules, suggesting the domain is either invalid or misconfigured. Due to this, no registrar, creation, expiry, or registrant information is available, severely limiting trust and legitimacy assessments. The site lacks any visible business information, contact details, privacy or cookie policies, and security headers. The technical infrastructure is minimal, relying on Bootstrap for styling and Google reCAPTCHA for bot mitigation. Overall, the site appears to be either under construction, misconfigured, or intentionally blocked, resulting in a very low security and business credibility posture.
- SSilven Recruitment
silven.co.uk
Manufacturing · United Kingdom
55Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Silven Recruitment is a well-established specialist recruitment agency focused on the food and drink manufacturing sector in the United Kingdom. Founded in 2011, the company offers a range of recruitment services including interim, permanent, retained search, and team-based solutions. The website reflects a professional and trustworthy brand with strong industry connections, evidenced by client logos and positive testimonials. Their target audience includes food manufacturing companies and job seekers across the UK. Technically, the website is built on WordPress with modern frameworks and tracking technologies, optimized for performance and SEO. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the site demonstrates high business credibility and digital maturity.
- EEngineering Electrics Ltd.
engineeringelectrics.co.uk
Energy · United Kingdom
66Medium
NIS2 10 · GDPR 35
NIS2 10 · GDPR 35
Engineering Electrics Ltd. is a UK-based small business specializing in power generation and UPS solutions, offering nationwide supply and service of generators, UPS systems, and battery storage solutions. The company emphasizes turnkey service with in-house engineering expertise and fast response times from its Hertfordshire location. The website reflects a professional business presence with clear contact information and certifications that enhance trust. Technically, the site is built on the MultiScreenSite platform, using modern JavaScript libraries and analytics tools, but lacks explicit HTTPS canonicalization and some security headers, indicating room for improvement in security posture. Privacy compliance is basic with a cookie consent banner but no visible privacy policy or terms of service pages. Overall, the site is accessible and well-structured, but WHOIS data is unavailable due to domain registration issues, which slightly reduces trustworthiness. Strategic improvements in security and privacy documentation would enhance the company's digital maturity and trust.
Other
57Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website southcoastproductions.co.uk currently returns a 404 Not Found error page, indicating that the content is inaccessible or missing. No metadata, structured data, or business-related content is present, making it impossible to analyze the company's offerings, target audience, or market position. The domain is registered with GoDaddy.com, LLC since 2010 and is valid until 2026, suggesting a legitimate registration but the website itself is not operational. Technically, the site lacks modern features, security headers, and HTTPS information, and shows poor performance and accessibility. No privacy, cookie, or terms of service policies are found, indicating non-compliance with privacy regulations. Overall, the site is not functional and provides no business or security information.
ABRAMSabramsbooks.com
Retail
51Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
ABRAMS is a well-established publishing company specializing in art and illustrated books, including children’s literature, with a history dating back to 1949. The website reflects a mature digital presence built on WordPress with a modern tech stack including Foundation framework and jQuery. It features rich content, clear navigation, and multiple imprints and subsidiaries, indicating a large-scale operation. The site uses HTTPS and includes privacy and cookie policies, demonstrating attention to compliance and user privacy. However, WHOIS data for the domain is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the overall legitimacy given the professional site and branding.
CBS ArcSafecbsarcsafe.com
Energy
73Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
CBS ArcSafe is a specialized company providing remote circuit breaker racking and switching solutions designed to enhance electrical safety by enabling personnel to operate equipment from a safe distance, reducing arc flash hazards. The company operates primarily in the energy sector, targeting industrial and utility customers with a B2B business model. Their product portfolio includes remote racking systems, remote switch actuators, portable tools, and safety accessories. The website reflects a mature digital presence with detailed product information, clear navigation, and consistent branding. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and tracking tools, hosted on WP Engine, ensuring reliable performance and mobile optimization. Security posture is good with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and additional security headers are recommended. Privacy compliance is basic with visible cookie consent and privacy policies, but lacks explicit GDPR compliance indicators. Overall, the domain registration data supports the legitimacy and long-standing operation of the business.
- EEuropa Science
europascience.com
Technology · United Kingdom
57Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Europa Science is a UK-based marketing and publishing company specializing in targeted marketing solutions for the science and technology sectors. Their services include content marketing, lead generation, panel discussions, and live events aimed at engaging technical audiences globally. The company positions itself as a strategic partner with a strong global reach, supported by a substantial user base, newsletter subscribers, and social media followers. The website reflects a professional and consistent brand image with clear messaging tailored to science and technology brands. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive privacy policy but no visible cookie consent mechanism. The WHOIS data for the domain is unavailable, which introduces some uncertainty regarding domain registration legitimacy. However, the professional website content, consistent branding, and presence of verified contact information support the business's credibility. Overall, the website is well-constructed and trustworthy but would benefit from enhanced security headers, cookie consent, and clearer domain registration transparency.
Telcamtelcam.co.uk
Real Estate · United Kingdom
69Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Telcam is a UK-based security company specializing in home and commercial security systems, including alarms, CCTV, fire safety, and automation solutions. With over 25 years of experience and more than 2,500 secured properties, Telcam holds the NSI Gold Standard certification, positioning itself as a trusted provider in the security sector. Their services target residential, commercial, and public sector clients primarily in England and Wales. The company operates a professional website built on WordPress with Elementor and WooCommerce, offering both services and an online shop for security products. Technically, the website employs modern web technologies and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. The site is hosted by GoDaddy and uses HTTPS with good SSL configuration. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. Despite these strengths, the site lacks visible privacy and cookie policies, which is a compliance gap, and no explicit incident response or security policy information is provided. From a security perspective, the website follows best practices like HTTPS enforcement and uses reCAPTCHA to protect forms. However, it does not implement or expose common security headers, and there is no public vulnerability disclosure or security.txt file. The domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness. Overall, Telcam's website is professional and trustworthy, with a solid business presence and technical foundation. To improve, the company should publish comprehensive privacy and cookie policies with consent mechanisms, add security and incident response information, and enhance security headers to strengthen its security posture and compliance.
Seymour Taylor, Business and Tax Advicestca.co.uk
Finance · United Kingdom
69Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Seymour Taylor is a well-established, award-winning accountancy and tax advisory firm based in High Wycombe, Buckinghamshire, serving a diverse clientele including businesses, entrepreneurs, and individuals. The firm offers a comprehensive range of services such as audit, tax planning, payroll, digital accounting, and international accounting support. Their membership in MGI Worldwide and regulation by ICAEW underscore their professional credibility and market position. The website reflects a mature digital presence with regularly updated content including blogs, news, webinars, and newsletters, targeting UK-based clients primarily in the finance sector. Technically, the website is built on WordPress with modern plugins and tools for SEO, analytics, and user engagement. It employs Google reCAPTCHA for form security and a GDPR-compliant cookie consent mechanism, indicating a strong commitment to privacy and compliance. The site is mobile-optimized, accessible, and performs moderately well, with room for improvement in security header implementation. From a security perspective, the site uses HTTPS and has implemented several best practices, though explicit security headers are not fully detected. No vulnerabilities or exposed sensitive data were found. Privacy policies and cookie management are comprehensive and transparent, supporting GDPR compliance. The domain registration data is consistent with the firm's claims, showing a long-standing presence and legitimacy. Overall, Seymour Taylor's website demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable digital asset for the firm. Strategic improvements in security headers and incident response disclosures could further enhance their security posture and client trust.
- Roberts Radio
robertsradio.com
Retail · Germany
70Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Roberts Radio is a well-established British audio brand with nearly 90 years of history, offering a range of consumer audio products including radios, sound systems, turntables, and accessories. The website targets German-speaking consumers and operates an e-commerce platform to sell its products. The brand emphasizes British engineering and design quality. Technically, the website is built on Drupal 11, employs modern marketing and analytics tools such as Google Tag Manager, TikTok Pixel, and Facebook Pixel, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and accessible, with good SEO and user experience. Security-wise, the site uses HTTPS and reCAPTCHA v3, but lacks explicit security headers and published security policies or incident response contacts. The WHOIS data for the domain is missing, which is unusual and reduces trust somewhat, but the professional presentation and multiple trust signals on the site support its legitimacy. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility, with room for improvement in security policy transparency and WHOIS data availability.
- Cheyne Pier
cheynepier.com
Real Estate · United Kingdom
69Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Cheyne Pier is a niche real estate business offering luxury residential moorings and houseboat living on Chelsea’s riverside in London. The website presents a professional image with clear descriptions of the unique lifestyle and services provided, targeting affluent individuals seeking exclusive riverside living. The technical infrastructure is based on the Wix platform, leveraging Wix Thunderbolt framework and modern JavaScript polyfills, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and some JavaScript hardening, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and design suggest a legitimate business. Overall, the site is accessible and safe, but improvements in privacy compliance and domain registration transparency are recommended.
Ashmores Press Brake Tooling Limitedpressbraketool.co.uk
Manufacturing · United Kingdom
56Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Ashmores Press Brake Tooling Limited is a UK-based manufacturer specializing in press brake tooling, serving both CNC and conventional press brake users. Established in 1919, it claims to be the UK's longest established manufacturer in this niche, offering a wide range of tooling products, refurbishment services, and technical support. The company targets manufacturing businesses requiring high-quality tooling solutions and exports internationally. The website is professionally designed with clear navigation, product catalogs, and interactive tools such as a bending calculator app, supporting its business model effectively. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Tag Manager for tracking. It includes a cookie consent mechanism and privacy policy, indicating basic compliance with privacy regulations. Mobile optimization and accessibility are basic but functional. However, the use of an outdated jQuery version and lack of explicit security headers indicate areas for improvement in security posture. Security-wise, the site uses HTTPS and has a cookie consent banner, but lacks visible security headers and incident response information. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. This discrepancy suggests a need for further verification of domain registration status. Overall, the website presents a credible business front with good content quality and user experience but has moderate security and compliance maturity. Strategic improvements in security headers, updated libraries, and domain registration clarity are recommended to enhance trust and reduce risk.
- Thumb Bank & Trust
freelandstatebank.com
Finance · United States
74Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Thumb Bank & Trust is a well-established regional financial institution based in Michigan, with over 120 years of history providing personal and business banking services. The website reflects a mature business with a comprehensive suite of banking products including deposits, loans, treasury management, investments, and trust services. The bank targets both individual consumers and businesses, emphasizing community banking values and financial literacy. Technically, the site is built on a mature ASP.NET/DNN platform with modern JavaScript libraries and integrates third-party services for analytics, advertising, and cookie consent management. Security posture is solid with HTTPS, CSRF protections, and a visible fraud alert, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site projects professionalism and trustworthiness appropriate for a financial institution.
Reliance, Inc.rsac.com
Manufacturing · United States
58Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Reliance, Inc. is a well-established, large manufacturing company specializing in diversified metal solutions and services. The company operates a broad family of over 75 subsidiary brands, positioning itself as a leading metal service center provider in the industrial sector. The website reflects a professional and modern digital presence, leveraging WordPress CMS with SEO and cookie consent tools to ensure compliance and user engagement. The technical infrastructure is supported by Cloudflare DNS and includes modern JavaScript libraries and analytics integration. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements such as DNSSEC and explicit security policies could enhance trust further. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-branded, and suitable for its target industrial and investor audience.
- FFirst National Bank of Central Texas
fnbct.com
Finance · United States
71Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
First National Bank of Central Texas is a regional financial institution providing a comprehensive range of personal and business banking services including checking, savings, loans, mortgages, and digital banking solutions. The bank positions itself as a customer-focused institution with a strong emphasis on personalized service and community engagement within Central Texas. The website reflects a mature digital presence with modern design, clear navigation, and mobile optimization, supporting both customer acquisition and service delivery. Technically, the site leverages WordPress CMS with standard industry tools such as Google Analytics and Tag Manager, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trust. Recommendations include enhancing DNS security, publishing explicit security policies, and adding security headers to further strengthen the security posture.
Radke Implement, Incradkeimplement.com
Manufacturing · United States
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Radke Implement, Inc is an authorized Case IH agricultural equipment dealership operating primarily in Kansas with physical locations in Milberger and Hays. The company offers new and pre-owned agricultural and construction equipment, along with full sales, service, parts departments, and financing options. Their market position is that of a regional authorized dealer with additional partnerships with Kubota and Great Plains, targeting farmers and agricultural businesses in the region. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, Google Fonts, and Google Analytics. The site is mobile optimized with good navigation and content quality. However, there is no detected CMS or hosting provider information. Performance is moderate with basic accessibility and good SEO practices. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data. However, no security headers such as CSP or HSTS are detected, and no privacy or cookie policies are present, indicating gaps in compliance and security best practices. The WHOIS data is unavailable, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the website is functional and professional but would benefit from improved security headers, privacy compliance, and verification of domain registration details to enhance trustworthiness and security posture.
- TThis site is under development
jbproduce.com
Other
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.jbproduce.com currently serves only as a placeholder page indicating that the site is under development. There is no substantive business content, no contact information, and no privacy or security policies present. The domain WHOIS query returned no registration data, suggesting the domain may be unregistered or inactive. The page loads an iframe from an unrelated and suspicious external domain, which raises concerns about the site's legitimacy and security posture. Technically, the site uses an outdated version of jQuery and lacks modern web standards such as HTTPS and security headers. Overall, the site is not operational as a business website and presents significant trust and security concerns.
Blue Point Capital Partnersbluepointcapital.com
Finance
53Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Blue Point Capital Partners is a private equity firm specializing in partnering with entrepreneurs and management teams to invest in and grow lower middle-market companies. The firm emphasizes strong partnerships and value-added services including data and digital capabilities, global supply chain expertise, and regional presence with offices in Cleveland, Charlotte, and Seattle. Their website reflects a professional and well-structured digital presence with clear business messaging and portfolio highlights. Technically, the website employs modern JavaScript libraries such as RequireJS and Modernizr, and integrates Google Analytics for user tracking. The site is mobile optimized and demonstrates good SEO and accessibility practices. However, there is no detected cookie consent mechanism, and some security headers are not explicitly present, which could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data. The absence of WHOIS domain registration data is a notable concern, as it raises questions about domain legitimacy despite the professional website. No explicit security policies or incident response contacts are provided, which could be a gap in transparency and readiness. Overall, the website scores well in content quality and technical implementation but has room for improvement in privacy compliance and security posture. Strategic recommendations include enhancing security headers, publishing security policies, implementing cookie consent, and verifying domain registration details to improve trust and compliance.
Government · United States
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Housing Authority of the City of Pittsburgh (HACP) operates as a government agency providing property management and real estate services primarily focused on affordable housing in Pittsburgh. The website serves residents, landlords, and vendors with information on housing options, eligibility, landlord resources, and emergency housing services. It holds a strong market position as the flagship housing authority in the city, with a domain established since 1997, reflecting a mature and stable organization. The business model is government-oriented, focusing on public service and community support.
Other
72Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website amia.org is currently inaccessible beyond a Cloudflare security verification challenge page, which prevents direct content analysis. The domain is well-established, created in 1994, and registered with a reputable registrar, indicating legitimacy. However, no business, contact, or policy information is visible due to the WAF challenge. The technical infrastructure leverages Cloudflare services including Turnstile captcha for bot mitigation and security. Security headers are minimal but present, and DNSSEC is not enabled, representing a minor security gap. Due to the content block, privacy compliance and business credibility cannot be assessed. Overall, the site appears to be protected by strong security measures but lacks accessible content for full evaluation.
- City of Downey, CA
downeyca.org
Government · United States
68Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
The City of Downey, CA website serves as the official digital presence for the municipal government, providing residents, businesses, and visitors with access to city services, information, and resources. The site offers key functionalities such as water bill payments, council agendas, job postings, and community event calendars, positioning itself as a comprehensive portal for local government engagement. The website targets a broad audience including local residents, businesses, and visitors, supporting civic participation and service delivery. Technically, the site employs a mature technology stack including AngularJS, Bootstrap, and Vision CMS, supported by Google Analytics and Tag Manager for performance and user behavior insights. Accessibility is addressed through dedicated widgets and the inclusion of axe-core, reflecting a commitment to inclusive design. Performance is moderate with CDN support from Akamai, and the site is mobile optimized with clear navigation. From a security perspective, the site enforces HTTPS and incorporates session management and XSS filtering within its CMS. However, explicit security headers such as CSP and X-Frame-Options are not evident, and no published security or incident response policies are found. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms or GDPR-specific disclosures. No WHOIS data was retrievable, but the domain and website content strongly indicate legitimacy as an official government entity. Overall, the website demonstrates a solid foundation in content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security policy transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence, supporting the city’s digital service goals.