Medium-risk security reports

Osborn Maledon, P.A. is a professional law firm specializing in business litigation and a broad spectrum of legal services primarily serving clients in Arizona. The firm offers expertise in corporate law, intellectual property, employment law, government and regulatory law, among others, positioning itself as a comprehensive legal service provider for businesses and individuals. The website reflects a well-structured and professionally designed digital presence, leveraging WordPress CMS and modern web technologies such as jQuery, Google Analytics, and FontAwesome to deliver a responsive and user-friendly experience. The firm maintains active social media profiles on Facebook, Twitter, and LinkedIn, enhancing its outreach and client engagement. From a security perspective, the site employs HTTPS with a good SSL configuration and secure form handling but lacks some advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. The absence of WHOIS data for the domain raises concerns about transparency and domain legitimacy, which slightly impacts the overall trustworthiness assessment. Overall, the website demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security best practices.

Cambridge Microelectronics Ltd. (Camutronics) is a specialized fabless semiconductor company focused on power device technologies, including silicon and wide bandgap semiconductors. The company offers design, simulation, testing, and consultancy services primarily targeting energy-saving power electronics applications. Their market position is that of a niche technology provider and a Cambridge University spin-out, serving clients requiring advanced semiconductor device development. The website content is professional and well-structured, reflecting a small but technically competent business. Technically, the website uses standard HTML, CSS, and JavaScript without any detected CMS or advanced frameworks. The site is mobile responsive with good SEO practices but lacks advanced analytics or tracking tools. No security headers or SSL configuration details were available, and no forms or user input fields are present, which reduces attack surface but also limits user engagement. From a security perspective, the site lacks visible privacy, cookie, or terms of service policies, and no contact emails or incident response channels are provided. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance of the website. No WAF or blocking mechanisms were detected, and the site content is safe with no adult or questionable material. Overall, the site presents a credible business front but requires improvements in transparency, security policies, and domain registration clarity to enhance trust and compliance.

Livework is a global business transformation consultancy specializing in design-led change and service design. With over 24 years of experience and multiple global studios, they serve diverse sectors including retail, manufacturing, public sector, financial services, healthcare, and urban development. Their key services focus on envisioning and planning change, delivering tangible initiatives, embedding change operations, and enhancing service culture. The website reflects a mature, professional consultancy with strong market positioning and client success stories.

The City of Santa Monica operates an official government website providing comprehensive information on city services, programs, and resources, including library services. The website targets residents and visitors seeking municipal information and public services. It maintains a strong market position as the authoritative source for Santa Monica city information. The site features a well-structured navigation system and uses modern web technologies such as Blazor, Google Analytics, Microsoft Application Insights, and Microsoft Clarity to monitor performance and user engagement. The website is mobile-optimized and accessible, with consistent branding and trust indicators such as official social media links and a .gov domain. From a security perspective, the site enforces HTTPS and uses reputable analytics tools with anonymized tracking. However, it lacks visible privacy and cookie policies, incident response contacts, and published security frameworks, which are areas for improvement. No critical vulnerabilities or suspicious content were detected, and the WHOIS data confirms the domain's legitimacy as a government entity. Overall, the site demonstrates a good security posture but would benefit from enhanced privacy compliance and explicit security policies. The technical infrastructure is modern and leverages multiple third-party services for analytics and user experience enhancements. Performance is moderate with room for optimization, and SEO practices are adequately implemented. The site’s content is safe for general audiences, focusing on public services without any adult or questionable content. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

The website www.rubyblu.co.uk is currently inaccessible to the public due to password protection implemented via a WordPress plugin. No business information, contact details, or content is available for analysis. The domain WHOIS lookup failed due to the domain name being invalid under Nominet UK rules, indicating potential issues with domain legitimacy or configuration. Technically, the site uses WordPress and a plugin to restrict access, but lacks visible security headers, HTTPS enforcement confirmation, or privacy compliance indicators. Overall, the site presents a very limited digital footprint with minimal transparency and poor trust signals.

Black Apricot Creative is a Midlands-based multi-platform design agency specializing in branding, marketing, print, digital, and photographic services for local and international clients. The company positions itself as a small but professional agency focused on maximizing brand impact and marketing budgets for its customers. The website reflects a consistent and professional brand image with clear service offerings and contact information. Technically, the site is built on WordPress, utilizing common plugins such as Yoast SEO and Contact Form 7, and integrates Google Analytics for user tracking. The site demonstrates good mobile optimization and SEO practices but lacks advanced accessibility features and some security best practices. Security posture is moderate; HTTPS is used, but no security headers were detected, and no explicit privacy or cookie policies are present, indicating compliance gaps. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional website presence. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

A1 Training Group is a specialized driver training provider based in Birmingham, UK, focusing on HGV, LGV, forklift, paramedic driver, and other specialist vehicle training. Established since 2000, the company has trained over 10,000 candidates and positions itself as a leading regional provider with a strong emphasis on quality and customer service. The website reflects a professional business with clear service offerings and contact channels. Technically, the site uses common marketing and analytics tools such as Google Analytics, Google Tag Manager, and HubSpot, hosted on a CMS platform identified as itseeze. The site is mobile-optimized and well-structured for user experience. Security posture is moderate with some best practices like consent management scripts but lacks visible security headers and explicit incident response or security policies. WHOIS data is unavailable due to domain naming rules violation, which raises some concerns about domain registration legitimacy, though the website content supports a legitimate business. Overall, the site is safe, professional, and trustworthy with room for security improvements.

The website www.moreartisan.co.uk currently serves only a security verification page employing Google reCAPTCHA v3 to prevent automated access. No actual business content, metadata, or contact information is accessible, indicating the site is either under protection or not fully deployed. The domain WHOIS lookup failed due to a naming rules violation, suggesting the domain is invalid or misconfigured. This raises significant concerns about the legitimacy and operational status of the website. Technically, the site uses modern libraries like Bootstrap and Google reCAPTCHA but lacks visible security headers and HTTPS confirmation. Privacy and compliance features are absent, and no business or legal information is provided.

The website www.lymedesignandbuild.co.uk is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. Due to this, no substantive business content, contact information, or policies are accessible for analysis. The WHOIS lookup for the domain failed with an error citing domain naming rules violations, suggesting the domain may be improperly registered or invalid. This raises significant concerns about the legitimacy and operational status of the website. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for security verification but lacks visible security headers or HTTPS enforcement in the provided data. Privacy and cookie policies are absent, and no business or contact details are found, limiting trust and compliance assessments.

Clacton Business Services Ltd is a small, established UK-based chartered accountancy firm with over 30 years of experience. The company offers a broad range of financial and accounting services including bookkeeping, payroll, VAT, tax assistance, and specialized services for sectors such as care homes, charities, and educational institutions. The website reflects a professional and consistent brand image targeting small to medium-sized businesses seeking reliable accounting support. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging common web technologies and Google reCAPTCHA for form security. While HTTPS is properly implemented, the absence of security headers and cookie consent mechanisms indicates room for improvement in security posture and privacy compliance. Overall, the site is functional, well-structured, and trustworthy, but could benefit from enhanced security policies and GDPR compliance features.

The website www.puttocksfarm.com currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access is restricted by a Web Application Firewall or similar bot protection mechanism. No substantive content, business information, or contact details are accessible, severely limiting the ability to assess the company's operations or market position. The absence of WHOIS registration data further complicates legitimacy verification, suggesting the domain may be unregistered or protected by privacy services that do not disclose registrant details. Technically, the site uses modern libraries such as Bootstrap and Google reCAPTCHA but lacks visible security headers or HTTPS confirmation. Overall, the security posture is minimal, with key best practices unimplemented or unobservable due to access restrictions.

The Block Fashion is an independent premium womenswear boutique located in Hertfordshire, UK. The website presents a professional retail business focused on offering high-quality womenswear fashion. The business targets women interested in premium clothing and operates primarily as a retail boutique. The website is built on the Wix platform, leveraging Wix's hosting and content management capabilities, with Google Analytics and Tag Manager integrated for visitor tracking. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and business information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

Hagerty UK is a leading insurance provider specializing in classic cars, motorbikes, and other classic vehicles within the United Kingdom. The website presents a professional and well-branded digital presence, targeting classic vehicle owners seeking specialized insurance products. The company positions itself as a market leader in the classic car insurance sector, offering tailored insurance solutions to a niche audience. Technically, the website is built on WordPress with modern integrations such as Google Tag Manager, Google Analytics, and Cookiebot for privacy compliance. The site is well-optimized for mobile devices and demonstrates good SEO practices with comprehensive metadata and structured data markup. Security-wise, the site enforces HTTPS, uses reCAPTCHA for bot protection, and implements cookie consent mechanisms, reflecting a mature security posture. However, explicit privacy policy and terms of service pages were not found in the provided content, which could be improved to enhance compliance and user trust. The WHOIS lookup for the exact domain 'www.hagerty.co.uk' failed due to domain naming rules, but this is expected as it is a subdomain; the main domain 'hagerty.co.uk' is presumably registered and legitimate. Overall, the website is professional, secure, and trustworthy, with minor gaps in explicit compliance documentation.

The website www.upmgroup.co.uk presents minimal content with a default WordPress 'Nothing here' message and lacks substantive business or contact information. The domain WHOIS query failed due to an invalid domain name format, indicating the domain is likely not properly registered or is a misconfigured subdomain. The site references gambling-related external links in hidden text, suggesting possible SEO manipulation or spam content. Technically, the site uses WordPress with common plugins but lacks advanced security headers or privacy policies. Overall, the site has low credibility and limited digital maturity.

The website www.qssupplies.co.uk is currently inaccessible due to a Cloudflare security challenge page that blocks access to any substantive content. The domain WHOIS lookup failed with an error indicating the domain name violates Nominet UK naming rules, suggesting the domain is not properly registered or is misconfigured. No business information, contact details, or policies are publicly available. The technical infrastructure includes Cloudflare's Turnstile captcha service and a strict Content-Security-Policy header, indicating a focus on security but also resulting in content blockage. Due to these factors, a comprehensive security and business analysis cannot be performed. The overall risk is elevated due to the lack of transparency and domain registration issues.

Concept Recruitment Group Ltd operates a professional recruitment website focused on providing temporary, permanent, and contract staffing solutions primarily in the North of England. The company has an established market presence since 2006 and offers a range of recruitment services including on-site services, branch network support, and professional staffing. The website is well designed with clear navigation, job listings, and multiple contact channels, targeting job seekers and employers in their regional market. Technically, the site is built on WordPress with modern SEO and user experience practices, including mobile optimization and use of Google reCAPTCHA for form security. Security posture is adequate with HTTPS and some best practices but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Pension Insurance Corporation plc (PIC) is a specialist UK insurer focused on providing tailored pension insurance buyouts and buy-ins to trustees and sponsors of UK defined benefit pension funds. The company operates under the parent group Athora and targets trustees, policyholders, and investors with a strong emphasis on purposeful investments and sustainability. The website is professionally designed using Adobe Experience Manager, with modern web technologies and good mobile optimization. Security posture is solid with HTTPS and CSRF protections, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. However, the WHOIS data is missing or inaccessible, which raises some concerns about domain registration transparency. Overall, the website presents a credible and professional business presence in the finance sector.

The website www.projectinabox.org.uk is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block. The block page indicates that the visitor's actions triggered security rules, preventing access to any meaningful content. Consequently, no business, contact, or compliance information is available for analysis. The WHOIS lookup for the domain failed, revealing that the domain is not validly registered under Nominet UK rules, which further questions the legitimacy and operational status of the site. From a technical perspective, the site is protected by Cloudflare, but no other technologies, CMS, or hosting details are discernible due to the block. The lack of accessible content and metadata prevents evaluation of SEO, accessibility, or performance. Security posture cannot be assessed beyond the presence of Cloudflare's WAF. The security posture is limited to the WAF protection, but the absence of published security policies, privacy statements, or contact information indicates poor compliance and transparency. The domain's invalid registration status is a critical concern for trust and legitimacy. Overall, the site presents a high risk due to inaccessibility, lack of transparency, and domain registration issues. Strategic recommendations include resolving WAF blocking issues for legitimate users, registering a valid domain, and publishing comprehensive compliance and contact information.

Fit Hire Ltd operates a professional website offering fitness and gym equipment sales, hire, servicing, installation, and gym design services primarily in the UK. The company targets both commercial and domestic customers, emphasizing quality equipment from reputable brands and over 20 years of industry experience. The website is built on Squarespace, leveraging modern web technologies and analytics tools such as Google Analytics and Firebase. It features a cookie consent banner indicating some privacy compliance, though lacks explicit privacy and terms of service pages. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but could be improved by adding explicit security headers and publishing security policies. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation and business legitimacy. Overall, the website is well-designed, user-friendly, and trustworthy for its business domain.

Moorlands Radio is a community-focused radio station serving the Staffordshire Moorlands area in the UK. It offers FM and DAB broadcasts, local news, music shows, interviews, theatre reviews, and podcasts. The station engages with its audience through social media platforms and volunteer opportunities, positioning itself as a key local media outlet. Technically, the website is built on WordPress with Elementor and custom ProRadio plugins, providing a modern and responsive user experience. Security posture is adequate with HTTPS enforced, but lacks comprehensive HTTP security headers and cookie consent mechanisms. WHOIS data is unavailable for the queried subdomain, indicating a domain query error rather than a registration issue. Overall, the site is functional, content-rich, and community-oriented but could improve privacy compliance and security headers to enhance trust and compliance.

Covase Fleet Management is a UK-based company specializing in outsourced fleet management services tailored for small to medium-sized enterprises (SMEs) with fleets ranging from 10 to 200 vehicles. With over 20 years of experience, the company offers dedicated account management to help clients reduce costs, risks, and administrative burdens associated with fleet operations. The website reflects a professional and focused business model targeting UK SMEs, charities, and organizations seeking expert fleet support without the overhead of an in-house team. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and third-party analytics tools such as Google Analytics and LinkedIn Insight. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS with HSTS and includes a cookie consent banner, but lacks explicit privacy and security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data for the domain is unavailable due to a domain registration error indicating the domain name is invalid per Nominet UK rules, which raises concerns about domain legitimacy despite the professional website content. Overall, the site scores well on content quality and technical implementation but should improve privacy compliance and domain registration transparency to enhance trust and security posture.

Richard Smythe Stone is a small UK-based company specializing in finely crafted stone products with over fifty years of experience. Their offerings include bespoke stone kitchens, bathrooms, fireplaces, staircases, flooring, and commercial stone projects. The company emphasizes traditional craftsmanship combined with modern technology, operating from their workshop in Surrey. The website reflects a professional and consistent brand image targeting homeowners and businesses seeking high-quality stonework. Technically, the site uses EdicraLite CMS with common JavaScript libraries such as jQuery, Colorbox, and Owl Carousel, providing a moderate performance and good mobile optimization. However, there is no evidence of advanced SEO or accessibility features. Security posture is limited, with no visible HTTPS confirmation or security headers, and no published privacy or terms policies. The cookie consent banner is present, indicating some privacy awareness. WHOIS data could not be retrieved due to an invalid domain query, which raises concerns about domain registration legitimacy but does not directly impact the website's operational credibility. Overall, the site is functional and professional but would benefit from improved security and compliance documentation.

Armada Marine Ltd is a specialized umbrella employment service provider for offshore workers in the oil, gas, and renewables sectors. Established in 2008 and operating under a domain registered since 2004, the company offers comprehensive payroll, invoicing, and tax management services, including UK and Norwegian tax reporting. The website reflects a professional and consistent brand with clear service descriptions and client testimonials, positioning Armada Marine as a trusted player in its niche market. Technically, the site is built on GoDaddy Website Builder, hosted by Fasthosts, and incorporates modern web technologies including HTTPS and Google reCAPTCHA for form security. However, the absence of privacy and cookie policies indicates compliance gaps that should be addressed. Security posture is generally good with no evident vulnerabilities, but the lack of explicit security and incident response policies is a minor concern. Overall, the website is functional, trustworthy, and well-targeted to its audience, though improvements in privacy compliance and security transparency are recommended.

The website www.matrixcapital.co.uk appears to be a business site built on the Wix platform, likely related to finance or investment based on the domain name and partial content hints. However, the site lacks substantive business descriptions, contact information, and compliance documentation such as privacy or cookie policies. The technical infrastructure is standard Wix with common polyfills and scripts, but no advanced frameworks or analytics beyond a Zoho SalesIQ chat widget. Security posture is weak due to missing security headers and no visible SSL configuration details. The WHOIS lookup failed with an error indicating the domain is invalid under Nominet UK rules, raising significant legitimacy concerns. Overall, the site is accessible but minimal in content and lacks critical trust and compliance indicators.

ADLIB Recruitment is a purpose-driven recruitment agency based in the United Kingdom, proudly B Corp certified and operating since 2001. The company specializes in permanent, contract, integrated recruitment partnerships, and senior appointments across multiple sectors including technology, data, engineering, and sustainability. Their market position is that of a trusted partner supporting growth and change with a strong emphasis on ethical business practices and diversity. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular plugins and analytics tools such as Google Analytics and Bing Ads. The site is well-optimized for SEO and mobile devices, with good content quality and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit incident response policies. Overall, the website presents a professional and trustworthy image with strong compliance to privacy regulations.

Panel Warehouse is an e-commerce retailer specializing in office screens, display boards, notice boards, and office partitions. The company targets businesses and offices seeking high-quality display and partition solutions. Their website presents a professional and consistent brand image with a clear focus on their niche market. The business operates primarily in the United Kingdom and offers a variety of products through an online platform. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics and Bing Ads, indicating a mature digital marketing approach. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and business presence appear credible. Privacy and cookie policies are present and GDPR compliant, but no explicit security policy or incident response information is published. Overall, the website is professional and trustworthy from a user perspective but would benefit from improved transparency in domain registration and security disclosures.

The website www.sp-projects.com is currently inaccessible beyond a security verification page employing Google reCAPTCHA v3, indicating the presence of a Web Application Firewall or bot protection mechanism. This prevents access to any substantive content or business information, severely limiting the ability to assess the company's operations or market position. The domain WHOIS query returned no registration data, suggesting the domain may be unregistered or WHOIS information is restricted, raising legitimacy concerns. Technically, the site uses Bootstrap for styling and Google reCAPTCHA for security but lacks visible security headers or HTTPS confirmation. Privacy and cookie policies, contact information, and business details are absent, further reducing trust and compliance indicators.

Green Day Nursery is a well-established childcare provider based in Birmingham, UK, with a history dating back to 1988 and current ownership since 2003. The business focuses on providing nursery and early education services to local families, positioning itself as a trusted community nursery. The website reflects this with clear branding, relevant content, and engagement through social media platforms such as Facebook and TikTok. The downloadable prospectus and testimonials further support its credibility. Technically, the website is built on WordPress using modern libraries like jQuery, Slick Carousel, and Bootstrap for responsive design. Performance optimizations are evident through the use of Seraphinite Accelerator and lazy loading techniques. SEO is supported by Yoast SEO structured data and proper meta tags. Mobile optimization and accessibility are good but could be improved further. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but no detailed GDPR compliance or incident response information is available. Overall, the website is professional, trustworthy, and suitable for its target audience. Strategic improvements in security headers, privacy compliance, and incident response readiness would enhance its security posture and regulatory compliance.

The website hailofbullets.co.uk is currently a parked domain managed by 123 Reg, a UK-based domain registrar and hosting provider. The site contains minimal content, primarily a placeholder page encouraging visitors to purchase the domain or explore 123 Reg's services. There is no active business presence or product offering on this domain. The WHOIS lookup indicates that the domain is not registered due to contravention of Nominet UK's naming rules, specifically that the domain name contains too many parts, rendering it invalid for registration. This lack of registration and ownership significantly impacts the domain's legitimacy and trustworthiness. Technically, the site uses basic React-based scripts and CSS served by 123 Reg's infrastructure. The page loads moderate performance scripts and styles but lacks advanced SEO, accessibility, or mobile optimization features. No security headers or HTTPS information were detected in the provided data, indicating a minimal security posture. The site includes advertising scripts from Yahoo Ads but does not implement privacy or cookie consent mechanisms beyond a basic privacy policy link. From a security perspective, the absence of HTTPS, security headers, and contact information for incident response or data protection officers highlights significant gaps. The domain's unregistered status and parking page nature mean there is no active security management or compliance. No vulnerabilities or sensitive data exposures were detected, but the overall security posture is weak due to lack of implementation. Overall, the domain is inactive and unregistered, serving only as a placeholder. The risk to users is low as no active services or data collection occurs, but the lack of registration and security measures means it should not be trusted for business or personal use. Strategic recommendations include registering a valid domain name, implementing HTTPS and security headers, providing clear privacy and contact information, a…

Art Attack Design Associates Ltd is a small UK-based business specializing in graphic design, signage, and printing solutions. The company targets local businesses and organizations in the Birmingham and Staffordshire area, offering competitive rates and professional services. The website is built on WordPress using modern technologies such as the Gutenberg editor and GLightbox for media display, with a clean and professional design that is mobile optimized and SEO friendly. However, the domain WHOIS data is unavailable due to an invalid domain registration error from Nominet UK, which raises concerns about the domain's legitimacy despite the professional website content. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is functional and professional but would benefit from improved compliance and security practices.

The website www.unlimitedlogos.co.uk is currently inaccessible, returning an 'Unprocessable Entity' error with minimal HTML content. The domain WHOIS lookup failed due to the domain name violating Nominet UK's naming rules, indicating the domain is likely invalid or improperly registered. Consequently, no business information, contact details, or policies are available for analysis. The technical infrastructure appears minimal or non-existent, with no detectable security headers or HTTPS configuration. This results in a very low security posture and overall digital maturity. The lack of accessible content and domain legitimacy severely limits trust and credibility. Strategic recommendations include resolving domain registration issues, implementing HTTPS, adding essential security headers, and publishing clear business and privacy information to improve trust and compliance.

Arbor Vitae Arboriculture Ltd is a small, specialized tree consultancy and arboriculture service provider based in Scotland, primarily serving Edinburgh and surrounding areas. Founded in 2011 and led by an experienced consulting arborist, the company offers a comprehensive range of services including tree inspections, BS5837 surveys, tree protection, and woodland management. The website reflects a professional and well-established business with strong local trust indicators such as industry memberships and accreditations. Technically, the website is built on WordPress with modern plugins for SEO and GDPR compliance, including Google Tag Manager for analytics and Complianz for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. The performance is moderate, with a clean and navigable design. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively but lacks explicit security policy documentation and some advanced security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data for the domain is unavailable due to a Nominet registration error, which is unusual but does not appear to impact the legitimacy or operation of the website. Overall, the website presents a trustworthy and professional front for Arbor Vitae Arboriculture Ltd, with minor recommendations to improve security posture and accessibility. The domain WHOIS anomaly should be investigated further to ensure full compliance and transparency.

WSS Group Ltd is a well-established, family-run business based in Glasgow, United Kingdom, specializing in security, electrical, and joinery services. With over 30 years of experience and certifications such as NSI approval and NICEIC qualification, the company serves both residential and commercial clients in Greater Glasgow and surrounding areas. Their service offerings include burglar alarms, fire alarms, CCTV, electrical repairs and installations, bespoke joinery, and door entry systems. The website reflects a professional and trustworthy business with clear contact information and a consistent brand presence.

Attacat helps businesses achieve change across marketing, sales and service operations using HubSpot. Also a Google Partner.

MW Groundworks Ltd is a well-established landscaping and civil engineering company based in Scotland, with over 30 years of experience serving clients across Scotland and Northern England. The company offers a range of services including landscaping, civil works, site clearance, tree surgery, and fencing, targeting construction industry clients and main contractors. Their market position is that of a reputable regional service provider with a skilled workforce and notable project history. The website is built on WordPress using the Avada theme, integrating modern technologies such as Google Tag Manager and Google reCAPTCHA for form security. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA, but lacks comprehensive security headers and explicit privacy/cookie policies, which may affect GDPR compliance. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the business. Strategic improvements in privacy compliance and security headers are recommended to enhance trust and regulatory adherence.

R.J. Blasting (Scotland) Ltd is a specialized drilling and blasting service provider operating primarily in the UK extractives industry, including quarrying, forestry, and opencast coal sectors. The company emphasizes its experienced team of explosive supervisors, shotfirers, drillers, and operators, highlighting a portfolio that includes projects like the Drakelands Tungsten Mine. Their business model focuses on providing comprehensive drilling and blasting solutions, explosives supply, surveying, profiling, and environmental monitoring services to industrial clients. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as JavaScript modules, Typekit fonts, and Google Analytics for tracking. The site is mobile-optimized with a professional design and clear navigation, though some SEO and accessibility features could be enhanced. The hosting and SSL configuration are robust, ensuring secure HTTPS connections. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks advanced security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to a domain naming rules error from Nominet UK, which introduces some uncertainty about domain registration legitimacy, though the website content and contact information appear legitimate. Overall, the website presents a professional and trustworthy business front with room for improvement in security policies and compliance documentation. The domain registration anomaly warrants further investigation to ensure full legitimacy and trustworthiness.

Ayrshire Steels is a well-established independent steel stockholder based in Ayrshire, Scotland, with nearly 40 years of experience serving industrial and construction sectors across the UK and Europe. The company offers a broad range of steel products and processing services including sawing, plate profiling, shearing, section rolling, plasma cutting, and steel fabrication. Their market position is solid as one of the remaining independent steel stockholders in Scotland, supported by a comprehensive service offering and reliable delivery. Technically, the website is built on WordPress using the Divi theme, enhanced with Yoast SEO and Google Tag Manager for analytics. The site is moderately performant, mobile-optimized, and includes standard SEO and accessibility features. Hosting is provided by a reputable UK provider, ANS Group Ltd (UKFAST), with HTTPS enabled and basic security practices in place. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Security headers could be improved to enhance protection. No critical vulnerabilities or suspicious indicators were detected. Overall, Ayrshire Steels presents a trustworthy and professional online presence with good compliance and security posture for its business size and sector. Strategic improvements in security policy transparency and technical security headers would further strengthen their security maturity and trustworthiness.

Alcohol Focus Scotland is a well-established national charity dedicated to preventing and reducing alcohol-related harm in Scotland. The organization operates through advocacy, research, public campaigns, and training to influence policy and public behavior. Their market position as a leading non-profit in alcohol harm reduction is supported by clear branding, comprehensive content, and active engagement with stakeholders including policymakers and the public. The website reflects a mature digital presence with good content quality and user experience. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for security and analytics purposes. The use of a custom CMS and Typekit fonts indicates a tailored digital infrastructure. Performance and mobile optimization are good, though some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but could benefit from additional security headers and published security policies. From a security and compliance perspective, the site demonstrates good privacy practices with clear privacy and cookie policies and consent mechanisms. However, there is no explicit incident response or vulnerability disclosure information publicly available. The WHOIS data is unavailable due to a query error but does not detract from the overall legitimacy of the site, which is supported by charity registration and consistent business information. Overall, the website is professional, trustworthy, and secure, serving its mission effectively. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility to further strengthen the site’s security and compliance posture.

R&P Accident Repair Centre Ltd is a small UK-based business specializing in car body and accident repairs, serving Lingfield and surrounding areas. Established in 2008, it offers a broad range of vehicle repair services including dent repairs, SMART repairs, and insurance-related accident management. The company emphasizes quality workmanship, customer service, and convenience through services like courtesy vehicles and mobile estimates. The website is professionally designed with modern technologies such as Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking. However, the absence of privacy and cookie policies indicates compliance gaps. Security posture is moderate with HTTPS assumed but lacking visible security headers or advanced protections. The WHOIS data is unavailable due to domain naming rules violations, which raises some concerns about domain legitimacy despite the professional website content. Overall, the site is trustworthy and well-positioned locally but would benefit from improved compliance and security transparency.

First Grade International Limited is a UK-based medium-sized company specializing in the global supply of coconut-based ingredients, dried fruits, nuts, cocoa, chocolate, and plant-based alternatives to the food and beverage manufacturing industry. The company holds several industry certifications and serves a broad market across the UK and Europe. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The site is well-structured, mobile-optimized, and includes tracking via Google Analytics and Tag Manager. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policies suggests room for improvement. The WHOIS data is unavailable due to domain registration query errors, which impacts domain trust verification. Overall, the website presents a professional and credible business presence with moderate technical and security maturity.

Comtec Translations is a UK-based translation and localisation service provider with over 40 years of experience. The company uniquely blends AI-powered machine translation with expert human linguists to deliver high-quality multilingual content tailored to client brand voice and terminology. Recognized with awards and certifications such as B Corp and ISO 27001, Comtec positions itself as a trusted partner for organizations seeking efficient and culturally accurate translation solutions. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a professional and user-friendly experience. Security posture is strong with HTTPS, cookie consent, and ISO 27001 compliance, though some security headers could be improved. Overall, the site reflects a mature, credible business with a solid digital presence.

Apollo Gardening Ltd. operates a professional retail website focused on supplying a comprehensive range of gardening essentials including landscaping fabrics, wire mesh, plant supports, and garden decor. The company targets everyday gardeners and garden maintenance professionals primarily in the United Kingdom. The website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and clear navigation. However, the absence of a publicly available WHOIS record raises questions about domain registration transparency. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal privacy policies. Overall, the business presents as a small, legitimate gardening supplier with room for improvement in compliance and security transparency.

The website at https://happydaysnurseries.com/our-nurseries/the-hollies/ is currently inaccessible, returning a 403 Forbidden error page served by nginx behind Cloudflare DNS. This prevents any meaningful content, metadata, or business information extraction. The domain happydaysnurseries.com is a long-established domain registered since 2004 with a reputable registrar and no privacy protection, indicating legitimacy. However, the lack of accessible content severely limits the ability to assess the business, technical infrastructure, or security posture. No privacy, cookie, or terms of service policies are detectable, nor any contact information or security disclosures. The site appears to be protected or restricted, possibly by access control or firewall rules, but no explicit WAF challenge page is present. Overall, the site’s security posture cannot be fully evaluated due to blocked content, and the AI score is low due to lack of accessible data.

Grapes Direct is a UK-based specialist grape importer connecting top grape growers worldwide with UK supermarkets. The company operates a year-round supply chain, importing grapes from multiple countries and providing technical support to optimize product quality. Their business model focuses on partnership with growers and simplifying the complex grape supply chain. The website is built on legacy ASP.NET Web Forms technology and uses Google Analytics for visitor tracking. While the site is accessible and professionally presented with clear contact information, it lacks modern security headers and privacy compliance documentation. The WHOIS data indicates the domain registration failed due to naming rules, raising concerns about domain legitimacy. Overall, the website presents a credible business front but requires improvements in security posture and compliance to enhance trust and reduce risk.

DHF Engineering Ltd. is a small UK-based company specializing in engineering and fabrication solutions, including structural steelwork, architectural staircases, specialist fabrication, and project management services. The company targets businesses and contractors requiring bespoke engineering services, leveraging over 30 years of industry experience. Their market position is that of a reputable local/regional service provider with a professional online presence hosted on Squarespace. Technically, the website is built on the Squarespace platform, utilizing modern web technologies such as Google Analytics and Typekit fonts. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. The infrastructure is standard for small business websites, with no advanced frameworks detected. From a security perspective, the website enforces HTTPS but lacks important security headers and cookie consent mechanisms, indicating partial compliance with privacy regulations such as GDPR. No forms are present on the homepage, reducing immediate data collection risks. The WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy, though the website content and business information appear authentic and professional. Overall, the website presents a moderate risk profile with recommendations to improve security headers, privacy compliance, and domain registration clarity to enhance trustworthiness and regulatory adherence.