Security Directory

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Angel Plumbing Services

angelplumbingservices.co.uk

61

Angel Plumbing Services is a small, family-run plumbing and heating service provider based in London, with over 40 years of experience. The company offers a broad range of services including plumbing repairs, central heating installation, bathroom and kitchen installations, landlord gas safety inspections, and emergency call outs. The website positions the company as reliable, affordable, and professional, targeting residential and commercial customers in North London. The business holds certifications such as Gas Safe registration and APHC membership, which enhance its credibility in the energy sector. Technically, the website is built using a custom CMS platform provided by Yell Multiscreensite, leveraging modern JavaScript libraries like jQuery and analytics tools such as Snowplow. The site uses HTTPS with a valid SSL certificate and includes cookie consent mechanisms, but lacks explicit privacy and security policies. Performance and mobile optimization are moderate, with basic accessibility features and good SEO practices. From a security perspective, the site employs HTTPS and CAPTCHA services to protect forms, but no advanced security headers were detected. The absence of a privacy policy and incident response information indicates gaps in compliance and security transparency. The WHOIS data for the domain is unavailable due to a naming error, which raises concerns about domain legitimacy despite the professional appearance of the website. Overall, the website is functional, professional, and trustworthy from a user perspective but would benefit from improved transparency in privacy and security policies, enhanced security headers, and clarification of domain registration details to strengthen trust and compliance.

W

Wendy Jones Blackett

wendyjonesblackett.co.uk

58

Wendy Jones Blackett operates an e-commerce website specializing in original, hand finished greeting cards, primarily targeting independent shops and direct consumers in the UK. The business emphasizes supporting local independent retailers while providing an online shopping alternative. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies, with moderate performance and good mobile optimization. Security posture is moderate but lacks key security headers and privacy compliance documentation. The WHOIS data for the domain is unavailable due to a naming rules violation, which raises concerns about domain registration legitimacy, though the website content and business information appear professional and trustworthy. Strategic improvements in security headers, privacy policies, and domain registration transparency are recommended to enhance trust and compliance.

A

Rate limit exceeded.

allaboutyoudt.com

41

The website www.allaboutyoudt.com is currently inaccessible due to a rate limit exceeded error (HTTP 429) served by Tumblr, indicating that automated or high-volume access has been blocked. The site content is minimal and consists solely of an error message with no business or contact information. WHOIS data for the domain is not found in the VeriSign registry, suggesting the domain may be unregistered, expired, or otherwise inactive. This lack of registration data and website content severely limits the ability to assess the business, technical infrastructure, or security posture. The site is hosted on the Tumblr platform but lacks any visible security headers, privacy policies, or contact details. Overall, the site presents a very low trust and credibility profile due to these factors.

P

Plessey

plesseysemi.com

63

Plessey is a UK-based technology company specializing in photonics with over 70 years of innovation. They develop MicroLED displays, optical computing, and optical interconnect technologies primarily for AR, AI, and next-generation wearable devices. Their integrated facility in Plymouth enables research through volume production, positioning them as a trusted partner for large technology companies. The website reflects a mature, professional business with clear branding and comprehensive content. Technically, the site is built on WordPress with modern libraries and SEO optimizations, hosted likely by UKFast. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with clear cookie consent and privacy policies. The WHOIS data shows an anomalous future domain creation date, which may be a data error, but overall domain registration status is consistent with a legitimate business. Contact information is complete with phone, address, and contact forms, supported by active social media channels.

P

PAL Machinery Ltd

palmachinery.co.uk

57

PAL Machinery Ltd is a well-established UK-based supplier specializing in quality glass machinery and equipment, serving the UK and Ireland markets. The company represents multiple manufacturers and offers a range of products including reconditioned machines and engineering services. Their website reflects a professional B2B business model focused on the glass manufacturing sector. Technically, the site is built on WordPress with WooCommerce, utilizing popular plugins such as WPBakery and Slider Revolution, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and implements GDPR-compliant cookie consent via the Complianz plugin. However, some security headers are missing, and there is no visible security policy or incident response information. Overall, the site demonstrates a solid security posture but could improve by updating software and adding explicit security policies. The domain is long-standing and consistent with the business history, enhancing trustworthiness.

Y

Yorkshire Air Ambulance

yaa.org.uk

59

Yorkshire Air Ambulance is a well-established UK-based charitable organization providing rapid emergency air ambulance services to approximately 5 million people across Yorkshire. The website serves as a key platform for community engagement, fundraising, and information dissemination. It is professionally designed with clear navigation and strong branding consistency, targeting donors, volunteers, and the general public interested in emergency medical services. The business model relies heavily on donations and fundraising events, positioning Yorkshire Air Ambulance as a critical regional healthcare service provider. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, integrated with modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. Cookiebot is used for comprehensive cookie consent management, reflecting good privacy compliance practices. Security-wise, the site enforces HTTPS with strong security headers and no visible vulnerabilities, though it lacks a publicly available security policy or incident response information. The absence of WHOIS data is due to an invalid query on the www-prefixed domain, but the website content and external references strongly support its legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in transparency around security policies and incident response.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

P

Prenax

prenax.co.uk

58

Prenax is a specialist B2B company focused on outsourced procurement and subscription management services for companies and institutions globally, with a strong presence in the United Kingdom. Their website presents a professional image with clear navigation, detailed service descriptions, and a customer success team localized to client regions. The business model centers on simplifying subscription management and optimizing procurement processes, targeting corporate and academic/public sectors. The company holds sustainability accreditation (Ecovadis), enhancing its market credibility. Technically, the website is built on Drupal CMS with Bootstrap framework, incorporating modern libraries such as FontAwesome and Matomo Analytics for tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a comprehensive cookie consent mechanism that respects user privacy. However, some security best practices like security headers are not evident, and SSL configuration details are not provided. From a security perspective, the site uses HTTPS and respects DoNotTrack signals in Matomo, but lacks visible security headers and published security policies or incident response contacts. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the professional website content and contact information mitigate these concerns somewhat. Overall, Prenax's website is a well-structured, professional platform suitable for its B2B audience, but improvements in security transparency and domain registration verification are recommended to enhance trust and compliance.

C

Coloursonic Ltd

coloursonic.co.uk

48

Coloursonic Ltd is a well-established professional large format printing service based in London, founded in 1999. The company offers a broad range of print solutions tailored for events, retail, exhibitions, and corporate environments, positioning itself as a specialist in the printing industry within the UK market. Their website reflects a business-focused approach targeting organizations requiring high-quality printing services. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO and structured data usage, indicating a mature digital presence. Security-wise, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks explicit security policies and some recommended security headers. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but could improve in privacy transparency and security documentation.

R

Raine & Co

raineandco.com

44

Raine & Co is a well-established real estate and letting agency operating since 1991, serving multiple locations including Potters Bar, Hatfield, St Albans, Mayfair, and surrounding areas. The company emphasizes high service standards, honesty, and professionalism, offering a broad range of services such as residential sales, lettings, auctions, property management, and financial advice. Their market position is supported by multiple office locations, award recognition, and a strong online presence. Technically, the website is built on modern frameworks like Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and explicit privacy compliance. Overall, the website presents a professional and trustworthy image, though the lack of WHOIS data for the domain raises some concerns about domain registration legitimacy. Strategic recommendations include enhancing privacy and cookie policies, adding security headers, and clarifying domain registration details to improve trust and compliance.

S

Strand Preservations Ltd

strandpreservations.co.uk

51

Strand Preservations Ltd is a UK-based specialist company focused on preservation services, likely within the construction or building maintenance sector. The website presents a professional image with clear contact details and a focused business description. The company targets clients seeking expert preservation solutions, positioning itself as a niche service provider. Technically, the website is built on WordPress using the Divi theme, leveraging Google Fonts for typography. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies such as privacy or cookie notices. WHOIS data is unavailable due to domain registration errors, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and credible from a business perspective but would benefit from enhanced security and compliance measures.

R

Red Deer Herbs Ltd

reddeerherbs.co.uk

47

Red Deer Herbs Ltd is a well-established UK-based company specializing in the production, processing, and nationwide distribution of fresh herbs, micro herbs, salad leaves, and fresh chillies. Founded in 1986, the company emphasizes quality, technical excellence, and sustainability, serving primarily the food industry across Scotland, England, and Wales. Their business model focuses on B2B supply and distribution with a commitment to freshness and customer responsiveness. Technically, the website is built on WordPress using the Oxygen Builder framework, enhanced with modern JavaScript libraries such as jQuery and AOS for animations. The site includes GDPR-compliant cookie consent mechanisms via the Complianz plugin, indicating a mature approach to privacy compliance. Hosting and domain registration are stable and consistent with the company's long history. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and a dedicated security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The overall security posture is good but could be improved with additional headers and transparency. Overall, the website presents a professional, trustworthy, and compliant digital presence for Red Deer Herbs Ltd, with clear contact information and business details. The risk level is low, with recommendations focusing on enhancing security headers and publishing security policies to further strengthen trust and compliance.

C

Cheltenham Removal Company Ltd

cheltenhamremoval.co.uk

41

Cheltenham Removal Company Ltd is a small, family-run business specializing in home, office, and business removals with over 30 years of experience. The company serves Gloucestershire, Worcestershire, the Cotswolds, and wider UK and European locations, offering a range of services including removals, storage, packing, and piano removals. The website reflects a well-established local service provider with a trusted reputation supported by customer testimonials and clear contact information. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Contact Form 7, and Chaty, with HTTPS enabled and basic anti-spam measures like Google reCAPTCHA. However, some security best practices such as security headers and privacy compliance documentation are lacking. Overall, the site is professional and functional but could improve in privacy and security transparency.

Stratton Glass & Windows Ltd is a well-established local home improvement company based in Norfolk, UK, specializing in the supply and installation of premium aluminium and uPVC windows, composite doors, conservatories, and home extensions. With over 40 years of experience, the company positions itself as a trusted partner for homeowners in Norfolk and Suffolk, offering quality products backed by a 10-year insurance-backed warranty and recognized industry certifications such as FENSA and GGF. Their services include a wide range of window and door types, conservatory designs, and roof replacement solutions, targeting residential customers seeking durable and energy-efficient home improvements. Technically, the website is built on ASP.NET WebForms using the Bongo CMS platform, incorporating legacy JavaScript libraries like jQuery 1.4.4 and MooTools, alongside modern tools such as Facebook Pixel for marketing and tracking. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism compliant with GDPR. However, some outdated libraries and missing security headers suggest room for technical modernization and enhanced security hardening. From a security perspective, the website enforces HTTPS, uses captchas on forms, and provides clear privacy and cookie policies, reflecting a mature privacy posture. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the queried subdomain is due to domain naming rules, but the website content and contact information strongly indicate legitimacy and consistency with the business claims. Overall, Stratton Glass & Windows Ltd presents a professional and trustworthy online presence with solid business credibility and a good security posture. Strategic improvements in updating legacy scripts, implementing security headers, and publishing explicit security policies would further enhance their digital maturity and risk management.

M

Monogram Collective

the-vineyard.co.uk

57

The Vineyard is a luxury hospitality business located in Berkshire, UK, operated under the Monogram Collective brand. It offers premium accommodation, dining experiences including Michelin-recognized culinary services, event hosting, and a forthcoming spa. The website reflects a high level of professionalism with excellent design, clear navigation, and comprehensive content tailored to affluent travelers seeking refined hospitality experiences. The business model focuses on delivering exceptional guest experiences through multiple service offerings including rooms, restaurants, wine shop, and events. Technically, the website employs modern web technologies such as TypeScript, Bootstrap, and integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The WHOIS data is unavailable due to domain registration errors, which slightly impacts trustworthiness from a domain registration perspective but does not detract from the evident legitimacy of the business and website content. Overall, the site is secure, compliant with privacy regulations, and professionally maintained.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

D

Deekay Property

deekayproperty.com

60

Deekay Property is a UK-based real estate investment company established in 1972, offering property investment, asset management, and finance services. The website presents a professional image with a consistent brand and clear market positioning focused on the UK property market. The technical infrastructure is based on the Squarespace platform, providing a modern and mobile-optimized experience with good SEO practices. Security posture is strong with HTTPS and HSTS enabled, though additional security headers and privacy policies are lacking. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and clearer contact information.

H

HSBC Holdings plc

hsbc.com

78

HSBC Holdings plc operates as one of the world's largest banking and financial services organizations, serving millions of customers globally through its four main business lines: Retail Banking and Wealth Management, Commercial Banking, Global Banking and Markets, and Global Private Banking. The company maintains a strong market position with a legacy dating back to 1865 and a significant presence in key financial markets. The website reflects this stature with comprehensive investor relations, corporate governance, and sustainability information targeted at investors, customers, and partners. Technically, the HSBC website employs modern JavaScript libraries such as VideoJS and Tealium for tag management and analytics, indicating a mature digital infrastructure. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with robust privacy and cookie consent mechanisms in place. HTTPS is enforced with security best practices like anti-clickjacking scripts, contributing to a secure user experience. From a security perspective, HSBC demonstrates a strong posture with appropriate security headers, encrypted communications, and compliance with privacy regulations including GDPR. However, explicit incident response and vulnerability disclosure policies are not publicly evident, representing an area for improvement. The WHOIS data is unavailable due to privacy or registry restrictions, which is common for large financial institutions to protect sensitive registration details. Overall, HSBC's website is professional, trustworthy, and secure, reflecting the company's global reputation. Strategic recommendations include enhancing transparency around security incident response and vulnerability reporting to further strengthen trust and compliance.

O

Ogilvie Group

ogilvie.co.uk

58

Ogilvie Group is a well-established family-owned business founded in 1946, operating multiple divisions including construction, fleet management, home building, surveying, and IT security solutions. The company holds a strong market position in Scotland as one of the largest privately owned construction firms and has diversified into complementary sectors. Their website reflects a professional and consistent brand image targeting business clients and partners across these industries. Technically, the website is built on WordPress using modern plugins and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and published policies. The absence of WHOIS data due to domain naming query issues slightly impacts domain trust but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain registration transparency.

The website www.redblugraphics.co.uk is currently inaccessible, returning a 403 Forbidden error indicating that access is blocked by server permissions. The domain WHOIS lookup failed due to the domain name being invalid per Nominet UK rules, which state that the domain contains too many parts. No registrar, registrant, or domain status information is available. The lack of accessible content, metadata, or contact information prevents any meaningful business or technical analysis. The site appears misconfigured or the domain is not properly registered. From a technical perspective, no technologies, scripts, or frameworks could be detected due to the absence of content. The site lacks security headers and HTTPS enforcement cannot be confirmed, indicating a weak security posture. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. Security posture is poor due to the site being inaccessible and the domain registration being invalid. The absence of WHOIS data and the 403 error significantly reduce trust and legitimacy. There are no indications of adult or unsafe content; the site is simply blocked. Overall, the website is not operational or accessible, and the domain registration status is questionable. Strategic recommendations include resolving domain registration issues, configuring proper server permissions to allow access, implementing HTTPS and security headers, and publishing standard compliance and contact information to improve trust and security posture.

R

Roma Finance

romafinance.co.uk

67

Roma Finance is a UK-based finance company specializing in property investment and development lending solutions, including bridging loans, development finance, buy-to-let, and commercial mortgages. The company positions itself as a borrower-first lender with flexible products tailored to unique property transactions. The website reflects a medium-sized enterprise with a professional online presence, detailed case studies, and a comprehensive team section, indicating a mature business with a strong market position in the UK property finance sector. Technically, the website is built on WordPress with modern plugins and tools such as Yoast SEO, Cookiebot for consent management, and Google Tag Manager, demonstrating a good level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, compliant with GDPR, and provides a good user experience with clear navigation and relevant content.

F

Forsters LLP

forsters.co.uk

72

Forsters LLP is a well-established London-based law firm offering a broad range of legal services including real estate, corporate law, dispute resolution, and private client services. The firm targets businesses and individuals seeking expert legal advice in London and internationally. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern SEO and performance optimizations, including lazy loading and responsive design. Security posture is strong with HTTPS enforced, security headers implemented, and cookie consent mechanisms in place. However, there is no publicly available security policy or incident response information, which could be improved. Overall, the site is trustworthy and professional, supporting the firm's market position effectively.

E

Empower Generation

empowergeneration.com

60

Empower Generation is a small energy sector company focused on integrating diesel generators and hybrid energy solutions to support renewable energy goals in the UK and Ireland, particularly Northern Ireland. Their business model involves managing aggregated generator units to provide backup power and grid support, enabling clients to earn revenue from their generators while contributing to greener energy. The website is professionally designed using WordPress and Elementor, hosted by Automattic Inc., and provides clear contact information and business descriptions. However, it lacks privacy and cookie policies, and explicit security policies, which are compliance gaps. The site uses HTTPS with a valid SSL certificate but does not implement DNSSEC or security headers, representing areas for security improvement. Overall, the website is trustworthy and business credible but could enhance privacy compliance and security posture.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

J

Jackie Stanley Limited

jackie-stanley.co.uk

60

Jackie Stanley Limited operates as a specialized real estate agency focused on the North Cornwall region, providing property sales and client support services. The company positions itself as a trusted local expert with a strong emphasis on personalized service and reliability. The website reflects a professional and well-branded digital presence, targeting home buyers and sellers in the area. Technically, the site is built on WordPress CMS, leveraging popular plugins such as Yoast SEO and WP Rocket for SEO and performance optimization. Google Analytics is integrated with a consent management mechanism, indicating attention to privacy compliance. Security posture is generally good with HTTPS enforced and cookie consent implemented, though explicit security headers are not detected and no public security or incident response policies are available. The WHOIS data is notably missing due to a domain registration error, which raises concerns about domain legitimacy and requires further investigation. Overall, the website is professional, user-friendly, and compliant with privacy regulations, but the domain registration anomaly is a critical point for trust assessment.

F

Flip Out

flipout.co.uk

65

Flip Out operates as a leading UK indoor adventure and trampoline park chain, offering family-friendly entertainment across 30 locations with 6 million visitors annually. Their services include trampolines, soft play, birthday parties, and food & drink, targeting families and children. The website is professionally designed, mobile-optimized, and uses modern technologies such as Vimeo for video content, Google Tag Manager for analytics, and Mapbox for location services. The site implements cookie consent mechanisms but lacks explicit privacy and terms of service pages in the provided content. Security posture is generally good with HTTPS and some security best practices, though explicit security headers and incident response information are missing. WHOIS data is unavailable due to domain registration errors, raising concerns about domain legitimacy, but the website content and branding are consistent with a reputable business. Overall, the site is safe, trustworthy, and well-positioned in the hospitality sector, though improvements in privacy compliance and domain registration transparency are recommended.

I

IPW1

ipw1.co.uk

65

IPW1 is a London-based specialist digital and lithographic printing company serving hospitality, retail, creative agencies, finance, and law sectors. Positioned as a leading print company in London, IPW1 offers a wide range of services including large format printing, foiling, embossing, binding, and visual merchandising. The company emphasizes quality, innovation, and partnership with clients, highlighted by its exclusive involvement with Xerox's Iridesse digital press pre-launch. Technically, the website is built on a modern CMS platform with integration of popular analytics and marketing tools, ensuring good performance and user experience. Security posture is solid with HTTPS and service worker usage, though it lacks some security headers and explicit incident response policies. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website reflects a professional and trustworthy business, though WHOIS data inconsistencies warrant cautious monitoring.

We Buy 2 Auction operates as a UK-based online auction platform specializing in monthly auctions and clearance services including container clearances, estate agent services, house clearances, and solicitor services. The company targets individuals and businesses interested in auctioning and purchasing items, particularly in the real estate and clearance sectors. The website is professionally designed with clear navigation and consistent branding, supporting a small-sized business founded in 2016. Technically, the site is built on WordPress using Elementor and AuctionForge plugins, leveraging modern web technologies such as jQuery and Swiper.js. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and secure forms, but lacks some recommended security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance indicators. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

J

Jaguar Shoes

jaguarshoes.com

61

Jaguar Shoes is an East London-based arts collective focused on music, arts, creativity, and community events. Their website showcases exhibitions, events, merchandise, prints, media content, and publications, targeting arts and music enthusiasts primarily in the UK. The business operates on a Shopify e-commerce platform, leveraging modern web technologies and providing a professional user experience with good mobile optimization and SEO. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the site itself appears professionally maintained and trustworthy. Security posture is solid with HTTPS and standard Shopify protections, but lacks explicit security policies or incident response information.

The website www.wowtraining.co.uk currently serves a security verification page employing Google reCAPTCHA v3 to prevent automated access. The domain WHOIS lookup failed due to domain naming rules violations, indicating the domain may be invalid or misconfigured. No business, contact, or policy information is accessible on the site, limiting the ability to assess the company's operations or market position. Technically, the site uses modern libraries such as Bootstrap and Google reCAPTCHA but lacks visible security headers or SSL confirmation in the provided data. The security posture is weak due to minimal content and lack of transparency. Overall, the site is effectively blocked for normal users, resulting in a low trust and credibility score.

I

Island Waste Ltd

islandwaste.gg

52

Island Waste Ltd is a Guernsey-based waste management company providing a range of services including battery disposal, bin hire, skip hire, and hazardous waste management. The company positions itself as a sustainable waste solutions provider with a commitment to diverting waste from landfill. Their website reflects a professional and consistent brand image, targeting local businesses and residents seeking reliable waste disposal and recycling services. The parent company is GRG, indicating a stable corporate backing. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery, Google Fonts, and Google Analytics. The site is mobile-optimized with good SEO practices and moderate performance. While the hosting provider is not explicitly identified, the site uses HTTPS with a good SSL configuration and some security best practices, though additional security headers could be implemented. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contact information, which are recommended for enhanced trust and compliance. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. No vulnerabilities or suspicious domains were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website demonstrates a solid business credibility and technical foundation with room for improvement in security policy transparency and advanced security headers. The risk profile is low, with no critical issues identified.

N

Norddeutsche Seekabelwerke GmbH

nsw.com

41

Norddeutsche Seekabelwerke GmbH (NSW) is a leading German manufacturer specializing in communication, marine, energy, and offshore cables, as well as technical plastic and environmental products. With a legacy spanning over 125 years, NSW is part of the global Prysmian Group, a world leader in energy and telecommunications cable systems. The company targets industrial and business customers, offering a broad portfolio of cable technologies and customized plastic solutions. The website reflects a professional corporate presence with clear branding and comprehensive product and career information. Technically, the website is built on WordPress 7.0.1 using the Yootheme theme and UIkit framework, ensuring a modern and responsive user experience. The site includes multimedia content such as videos and image galleries, optimized for desktop and mobile devices. While performance is moderate, the site is well-structured with good SEO and accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced protection and GDPR compliance. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security transparency. Overall, the website is trustworthy and professional, though the absence of WHOIS data for the domain www.nsw.com raises questions about domain registration legitimacy. However, the strong corporate branding and association with Prysmian Group mitigate this concern. Strategic recommendations include implementing security headers, cookie consent, and publishing security policies to strengthen compliance and trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

A

Anglesey Activities, Accommodation & Glamping

angleseyoutdoors.com

47

Anglesey Outdoors is a small hospitality and outdoor adventure business specializing in family, group, school, and solo adventure holidays based in Anglesey. The company offers accommodation, glamping, and a variety of outdoor activities such as coasteering. The website is built on WordPress using the Divi theme and includes modern plugins like Nextend Smart Slider and Yoast SEO, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, the absence of privacy and cookie policies, lack of visible contact information, and missing WHOIS registration data raise concerns about compliance and legitimacy. Security posture is moderate with HTTPS implied but no security headers detected. Overall, the site presents a professional front but requires improvements in compliance, transparency, and security to enhance trust and reduce risk.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

Cinemascape

cinemascape.co.uk

60

Cinemascape is a specialized UK and Ireland-based company focused on cinema seating, acoustic solutions, and complete auditorium fit-outs. Founded in 1977, it has evolved from an upholstery workshop to a trusted leader in its niche, serving major multiplex brands, independent venues, and educational institutions. The company emphasizes bespoke design, craftsmanship, and minimal disruption during refurbishment projects. Technically, the website is built on a modern Angular framework with Tailwind CSS, providing a professional and responsive user experience. Security posture is moderate with HTTPS enforced and secure form handling, but lacks advanced security headers and formal privacy policies. The absence of WHOIS data due to query errors limits domain trust verification. Overall, the site is professional, content-rich, and trustworthy, but could improve privacy compliance and security transparency.

S

SSE Worldwide

sseworldwide.co.uk

51

SSE Worldwide is a specialized consultancy and supplier of UV and digital printing equipment with over 35 years of industry experience. The company focuses on providing expert advice and sourcing services for a range of printing technologies including single pass UV printers, DTF transfer systems, and flatbed cutters, targeting industrial, packaging, and promotional product markets. The website reflects a professional and well-structured digital presence built on WordPress and WooCommerce, incorporating modern tracking and marketing tools such as Google Analytics and HubSpot. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms, which should be addressed to improve compliance and protection. The WHOIS data for the domain is unavailable and indicates domain registration issues, which raises concerns about domain legitimacy or configuration, though the website content and contact information suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security best practices.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

C

Central Motor Company (Bradford) Ltd

centralmotorco.co.uk

51

Central Motor Company (Bradford) Ltd is a small, family-run used car dealership based in Bradford, West Yorkshire, with over 35 years of trading experience. The company offers a range of used vehicles, part exchange, warranty, finance options, and a national delivery service. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information, including contact details and regulatory compliance numbers. The business targets used car buyers primarily in the UK, focusing on customer service and competitive pricing. Technically, the website is built using a combination of static site generation (Hugo), jQuery, Foundation framework, and various JavaScript libraries for UI components and analytics. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes, and uses a finance API from Codeweavers. The site is served over HTTPS with good SSL configuration, though lacks some recommended security headers. Cookie consent and privacy policies are implemented with granular user controls, indicating good privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent management. However, it lacks explicit security policies and incident response contacts, and no security headers were detected in the provided data. The WHOIS lookup for the 'www' subdomain failed due to domain naming rules, but the main domain is operational and consistent with the business information presented. No vulnerabilities or suspicious content were found. Overall, the website presents a trustworthy and professional online presence for a local used car dealership. Strategic recommendations include adding security headers, publishing a security policy, and maintaining regular audits of third-party scripts to enhance security posture and trustworthiness.

N

Non GamStop Casinos 2026

intu.co.uk

62

intu.co.uk is a specialized affiliate and review website focused on providing UK players with detailed information and recommendations about non GamStop casinos in 2026. The site offers comprehensive guides, casino reviews, bonus details, payment method explanations, and responsible gambling resources. It targets UK adult players seeking offshore licensed casinos that operate outside UKGC regulation, emphasizing freedom and flexibility in online gambling. Technically, the website is well-structured with modern HTML5, CSS3, and JavaScript technologies, including Google Tag Manager for analytics. The site is mobile-optimized, fast-loading, and SEO-friendly with rich structured data enhancing search visibility. No CMS or hosting provider is explicitly identified, but the site demonstrates good technical maturity. From a security perspective, the site enforces HTTPS and follows good practices such as no exposed sensitive data and verified licensing information. However, it lacks explicit security policies, incident response contacts, and a vulnerability disclosure mechanism. Cookie consent is present but lacks an explicit consent mechanism, which could be improved for GDPR compliance. Overall, intu.co.uk presents a trustworthy, professional, and content-rich platform for its niche audience. The risk profile is low given the absence of security issues or suspicious content, but improvements in transparency around security and privacy policies would enhance trust further.

The website represents a Chinese manufacturing company specializing in pumps, valves, and control cabinets, emphasizing quality management under ISO9001 standards. The business targets industrial sectors such as chemical, pharmaceutical, power generation, and metallurgy. The company highlights its technical expertise, product variety, and after-sales service capabilities. However, the website lacks critical business contact information and privacy or security policies, which limits trust and transparency. Technically, the site uses common front-end libraries like jQuery, Bootstrap, Swiper, and WOW.js, but lacks modern SEO and accessibility features. The presence of an embedded iframe from an unrelated external domain raises security concerns. There is no evidence of HTTPS enforcement or security headers, indicating a weak security posture. The WHOIS data is missing or unavailable, which is a significant concern for domain legitimacy and trust. The absence of privacy policies and contact details further reduces compliance with data protection regulations. Overall, the site appears functional but lacks essential security and compliance features, exposing it to potential risks. Strategic recommendations include securing the domain registration, implementing HTTPS with proper security headers, removing or securing external iframe content, adding privacy and cookie policies, and providing clear contact and incident response information to improve trust and compliance.

P

Platinum Motoring Solutions

platinummotoring.co.uk

44

Platinum Motoring Solutions is a small, locally trusted auto repair garage based in Romford, United Kingdom, established in 2014. The company offers a comprehensive range of vehicle maintenance services including MOT testing, servicing, brakes, timing belt replacement, welding, exhaust, tyres, clutch repairs, and diagnostics. Their market position is that of a reliable and quality-focused local garage serving the community with affordable rates and manufacturer-compliant repairs. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to local vehicle owners. Technically, the site is built on WordPress using Elementor and Astra theme, with SEO optimization via Yoast and performance enhancements through WP Rocket. Mobile optimization is good, though accessibility features are basic. Security posture is moderate with HTTPS enabled and use of Google reCAPTCHA on forms, but lacks explicit security headers and published privacy or cookie policies, representing compliance gaps. The domain registration is consistent with the business age and claims, registered since 2014 with a reputable registrar, supporting legitimacy. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

J

Virtual Secretarial & Admin Support | Alcester | JR Admin Assist Ltd

jradminassist.co.uk

64

The website www.jradminassist.co.uk appears to be a small business site built using the Wix platform, likely intended to offer administrative assistance services. However, the site content is minimal and lacks substantive business descriptions, contact information, or trust signals. The domain WHOIS data indicates the domain is invalid or not properly registered under Nominet UK rules, which raises concerns about the legitimacy and ownership of the domain. Technically, the site uses standard Wix scripts and polyfills but lacks advanced SEO, accessibility, and security features. No privacy or cookie policies are present, and no contact or incident response information is available, indicating low compliance with privacy regulations. Overall, the site has a poor security posture and low business credibility, with significant room for improvement in content quality, security, and compliance.

A

Advanced Steam Traction

advanced-steam.org

41

Advanced Steam Traction is a specialized non-profit organization focused on the development and promotion of advanced steam locomotive technology, heritage steam operation, and engineering research. The organization operates through the Advanced Steam Traction Trust and its commercial arm, Advanced Steam Traction Services Ltd. Their market position is niche, serving engineers, heritage railway enthusiasts, and members interested in steam traction technology. The website provides extensive content including membership services, conferences, publications, and technical projects, targeting a specialized audience with a strong focus on engineering and heritage preservation. Technically, the website is built on WordPress with a mature tech stack including jQuery, Bootstrap, and bbPress for forums. The site is mobile-optimized and has good SEO practices, though performance is moderate. Hosting details are not explicit, but the domain is registered with GoDaddy and uses domaincontrol.com nameservers. Analytics tracking is minimal, with Jetpack Stats active and Google Analytics plugin installed but not configured. From a security perspective, the site uses HTTPS with a valid SSL certificate but lacks DNSSEC and explicit security headers such as CSP or HSTS. Forms use nonce tokens for security, and no sensitive data is exposed. However, the absence of privacy and cookie policies and vulnerability disclosure mechanisms indicates gaps in compliance and transparency. No WAF or blocking mechanisms are detected, and the domain registration is consistent and legitimate. Overall, the website is professional, content-rich, and trustworthy but would benefit from improved privacy compliance, enhanced security headers, and clearer analytics configuration to strengthen its security posture and user trust.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.

The website www.cian-pr.co.uk currently serves a security verification page employing Google reCAPTCHA v3 to prevent automated access. The actual business content is inaccessible due to this bot protection mechanism, indicating the presence of a Web Application Firewall (WAF) or similar security control. The domain WHOIS lookup failed with an error from Nominet UK stating the domain name contains too many parts and cannot be registered, suggesting the domain is invalid or improperly configured. No business, contact, or compliance information is available on the page, limiting the ability to assess the company's market position or services. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA but lacks visible HTTPS enforcement and security headers in the provided data. Overall, the site is low in trustworthiness and content quality due to the blocking mechanism and lack of accessible information.

TLS configuration is broken — Guard could not complete a full scan, but the certificate state alone is a high-severity finding the recipient should action immediately.