Security Directory

S

Southern Cross Benefits Limited

scti.co.nz

0

Southern Cross Benefits Limited operates the SCTI website, providing comprehensive travel insurance products primarily targeting New Zealand travellers and international visitors. The company is part of the well-established Southern Cross group, with over 40 years of market presence and a strong reputation supported by multiple industry awards and customer testimonials. The website offers a professional, well-structured user experience with clear navigation and detailed product information, supporting a direct-to-consumer insurance business model. Technically, the site leverages modern web technologies including Sitecore CMS, Bootstrap, and integrates marketing and analytics tools such as Marketo, Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS data limits domain registration trust analysis, but the overall business credibility and external trust signals support legitimacy. Strategic recommendations include publishing security and incident response policies and enhancing transparency around data protection practices.

S

Southern Cross Pet Insurance Limited

southerncrosspet.co.nz

0

Southern Cross Pet Insurance Limited operates a professional and well-branded website focused on providing pet insurance products to New Zealand pet owners. The company offers two main insurance plans covering illness, injury, and accident-only scenarios, along with a free introductory cover for puppies and kittens. The website is part of the larger Southern Cross group, a trusted name in New Zealand insurance, which enhances its market credibility. The site is well-structured, mobile-optimized, and includes comprehensive policy documents and customer support channels. Technically, the site uses modern JavaScript libraries and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, Facebook Pixel, and Qualtrics for feedback collection. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. WHOIS data is unavailable likely due to privacy protection, which is common and justified for commercial entities. Overall, the website demonstrates a mature digital presence with good compliance and trust indicators.

W

Webjet Australia

webjet.co.nz

0

Webjet NZ is an online travel agency focused on providing booking services for flights, hotels, car hire, travel insurance, holiday packages, and cruises targeted at New Zealand travelers. The website is branded consistently with its parent company Webjet Australia and offers a professional user experience with good content relevance and navigation. The technical infrastructure includes modern tracking and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, alongside jQuery and Google Fonts. The site is served over HTTPS with a valid SSL configuration, ensuring secure communications. However, the absence of WHOIS data for the domain www.webjet.co.nz raises questions about domain registration legitimacy or indicates it may be a subdomain or alias. Privacy and cookie policies are not clearly present, and security headers are missing, which are areas for improvement. Overall, the site presents a good security posture but could enhance compliance and transparency.

X

X Span

xspan.co.nz

0

X Span is a New Zealand-based manufacturer specializing in premium steel sheds designed for a variety of uses including domestic, farm, commercial, and industrial applications. The company leverages a proprietary K5S® steel portal bracket system, which is BRANZ tested and appraised, positioning them as a trusted and quality-focused player in the New Zealand shed market. Their business model includes direct sales supported by an online shed design tool (Shed Creator) and a network of local agents for delivery and construction. Technically, the website is built on WordPress with Elementor and related plugins, integrating Google Analytics and Google Tag Manager for marketing and tracking. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and explicit security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the business claims.

P

Pegasus Rental Cars | Car and Van Hire New Zealand

rentalcars.co.nz

0

Pegasus Rental Cars is a New Zealand-based car and van rental service operating multiple depots across 15 cities. The company offers vehicle hire and airport transfer services, targeting both local residents and visitors. Their business model focuses on regional presence with online booking capabilities, supported by a professional website featuring structured data and customer reviews. Technically, the website is built on WordPress with Elementor and integrates various marketing and analytics tools such as Google Analytics, Facebook Pixel, and Bing Ads. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and formal vulnerability disclosure mechanisms. The absence of WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and business information. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure policy to enhance trust and compliance.

H

Howick Limited

tipabin.com

0

TIPABIN is a product offering from Howick Limited focused on providing innovative, efficient, and safer manufacturing waste disposal and product handling solutions. The website presents a professional and well-structured digital presence with clear branding, customer testimonials, and detailed product information. The business targets manufacturing and industrial sectors, emphasizing ease of use and safety in waste handling. Technically, the site leverages modern web technologies including Webflow CMS, Google Fonts, Google Tag Manager, and SharpSpring marketing automation, indicating a moderate level of digital maturity. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified to ensure trustworthiness. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and compliance transparency.

Universal Specialities Limited (USL) is a well-established New Zealand-based supplier specializing in healthcare and related market products, including medical, sport, consumer, equipment, and aesthetics sectors. With over 35 years of experience, USL operates multiple divisions and subsidiaries, providing a broad range of products and services to healthcare professionals and related industries. The company emphasizes quality, customer service, and innovation, supported by ISO 9001:2015 certification. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Facebook SDK, Bootstrap, and lazy loading techniques to optimize performance and user experience. The site is mobile-optimized and uses HTTPS with secure login forms, although some security headers are missing. Analytics and tracking tools are used moderately, with no explicit privacy or cookie policies detected, indicating room for improvement in privacy compliance. From a security perspective, the site demonstrates good practices with HTTPS enforcement and secure form handling but lacks published incident response or vulnerability disclosure information. The absence of privacy and cookie policies is a compliance gap, especially under GDPR and similar regulations. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the HTML content. Overall, USL's website is trustworthy and professional, supporting a legitimate business operation. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, publishing incident response contacts, and improving accessibility features to strengthen compliance and security posture.

USL Biomedical Services is a specialized division within the USL group focused on servicing biomedical equipment for healthcare providers in New Zealand. Their services include installation, training, repair, preventative maintenance, calibration, and electrical safety testing, adhering to AS/NZS 3551:2012 standards. The company targets a broad healthcare audience including public and private hospitals, clinics, aged care, and emergency services. The website reflects a professional and consistent brand presence with clear service offerings and contact information. Technically, the website employs modern web technologies such as Google Analytics, Google Tag Manager, Facebook SDK, and lazy loading for images, ensuring good mobile optimization and user experience. However, explicit security headers and comprehensive privacy and cookie policies are missing, which are important for compliance and security posture. The site uses HTTPS and secure login forms with CSRF protection, but lacks visible incident response or vulnerability disclosure information. Security-wise, the site shows a moderate security posture with room for improvement in headers and policy transparency. The absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. Overall, the website is functional, professional, and trustworthy from a business perspective but should enhance privacy compliance and security best practices. Strategically, USL Biomedical Services should focus on publishing clear privacy and cookie policies, implementing security headers, and verifying domain registration details to improve trust and compliance. Enhancing incident response readiness and vulnerability disclosure will further strengthen their security culture and customer confidence.

USL Distribution is a New Zealand-based logistics and warehousing company specializing in healthcare and related sectors. They provide 3PL and 4PL services, managing a large SKU inventory and servicing over 10,000 customers nationwide, including all National District Health Boards. Their business model focuses on efficient supply chain management and direct delivery services, supported by advanced warehouse management systems. Technically, the website employs modern tracking and analytics tools, is mobile-optimized, and uses HTTPS for secure communications. However, it lacks some security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. The absence of WHOIS data is typical for .nz domains but should be verified for legitimacy. Overall, the site presents a professional and trustworthy image with good business credibility and moderate technical sophistication.

USL Aesthetics is a New Zealand-based division specializing in distributing advanced aesthetic medical products and equipment to healthcare professionals including Plastic Surgeons, Dermatologists, and Aesthetic Clinics. The company emphasizes customer service, product innovation, and comprehensive support including training and equipment servicing. Their product portfolio includes consumables like breast implants and fillers, as well as capital equipment such as lasers and body sculpting devices. The website reflects a professional healthcare business with a clear market focus and a medium-sized operational scale. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook SDK, and lazy loading for images, combined with Bootstrap for responsive design. The site is mobile-optimized and provides a good user experience with clear navigation and professional content. However, it lacks explicit privacy and cookie policies and does not implement visible security headers, which are areas for improvement. From a security perspective, the site enforces HTTPS and uses secure login forms with CSRF protection. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data limits domain trust analysis, but the website content and business presence appear legitimate. The site uses tracking technologies moderately, but privacy compliance is weak due to missing policies and consent mechanisms. Overall, USL Aesthetics presents a credible and professional online presence with good technical implementation and security posture, but it should enhance privacy compliance and security header implementation to improve trust and regulatory adherence.

USL Consumer is a New Zealand-based healthcare product distributor established in 2007, serving retail markets including pharmacies, FMCG, and specialist retail. The company offers a broad portfolio of medical grade and consumer healthcare products, leveraging strong supplier partnerships and internal USL group synergies. The website reflects a professional and well-structured digital presence with clear navigation and comprehensive product categorization. Technically, the site employs modern web technologies such as Google Analytics, Facebook SDK, and lazy loading for images, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure login forms, though improvements are recommended in security headers and privacy compliance mechanisms. The absence of WHOIS data limits domain transparency but does not detract significantly from the overall trustworthiness given the professional content and clear business information. Strategic recommendations include enhancing privacy compliance, publishing security policies, and implementing security headers to strengthen the security posture further.

USL Sport Healthcare, a division of Universal Specialities Limited, is a well-established supplier of sports healthcare products in New Zealand. The company targets a professional audience including physiotherapists, sports doctors, and sporting organizations, offering a comprehensive range of products to support sports health and rehabilitation. The website reflects a medium-sized business with consistent branding and a professional online presence. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, and Bootstrap for responsive design. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. Security posture is solid with HTTPS enforced and secure login forms, though the absence of security headers and privacy policies indicates room for improvement. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is common for commercial entities. Overall, the website is trustworthy and functional but would benefit from enhanced privacy compliance and security disclosures.

USL Equipment is a New Zealand-based supplier specializing in medical equipment with a broad product range exceeding 2,500 SKUs across more than 30 categories. Their clientele includes public and private hospitals, aged care facilities, GP clinics, and community nursing sectors. The company emphasizes innovation, exemplary customer service, and in-house servicing capabilities, positioning itself as a trusted and established player in the healthcare supply market. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to healthcare providers. Technically, the site employs modern web technologies including Google Analytics, Facebook SDK, and Bootstrap, ensuring good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and secure login forms, though lacking some security headers and published security policies. Privacy compliance is limited with no visible privacy or cookie policies, which is an area for improvement. WHOIS data is missing, raising some concerns about domain registration transparency, but the website content and business presence appear legitimate. Overall, the site demonstrates a good balance of business credibility and technical implementation with room for enhanced privacy and security practices.

P

Provida

provida.nz

0

Provida is a New Zealand-based technology company offering a platform to manage provider networks and referrals, primarily targeting healthcare providers and network managers. The website is built on the Wix platform and uses modern web technologies including JSON-LD structured data for local business and website schema. The site presents a professional and consistent brand image with good content quality and a clear business focus. However, the domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy. The website lacks visible contact information and cookie consent mechanisms, which impacts privacy compliance and user trust. Security posture is basic with HTTPS enabled but missing advanced security headers and policies. Overall, the site is functional and safe but could improve in privacy, security, and transparency aspects.

A

Active+ Shop

activeplusshop.co.nz

0

Active+ Shop is a newly established e-commerce retailer based in New Zealand, specializing in orthopedic braces, supports, and footwear. The business operates on the Shopify platform, leveraging its robust e-commerce infrastructure to serve customers primarily in the New Zealand market. The website presents a professional and consistent brand image with a clear focus on health-related products. Technically, the site uses modern technologies including Shopify's Flex theme, Google Tag Manager, and hCaptcha for form security. The SSL configuration is good, ensuring secure transactions and data protection. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance posture. Security best practices such as security headers and incident response information are also absent, representing areas for improvement. Overall, the site is functional, safe, and trustworthy for general consumers but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

S

Southern Cross Medical Care Society

southerncross.co.nz

0

Southern Cross Medical Care Society operates as New Zealand's largest private healthcare organization, offering a comprehensive range of insurance products including health, travel, life, and pet insurance, alongside a national network of healthcare providers. The organization holds a strong market position with leadership in pet and health insurance sectors and maintains a large customer base. The website reflects a mature digital presence with modern technologies such as Sitecore CMS, Azure CDN hosting, and integration of analytics and marketing tools like Google Tag Manager and Facebook Pixel. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. The absence of WHOIS data is noted but likely due to registry policies rather than malicious intent. Overall, the site demonstrates professionalism, trustworthiness, and a strong commitment to community engagement.

S

Smile Store

smilestore.co.nz

0

Smile Store is a New Zealand-based e-commerce platform specializing in oral health products for teeth, mouth, and face care. Positioned as NZ's first and favourite online oral health shop, it offers a wide range of dental and wellness products backed by a team of dental experts. The website targets New Zealand consumers seeking quality and affordable oral care solutions. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and reCAPTCHA, ensuring a robust digital presence with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforcement and CSRF protections, though some security headers could be improved. Privacy compliance is basic, with privacy and terms pages present but lacking cookie consent mechanisms. The absence of WHOIS data limits domain legitimacy verification, but the professional site presentation and content suggest a legitimate business. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing clear security and incident response policies.

A

Aluro Equipment

aluroequipment.co.nz

0

Aluro Equipment is a specialized dental equipment supplier based in New Zealand, focusing on providing high-quality dental products, training, and customer support to dental professionals. The company positions itself as a trusted partner for New Zealand dentists, offering a range of products including digital dentistry solutions, imaging and X-ray equipment, dental units, and bench-top devices. Their website reflects a professional and consistent brand image, targeting dental practices within New Zealand. Technically, the website employs modern marketing and analytics technologies such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and HubSpot, and is built on the Umbraco CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses Google reCAPTCHA for form protection but lacks explicit security headers and documented incident response policies. The WHOIS data for the exact subdomain queried is unavailable, which raises questions about domain registration status or query scope but does not affect the accessibility or professionalism of the website content. Overall, the website demonstrates a solid digital presence with room for improvement in security best practices and transparency around data protection.

GemLab is a New Zealand-based independent jewellery valuation service provider specializing in unbiased and expert appraisals of gems, jewellery, and watches. The company holds recognized certifications from the Gemmological Institute of America and the Gemmological Association of Great Britain, positioning itself as a trusted leader in the local market with over 30 years of experience. Their services cater primarily to jewellery owners, insurance companies, legal professionals, and government entities, offering tailored valuation reports including insurance, selling, estate division, and legal purposes. Technically, the website employs a modern and responsive design using Bootstrap, jQuery, and slick carousel for enhanced user experience. It integrates Google Analytics and Facebook Pixel for marketing and tracking purposes, and uses Google reCAPTCHA to secure its contact form against spam. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, and security headers are not evident, indicating areas for improvement in compliance and security hardening. From a security perspective, the site benefits from HTTPS encryption and secure form handling but would gain from implementing standard security headers and publishing clear privacy and cookie policies. The absence of WHOIS data is typical for .nz domains with privacy protection and does not detract from the site's legitimacy. Overall, the website presents a professional and trustworthy front with moderate technical maturity and a solid security baseline. The overall risk is low, but strategic enhancements in privacy compliance and security headers are recommended to strengthen trust and regulatory adherence.

S

SeventyTwo

72dpi.co.nz

0

SeventyTwo is a specialist New Zealand-based digital agency with over 15 years of experience, offering a broad range of digital services including website development, e-commerce, custom software, UI/UX design, and digital strategy. The company targets progressive Kiwi businesses and positions itself as a trusted partner in digital transformation. The website reflects a professional and consistent brand with strong client testimonials and a diverse client portfolio. Technically, the site uses modern web technologies such as Google Analytics, Google Tag Manager, Google Maps API, and reCAPTCHA, and is hosted by a reputable New Zealand registrar. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS and reCAPTCHA usage, but lacks some security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

H

Halo 10-Year Residential Guarantee

halo.nz

0

Halo Guarantees Limited operates the Halo 10-Year Residential Guarantee, a specialized service providing building guarantees in New Zealand. The company partners with NZCB approved builders to offer comprehensive coverage for residential building projects, including defect repairs, alternative accommodation, and professional fees. The website is well-structured and targets property owners and builders seeking reliable building guarantees. Technically, the site is built on WordPress using Elementor and Yoast SEO, with Cloudflare DNS and Google Analytics integration, indicating a modern digital infrastructure. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and privacy compliance elements. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy business presence.

A

Apprentice Challenge

apprenticechallenge.nz

0

The Apprentice Challenge website represents a New Zealand-based event focused on celebrating and promoting emerging talent in the construction sector, specifically apprentices in carpentry. The site is professionally designed using WordPress and associated plugins, providing a good user experience and clear navigation. The business is positioned as a niche leader in apprentice competitions, partnering with recognized industry bodies such as BCITO and NZCB. Technically, the site uses modern web technologies and is mobile optimized, though performance is moderate. Security posture is adequate with HTTPS and reCAPTCHA but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business history, supporting legitimacy.

The NZCB Conference 2025 website represents a professional event organized by New Zealand Certified Builders, focusing on sustainable building practices and industry collaboration. The site provides comprehensive event details, including programme, speakers, workshops, and venue information, targeting building professionals and stakeholders in New Zealand. The technical infrastructure is based on the Weebly platform, utilizing standard web technologies and third-party analytics. While the site is accessible and well-structured, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and security enhancement. The absence of WHOIS data for the domain reduces trust slightly but does not detract significantly from the site's legitimacy given the consistent branding and contact information. Overall, the site is a credible resource for its intended audience with room for security and privacy improvements.

N

Nova Medical Finance

novamedical.co.nz

0

Nova Medical Finance is a New Zealand-based medical finance provider specializing in flexible payment plans for a variety of medical procedures including plastic surgery, bariatric surgery, laser eye surgery, dentistry, and fertility treatments. The company emphasizes its doctor ownership and close relationships with leading specialists, positioning itself as a trusted partner for patients seeking financing for life-changing medical treatments. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to its target audience in New Zealand. Technically, the website employs modern web technologies such as Vue.js, Bootstrap, Google Tag Manager, Google Analytics, and Google reCAPTCHA to enhance user experience, tracking, and security. The site is served over HTTPS with no visible security vulnerabilities in the content. However, some security best practices like security headers and explicit cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows good use of HTTPS and anti-bot measures but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration transparency and legitimacy, although the website content and professional presentation suggest a legitimate business. Overall, the site maintains a moderate to good security posture but would benefit from enhanced transparency and compliance features. Strategically, the business should focus on verifying and publishing domain registration details, implementing comprehensive privacy and cookie policies with user consent, adding security headers, and establishing clear incident response and vulnerability disclosure policies to build greater trust and compliance with data protection regulations.

The website steelers.co.nz is currently inaccessible, returning a 503 Service Temporarily Unavailable error indicating maintenance or capacity issues. Due to the lack of accessible content, no business description, contact information, or security policies are available for review. The domain is registered since 2005 with a reputable New Zealand registrar, Voyager Internet Ltd T/A 1st Domains, which also appears to be the hosting provider. No evidence of security mechanisms such as WAF or privacy protection is detected. The absence of HTTPS and security headers, combined with the unavailability of the site, results in a very low security posture and poor digital maturity. Strategic recommendations include restoring website availability, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing clear contact and incident response information.

A

Alden

ultimatecare.co.nz

0

Alden is a New Zealand-based aged care and retirement living provider offering a comprehensive range of elder care services including hospital level care, rest home care, assisted living, independent living, dementia care, and palliative care. The company positions itself as a compassionate and trusted care provider for elders regardless of their means or background. The website is professionally designed using WordPress and Elementor, featuring modern web technologies and integrated analytics tools such as Google Tag Manager and Microsoft Clarity. Navigation is clear and content is relevant to the target audience of elderly individuals and their families seeking aged care solutions in New Zealand. However, the absence of WHOIS data raises questions about domain registration legitimacy, which should be further investigated. Privacy compliance could be improved by implementing cookie consent mechanisms and publishing detailed privacy policies. Security posture is adequate with HTTPS enabled but lacks some recommended security headers and incident response information.

Pukekohe Travel is a well-established, owner-operated New Zealand travel agency with 47 years of experience specializing in escorted tours, cruises, rail tours, leisure, and business travel. The website presents a professional and comprehensive overview of their services, targeting travelers seeking curated travel experiences. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and Google reCAPTCHA to enhance marketing and security. The site is mobile-optimized with good SEO practices and clear navigation, supporting a positive user experience. Security posture is solid with HTTPS enforced and secure forms, though the absence of security headers and cookie consent mechanisms indicates room for improvement. The lack of WHOIS data limits domain legitimacy verification, but the business content and trust indicators suggest a credible operation. Overall, the website is functional, professional, and trustworthy with minor security and privacy compliance gaps.

T

The Shed Shop

theshedshop.co.nz

0

The Shed Shop is a New Zealand-based small business specializing in the custom design, manufacture, delivery, and installation of garden sheds made from timber and pre-painted steel. The company emphasizes fully tailored solutions to meet diverse customer needs across the North Island. Their website reflects a professional and customer-focused approach with clear contact details and testimonials, positioning them as a niche provider in the garden shed market. Technically, the website employs modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, alongside Typekit fonts and Bootstrap framework, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of visible security headers highlight compliance and security gaps. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and registration status, though the website content itself appears legitimate and professional. Overall, the site is accessible, well-structured, and user-friendly but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

Loveridge Builders Ltd is a New Zealand-based construction company specializing in large-scale developments and residential building projects. With 25 years of experience, the company positions itself as a trusted partner for developers and home buyers, offering services from design collaboration to building completion. The website reflects a professional and consistent brand image, emphasizing certifications such as Licensed Building Practitioner and Master Builders Guarantee, which enhance trust and credibility. Technically, the website employs modern web technologies including Vue.js, Google Analytics, and lazy loading for images, contributing to good performance and mobile optimization. However, there is room for improvement in accessibility and security headers implementation. The absence of privacy and cookie policies indicates a compliance gap that should be addressed to meet GDPR and other privacy regulations. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. The lack of WHOIS data limits domain trust assessment, but the business content and certifications suggest legitimacy. Overall, the security posture is moderate with recommendations to enhance header security and privacy disclosures. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance and security best practices will strengthen the company's digital trustworthiness and regulatory adherence.

Nevis Bluff Wines Ltd is a small New Zealand-based winery specializing in Pinot Noir wines from the Central Otago region. The company emphasizes natural winemaking with minimal intervention and targets wine consumers and restaurants. The website is professionally designed with good content quality and clear navigation, including an age verification modal appropriate for alcohol sales compliance. Technically, the site uses modern web technologies such as Google Analytics, Google Tag Manager, Typekit fonts, and Bootstrap framework, providing a moderate performance and good mobile optimization. Security posture is moderate with HTTPS enforced and age verification implemented, but lacks explicit security headers and cookie consent mechanisms. WHOIS data for the domain is unavailable, which reduces trust from a domain registration perspective, though the website content and branding appear legitimate. Overall, the site is functional and professional but could improve privacy compliance and security best practices.

CoverCorp Limited, operating under Absolute Awnings Ltd, is a specialized awning manufacturer and installer based in Auckland, New Zealand. With over 28 years of heritage, the company offers a range of custom awning products including retractable awnings, fixed frame awnings, retractable roof systems, and patio screens. Their business model focuses on providing tailored outdoor shading solutions to residential and commercial clients, supported by consultation and financing options. The website reflects a professional market position with strong customer testimonials and detailed product information.

C

Cavalry LTD

cavalry.co.nz

0

Cavalry LTD operates as a leading outsourced marketing agency based in Auckland, New Zealand, focusing on providing strategic marketing and implementation services to SMEs across New Zealand and Australia. Their key offerings include brand strategy, design, video content, social media management, and brand identity development. The company positions itself as a comprehensive marketing resource for businesses lacking in-house expertise, emphasizing faster and smarter brand market entry. The website content is professional, well-structured, and targets New Zealand SMEs effectively. From a technical perspective, the website employs modern web technologies including Google Tag Manager, Google Analytics, Mailchimp for newsletter management, and responsive design techniques ensuring good mobile optimization. The site loads moderately fast and includes SEO-friendly meta tags and structured navigation. However, there is no detected CMS or hosting provider information, and accessibility features are basic. Security posture is moderate with HTTPS implied but no explicit security headers detected in the provided data. The site uses secure third-party services for forms and tracking but lacks published security policies or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with professional content and business legitimacy. Recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing accessibility to improve compliance and security posture.

The Surveying Company is a New Zealand-based professional service provider specializing in land surveying, planning, and civil engineering consulting. The company targets landowners, developers, and planners within New Zealand, offering expert services to support property subdivision, mapping, and engineering projects. The website presents a professional image with clear branding, consistent messaging, and comprehensive service descriptions, positioning the company as a trusted regional player in the real estate and engineering sectors. From a technical perspective, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google reCAPTCHA for security and analytics. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. The SSL configuration is excellent, ensuring secure communications, but the absence of security headers is a notable gap. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the lack of security headers and absence of an incident response or vulnerability disclosure policy reduce the overall security maturity. Privacy compliance is partial; while privacy and terms of use pages exist, there is no cookie consent mechanism, which may impact compliance with privacy regulations such as GDPR. Overall, the website is trustworthy and professional but would benefit from enhanced security headers, explicit cookie consent, and improved transparency around security policies. The lack of WHOIS data is a concern for domain legitimacy verification, though the website content and contact information support the company's credibility. Strategic improvements in security and privacy compliance will strengthen trust and reduce risk.

C

Carlielle Kitchens

carliellekitchens.co.nz

0

Carlielle Kitchens is a small, family-owned business specializing in kitchen design, manufacture, and installation with over 25 years of experience serving Auckland, New Zealand. The website presents a professional image with clear branding, a good user experience, and relevant content targeting homeowners and property developers. The company emphasizes quality and trust through certifications and a unique 20-year guarantee. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Typekit fonts, indicating moderate digital maturity. However, the absence of privacy and cookie policies and lack of visible security headers suggest areas for improvement in compliance and security. The WHOIS data is unavailable, which limits domain trust verification, but the website content and external partner links support legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security measures.

Eurobike Wholesale Ltd is a New Zealand-based importer and wholesaler specializing in high-quality motorcycle parts and accessories, primarily sourced from Italy. The company focuses on premium brands such as Givi, Brembo, Athena, Spidi, Nolan, Scottoiler, and Domino, targeting motorcycle enthusiasts and retailers within New Zealand. The website presents a comprehensive product catalog with clear navigation and consistent branding, reflecting a medium-sized business with a solid market position in the transportation retail sector. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, lazy loading for images, and integrates analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate with room for improvement in loading speed and technical modernization. From a security perspective, the site uses HTTPS and includes tracking scripts securely. However, there is a lack of visible security headers and no published privacy or cookie policies, which are critical for compliance with data protection regulations such as GDPR. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and branding suggest a legitimate business. No vulnerabilities or exposed sensitive data were detected. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but scores low in privacy compliance and domain legitimacy verification. Strategic improvements in privacy policy publication, security header implementation, and domain registration transparency are recommended to enhance trust and compliance.

Green Valley Dairies is a New Zealand-based dairy manufacturing company specializing in organic and premium milk products, including barista ranges and creams. The company emphasizes farm-to-bottle freshness and operates Marphona Farms, a leading organic and non-organic farming operation. Their market position is strong within the regional dairy manufacturing sector, targeting cafés, food service industries, and retail consumers. The website reflects a professional and consistent brand image with clear product offerings and social media engagement. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and responsive design frameworks like Bootstrap. The site loads with moderate performance and is mobile optimized, though accessibility features are basic. SEO is implemented at a basic level with meta tags and structured data present. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. No forms or sensitive data collection points were detected, reducing immediate risk. The absence of WHOIS data for the domain is unusual and slightly reduces trustworthiness, though the site content and branding appear legitimate. Overall, the website is professional and functional with moderate technical maturity and some compliance shortcomings. Strategic improvements in privacy disclosures, security headers, and WHOIS transparency would enhance trust and security posture.

Wave Shade is a New Zealand-based company specializing in the design and wholesale distribution of retractable wave shade products, primarily targeting homeowners and wholesale customers. The company operates under the parent brand NuRange and emphasizes custom-made, durable, and stylish outdoor shade solutions. Their market position is that of a leading provider within New Zealand, with a focus on quality and user-friendly design. The website reflects a professional and consistent brand image with clear business information and customer engagement features such as testimonials and newsletter subscriptions. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Zendesk Chat, Bootstrap framework, and Vimeo video embedding. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as implementing security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration status. Overall, the security posture is moderate but could be improved with better transparency and technical safeguards. The overall risk assessment suggests a legitimate business with a well-presented online presence but with some gaps in privacy compliance and domain registration transparency. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and verifying domain registration details to improve trust and compliance.

Haunui Farm is a well-established thoroughbred stud farm based in Karaka, Auckland, New Zealand, specializing in breeding racehorses with a professional and comprehensive approach. The business offers a range of services including stallion access, yearling preparation, veterinary care, and bloodstock management, targeting breeders and racehorse owners. The website reflects a reputable and consistent brand with a strong history in the equine industry. Technically, the site uses modern web technologies such as Google Analytics, Google Tag Manager, and lazy loading for images, with a responsive design suitable for mobile users. Security posture is generally good with HTTPS enforced and secure form handling, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap. The domain WHOIS data is missing, which raises concerns about domain registration transparency and trustworthiness, although the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and domain registration clarity.

K

Keith Hay Homes

keithhayhomes.co.nz

0

Keith Hay Homes is a well-established New Zealand family-owned business specializing in the design, manufacture, and sale of transportable and pre-built homes and buildings. Founded in 1938, the company has a strong market presence and reputation for quality and affordability in the residential and commercial construction sectors. Their services include a wide range of home plans, pre-built houses, classrooms, and commercial buildings, supported by financing options and a 5-year personal guarantee. The website reflects a professional and trustworthy brand with comprehensive content and clear contact information. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, HubSpot, Bootstrap, and lazy loading for images, ensuring good performance and mobile optimization. The site is well-structured with SEO best practices and accessible navigation. However, some security headers are not explicitly detected, and no explicit privacy or terms of service pages were found in the provided content. From a security perspective, the site uses HTTPS and secure form submissions, but lacks published security policies or incident response information. The absence of WHOIS data for the domain is a concern for transparency, although the website content and social media presence strongly indicate legitimacy. Overall, the site demonstrates a solid security posture but could improve by adding explicit security headers, privacy policies, and vulnerability disclosure information. The overall risk is moderate with recommendations to enhance transparency and security practices to further build trust and compliance with privacy regulations.

D

Diamonds.co.nz

diamonds.co.nz

0

Diamonds.co.nz is a New Zealand-based online retailer specializing in natural, certified diamonds and jewellery, with a strong emphasis on ethical sourcing and expert customer guidance. Established since 1984, the company positions itself as a trusted market leader offering a wide range of GIA certified diamonds, custom engagement ring creation, and value-added services such as live chat and Zoom consultations. The business model leverages an online-only presence to provide competitive pricing and a transparent purchasing experience. The website reflects a mature digital presence with comprehensive educational content and customer testimonials, reinforcing its credibility and market position. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Hotjar, and Tawk.to for live chat, indicating a sophisticated approach to user engagement and analytics. The site is mobile-optimized with responsive design and lazy loading for performance. However, some accessibility features could be improved, and no CMS or hosting provider details are explicitly detected. SEO practices appear solid with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses secure forms for user login. While no critical vulnerabilities are evident, the absence of security headers and a cookie consent mechanism suggests room for improvement in compliance and security hardening. The lack of WHOIS data limits domain trust verification, but the presence of trusted industry partners and certifications supports legitimacy. Overall, the security posture is good but could benefit from enhanced transparency and incident response readiness. The overall risk assessment is moderate-low, with the main concerns being privacy compliance gaps and missing WHOIS transparency. Strategic recommendations include implementing security headers, adding cookie consent banners, publishing vulnerability disclosure policies, and improving accessibility. These steps will enhance trust, compliance, and security culture, supporting the company’s strong market position and customer confidence.

Rollforming Services Ltd is a New Zealand-based manufacturer specializing in precision light gauge steel roll-formed components for the construction sector. The company offers contract manufacturing services for a variety of steel profiles including framing, trusses, floor joists, purlins, and custom profiles. Backed by Howick Ltd, a notable New Zealand roll forming machine producer, Rollforming Services positions itself as a provider of efficient, accurate, and locally made steel construction solutions. The website reflects a professional and well-branded presence targeting construction businesses seeking smart building materials. Technically, the website employs modern web technologies such as Vue.js, Google Analytics, and marketing automation tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA usage, though lacks some security headers and explicit incident response policies. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy verification. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and compliance features.

Garador is a New Zealand-based manufacturer and supplier of garage doors and openers, targeting residential and industrial customers across the country. The company emphasizes reliability, security, and custom-built solutions, supported by a dealer network and warranty services. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and reCAPTCHA integrated for user interaction and security. Privacy and cookie policies are clearly presented, indicating compliance with data protection standards. However, the absence of WHOIS data raises questions about domain registration transparency, which should be verified for full trust assurance. Security posture is generally good with HTTPS and form protections, but could be enhanced with additional security headers and incident response information. Overall, the site is professional, user-friendly, and well-optimized for SEO and mobile devices.

Pioneer, operated by Genetic Technologies Limited, is a New Zealand-based agricultural company specializing in high-quality hybrid maize seeds and complementary feed products. The company emphasizes local production in the Gisborne region and partners with local growers and merchants to serve New Zealand farmers. Their website provides extensive product information, technical resources, and customer engagement tools such as a hybrid selector and podcast series. The business targets agricultural professionals and farmers seeking reliable seed and feed solutions. Technically, the website uses modern web technologies including Google APIs, Bootstrap, and Vue.js components, delivering a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though some security headers are not explicitly detected. Privacy and cookie policies are present, indicating a baseline compliance posture. However, the absence of WHOIS domain registration data is a notable anomaly that reduces trustworthiness and requires further verification. Overall, the site is professional, content-rich, and trustworthy from a business perspective, but the domain registration gap is a risk factor.

T

The Conference Company

theconferencecompany.com

0

The Conference Company is a professional conference organiser (PCO) based in New Zealand, offering tailored event management services including conferences, exhibitions, awards management, and international conference bids. With over 30 years of industry experience and accreditations from IAPCO and BEIA, the company positions itself as a trusted partner for organizations seeking to connect, engage, and inspire their audiences through expertly managed events. The website reflects a mature business with a medium-sized team and a strong focus on client satisfaction and long-term relationships. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and Google reCAPTCHA, ensuring good performance, mobile optimization, and accessibility. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable anomaly that impacts trustworthiness, though the website content and business credentials appear legitimate. Overall, the site demonstrates professionalism and reliability but would benefit from enhanced transparency and security practices.

Coregas is a well-established manufacturer and distributor of industrial, medical, and specialty gases operating primarily in New Zealand and Australia. The company is backed by major corporate entities including Nippon Sanso Holdings Corporation and Wesfarmers, positioning it strongly in the energy and manufacturing sectors. Their website reflects a professional and comprehensive digital presence with detailed product ranges, services, and corporate information. The business model focuses on supplying compressed gases and cryogenic liquids to a wide range of industries, supported by technical services and safety training. The target audience includes industrial users, laboratories, and specialty gas consumers.

G

Generus Living

generus.co.nz

0

Generus Living is a New Zealand-based company specializing in the development and management of premium retirement villages and aged care facilities. The company positions itself as a leader and innovator in senior living environments, targeting discerning retirees seeking high-quality lifestyle and care. Their business model includes real estate development, operational management, and investment partnerships. The website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, Google Analytics, Facebook Pixel, and Google reCAPTCHA, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with asynchronous loading of scripts and optimized media. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks visible security headers and a published security policy or incident response plan. The absence of a cookie consent mechanism is a privacy compliance gap, especially given the use of tracking technologies. The WHOIS data is unavailable, which raises questions about domain registration transparency, though the website content and presentation suggest legitimacy. Overall, the website is professional and trustworthy with moderate technical and security maturity. Strategic improvements in privacy compliance, security headers, and domain registration transparency would enhance trust and reduce risk.

TRS Tyre & Wheel is a New Zealand-based company specializing in the supply of tyres and wheels for agricultural, construction, forestry, mining, materials handling, and truck sectors. The company offers a broad product range including multiple tyre categories and brands such as Yokohama, Trelleborg, and Mitas. Their website supports trade customers with a login system and provides online search and ordering capabilities, positioning them as a regional supplier with a focus on heavy industry and agriculture. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, StackAdapt advertising, Bootstrap framework, and lazy loading for images. The site is mobile optimized with good SEO and accessibility basics. Security is reasonably well implemented with HTTPS, secure login forms, and cookie consent mechanisms, though some security headers are not explicitly detected and could be improved. The security posture is solid with no obvious vulnerabilities detected in the content. Privacy compliance is supported by comprehensive privacy and cookie policies, and terms and conditions are clearly available. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are published, which could be areas for enhancement. Overall, the website is professional and trustworthy, but the absence of WHOIS data limits verification of domain legitimacy. The business appears credible and established in its sector, with a moderate risk profile primarily due to incomplete domain registration transparency.

V

Vidak

vidak.co.nz

0

Vidak is a New Zealand-based company specializing in the distribution of innovative and modern commercial office furniture. The company positions itself as a leading distributor in New Zealand, serving top corporations and government departments with a wide range of office furniture solutions including workstations, meeting pods, seating, tables, and accessories. The website reflects a professional and well-structured digital presence with clear navigation and mobile optimization, supported by a consistent branding strategy and active social media engagement. Technically, the site employs modern web technologies such as Google Analytics, Google Tag Manager, and image optimization services, alongside responsive design frameworks like Bootstrap. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits the ability to fully verify domain legitimacy, although the website content and social media presence support the business's credibility. Overall, the site scores well on content quality and business credibility but should enhance privacy compliance and security posture to strengthen trust and compliance.

Howick Ltd is a New Zealand-based manufacturer and designer of precision light steel roll-forming machines used globally in the construction industry. With nearly 50 years of experience, the company holds a strong market position as a pioneer in cold formed steel technology, serving developers, builders, and offsite construction companies in over 80 countries. Their product portfolio includes a range of roll-forming machines, custom builds, and software solutions tailored for steel framing applications. The website reflects a mature digital presence with professional design, comprehensive content, and multiple trust indicators such as certifications and awards. Technically, the site employs modern web technologies including Vue.js, Google Analytics, and marketing automation tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA on forms, and no exposed sensitive data, though some security headers could be improved. The absence of WHOIS domain registration data is a notable concern but does not detract significantly from the overall legitimacy given the professional business presence. Overall, Howick Ltd demonstrates a strong business and digital maturity with minor areas for security and compliance enhancement.

F

Filterpro

filterpro.co.nz

0

Filterpro is a New Zealand-based supplier specializing in automotive, light and heavy commercial, and industrial filters, including oil, fuel, air, and cabin filters, as well as lubricants and workshop chemicals. The company operates multiple physical locations across New Zealand, indicating a solid regional presence and a medium-sized business model targeting both B2B and B2C customers in the transportation and manufacturing sectors. The website reflects a professional and consistent brand image with clear contact information and a satisfaction guarantee, supporting its market position as a trusted supplier. Technically, the website employs modern web technologies such as Vue.js, Bootstrap, Google Tag Manager, and Google Analytics, ensuring a responsive and user-friendly experience across devices. While the site is well-structured and optimized for SEO, there is room for improvement in accessibility and performance tuning. The absence of detected CMS suggests a custom or proprietary platform. From a security perspective, the site enforces HTTPS and includes secure login forms with CSRF tokens, but lacks important security headers like Content-Security-Policy and X-Frame-Options. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may expose the company to GDPR compliance risks. The lack of WHOIS data for the domain is unusual but does not currently impact the legitimacy of the business given the professional website and clear contact details. Overall, Filterpro presents a credible and professional online presence with moderate technical maturity and a good security posture. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and reduce risk.