Security Directory

A

Aluro Healthcare NZ Ltd

aluro.co.nz

0

Aluro Healthcare NZ Ltd is a well-established dental products and equipment supplier serving the New Zealand dental industry for over 25 years. The company operates an e-commerce platform offering a wide range of dental consumables, equipment, and professional training courses. Their market position is strong within the local dental sector, supported by professional branding and customer-focused services. The website is designed to cater to dental professionals and consumers, providing educational content and product promotions. Technically, the website employs modern web technologies including Vue.js, Google Analytics, Facebook Pixel, and reCAPTCHA for security. The site is mobile-optimized with good navigation and SEO practices. Security posture is solid with HTTPS enforced and secure forms, though additional security headers could enhance protection. Privacy compliance is basic with a privacy policy likely present but no explicit cookie consent mechanism detected. WHOIS data for the domain is missing, which raises some concerns about domain registration transparency but does not detract significantly from the business credibility based on website content. Overall, the site is professional, trustworthy, and safe for general audiences.

USL Medical is a well-established New Zealand-based supplier of medical consumables, equipment, and protective clothing, serving a broad range of healthcare sectors including public and private hospitals, aged care, and primary care. The company offers an extensive product catalog with over 15,000 SKUs and emphasizes exceptional customer service and comprehensive medical support including training. The website reflects a mature business with consistent branding and a professional online presence. Technically, the site uses modern analytics and marketing tools, is mobile-optimized, and employs HTTPS for secure communications. However, explicit privacy and cookie consent mechanisms are not evident, and WHOIS data for the domain is unavailable, which limits domain registration verification. Security headers could be improved by adding explicit policies. Overall, the site is trustworthy and functional, supporting a large healthcare business in New Zealand.

K

Kiwi Office

kiwioffice.co.nz

0

Kiwi Office is a New Zealand-based e-commerce retailer specializing in stationery, office supplies, furniture, and related products. Established since 1975 and 100% Kiwi owned, the company targets both businesses and individual consumers with a comprehensive product range and trade pricing options. The website offers NZ-wide free shipping over $75 and emphasizes customer service and ease of ordering. Technically, the site employs modern web technologies including Vue.js, Bootstrap, and integrates Google Analytics and HubSpot for marketing and analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS, CSRF protection, and no exposed sensitive data, though HTTP security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. However, WHOIS data for the domain is missing, which raises transparency concerns about domain registration. Overall, the website is trustworthy and professional, but domain registration details should be clarified to enhance legitimacy.

M

Marleen Wholesalers Ltd.

marleen.co.nz

0

Marleen Wholesalers Ltd. is a New Zealand-based wholesale distributor specializing in cycling products and accessories. The company emphasizes strong product support, training, and after-market services, positioning itself as a reputable wholesaler in the cycling retail sector. The website reflects a medium-sized business with a comprehensive product catalog and active social media presence, targeting retailers and cycling enthusiasts within New Zealand. Technically, the website employs modern web technologies including asynchronous loading of analytics and tracking scripts, Google reCAPTCHA for form protection, and responsive design elements to ensure good mobile usability. Security posture is generally good with HTTPS enforced and use of security best practices like CAPTCHA, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. The lack of WHOIS data is a notable concern, reducing domain trustworthiness and suggesting the need for verification of domain registration status. Overall, the website is professional and trustworthy in content and design but should address compliance and security transparency gaps to enhance credibility and user trust.

H

HELLA New Zealand Limited

hella.co.nz

0

HELLA New Zealand Limited operates a professional website focused on LED lighting and automotive electrical accessories, targeting automotive professionals and consumers within New Zealand. The site offers a comprehensive product catalog, reseller information, and multimedia content, positioning itself as a reputable player in the automotive lighting sector. The technical infrastructure leverages modern JavaScript libraries, lazy loading for images, and integrates Google Analytics and Tag Manager for user tracking. While the site is accessible and well-structured, mobile optimization and accessibility are basic, with room for improvement. Security posture is moderate; HTTPS is used, but no explicit security headers were detected, and no cookie consent mechanism is present despite tracking scripts. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial entities. Overall, the website is professional, trustworthy, and serves its business purpose effectively.

E

Enterprise Motor Group (RMVT)

enterprisecars.co.nz

0

Enterprise Motor Group (RMVT) operates a professional and comprehensive used car sales and finance website targeting customers in New Zealand, specifically in Auckland, Hamilton, and Gisborne. The company offers a wide range of used vehicles, flexible finance options, and multiple physical branches, positioning itself as a significant player in the New Zealand used car market. The website is well-structured with clear navigation, multiple interactive features, and detailed vehicle listings, supporting a positive user experience. Technically, the site employs modern technologies including Vue.js, Google Analytics, Facebook and TikTok pixels, and Google reCAPTCHA, indicating a mature digital infrastructure. Security practices are generally strong with HTTPS, CSRF tokens, and CAPTCHA protections; however, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. The absence of WHOIS data for the domain is a notable concern, reducing trust in domain legitimacy despite the professional website presence. Overall, the site demonstrates good business credibility and technical maturity but would benefit from enhanced transparency and privacy compliance.

D

Dominator

dominator.co.nz

0

Dominator is a New Zealand-based company specializing in manufacturing and distributing high-quality garage doors and openers. The company operates a network of 30 distributors nationwide, providing comprehensive door-to-door services including selection, installation, and after-sales support. Their website reflects a professional and consistent brand image, targeting homeowners and businesses seeking durable garage door solutions. Technically, the website employs modern frameworks such as Vue.js and Bootstrap, integrates multiple analytics and marketing tools, and uses HTTPS with reCAPTCHA for form security. However, the absence of WHOIS data for the domain raises some concerns about domain registration transparency. Security headers are not explicitly detected, suggesting room for improvement in security hardening. Overall, the site is well-structured, mobile-optimized, and provides clear contact channels, but could enhance trust by publishing security policies and incident response information.

Active+ is a well-established healthcare provider in New Zealand specializing in physiotherapy, occupational therapy, rehabilitation, and wellness services. The company operates a large network of over 1400 clinicians and multiple branded clinics across the country, positioning itself as a leading provider in its sector. The website reflects a professional and comprehensive service offering targeting individuals seeking health and rehabilitation support. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, Hotjar, and Google reCAPTCHA to enhance user experience and security. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy policies and cookie consent mechanisms are present, supporting basic compliance. Overall, the website and business present a trustworthy and professional image with no critical security or content safety concerns.

Buteline NZ Ltd is a New Zealand-based manufacturer specializing in plumbing systems for potable water and gas applications, serving both domestic and commercial markets. The company operates internationally with dedicated sites for New Zealand, Malaysia, and the United Kingdom, reflecting a solid market presence. Their product portfolio includes PB Plumbing Systems, Pexline, Bute-Gasline, and underfloor heating systems, positioning them as a key player in the plumbing manufacturing sector. The website branding and content consistently reflect their business identity and market focus. Technically, the website employs modern web technologies including Vue.js, Bootstrap, and Google Analytics, ensuring a responsive and user-friendly experience. The site is mobile optimized and includes SEO best practices such as meta tags and structured data. However, some security best practices like security headers are not visibly implemented, and no CMS or hosting provider details are evident. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and includes a cookie consent banner indicating privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration details raises concerns about domain legitimacy and trustworthiness. The lack of explicit security policies or incident response information suggests an area for improvement in security transparency. Overall, Buteline's website is professional and trustworthy from a content and usability standpoint but would benefit from enhanced security measures and clearer domain registration transparency to improve its risk profile and stakeholder confidence.

L

Lightingplus

lightingplus.co.nz

0

Lightingplus is a well-established New Zealand-based retailer specializing in lighting products, offering a wide range of lighting fixtures, lamps, bulbs, and related accessories both online and through numerous physical stores nationwide. The company emphasizes quality and variety, targeting residential and commercial customers seeking lighting solutions. Their market position is strong within New Zealand, supported by a comprehensive store network and an e-commerce platform. Technically, the website leverages modern web technologies including Vue.js and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Adform, indicating a mature digital marketing strategy. Security-wise, the site uses HTTPS with appropriate security headers and CSRF protections, though explicit security policies and incident response information are not published. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and cookie consent mechanisms. The lack of public WHOIS data is typical for .nz domains and does not detract from the site's legitimacy. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and transparency.

A

Auto Super Shoppes

autosupershoppes.co.nz

0

Auto Super Shoppes is a large New Zealand-based network of independently owned automotive repair workshops, boasting over 100 locations nationwide. The company positions itself as New Zealand's most trusted mechanics, offering a wide range of vehicle servicing and repair services including Warrant of Fitness inspections, car servicing, tyre supply, and diagnostics. Their target audience is vehicle owners across New Zealand seeking reliable and professional automotive services. The website reflects a professional brand with consistent messaging and trust indicators such as MTA approval and customer testimonials. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag for marketing and analytics. Hosting appears to be via a CDN likely Amazon CloudFront, providing moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA on forms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is basic with a privacy policy and terms of service present, but no cookie consent mechanism is detected. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or data retrieval issues, which impacts domain legitimacy verification. Overall, the website is professional and trustworthy in appearance and content, but the missing WHOIS data and incomplete security headers suggest areas for improvement. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and verifying domain registration details to strengthen trust and compliance.

S

SeventyTwo

seventytwo.nz

0

SeventyTwo is a specialist New Zealand-based digital agency with over 15 years of experience in delivering world-class digital products including websites, e-commerce platforms, web and native apps, custom software, and digital strategy services. The company targets progressive Kiwi businesses and positions itself as a trusted partner in digital transformation and online brand development. Their website reflects a professional and consistent brand image supported by a strong portfolio of clients and testimonials. Technically, the website employs modern web technologies such as Vue.js, Google Analytics, Google Tag Manager, and Google Maps API. It is hosted by a reputable New Zealand registrar and shows good mobile optimization and SEO practices. However, there is room for improvement in accessibility and performance optimization. Security posture is solid with HTTPS and reCAPTCHA integration, but lacks explicit security headers and DNSSEC. From a security and compliance perspective, the site lacks visible privacy and cookie policies, which is a significant compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided. The domain registration is consistent and legitimate, supporting the business credibility. Overall, the website is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing incident response contacts to improve trust and compliance.

N

New Zealand Certified Builders

nzcb.nz

0

New Zealand Certified Builders (NZCB) is a prominent membership association in New Zealand focused on certifying and supporting qualified builders, apprentices, and homeowners seeking reliable construction services. The organization positions itself as a leader in the building industry with strict entry criteria ensuring high standards. Their services include builder certification, apprenticeship support, industry events, and a Halo 10-Year Residential Guarantee providing post-build protection. The website is professionally designed, well-branded, and targets homeowners, builders, and apprentices in New Zealand. Technically, the site is built on WordPress with Elementor and WooCommerce, integrating modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. Security posture is good with HTTPS and secure forms, though explicit security headers and policies are lacking. Privacy compliance is basic with no visible privacy or cookie policies. WHOIS data is unavailable, which reduces domain trustworthiness but the website content and external partnerships support legitimacy. Overall, the site is a credible and professional platform for the New Zealand building community.

T

TLANZ MSuites

tlanzmsuites.nz

0

TLANZ MSuites is a small New Zealand-based service provider specializing in mediation and meeting room hire in Auckland. The website presents a professional and focused business model targeting organizations and professionals seeking dispute resolution environments. Technically, the site is built on WordPress using the Divi theme and WooCommerce platform, integrating modern marketing and analytics tools such as Google Tag Manager and Hotjar. While the site is functional and moderately optimized for mobile and SEO, it lacks explicit privacy and terms of service documentation, which impacts its privacy compliance score. Security posture is basic with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the domain registration is consistent and legitimate, matching the business's New Zealand focus and recent establishment in 2024.

L

Law News

lawnews.nz

0

Law News is a specialized media platform delivering up-to-date legal news, case summaries, and legislative updates focused on New Zealand. It serves legal professionals and interested residents by providing authoritative content as the official news platform for The Law Association. The website is built on WordPress using the Divi theme, enhanced with SEO and advertising plugins, and integrates modern tracking and push notification technologies. The technical infrastructure is solid with HTTPS enforced and a good security posture, although DNSSEC is not enabled. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is professional, trustworthy, and well-positioned in its niche.

B

Benefitz

benefitz.co.nz

0

Benefitz is a well-established New Zealand-based business specializing in advertising, design, printing, signage, and web development services. With over three decades of experience, the company positions itself as a future-thinking, sustainable organization, evidenced by its Toitū carbonreduce certification and commitment to reducing its carbon footprint. The website reflects a professional and comprehensive digital presence, showcasing a broad portfolio of services and projects, targeting businesses and organizations seeking integrated marketing and design solutions. Technically, the website is built on WordPress using Elementor and WooCommerce, integrating modern analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain www.benefitz.co.nz is a notable concern, reducing domain trustworthiness despite the professional website content. Privacy and cookie policies are missing, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly presented, enhancing business credibility. Overall, Benefitz presents a strong business and digital presence with room for improvement in privacy compliance and security transparency. Verification of domain registration and addition of privacy-related policies would enhance trust and compliance.

ECC is a New Zealand-based retailer and exclusive representative of leading global lighting and furniture brands. The company targets both residential and professional markets, offering a curated selection of high-quality products. Their website serves as a modern e-commerce platform integrated with Shopify and enhanced with marketing and analytics tools such as HubSpot and Facebook Pixel. The site demonstrates a good level of digital maturity with responsive design and moderate performance. Security posture is strong with HTTPS, security headers, and Cloudflare DNS/CDN services, although DNSSEC is not enabled. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages detected. Overall, ECC presents a professional and trustworthy online presence consistent with its business claims.

H

Harrows NZ

harrows.co.nz

0

Harrows NZ is a New Zealand-based commercial furniture design and manufacturing company established in 2006. The company specializes in creating tailored furniture solutions for workplaces, public spaces, wellness, and hospitality sectors. Their website reflects a professional and modern digital presence with a focus on product showcasing and user engagement. The business targets organizations and enterprises seeking quality commercial furniture with an emphasis on social interaction and design excellence. Technically, the website employs modern JavaScript libraries, lazy loading, and Cloudflare DNS services, indicating a moderate level of digital maturity and performance optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the website is trustworthy and credible, but could improve in privacy and security transparency.

D

Drive South

drivesouth.co.nz

0

Drive South operates the Drivesouth.co.nz website, a prominent automotive marketplace and motoring news platform focused on New Zealand's South Island. The site offers new and used vehicle listings, dealer directories, and motoring news and reviews, positioning itself as a leading regional resource for car buyers and enthusiasts. The business model centers on providing comprehensive automotive content and facilitating vehicle sales through an online platform. The website's content and branding are consistent and professionally presented, targeting consumers interested in vehicles and motoring information in New Zealand.

O

ODT Store

odtshop.co.nz

0

ODT Store is a small New Zealand-based e-commerce retailer specializing in Otago Daily Times publications and curated local products. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Shopify Payments and third-party apps for product options and marketing. The business targets general consumers interested in regional publications and merchandise, positioning itself as a niche local brand with a consistent and professional online presence. Technically, the site demonstrates good performance and mobile optimization but could improve accessibility and security headers. Security posture is solid with HTTPS and secure payment processing, though DNSSEC is not enabled and cookie consent mechanisms are absent, which may affect privacy compliance. Overall, the domain registration is consistent with the business profile, and no suspicious indicators were found. The site uses multiple analytics and marketing tools, with moderate user tracking. Recommendations include enhancing privacy compliance, enabling DNSSEC, and improving security headers to strengthen trust and security.

Certified Plans is a New Zealand-based company specializing in providing architecturally designed house plans that are certified and ready for immediate building or customization. The platform connects customers with over 170 NZCB approved builders nationwide, offering flexibility and control in the home building process. The website targets New Zealand residents interested in urban, rural, or coastal living solutions. Technically, the site is built on WordPress with common plugins such as Gravity Forms and uses Google Tag Manager and reCAPTCHA for analytics and security. The site is moderately optimized for performance and mobile use, with good SEO practices and structured data. Security posture is adequate with HTTPS and form protections, but lacks some security headers and explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and safe for general audiences, though privacy compliance could be improved.

D

Designers Institute of New Zealand

bestawards.co.nz

0

The Best Awards website is a well-established platform managed by the Designers Institute of New Zealand, showcasing a comprehensive range of design awards across multiple disciplines. It serves design professionals and organizations in New Zealand, providing entry management, award showcases, and sponsorship opportunities. The domain is mature, dating back to 1999, supporting the credibility of the business. Technically, the site uses modern JavaScript frameworks, likely React, and hosts media assets on AWS S3, indicating a contemporary digital infrastructure. However, the site lacks explicit privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The security posture is adequate with HTTPS enabled but could be enhanced by enabling DNSSEC and adding security headers. Overall, the site is professional, trustworthy, and safe for general audiences, with moderate tracking via Google Analytics and Tag Manager.

S

Scoop Publishing Ltd

scoop.co.nz

0

Scoop is an established New Zealand independent news media company, operating since 1996, providing up-to-the-minute news, press releases, analysis, and opinion pieces focused on New Zealand politics, government, and society. The website serves a broad audience including the general public, media professionals, and government stakeholders. It operates a freemium business model with a Pro license required for professional or work-related use, supported by an ethical paywall. The company maintains a network of subsidiary and partner sites covering various news niches and regions within New Zealand. Technically, the website uses modern web technologies including Google Analytics, Google Tag Manager, and Google Publisher Tags for advertising and analytics, with a responsive design optimized for mobile devices. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy compliance mechanisms could be improved. WHOIS data is unavailable, which slightly reduces trustworthiness, but the website's content quality, branding consistency, and external verifications support its legitimacy. Overall, Scoop presents as a credible and professional media outlet with room for enhanced privacy and security transparency.

O

Otago Daily Times

odt.co.nz

0

Otago Daily Times is a reputable regional news media outlet based in New Zealand, providing comprehensive news coverage for Otago and surrounding regions. The website offers a mix of free and subscription-based premium content, targeting a general audience interested in local and international news. The business operates under the Allied Press group, indicating a stable market position in the media sector. Technically, the site is built on Drupal 7 with modern web technologies including Bootstrap and jQuery, and integrates multiple analytics and advertising platforms such as Google Analytics and Taboola. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and standard security headers present, though improvements can be made in cookie consent and accessibility. WHOIS data is not publicly available due to .nz domain policies, which limits domain legitimacy verification, but the website content and branding strongly indicate a legitimate and trustworthy entity. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance and security posture scores.

C

Creative People

creativepeople.co.nz

0

Creative People is a small Auckland-based digital agency specializing in website strategy, design, development, branding, and graphic design. The company targets businesses and organizations seeking comprehensive creative services in New Zealand. The website is professionally designed using the Squarespace platform, featuring a clear navigation structure and relevant project portfolios. Technically, the site employs modern web technologies and enforces HTTPS with HSTS, ensuring good baseline security. However, the absence of WHOIS registration data for the domain www.creativepeople.co.nz raises concerns about domain legitimacy and ownership. Additionally, the site lacks privacy, cookie, and terms of service policies, which impacts compliance and trust. Overall, the business presents a professional front but should address domain registration and privacy compliance to enhance credibility and security.

F

Firebrand

firebrand.nz

0

Firebrand is a well-established marketing and digital transformation agency based in Dunedin, New Zealand, founded in 2014. The company offers a comprehensive suite of services including digital marketing, website and digital design, branding, SEO, strategy, custom development, and content creation such as videography and photography. Their market position is strong within New Zealand, supported by a reputable client portfolio and multiple government accreditations. Technically, the website is built on modern frameworks like Next.js and React, with SilverStripe CMS backend, and uses Cloudflare for DNS and likely CDN services. The site is performant, mobile-optimized, and SEO-friendly. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, Firebrand demonstrates a professional and trustworthy online presence with room for improvement in security headers and privacy compliance.

G

Growth Engine

growthengine.co.nz

0

Growth Engine is a New Zealand-based consulting company specializing in digital marketing, process automation, and artificial intelligence solutions to help businesses grow and scale. The company positions itself as a niche player offering tailored consulting services to improve online presence, operational efficiency, and innovation through AI. The website is professionally designed using the Squarespace platform, featuring clear navigation and relevant content that targets businesses seeking digital transformation. Technically, the site employs modern web technologies, including HTTPS with HSTS, Google Fonts, and Google Tag Manager for analytics. However, the absence of explicit privacy and cookie policies, as well as missing WHOIS domain registration data, slightly detracts from the overall trust and compliance posture. Security-wise, the site benefits from strong SSL configuration but could improve by adding more security headers and formal incident response information. Overall, the website reflects a credible small consulting business with room for enhanced privacy compliance and transparency.

G.N Carter Builders is a small, locally focused building company based in Opononi, New Zealand, specializing in new home construction, renovations, additions, alterations, and maintenance services. The company emphasizes its local roots and certification by the Certified Builders Association of New Zealand, positioning itself as a trusted and experienced builder in the Far North region. The website reflects a professional but modest digital presence hosted on the Weebly platform, with clear service descriptions and contact information. However, the domain WHOIS data is missing, which raises concerns about the domain's registration legitimacy despite the active website content. Technically, the website uses an older version of jQuery and standard Weebly scripts, with Google Analytics and Snowplow for visitor tracking. The site is mobile responsive and has basic SEO and accessibility features but lacks modern security headers and explicit privacy or cookie policies. The absence of WHOIS data and security policies reduces the overall trustworthiness and compliance posture. From a security perspective, the site benefits from HTTPS but suffers from outdated libraries and missing security headers. There is no evidence of incident response or vulnerability disclosure mechanisms. Privacy compliance is minimal, with no cookie consent or GDPR indicators. Overall, the site is functional and safe for general audiences but requires improvements in security, privacy, and domain legitimacy verification. Strategically, the business should prioritize updating its technical stack, implementing comprehensive privacy and security policies, and verifying domain registration to enhance trust and compliance. These steps will improve the company's digital maturity and reduce potential risks associated with outdated technology and unclear domain status.

Roose Butcher Builders is a family-owned custom home building company operating in South Auckland, New Zealand, specializing in new home construction, renovations, and maintenance services. The company emphasizes nearly two decades of experience and employs qualified builders to ensure high-quality craftsmanship. Their market position is strengthened by membership in Master Builders and the Licensed Building Practitioner certification, providing customers with trust and assurance. The website serves as a professional digital presence showcasing their services, projects, and contact options. Technically, the website is built on the Weebly/EditMySite platform, utilizing common web technologies such as jQuery and Google Analytics. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features and comprehensive SEO optimization. Security practices are basic, with HTTPS implied but no detected security headers or explicit privacy and cookie policies, indicating room for improvement in compliance and security posture. From a security perspective, the site does not expose sensitive data and uses standard analytics tools, but the absence of privacy policies and security incident contacts represents compliance gaps. The lack of WHOIS data limits domain legitimacy verification, which slightly reduces trustworthiness. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures. The overall risk is moderate, with recommendations to implement privacy and cookie policies, improve security headers, verify domain registration, and establish incident response contacts to strengthen trust and compliance.

S & J Mackay Builders is a small, award-winning construction company specializing in new home builds and renovations primarily in Wellington, Kapiti Coast, and surrounding regions in New Zealand. The company emphasizes quality craftsmanship and personalized service, managing a limited number of projects annually to ensure attention to detail. Their market position is strong locally, supported by multiple House of the Year awards and certifications such as Registered Master Builder and Licensed Building Practitioner. The website reflects a professional business with clear service offerings and contact information but lacks comprehensive privacy and cookie policies, which are important for compliance and user trust. Technically, the website is built on the Weebly platform using older JavaScript libraries like jQuery 1.8.3, which may introduce security vulnerabilities. The site uses Google Analytics and Tag Manager for tracking, but no advanced security headers or policies are evident. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, although the website content and branding are consistent with a legitimate small business. Security posture is moderate with room for improvement, especially in updating libraries, implementing security headers, and adding privacy compliance documentation. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures to strengthen trust and reduce risk.

C

CWB Construction

cwbconstruction.co.nz

0

CWB Construction is a small, award-winning residential construction company based in Auckland, New Zealand, specializing in high-end new homes and renovations. The company emphasizes craftsmanship and personalized service, targeting discerning homeowners in the Auckland region including Rodney, Orewa, Riverhead, Coatesville, Red Beach, and Whangaparaoa. Their market position is strengthened by industry recognition such as Gold and Top 100 awards at the 2023 Registered Master Builders House of the Year Competition. Technically, the website is built on a proprietary CMS platform (GoodWebsiteCompany Editor) and uses common web technologies including jQuery and Google Analytics. The site is hosted by Freeparking Limited, a New Zealand-based registrar and hosting provider, consistent with the business location. Security posture is moderate with HTTPS enforced but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but could improve in compliance and security best practices.

S

Sitetech Solutions Ltd T/A SiteName

sitehost.co.nz

0

SiteHost, operated by Sitetech Solutions Ltd T/A SiteName, is a New Zealand-based hosting provider specializing in cloud containers, virtual private servers, dedicated servers, and domain registration services. The company targets New Zealand businesses and developers, offering a range of scalable hosting solutions with a strong emphasis on performance and customer satisfaction. The website reflects a mature business with over 20 years in the industry and a significant customer base hosting over 30,000 websites. Technically, the website employs modern web technologies including Alpine.js and Tailwind CSS, delivering a fast, mobile-optimized, and accessible user experience. The infrastructure appears self-hosted with a focus on performance and usability. SEO and metadata are well implemented, supporting good search engine visibility. From a security perspective, the site uses HTTPS and has a domain status of OK, but lacks DNSSEC and explicit security headers. No privacy or cookie policies were found, indicating room for improvement in compliance and transparency. No incident response or vulnerability disclosure information is published, which could be enhanced to build trust. Overall, SiteHost presents a professional and trustworthy hosting service with strong business credibility and technical maturity. Strategic improvements in privacy compliance, security policy publication, and DNS security would further strengthen their security posture and customer trust.

W

Wizbang Onetap

wizbang.co.nz

0

Wizbang Onetap is a well-established hospitality technology company specializing in POS systems tailored for cafés, restaurants, bars, hotels, and large venues. With over 25 years of experience since 1998, they serve a broad market across New Zealand, Ireland, Australia, and the Pacific, supporting over 2,000 venues. Their product suite includes POS hardware, analytics, ordering systems, and stock management, supported by 24/7 local customer service. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted on DreamHost, and integrates Google Analytics and Tag Manager for tracking. The site is well-optimized for SEO and mobile devices, with good performance and accessibility standards. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and DNSSEC are missing. Privacy compliance is partial, with a privacy policy and terms of service present but lacking a cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Three NZ

threenow.co.nz

0

The website content analyzed is a region-restriction error page for the domain cdn.fullscreen.nz, indicating that the content is only available in New Zealand. The page is minimalistic, with no interactive elements, forms, or contact information. The metadata and Open Graph tags identify the site as related to Three NZ, a telecommunications or media service provider in New Zealand. The lack of WHOIS data for the subdomain is typical for CDN subdomains and does not indicate suspicious activity. The technical infrastructure is basic, with no advanced frameworks or analytics detected. Security posture is minimal with no security headers or privacy policies present. Overall, the site is functional for its purpose but lacks comprehensive security and privacy features.

S

Spruik

spruik.com

0

Spruik is a New Zealand-based integrated creative agency with over 25 years of experience in branding, strategy, media, and culture services. The company focuses on aligning vision, culture, and brand with business strategy to deliver impactful results for brand owners and businesses. Their website demonstrates a strong market position with professional design, multimedia content, and a clear presentation of services and client relationships. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on Freeparking's infrastructure. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

N

North Harbour Club

northharbourclub.co.nz

0

North Harbour Club is a well-established non-profit business networking organization based in New Zealand, founded in 1995. The club focuses on providing networking opportunities, events, awards, and community support primarily for North Shore business people and the regional community. The website reflects a mature digital presence with good branding and structured data, supporting its role as a regional business club. Technically, the site is built on WordPress with modern plugins like Elementor and JetEngine, integrating Google Analytics and Tag Manager for marketing and analytics. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some security headers and explicit privacy policies. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

S

STEP NZ

stepnz.org

0

STEP NZ is the New Zealand branch of the global professional association STEP, specializing in family inheritance and succession planning. The website serves as a professional portal for practitioners in New Zealand, offering information about the association and its services. The site is built on the Wix platform, leveraging modern web technologies and providing a responsive design suitable for desktop and mobile users. While the technical infrastructure is solid and the site is well-branded, there is a lack of explicit privacy and cookie policies, which are important for compliance and user trust. Security posture is generally good with HTTPS enforced, but could be improved by adding security headers and incident response information. Overall, the website presents a credible and professional image appropriate for its niche audience.

T

The Law Association of New Zealand

thelawassociation.nz

0

The Law Association of New Zealand is a well-established professional organization representing legal professionals across New Zealand. The website serves as a comprehensive platform offering membership services, continuing professional development courses, legal resources, and advocacy. The organization positions itself as a central hub for lawyers, legal executives, and law students to connect and grow professionally. Technically, the website is built on a modern WordPress infrastructure using the Divi theme and several plugins to enhance functionality, including e-commerce capabilities via WooCommerce and event management. The site demonstrates good performance and mobile optimization, with a clear navigation structure and professional design. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and explicit security policies could enhance trust further. Overall, the website reflects a credible and professional presence aligned with the organization's long history and mission.

S

Sitetech Solutions Ltd T/A SiteName

sitehost.nz

0

SiteHost, operated by Sitetech Solutions Ltd T/A SiteName, is a well-established New Zealand-based hosting provider offering a comprehensive range of hosting services including cloud containers, virtual private servers, dedicated servers, GPU hosting, and private cloud solutions. The company targets New Zealand businesses and developers seeking reliable and scalable hosting infrastructure. With over 20 years in business and more than 30,000 websites hosted, SiteHost positions itself as a trusted and professional player in the local hosting market. The website content is rich, professionally designed, and optimized for mobile devices, providing clear navigation and detailed service descriptions.

B

Bridgestone Tyre Centre Westgate

bridgestonewestgate.co.nz

0

Bridgestone Tyre Centre Westgate is a local independent tyre service provider based in Westgate, Auckland, New Zealand, with over 20 years of community service. The business offers a range of tyre-related services including new tyres, puncture repair, run flat tyres, wheel balancing, wheel alignment, and tyre rotation. The website is professionally designed using Squarespace CMS and integrates modern web technologies such as Google Tag Manager and Facebook SDK for marketing and analytics. Contact information is clearly presented, including phone, email, physical address, and a contact form, enhancing customer accessibility. However, the absence of a privacy policy and cookie consent mechanism indicates compliance gaps with privacy regulations.

P

Paintrite NZ Limited

paintrite.co.nz

0

Paintrite NZ Limited is a small, family-operated painting service company specializing in residential and commercial painting in the Auckland and Coromandel regions of New Zealand. With over 25 years of experience, the company offers a broad range of services including interior and exterior painting, roof painting, plastering, and restoration. The website positions the company as a trusted local provider with certifications such as Dulux Accredited Painter and Ebix Trades Monitor approval, enhancing its credibility in the market. Technically, the website is built on WordPress using the Oxygen Builder framework, leveraging modern web technologies such as jQuery and Google Fonts. The site is mobile-optimized with good SEO practices and moderate performance. Hosting and domain registration are handled by reputable providers, with Cloudflare DNS in use, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and formal privacy or cookie policies, indicating areas for compliance and security improvement. No forms are present on the homepage, reducing immediate data collection risks, but the absence of privacy and cookie policies may expose the company to regulatory scrutiny. Overall, the website is professional and trustworthy with a solid business presence but would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

The Good Website Company is a small New Zealand-based business specializing in website design and hosting services with a unique socially conscious business model that donates a portion of hosting fees to charity. The company targets small to medium businesses seeking affordable, functional websites optimized for mobile and search engines. The website is built on the Weebly platform, utilizing standard web technologies including jQuery and Google Analytics for tracking. While the site demonstrates good content quality, clear navigation, and a consistent brand message, it lacks critical privacy and cookie policies and does not provide explicit security or incident response information. The WHOIS data is unavailable, raising concerns about domain legitimacy. Overall, the business appears professional but would benefit from enhanced transparency and security practices.

N

NoCowboys Limited

nocowboys.co.nz

0

NoCowboys Limited operates an online platform dedicated to connecting New Zealand residents with trusted tradespeople and businesses, including builders, mechanics, painters, and plumbers. The website serves as a comprehensive rating and review site, positioning itself as the original Kiwi rating platform with a substantial number of user-generated ratings. Its business model revolves around facilitating informed decisions for consumers and providing marketing support for businesses through reputation management and job posting services. Technically, the website employs a modern JavaScript stack including jQuery, Google Tag Manager, Facebook SDK, and Google reCAPTCHA to enhance user interaction and security. The site is mobile-optimized with good SEO practices and a professional design, although accessibility features are basic. Performance is moderate, and the site uses HTTPS, but lacks some advanced security headers. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, impacting overall trustworthiness. Overall, NoCowboys presents a professional and trustworthy front for its business niche but should address privacy compliance and security best practices to enhance user confidence and regulatory adherence.

The website certified.co.nz currently serves a default cPanel hosting placeholder page indicating that the site is not configured or has been moved. The domain is registered to Sitetech Solutions Ltd T/A SiteName, a hosting provider based in New Zealand, with a domain age dating back to 2000. There is no active business content, marketing information, or services presented on the site. The only contact information is a webmaster email address at the domain. From a technical perspective, the site uses Apache and cPanel technologies with DNS hosted on Cloudflare name servers. The page is basic and minimally optimized for mobile devices, with no detected CMS or advanced frameworks. There are no scripts, analytics, or tracking technologies present. Performance is moderate but limited by the lack of actual content. Security posture is weak due to the absence of HTTPS enforcement and security headers. The site exposes a default placeholder page which may leak information about server configuration. No privacy, cookie, or terms of service policies are present, indicating poor compliance with data protection regulations. No incident response or vulnerability disclosure information is available. Overall, the site represents an inactive or misconfigured domain with low trustworthiness and minimal business credibility. Strategic recommendations include properly configuring the website with HTTPS, removing default placeholder pages, implementing security best practices, and publishing privacy and cookie policies to improve compliance and user trust.

F

Forsyth Barr Stadium

forsythbarrstadium.co.nz

0

Forsyth Barr Stadium is a prominent event venue located in Dunedin, New Zealand, known for hosting a wide range of sports, concerts, conferences, and community events. The stadium offers unique features such as a real grass field under a transparent roof and provides services including venue hire, membership programs, and hospitality. The website reflects a well-established business with a domain age since 2009, consistent with its market presence. Technically, the website is built on the SilverStripe CMS platform and leverages modern web technologies including Bootstrap, jQuery, and Font Awesome. It integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital marketing approach. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the website uses HTTPS and Cloudflare for DNS and CDN services, but lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism, which could be improved to meet GDPR standards fully. No incident response or vulnerability disclosure information is provided. Overall, Forsyth Barr Stadium's website is credible, professionally maintained, and serves its business purpose effectively. Strategic improvements in security headers, DNSSEC, and privacy compliance would further strengthen its security and trustworthiness.

T

Tempo

tempo.co.nz

0

Tempo is a New Zealand-based guided investment app that offers users proactive and ongoing investment advice tailored to their goals and risk comfort. The platform is backed by Forsyth Barr, a recognized investment expert firm, positioning Tempo as a trusted player in the NZ investment advisory market. The website presents a professional and modern interface, leveraging Webflow CMS and integrating analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. However, the absence of visible privacy and cookie policies, as well as lack of explicit contact information, indicates gaps in privacy compliance and user transparency. Security posture is strong with HTTPS and security headers in place, but the lack of WHOIS data for the domain www.tempo.co.nz raises questions about domain registration legitimacy. Overall, the platform appears credible and professionally managed but would benefit from enhanced privacy disclosures and verified domain registration.

L

Leveraged Equities

leveragedequities.co.nz

0

Leveraged Equities is a New Zealand-based financial services company specializing in margin lending solutions, helping investors leverage their existing investment portfolios. Founded in 1994, the company positions itself as a specialist with over 25 years of experience and strong relationships with sharebroking firms in the local market. The website presents a professional and clear overview of their services, targeting investors interested in margin lending opportunities. Technically, the website employs modern web technologies including Bootstrap and Google Tag Manager for analytics. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, there is room for improvement in security headers and privacy compliance mechanisms such as cookie consent banners. The absence of visible contact information and security policies limits transparency. From a security perspective, the site shows a good baseline with HTTPS and no exposed sensitive data. The lack of WHOIS data due to privacy protection is typical for financial firms but reduces domain transparency. No critical vulnerabilities or security issues were detected in the provided content. Overall, the site demonstrates a moderate to good security posture but would benefit from enhanced privacy compliance and security best practices. Strategically, the company should focus on improving user trust by adding clear contact details, implementing cookie consent, and publishing security policies. These steps will enhance compliance and user confidence, supporting their established market position.

O

Octagon Asset Management Ltd

octagonasset.co.nz

0

Octagon Asset Management Ltd is a boutique funds management company based in New Zealand, launched in November 2021. The company offers a range of nine professionally-managed investment funds targeting investors seeking diversified portfolio options. Their website is professionally designed using Silverstripe CMS and Bootstrap, with a focus on clear navigation and mobile responsiveness. The technical infrastructure includes Google Tag Manager for analytics and tracking. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy compliance is adequate with a clear privacy policy and terms of service, though no cookie consent mechanism was detected. WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency but does not negate the professional presentation and content of the site.

S

Summer KiwiSaver scheme

summer.co.nz

0

Summer KiwiSaver scheme is a New Zealand-based financial service provider specializing in KiwiSaver retirement savings plans. The website offers comprehensive information about various investment options, fund performance, and educational resources targeted at New Zealand residents interested in retirement savings. The business is associated with Forsyth Barr, a known financial services company in New Zealand, indicating a credible market position within the KiwiSaver sector. The website is built on Silverstripe CMS and integrates modern tracking and analytics tools such as Google Tag Manager, Google Analytics, and Facebook Pixel, reflecting a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS usage and asynchronous loading of tracking scripts; however, the absence of security headers and explicit privacy and cookie policies indicates room for improvement. The lack of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and business association suggest legitimacy. Overall, the site scores moderately well on content quality, technical implementation, and business credibility but needs enhancements in privacy compliance and security best practices.

A

Ace Motorsport

acemotorsport.co.nz

0

Ace Motorsport is a small Auckland-based business specializing in go-kart racing experiences using German manufactured Rimo karts on a street-style outdoor track. The company targets motorsport enthusiasts and corporate or party event organizers, offering competitive racing and event packages. The website is built on the Wix platform, featuring a professional design and moderate technical performance with HTTPS enabled. However, the absence of WHOIS data raises concerns about domain registration legitimacy. Security posture is moderate with HTTPS but lacks security headers and privacy policies. Contact information and compliance documentation are missing, limiting trust and privacy compliance. Overall, the site provides a good user experience but requires improvements in security and compliance to enhance credibility.