Security Directory

Fuse Creative is a small Auckland-based brand design and creative agency established in 2006. The company offers services in brand strategy and design, advertising and marketing, and engagement and culture change. Their website presents a professional portfolio showcasing various projects for clients, indicating a solid market presence in the New Zealand media sector. The business targets organizations seeking creative brand and marketing solutions, positioning itself as a creative partner to grow brands and sales. Technically, the website employs common web technologies including jQuery, Bootstrap, Google Fonts, and Slider Revolution for dynamic content presentation. It integrates third-party analytics and tracking tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight. The site appears moderately optimized for mobile devices and SEO, with good navigation and content quality. Hosting is provided by a New Zealand-based registrar, Voyager Internet Ltd. From a security perspective, the site lacks visible security headers and does not have DNSSEC enabled, which are areas for improvement. The SSL configuration could not be confirmed from the data provided. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR and other privacy regulations. No contact emails or phone numbers are explicitly listed, which may affect user trust and communication. Overall, the website is professionally designed and functional but requires enhancements in security posture and privacy compliance to improve trustworthiness and regulatory adherence. Strategic recommendations include implementing security headers, enabling DNSSEC, adding privacy and cookie policies, and providing clear contact information to strengthen the site's credibility and user confidence.

S

Shockwatch New Zealand Limited

shockwatch.co.nz

0

Shockwatch New Zealand Limited operates a professional website focused on damage prevention and safety products for fragile and temperature sensitive goods. The company represents several international brands and targets businesses in logistics, warehousing, and transportation sectors. The website is built on Squarespace, providing a modern and mobile-optimized platform with good design and navigation. Security posture is strong with HTTPS and HSTS enabled, but lacks visible privacy and cookie policies, which impacts compliance. The absence of WHOIS registration data is a notable concern, though the website content and contact information appear legitimate and consistent with a small New Zealand business.

M

Metro Gas Ltd

metrogas.co.nz

0

Metro Gas Ltd operates a regional LPG cylinder delivery and swap service primarily serving residential, hospitality, and commercial customers in Auckland and Hamilton, New Zealand. The company emphasizes convenience by delivering LPG cylinders directly to customers' doors, replacing the traditional gas bottle swap at service stations. Their website reflects a professional and customer-focused approach with clear service descriptions and easy navigation. Technically, the website employs modern web technologies including Vue.js, Google reCAPTCHA, and Google Analytics, ensuring a responsive and user-friendly experience. The site is well-optimized for mobile devices and demonstrates good SEO practices. Security is robust with HTTPS enforced and secure payment processes, although some security headers are missing and no explicit cookie consent mechanism is present. From a security perspective, the site shows good maturity with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data limits domain registration trust analysis, and no formal security or incident response policies are published. Overall, the site is trustworthy and professional but could improve transparency and compliance by adding cookie consent and security policy information. The overall risk is moderate with recommendations to enhance security headers, implement cookie consent, and publish vulnerability disclosure or incident response details to strengthen trust and compliance.

O

Omega Rental Cars

omegarentalcars.com

0

Omega Rental Cars is a New Zealand-based car rental company offering a wide range of vehicle hire services across multiple locations including airports and city branches. The company targets both local and tourist customers seeking reliable and affordable car rental options. The website demonstrates a solid market position with a comprehensive fleet and value-added services such as roadside assistance and travel guides. Technically, the website is built on the SilverStripe CMS platform and leverages modern web technologies including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel for marketing and analytics. The site is mobile optimized and provides a good user experience with clear navigation and interactive features. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks some advanced security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent banner and a comprehensive privacy policy. The absence of WHOIS registrant data is a concern but the website content and business presence appear professional and trustworthy. Overall, the site scores well on content quality, technical implementation, and security, with room for improvement in transparency and WHOIS data availability.

H

Harrison Lane

harrisonlane.co.nz

0

Harrison Lane is a New Zealand-based construction company specializing in luxury country homes, equestrian facilities, and rural property development primarily serving the Auckland and Waikato regions. The company emphasizes end-to-end project management, offering services from design through completion, with a focus on quality craftsmanship and award-winning builds. Their market position is that of a trusted, award-winning builder with a niche in lifestyle and equestrian construction. Technically, the website is built on the RocketSpark CMS platform and utilizes a range of modern web technologies including jQuery, Google Analytics, Facebook Pixel, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and includes standard tracking scripts but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No WHOIS data was found for the domain, which raises concerns about domain registration legitimacy and transparency. No forms or email contacts were found, limiting direct communication channels. Overall, the website presents a professional and trustworthy business front but would benefit from improved transparency in privacy and security policies, enhanced security headers, and verification of domain registration details to strengthen trust and compliance.

E

Epsom Automotive

epsomautomotive.co.nz

0

Epsom Automotive is a small, locally owned automotive service and repair business based in New Zealand with over 20 years of industry experience. The company offers a broad range of vehicle servicing and repair services including diagnostics, pre-purchase inspections, and Warrant of Fitness checks, with specialization in European and hybrid vehicles. They are part of the Auto Super Shoppe Group, which enhances their market position and expertise. The website is professionally designed with clear navigation and mobile responsiveness, providing essential contact information and service details but lacks formal privacy and cookie policies. Technically, the site uses standard HTML and CSS with no advanced frameworks or CMS detected, hosted by Voyager Internet Ltd. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No tracking or analytics scripts are present, indicating minimal user tracking. Overall, the site is trustworthy and safe for general audiences but could improve compliance and security practices.

RaD Car Hire is a New Zealand-based car rental company offering a wide range of vehicles including cars, SUVs, minibuses, and commercial vehicles across multiple locations nationwide and in Australia. The company targets tourists and local customers seeking affordable and quality vehicle hire services. Their website demonstrates a solid digital presence with modern technologies such as Vue.js components, progressive web app features, and integration of major analytics and advertising platforms. Security posture is good with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern that slightly impacts trust but does not detract from the professional appearance and functionality of the site. Overall, RaD Car Hire presents a credible and user-friendly platform for vehicle rental services in New Zealand.

A

Auckland Zoo

aucklandzoo.co.nz

0

Auckland Zoo is a prominent zoological institution in New Zealand, offering diverse wildlife exhibits, educational programs, and conservation initiatives. The website reflects a well-established non-profit organization with strong branding and a clear mission to engage the public and support wildlife conservation. Technically, the site employs modern web technologies including React, Google Tag Manager, and multiple analytics and tracking tools, indicating a mature digital infrastructure. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, user-friendly, and compliant with privacy regulations, but the absence of WHOIS data limits domain registration trust verification.

A

Auckland Live

aucklandlive.co.nz

0

Auckland Live is a prominent event and entertainment platform serving Auckland, New Zealand, offering comprehensive listings and ticketing for a wide range of cultural events including music, theatre, comedy, dance, and festivals. The website is professionally designed with excellent content quality and clear navigation, targeting both residents and visitors interested in live entertainment. Technically, the site leverages modern web technologies including React, Google Analytics, and multiple marketing pixels, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and use of reCAPTCHA, although explicit security headers could be verified further. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, Auckland Live presents a trustworthy and credible digital presence with strong business and technical foundations.

T

Tātaki Auckland Unlimited

maritimemuseum.co.nz

0

The New Zealand Maritime Museum, operated under Tātaki Auckland Unlimited, is a prominent cultural institution in Auckland, New Zealand, dedicated to maritime heritage. The museum offers a variety of services including harbour sailings on heritage vessels, exhibitions, educational programs, and an extensive online collection. It targets a broad audience including families, tourists, maritime enthusiasts, and educational groups. The museum holds a strong market position as a key maritime attraction in the region. Technically, the website is built using modern technologies such as React, integrated with multiple analytics and tracking tools including Google Analytics, Hotjar, and Microsoft Clarity. It employs a cookie consent mechanism powered by Securiti.ai and uses reCAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the website enforces HTTPS and uses several security best practices, including secure forms and cookie consent. While explicit security headers were not fully confirmed, the overall SSL configuration is good, and no vulnerabilities were detected in the visible content. Privacy compliance is strong with clear privacy and cookie policies, and contact information is readily available. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The lack of publicly available WHOIS data is consistent with .nz domain privacy policies and does not detract from the legitimacy of the institution. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security posture.

T

Tātaki Auckland Unlimited

aucklandartgallery.com

0

Auckland Art Gallery Toi o Tāmaki is New Zealand's largest art institution, offering a comprehensive collection of historic and contemporary art, including significant Māori and Pacific Island works. The gallery operates under the parent organization Tātaki Auckland Unlimited and serves a diverse audience including tourists, local communities, families, and researchers. The website reflects a mature digital presence with rich content, event information, and educational resources. Technically, the site uses modern web technologies such as React, Google Maps API, and multiple analytics and tracking tools, indicating a well-maintained infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The domain WHOIS data is missing, which slightly reduces trust but the professional content and government affiliation support legitimacy. Overall, the site is secure, privacy-conscious, and user-friendly, serving its cultural mission effectively.

F

Forsyth Barr Limited

forsythbarr.co.nz

0

Forsyth Barr Limited is a well-established New Zealand owned investment firm with over 85 years of history, providing a comprehensive range of investment services including sharebroking, portfolio management, research, and investment banking. The company operates through 25 offices nationwide and targets New Zealand investors seeking professional and personalized investment advice. Their business model focuses on managed portfolios, transactional services, and digital investment platforms, supported by award-winning research and a strong market presence. The website reflects a mature, professional financial services provider with consistent branding and trust indicators such as affiliations with NZX and multiple partner entities. Technically, the website employs modern web technologies including React, Bootstrap, and various analytics and marketing tools such as Google Analytics, Facebook Pixel, and Intercom. The site is mobile-optimized and accessible, with good SEO practices and a likely CMS backend (Umbraco). Performance is moderate, with room for improvement in loading speed and explicit security header implementation. Security posture is strong with HTTPS enforced and secure login portals, though explicit security headers and incident response information are not publicly visible. Privacy compliance is partial, with a comprehensive privacy policy present but lacking a visible cookie consent mechanism. The absence of WHOIS data for the domain limits full trust verification, but the overall digital footprint and business information strongly support legitimacy. Overall, Forsyth Barr's website is a professional, secure, and trustworthy platform for investment services in New Zealand, with recommendations to enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

VDA Construction is a small Auckland-based construction company specializing in new home builds, renovations, reclads, and commercial projects. The company emphasizes certified quality through memberships with the Certified Builders Association of New Zealand, Site Safe, and Hazardco, and is led by a licensed building practitioner. Their website presents a professional image with clear service offerings and client testimonials, targeting homeowners and commercial clients in the Auckland region. Technically, the website is built on the EditMySite platform, using legacy jQuery and Google Analytics for tracking. While the site is accessible and well-structured, it lacks explicit privacy and cookie policies, and no contact emails or phone numbers are provided, which may impact user trust and compliance. Security headers are not detected, and the WHOIS data for the domain is unavailable, raising concerns about domain registration legitimacy. Overall, the website is functional and professional but would benefit from improved privacy compliance and updated technical security measures.

A

AUCKLAND X-RAY SERVICES

aucklandxray.co.nz

0

AUCKLAND X-RAY SERVICES is a small healthcare provider based in Auckland, New Zealand, specializing in diagnostic imaging services including X-ray, CT scans, ultrasound, and ultrasound guided steroid injections. The company emphasizes patient comfort and accuracy using modern imaging technology. The website is built on the Squarespace platform, featuring professional design, multilingual video content, and a user-friendly appointment booking form. Technically, the site uses HTTPS with HSTS enabled, Google Fonts, Google Maps API, and the Plyr video player, indicating a modern and secure infrastructure. Security posture is strong with no visible vulnerabilities, but the absence of privacy and cookie policies indicates compliance gaps. WHOIS data is not publicly available, suggesting privacy protection which is typical for small healthcare providers. Overall, the site is trustworthy and professional but should improve privacy compliance to enhance user trust and regulatory adherence.

D

Davenports Law

davenportslaw.co.nz

0

Davenports Law is a professional law firm based in North Shore Auckland, New Zealand, specializing in Trust Law, Wills and Estate Law, Commercial Law, and Property Law. The firm targets individuals and businesses seeking tailored legal advice and ongoing support. Their website reflects a well-established regional presence with a medium-sized team and a strong focus on client collaboration and guidance. The site features detailed legal articles, team profiles, testimonials, and affiliations with reputable legal organizations, reinforcing their credibility. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and integrates Google Tag Manager, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site is mobile-optimized with good SEO practices and a professional design, though some accessibility features are basic. Security-wise, the site uses HTTPS and Google reCAPTCHA for form protection but lacks several recommended security headers, which could be improved to enhance defense against common web attacks. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. However, the website content and professional presentation strongly suggest legitimacy. No signs of malware or phishing were detected. Privacy policy is present and comprehensive, but no cookie consent mechanism was found despite tracking technologies in use. Overall, the site presents a low risk but would benefit from enhanced security headers and clearer cookie consent to improve compliance and trust. Strategic recommendations include implementing additional security headers, establishing a cookie consent mechanism, and verifying domain registration details to improve trustworthiness and compliance.

J

Jada Tech Solutions

jdts.co.nz

0

Jada Tech Solutions is a small New Zealand-based technology service provider specializing in website development, hosting, professional email, and computer specialist services. Founded in 2020, the company targets small businesses and non-profit organizations, offering reliable and affordable IT solutions. The website features customer testimonials and case studies that reinforce its local market presence and service quality. Technically, the site is built on WordPress using Oxygen Builder, with common libraries like jQuery and Swiper.js, hosted under a domain registered with Dreamscape Networks and DNS managed via Cloudflare. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is moderate; HTTPS is enabled, but DNSSEC is not, and security headers are missing. Privacy compliance is basic, with privacy and cookie policies present but lacking active consent mechanisms. Contact information is clearly displayed, enhancing business credibility. Overall, the website is functional, trustworthy, and suitable for its target audience but could improve security and privacy practices.

sth.nz is a specialized tool provided by Sitetech Solutions Ltd T/A SiteName to facilitate domain testing for projects without dedicated domains. The service allows users to access websites via IP-based subdomains under sth.nz, targeting developers and SiteHost customers. The website is simple and functional, providing clear instructions but lacks comprehensive business and compliance information. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, it lacks modern security headers, HTTPS enforcement details, and privacy or cookie policies, which are critical for compliance and trust. The WHOIS data confirms a legitimate and consistent registration with a New Zealand-based registrar, supporting the site's credibility. Overall, the site is safe and serves a niche technical purpose but requires improvements in security and privacy compliance to enhance trust and professionalism.

D

DX One NZ

vodafone.co.nz

0

One NZ is a New Zealand-based telecommunications provider offering mobile, broadband, and business communication services. The website presents a professional and well-structured digital presence targeting both personal and business customers within New Zealand. The company appears to be a medium-sized player in the telecommunications sector, founded in 2017, with a focus on local market needs and infrastructure partnerships. The site uses modern web technologies and integrates multiple tracking and marketing tools, indicating a mature digital infrastructure. However, privacy compliance elements such as privacy and cookie policies are not evident in the provided content, which is a gap in regulatory adherence. Security posture is generally good with HTTPS and some security scripts, but lacks DNSSEC and explicit security policies. Overall, the website is functional, trustworthy, and professionally maintained but could improve in privacy transparency and security best practices.

A

Autex

autexacoustics.co.nz

0

Autex Acoustics is a New Zealand-based company specializing in the design and supply of acoustic panels and insulation products. The company positions itself as a leader in sustainable, carbon-neutral acoustic solutions tailored for residential, commercial, and architectural applications. Their website showcases a modern, well-structured digital presence built on Next.js and React, integrating multiple marketing and analytics tools such as Google Tag Manager, Hotjar, Facebook Pixel, and HubSpot. Despite the professional presentation and rich content, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the lack of explicit security headers and privacy policies indicates room for improvement. Overall, the website reflects a mature digital infrastructure supporting a credible business, but domain registration verification and enhanced privacy compliance are recommended.

T

The Brandery

thebrandery.co.nz

0

The Brandery is a small creative agency based in Auckland, New Zealand, specializing in graphic design, video production, animation, website design, and branding services. The company targets marketers and businesses across New Zealand and Australia, offering outsourced creative production to help clients regain workday efficiency. The website presents a professional image with a clear portfolio and client logos, indicating a solid market position among startups and industry leaders. Technically, the site is built on Squarespace, leveraging modern web technologies and integrating Google Analytics and Tag Manager for tracking. While the site is mobile-optimized and performs moderately well, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced, but lacks advanced security headers such as HSTS and CSP, which are recommended to enhance protection. Privacy compliance is basic, with no visible cookie consent mechanisms or comprehensive GDPR indicators. The absence of WHOIS data is a concern, reducing domain trustworthiness, though the website content suggests legitimacy. Overall, the site scores well in business credibility and content quality but should address security and privacy gaps to improve trust and compliance.

A

Awatoru Property

awatoruproperty.co.nz

0

Awatoru Property is a New Zealand-based commercial and industrial property investment partnership combining the expertise of 3Group and the capital strength of a major institutional investor. The company focuses on developing, funding, managing, and owning high-quality commercial and industrial properties primarily in the Auckland region and surrounding areas. Their business model emphasizes long-term property holding with stable leases and sustainable building practices. The website reflects a professional and consistent brand image, targeting investors and commercial tenants. Technically, the website is built on WordPress 6.8.1, utilizing modern frontend technologies such as Bootstrap 4.6.1, jQuery, Owl Carousel, and Google reCAPTCHA v3 for form security. The site is mobile optimized and SEO friendly with proper meta tags and structured data. Hosting details are not explicit but the domain registrar is a reputable provider. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect its contact form from spam. However, it lacks important security headers and does not provide a security policy or incident response contact. No vulnerabilities or exposed sensitive data were found. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given GDPR and other regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy disclosures and security headers would strengthen the site's security posture and regulatory compliance.

3

3 Capital

3capital.co.nz

0

3 Capital is a New Zealand-based real estate investment and development company specializing in partnering capital with in-house development and construction expertise to unlock long-term value in property. The company operates through multiple partnerships including 3Capital VA, 3Capital Development Fund, and Awatoru Property, targeting property owners, investors, and tenants. Their business model emphasizes end-to-end control of property projects to deliver higher returns with reduced risk. The website reflects a professional and consistent brand image with clear messaging and good content quality.

D

D3 Development

d3development.co.nz

0

D3 Development is a New Zealand-based property development company specializing in residential, commercial, and industrial real estate projects primarily in Auckland, Bay of Plenty, and Waikato regions. The company focuses on delivering quality homes and commercial buildings, targeting everyday Kiwis and investors. The website reflects a professional and consistent brand image with good content quality and relevant business descriptions. Technically, the site is built on WordPress 6.8.1 using modern libraries such as jQuery, Bootstrap, Owl Carousel, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, and no visible security or incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is not explicitly displayed on the homepage, which may affect user trust. Overall, the site is trustworthy and professionally maintained but could improve in security and privacy compliance aspects.

C

C3 Construction

b3buildings.co.nz

0

B3 Buildings is a New Zealand-based construction company specializing in commercial fit outs, building refurbishment, and maintenance services. As part of the larger 3Group property business, B3 Buildings leverages strong financial backing and integrated services to deliver high-quality projects primarily targeting property managers and owners. Their business model focuses on creating long-term value through reliable and efficient building services. The website reflects a medium-sized enterprise with a professional and consistent brand presence, supported by certifications such as Telarc and Toitu. Technically, the website is built on WordPress 6.8.1 with modern frameworks including Bootstrap 5.3.3, jQuery, and Owl Carousel. SEO is well-implemented using Yoast SEO, and the site is mobile-optimized with good user experience. Hosting and domain registration are consistent with the business location and timeline. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and a cookie consent mechanism, which impacts privacy compliance. No visible security or incident response policies are published, which could be a concern for compliance and trust. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is trustworthy and professional, with a solid business foundation and good technical implementation. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

3

3Group

3group.co.nz

0

3Group is a New Zealand-based property investment, development, construction, maintenance, and management group active primarily in Auckland, Waikato, and Bay of Plenty. Established in 2016, the company has developed or constructed over $500 million in property assets. The business operates through multiple subsidiaries, including C3 Construction, B3 Buildings, D3 Development, 3Capital, and Awatoru Property, providing end-to-end property lifecycle services. The website reflects a professional and consistent brand image targeting property investors, developers, and clients seeking construction and property management services.

E

Electric Escape Web Design

electricescape.com

0

Electric Escape Web Design is a small web and graphic design service provider based in Christchurch, New Zealand, operating since 2007. The company targets local businesses and individuals seeking professional website and graphic design services. The website is built on WordPress using common plugins such as Yoast SEO and Elementor, indicating a moderate level of technical maturity. Performance and mobile optimization are adequate, with good SEO practices observed. Security posture is basic with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a professional digital presence but would benefit from enhanced security and compliance measures.

F

Financial Advice New Zealand

financialadvice.nz

0

Financial Advice New Zealand is a professional body representing financial advisers and advice providers in Aotearoa New Zealand. The organization offers membership services, events, research, policy advocacy, and education through its Campus/Ontrack platform. The website positions itself as a trusted industry leader with a clear focus on supporting financial professionals in New Zealand. The business model centers on professional membership and sector advocacy, targeting financial advisers and related stakeholders.

5

543 Website Design

543websitedesign.co.nz

0

543 Website Design is a small New Zealand-based professional web design and digital marketing agency founded in 2015. They offer affordable, high-quality website design, branding, SEO, social media management, and online advertising services targeting small businesses across New Zealand. Their business model includes both professional design services and a DIY website builder option, positioning them as a versatile and accessible provider in the NZ market. The website content is well-structured, professional, and rich with client testimonials and trust signals, reflecting a strong market presence and customer focus. Technically, the website leverages modern web technologies including JavaScript, service workers for PWA capabilities, and integrates multiple marketing and analytics tools such as Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Google Tag Manager. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a mature digital infrastructure. However, explicit privacy and cookie policies are not found, which is a gap in compliance and user transparency. From a security perspective, the site uses HTTPS and employs service workers, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain reduces trust slightly, though the website content and business information are consistent and credible. Overall, the site demonstrates a good security posture but would benefit from enhanced privacy compliance and security transparency. The overall risk assessment is moderate-low risk with recommendations to implement privacy and cookie policies, add security headers, publish incident response information, and verify domain registration details. These steps will improve trust, compliance, and security posture, supporting the company’s professional image and customer confidence.

A

Appropo Limited

appropo.io

0

Appropo Limited operates a specialized SaaS platform focused on the hospitality sector in New Zealand, offering online ordering, payments, loyalty programs, and customer segmentation tools. The company has an established market presence since 2014, serving over 200 cafes, bars, and restaurants. Their platform integrates with notable partners such as DoorDash, Mailchimp, Windcave, and Xero, enhancing their service ecosystem. The website reflects a professional and consistent brand image with good content quality and user experience tailored for hospitality businesses. Technically, the website employs modern web technologies including Alpine.js for interactivity and Google Analytics for user tracking. Hosting appears to be on AWS infrastructure, with DNS managed via AWS nameservers. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. From a security and compliance perspective, the site lacks explicit privacy cookie consent mechanisms and terms of service documentation, which are important for GDPR and general privacy compliance. No incident response or vulnerability disclosure policies are publicly available. The WHOIS data is consistent with the business claims, showing a legitimate and stable domain registration. Overall, the risk profile is moderate with room for improvement in privacy compliance and security hardening. Strategically, Appropo should prioritize implementing cookie consent, publishing clear terms and security policies, enabling DNSSEC, and adding security headers to strengthen trust and compliance. These steps will enhance their security posture and align with regulatory expectations, supporting continued growth in the competitive hospitality technology market.

T

tripadvisor.co.nz

tripadvisor.co.nz

0

The website tripadvisor.co.nz is currently inaccessible due to a CAPTCHA challenge page, indicating the presence of a Web Application Firewall or bot protection mechanism. This prevents direct access to the site's content and limits the ability to perform a full security and compliance analysis. The domain is well-established, created in 2008, and uses reputable DNS providers including AWS and Google Cloud DNS. However, no metadata, structured data, or business contact information was extractable from the provided HTML content. The lack of visible privacy, cookie, or terms of service policies further limits compliance assessment. Given the blocking mechanism, the security posture cannot be fully evaluated, but the domain registration data suggests legitimacy and consistency with a reputable business.

O

Oncall Communications

oncallcomm.co.nz

0

Oncall Communications is a small New Zealand-based marketing communications consultancy led by Angela Hallberg, specializing in marketing management, advertising, social media, web design, and PR services primarily for small to medium businesses in the transportation and service sectors. The website demonstrates a solid market position with detailed client case studies and a professional online presence. Technically, the site is built on WordPress with a commercial theme and uses common libraries and Google services for analytics and maps. While the site is mobile optimized and well-structured, it lacks explicit privacy and cookie policies and advanced security headers, which are areas for improvement. The domain registration is consistent and legitimate, supporting the business's credibility. Overall, the website is professional and trustworthy but could enhance its privacy compliance and security posture.

T

Tātaki Auckland Unlimited

lilyworld.co.nz

0

Lilyworld is a hospitality venue operating as a cafe, garden bar, and function space located at Go Media Stadium in Penrose, Auckland, New Zealand. The business offers a unique combination of food and beverage services, event hosting, and family-friendly entertainment, positioning itself as a key local venue for stadium events and community gatherings. The website reflects a well-structured and content-rich digital presence with event listings, multimedia integration, and social media engagement. Technically, the site is built on a modern React/Next.js framework, leveraging common analytics and consent management tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic with a privacy policy and cookie consent but lacks explicit GDPR compliance statements. Overall, the website is professional, trustworthy, and serves its business purpose effectively with room for technical and security enhancements.

T

Tātaki Auckland Unlimited

aucklandunlimited.com

0

Tātaki Auckland Unlimited is the official cultural, events, and destination agency for Tāmaki Makaurau Auckland, New Zealand. The organization focuses on enriching Auckland's cultural life through events, managing treasured venues and taonga, driving tourism growth, and championing Auckland's global brand and reputation. The website reflects a mature digital presence with a modern React-based infrastructure, integration of multiple analytics and tracking tools, and a comprehensive cookie consent mechanism. Security posture is strong with HTTPS enforced, use of reCAPTCHA, and no visible vulnerabilities, though DNSSEC is not enabled. Privacy policies and terms of service are clearly presented, supporting GDPR compliance. Overall, the site is professional, trustworthy, and well-aligned with the organization's government and cultural mission.

E

Evo Cycles

evocycles.co.nz

0

Evo Cycles is a New Zealand-based retail business specializing in bicycles and related accessories, operating over 30 stores nationwide. The website presents a professional e-commerce platform with a broad product range including mountain, electric, road, and kids bikes. The technical infrastructure leverages modern web technologies such as Vue.js, Bootstrap, and various analytics and marketing tools, indicating a moderate level of digital maturity. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. Overall, the website is functional and professionally designed but would benefit from enhanced security and privacy compliance measures.

S

Squirrel Group Limited

squirrel.co.nz

0

Squirrel Group Limited is a New Zealand-based financial services company specializing in mortgage brokerage, savings, investing, and property finance solutions. Established in 2005, the company has positioned itself as a trusted independent mortgage broker with a strong market presence, having arranged over $22 billion in mortgages. Their services cater primarily to New Zealand residents seeking home loans, investment opportunities, and bespoke funding solutions for property development. The website reflects a professional and user-friendly digital presence, leveraging modern technologies such as Next.js and Azure hosting to deliver fast and mobile-optimized experiences. Social media integration and customer testimonials further enhance trust and engagement. However, the site lacks explicit privacy and cookie policies, which are critical for compliance and user trust.

D

Dynasty Sport | New Zealand

dynastysport.co.nz

0

Dynasty Sport | New Zealand operates as an e-commerce retailer specializing in sustainable sports apparel, serving sports teams and schools primarily in New Zealand. The company holds official partnerships with notable New Zealand sports teams, positioning itself as a trusted provider of custom teamwear and school leavers apparel made from ethically sourced recycled materials. The website is built on the Shopify platform, leveraging a mature e-commerce infrastructure with integrations for analytics, marketing, and customer engagement. The technical setup is modern and performant with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although explicit security headers could be improved. The absence of WHOIS data raises some concerns about domain registration transparency but does not detract from the professional presentation and operational legitimacy of the site. Overall, the business demonstrates a good digital maturity level with room for enhancements in security and contact transparency.

F

Full Time Sports Bar & Eatery

fulltimesportsbar.co.nz

0

Full Time Sports Bar & Eatery is a hospitality business based in Auckland, New Zealand, specializing in providing a sports bar experience with live sports on big screens, food and beverage services, private functions, and gift vouchers. The website is professionally designed using Webflow CMS and integrates third-party services such as Shopify for e-commerce and NowBookIt for bookings. The business targets sports fans and hospitality customers seeking a community-focused venue for sports viewing and celebrations. Technically, the website uses modern web technologies and is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled, but lacks security headers and privacy compliance documentation. WHOIS data is unavailable, which reduces domain trustworthiness and should be investigated further. Overall, the website presents a legitimate and professional business presence but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

P

Pullman Auckland hotel & Apartments

pullmanauckland.co.nz

0

Pullman Auckland hotel & Apartments is a premium 5-star luxury hotel located in the heart of Auckland CBD, New Zealand. The business offers a comprehensive range of hospitality services including luxury rooms, serviced apartments, dining, spa, event spaces, and wedding packages. It is part of the Accor group, leveraging strong brand recognition and a global hospitality network. The website reflects a mature digital presence with professional design, clear navigation, and integrated booking capabilities. Technically, the site is built on WordPress with modern JavaScript libraries and tracking tools, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of public WHOIS data suggests privacy protection, which is common and justified for this business type. Overall, the site demonstrates high business credibility and trustworthiness with strong customer engagement through social media and review platforms.

G

Glaister Keegan

glaister.co.nz

0

Glaister Keegan is a well-established full-service law firm based in Auckland, New Zealand, with a history dating back over 100 years. The firm specializes in property law among other legal services and maintains a strong reputation for integrity, professionalism, and client satisfaction. Their website reflects a professional and comprehensive presentation of their services, team, and history, targeting individuals and businesses seeking expert legal advice. Technically, the website is built on a modern platform (Duda) with good performance, mobile optimization, and integration of analytics tools such as Google Analytics and Snowplow. Security posture is generally good with HTTPS and service workers implemented, but lacks some security headers and visible cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trustworthiness, but the overall business credibility remains high due to the professional content and clear contact information.

O

Ovation Hospitality Services

ovationhospitalityservices.co.nz

0

Ovation Hospitality Services is a New Zealand-based hospitality service provider specializing in food and hospitality solutions for schools, hospitals, stadiums, workplaces, and events. The company positions itself as a trusted partner delivering warmth, care, and professionalism across a wide range of sectors. The website reflects a large-scale operation with a comprehensive partnership network and a strong focus on customer experience and quality service delivery. Technically, the website is built on WordPress using modern tools such as Breakdance Builder and Yoast SEO, indicating a mature digital infrastructure with good SEO and user experience. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security documentation.

B

Blue Star Group (New Zealand) Limited

bluestar.co.nz

0

Blue Star Group (New Zealand) Limited is a leading print communications company based in New Zealand, specializing in integrated marketing execution services including print, packaging, design, customer communications, merchandise, and logistics. The company positions itself as a pragmatic and agile partner for Kiwi businesses, offering comprehensive solutions to enhance customer engagement. The website reflects a professional and consistent brand image with clear service offerings and a focus on quality and innovation. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and jQuery, supplemented by marketing and analytics tools like HubSpot and Google Analytics. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site employs HTTPS and demonstrates commitment to security best practices, evidenced by ISO/IEC 27001 certification and a cookie consent mechanism. However, security headers are not explicitly detected, and there is no public vulnerability disclosure or incident response contact information. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall assessment. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility compliance.

C

Celebration Box NZ

celebrationbox.co.nz

0

Celebration Box NZ operates an e-commerce platform specializing in gift boxes, flowers, and sweet treats delivered across New Zealand. The website is built on the Shopify platform, leveraging modern web technologies and marketing tools such as Google Tag Manager and Hotjar to enhance user experience and track engagement. The site presents a professional and consistent brand image with clear product offerings targeting general consumers seeking gift delivery services. However, the absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified for full trust. The website lacks visible privacy and cookie policies, which are critical for compliance and user trust. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, but security headers could be improved. Overall, the site is functional and well-designed but requires enhancements in privacy compliance and domain legitimacy verification.

O

One Foundation

onefoundation.nz

0

One Foundation is a New Zealand-based licensed gaming trust that provides grants and funding to eligible community organizations. The organization operates by distributing proceeds generated from gaming machines hosted by small business owners in pubs and taverns across the country. The website reflects a well-established non-profit entity with a clear focus on community support and responsible gambling. Their market position is regional with a strong community orientation and transparent grant application processes. Technically, the website is built on Joomla CMS with common web technologies such as jQuery and Bootstrap, providing a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its target audience effectively.

C

C3 Construction

c3construction.co.nz

0

C3 Construction is a New Zealand-based construction company specializing in commercial, industrial, and multi-unit residential projects primarily in Auckland and the Bay of Plenty. As part of the 3Group property group, it benefits from a strong market position and diversified real estate and development subsidiaries. The company emphasizes quality, precision, and client peace of mind in its project delivery. The website reflects a professional and modern digital presence with a comprehensive portfolio showcasing their projects and services. Technically, the site is built on WordPress with modern frameworks and libraries, optimized for SEO and mobile responsiveness. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-maintained, supporting the company's business credibility and market presence.

Milestone Foundation Limited is a New Zealand-based non-profit organization established in 2015 to support local communities, particularly focusing on education, health, and Asian cultural promotion. The foundation operates under the Gambling Act 2003 and is regulated by the Department of Internal Affairs. Its primary business model involves distributing grants funded by Class 4 Gaming Venues and engaging with local Asian communities. The website serves as an informational and application portal for grants and membership inquiries. Technically, the website is built on the Weebly platform, utilizing legacy jQuery 1.8.3, Google Analytics, and Snowplow for tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. However, it lacks modern security headers and up-to-date libraries, which could pose security risks. From a security perspective, the site uses HTTPS and Google reCAPTCHA for form protection but lacks visible security headers and privacy policies, indicating gaps in compliance and security best practices. The absence of WHOIS data for the domain reduces trustworthiness, although the website content and structure appear legitimate for a small non-profit. Overall, the website presents a moderate risk profile with room for improvement in security posture, privacy compliance, and technical modernization. Strategic recommendations include updating libraries, implementing security headers, publishing privacy and cookie policies, and verifying domain registration details to enhance trust and compliance.

A

Autex

autexglobal.com

0

Autex is a New Zealand-based company specializing in the design and supply of acoustic panels and insulation products. The company positions itself as a leader in the acoustic solutions market in New Zealand, emphasizing sustainability and carbon-neutral products. Their website showcases a modern, professional design with detailed product information and project case studies, targeting architects, builders, designers, and consumers seeking acoustic solutions. The technical infrastructure is built on modern web technologies including Next.js and React, with integrations for analytics and marketing tools such as Google Tag Manager, Hotjar, Facebook Pixel, and HubSpot. The website is well-optimized for SEO, mobile responsiveness, and accessibility, providing a fast and user-friendly experience. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and published security policies are absent. Privacy compliance is limited due to missing privacy and cookie policies and consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, suggesting the domain may be new or privacy protected, which warrants further verification. Overall, the website reflects a credible and professional business presence with room for improvement in privacy and security transparency.

T

The Wild Rose

thewildrose.co.nz

0

The Wild Rose is a New Zealand-based florist and gift store specializing in fresh flower delivery and gift arrangements across Auckland and nationwide. The company operates an e-commerce platform powered by Shopify, complemented by a physical store in Takanini, Auckland. Their market position is that of a local trusted florist offering a variety of floral services including wedding, funeral, and dried flower arrangements. The website demonstrates a mature digital presence with integrated marketing, analytics, and delivery logistics tools. Technically, the site leverages modern e-commerce technologies and third-party integrations to enhance user experience and operational efficiency. Security posture is strong with HTTPS, security headers, and age verification for alcohol sales, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-optimized for its target market.

O

One NZ

onegoodkiwi.nz

0

One NZ is a New Zealand telecommunications provider emphasizing sustainability and corporate responsibility. Their website content highlights environmental stewardship, social equity, and governance principles aligned with New Zealand cultural values. The company targets both personal and business customers within New Zealand, offering mobile and network services with a focus on digital inclusion and environmental impact reduction. Technically, the site uses modern frameworks like React and integrates multiple analytics and tracking tools, hosted primarily on Vodafone's infrastructure. Security posture is solid with HTTPS and reCAPTCHA usage, though lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the domain registration and WHOIS data support the legitimacy and consistency of the business profile.

H

Hāpai Tūhono

hapaituhono.co.nz

0

Hāpai Tūhono is a New Zealand-based non-profit organization specializing in Māori career development and equity employment services. The website presents a clear mission to connect quality career services to Rangatahi and Whānau, emphasizing opportunity equity and sustainable success for Māori communities. The organization collaborates with employers and community partners to foster environments where Māori can thrive vocationally and socially. The website content is culturally aligned and professionally presented, targeting Māori individuals, families, employers, and community groups.

L

L'Authentique

lauthentique.co.nz

0

L'Authentique is a New Zealand-based artisan producer specializing in authentic French charcuterie and sausages crafted from premium free-range meats. The company leverages traditional French techniques brought by imported French craftsmen, positioning itself as a reputable and award-winning player in the local artisan food market. The website reflects a professional and consistent brand image, targeting consumers seeking high-quality French-style meat products. Technically, the site is built on the Squarespace platform, utilizing modern web technologies and delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers such as HSTS. Privacy and cookie policies are absent, indicating a compliance gap. The absence of WHOIS data reduces domain trustworthiness, but the overall business credibility remains high due to clear contact information, social media presence, and multiple industry awards. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.