The Birmingham Digital Trust Report 2026
An audit of 551 Birmingham business websites across 12 industries — revealing which sectors are winning online, and which are putting their clients at risk.
Birmingham's most trusted professionals are running the city's least secure websites
When you instruct a Birmingham solicitor, you hand over things you would share with almost nobody else. Bank statements. Tax records. Details of a marriage breakdown. The deeds to your home. The terms of a will. You do this because the law demands that solicitors protect that information, because the Solicitors Regulation Authority enforces strict confidentiality rules, and because, fundamentally, you trust them.
Which makes the findings of this audit all the more striking.
Of the 551 Birmingham business websites we assessed across 12 industry sectors, solicitors scored the lowest of any professional group on digital trust. Not marginally. Substantially. The sector averaged a trust score of just 46 out of 100.
Below builders. Below manufacturers. Below dentists. The profession with the strictest duties of client confidentiality in the city is operating some of its least secure digital operations.
"What we consistently find is that businesses made an investment in their website several years ago and considered the job done. Security standards evolve. A website that was adequate in 2019 may have meaningful vulnerabilities in 2026, and most business owners simply aren't aware of that because nobody told them to check."
How each sector performed
Every sector was scored across five domains: Security, SEO, Performance, Mobile, and Modernity. Combined into an Overall Trust Score out of 100. Here's how Birmingham's industries rank.
| # | Industry | Businesses | Trust Score | Security | Mobile % | SSL % |
|---|---|---|---|---|---|---|
| 1 | IT Companies | 47 | 38.3 | 89% | 77% | |
| 2 | Engineering Firms | 16 | 37.6 | 94% | 50% | |
| 3 | Estate Agents | 32 | 34.5 | 94% | 59% | |
| 4 | Accountants | 32 | 28.6 | 81% | 50% | |
| 5 | Dentists | 32 | 32.3 | 81% | 53% | |
| 6 | Recruitment Agencies | 22 | 38.1 | 82% | 64% | |
| 7 | Consultants | 93 | 28.1 | 81% | 54% | |
| 8 | Architects | 21 | 29.4 | 86% | 38% | |
| 9 | Builders | 94 | 28.6 | 81% | 54% | |
| 10 | Manufacturers | 100 | 25.7 | 72% | 46% | |
| 11 | Engineers | 21 | 28.6 | 76% | 38% | |
| 12 | Solicitors | 41 | 25.1 | 63% | 61% |
Solicitors: a sector breakdown
The solicitor sector's position at the bottom of the league table is not a marginal underperformance. The data reveals systemic gaps across nearly every measure of digital health.
Content Security Policy
Only 1 out of 41 Birmingham solicitor websites has a Content Security Policy in place. This is the technical control that blocks common attacks like cross-site scripting and data injection. In a profession handling sensitive financial and legal information, this is a near-total absence of a fundamental protection.
Missing HSTS Protection
34 out of 41 solicitor websites have no HTTP Strict Transport Security. Without HSTS, a visitor's browser cannot guarantee it will always connect to the secure version of the site, leaving sessions vulnerable to downgrade attacks on public networks.
Not Mobile Friendly
More than a third of Birmingham solicitor websites cannot be properly viewed on a mobile phone. In 2026, with over 60% of local searches happening on smartphones, this means potential clients researching a solicitor may encounter a broken or unusable experience before they ever make contact.
Active Blog or News Section
Only 16 of 41 solicitor websites maintain a blog or news section. For a profession that depends on demonstrating expertise and authority, a static website with no fresh content signals a firm that is not actively engaging with its market or its clients online.
Solicitors with a Security Score of Zero
Seven Birmingham solicitor websites registered a security score of zero, meaning no measurable security protections were detected at all. Two firms scored zero across every category, rendering their websites effectively non-functional as digital assets.
What Birmingham is missing
The solicitor problem exists within a wider city-wide gap in basic web security. Across all 551 businesses audited, the following security measures were found to be missing at alarming rates.
Mobile-friendliness is the one area where Birmingham businesses kept pace. Everywhere else, the gap is significant.
It's not just solicitors
While the solicitor sector is the most striking finding given the sensitivity of the data they handle, Birmingham's digital underperformance is broad.
54% of manufacturers have no SSL
Birmingham's manufacturing sector, the largest group in the audit with 100 businesses, averaged just 48.3 out of 100. Ten manufacturers scored zero across every category. In a sector where procurement teams and international buyers conduct supplier due diligence online, a website that fails basic standards is not a cosmetic problem. It is a commercial one.
45% of Birmingham businesses run on WordPress
While WordPress is the world's most popular website platform, this level of concentration creates systemic risk. When a vulnerability is discovered and exploited, nearly half the city's business websites can be affected simultaneously. The data shows WordPress sites in Birmingham are already averaging below the city mean for security.
27 Birmingham businesses score zero on everything
27 businesses, including manufacturers, builders, consultants and solicitors, registered a score of zero across security, SEO, performance, mobile and overall trust. These are businesses that believe they have an online presence. In reality, their websites are either completely inaccessible, critically broken, or so outdated that no modern browser or search engine can properly interact with them.
80% are mobile friendly
Eighty per cent of Birmingham business websites are correctly configured for mobile devices. It is the one area where the city's business community has, by and large, kept pace with how people use the internet. The fact that it stands so sharply against the rest of the data makes the overall picture more troubling, not less. Businesses made one upgrade and stopped.
Why this matters beyond technology
The Solicitors Regulation Authority's Code of Conduct requires firms to keep client affairs confidential and to maintain effective systems for the management of client matters. The SRA has become increasingly attentive to cybersecurity as a practice management issue, not merely an IT one.
Law firms have been the target of sophisticated fraud attacks, including so-called "Friday afternoon fraud," in which criminals intercept conveyancing correspondence and redirect mortgage funds. These attacks frequently begin with a compromised digital system.
The Information Commissioner's Office has issued fines to professional services firms for data breaches that originated in inadequate technical controls. A website without HTTPS or security headers is, by any reasonable reading, an inadequate technical control.
"The expectation from regulators has shifted. It used to be that a firm could say it had a website and that was enough. Now the question being asked, by insurers, by regulators, and increasingly by clients, is what controls are actually in place. And the controls have to be demonstrable."
Five steps every Birmingham business should take
- Check your SSL certificate. If your website address starts with HTTP rather than HTTPS, you are operating without basic encryption. Google flags these sites as "Not Secure" to visitors.
- Ask your web developer about security headers. Content Security Policy, HSTS, and X-Frame-Options are free to implement and should be standard on any business website in 2026.
- Test your site on a mobile phone. Open your website on your phone. If it is difficult to read, requires pinching and zooming, or loads slowly, you are losing customers.
- Review your website annually. Security standards evolve. A website that was adequate three years ago may have vulnerabilities today. Build a review into your calendar.
- Get a professional audit. If you are not sure where your website stands, Compex IT offers a free digital health assessment to any Birmingham business.
"A poor-performing website affects your Google visibility, your credibility with referrers, and increasingly your ability to win tenders. Procurement teams in large organisations now routinely include website and cybersecurity assessments in their supplier qualification process. If your website can't pass a basic security check, you may not even get to the proposal stage."
Average trust score by industry
Is your website part of the problem?
Compex IT offers a free digital health assessment to any Birmingham business. Find out where your website stands on security, performance, and mobile readiness. No obligation. No jargon.
Get your free assessmentHow this research was conducted
About the audit
Compex IT analysed the websites of 551 businesses across 12 industry sectors in Birmingham and the West Midlands during June and July 2026.
- Each website was assessed across 20 measurable criteria including SSL status, HTTPS redirect, mobile responsiveness, security headers (CSP, HSTS, X-Frame-Options), CMS platform, page speed, SEO signals, and schema markup.
- Businesses were scored across five domains: Security, SEO, Performance, Mobile, and Modernity.
- Scores were combined into a composite Overall Trust Score out of 100.
- The 12 sectors analysed were: Manufacturers, Builders, Consultants, IT Companies, Solicitors, Accountants, Estate Agents, Dentists, Recruitment Agencies, Engineers, Architects, and Engineering Firms.
- All data was collected through automated website analysis tools supplemented by manual verification of security header presence and configuration.