In 2017 / 2018 we tested many websites to see if the page linking to a secure login page was itself secure. If the linking page wasn’t secure then you can’t regard the login page as secure because of man-in-the-middle attacks.
We tested many organisations related to finance and healthcare and posted the results, one page per organisation type. This page lists all the tests in one place to make them easier to find.
List of UK banks that are “secure by default”
List of UK Building Societies that are “secure by default”
List of UK Wealth Management companies that are not “secure by default”
List of UK currency exchanges that are not “secure by default”
List of UK online casinos that are not “secure by default”
List of ecommerce platforms that are not “secure by default”
List of UK healthcare companies that are not “secure by default”
List of UK pension funds that are not “secure by default”
List of UK Insurance companies that are not “secure by default”
List of UK stock trading websites that are not “secure by default”
Test rig
A test rig exists that allows you to test all the websites listed above, plus test websites of your own choosing.