Toby Carvery is a well-known UK restaurant chain, and its website tobycarvery.co.uk has been around for over 20 years. That longevity alone is a strong sign of legitimacy. The site uses modern security protections like HTTPS and browser safeguards, and it sits behind Cloudflare’s infrastructure, which is standard for a business of this size. Our automated checks were blocked by that security, so we couldn’t confirm the presence of contact details or legal pages, but for a restaurant chain that usually operates in person, this isn’t alarming. If you’re looking for menus, locations, or booking information, you can use the site with confidence. The domain is registered until 2027 and has no history of blacklisting or malware. While we couldn’t verify every detail, the overall picture is that tobycarvery.co.uk is the real deal and not a scam. Just keep in mind that if you provide any personal information (like for a booking), you should check that the site has a privacy policy — but that’s standard advice for any website.
In plain English
This is almost certainly the official Toby Carvery website, given the 20-year-old domain and the brand name. Our automated checks couldn't see the actual page content because of strong security, but that's not a red flag for visitors. The site has a clean security record and solid infrastructure. You can trust it as a customer.
Where the score comes from
Strong security setup with valid SSL, enforced HTTPS, and multiple browser protections. The site uses modern encryption and has no malware or phishing flags.
The domain is 20 years old and clearly tied to the Toby Carvery brand, but the registrant details are not publicly visible. For a well-known restaurant chain, this is minor but not ideal.
Clean reputation with no blacklists or Google Web Risk flags. The site has been around for two decades and appears in the top million websites, which is consistent with a legitimate brand.
Our automated checks were blocked by the site's security, so we couldn't verify contact info, about page, or social media. For a real restaurant chain, these likely exist but could not be confirmed.
Legal pages like privacy policy and terms of service could not be checked due to bot blocking. If the site collects any data (e.g., for bookings or newsletters), these should be present but we have no evidence either way.
Solid infrastructure with Cloudflare, email authentication, and fast load times. DNS and mail servers are well-configured, though DNSSEC is not enabled.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →