They should be easy to contact via discoverable contact details or even a toll-free number, which is rare for scammers. Red Flags to Watch Out For
If they discourage regular software updates—such as for WordPress—they are leaving your site vulnerable to security breaches. Can You Trust Your Webmaster
Google Webmaster Trends Analysts Q&A Interview - Aleyda Solis They should be easy to contact via discoverable