France security reports

V

Ville de Laval

laval.fr

64

The website www.laval.fr is the official digital presence of the city of Laval, France, serving as a comprehensive portal for municipal information, public services, cultural activities, and citizen engagement. It targets residents, visitors, and local businesses, providing a broad range of services and information relevant to the community. The site is well-structured with clear navigation and professional design, reflecting the city's commitment to accessibility and transparency. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Google Fonts, and a robust cookie consent management system (Tarteaucitron.js). Analytics are handled via Matomo, respecting user privacy and Do Not Track settings. The site demonstrates good mobile optimization and accessibility features, although some security headers are not explicitly detected in the provided data. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, indicating a mature approach to privacy compliance. However, the absence of WHOIS data limits domain registration transparency, though this is likely due to AFNIC policies rather than malicious intent. No critical vulnerabilities or suspicious content were identified. Overall, the site presents a low-risk profile with strong business credibility as a government entity. Strategic recommendations include enhancing security headers, publishing explicit security policies, and providing clearer contact information for privacy and security concerns to further strengthen trust and compliance.

M

Monext

payline.com

71

Monext is a French payment solutions provider offering a comprehensive suite of services including online, in-store, and omnichannel payment processing, as well as card issuance and acquisition services. The company targets businesses across various sectors such as retail, travel, events, and mobility, positioning itself as a reliable and customer-centric partner in the European payment ecosystem. The website reflects a mature digital presence with professional design, detailed product offerings, and customer success stories that reinforce its market position. Technically, the website is built on modern frameworks like Next.js and React, leveraging Prismic CMS for content management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although accessibility could be improved further. Performance is moderate, with efficient use of resources and lazy loading of images. From a security perspective, the site enforces HTTPS and includes several important security headers, indicating a strong baseline security posture. However, explicit security policies, incident response plans, and vulnerability disclosure mechanisms are not publicly documented, representing areas for improvement. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website and business appear legitimate and professional, though the absence of WHOIS data and direct contact information slightly reduce trust signals. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and providing clearer contact channels to improve user trust and compliance.

A

Agorabox - la gestion évènementielle tout-en-un pour professionnels

agoraevent.fr

39

Agorabox is a French technology company specializing in event management software solutions tailored for professionals in the event industry. With over 20 years of experience, the company offers a suite of modular SaaS products including AgoraManager, AgoraEvent, AgoraMeetin, and AgoraSites, designed to streamline event organization, guest interaction, and online reservations. The website reflects a professional market position with clear branding and a focus on ease of use and productivity for event organizers and space managers. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and multilingual capabilities, and hosted by OVH. It employs Google Analytics and Google Ads for marketing and tracking, with a GDPR-compliant cookie consent mechanism in place. Security posture is solid with HTTPS enabled and no exposed sensitive data, though some security headers and policies could be improved. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. The site is accessible, well-structured, and targets a general professional audience without any adult or questionable content.

B

Bouygues Immobilier

bouygues-immobilier.com

62

Bouygues Immobilier is a prominent French real estate developer specializing in new residential properties and investment opportunities across France. The website presents a professional and comprehensive digital presence, targeting homebuyers and investors with detailed program listings and customer support. The company leverages modern web technologies including Drupal 9, Google Tag Manager, and consent management tools to ensure a compliant and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website's branding and content quality. Strategic recommendations include publishing security policies, adding vulnerability disclosure channels, and enhancing transparency to further strengthen trust and compliance.

Bouygues is a large French multinational conglomerate operating in diverse sectors including construction, telecommunications, media, and real estate. The website serves as a corporate portal and magazine to communicate news and updates about the group. The site is professionally designed, mobile-optimized, and uses modern web technologies such as WordPress, Google Tag Manager, Matomo Analytics, and Cookiebot for consent management. Security measures include HTTPS enforcement, reCAPTCHA integration, and comprehensive cookie consent mechanisms. However, the absence of publicly available WHOIS data and registrant information slightly reduces domain trustworthiness. No explicit security policy or incident response contact information is published, which could be improved to enhance transparency and compliance. Overall, the website reflects a mature digital presence consistent with a large enterprise.

C

Communauté d'agglomération Seine-Eure

agglo-seine-eure.fr

9

The website represents the Communauté d'agglomération Seine-Eure, a regional government entity in Normandy, France, serving 60 communes and over 100,000 inhabitants. It provides local government information, community services, event announcements, and administrative resources to residents and businesses in the Seine-Eure territory. The site is built on WordPress, leveraging modern SEO practices and analytics tools such as Google Analytics and Tag Manager, and includes push notification capabilities with user consent via OneSignal. The design is professional, mobile-optimized, and accessible, reflecting a mature digital presence for a public sector organization. However, the absence of WHOIS data and registrant information is a notable anomaly that impacts domain trustworthiness from a registration perspective. Security posture is generally good with HTTPS enforced, but the site lacks explicit privacy, cookie, and security policies, which are important for compliance and user trust. Overall, the site is functional, informative, and trustworthy from a content and business perspective but would benefit from enhanced transparency and security documentation.

L

La Fédération Nationale des Agences d'Urbanisme

fnau.org

10

La Fédération Nationale des Agences d'Urbanisme (FNAU) is a French national network of approximately 50 urban planning agencies focused on territorial planning and development. The organization serves as a collaborative platform for public entities, local authorities, and state partners to coordinate urban development efforts. The website reflects a mature, professional presence with a focus on publications, events, and networking among urban planning professionals. Technically, the site is built on WordPress with common plugins and hosted by OVH sas, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance. Overall, the site is trustworthy and well-aligned with its stated mission and audience.

T

Terres d'Argentan

terresdargentan.fr

50

Terres d'Argentan is a French local government community portal serving 49 communes with approximately 34,000 inhabitants. The website provides comprehensive information about community services, events, public announcements, and citizen resources. It positions itself as an essential public service platform for residents and stakeholders in the Argentan area. The site is well-branded and consistent with official government communications. Technically, the website is built on WordPress using a modern tech stack including Bootstrap, jQuery, Leaflet.js for maps, and integrates Google Fonts and Google reCAPTCHA for security. It employs Matomo for privacy-conscious analytics and uses the Complianz GDPR plugin to manage cookie consent, demonstrating a good level of digital maturity and compliance with European privacy regulations. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Cookie consent is actively managed, and analytics cookies are disabled by default. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with privacy laws. It serves its community audience effectively with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing a dedicated security policy, and continuing regular updates to maintain security posture.

V

Ville de Montreuil

montreuil.fr

11

The website www.montreuil.fr is the official digital presence of the city of Montreuil, France. It provides comprehensive municipal information, services, and citizen engagement tools. The site is well-branded, professionally designed, and targets a broad audience including residents, families, professionals, and associations. It offers multilingual support and a rich set of resources including news, events, and administrative procedures. Technically, the site is built on Drupal 11, leveraging modern web technologies and privacy-conscious analytics via Matomo. The site is mobile-optimized and accessible, with clear navigation and structured content. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of WHOIS data is typical for .fr domains managed by AFNIC and does not detract from the site's legitimacy. Overall, the site demonstrates a mature digital infrastructure suitable for a large municipal government entity. It balances user experience, privacy, and security effectively, though it could enhance transparency by publishing explicit security policies and incident response contacts.

B

Bouygues Immobilier Corporate

bouygues-immobilier-corporate.com

59

Bouygues Immobilier Corporate is a well-established real estate company with a strong presence in France and internationally. The website reflects a mature digital presence with comprehensive content about their activities, references, news, and corporate commitments. The technical infrastructure is modern, leveraging Drupal 10, Bootstrap 5, and privacy-focused analytics tools such as Matomo. The site implements GDPR-compliant cookie consent mechanisms and provides clear contact information and social media links. However, the WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, though the website content and branding strongly support authenticity. Security posture is good with HTTPS and privacy SDKs, but explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users.

L

L'Union sociale pour l'habitat

union-habitat.org

53

L'Union sociale pour l'habitat is a prominent French non-profit organization dedicated to supporting social housing entities (Hlm) and contributing to national housing policy development. The website serves as a comprehensive resource hub offering thematic content, publications, event information, and professional support to stakeholders in the social housing sector. The organization maintains a strong market position as a key actor in France's social housing ecosystem, with a large-scale presence and multiple affiliated entities. Technically, the website is built on Drupal CMS, employs modern web technologies such as lazy loading and Matomo analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security and privacy policies are not prominently published. The absence of WHOIS data limits domain trust verification but does not detract significantly from the site's legitimacy given its professional presentation and content. Overall, the site is well-designed, content-rich, and trustworthy for its target audience.

VINCI is a global leader in concessions, energy services, and construction, operating in over 120 countries with a workforce of approximately 285,000 employees. The company focuses on sustainable development, energy transition, and social progress, positioning itself as a key player in infrastructure and mobility solutions. The website reflects a mature digital presence with comprehensive corporate information, investor relations, and newsroom updates, supporting transparency and stakeholder engagement. Technically, the site is built on Drupal 10, uses Matomo for privacy-conscious analytics, and includes cookie consent mechanisms, indicating good privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response details are absent. The WHOIS data is unavailable, which slightly reduces transparency but does not detract from the site's legitimacy given the strong corporate branding and content. Overall, VINCI's website demonstrates professionalism, good technical implementation, and a strong business credibility profile.

V

VALHOR

valhor.fr

51

VALHOR is a French interprofessional organization dedicated to supporting and representing professionals in the horticulture, floristry, and landscaping sectors. Established in 2005, it serves as a key industry body in France, providing accompaniment and support to horticulture professionals. The website reflects a professional and consistent brand image, targeting industry stakeholders with relevant content and services. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, integrates Google Tag Manager and Matomo for analytics, and uses Axeptio for cookie consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal security policies, which could be improved. Privacy compliance is basic, with no explicit privacy or cookie policies detected in the provided content. Overall, the domain registration data aligns well with the organization's profile, supporting its legitimacy and trustworthiness.

S

SUEZ

toutsurmoneau.fr

68

The website www.toutsurmoneau.fr is a professionally maintained portal operated by SUEZ, a major player in the water and energy sector in France. It provides comprehensive information about water services in local communes, customer account management, contract subscription, and support services. The site targets residents and customers seeking water-related services and information. Technically, the website employs modern technologies including React, Cloudflare Turnstile captcha, Cookiebot for consent management, and integrates analytics and monitoring tools such as Google Tag Manager and New Relic. The site is hosted likely behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not published, and no vulnerability disclosure or security.txt file is found. Overall, the site is trustworthy, secure, and professionally operated, reflecting the reputation of SUEZ.

A

Agence Nationale pour la Rénovation Urbaine

anru.fr

73

The Agence Nationale pour la Rénovation Urbaine (ANRU) is a French public agency dedicated to financing and supporting the transformation of urban neighborhoods under the national urban policy. The website serves as an authoritative resource hub offering detailed information on programs, recent projects, publications, and innovation initiatives related to urban renewal across France. It targets public sector stakeholders, journalists, startups, beneficiaries, and job candidates. Technically, the site is built on Drupal 10, employs Matomo for analytics, and uses a cookie consent mechanism compliant with GDPR. The site is well-structured, mobile-optimized, and professionally designed, reflecting its government agency status. Security posture is good with HTTPS enforced and privacy policies in place, though some HTTP security headers could be improved. WHOIS data is unavailable due to AFNIC policies for .fr domains but the domain and content strongly indicate legitimacy. Overall, the site is a reliable and professional digital presence for ANRU.

C

Caux Seine agglo

cauxseine.fr

61

Caux Seine agglo is a French regional government entity providing local community services and information to residents and businesses in the Caux Seine area. The website serves as an official portal for announcements, events, and public services, targeting a regional audience. The site is built on WordPress and leverages modern web technologies including Matomo for analytics and Google Fonts for typography. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The absence of a privacy policy and WHOIS data reduces compliance and trust scores. Overall, the site is professional and trustworthy but could benefit from enhanced privacy disclosures and security hardening.

E

Efficacity

efficacity.com

52

Efficacity is a French R&D institute dedicated to the decarbonation of cities, providing innovative software solutions, consulting, and labels to support sustainable urban development. Established in 2014 at the initiative of the French State, it serves a broad audience including local governments, urban planners, industrial clients, and state operators. The organization is well-positioned in the energy and government sectors with over 300 partners and clients nationally and internationally. Technically, the website is built on WordPress with Elementor and integrates modern SEO and analytics tools, hosted by Scaleway SAS. Security posture is solid with HTTPS and domain locking, though improvements can be made in DNS security and security headers. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, supporting its business credibility.

L

Laval Agglomération

agglo-laval.fr

63

Laval Agglomération operates as the official regional government body for the Laval area in the Mayenne department of France. The website serves as a comprehensive portal offering information and services related to economic development, urban planning, public services, tourism, and community engagement for approximately 100,000 residents and over 6,000 businesses. The site is well-structured with clear navigation and targets local residents, businesses, and visitors. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and Google Fonts, and employs Matomo for analytics with privacy-conscious configurations such as Do Not Track support and explicit cookie consent management via tarteaucitron.js. Security posture is moderate with room for improvement in HTTP security headers and SSL configuration transparency. The absence of WHOIS data limits domain registration transparency but does not detract from the site's legitimacy given its official nature and content quality. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting user privacy rights. Overall, the site demonstrates a solid digital presence for a government entity with good content quality and user experience.

F

France Ville Durable

sustainablecitybyfrance.org

51

Sustainable City by France is a French non-profit association dedicated to accelerating the transition of cities and territories towards sustainability and resilience. It brings together local authorities, state entities, companies, and experts to collaborate on sustainable urban development projects. The website reflects a medium-sized organization with strong government and private sector partnerships, offering resources, project mapping, and events to its audience. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and is hosted by OVH sas. Security posture is good with HTTPS and reCAPTCHA implemented, though there is room for improvement in DNS security and HTTP headers. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.

L

La Corac

corac.fr

44

La Corac is a regional non-profit network coordinating international volunteer workcamps in the Provence-Alpes-Côte d’Azur region of France. The organization promotes cultural heritage preservation, ecological practices, and community engagement through volunteer projects involving participants from over 60 nationalities. The website is professionally designed, content-rich, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins and integrates multimedia content such as Vimeo videos and Google Maps. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly reduces domain trust but the active social media presence and detailed content support legitimacy. Overall, the site effectively serves its target audience of volunteers and associations, providing clear navigation, contact information, and community testimonials.

M

Mon Restau Responsable®

monrestauresponsable.org

59

Mon Restau Responsable® is a French initiative focused on promoting sustainable and healthy collective catering through a participative and free self-assessment platform. It targets collective restaurants in schools, universities, companies, and medico-social sectors, helping them improve ecological and social practices. The website is well-positioned in the French market with over 2300 engaged restaurants and strong partnerships with recognized organizations such as FNH and Restau'Co. Technically, the site uses modern frameworks like Next.js and Chakra UI, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, slightly reducing domain trust. Strategic recommendations include publishing security policies and vulnerability disclosure information to enhance trust further.

J

J'agis pour la nature, la plateforme du bénévolat nature

jagispourlanature.org

71

J'agis pour la nature is a French non-profit platform dedicated to connecting volunteers with nature protection activities. It serves as a specialized platform to facilitate environmental volunteering, positioning itself as a pioneering service in this niche. The website is built on Drupal 10 and integrates modern analytics and consent management tools, indicating a moderate level of digital maturity. However, the absence of visible privacy policies and security headers suggests room for improvement in compliance and security practices. The website content is accessible without any WAF or security challenges, and the content is safe for general audiences. Overall, the platform appears legitimate and focused on its mission, but enhancing security and privacy transparency would strengthen trust and compliance.

F

Fondation pour la Nature et l’Homme

fnh.org

73

Fondation pour la Nature et l’Homme is a well-established French non-profit foundation recognized as a public utility, dedicated to environmental awareness and ecological action. The organization operates multiple programs focused on biodiversity preservation, sustainable agriculture, responsible food consumption, and decarbonized mobility. Their digital presence is professional and content-rich, targeting a broad audience interested in ecological and social sustainability. The website supports donations with clear tax deduction information and multiple giving options, reflecting a mature fundraising model. Technically, the website is built on WordPress with modern JavaScript frameworks such as Alpine.js and HTMX, and integrates advanced analytics tools including Google Tag Manager, Microsoft Clarity, and Matomo. The site is mobile-optimized, accessible, and SEO-friendly, with a good performance profile. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers could be explicitly verified and enhanced. No WHOIS details are available due to privacy protection, which is common and justified for non-profit entities. The website shows no signs of blocking or WAF challenges, allowing full content access. Privacy and cookie policies are comprehensive and GDPR compliant, but explicit contact emails and phone numbers are not publicly listed, relying instead on contact forms and social media channels. Overall, the foundation demonstrates a strong security and compliance posture appropriate for its sector, with a trustworthy and professional online presence. Strategic improvements could focus on enhancing security header implementation and incident response visibility.

L

Le Sens Du Web

lesensduweb.com

44

Le Sens Du Web is a small, local web design and development service provider based in Ardèche, France, founded in 2014. The company offers a range of services including custom website creation, graphic design, responsive design, SEO optimization, content writing, and translation services. Additionally, it provides automated receipt mailing services for associations. The website demonstrates a professional and consistent brand presence with a clear focus on serving local businesses and associations seeking to enhance their online presence. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as jQuery and Google Analytics, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and reCAPTCHA v3 protecting the contact form, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. Overall, the site is trustworthy and functional but could improve compliance and security practices.

A

A World For Us

skills.hr

72

Skills.hr is a French marketplace platform specializing in professional training programs, aggregating over 120,000 offers from more than 5,500 providers. It serves professionals and individuals seeking to enhance their skills and advance their careers. The platform emphasizes transparency by providing detailed program data, including satisfaction ratings and testimonials, and offers clear financing options. The website is part of a broader ecosystem including related projects such as Skills Mag and Digiforma, enhancing its market presence. Technically, the website leverages modern web technologies including Phoenix LiveView, JavaScript, and integrates security measures like hCaptcha and Google Tag Manager. Hosting is provided via Amazon AWS, ensuring reliable infrastructure. The site demonstrates good SEO practices and mobile optimization, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, Skills.hr presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security transparency and accessibility would further enhance its posture and user trust.

D

Digiforma Certif

digiforma-certif.com

61

Digiforma Certif is a French company specializing in software solutions for managing RNCP and RS certifications, primarily serving training organizations and certification bodies. The company positions itself as a key player in the French educational certification software market, offering SaaS-based tools to streamline compliance and training management. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and certifications. Technically, the site is built on WordPress with Elementor, leveraging modern libraries and SEO tools, and includes standard security measures such as HTTPS and reCAPTCHA. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with moderate security posture and good business credibility.

A

A world for us

aworldforus.com

57

A World For Us is a French company established since 2009, specializing in digital solutions for the professional training sector. Their portfolio includes a comprehensive ecosystem of integrated software products such as Digiforma, Digiformag, and certification management tools, serving over 5500 clients and a growing community. The company positions itself as a leader in digital transformation for training organizations, offering tools that simplify administrative, compliance, and e-learning processes. The website reflects a mature digital presence with professional branding, multilingual support, and active community engagement.

Digiformag is a French online magazine specializing in professional training, targeting training organizations and professionals in the education sector. It offers news, articles, and a community platform called OF Connect, positioning itself as a reference source in its niche. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with Elementor and uses modern tools such as Yoast SEO, WP Rocket, and various analytics and tracking services including Google Analytics, Hotjar, and Facebook Pixel. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and branding suggest a legitimate business. Overall, Digiformag demonstrates a solid business and technical foundation with room for improvement in security transparency and domain registration clarity.

D

Digiforma

digiforma.com

62

Digiforma is a French company founded in 2016 specializing in SaaS software solutions for training management targeted at training organizations and centers. Their platform facilitates administrative document management including training agreements, programs, evaluations, and attendance tracking. The website demonstrates a mature digital presence with professional design, strong SEO, and multi-language support. The technical infrastructure is based on WordPress with Elementor and Gravity Forms, integrated with modern analytics and marketing tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Plausible Analytics for privacy-focused tracking. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure information is absent. The domain WHOIS data is unavailable, which slightly reduces trustworthiness but the overall business credibility remains high based on content and structured data.

A

Affluences

affluences.com

62

Affluences is a specialized platform founded in 2015 that provides real-time attendance monitoring, waiting time communication, and booking services primarily for cultural, recreational, and public institutions such as museums, libraries, and swimming pools. The company targets both general users seeking to optimize their visits and professionals managing institutional presence. The website demonstrates a mature technical infrastructure built on Angular with integration of analytics tools like Google Analytics and Microsoft Clarity, hosted under a reputable registrar OVH with DNS managed by Cloudflare. Security posture is strong with HTTPS enforced and domain protection statuses, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the platform presents a professional, trustworthy, and user-friendly digital presence.

F

Fédération Cinov

cinov.fr

48

Fédération Cinov is a well-established French federation representing 15 professional syndicats and over 4,000 member companies in the intellectual services sector, including consulting, engineering, and digital services. The organization provides a broad range of services including legal assistance, insurance, training, events, and advocacy, positioning itself as a key representative body within the BETIC branch. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its professional audience. Technically, the site is built on Drupal 10, employs modern analytics (Matomo), and integrates Google reCAPTCHA v3 for form security, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Overall, the site is trustworthy, professional, and well-aligned with the federation's business objectives.

F

France Villes et territoires Durables

francevilledurable.fr

44

France Villes et territoires Durables is a French non-profit association dedicated to accelerating the transition of cities and territories towards sustainability and resilience. It brings together local authorities, government entities, companies, and experts to collaborate on sustainable urban development. The website reflects a professional and well-established organization with a clear mission and a strong network of reputable partners. The digital infrastructure is based on WordPress with modern plugins and technologies, hosted by OVH and utilizing Cloudflare DNS services. Security posture is solid with HTTPS, security headers, and reCAPTCHA protections in place, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-maintained, and serves its target audience effectively.

A

Appvizer

appvizer.fr

60

Appvizer is a French-based media and software comparison platform specializing in professional SaaS tools. It leverages AI to recommend suitable software solutions to businesses and professionals, supported by expert content and thousands of user reviews. The platform is well-positioned in the French-speaking market with localized versions in multiple languages, indicating a broad international reach. Technically, the website uses modern frameworks such as React and Astro, integrates analytics tools like Google Tag Manager and Microsoft Clarity, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and policies could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the site is professional, trustworthy, and business-focused, with no signs of malicious activity or content blocking.

C

Caisse d'Assurance Vieillesse des Pharmaciens (CAVP)

cavp.fr

61

The CAVP website represents a professional French pension fund dedicated to pharmacists, providing comprehensive retirement and social benefit services. The site is well-structured, content-rich, and targets pharmacists at various career stages, including active, retired, and collaborators. The business operates under the umbrella of CNAVPL, indicating a government-affiliated entity with a clear mission to manage pharmacists' retirement schemes. Technically, the website employs modern frontend technologies such as Vue.js and Webpack, ensuring a responsive and user-friendly experience. The use of Matomo analytics reflects a privacy-conscious approach to user tracking. The site is served over HTTPS with no detected blocking or WAF challenges, indicating good security hygiene. However, some security headers are missing, and explicit security policies are not publicly disclosed. The security posture is solid with encrypted communications and cookie consent mechanisms compliant with GDPR. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and consistent branding support its legitimacy. Contact channels include phone, email, and online forms, enhancing user accessibility. Overall, the website is a reliable and professional platform for its target audience, with recommendations to enhance security headers and publish incident response policies to further strengthen trust and compliance.

Le Biau Germe is a small French collective of organic and traditional seed producers, operating an e-commerce platform focused on selling biological, reproducible, and traditional seeds to both individuals and professionals. The website presents a consistent brand image with good content quality and clear business focus on organic agriculture. Technically, the site uses modern CSS frameworks like Tailwind CSS and is hosted by Infomaniak Network SA, a reputable hosting provider. The site is mobile optimized and SEO friendly with proper metadata and Open Graph tags. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy and cookie policies are absent, which is a compliance gap. No contact emails or phone numbers are explicitly found, limiting direct communication channels. Overall, the domain registration data supports legitimacy with a long-standing registration since 2002.

S

SAS RESO

captairsolaire.com

39

Capt'air solaire is a specialized importer and exclusive distributor of SolarVenti solar air collectors in France, operating since 2010. The company targets both individual consumers and professional clients, positioning itself as the third largest SolarVenti distributor in the country. Their key services include product sales, installation advice, and customer support, with a strong emphasis on quality Danish manufacturing and European market leadership. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. Security measures include HTTPS, Google reCAPTCHA, and a GDPR-compliant cookie consent mechanism, although some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

S

Simple et Solaire

simple-et-solaire.com

47

Simple et Solaire is a French company specializing in the sale and support of autonomous solar energy kits and equipment, targeting individuals, professionals, NGOs, and communities both in France and internationally. Established since 2008, the company offers a range of photovoltaic kits, batteries, solar lamps, and related services including technical advice, training, and after-sales support. Their market position is that of a trusted expert in solar autonomy, with a particular focus on solutions for isolated sites and the African market. Technically, the website is built on the PrestaShop CMS platform, utilizing jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use, with good SEO practices and clear navigation. However, some modern security best practices such as security headers and cookie consent mechanisms are missing, which could impact compliance and security posture. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, as it limits verification of domain legitimacy and registration details. Overall, the website presents a professional and trustworthy front for a small energy sector business, but improvements in security policies, privacy compliance, and domain registration transparency are recommended to enhance trust and reduce risk.

P

Partner & Co

semence-biologique.fr

39

SemBio, operated by Partner & Co, is a French e-commerce business specializing in the sale of certified organic seeds and seed mixtures for agricultural use. The website targets French-speaking agricultural professionals and organic farmers, offering a range of products including pure seeds and specialized blends for various farming sectors. The company positions itself as a niche supplier within the organic agriculture retail market in France. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO best practices. It integrates marketing and analytics tools such as Google Analytics, Google Tag Manager, and Sendinblue for newsletter and marketing automation. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and uses security headers, reflecting a good security posture. However, it lacks a publicly available security policy or incident response contact information. The domain WHOIS data is privacy protected, which is common and justified for this business type. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and accessibility.

A

Aqua-Techniques

aqua-techniques.fr

59

Aqua-Techniques is a French retailer specializing in ecological water treatment and filtration solutions, distributing exclusive brands such as Doulton, British Berkefeld, and Sprite Showers. The company targets environmentally conscious consumers seeking water purification products for domestic use. Their website is built on the Oxatis e-commerce platform with AngularJS frontend, integrating modern marketing and analytics tools like Google Tag Manager and Google Analytics. The site is well-structured, mobile-optimized, and provides clear contact information including a dedicated phone number and contact page. Security posture is adequate with HTTPS and secure payment indicators, though some security headers and explicit policies could be improved. WHOIS data is unavailable, limiting domain legitimacy verification, but the website content and business presentation appear professional and trustworthy. Overall, Aqua-Techniques demonstrates a solid digital presence with room for enhanced security and compliance transparency.

W

waterlutions

waterlutions.com

68

Waterlutions is a small French business specializing in artisanal water filtration solutions, particularly gravity-based filtration systems. The company operates primarily through its website, offering products via an integrated Ecwid ecommerce platform. The website is built on WordPress using the Gutenberg editor, hosted with AWS Cloudfront CDN, and presents a professional and consistent brand image targeting environmentally conscious consumers interested in water purification. The business appears niche with a local focus in Grisolles, France. Technically, the site uses modern web technologies but lacks some advanced security headers and cookie consent mechanisms, which could impact GDPR compliance. The security posture is moderate with HTTPS enabled but could be improved with additional headers and policies. The absence of WHOIS data raises concerns about domain legitimacy, although the website content and contact information suggest a genuine business presence. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance measures.

D

devisocom

devisocom.com

50

Devisocom is a small communication agency based in Avignon, France, founded in 2008 by Odile Devise. The company offers a range of creative services including graphic design, communication strategy, digital and web solutions, and custom games. The website is professionally designed using WordPress with the Divi theme and includes a portfolio and client testimonials, indicating a credible and established presence in its niche market. Technically, the site is well-structured with SEO optimizations and mobile responsiveness, though performance is moderate. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified. Overall, the website presents a trustworthy and professional image suitable for its target audience.

F

FIDMarseille — Festival International de Cinéma de Marseille

fidmarseille.org

59

FIDMarseille is a well-established international film festival based in Marseille, France, with a history dating back to 2000. The festival showcases a diverse program of fiction, documentary, and artist films, attracting a culturally engaged audience and international cinema professionals. The website reflects a professional and consistent brand image, providing detailed event information, schedules, and social media engagement. Technically, the site is built using modern frameworks like Astro, optimized for mobile devices, and delivers fast performance with responsive images. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is currently weak, with no visible privacy or cookie policies or consent mechanisms. Overall, the site is trustworthy and professionally maintained but would benefit from improved privacy and security practices.

C

CEA-Leti

leti-innovation-days.com

55

CEA-Leti is a prominent technology research institute under CEA, specializing in miniaturization technologies that enable smart, energy-efficient, and secure solutions for various industries. The website serves as a platform to promote and organize multiple semiconductor and technology innovation events globally, targeting industry professionals and researchers. Their market position is strong as a global leader in semiconductor innovation events, supported by a large organization and a consistent brand presence. Technically, the website is built on a modern WordPress CMS with Elementor and several event management plugins. It uses Cloudflare for DNS and serves content over HTTPS, ensuring a secure and reliable user experience. The site is moderately optimized for performance and mobile devices, with good SEO practices and accessibility features. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and advanced security headers like Content-Security-Policy. There is no visible security policy or incident response information, which could be improved. Privacy compliance is partially addressed with a privacy policy and GDPR links, but no cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security and privacy compliance. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their posture.

H

HYVOR

hyvor.com

64

HYVOR is a privacy-first technology company founded in 2017, offering user-friendly web tools including commenting platforms, blogging services, and security APIs. Their products serve millions globally, targeting a broad audience from small blogs to large enterprises. The company operates on a bootstrapped business model emphasizing user privacy and data protection, with no third-party data sales. Technically, the website is built using modern frameworks like SvelteKit, hosted via Cloudflare, and optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC and some security headers could be improved. Privacy compliance is good with clear policies, though cookie consent mechanisms are lacking. Overall, HYVOR presents a professional, trustworthy, and technically mature online presence.

M

Mobibus

tisseomobibus.com

38

Tisséo Mobibus is a specialized transportation service catering to persons with reduced mobility in the Toulouse metropolitan area, operating under the Tisséo Collectivités umbrella. The website provides comprehensive information about their on-demand transport services, reservation systems, tariff details, and accessibility support. The digital presence is well-structured, leveraging WordPress with modern plugins and frameworks to deliver a user-friendly experience. The site is optimized for mobile and accessibility, reflecting the organization's mission. Security posture is solid with HTTPS and cookie consent management, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business and technical indicators suggest a trustworthy public service entity.

T

Tisseo Ingénierie

tisseo-ingenierie.fr

45

Tisseo Ingénierie is a French public local company specializing in the design and realization of sustainable transport infrastructure projects, primarily serving local authorities in the Toulouse metropolitan area. The company positions itself as a key regional player in transport engineering, focusing on innovative and environmentally friendly mobility solutions. Their website reflects a professional and well-structured digital presence, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. The site is well-designed, mobile-optimized, and provides clear navigation and relevant project information. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data slightly reduces domain trust but does not significantly impact overall legitimacy given the professional content and branding. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain transparency.

L

Le Grand Ouest Toulousain Agglomération

grandouesttoulousain.fr

51

Le Grand Ouest Toulousain Agglomération is a regional public government entity in France providing a range of community services including waste management, social services, urban planning, and mobility. The website serves as an official portal for residents and businesses within the agglomeration, offering information, online procedures, and public communications. The site is well-branded, professionally designed, and provides clear navigation and relevant content for its audience. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, hosted by OVH, and uses HTTPS with Google Analytics for visitor tracking. The cookie consent mechanism is comprehensive and GDPR-aware, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and aligns well with its public sector mission.

A

Bienvenue en Muretain

agglo-muretain.fr

52

The website www.agglo-muretain.fr serves as an informational and promotional platform for the Muretain region in France, focusing on tourism, living, and entrepreneurship. It targets residents, tourists, and local entrepreneurs, positioning itself as a regional government or community resource. The site uses WordPress with Elementor and jQuery, indicating a moderate level of digital maturity with a basic but functional technical infrastructure. The content is safe, general audience appropriate, and the design is basic but consistent with regional promotional goals. However, the absence of privacy, cookie, and terms of service policies, as well as lack of contact information, limits its compliance and trustworthiness from a security and privacy perspective. The WHOIS data is missing, which raises concerns about domain legitimacy and registration transparency.

L

Les Enfoiros de l'INSA

enfoiros.org

52

Les Enfoiros de l'INSA is a well-established non-profit student club based in Toulouse, France, dedicated to supporting the Restos du Cœur charity through annual fundraising events and performances. The organization has a strong market position as the leading private donor to the Restos du Cœur in Haute-Garonne since 2007, leveraging community engagement and student participation. Their website reflects a professional and consistent brand image with clear calls to action for donations and event participation. Technically, the site uses modern web technologies including Bootstrap 5 and Google reCAPTCHA, hosted by Scaleway SAS, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and spam protection on forms, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partial, lacking explicit cookie consent and detailed GDPR statements. Overall, the site is trustworthy and well-maintained, serving its non-profit mission effectively.