France security reports

U

Union régionale des Scop et Scic Auvergne-Rhône-Alpes

scop.org

57

Union régionale des Scop et Scic Auvergne-Rhône-Alpes operates as a regional cooperative network supporting cooperative entrepreneurs and enterprises in the Auvergne-Rhône-Alpes region of France. The organization provides a comprehensive range of services including entrepreneurial accompaniment, training, financial support, and networking opportunities. It holds a strong market position as the leading cooperative support network in the region, supported by partnerships with regional authorities and the European Union. The website reflects a professional and consistent brand image, targeting cooperative entrepreneurs and social economy actors. Technically, the website is built on Drupal 10, leveraging modern web technologies and privacy-conscious analytics tools such as Matomo. It integrates social media and tracking scripts responsibly with a cookie consent mechanism in place. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS and employs privacy-respecting analytics. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is common and justified for this type of organization. Overall, the security posture is solid but could be improved with additional transparency and security controls. The overall risk assessment is low, with the site demonstrating good business credibility, technical implementation, and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

L

Les Scop

jefinanceunprojetcooperatif.fr

37

Je finance un projet coopératif is a French crowdfunding platform dedicated to supporting innovative cooperative projects under the Scop and Scic models. It enables individuals to invest, lend, or donate to projects that align with cooperative values such as local job creation and solidarity. The platform partners with various crowdfunding services and institutional cooperatives to facilitate project financing. Technically, the website is built on Drupal 7, leveraging common JavaScript libraries and analytics tools like Google Analytics and Piwik, with HTTPS enforced and privacy-conscious tracking configurations. Security posture is moderate with room for improvement in security headers and formal policies. The absence of WHOIS data limits domain legitimacy verification, but the website content and partner references indicate a legitimate cooperative financing initiative. Overall, the platform presents a professional and trustworthy interface for cooperative project supporters.

C

CoopVenture

coopventure.fr

54

CoopVenture is a French investment fund specializing in evergreen and participative financing for innovative companies that engage their employees in ownership and decision-making. Founded in 2016, it operates with a long-term horizon of at least seven years, focusing on sustainable development and local employment. The website reflects a niche market position combining cooperative values with the French Tech ecosystem, offering financing up to 400 K€ and business acceleration services. Technically, the site is built on WordPress with common plugins and uses Google Analytics for tracking. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. No direct contact emails or phone numbers are provided, relying on a contact form instead. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional and trustworthy but could enhance transparency on security and privacy policies.

A

ARESCOP

revisioncooperative.coop

56

The website revisioncooperative.coop represents ARESCOP, a cooperative network focused on providing cooperative revision and auditing services to Scop, Scic, and Coop47 entities in France. The platform serves as an informational and contact portal, offering regional office details and testimonials to support cooperative governance. The business model is non-profit and cooperative-oriented, targeting cooperative enterprises and their members across France. Technically, the website is built on Drupal 10, leveraging modern web technologies including FontAwesome for icons and Matomo for analytics, complemented by a GDPR-compliant cookie consent mechanism (tarteaucitron). The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting details are not explicit. From a security perspective, the site enforces HTTPS and uses cookie consent tools but lacks advanced security headers and a published security policy or incident response contacts. The domain registration is consistent with the business, registered under ARESCOP in France since 2019, indicating legitimacy. No WAF or blocking mechanisms are detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security hardening and transparency regarding incident response and vulnerability disclosure.

S

SOCODEN

financer-les-scop.coop

53

The website financer-les-scop.coop serves as a financial resource platform for the cooperative movement of Scop and Scic in France, operated by SOCODEN. It offers a range of financial tools including participative loans, treasury loans, bank loan guarantees, equity financing, and real estate financing tailored to cooperative enterprises. The site is well-positioned within the French cooperative ecosystem, supported by a network of related cooperative organizations and federations. Technically, the site is built on Drupal 10, integrates modern analytics tools such as Matomo and Google Tag Manager, and employs a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enabled and no exposed sensitive data, although DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, trustworthy, and provides clear contact information and social media presence, supporting its credibility and user engagement.

C

Confédération générale des Scop et des Scic

pouruneeconomiehumaine.coop

53

The website pouruneeconomiehumaine.coop represents the Confédération générale des Scop et des Scic, a well-established French cooperative confederation with approximately 140 years of history. The site primarily promotes the 2026 congress event and provides resources and information for cooperative members, partners, and stakeholders. It features detailed navigation for congress registration, partner engagement, and regional cooperative networks. The business model is non-profit and focused on supporting cooperative enterprises in France. The website content is professionally presented in French, targeting cooperative members and related organizations.

C

Confédération générale des Scop et des Scic

jetransmetsamessalaries.fr

57

The website 'Je transmet à mes salariés' is a professionally maintained platform operated by the Confédération générale des Scop et des Scic, focusing on facilitating the transmission of businesses to employees in France. It provides comprehensive information, resources, and testimonials to support cooperative business transitions, targeting entrepreneurs, ceding business owners, employees, and accounting experts. The site leverages Drupal 10 CMS and integrates modern analytics and marketing tools such as Google Tag Manager, Matomo, and LinkedIn Insight, ensuring a robust technical infrastructure with good mobile optimization and accessibility. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, reflecting a good privacy posture. However, it lacks some advanced security headers and explicit incident response contacts, which could be improved. The absence of WHOIS registrant data is likely due to privacy protection policies common with .fr domains and does not detract from the site's legitimacy. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements. Strategically, the platform serves a niche cooperative business market in France, supported by a network of partner cooperative organizations and regional unions. It maintains a consistent brand presence across social media and offers valuable content such as e-books and video testimonials, enhancing user engagement and trust.

S

Accueil | Start-Scop le site des start-up coopératives

start-scop.fr

48

The website www.start-scop.fr serves as a dedicated platform promoting and supporting start-up cooperatives (Scop/Scic) in France. It targets young entrepreneurs seeking social utility and a sense of belonging through cooperative business models. The site offers guidance on creating, financing, and accompanying cooperative startups, showcasing successful cooperative entrepreneurs and providing news and resources. Technically, the site is built on Drupal 10 CMS, integrates Matomo and Google Analytics for tracking with privacy considerations, and uses modern web technologies including YouTube APIs. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though it lacks explicit security headers and formal privacy or security policies. The domain WHOIS data is not publicly available, typical for .fr domains or privacy-protected registrations, but the website content and activity indicate legitimacy. Overall, the site is professional, well-structured, and serves a niche cooperative entrepreneurship community effectively.

C

CGSCOP

les-scic.coop

52

The website www.les-scic.coop represents the Confédération générale des Scop et des Scic (CGSCOP), a French cooperative confederation established in 2011. It serves as a central hub for promoting and supporting Sociétés Coopératives d’Intérêt Collectif (Scic), providing resources, documentation, and networking opportunities for entrepreneurs, associations, and public entities interested in cooperative business models. The site is well-structured, professionally designed, and offers comprehensive content relevant to its target audience. Technically, the site is built on Drupal 10, leveraging modern web technologies and analytics tools such as Matomo and Google Tag Manager, with a strong emphasis on privacy compliance through cookie consent management. The site is mobile-optimized and accessible, with good SEO practices implemented. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though DNSSEC is not enabled and some security headers could be improved. From a security perspective, the site shows maturity with no signs of exposed sensitive data or malicious content. Privacy policies and cookie management are clearly presented and GDPR compliant. Contact information is transparent, including phone, address, and a contact form. No incident response or vulnerability disclosure policies were found, which could be areas for future enhancement. Overall, the website is trustworthy, professionally maintained, and aligned with the cooperative movement's values. Strategic recommendations include enabling DNSSEC, enhancing security headers, and adding explicit terms of service and vulnerability disclosure information to further strengthen trust and compliance.

M

Mieux Vivre

mieuxvivre54.org

45

Mieux Vivre is a French non-profit association dedicated to environmental protection, promotion of organic and local food, and community activities in the Gorcy region. Established since 2004, the association has a strong local presence with a focus on ecological transition and pollution monitoring. The website serves as an information hub with event calendars, photo galleries, and partner links, targeting local residents and ecological activists. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers and DNSSEC are missing. The domain registration is consistent with the association's history, enhancing trustworthiness.

A

Alterrenat Presse

alterrenat-presse.com

54

Alterrenat Presse operates as a specialized French e-commerce platform focused on alternative press, books, and magazines related to organic living, well-being, and ecological topics. The website is built on PrestaShop and offers a curated selection of products targeting a niche audience interested in sustainable and alternative lifestyles. The company maintains a professional online presence with clear contact information and social media engagement primarily via Facebook. Technically, the site uses a mix of legacy and modern JavaScript libraries and is mobile optimized with a moderate performance profile. Security posture is adequate with HTTPS enforced and basic security best practices, though improvements in security headers and updated libraries are recommended. The absence of WHOIS registration data raises concerns about domain legitimacy, but the active and professional website presence partially mitigates this risk. Overall, the site is a credible small business e-commerce platform with room for technical and security enhancements.

M

Mercator Ocean International

mercator-ocean.fr

58

Mercator Ocean International is an intergovernmental organization dedicated to providing digital ocean systems and information services, endorsed by multiple European countries and linked with the UN Ocean Conference. The organization delivers global ocean data, monitoring, forecasting, and scientific insights to support climate action and ocean health. The website is professionally designed using WordPress and Elementor, with a strong focus on oceanographic data and community coordination. Social media presence and official endorsements enhance its credibility. Technically, the site uses modern web technologies and analytics tools like Matomo, ensuring moderate user tracking with some privacy considerations. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partial, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy, authoritative, and well-positioned in its niche, but could enhance transparency and compliance aspects.

L

Léa Nature

leanature.com

9

Léa Nature operates a professional e-commerce website specializing in organic and natural products including food, cosmetics, dietary supplements, and household items. The website is well-structured, primarily in French, and targets consumers interested in healthy and eco-friendly products. The business appears to be established with a consistent brand presence and a comprehensive online catalog. Technically, the site is built on Magento CMS, leveraging modern JavaScript libraries and monitoring tools such as New Relic. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Privacy and cookie policies are present and appear to comply with GDPR requirements. However, the absence of WHOIS domain registration data and lack of explicit security policy or incident response information slightly reduce the overall trustworthiness from a security and compliance perspective.

B

BiO'Pôle de Léa

biopoledelea.com

9

BiO'Pôle de Léa is a French ecological event website established in 2016, focusing on promoting environmentally conscious events unique in France. The site targets French-speaking audiences interested in ecological design and energy sectors. Technically, the website is built on WordPress using the The7 theme, with SEO optimization via Yoast and analytics through Google Tag Manager. Cookie consent is managed by CookieYes, indicating some privacy compliance efforts. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers. No privacy policy or terms of service were detected, which are areas for improvement. Overall, the site presents a professional and consistent brand image with good content quality and user experience.

L

LEA NATURE

recrutement-leanature.com

59

Léa Nature is a well-established French company specializing in organic products, operating a dedicated recruitment website to attract talent across multiple disciplines such as commercial, R&D, marketing, supply chain, production, and support functions. The website serves as a professional portal for job seekers interested in joining the group, showcasing company culture, job offers, and career opportunities. The site is built on WordPress, leveraging modern web technologies and plugins to ensure good performance, SEO, and GDPR compliance. The presence of Google Tag Manager, Hotjar, and Facebook/LinkedIn tracking pixels indicates a mature digital marketing and analytics setup. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response disclosures. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives.

C

Compagnie Léa Nature

compagnie-leanature.com

60

Compagnie Léa Nature is a prominent French manufacturer specializing in organic and natural products across food, health, beauty, and home care sectors. Established in 1993, the company operates as a collective of family-owned businesses united by a commitment to bio-responsibility and sustainability. Their market position is strong as the leading French manufacturer in their niche, supported by a diverse portfolio of brands and active philanthropic engagement in environmental and social causes. The website reflects a professional and comprehensive digital presence, optimized for performance, accessibility, and SEO, leveraging WordPress and modern web technologies. Security measures include HTTPS, GDPR-compliant cookie management, and anti-bot protections, although some security headers could be enhanced. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature security posture and compliance with privacy regulations, supporting the company's credibility and trustworthiness.

L

Léa Nature

leanatureboutique.com

9

Léa Nature operates a French e-commerce platform specializing in organic products, offering promotions and a variety of organic brands. The website is built on Magento 2 with several extensions enhancing user experience and marketing capabilities. The technical infrastructure includes modern JavaScript libraries and monitoring tools such as New Relic and Google Tag Manager, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and monitoring in place, though explicit security headers and privacy policies are not clearly presented. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, but the website content and branding suggest a professional and established business. Overall, the site is suitable for general audiences with no adult or questionable content detected.

F

Fondation Inserm

fondation-inserm.org

58

Fondation Inserm is a French non-profit foundation established in 2023 to support the medical research missions of Inserm by developing private funding from donors including individuals and companies. The foundation focuses on advancing health and biomedical research, promoting scientific knowledge dissemination, and supporting research teams through funding innovative programs, acquiring advanced equipment, and recruiting research talents. The website is professionally designed using WordPress and Elementor, with good mobile optimization and accessibility features. It includes a GDPR-compliant cookie consent mechanism and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced and domain registration consistent with the organization's identity, though security headers and explicit privacy policies are not detected in the provided content. No direct contact emails or phone numbers are found, but social media presence is established on Instagram, LinkedIn, and Facebook. Overall, the site presents a trustworthy and professional image aligned with its mission as a healthcare non-profit foundation.

The domain inserm-transfert.fr is registered since 2002 under the registrar GIP RENATER, indicating a legitimate and established presence likely related to the French government or public research sector. However, the website content is currently inaccessible, returning a 404 Not Found error page with no metadata, scripts, or visible content. This lack of accessible content prevents a full assessment of the business operations, services, or compliance posture. Technically, no information about SSL, security headers, or technologies used is available, indicating either a misconfiguration or the site being offline. Security posture cannot be properly evaluated due to missing content and headers. Overall, the website is not currently functional, which poses a risk to user trust and business credibility.

C

Canopée

canopee.ong

59

Canopée is a French non-profit organization dedicated to protecting forests through expert investigations, advocacy, and citizen mobilization. The website positions itself as a credible and active player in environmental protection with a clear mission and multiple ongoing campaigns. Technically, the site is built on WordPress with modern analytics and consent management tools, showing good digital maturity and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. The domain WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, professional, and well-maintained.

E

Emmaüs Epargne Solidaire

emmaus-epargne-solidaire.fr

48

Emmaüs Epargne Solidaire is a French social finance organization that enables individuals to invest in solidarity savings products aimed at funding social and environmental projects, primarily supporting Emmaüs groups. The website presents a clear mission focused on ethical investment and social impact, supported by recognized certifications such as ESUS and Finansol. The platform is positioned as a niche player in the social finance sector, targeting socially conscious investors. Technically, the website leverages modern web technologies including React and Ionic Framework, with a responsive design and good SEO practices. However, some areas such as accessibility and security headers could be improved. The site does not appear to use extensive tracking or advertising, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy or cookie policies, which are important for compliance and trust. The WHOIS data is incomplete or protected, which slightly reduces domain trustworthiness, though the website content and certifications support legitimacy. Overall, the website is professional and trustworthy with a strong social mission, but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

M

MaFormation

maformation.fr

58

MaFormation.fr is a large French online platform specializing in aggregating and listing professional training courses across France. It offers a wide range of educational services including CPF-financed training, alternance programs, online courses, and competency assessments. The platform targets individuals seeking to enhance their professional skills and certifications. The website is well-branded, consistent, and provides comprehensive content relevant to its audience. Technically, it employs modern web technologies such as Tailwind CSS, StimulusJS, and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Abtasty. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. Security posture is good with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, but the association with the Hellowork Group parent company and professional presentation mitigate this risk. Overall, the site is professional, trustworthy, and serves a critical role in the French education sector.

C

Confédération générale des Scop

les-scop.coop

55

The website www.les-scop.coop represents the Confédération générale des Scop, a French non-profit organization supporting cooperative enterprises such as Scop and Scic. It serves as a central hub for cooperative members, entrepreneurs, and stakeholders in the social and solidarity economy in France. The site offers resources, news, career information, and a network of regional unions and partners, positioning itself as a national leader in cooperative support. Technically, the site is built on Drupal 10 CMS, leveraging modern JavaScript libraries and analytics tools including Matomo and Google Tag Manager. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs cookie consent mechanisms compliant with GDPR and provides clear contact information and member extranet access. From a security perspective, the site enforces HTTPS and uses consent-based tracking. However, it lacks visible security headers and a published security policy or incident response contacts. The domain registration is consistent and trustworthy, registered since 2009 with a registrar specialized in .coop domains. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-aligned with its cooperative mission. Strategic improvements in security headers and explicit security policies would enhance its security posture further.

F

Framasoft

framateam.org

56

Framateam is a French non-profit association's service providing a free, privacy-focused, open source team chat platform based on Mattermost. It targets teams and communities seeking ethical and user-controlled communication tools. The website is well designed, content-rich, and consistent with the organization's mission. Technically, it uses modern JavaScript frameworks and enforces HTTPS with a Content-Security-Policy header, though DNSSEC is not enabled and no cookie consent mechanism is present. Security posture is good but could be improved with published incident response policies and vulnerability disclosure mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the service.

E

ENGIE

engie.com

72

ENGIE is a major global energy company focused on accelerating the transition to a carbon-neutral economy. The company offers a broad range of services including renewable energy production, energy flexibility solutions, infrastructure management, and energy supply tailored to cities, industries, tertiary sectors, and individual consumers. The website content is professionally presented in French, reflecting ENGIE's strong market position in the energy sector, particularly in France and internationally. Technically, the site is built on Drupal CMS with modern web technologies such as Bootstrap, Google Tag Manager, and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected and no security.txt file is published. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's legitimacy given the strong branding and external references. Overall, ENGIE's website demonstrates a mature digital presence aligned with its business objectives and compliance requirements.

F

Fondation Léa Nature

fondation-mecenat-leanature.org

59

Fondation Léa Nature is a French non-profit organization dedicated to environmental philanthropy, supporting ecological agriculture, biodiversity, climate action, and health initiatives. The foundation operates under the umbrella of Compagnie Léa Nature and is affiliated with the global 1% for the Planet network, indicating a strong commitment to sustainability and environmental causes. Their website provides comprehensive information about their mission, funding axes, and project submission processes, targeting associations, citizens, and local actors engaged in environmental protection. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and GDPR Cookie Compliance, ensuring good SEO and privacy compliance. The site uses Google Analytics and Google Tag Manager for analytics and tracking, and implements Google reCAPTCHA v3 for form security. The site is mobile-optimized, accessible, and performs moderately well, with consistent branding and clear navigation. From a security perspective, the site enforces HTTPS and uses GDPR-compliant cookie consent mechanisms. While some security headers are not explicitly detected, the overall posture is good with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the foundation's age and business claims, enhancing trustworthiness. Overall, Fondation Léa Nature presents a professional, trustworthy, and well-maintained online presence that aligns with its mission and audience. Strategic improvements in security headers and ongoing maintenance are recommended to sustain and enhance their security posture.

N

Nouvelle Séquence

nouvelle-sequence.fr

52

Nouvelle Séquence is a professional collective of screenwriters dedicated to improving the representation of environmental issues on screen. The website presents a focused mission and offers resources such as toolkits and events to support this cause. The organization appears to target professionals and stakeholders interested in environmental storytelling, positioning itself as a niche collective within the media and environmental advocacy space. Technically, the website is built on the Framer platform, utilizing modern web fonts and SVG graphics, delivering a good user experience with responsive design and clear navigation. However, the site lacks critical privacy and cookie policies, and no WHOIS data is available to verify domain registration details, which limits trust assessment. Security posture is moderate with no advanced headers or policies detected, and minimal tracking is present via Framer's event scripts. Overall, the site is professional and safe but would benefit from enhanced security and compliance measures.

M

Mercator Ocean International

mercator-ocean.eu

58

Mercator Ocean International is an intergovernmental organization dedicated to providing digital ocean systems and information services. It operates as a public service delivering ocean data, supporting international cooperation, and advancing ocean prediction initiatives. The organization is endorsed by multiple European governments and actively participates in global ocean health and climate monitoring efforts. The website reflects a professional and consistent brand presence with comprehensive ocean-related content targeting governments, researchers, and civil society stakeholders. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO, with multilingual support via WPML. It employs Matomo analytics and social sharing tools, indicating a mature digital infrastructure. The site is mobile optimized and accessible, with good SEO practices, though some improvements in security headers and privacy compliance are recommended. Security posture is solid with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy and cookie policies, security headers, and incident response information suggests areas for enhancement. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains and justified for this type of organization. Overall, the website presents a trustworthy and authoritative presence in the ocean data and intergovernmental domain, with recommendations to improve transparency and privacy compliance to further strengthen user trust and security posture.

E

Eleven

eleven-strategy.com

60

Eleven is a medium-sized French strategy consulting firm specializing in data and AI strategy, founded in 2013. The company positions itself as a pioneer in digital and data revolutions consulting, targeting businesses seeking to leverage data and AI for strategic advantage. Their website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site runs on WordPress with Yoast SEO and Matomo analytics, hosted by OVH sas, a reputable provider. Security posture is good with HTTPS enabled and domain protections in place, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is strong with a comprehensive privacy and cookie policy and consent mechanism. However, explicit contact emails and phone numbers are not publicly listed, relying on contact forms instead. Overall, the website is trustworthy and professional, with moderate tracking and good privacy practices.

C

Climat Médias - Pour plus de climat dans les médias

climatmedias.org

63

Climat Médias is a French non-profit association dedicated to increasing and improving climate and biodiversity coverage in the media. They provide media monitoring data, conduct journalist training, advocate through petitions, and engage citizens to raise awareness. The website is built on WordPress with modern SEO and privacy compliance features, including a cookie consent mechanism and a comprehensive privacy policy. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and some security headers could be improved. Contact is primarily via email and contact forms, with active social media channels. Overall, the site is professional, trustworthy, and well-aligned with its mission.

C

Centre national du livre

centrenationaldulivre.fr

63

The Centre national du livre (CNL) is a French public institution under the Ministry of Culture dedicated to supporting all actors in the book industry, including authors, translators, editors, booksellers, and libraries. The website serves as a comprehensive portal for information on financial aids, literary events, studies, and resources related to the book sector in France. It maintains a strong market position as a key governmental cultural support entity. Technically, the site is built on Drupal 8, employs Matomo and Google Analytics with privacy-conscious configurations, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS, cookie consent mechanisms, and domain protections, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a broad audience of literary professionals and cultural stakeholders.

Kamael is a French company founded in 2014 specializing in software solutions tailored for bookstores and commerce. The website presents the company as a niche software provider targeting the retail sector, specifically bookstores. The business model revolves around providing software products to enhance commerce operations within this niche. The website content is primarily in French and focuses on describing the company's offerings to its target audience of bookstore owners and operators. Technically, the website employs modern iconography with Font Awesome 6 and uses the AOS library for animations. It also integrates Matomo for analytics, indicating a preference for privacy-conscious tracking. The hosting provider is OVH sas, a reputable French hosting company. The website is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no DNSSEC enabled for the domain, and no explicit security or incident response policies are published. Privacy and cookie policies are absent, which is a compliance gap, especially under GDPR regulations. Overall, the website is functional and moderately professional but lacks comprehensive privacy, security, and contact disclosures. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance posture.

F

FVI | Solutions et logiciels pour la gestion de patrimoine

fvi.fr

10

FVI is a French company specializing in providing software solutions for wealth management. The website presents a professional image with a clear focus on asset and wealth management software targeted at professionals and individuals interested in managing their patrimony. The company operates in the technology sector with a niche focus on financial software solutions. The website is built on WordPress using the Astra theme and WooCommerce for e-commerce capabilities, enhanced with Elementor for page building. It integrates Google Tag Manager and Google reCAPTCHA, indicating a moderate level of digital maturity and attention to user interaction and security. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could improve protection. The absence of WHOIS data suggests privacy protection, which is common for small technology firms. Overall, the website is well-structured, GDPR compliant, and trustworthy, though it lacks explicit contact emails and phone numbers, relying on contact forms instead.

Salon Bien Etre & Bio Strasbourg is a regional event platform focused on wellness, natural health, organic products, and alternative therapies. The website presents a professional and content-rich experience targeting visitors interested in health, ecology, and personal development. The event offers exhibitors, conferences, workshops, and organic food markets, positioning itself as a niche but established player in the Strasbourg wellness event market. Technically, the site is built on the IONOS Website Editor platform, leveraging modern JavaScript libraries and CDNs, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. The WHOIS data is unavailable or indicates the domain may not be registered, which is a concern for domain legitimacy and trust. Overall, the site is trustworthy and safe for general audiences but would benefit from improved transparency on domain registration and enhanced security practices.

A

Association Mieux Vivre

foirebiogorcy.eu

43

The website foirebiogorcy.eu represents the Foire Bio de Gorcy, an annual organic fair held in Gorcy, France, organized by the independent association Mieux Vivre since 1996. The event targets visitors and exhibitors interested in organic products from France and neighboring countries, offering free entry and promoting local producers. The site is built on WordPress using Astra theme and Elementor, with standard plugins for forms, cookie consent, and Google reCAPTCHA. While the site is functional and well-structured, it lacks a formal privacy policy and terms of service pages, and the Google Analytics plugin is present but not configured. Security posture is adequate with HTTPS and reCAPTCHA but could be improved with additional headers and policies. Overall, the site is trustworthy and serves its purpose effectively with room for compliance and security enhancements.

A

ADABio, pour le développement de l'agriculture bio en Auvergne Rhône-Alpes

adabio.com

10

ADABio is a well-established non-profit association dedicated to promoting and supporting organic agriculture in the Auvergne Rhône-Alpes region of France. Founded in 1984, it serves producers, local authorities, and citizens by providing technical support, training, and community engagement to foster sustainable and equitable organic farming practices. The website reflects a professional and regionally focused organization with clear messaging and a consistent brand identity. Technically, the site is built on a modern WordPress platform using popular plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the site is trustworthy and safe for general audiences, with room for improvement in compliance and security transparency.

Bio 46 is a regional non-profit association dedicated to supporting organic farmers in the Lot department of France. The website serves as a resource hub offering information, training access, and community networking for organic agriculture stakeholders including farmers, local businesses, collectives, and consumers interested in organic products. The organization positions itself as a key regional player in promoting organic farming practices and sustainable agriculture. Technically, the website uses a traditional stack including jQuery, Bootstrap 3, and Font Awesome, hosted by OVH. The site is accessible, moderately performant, and has basic mobile optimization. However, it lacks modern CMS indicators and advanced SEO or accessibility features. No analytics or tracking scripts were detected, indicating a minimal data collection approach. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps especially under GDPR. No incident response or security contact information is provided. The domain registration is consistent and transparent, supporting the legitimacy of the site. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and better mobile and accessibility optimizations to strengthen trust and user experience.

S

Sologne Nature Environnement

sologne-nature.org

57

Sologne Nature Environnement is a well-established non-profit association dedicated to the protection and promotion of nature and the environment in the Sologne region of France. With over 40 years of expertise, the organization offers a variety of services including biodiversity studies, public and school educational programs, environmental consulting, and community engagement through events and advocacy. The website reflects a mature digital presence with clear branding, contact information, and active social media channels. Technically, the site is built on Joomla CMS with modern front-end technologies and includes interactive features such as event calendars and maps. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. The absence of WHOIS data limits domain trust verification, but the overall content and transparency support legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain registration transparency.

C

Château de la Bourdaisière · Hôtel de charme *** · Val de Loire

labourdaisiere.com

10

Château de la Bourdaisière is a boutique 3-star hotel located in the Loire Valley, France, offering a blend of hospitality, cultural exhibitions, and leisure activities. The website presents a professional and rich user experience with detailed information about accommodations, dining options, events, and unique experiences such as the tomato-themed attractions. The business targets tourists and visitors seeking a charming and culturally immersive stay in the region. Technically, the site is built on WordPress using Elementor and integrates several plugins for event management and booking, supported by Google Analytics and Facebook Pixel for marketing and analytics. Security posture is generally good with HTTPS and secure booking integration, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the WHOIS data for the domain is missing or not publicly available, which raises concerns about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from verification of domain registration and enhanced security headers.

S

salon ARTEMISIA - Marseille

salon-artemisia.com

50

Salon ARTEMISIA is a regional event organizer based in Marseille, France, specializing in bio, well-being, and ecological habitat trade shows. The website presents a professional and well-structured platform showcasing event dates, exhibitor profiles, partner logos, and visitor information. The business targets consumers and exhibitors interested in organic products and sustainable living. Technically, the site is built on WordPress with Elementor and uses modern SEO and analytics tools, including Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and domain transfer protection, but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is trustworthy and professionally maintained, with room for improvement in compliance and security transparency.

S

salons ZEN & BIO

salon-zenetbio.com

46

The website salons ZEN & BIO operates as an event organizer specializing in ecological, organic, wellness, and healthy habitat salons primarily in France, with events in Nantes, Lyon, and Angers. The business model focuses on organizing and promoting these niche events, targeting environmentally conscious consumers and exhibitors. The site is supported by SPAS Organisation, indicating a structured parent company backing. The website content is well-structured, professionally designed, and optimized for SEO, with clear event information and calls to action for exhibitors. Social media presence and partner logos enhance credibility. Technically, the site is built on WordPress using Elementor and several plugins for SEO, event management, advertising, and social media integration. It employs modern web technologies and includes consent management for GDPR compliance. Performance is moderate with good mobile optimization. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security headers and detailed security policies. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and ownership transparency. The site lacks direct contact emails and phone numbers, which could impact trust. Privacy and cookie policies are present and integrated with a consent platform, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its business niche but would benefit from improved transparency in domain registration, enhanced security headers, and clearer contact information to strengthen trust and compliance.

S

Studio 2 Com

studio2com.net

9

Studio 2 Com is a small French company specializing in organizing well-being and artisan salons primarily in the Maine-et-Loire region and neighboring departments. The website presents a professional and consistent brand image, offering event organization services that highlight local artisans, artists, and innovative small businesses. The company has been active since 2019 and targets visitors and professionals interested in well-being and arts divinatoires. Technically, the website is built on WordPress using Elementor and several popular plugins, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and secure forms, though security headers and explicit policies are lacking. Privacy and cookie policies are present and GDPR compliant. However, the domain WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and reduces overall trust. Contact information is clearly provided, including a company email and phone number, and social media presence is established on Facebook.

The website salons-bienetre.com represents Agence Plan B, an organizer of wellness fairs in France, targeting individuals interested in health, relaxation, and natural products. The site promotes events in multiple cities with dates and venues, providing a contact form and social media links for engagement. Technically, the site is built on WordPress using the Divi theme, leveraging standard web technologies such as jQuery and Google Fonts. The site is served over HTTPS, ensuring encrypted communication, and includes a captcha-protected contact form to mitigate spam. However, the absence of WHOIS data for the domain raises concerns about transparency and domain legitimacy. No privacy or cookie consent mechanisms were detected, which may impact compliance with privacy regulations. Security headers are not present, indicating room for improvement in security posture. Overall, the website is functional, professionally designed, and provides relevant content for its audience, but lacks some critical compliance and security features.

B

Bio en Grand Est

biograndest.org

9

Bio en Grand Est is a regional non-profit organization dedicated to supporting and promoting organic agriculture in the Grand Est region of France. The website serves as a network hub for organic producers and provides information, news, events, and resources related to organic farming. The organization targets both professionals in the organic sector and consumers interested in organic products. The site is professionally designed using WordPress and integrates modern web technologies and plugins to deliver a good user experience. Social media integration and structured data enhance its digital presence. Security measures such as HTTPS and reCAPTCHA are implemented, but there is room for improvement in DNS security and HTTP headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and serves its business purpose effectively.

The website represents the Festival International du Film Ornithologique de Ménigoute, a well-established non-profit cultural event focused on wildlife and nature documentaries, particularly ornithology. Founded in 1985 and organized by Association MAINATE, it serves a general audience interested in nature and film. The site provides comprehensive information about the festival's program, activities, and participation opportunities, supported by social media and newsletter engagement. Technically, the site is built on the Contao CMS platform with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the site is professional, trustworthy, and well-maintained.

S

Spas Organisation

spas-expo.com

10

Spas Organisation is a leading French event organizer specializing in bio, well-being, natural health, and sustainable development sectors. The company operates multiple public and professional salons and events, positioning itself as a market leader in France. Their digital presence is built on a WordPress platform with modern SEO practices and a clear focus on event promotion and partner collaboration. Technically, the website is well-structured, mobile-optimized, and uses recognized technologies such as Elementor and Yoast SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although incident response and vulnerability disclosure mechanisms could be improved. Privacy compliance is adequate with GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a professional and trustworthy business with a solid market position.

H

HashBang

hashbang.coop

9

HashBang is a Lyon-based cooperative specializing in bespoke web engineering services. They provide comprehensive project management, technical expertise, and responsible digital solutions primarily targeting businesses seeking tailored web and ERP development. Their cooperative model emphasizes collective decision-making and employee ownership, positioning them as a socially responsible player in the local technology sector. Technically, the website leverages modern frameworks such as Django and Wagtail CMS, with a clean, mobile-optimized design and good accessibility. However, the site lacks visible cookie consent mechanisms and detailed privacy or security policies, which impacts compliance and security posture. Security-wise, no explicit security headers or incident response information are published, though no obvious vulnerabilities or exposed sensitive data were detected. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

R

RFM

rfm.fr

44

RFM is a well-established French radio station with a strong digital presence offering live streaming, music news, podcasts, contests, and video content. The website targets French-speaking audiences interested in music and entertainment. Technically, the site uses modern web technologies including JavaScript frameworks and CDNs under the lanmedia.fr domain, indicating corporate hosting and infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses privacy and cookie consent mechanisms, but lacks explicit security headers and detailed security policies. WHOIS data is unavailable, which reduces transparency but the site’s professional appearance and active content suggest legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, with room for improvement in security posture and transparency.

L

Le Blog Bio LifeStyle

leblogbio.fr

47

Le Blog Bio LifeStyle operates as an independent French lifestyle media platform focusing on healthy, eco-friendly living, zero waste, and Made in France products. Founded in 2017, it targets French-speaking audiences interested in sustainable lifestyle choices. The website offers articles, product reviews, affiliate marketing partnerships, and a newsletter subscription service. It maintains a consistent brand image and leverages social media channels for audience engagement. Technically, the site is built on WordPress using Elementor and Astra theme, with performance optimizations via WP Rocket and SEO enhancements through Yoast. The hosting and domain registration are consistent with the French market, enhancing trustworthiness. Security posture is good with HTTPS and some security headers, but could be improved with stricter CSP and additional headers. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy, aligning with GDPR requirements. Overall, the site presents a professional, trustworthy, and user-friendly experience with moderate tracking and advertising typical for media sites.