France security reports

T

Tice-education

tice-education.fr

62

Tice-Éducation is a French digital education portal providing free and independent resources on topics such as coding, AI, EdTech, and digital transformation in schools. The site targets educators, students, and parents interested in educational technology. Technically, it is built on Joomla CMS with modern frontend libraries and includes advertising managed by Revive Adserver. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism, indicating a moderate level of privacy compliance. Security posture is good with HTTPS enabled, but lacks explicit security headers and published security policies. WHOIS data is not publicly available, suggesting privacy protection, which is reasonable for this type of site. Overall, the site is professional, trustworthy, and safe for general audiences.

I

INRAE

inrae.fr

64

INRAE is a prominent French public research institute specializing in agriculture, food, and environmental sciences. The website reflects a mature digital presence with comprehensive content targeting researchers, students, policymakers, and the general public. It offers extensive resources including research dossiers, events, and collaboration opportunities. The site is multilingual and well-branded with official government logos and certifications, reinforcing its authoritative position. Technically, the website is built on Drupal 10, leveraging modern web standards and responsive design to ensure accessibility and usability across devices. The presence of cookie consent mechanisms and privacy policies indicates attention to regulatory compliance, particularly GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. The WHOIS data is unavailable due to AFNIC policies, but the domain is active and updated, consistent with a legitimate public institution. No suspicious or malicious indicators were found. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a government research entity.

T

Toulouse INP

inp-toulouse.fr

52

Toulouse INP is a reputable French higher education and research institution specializing in engineering education and scientific research. The website presents a comprehensive offering of academic programs, research initiatives, and innovation partnerships, targeting students, researchers, and industry collaborators. The institution maintains a strong regional presence with multiple partner schools and international collaborations. Technically, the website is built on the Ametys CMS platform, leveraging modern JavaScript libraries for an interactive user experience. It is mobile-optimized and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and WHOIS data transparency are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, supporting the institution's mission effectively.

A

Association CERESA

ceresa.fr

39

Association CERESA is a French non-profit organization established in 2005, specializing in autism support and education in the Occitanie region. It operates multiple specialized services including home education and care (SESSAD), educational units (UE), and professional training through its Pôle Formation. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation targeting parents, professionals, and stakeholders concerned with autism. The organization maintains a social media presence on Facebook and LinkedIn, enhancing its outreach and credibility. Technically, the site uses modern web technologies and includes Matomo analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit privacy policies. WHOIS data is missing from the AFNIC database, which slightly reduces trust but does not negate the legitimacy given the consistent business information and social presence. Overall, the site is safe, professional, and well-positioned within its niche.

I

IRIT (Institut de Recherche en Informatique de Toulouse)

irit.fr

52

IRIT (Institut de Recherche en Informatique de Toulouse) is a prominent academic research institute specializing in computer science and information technology, affiliated with Toulouse universities in France. The website serves as an informational and academic portal targeting researchers, students, and industry partners. It offers insights into research activities, educational programs, and collaborations. The site is well-structured, professionally designed using modern web technologies such as Bootstrap, and supports multilingual content in French and English. The technical infrastructure reflects a mature digital presence with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, though explicit security headers and policies are not clearly documented. Privacy compliance is lacking due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the domain registration and WHOIS data align well with the institution's academic nature, indicating high legitimacy and trustworthiness.

T

Outlook

toulouse-tech-transfer.com

50

The website at toulouse-tech-transfer.com/owa/auth/logon.aspx is a Microsoft Outlook Web Access (OWA) login portal hosted on a custom domain registered with OVH sas since 2011. The site primarily serves as an authentication gateway for email access and does not provide business descriptive content, privacy policies, or contact information on the login page. The domain registration is consistent and legitimate, hosted by a reputable provider, but the website content is minimal and focused solely on login functionality. Technically, the site uses standard Microsoft OWA web technologies including JavaScript, HTML5, and CSS, with some legacy ActiveX references for S/MIME controls. The hosting provider is OVH sas, and the domain is not DNSSEC enabled. The site lacks modern security headers and privacy compliance disclosures, which limits its security posture and GDPR compliance. Mobile optimization and SEO are basic, and no analytics or advertising scripts are detected. From a security perspective, the site uses HTTPS (implied by URL), employs POST method for login form submission with autocomplete disabled, and includes client-side scripts for password visibility toggling. However, the absence of security headers and privacy policies reduces the overall security maturity. No vulnerabilities or malware indicators are detected in the provided data. Overall, the website functions as a secure login portal but lacks comprehensive privacy, security, and business transparency features. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and compliance.

Polymny Studio is a small cooperative society based in Toulouse, France, specializing in digital learning platforms, DevOps, and Artificial Intelligence solutions tailored for educational institutions and learners. Their key offerings include the proprietary Polymny Studio application for educational video creation, e-learning platform design and deployment, and AI-powered learning tools. The company emphasizes ethical, sustainable, and sovereign digital solutions, leveraging open source technologies such as Moodle, Big Blue Button, and Nextcloud. Technically, the website uses modern technologies including Rust, Python, and JavaScript frameworks, hosted by Infomaniak Network SA, with a responsive design and good user experience. Security posture is moderate with HTTPS enabled but lacking DNSSEC and explicit security headers. Privacy compliance is partial, with privacy and terms located on a related domain but no cookie consent mechanism on the main site. Overall, the business credibility is strong due to academic partnerships and cooperative structure, though improvements in security and privacy policies are recommended.

Tetaneutral.net is a French non-profit association providing internet access and hosting services primarily in the Toulouse region. It operates a radio network to serve local and rural communities, especially in underserved 'zones blanches'. The organization emphasizes network neutrality, free software advocacy, and community education. It also supports IoT projects and contributes to open source software. The website reflects a community-driven, transparent, and educational mission with a modest but consistent technical infrastructure hosted by Scaleway SAS. The site uses lightweight technologies such as PureCSS and minimal JavaScript, focusing on content clarity and accessibility. Security posture is moderate but lacks advanced protections such as DNSSEC and security headers, and no explicit HTTPS information was found. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is strong given the domain age, transparency, and community trust signals. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices.

T

Theoma

theoma.fr

58

Theoma is a French financial services firm specializing in comprehensive back-office support for SMEs and business leaders, including accounting, financial management, HR, legal, digitalization, and CSR services. Founded in 2019, it positions itself as a trusted partner offering a 360° financial expertise to help clients manage their businesses with confidence. The website is professionally designed, mobile-optimized, and rich in content, showcasing client testimonials and detailed service descriptions that reinforce its market credibility. Technically, the site is built on Webflow with modern libraries such as jQuery and Finsweet CMS Slider, hosted on Webflow's platform, ensuring good performance and accessibility. Security posture is solid with HTTPS enabled and secure forms, though explicit security headers and privacy/cookie policies are missing, which are recommended for compliance and trust. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the professional presentation and business legitimacy. Overall, Theoma's digital presence reflects a mature, client-focused financial services provider with room for improvement in privacy compliance and security transparency.

S

Swile

swile.co

63

Swile is a French technology company specializing in employee engagement solutions through a smart card and app that consolidates various employee benefits such as meal vouchers, gift vouchers, mobility, and cultural checks. Positioned as an innovative leader in the French market, Swile targets both employees and employers with a B2B SaaS and payment services model. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, it leverages modern frameworks like React and Next.js, ensuring fast performance and good accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response information are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website is trustworthy and well-aligned with the company's business claims.

T

Tourny Meyer

tournymeyer.fr

62

Tourny Meyer is a well-established French real estate consultancy specializing in commercial properties such as offices, warehouses, retail spaces, and investments. The company positions itself as a trusted advisor for professionals seeking to buy, rent, or invest in business real estate across multiple French regions. Their website reflects a mature digital presence with comprehensive service descriptions, multiple agency locations, and a professional design consistent with their market position. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and Google APIs for enhanced user experience and property search functionality. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. The absence of WHOIS data reduces transparency but is typical for commercial entities using privacy protection. Overall, the site is credible, professional, and well-suited for its target audience.

D

Digital Korner

digitalkorner.fr

58

Digital Korner is a specialized web agency based in Nantes, France, focusing on WordPress and No Code digital project development. The company combines the strengths of a traditional agency with the flexibility of independent experts, offering tailored services including website creation, redesign, web design, maintenance, SEO, and automation. Their active involvement in the WordPress community and plugin development positions them as a reputable player in the local digital services market. Technically, the website is built with modern frameworks such as Next.js and integrates scheduling tools like Cal.com, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS usage, but lacks explicit security headers and documented policies. The absence of WHOIS data reduces transparency but does not detract significantly from the professional presentation and trust signals on the site. Overall, the website is well-designed, mobile-optimized, and user-friendly, targeting businesses seeking expert digital solutions in the Nantes region.

P

padam - Relations media et Influence

padampadampadam.fr

55

padam is a French national and independent communication agency specializing in strategic communication, press relations, media relations, and influence strategies primarily serving clients in Nantes, Paris, and the Grand Ouest region. With 16 years of experience, the agency emphasizes pragmatic, clear, and measurable communication strategies to enhance visibility and reputation for businesses and organizations. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site uses WordPress with Elementor and integrates Google Analytics and Tag Manager for tracking, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is missing, which slightly impacts trust but the overall professional presentation and active social media presence support legitimacy. Strategic recommendations include enhancing security headers and verifying domain registration details to strengthen trust.

M

M45T

m45t.com

45

M45T is a French event agency specializing in creative project management and technical services for cultural and event projects. The company offers personalized logistical support and equipment rental for sound, lighting, and video, targeting event organizers and cultural project managers. The website is built on WordPress using the Divi theme and hosted by Infomaniak Network SA, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

L

L’Atelier Transmédia

lateliertransmedia.com

46

L’Atelier Transmédia is a small audiovisual production company based in Nantes, France, specializing in media content creation and transmedia storytelling. The website reflects a professional service provider targeting businesses and individuals seeking audiovisual production services. The technical infrastructure is built on WordPress with Elementor and optimized using WP Rocket, indicating a moderate level of digital maturity. The site loads moderately fast and is mobile optimized, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve in compliance and security transparency.

E

EPSA Innovation

sogedev.com

59

EPSA Innovation, formerly known as Sogedev, is a French consulting firm specializing in public funding advisory services for companies, particularly in innovation and research financing such as Crédit Impôt Recherche (CIR) and Crédit Impôt Innovation (CII). The company holds a strong market position as one of the top referenced experts by the Médiation des entreprises and operates multiple offices across France and internationally in Brazil. Their business model focuses on assisting companies in securing public financial aids and optimizing innovation-related tax credits. The website is professionally designed, content-rich, and targets French SMEs and larger enterprises seeking funding solutions. Technically, the website uses a modern but somewhat dated JavaScript stack including jQuery 1.9.1, Google Tag Manager, and Pardot for marketing automation. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and incident response documentation. Privacy compliance is basic with a privacy and cookie policy present, including consent mechanisms. The WHOIS data for the domain www.sogedev.com is missing, which raises some concerns about domain transparency and registration legitimacy. However, the website branding and content clearly indicate affiliation with EPSA, a known entity, mitigating some risk. No adult or questionable content is present, making the site safe for general audiences. Overall, EPSA Innovation presents a credible and professional online presence with moderate technical maturity and a good security baseline. The main risk area is the lack of WHOIS transparency and some missing security best practices. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving privacy compliance documentation.

uZine is a French independent web magazine focusing on topics such as independent web culture, cyber-economy, internet journalism, and social issues. The site provides articles, briefs, and forums aimed at a French-speaking audience interested in alternative media and social commentary. The business model appears to be content publishing with community participation and private member areas, positioning itself as a niche independent media outlet. Technically, the site is built on the SPIP CMS platform and uses older JavaScript libraries such as jQuery 1.x, with no evidence of modern performance or mobile optimization. Security posture is weak, with no HTTPS enforcement visible, outdated libraries, and no security headers detected. Privacy and cookie policies are absent, and no contact information is provided, which impacts trust and compliance. The WHOIS data is missing or indicates the domain is unregistered, which is a significant concern for legitimacy. Overall, the site is functional but lacks modern security, privacy, and technical standards, and the domain registration inconsistency poses a risk.

A

April

april.org

55

April is a well-established French non-profit association dedicated to promoting and defending free software and open standards since 1996. It serves a broad francophone audience including individuals, professionals, and institutions. The website reflects an active organization with frequent news, events, and educational content. Technically, the site is built on Drupal CMS, uses jQuery and Matomo analytics, and is moderately optimized for mobile and SEO. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and security practices.

Libre en Fête is a French non-profit initiative coordinated by April that promotes free software and free culture through annual events across France. The website provides detailed information about the 2025 edition of the event, including dates, how to participate, and links to related free software projects. The site targets the general public interested in technology and free culture, positioning itself as a well-established community-driven event organizer with a history dating back to 2001. Technically, the website is built on the SPIP CMS platform and uses Matomo for analytics, reflecting a moderate level of digital maturity with a focus on privacy-conscious tracking. The site is mobile-optimized and has a clear navigation structure, although accessibility features are basic. Performance is moderate, and SEO optimization is basic but functional. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and Strict-Transport-Security. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as incident response information, indicates gaps in compliance and security transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen its security posture and user trust.

O

OpenStreetMap France

openstreetmap.fr

42

OpenStreetMap France is a non-profit organization dedicated to promoting and supporting the global OpenStreetMap project within France. The website serves as a hub for community engagement, providing information about mapping, events, training, and data reuse. It targets a broad audience including contributors, local communities, and organizations interested in open geographic data. Technically, the site is built on WordPress with modern web technologies and integrates privacy-respecting analytics via Matomo. Security posture is solid with HTTPS enforced, though some security headers and explicit privacy policies are missing. The absence of WHOIS data reduces domain trust slightly but the website's content quality and community trust indicators are strong. Overall, the site is professional, well-maintained, and serves an important role in the open data ecosystem.

F

Forum-Debian.fr - Forum-Debian.fr

forum-debian.fr

52

Forum-Debian.fr is a French-language community forum dedicated to Debian Linux and related topics, providing a platform for discussions, support, announcements, and programming help. The site targets French-speaking Debian users and Linux enthusiasts, operating as a niche community forum with a small but active user base. The business model is community-driven, offering free access to discussion forums without commercial transactions. Technically, the site runs on phpBB forum software, hosted by OVH in France, and uses modern web technologies including jQuery, Font Awesome, and Google Fonts. The site is moderately performant and mobile-optimized with basic accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though it lacks explicit security headers and published incident response contacts. Privacy compliance is adequate with visible privacy and cookie policies aligned with GDPR. Overall, the website is trustworthy, well-branded, and professionally maintained with active user engagement.

A

Agence KN

agence-kn.fr

47

Agence KN is a specialized web agency based in Lyon, France, focusing on WordPress website creation, SEO audits, and digital marketing services since 2011. The company targets businesses seeking tailored digital solutions with a strong emphasis on client satisfaction and technical excellence. Their website demonstrates a mature digital infrastructure using WordPress CMS, modern JavaScript libraries, and GDPR-compliant cookie management. Security posture is good with HTTPS and consent mechanisms, though some security headers are missing. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but does not detract from the professional presentation and business legitimacy. Overall, the agency presents a credible and professional digital presence with room for security enhancements.

W

We Recruit

werecruit.io

59

We Recruit is a French-based recruitment software company offering a customizable ATS platform designed to optimize recruitment processes for recruiters, managers, and candidates. The company positions itself as a niche provider with a modular solution adaptable to various recruitment needs. The website reflects a mature business with a strong market presence supported by client testimonials and a professional digital footprint. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, hosted by OVH sas. Security posture is solid with HTTPS, domain locks, and no exposed sensitive data, though DNSSEC is not enabled and no explicit security policy is published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site demonstrates high professionalism and trustworthiness.

S

Soren

soren.eco

63

Soren is a French eco-organism officially accredited to manage the collection and recycling of used photovoltaic solar panels across France. It acts as a key coordinator in the circular photovoltaic energy sector, collaborating with various stakeholders including individual holders, market producers, institutions, and local authorities. The organization offers free collection services, recycling, reuse initiatives, and educational resources to promote sustainable energy transition. The website demonstrates a mature digital presence built on WordPress with modern plugins and SEO optimizations, reflecting a professional and trustworthy business. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No WHOIS data is available, likely due to privacy protection, but the website's content and structure strongly support legitimacy. Overall, Soren presents a credible and well-established entity in the renewable energy recycling sector.

E

ecosystem

ecosystem.eco

73

ecosystem is a French eco-organization dedicated to extending the lifecycle of electrical and electronic equipment through repair, reuse, and recycling. Accredited by public authorities, it serves both individuals and professionals with services including locating repairers, donation and recycling points, and providing educational resources. The website is professionally designed, content-rich, and well-structured, targeting a broad audience interested in sustainable management of electrical waste. Technically, the site employs modern analytics tools such as Matomo and Google Tag Manager, along with Cookiebot for consent management. The site is mobile-optimized and accessible, with good SEO practices. However, explicit security headers and detailed security policies are not evident, representing an area for improvement. Security posture is moderate with HTTPS implied but lacking visible advanced security headers or incident response information. The absence of WHOIS data limits domain trust assessment, though the website's professional presentation and public accreditation support its legitimacy. Overall, ecosystem presents a trustworthy and authoritative platform in its domain, with recommendations to enhance security transparency and domain registration visibility to further strengthen trust and compliance.

E

EDF solutions solaires

edfenr.com

69

EDF solutions solaires is a well-established French company specializing in photovoltaic solar energy solutions for both residential and professional clients. The company positions itself as a leader in the French solar autoconsumption market with over 20 years of experience and more than 100,000 customers. Their services include installation, maintenance, financing, and administrative support for solar panel projects. The website reflects a professional and comprehensive approach to solar energy, targeting individuals and businesses seeking sustainable energy solutions. Technically, the website is built on WordPress with WooCommerce, leveraging modern JavaScript libraries such as jQuery and Google Tag Manager for analytics and marketing. The site is well-optimized for SEO, mobile responsiveness, and accessibility, indicating a mature digital infrastructure. Consent management is handled via Didomi, ensuring GDPR compliance. From a security perspective, the site uses HTTPS with good SSL configuration and includes some security headers, though the Content-Security-Policy header is commented out and could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or incident response contact is noted as an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. The main concern lies in the WHOIS data, which is missing or unavailable, potentially due to privacy protection or registry issues. This should be monitored to ensure domain legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and improving transparency around incident response.

T

TotalEnergies

totalenergies.fr

58

TotalEnergies is a major French energy supplier offering electricity and gas services with a strong focus on customer satisfaction and energy savings. The website presents a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies. It provides clear navigation, extensive product information, and customer engagement features including reviews and a mobile app. The security posture is solid with HTTPS and some security scripts, though explicit security policies are not publicly disclosed. WHOIS data is unavailable due to registry restrictions, which is common for .fr domains but slightly reduces transparency. Overall, the site is trustworthy, well-branded, and user-friendly, serving a broad audience from individual consumers to enterprises.

P

Pin Up Secret

pinup-secret.fr

55

Pin Up Secret is a French e-commerce company specializing in natural cosmetic products, particularly those based on goat milk. Established in 2011, the company offers a range of skincare products including soaps, exfoliants, peelings, and curated sets targeting women seeking effective and natural beauty solutions. The website is professionally designed, mobile-optimized, and integrates modern e-commerce technologies such as PrestaShop, Google Tag Manager, and secure payment options including Scalapay and PayPal. Privacy and cookie policies are present, indicating compliance with GDPR requirements. The security posture is strong with HTTPS enforced and use of reCAPTCHA to protect forms. Customer trust is reinforced by a high volume of positive reviews and certification from Société des Avis Garantis. Overall, the website presents a trustworthy and professional online presence with moderate to good technical maturity.

1

1001coques

1001coques.fr

46

1001coques is a French e-commerce retailer specializing in mobile phone cases and accessories, offering a large catalog of over 100,000 references. The website targets consumers owning mobile phones and tablets, providing a variety of products including personalized cases and gift cards. The platform is built on PrestaShop and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar. The site is professionally designed with good mobile optimization and clear navigation. Security measures include HTTPS and standard security headers, but there is no publicly available security policy or incident response information. WHOIS data is unavailable, which raises some concerns about domain transparency, though the site appears legitimate and operational.

The website godefense.fr is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks direct access to its content. As a result, no business descriptive content, contact information, or compliance documentation is available for analysis. The domain is registered since 2013 with Scaleway as registrar, indicating a legitimate and established registration. However, the lack of accessible content limits the ability to assess the company's market position, services, or technical maturity. The technical infrastructure includes Cloudflare security mechanisms but no visible CMS or analytics tools. Security posture is difficult to evaluate fully due to blocked content, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site scores low on content quality and privacy compliance due to inaccessibility, with recommendations to reduce blocking for better transparency and trust.

U

Unecuillerepourdoudou

unecuillerepourdoudou.com

48

Unecuillerepourdoudou is a French e-commerce retailer specializing in birth gifts, wooden toys, and organic comforters for babies. The website presents a well-structured, professionally designed platform built on the PrestaShop CMS, targeting parents and gift buyers in the baby products niche. The company offers a curated selection of high-quality products with a focus on originality and eco-friendly materials. Technically, the site uses modern web technologies including Google Fonts, FontAwesome, Facebook Pixel for marketing, and Piwik (Matomo) for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and product presentation. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some recommended security headers and visible privacy or cookie policies, which are important for GDPR compliance. The WHOIS data for the domain is missing, which raises questions about domain registration legitimacy, though the website content and HTTPS presence suggest a legitimate business. Overall, the site scores well on content and technical implementation but needs improvements in privacy compliance and domain registration transparency.

M

Maison Godillot

maisongodillot.com

63

Maison Godillot operates as a niche e-commerce retailer specializing in tasteful and quality home objects and accessories. The website is professionally designed on the Shopify platform, targeting a general audience interested in home decoration, office supplies, kitchenware, and children's products. The company positions itself as a purveyor of craftsmanship and quality, with a clear focus on curated product collections and brands. Technically, the site leverages modern web technologies and Shopify's robust infrastructure, including integrations with marketing and analytics tools such as Klaviyo and Google Analytics. The site is mobile optimized and provides a good user experience with clear navigation and structured content. Security posture is generally good with HTTPS enforced and secure payment processing via Shopify Payments. However, explicit security headers are not visible in the HTML, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating privacy protection or registration inconsistencies. Overall, the site is functional, professional, and trustworthy from a user perspective but would benefit from enhanced transparency and security disclosures.

Clef en Ligne is a well-established French e-commerce company specializing in the sale of keys, key duplication, mechanical and electronic cylinders, and home security products. With approximately 40 years of experience, it holds a strong market position as a trusted provider of original and patented keys, offering a wide range of products and expert customer service. The website is professionally designed, user-friendly, and optimized for mobile devices, providing comprehensive product information, guides, and FAQs to assist customers. The company emphasizes secure transactions and rapid delivery, leveraging modern e-commerce technologies including PrestaShop, Google Analytics, Facebook Pixel, and Sendinblue for marketing and analytics.

S

Save The Deco

savethedeco.com

60

Save The Deco operates a French e-commerce website specializing in trendy party decorations and accessories for events such as weddings, birthdays, baptisms, and baby showers. The site targets consumers planning celebrations and offers a wide range of products including personalized items. The company maintains an active social media presence and uses modern e-commerce technologies, primarily PrestaShop, to deliver its services. The website is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Technical infrastructure includes Google Analytics and Tag Manager for tracking and marketing purposes. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are not explicitly detected. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data retrieval issues, which slightly impacts trustworthiness. Overall, the site appears legitimate and professionally managed but would benefit from enhanced transparency and security practices.

E

Equestra

equestra.fr

54

Equestra.fr is a specialized French e-commerce retailer focused on equestrian products, including horse equipment, rider apparel, and horse care items. The website positions itself as the largest equestrian store in France, offering a wide range of products and personalized services. The technical infrastructure is built on PrestaShop CMS with integrations of modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Brevo (Sendinblue). The site uses HTTPS and secure payment gateways, indicating a solid baseline security posture. However, the absence of explicit privacy and cookie policies, lack of visible contact information, and missing WHOIS data slightly reduce trust and compliance confidence. Overall, the website is professional, well-structured, and serves a niche retail market effectively.

G

Guaranteed Reviews Company

guaranteed-reviews.com

62

Guaranteed Reviews Company operates a professional SaaS platform specializing in authentic customer review collection and management for e-commerce merchants. The company offers multilingual modules and integrations with major e-commerce platforms such as WooCommerce, Prestashop, Magento, and Shopify. Their market position is solid with over 3,000 merchants trusting their solution, emphasizing conversion rate improvement and e-reputation enhancement. The website is well-designed, mobile-optimized, and provides clear navigation and comprehensive content about their services. Technically, the site is built on WordPress with WooCommerce and uses modern JavaScript libraries and plugins, including Google reCAPTCHA for form security. Hosting appears to be on a dedicated server, likely OVH/Dedibox. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though security headers are missing and no incident response or security policy pages were found. The WHOIS data is missing, which raises concerns about domain registration transparency and slightly lowers the trust score. Overall, the site is professional and trustworthy but would benefit from improved domain registration transparency and enhanced security headers.

S

Somfy

somfy.com

11

Somfy is a well-established global leader in the smart home and motorized control industry, specializing in automation solutions for roller shutters, blinds, gates, garage doors, and integrated smart home systems including security and energy management. Founded in 1969 and headquartered in France, Somfy operates in over 58 countries with a strong market presence and a comprehensive product portfolio targeting both private individuals and professional customers. The website reflects a mature digital presence with multi-language support and regional portals, indicating a global outreach strategy. Technically, the website employs modern web technologies including JavaScript frameworks, performance monitoring tools like Boomerang, and tag management via TagCommander. The site is hosted on a robust infrastructure with Akamai CDN integration, ensuring fast load times and good mobile responsiveness. SEO and accessibility are adequately addressed through structured data, meta tags, and responsive design elements. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes cookie consent mechanisms compliant with GDPR. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No critical vulnerabilities or suspicious content were detected, and the domain registration details align well with the corporate identity, supporting high legitimacy. Overall, Somfy's website demonstrates a strong business credibility and technical maturity with good privacy compliance. Strategic enhancements in security transparency and accessibility could further strengthen its posture and user trust.

S

Somfy

somfy.fr

65

Somfy is a well-established French company specializing in home automation and connected home solutions, offering a broad range of products including motorized shutters, security systems, heating and lighting controls, and smart home ecosystems. The company targets both consumers and professionals, supported by a professional ecommerce platform and extensive content resources. The website reflects a mature digital presence with comprehensive product information, customer support, and multimedia content. Technically, the site uses modern web technologies, including JSON-LD structured data, third-party marketing and analytics tools, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforced and privacy compliance evident through cookie consent mechanisms and GDPR-aligned policies. However, the absence of WHOIS data reduces domain trust slightly, though the overall brand and certifications support legitimacy. Strategic recommendations include enhancing transparency on security policies and incident response, and verifying security headers for improved protection.

L

Le Club Nef

leclubnef.com

58

Le Club Nef is a French online platform dedicated to promoting responsible consumption by connecting consumers with ethical brands and projects financed by the Nef ethical bank. The platform offers features such as brand listings, discounts, and event invitations to encourage sustainable purchasing decisions. Technically, the website is built on the Softr platform using modern frontend technologies including Bootstrap, jQuery, and MicroModal, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration transparency, although the association with Nef bank lends credibility. Overall, the website is functional and well-designed but would benefit from enhanced security practices and clearer compliance documentation.

L

Les Amis de la Terre France

amisdelaterre.org

51

Les Amis de la Terre France is a well-established non-profit environmental organization founded in 1970, dedicated to protecting the environment, climate, and human rights through investigation, awareness, advocacy, and civil disobedience. The website reflects a mature digital presence with active campaigns, local group news, and donation capabilities, targeting a general audience interested in environmental activism. Technically, the site is built on WordPress with modern JavaScript libraries, optimized for performance and mobile responsiveness, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and reCAPTCHA v3 implemented, though some security headers could be improved. Privacy compliance is evident with a privacy policy and cookie consent mechanism, but no explicit terms of service or security policy pages were found. WHOIS data is unavailable, which slightly reduces trust but the overall site professionalism and content quality support legitimacy.

G

Glooton

glooton.com

60

Glooton is a French-language technology news and tutorial website providing content on current technology trends, cybersecurity, blockchain, AI, and ethical discussions related to technology. The site targets French-speaking technology enthusiasts and professionals seeking in-depth articles and practical tutorials. The business model appears to be content publishing, likely monetized through advertising and affiliate marketing. Technically, the site is built on WordPress with common plugins such as Rank Math PRO for SEO and Matomo for analytics, using modern web technologies like jQuery and Slick Carousel. The website is mobile-optimized and well-structured with good SEO practices. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is unavailable, raising some concerns about domain legitimacy, though the active and professional website presence mitigates this somewhat. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

T

Tiersbox

tiersbox.net

66

Tiersbox is a small French cooperative ISP specializing in providing fiber and wifi internet services to transitional urban spaces, engaged companies, and atypical venues. Founded in 2021, it operates with a cooperative business model emphasizing sustainability, equity, and employee ownership. The website presents clear business descriptions and key services including fiber installation, network deployment, and maintenance, targeting niche markets such as urbanism transitory and associative actors. Technically, the website is built on GravCMS with modern CSS frameworks and jQuery-based plugins, offering a good user experience and mobile optimization. However, the site lacks advanced SEO and accessibility features and does not implement common security headers. The domain is registered with Scaleway SAS and shows consistent WHOIS data appropriate for the business age. Security posture is moderate with some best practices like clientTransferProhibited domain status but lacks DNSSEC and security headers. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Contact is only available via a contact form, with no direct emails or phone numbers listed. No incident response or vulnerability disclosure information is provided. Overall, the website is professional and trustworthy but would benefit from enhanced security measures, privacy compliance, and more transparent contact information to improve user trust and regulatory adherence.

P

Paon diffusion

paon-diffusion.com

40

Paon diffusion is a French small business operating an e-commerce website primarily built on WordPress with WooCommerce and the Divi theme. The site targets retail customers in France, offering products through an online storefront. The technical infrastructure is modern and leverages popular CMS and e-commerce plugins, with hosting provided by OVH sas, a reputable provider. The website demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. No privacy or cookie policies were detected, which is a compliance gap. Overall, the site appears legitimate and functional but would benefit from enhanced security and privacy measures.

A

Agence Parisienne du Climat

adaptaville.com

45

Adaptaville is a French non-profit platform initiated by the Agence Parisienne du Climat, dedicated to cataloging and promoting ecological adaptation solutions to climate change specifically for the Île-de-France region. The website serves as a resource hub for local authorities, policymakers, and environmental actors to access proven solutions such as vegetation, water management, and urban cooling techniques. The platform emphasizes facilitating the replication of these solutions through public policies at various administrative levels. Technically, the website employs a custom CMS with modern JavaScript libraries including jQuery and Lucide icons, and integrates privacy-focused analytics via Plausible. The site is mobile-optimized with good SEO practices and a professional design, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. From a security and compliance perspective, the site does not expose sensitive data and uses secure forms, but it lacks a published security policy, incident response contacts, and vulnerability disclosure mechanisms. WHOIS data for the domain is unavailable, which slightly impacts trust but the professional presentation and partnerships mitigate concerns. Overall, the site is trustworthy, well-maintained, and serves a clear public interest mission. Recommendations include implementing security headers, adding cookie consent for GDPR compliance, publishing a security policy, and enhancing contact transparency to improve user trust and regulatory adherence.

L

La Cooperative des Tilleuls

les-tilleuls.coop

67

Les-Tilleuls.coop is a French technology cooperative specializing in API, web, and cloud expertise. They are creators of the API Platform framework and FrankenPHP, and maintainers of Symfony. The company operates as a self-managed, egalitarian cooperative with over 70 employees and multiple offices across France. Their market position is strong within the open source and enterprise technology sectors, serving over 200 partners with consultancy, development, training, and cloud services. Technically, the website is built on modern frameworks including Next.js, Symfony, Laravel, and Vue.js, hosted with Cloudflare DNS and CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in DNSSEC and security headers. Privacy compliance is basic, lacking explicit cookie consent and detailed privacy policies. Overall, the company demonstrates high business credibility and trustworthiness with certifications like B Corp and a transparent WHOIS record.

Actu-Environnement is a well-established French independent media outlet specializing in environmental news, sustainability, and development topics. The website offers daily updated content including news articles, newsletters, event agendas, and expert blogs targeting professionals and subscribers interested in environmental issues. The business model relies on subscriptions and advertising, supported by a consistent brand presence and social media engagement. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, implements responsive design, and integrates Google Analytics GA4 for user tracking. The site is served over HTTPS with cookie consent mechanisms in place, indicating a good baseline for privacy compliance. However, no explicit security headers were detected, and no direct contact emails or phone numbers are publicly listed, which could be improved for transparency and trust. The WHOIS data for the domain is missing or unavailable, which is unusual for a site with a claimed history since 2003, but the website content and social presence strongly suggest legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security posture and contact transparency.

L

Le Journal des Entreprises

lejournaldesentreprises.com

70

Le Journal des Entreprises is a French regional economic news media platform offering a website and monthly magazine with 14 local editions covering 27 departments. The site targets business professionals and regional economic actors, providing news, dossiers, podcasts, and company profiles. Technically, it is built on Drupal 10 with modern web technologies, including Google Tag Manager and Didomi for consent management. The website is well-structured, mobile-optimized, and uses HTTPS, but lacks visible security headers in the HTML source. No WHOIS data was found for the domain, which raises concerns about domain registration legitimacy. Overall, the site presents a professional and trustworthy business media presence but should verify domain registration and improve privacy policy visibility.

I

IndyMotion

indymotion.fr

48

IndyMotion is an independent French-language PeerTube instance offering free and unlimited video hosting access primarily to individuals and organizations with a non-profit focus. The platform leverages the open-source PeerTube technology to provide decentralized video streaming and live chat capabilities. The website presents a consistent brand and clear business purpose, targeting the French-speaking community interested in alternative video hosting solutions. Technically, the site uses modern web technologies including Angular and PeerTube version 7.3.0, hosted on Scaleway infrastructure in France. The platform supports advanced video streaming features such as HLS and WebRTC, ensuring a good user experience across devices. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website content, indicating legitimacy and transparency. The site is safe for general audiences with no adult or explicit content detected.

L

La Quadrature du Net

mamot.fr

57

Mamot.fr is a French-language Mastodon social networking server operated by La Quadrature du Net, a recognized non-profit organization advocating for digital rights. The platform serves a niche community interested in privacy-focused federated social media, with approximately 2.7K active users. The website is built on the Mastodon 4.4.7 platform, leveraging modern web technologies including React and ES modules, hosted by ScaleWay. The technical infrastructure is solid, with good SSL configuration and secure resource loading practices. However, the site lacks explicit cookie consent mechanisms and terms of service pages, which slightly impacts privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and a vulnerability disclosure policy would enhance trust. Overall, Mamot.fr presents a professional, trustworthy, and privacy-conscious social platform with room for improvement in compliance documentation and user contact transparency.

S

Street Art Rillieux

streetartrillieux.com

52

Street Art Rillieux is a cultural initiative based in Rillieux-la-Pape, France, focused on promoting street art through an annual festival, permanent murals, artist residencies, and community engagement activities. The project is supported by the local city government and partners, aiming to transform the city into an open-air museum and foster cultural enrichment. The website is professionally designed using WordPress with modern plugins and themes, providing detailed information about events, artists, and exhibitions. Social media integration is strong, enhancing community outreach. Security posture is adequate with HTTPS and some security plugins, but lacks some security headers and explicit privacy policies. WHOIS data is unavailable, which reduces domain trust but the website content and structure indicate a legitimate cultural project. Overall, the site is a good digital representation of a local cultural initiative with room for improvement in privacy and security transparency.