France security reports

M

Marie Claire

marieclaire.fr

63

Marie Claire is a well-established French women's fashion and beauty magazine offering a wide range of content including fashion news, beauty tips, lifestyle articles, and subscription services. The website targets a female audience interested in fashion and beauty, maintaining a strong brand presence in the media sector. Technically, the site employs modern JavaScript libraries, consent management tools, and integrates multiple marketing and analytics services, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses security headers, and implements consent mechanisms, though it lacks explicit security policy and incident response disclosures. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given its professional presentation and brand recognition. Overall, the site is secure, privacy-conscious, and professionally maintained, suitable for its audience and business model.

M

MEDIAOBS

mediaobs.com

57

MEDIAOBS is a French independent media advertising agency specializing in managing a portfolio of 56 media brands and serving qualified expert communities. The company offers print and digital advertising services, special operations including events and podcasts, and creative studio services. The website is professionally designed using WordPress with modern SEO and gallery plugins, and it is optimized for mobile devices. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks explicit security headers and privacy/cookie policies. WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the website is functional, professional, and targets media and advertising clients in France.

RFI (Radio France Internationale) is an established international news broadcaster providing comprehensive news coverage from France, Europe, Africa, and worldwide. The website offers political, cultural, sporting news, and live streaming services targeting a general audience. The brand is well recognized with consistent branding and multiple official social media presences. Technically, the website employs modern web standards, including responsive design, consent management via Didomi, and robust SEO practices. Security posture is strong with HTTPS enforced and standard security headers present, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, though WHOIS data is privacy protected, which is typical for media entities. Strategic recommendations include publishing explicit security and incident response policies and enhancing transparency around data protection roles.

Cdiscount is a major French e-commerce platform offering a wide range of products including furniture, electronics, home improvement, garden, and sports goods. The website targets French consumers looking for affordable prices and convenient online shopping experiences. It provides services such as secure payment options, installment plans, free delivery over certain amounts, and a loyalty program. The platform also offers mobile plans and travel booking services, indicating a diversified e-commerce ecosystem. Technically, the website employs modern web technologies including React and jQuery, with a responsive design optimized for mobile and desktop users. The presence of JSON-LD structured data and comprehensive meta tags supports good SEO practices. Performance is moderate with extensive use of JavaScript and external resources. Accessibility features and SEO optimizations are well implemented. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers such as Content Security Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, explicit security policies and incident response contacts are not prominently published, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring clear privacy and cookie policies with consent mechanisms. The lack of WHOIS data reduces domain registration transparency but does not significantly impact the site's legitimacy given its established market presence. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to further strengthen security posture and user trust.

D

DIXI medical

diximedical.com

71

DIXI medical is a well-established French medical device company specializing in precision SEEG electrodes for epilepsy care, boasting over 50 years of expertise. The company positions itself as a global leader in the field, offering advanced intracerebral electrodes and related implantation accessories, alongside clinical support and educational programs. Their target audience primarily includes healthcare professionals such as neurosurgeons, neurologists, and researchers focused on epilepsy treatment. The website reflects a mature business model centered on manufacturing, direct sales, and knowledge dissemination through training and partnerships. Technically, the website is built on the Webflow platform, leveraging modern web technologies including GSAP for animations, Google Fonts, and Cloudflare services for security and performance. The site is well-optimized for mobile devices, fast loading, and incorporates accessibility and SEO best practices. Security measures include HTTPS, security headers, and a cookie consent mechanism compliant with GDPR standards. From a security perspective, the site demonstrates a strong posture with no detected vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contacts, which could be areas for improvement. The WHOIS data corroborates the legitimacy of the domain, showing a long registration history consistent with the company's claimed experience and no privacy protection, indicating transparency. Overall, the website presents a professional, trustworthy, and compliant digital presence for DIXI medical, supporting its market position as a leader in SEEG electrode technology. Strategic recommendations include enabling DNSSEC, publishing formal security policies, and establishing a vulnerability disclosure program to further enhance trust and security maturity.

The website metz.fr serves as the official digital portal for the Ville de Metz, providing residents and visitors with comprehensive information about city services, events, public policies, and cultural activities. It holds a strong market position as the authoritative source for municipal information in Metz, France. The site targets a broad audience including local citizens, tourists, and stakeholders interested in city governance and community engagement. Key services include news updates, event calendars, administrative procedures, and social support information. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components, Matomo for privacy-conscious analytics, and Google Custom Search for site search functionality. The cookie consent mechanism is implemented using tarteaucitron.js with high privacy settings, reflecting good compliance with GDPR. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics without setting cookies by default. However, no explicit security headers were detected in the HTML content, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is good but could be improved by adding security headers and formalizing security policies. The overall risk assessment is low, with the site demonstrating strong legitimacy, consistent branding, and compliance with privacy regulations. Strategic recommendations include enhancing security transparency, improving accessibility, and publishing incident response and vulnerability disclosure information to further strengthen trust and security culture.

U

Université de Lorraine

univ-lorraine.fr

57

Université de Lorraine is a major French public university offering a wide range of scientific and academic disciplines. It serves students, researchers, and academic staff with comprehensive education and research services, emphasizing innovation and societal evolution. The university maintains a strong regional and international presence, supported by partnerships and a robust digital platform. Technically, the website is built on WordPress with modern plugins and themes, optimized for SEO, accessibility, and mobile responsiveness. Security posture is solid with HTTPS, security headers, and privacy compliance mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a professional and trustworthy institution with room for enhanced transparency in security governance.

N

Nouvelle Cuisine

nouvellecuisine.co

59

Nouvelle Cuisine is a French creative agency specializing in comprehensive communication services including branding, video production, web development, and interactive experiences. Positioned as a versatile and professional studio, it targets businesses seeking creative communication solutions. The website is built on WordPress, leveraging modern plugins such as Yoast SEO and Contact Form 7, and integrates Google Tag Manager and Axeptio for analytics and cookie consent respectively. Hosting appears to utilize a CDN service for performance optimization. Security posture is solid with HTTPS enforced and spam protection implemented, though explicit security headers and formal security policies are absent. Privacy compliance is partial, with cookie consent present but no visible privacy or terms of service pages. Overall, the site is professional, well-branded, and trustworthy, with room for improvement in privacy and security policy transparency.

D

DK

d-k.io

62

DK is a French company specializing in carbon measurement and management solutions tailored for the communication, media, and advertising sectors. Their platform offers harmonized and standardized carbon footprint measurement tools, including an API for automated calculations, targeting advertisers, agencies, publishers, and media companies. The company positions itself as a market reference in France with notable media clients and a strong emphasis on sustainability and environmental impact reduction. Technically, the website is well-built with modern technologies such as Matomo analytics and Google Tag Manager, hosted by OVH SAS. It demonstrates excellent mobile optimization, accessibility, and SEO practices. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, reflecting a credible business with a clear mission. The domain registration data aligns well with the business claims, enhancing legitimacy. Privacy compliance and security transparency could be strengthened to improve user trust and regulatory adherence.

G

Groupe M6

groupem6.fr

67

Groupe M6 is a prominent French media group operating multiple TV channels, radio stations, and a streaming platform. The corporate website reflects a mature media business with a broad audience reach and diversified content offerings including news, sports, films, and original series. The site is professionally designed, well-branded, and provides comprehensive investor and governance information, indicating a transparent and established organization. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Matomo, demonstrating a commitment to digital maturity and privacy-conscious analytics. The site is mobile-optimized and accessible, with a cookie consent mechanism compliant with GDPR, reflecting good privacy practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, the website presents a low-risk profile with strong business credibility and compliance. The lack of WHOIS data is likely due to privacy protection norms in France and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security culture.

B

BoursoBank (ex-Boursorama Banque)

boursobank.com

70

BoursoBank, formerly known as Boursorama Banque, is a French online bank positioned as the least expensive bank for 17 years, offering a range of financial services including free bank cards, mortgage loans, life insurance, stock market services, and savings products. The website is professionally designed, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism. Technically, the site uses modern JavaScript frameworks and fonts, ensuring a good user experience and accessibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status, which should be further investigated. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response information. Overall, the site presents a trustworthy and professional banking service with room for improvement in transparency and security disclosures.

C

Churchill

agence-churchill.fr

44

Churchill is a premium French web agency specializing in custom website creation, redesign, SEO, and digital marketing services primarily targeting market leaders and businesses in France. The company emphasizes bespoke solutions using WordPress and WooCommerce, integrating advanced SEO and marketing strategies to maximize client ROI. Their market position is supported by over 10 years of experience and more than 120 completed projects, with strong trust signals including high Google review ratings and notable client logos. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimizations such as WP Rocket and lazy loading. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. WHOIS data is unavailable, which slightly reduces domain trust but is mitigated by strong business and branding indicators. Overall, the website presents a professional, trustworthy, and technically sound digital presence.

A

Aquitem & Aliénor.net

alienor.net

50

Aquitem & Aliénor.net is a French technology and retail-focused group with over 35 years of expertise in data management, marketing, and digital solutions. They provide a broad range of services including data hosting in France, data visualization tools, AI-driven marketing solutions, and retail management software. The company positions itself as a trusted partner for large retail brands and independent merchants, supported by its affiliation with Groupe FIDUCIAL. Technically, the website is built on WordPress with modern SEO and analytics tools, showing good digital maturity. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks some security headers and formal security policies. Privacy compliance is partially implemented with cookie consent but no clear privacy policy page found. Overall, the site is professional and trustworthy, though WHOIS data absence raises some concerns about domain registration transparency.

L

Lemuscle.fr - AFM-Téléthon

lemuscle.fr

52

Lemuscle.fr is a French non-profit health awareness website dedicated to educating the public about the importance of muscle health. It is affiliated with AFM-Téléthon and organizes the annual 'Semaine du Muscle' event to promote muscle health knowledge and prevention. The website offers educational content, quizzes, videos, and pedagogical tools targeting a broad audience including the general public and educators. Technically, the site is built on WordPress with modern libraries such as Bootstrap, jQuery, and OwlCarousel, and implements GDPR-compliant cookie consent via tarteaucitron.js. Security posture is good with HTTPS and no evident vulnerabilities, though additional HTTP security headers could enhance protection. Overall, the site is professional, trustworthy, and well-positioned as a national health awareness platform.

G

GenoSafe

genosafe.com

59

GenoSafe is a specialized Contract Research Organization (CRO) based in France, with over 20 years of experience providing analytical services for innovative therapeutics including gene and cell therapies, vaccines, and DNA/RNA-based products. The company supports clients across all stages of development from preclinical to clinical phases, focusing on quality control and regulatory compliance. Their market position is that of a trusted mid-sized healthcare CRO with a professional digital presence and clear service offerings. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Matomo. It employs hCaptcha for bot protection and provides a GDPR-compliant cookie consent mechanism. The site is mobile-optimized, accessible, and well-structured, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration but lacks some advanced security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. However, incident response and vulnerability disclosure information are absent. Overall, GenoSafe presents a low-risk profile with a professional and trustworthy online presence. Strategic improvements in security policy transparency and enhanced security headers would further strengthen their posture.

B

YOURLS — Your Own URL Shortener | https://b33.fr/

b33.fr

51

The website https://b33.fr/admin/ is an administrative login portal for a YOURLS (Your Own URL Shortener) instance, a self-hosted URL shortening service. The domain is registered with OVH in France since 2015, indicating a stable and legitimate presence. The site targets users who require URL shortening capabilities, likely webmasters or developers managing their own short URLs. The business model is niche and technology-focused, providing URL management services without public-facing commercial content on this page. Technically, the site uses YOURLS version 1.9.2 and jQuery 3.5.1, hosted on OVH infrastructure with HTTPS enabled and a valid SSL certificate. The site is basic in design and functionality, optimized for desktop login with minimal mobile optimization and accessibility features. No advanced SEO or analytics tools are detected, and no advertising or tracking scripts are present. From a security perspective, the site benefits from HTTPS and password-protected access but lacks important security headers and may expose the YOURLS version number, which could be a vulnerability if not updated. There is no evidence of privacy, cookie, or terms of service policies, which limits compliance with GDPR and other regulations. No contact or incident response information is provided, reducing transparency and trust. Overall, the site is functional for its purpose but lacks comprehensive security and privacy measures. The risk is moderate due to missing security headers and potential version exposure. Strategic improvements in security hardening, privacy compliance, and user trust signals are recommended.

J

Jardin Botanique de Bordeaux

jardin-botanique-bordeaux.fr

49

Jardin Botanique de Bordeaux is a public botanical garden institution located in Bordeaux, France, providing cultural, educational, and scientific services related to plant biodiversity and conservation. The website serves as an informational portal for visitors, researchers, and the general public, offering details on garden locations, events, exhibitions, and practical information. The institution is positioned as a local government-supported entity with a focus on public outreach and education. Technically, the website is built on Drupal 7 CMS with standard web technologies including jQuery and a cookie consent manager (Tarteaucitron). The site uses HTTPS and integrates AT Internet analytics for visitor tracking. While the site is functional and moderately optimized, there is room for improvement in mobile responsiveness, accessibility, and modern security headers. From a security perspective, the site enforces HTTPS and provides cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests an opportunity to enhance transparency and preparedness. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, CMS updates, and accessibility would further strengthen its posture and user experience.

C

Clipr

clipr.co

62

Clipr is a technology company specializing in delivering immersive social experiences for brands and publishers. Their platform integrates social stories, carousels, and posts directly into websites to enhance user engagement and revenue. The company targets top-tier brands and publishers globally, positioning itself as a B2B SaaS provider in the social media technology space. The website reflects a professional and consistent brand image with clear messaging and trusted client logos. Technically, the site is built on Webflow with modern analytics and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though lacking advanced security headers and explicit policies. Privacy compliance is partially addressed with a privacy policy and terms of service but lacks cookie consent mechanisms. Overall, the site is credible and trustworthy with room for improvement in security and privacy transparency.

C

Cityz Media

cityzmedia.fr

55

Cityz Media is a French media company specializing in outdoor communication and advertising solutions. The company positions itself as a key player in the outdoor media sector, offering innovative communication services to businesses and public entities. Their website reflects a professional and modern digital presence, built on WordPress with SEO optimization and cookie consent mechanisms in place. The technical infrastructure includes popular libraries such as jQuery and Plyr, and analytics are managed via Matomo, indicating a moderate level of user tracking with some privacy considerations. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and explicit security policies. The absence of visible contact information and privacy policy pages suggests areas for improvement in transparency and compliance. Overall, the website is trustworthy and well-structured, suitable for its business purpose.

C

Cdiscount Advertising

cdiscountadvertising.com

58

Cdiscount Advertising is a French digital marketing solutions provider focused on enhancing visibility and sales for suppliers, sellers, and brands on the Cdiscount e-commerce platform. The company offers a range of advertising services including display, search, video, personalized discount coupons, live shopping, and social retail targeting millions of shoppers monthly. The website is professionally designed, mobile-optimized, and compliant with GDPR and cookie regulations, featuring a detailed contact form with CAPTCHA to prevent abuse. However, the domain WHOIS data is unavailable, raising questions about domain registration status despite the professional and comprehensive website content. Technically, the site uses WordPress with popular plugins like LayerSlider and Gravity Forms, and integrates Cookiebot for consent management. Security posture is good with HTTPS and secure forms, but lacks some security headers and published incident response policies. Overall, the site is trustworthy and well-maintained but would benefit from clarifying domain registration and enhancing security transparency.

The website www.canalplusbrandsolutions.fr is currently inaccessible due to a security or WAF challenge, presenting an 'Access Denied' message with minimal content. This prevents a full assessment of the business, compliance, and security posture. The visible content is limited to a branded logo and a message indicating request processing, with no privacy, cookie, or contact information available. The technical footprint is minimal, with only a single external domain serving static assets. No analytics, advertising, or tracking scripts are detected, and no forms or user input mechanisms are present. The site appears to be mobile responsive at a basic level but lacks SEO and accessibility features. The domain is privacy protected in WHOIS, consistent with a media brand's typical privacy practices, but detailed registrant information is unavailable. Overall, the site scores low on content quality, security posture, and privacy compliance due to the blocking mechanism.

B

Budgetbox

budget-box.com

75

Budgetbox is a French technology company specializing in omnichannel retail media platforms designed to engage consumers across all shopping journeys, both online and in-store. Established around 2021, it serves over 200 brands and partners with major retailers such as Carrefour, E.Leclerc, and Intermarché. The company offers tailored solutions for brands and distributors to activate retail media campaigns effectively. The website reflects a professional and consistent brand image with comprehensive business and privacy information, targeting retail and media sectors primarily in France. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Matomo Analytics for privacy-conscious visitor tracking. It employs GDPR-compliant cookie management and integrates marketing tools such as Drift chat and Plezi. The site is mobile-optimized with good SEO practices, though some security headers could be enhanced. Performance is moderate, with a clean and user-friendly design. From a security perspective, the site enforces HTTPS and has implemented cookie consent mechanisms, but lacks explicit security headers like CSP or X-Frame-Options. No vulnerabilities or sensitive data exposures were detected in the content. The absence of WHOIS registration data is a concern but does not outweigh the professional presentation and detailed compliance documentation. Overall, Budgetbox presents a credible and trustworthy online presence with strong privacy compliance and a solid technical foundation. Strategic improvements in security headers and ongoing domain registration monitoring are recommended to maintain and enhance trust and security posture.

B

Boursorama

boursorama.com

69

Boursorama is a prominent French online bank and financial information provider, offering a wide range of services including online banking, stock market data, and financial news. The website presents a professional and well-structured interface targeting investors and banking customers primarily in France. Technically, the site uses modern web standards with good mobile optimization and SEO practices, although explicit CMS or hosting details are not evident. Security posture is moderate due to lack of visible security headers and missing WHOIS data, which raises some concerns about domain registration transparency. Privacy compliance appears weak as no privacy or cookie policies were detected in the provided content. Overall, the site is functional and trustworthy from a business perspective but would benefit from enhanced transparency and security measures.

B

Bonial

bonial.fr

64

Bonial is a prominent French retail promotions platform that aggregates catalogues and offers from major retailers such as Carrefour, Lidl, and Auchan. The website serves consumers looking to prepare shopping lists and find the best deals locally. It is backed by Bonial International GmbH, indicating a strong corporate structure. Technically, the site leverages modern web technologies including Next.js, New Relic monitoring, and Usercentrics for cookie consent, ensuring a performant and compliant user experience. Security posture is solid with HTTPS and monitoring tools, though explicit privacy and terms pages are missing, which should be addressed to enhance compliance and trust. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious or adult content.

B

BedrockStreaming

bedrockstreaming.com

70

BedrockStreaming is a European streaming technology company specializing in creating and operating full-scope streaming services for leading media companies. Their platform supports AVOD, SVOD, and hybrid business models, delivering on-demand video, linear channels, and live sports to over 50 million users. The company is positioned as a premier streaming-tech provider in Europe, founded in 2020 and headquartered in France. Technically, the website is built on modern frameworks such as Next.js and integrates JW Player for media playback and Matomo for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and security.txt are recommended. Privacy compliance is adequate with clear privacy and cookie policies, but lacks explicit consent mechanisms. Overall, the site is professional, trustworthy, and well-branded, serving a B2B audience in the media sector.

B

Bcovery

bcovery.com

53

Bcovery is a French-based AdTech company specializing in sustainable and responsible media buying solutions for brands and agencies. Founded in 2019, it offers a unique technological suite including Ghost Recycling, Direct Green Path, Audience Sources, and Carbon Optimizer to improve campaign performance and reduce carbon footprint. The company is recognized with multiple industry awards and partners with major media publishers. Technically, the website is built on WordPress with Elementor and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and domain locking, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich but should improve privacy and security disclosures.

A

Adrenalead

adrenalead.com

51

Adrenalead operates a marketing performance platform focused on off-site audience engagement, targeting advertisers, agencies, and publishers. The company positions itself as a pioneer in marketing performance platforms, emphasizing audience loyalty and conversion. Founded in 2018 and hosted by OVH sas, the website reflects a medium-sized technology business with a consistent brand presence and active social media channels. Technically, the site is built on WordPress with modern marketing and analytics integrations such as HubSpot, Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and domain status protections, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies, and no direct contact information is found, which may impact user trust. Overall, the website is professional and functional but would benefit from enhanced privacy disclosures and security hardening.

V

Veepee|ad

veepee-ad.com

58

Veepee|ad is a newly established retail media advertising company launched in 2023 as part of the Veepee group, a pioneer in event sales on the internet in Europe. The company offers a comprehensive suite of retail media solutions including display, search, CRM, social retail, programmatic advertising via Veepee|ad Connect, and couponing services. Their platform targets a large member base of 28 million active users, positioning them as a leading retail media actor in Europe. The website is professionally designed using HubSpot CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are present and GDPR compliant, supporting trust and compliance. Contact information is primarily via contact forms and a physical address, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a mature digital presence suitable for a large enterprise in the retail media sector.

3

366

366.fr

48

366 is a French advertising media agency specializing in local and regional media, offering services across print, digital, multiscreen, and magazines. The company positions itself as an expert in territorial advertising, reaching millions daily. The website is professionally designed, mobile-optimized, and uses modern technologies such as WordPress, jQuery, and performance tools like WP Rocket. Analytics are handled via Matomo, and privacy tools are partially integrated. Security posture is good with HTTPS enforced and lazy loading implemented, but lacks explicit security headers and visible privacy or cookie policies. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security disclosures.

GROUPE MAURY IMPRIMEUR is a French printing group specializing in providing printing services to press editors, public and institutional sectors, commerce and distribution, book editors, and technical documentation. The website presents a professional but basic digital presence built on WordPress with common plugins such as WPBakery Page Builder and Slider Revolution. The technical infrastructure is moderate with some outdated libraries like jQuery 1.12.4, and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks visible security headers and updated libraries, which could pose risks. Privacy and cookie policies are not found, indicating compliance gaps. The absence of WHOIS data is a significant concern for domain legitimacy and trustworthiness. Overall, the website is functional and safe for general audiences but requires improvements in security, privacy compliance, and domain registration transparency.

I

Inspire Metz

investinmetz.com

57

Invest in Metz is a regional economic development platform focused on promoting the Eurométropole de Metz territory as an attractive investment destination. The website provides comprehensive information and assistance related to strategic sectors, financing, business implantation, and economic observation. The platform targets investors and businesses interested in the region, positioning itself as a key regional economic development agency. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, marketing automation, and caching, delivering a fast, mobile-optimized, and accessible user experience. Security measures include HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and incident response information are absent. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional quality of the website content partially mitigates this risk. Overall, the site is trustworthy and well-maintained, suitable for its business purpose.

E

Eurométropole de Metz

metzletudiante.eu

56

Metz L'Étudiante is a French-language digital platform dedicated to providing students in Metz with comprehensive information about studying, working, living, and student life in the city. Supported by the Eurométropole de Metz and local government entities, it serves as an official resource hub for the student community. The website is built on WordPress with modern plugins for SEO, multilingual support, and privacy-compliant analytics via Matomo. It features a cookie consent mechanism that allows granular user control, aligning with GDPR requirements. The site is well-branded, professionally designed, and optimized for mobile devices, offering a good user experience with clear navigation and relevant content.

The Office franco-allemand pour la transition énergétique (OFATE) is a bilateral platform established in 2006 by the French and German governments to facilitate information exchange and cooperation in the energy transition sector. The website serves as a comprehensive resource hub offering news, publications, event calendars, and membership information targeted at professionals and stakeholders involved in Franco-German energy initiatives. The site is well-structured, bilingual, and professionally branded, reflecting its governmental and non-profit nature. Technically, the website is built on the Contao Open Source CMS and employs a mix of legacy and modern web technologies including jQuery 1.11.3, Google reCAPTCHA v3, and cookie consent management via tarteaucitron.js. Hosting is provided by domainfactory GmbH, a reputable registrar and hosting provider. The site is HTTPS secured and implements GDPR-compliant cookie consent mechanisms, although some scripts use outdated libraries which could pose security risks. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and published incident response policies. The use of an outdated jQuery version is a notable vulnerability. No signs of WAF or blocking mechanisms were detected, and the site is fully accessible. Privacy policies and cookie policies are present and comprehensive, supporting GDPR compliance. Overall, the website presents a low-risk profile with good business credibility and technical maturity for its sector. Strategic improvements include updating legacy scripts, enhancing security headers, and publishing explicit security and incident response policies to further strengthen trust and compliance.

S

Syndicat des énergies renouvelables

syndicat-energies-renouvelables.fr

10

The Syndicat des énergies renouvelables is a professional trade association focused on the renewable energy sector in France. It serves as a key industry actor providing information, organizing events, publishing reports, and offering professional training to its members, which number over 530 companies including many SMEs and ETIs. The website reflects a well-established organization with a clear market position as a leading voice in the energy transition. The target audience includes energy professionals, companies, and stakeholders interested in renewable energy developments. Technically, the website is built on WordPress with a modern tech stack including Bootstrap 4, jQuery, and various plugins for SEO, sliders, and cookie consent management. The site is mobile-optimized and demonstrates good SEO practices with proper metadata and structured data. Performance is moderate, and accessibility is basic but adequate for the audience. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. The login form for members uses secure POST methods with nonce tokens. However, additional security headers are not detected, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of WHOIS data reduces some trust but is mitigated by the site's content quality and transparency. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to improve security posture and trust further.

O

Oasis21

oasis21.org

48

Oasis21 is a small community-oriented social economy shared space located in Paris, France, founded around 2018. The website serves primarily as an informational and reservation portal for the space, targeting local community members and organizations interested in social and solidarity economy initiatives. The business model revolves around providing a physical venue for events and activities aligned with social economy values. Technically, the website is simple, built with basic HTML and CSS, hosted by OVH sas, and includes minimal external dependencies. There is no evidence of advanced CMS or frameworks, and performance and mobile optimization are basic. Security posture is limited, with no visible security headers or privacy policies, and DNSSEC is not enabled. The domain registration is consistent with the business timeline and shows standard protections against unauthorized transfers or deletions. Overall, the site is functional but lacks advanced security and privacy features, which could be improved to enhance trust and compliance.

N

NOVELCAST

novelcast.com

54

NOVELCAST is a French audio production company specializing in the executive production of audiobooks, audio series, and transmedia projects. Established in 2005, the company operates a professionally designed WordPress-based website showcasing its audio productions and services. The website targets French-speaking audiences interested in audio fiction and literary content. NOVELCAST maintains an active social media presence across Instagram, LinkedIn, YouTube, and Facebook, enhancing its market visibility. The business model focuses on content creation and production services within the media sector.

I

Interventions Numériques

interventions-numeriques.fr

46

Interventions Numériques is a French-based small educational and mediation service focused on digital autonomy, offering a variety of training courses and mediation services to individuals and organizations. The business operates under the cooperative Oxalis, which is Qualiopi certified, indicating recognized quality in training services. The website is professionally designed using WordPress with a modern tech stack and SEO optimizations, providing good user experience and mobile responsiveness. Security posture is solid with HTTPS and no evident vulnerabilities, though some improvements in privacy compliance and security policy transparency are recommended. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive legitimacy assessment.

C

Clic & Cetera

clicetcetera.fr

51

Clic & Cetera is a small local business based in France providing IT assistance and mediation services primarily in the Lorient region. The company targets both professionals and private individuals, offering on-site and business IT support. The website is built on WordPress and demonstrates a good level of technical maturity with modern CMS usage and responsive design. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but lacks important security headers and formal privacy or cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy for its business scope but would benefit from improved compliance and security practices.

E

E2L - Ecole du Logiciel Libre

e2li.org

59

E2L - Ecole du Logiciel Libre is a French non-profit association dedicated to educating the public about free software through courses, conferences, and community events. Founded in 2015, it operates primarily in Ivry-sur-Seine and offers a range of educational activities including install parties, publications, and online resources. The organization targets individuals interested in free software, from beginners to IT professionals, emphasizing community involvement and open knowledge sharing. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Leaflet for maps, hosted via Gandi SAS. While the site is content-rich and professionally presented, it lacks formal privacy and cookie policies and does not show advanced security headers or DNSSEC, indicating room for improvement in security and compliance. Contact information is clearly provided, enhancing trust and credibility.

N

Numericatous

numericatous.fr

52

Numericatous is a French small business founded in 2019, specializing in education and training on Linux and free software with a strong ethical and sovereign digital focus. The website offers a comprehensive range of resources including tutorials, ebooks, and online courses aimed at individuals and professionals seeking autonomy in digital usage. The business positions itself as a niche player promoting digital sovereignty and ethical computing, supported by partnerships with local and ethical technology providers. Technically, the website is built on WordPress with WooCommerce for e-commerce, hosted by a French provider LRob, and uses Matomo for privacy-respecting analytics. The site is well-optimized for performance, mobile, and accessibility, with clear navigation and professional design. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, Numericatous presents a trustworthy, professional, and ethically aligned digital presence with a clear business model and solid technical foundation.

F

Friends Of OpenPGP

foopgp.org

49

Friends Of OpenPGP is a small non-profit association founded in 2020 focused on promoting OpenPGP technologies among businesses and citizens. The organization facilitates adoption through events, training, workshops, and community support. Their website reflects a niche market position with a clear mission to educate and support OpenPGP users and developers. Technically, the site is built with modern static site generator Hugo and uses popular frontend libraries such as Bootstrap and jQuery, hosted by OVH sas. The website is mobile responsive and well-structured, though it lacks some advanced accessibility features and security headers. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but DNSSEC is not enabled and security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in compliance and security transparency.

A

Association Electrocycle

electrocycle.co

55

Association Electrocycle is a French non-profit organization dedicated to promoting the reuse of electronic devices, particularly smartphones, through workshops and advocacy for free software. The website serves as a platform to share news, events, and educational content related to digital empowerment and ecological technology practices. The organization targets individuals and groups interested in sustainable technology and digital rights. Technically, the website is built on WordPress 6.8.3, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though it lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, reflecting a small but active community-focused entity.

W

Wikilibriste

wikilibriste.fr

61

Wikilibriste is a French-language educational website focused on digital freedom, privacy, and security. Founded in 2022, it offers tutorials and guides aimed at helping users improve their digital hygiene and regain control over their online lives. The site targets both beginners and experienced users interested in ethical and open-source digital tools. The business model appears to be content publishing with community engagement, without evident monetization through ads or affiliate marketing. Technically, the website is built on Ghost CMS 6.0, hosted by Infomaniak Network SA, and employs modern web technologies with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and modern font loading strategies but lacks visible security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

A

Atmo Normandie

atmonormandie.fr

55

Atmo Normandie is a regional environmental monitoring organization dedicated to providing air quality and pollen index data for the Normandy region in France. The website serves as a public information platform targeting residents and local authorities interested in environmental health indicators. The platform uses Drupal 9 CMS and integrates Matomo analytics, reflecting a modern and privacy-conscious technical infrastructure. The website is well-structured, mobile-optimized, and provides detailed environmental data visualization for numerous communes within the region. Security posture is moderate with HTTPS implied, but lacks explicit security headers and formal privacy or cookie policies. No WHOIS data is available, likely due to privacy protection, which is common for such public service domains. Overall, the website is professional, trustworthy, and safe for general audiences.

A

Atmo Hauts-de-France

atmo-hdf.fr

53

Atmo Hauts-de-France operates as a regional air quality observatory dedicated to monitoring atmospheric pollution and raising awareness among local authorities, businesses, and citizens in the Hauts-de-France region of France. The organization provides data, maps, and health advice related to air quality, positioning itself as a key environmental public service entity in the region. The website is professionally designed using Drupal 9 CMS and integrates modern analytics tools such as Matomo and Microsoft Clarity, indicating a moderate level of digital maturity and user engagement tracking. Security posture is adequate with HTTPS implied, but lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. Overall, the domain appears legitimate and active, though WHOIS data is privacy-protected and unavailable. The site content is safe, relevant, and targeted at a general audience interested in environmental health.

A

ATMO GrandEst

atmo-grandest.eu

59

ATMO GrandEst operates as a regional environmental monitoring organization focused on air quality and pollen indices for the Grand Est region in France. The website provides detailed geographic and environmental data for numerous communes, serving residents and local authorities. The business model aligns with public service and environmental data dissemination, positioning ATMO GrandEst as a key regional authority in environmental monitoring. Technically, the website is built on Drupal 9 CMS, utilizing modern web fonts, icon libraries, and analytics tools such as Microsoft Clarity and Google Analytics. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security practices include HTTPS usage and asynchronous loading of tracking scripts, though security headers and explicit privacy mechanisms are not evident. The security posture is moderate with no detected vulnerabilities or WAF blocking. However, the absence of visible privacy and cookie policies, as well as contact information, reduces privacy compliance and user trust. The WHOIS data is unavailable due to EURid privacy restrictions, which is typical for .eu domains, and does not raise immediate legitimacy concerns. Overall, the website is functional and serves its informational purpose but would benefit from enhanced privacy compliance, clearer contact channels, and improved security headers to strengthen trust and regulatory adherence.

A

AtmoSud

atmosud.org

64

AtmoSud operates as the regional observatory for air quality in the Provence-Alpes-Côte d'Azur region of France, providing comprehensive monitoring, public alerts, research, and educational services. The organization targets a broad audience including citizens, associations, local governments, enterprises, and research institutions. The website reflects a professional and well-structured digital presence, leveraging Drupal 9 CMS and integrating modern analytics and cookie management tools. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security policies and vulnerability disclosures. The WHOIS data is unavailable or malformed, which slightly impacts trust but the active and consistent website content supports legitimacy. Overall, AtmoSud presents a credible and authoritative resource in the environmental monitoring sector.

A

Atmo Auvergne-Rhône-Alpes

atmo-aura.fr

58

Atmo Auvergne-Rhône-Alpes operates as a regional air quality observatory serving the Auvergne-Rhône-Alpes region in France. The organization provides comprehensive air pollution monitoring, forecasting, and public information services, positioning itself as a trusted regional authority in environmental data. Their offerings include real-time pollution indices, expert data services for businesses and authorities, and public engagement platforms such as Air Attitude and Air to Go. The website reflects a mature digital presence with modern technologies including Drupal 9 CMS, interactive mapping with Leaflet and Mapbox GL, and privacy-conscious analytics via Matomo. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, demonstrating compliance with GDPR and privacy best practices. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit HTTP security headers and incident response information suggests areas for improvement. The WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the strong official branding and partner affiliations mitigate this concern. Overall, the website is professionally designed, accessible, and provides valuable environmental data to its target audience of citizens, public authorities, and businesses. The security posture is solid though could be enhanced with additional headers and documented policies. Strategic recommendations include improving security headers, publishing incident response contacts, and maintaining regular audits of third-party scripts to sustain trust and compliance.

S

Splio

splio.com

77

Splio is a French-based SaaS company specializing in CRM marketing solutions tailored for the retail sector. Their platform centralizes customer data, automates marketing campaigns, and supports loyalty programs, positioning them as a key player in retail marketing technology. The website reflects a mature digital presence with professional design and consistent branding, targeting retail businesses seeking advanced CRM and loyalty solutions. Technically, the site is built on WordPress with modern performance optimizations such as lazy loading and uses reputable third-party services for fonts, analytics, and consent management. Security posture is solid with HTTPS enabled and domain registration consistent with the business age, though there is room for improvement in security headers and explicit security policies. Privacy compliance is partially addressed via Cookiebot consent management, but lacks visible privacy and terms of service pages. Overall, the website is trustworthy and professional, supporting the company's market position in retail CRM SaaS.

M

mediarithmics

easyence.com

66

mediarithmics is a technology company specializing in a holistic Customer Data Platform (CDP) designed for data-driven enterprises. Their platform integrates multiple data technologies to enable real-time marketing personalization, cookieless audience monetization, and data collaboration at scale. Positioned as a key player in the Retail and Media sectors, mediarithmics offers advanced capabilities such as identity resolution, compliance with stringent privacy standards, and flexible deployment options including Zero Copy CDP on existing datalakes. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive business information targeting marketers, data scientists, and ad operations professionals. Technically, the website is built on Webflow CMS and integrates modern marketing and analytics tools including HubSpot, Google Tag Manager, and Didomi for consent management. The site is well-optimized for mobile and accessibility, with strong SEO practices. Security posture is robust with HTTPS enforced, ISO27001 certification, and use of reCAPTCHA to protect forms. Privacy compliance is evident with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. No critical security vulnerabilities or blocking mechanisms were detected, indicating a secure and accessible website. However, the WHOIS data is privacy protected or unavailable, which is typical for SaaS companies but limits domain registration transparency. Overall, mediarithmics demonstrates a strong security and compliance posture suitable for its business model and industry requirements.