Education security reports

A

Amicale des Élèves de l'INSA Toulouse

amicale-insat.fr

45

Amicale des Élèves de l'INSA Toulouse is a student association dedicated to supporting students at INSA Toulouse by providing various services and managing campus life activities. The organization operates as a non-profit entity focused on enhancing the student experience through events, clubs, and associative management. The website reflects a small but active local presence with a clear focus on its target audience of INSA Toulouse students. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Tabulator.js library for interactive tables. Hosting is provided by reputable providers Scaleway and o2switch. The site is mobile responsive and well-structured, though some SEO and accessibility features could be improved. No CMS or complex frameworks were detected. From a security perspective, the site uses HTTPS and includes some basic CSRF protection meta tags but lacks explicit security headers and publicly available security policies. There is no evidence of vulnerability disclosure or incident response information. Privacy and cookie policies are missing, which represents a compliance gap with GDPR requirements. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy with no adult or explicit content. The domain registration data is consistent with the organization's profile, showing a long-established presence since 2006. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the security posture and trustworthiness of the site.

T

Free online timeline maker

time.graphics

50

Time.Graphics is an online timeline creation platform offering both free and premium services targeted primarily at educational institutions, businesses, and individual users. The platform enables users to create, analyze, and visualize timelines for historical, educational, and project management purposes. It integrates with popular Google services and supports social login via OAuth providers, enhancing user experience and functionality. The business model is freemium SaaS with premium subscriptions and educational discounts, positioning it as a niche player in the timeline and project planning market. Technically, the website employs a modern tech stack including Google Analytics, Google Tag Manager, jQuery, and Google Web Toolkit (GWT). It uses Stripe for secure payment processing and embeds multimedia content such as YouTube videos. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses SSL for payment security, but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially addressed with a comprehensive privacy policy and GDPR indicators, but cookie consent is missing. WHOIS data is privacy protected, which is justified for this SaaS business, and no suspicious registration patterns were found. Overall, Time.Graphics presents a professional, trustworthy, and functional online service with minor gaps in privacy compliance and security best practices. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and user trust.

C

Chambres de Métiers et de l'artisanat - Île-de-France

cma-idf.fr

51

The website www.cma-idf.fr represents the Chambre de Métiers et de l'Artisanat of Île-de-France, a regional public entity focused on artisan training, apprenticeship, business creation, and management support. It serves a broad audience including entrepreneurs, apprentices, and business owners in the Île-de-France region. The site is built on Drupal 10 and integrates modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Hotjar, and Facebook Pixel, with appropriate cookie consent mechanisms in place. Security posture is strong with HTTPS enforced and relevant security headers present, though no explicit security policy or incident response information is published. The domain WHOIS data is not publicly available, consistent with AFNIC policies for .fr domains, and does not raise legitimacy concerns. Overall, the website is professional, content-rich, and trustworthy, providing comprehensive services and information to its target audience.

U

Uniformation

uniformation.fr

61

Uniformation is a well-established French non-profit organization acting as an OPCO (Opérateur de compétences) specializing in the social cohesion sector. The website clearly targets employers, employees, partners, and job seekers, offering services such as professional training financing, pedagogical engineering, HR management support, and alternance recruitment. The site demonstrates a strong market position with a comprehensive catalog of training and consulting services tailored to the social cohesion industry. Technically, the website is built on Drupal 10 with modern JavaScript libraries and analytics tools, providing a responsive and accessible user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be explicitly added. The absence of WHOIS data reduces domain trust slightly, but the professional presentation and compliance with GDPR and cookie regulations support legitimacy. Overall, the site is professional, secure, and user-friendly, serving a large audience in France's education and social sectors.

C

Centre pour la Communication Scientifique Directe (CCSD)

hal.science

66

HAL (Hyper Articles en Ligne) is a French open archive platform dedicated to the deposit and dissemination of scientific publications. It is supported by major French research organizations including CNRS, INRIA, and INRAE, and serves the academic and research community by providing a sustainable, public infrastructure for open science. The platform offers services such as long-term preservation, institutional portals, and integration with research identifiers like ORCID. Technically, HAL uses a modern JavaScript stack with libraries such as jQuery, Select2, MathJax, and Matomo for privacy-conscious analytics. The website is well-designed, mobile-optimized, and accessible, with clear navigation and professional content. Security posture is strong with HTTPS enforced and privacy policies in place, though explicit security headers could be improved. The domain registration is consistent with the organization's identity and history, indicating high legitimacy. Overall, HAL is a trustworthy, well-maintained platform with a strong focus on open science and research dissemination.

K

Konference Eduzměna

konferenceeduzmeny.cz

43

Konference Eduzměna is a Czech-language educational conference website providing information about events and speakers. The site is built on WordPress with modern frontend technologies such as Bootstrap and Glide.js, indicating a moderate level of digital maturity. The website is mobile-optimized and has a good design quality, but lacks comprehensive privacy and terms of service documentation. Security posture is moderate with HTTPS enforced and a GDPR cookie consent mechanism in place, but no advanced security headers or incident response policies are evident. The domain WHOIS data shows inconsistencies, notably a creation date in the future, which raises concerns about registration legitimacy. Overall, the website is functional and professional but would benefit from improved compliance and security documentation.

N

Nadační fond Eduzměna

eduzmenaregion.cz

55

The website cpv-kh.cz represents the Nadační fond Eduzměna, a regional educational support center focused on the Kutnohorsko region in the Czech Republic. It provides information and resources related to the Eduzměna project, aiming to support children, parents, teachers, and school leadership with workshops, wellbeing initiatives, and community engagement. The organization operates as a non-profit entity with a clear regional focus and a mission to enhance educational opportunities and joy in learning for children. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern libraries such as Bootstrap, FontAwesome, and FullCalendar. It employs Google Analytics and Facebook Pixel for tracking, with a GDPR-compliant cookie consent mechanism in place. The site is hosted likely by Wedos, consistent with the domain registrar information. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and some security best practices but lacks explicit security headers and formal policies such as privacy policy, terms of service, and incident response contacts. No vulnerability disclosure or security.txt file is present. The WHOIS data is transparent and consistent with the website's regional and organizational claims, though the domain is recently registered, which may reflect a domain transfer or renewal. Overall, the website is professional, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

N

Nadační fond Eduzměna

eduzmena.cz

42

Eduzměna is a Czech non-profit endowment fund dedicated to systemic education reform, focusing on regional pilot projects to improve school support and teaching quality. The organization collaborates with public institutions and private donors to create sustainable education models. The website is professionally designed, content-rich, and targets donors, educators, and public stakeholders. Technically, the site uses modern analytics and marketing tools, is mobile-optimized, and employs HTTPS, but lacks some security headers and a published privacy policy. The absence of WHOIS data reduces domain trust slightly, but the overall presentation and contact transparency support legitimacy. Recommendations include adding privacy and security policies and improving accessibility.

Francouzský institut v Praze is a well-established cultural and educational institution dedicated to promoting French language and culture in the Czech Republic. The website offers a broad range of services including language courses, certifications, cultural events, and educational cooperation programs. It targets students, professionals, educators, and cultural enthusiasts. The institution maintains an active online presence with multiple social media channels and provides clear contact information and privacy policies, reflecting a commitment to transparency and user privacy. Technically, the website uses a modern technology stack including Angular, jQuery, Bootstrap, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices such as implementing security headers are missing, and the absence of WHOIS data raises questions about domain registration transparency. Security posture is moderate with HTTPS enforced and cookie consent implemented, but improvements are recommended in security headers and explicit terms of service. Privacy compliance is strong with a comprehensive GDPR policy and cookie management. Overall, the website is professional, trustworthy, and serves its educational and cultural mission effectively. The main risk lies in the lack of WHOIS transparency which slightly impacts trustworthiness. Strategic recommendations include enhancing security headers, publishing terms of service, and verifying domain registration details to improve legitimacy and user trust.

A

Aj Ty v IT

techlib.sk

53

Techlib is a Slovak educational technology initiative operated by the organization Aj Ty v IT, focused on providing a hardware lending library to facilitate IT education access, especially targeting girls, schools, teachers, and parents. The website presents a clear mission to remove barriers to technology access and supports educational projects and competitions. The platform uses WordPress with Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. While the site is well-structured and optimized for SEO, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices.

É

École nationale supérieure d'Arts et Métiers

artsetmetiers.fr

55

École nationale supérieure d'Arts et Métiers (ENSAM) is a prestigious French engineering grande école specializing in initial and continuing education, research, and innovation in technology and industry. The institution maintains strong partnerships with industry and academic bodies, positioning itself as a leader in engineering education and industrial innovation in France. The website reflects a professional and comprehensive digital presence, targeting students, researchers, and industry collaborators. The business model focuses on education, research, and industry collaboration with services including degree programs, continuing education, and incubation support for startups. Technically, the website is built on Drupal 10 with modern web technologies including jQuery, Matomo analytics, and responsive design. The site demonstrates good SEO, accessibility, and mobile optimization. Hosting and domain registration are consistent with an academic institution, with domain age supporting legitimacy. Analytics usage respects privacy with Do Not Track enabled. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks published privacy and cookie policies, incident response contacts, and security headers, which are areas for improvement to enhance compliance and trust. Overall, the website is trustworthy, professional, and well-maintained, with recommendations to improve privacy compliance and security transparency to further strengthen its security posture and regulatory adherence.

M

meetnlearn s.r.o.

doucma.sk

55

DoučMa.sk is an established Slovak online platform operated by meetnlearn s.r.o. that connects students and tutors for personalized tutoring services across various subjects including languages and sciences. The platform offers both online and in-person tutoring options, enriched with user reviews, study questions, and educational blog content. It holds a solid market position in Slovakia with partnerships across multiple European countries, supported by recognized partners including European Union funding. Technically, the website employs modern web technologies such as React, Bootstrap, and integrates third-party services like Google Analytics and Facebook SDK, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though it lacks explicit security policies and some security headers. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable educational resource.

P

Počítačové a manažérske kurzy a školenia - Macrosoft

macrosoft.sk

10

Macrosoft is a reputable Slovakian company specializing in computer and managerial training courses, offering both in-person and online education. The company holds ISO 9001:2015 certification, underscoring its commitment to quality management. Its website targets individuals and organizations seeking professional development in IT and business skills, positioning itself as a leading training and certification center in Bratislava and online. The business model revolves around delivering educational services, including certification preparation and summer camps.

A

Aj Ty v IT o.z.

ajtyvit.sk

40

Aj Ty v IT is a Slovak non-profit organization dedicated to empowering girls and women by providing education, motivation, and community support in the field of information technology. The organization offers workshops, courses, motivational events, and mentorship programs targeting various age groups including school girls, adult women, and educators. Their market position is strong within Slovakia as a recognized entity promoting women in IT. Technically, the website is built on WordPress with Elementor, leveraging modern analytics and tracking tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Hotjar. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and vulnerability disclosure. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

M

Mgr. Marek Sivčo

mareksivco.sk

56

The website mareksivco.sk represents the personal and professional portfolio of Mgr. Marek Sivčo, a Slovak teacher, web developer, poet, and podcaster. The site highlights his extensive experience in web development, teaching engagements, creative works, and supported projects. It targets individuals interested in IT education, Slovak geek culture, and creative arts. The business model is centered on personal branding and educational content delivery, with a niche market position in Slovakia and the broader Slovak-speaking community. Technically, the website employs a modern tech stack including PHP, WordPress, JavaScript, and various Adobe creative tools. Hosting is provided by Websupport, with DNSSEC enabled and HTTPS properly configured, indicating a secure and reliable infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No analytics or tracking scripts are present, reflecting a privacy-conscious approach. From a security perspective, the site benefits from HTTPS and DNSSEC but lacks security headers and formal security policies. No vulnerability disclosure or incident response information is provided, and no privacy or cookie policies are found, which are notable compliance gaps. The absence of forms reduces attack surface but also limits user interaction. Overall, the website is professional, trustworthy, and content-rich, with strong business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

A

A World For Us

skills.hr

72

Skills.hr is a French marketplace platform specializing in professional training programs, aggregating over 120,000 offers from more than 5,500 providers. It serves professionals and individuals seeking to enhance their skills and advance their careers. The platform emphasizes transparency by providing detailed program data, including satisfaction ratings and testimonials, and offers clear financing options. The website is part of a broader ecosystem including related projects such as Skills Mag and Digiforma, enhancing its market presence. Technically, the website leverages modern web technologies including Phoenix LiveView, JavaScript, and integrates security measures like hCaptcha and Google Tag Manager. Hosting is provided via Amazon AWS, ensuring reliable infrastructure. The site demonstrates good SEO practices and mobile optimization, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms. However, it lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is well addressed with clear privacy and cookie policies aligned with GDPR requirements. Overall, Skills.hr presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security transparency and accessibility would further enhance its posture and user trust.

D

Digiforma Certif

digiforma-certif.com

61

Digiforma Certif is a French company specializing in software solutions for managing RNCP and RS certifications, primarily serving training organizations and certification bodies. The company positions itself as a key player in the French educational certification software market, offering SaaS-based tools to streamline compliance and training management. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and certifications. Technically, the site is built on WordPress with Elementor, leveraging modern libraries and SEO tools, and includes standard security measures such as HTTPS and reCAPTCHA. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with moderate security posture and good business credibility.

D

Outil de veille sur la formation dédié aux OF - Digiforma Veille

digiforma-veille.com

57

Digiforma Veille operates a specialized monitoring tool dedicated to training organizations, focusing on providing relevant information and updates in the education sector. The website is built on WordPress with Elementor, integrating modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and reCAPTCHA for bot protection. The site demonstrates good design quality, mobile optimization, and SEO practices, making it accessible and user-friendly for its target audience. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security measures are adequate with HTTPS and bot protection, but the lack of explicit privacy policies and contact information limits compliance and user trust. Overall, the site is safe and professional but would benefit from enhanced transparency and security documentation.

A

A world for us

aworldforus.com

57

A World For Us is a French company established since 2009, specializing in digital solutions for the professional training sector. Their portfolio includes a comprehensive ecosystem of integrated software products such as Digiforma, Digiformag, and certification management tools, serving over 5500 clients and a growing community. The company positions itself as a leader in digital transformation for training organizations, offering tools that simplify administrative, compliance, and e-learning processes. The website reflects a mature digital presence with professional branding, multilingual support, and active community engagement.

Digiformag is a French online magazine specializing in professional training, targeting training organizations and professionals in the education sector. It offers news, articles, and a community platform called OF Connect, positioning itself as a reference source in its niche. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with Elementor and uses modern tools such as Yoast SEO, WP Rocket, and various analytics and tracking services including Google Analytics, Hotjar, and Facebook Pixel. Security-wise, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies or incident response contacts. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, although the website content and branding suggest a legitimate business. Overall, Digiformag demonstrates a solid business and technical foundation with room for improvement in security transparency and domain registration clarity.

D

Digiforma

digiforma.com

62

Digiforma is a French company founded in 2016 specializing in SaaS software solutions for training management targeted at training organizations and centers. Their platform facilitates administrative document management including training agreements, programs, evaluations, and attendance tracking. The website demonstrates a mature digital presence with professional design, strong SEO, and multi-language support. The technical infrastructure is based on WordPress with Elementor and Gravity Forms, integrated with modern analytics and marketing tools such as Google Tag Manager, Cookiebot for GDPR compliance, and Plausible Analytics for privacy-focused tracking. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure information is absent. The domain WHOIS data is unavailable, which slightly reduces trustworthiness but the overall business credibility remains high based on content and structured data.

T

TED Conferences LLC

tedx.com

67

TED Conferences LLC operates the TEDx program, a global initiative supporting independent organizers to create TED-like events in their communities. The website showcases a professional, well-structured platform with a focus on spreading ideas in technology, entertainment, and design. The site leverages modern web technologies including React (Next.js), New Relic monitoring, and consent management platforms to ensure a high-quality user experience. Security practices are robust with HTTPS enforcement and privacy compliance, including GDPR adherence. No critical vulnerabilities or security issues were detected, and the site maintains a strong trust profile consistent with its global brand recognition.

E

EconomiX

economix.fr

55

EconomiX is an academic research laboratory specializing in economic sciences, affiliated with the Université Paris Nanterre and CNRS. It serves as a major research and training center in the Île-de-France region, with a focus on empirical and theoretical economic research. The website targets academic researchers, students, and institutions interested in economics. The business model is non-commercial, focused on research and education. The site is well-branded, consistent, and provides access to publications, events, and social media channels. Technically, the website uses modern web technologies including HTML5, CSS3, Bootstrap, and JavaScript libraries such as Animate.css and Leaflet.js. It is hosted on Alwaysdata and uses HTTPS with a good SSL configuration. The site is mobile-optimized and has good SEO practices, though accessibility could be improved. From a security perspective, the site enforces HTTPS and has a cookie consent mechanism, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the academic nature of the site, showing a long-standing domain registration with a reputable registrar. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve trust and compliance.

I

Institut français NL

institutfrancais.nl

45

Institut français NL is a medium-sized non-profit organization dedicated to fostering Franco-Dutch cooperation in culture, education, research, and the French language. The organization offers a variety of programs including artist residencies, language courses, scholarships, and professional mobility initiatives. The website reflects a well-established institution with a clear mission and a broad network of partners across the Netherlands. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted by OVH with DNSSEC enabled, indicating a secure and stable infrastructure. Security posture is good with HTTPS enforced and use of hCaptcha for form protection, though additional security headers and policies could enhance the overall security framework. Privacy compliance is strong with clear policies and cookie consent mechanisms in place. Overall, the website is professional, trustworthy, and well-positioned to serve its target audience effectively.

M

MaFormation

maformation.fr

58

MaFormation.fr is a large French online platform specializing in aggregating and listing professional training courses across France. It offers a wide range of educational services including CPF-financed training, alternance programs, online courses, and competency assessments. The platform targets individuals seeking to enhance their professional skills and certifications. The website is well-branded, consistent, and provides comprehensive content relevant to its audience. Technically, it employs modern web technologies such as Tailwind CSS, StimulusJS, and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Abtasty. Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. Security posture is good with HTTPS enforced, though some security headers could be improved. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, but the association with the Hellowork Group parent company and professional presentation mitigate this risk. Overall, the site is professional, trustworthy, and serves a critical role in the French education sector.

A

Akademie klasické homeopatie, spol. s r.o.

studujtehomeopatii.cz

42

Akademie klasické homeopatie, spol. s r.o. is a Czech Republic-based educational organization specializing in professional homeopathy training for medical professionals and the general public. The website offers detailed information about courses, seminars, congresses, and online lectures led by an experienced homeopath. The company has a clear market position with over 32 years of experience in the field. Technically, the website uses a modern JavaScript and CSS stack with responsive design and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and secure login forms, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and company registration details support legitimacy. Overall, the site is professional, informative, and trustworthy for its target audience.

W

Washington University in St. Louis

washubears.com

64

Washington University in St. Louis operates an official athletics website providing comprehensive information about its NCAA Division III sports teams, schedules, rosters, news, and athletics department resources. The site targets students, athletes, alumni, and sports fans, serving as a central hub for university sports engagement. The business model is focused on supporting university athletics and community involvement, positioning itself as a trusted source for sports information within the education sector. Technically, the website leverages a modern JavaScript stack including jQuery, RequireJS, Knockout.js, and integrates with Google Tag Manager and Google Analytics for tracking. It is hosted on Cloudfront CDN with DNS managed by Rackspace. The site is mobile optimized, accessible, and uses the Sidearm Sports CMS platform, reflecting a mature digital infrastructure suitable for its audience and purpose. From a security perspective, the site enforces HTTPS and employs standard domain protections but lacks DNSSEC and some advanced security headers like Content Security Policy. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Privacy compliance is partial, with a privacy policy present but no explicit cookie consent mechanism despite active tracking scripts. Overall, the website demonstrates a solid security posture and business credibility with room for improvement in privacy compliance and DNS security. Strategic recommendations include enabling DNSSEC, implementing a cookie consent banner, adding security headers, and publishing a vulnerability disclosure policy to enhance trust and compliance.

D

Digiforma

catalogueformpro.com

59

Digiforma is a French-based SaaS company specializing in comprehensive training management software for training organizations, centers, and enterprises. Founded in 2016, it serves over 5,500 clients and supports more than 2 million trainees with a robust platform that includes administrative management, e-learning, digital signature, quality certification compliance (Qualiopi), CRM, and online training catalogues. The company positions itself as a leader in the French training software market with a strong brand presence and extensive client testimonials. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Plausible Analytics for privacy-focused tracking. The site is well-optimized for SEO, mobile-friendly, and uses structured data for enhanced search engine understanding. Security best practices are observed with HTTPS, security headers, and cookie consent mechanisms. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. No public vulnerability disclosure or incident response contacts are found, which could be improved to enhance trust and security readiness. Overall, Digiforma presents a professional, trustworthy, and technically sound online presence with minor gaps in domain transparency and security disclosure. Strategic recommendations include verifying domain registration details, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to strengthen security posture and stakeholder confidence.

U

U7+ Alliance of world universities

u7alliance.org

68

The U7+ Alliance of world universities is a global coalition of university presidents committed to addressing pressing global challenges in coordination with G7 governments and beyond. The organization operates as a non-profit alliance focused on policy advocacy, collaborative summits, working groups, and student initiatives to foster global education and research collaboration. The website reflects a professional and consistent brand image targeting university leaders, academics, policymakers, and students worldwide. Technically, the website is built on Drupal CMS with modern libraries such as jQuery and Superfish for navigation, and uses Matomo Cloud for privacy-focused analytics. The site is mobile-optimized, accessible, and well-structured with clear navigation and SEO best practices. Cookie consent is managed via Tarteaucitron.js, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policy pages or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy-protected, which is justified for this type of non-profit organization. Overall, the site demonstrates a strong security posture with room for improvement in transparency and security documentation. The overall risk assessment is low, with the site presenting a trustworthy and professional front for the U7+ Alliance. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

L

League of European Research Universities

leru.org

68

The League of European Research Universities (LERU) operates as a prominent non-profit network of 24 leading European research universities focused on advancing innovative research and influencing science policy. The website clearly communicates its mission, activities, and publications targeted at policymakers, researchers, and academic stakeholders. The organization maintains a professional online presence with active social media channels and regularly updated content, reinforcing its market position as a key advocate for research-intensive universities in Europe. Technically, the website employs a modern technology stack including Google Analytics, Google Tag Manager, jQuery, and asynchronous script loading to optimize performance. The site is mobile responsive with good SEO and accessibility basics, although there is room for improvement in accessibility and security headers. The website is hosted securely over HTTPS with no visible vulnerabilities or exposed sensitive data. From a security perspective, the site demonstrates a solid baseline with HTTPS and no evident security flaws. However, it lacks explicit security headers, a cookie consent mechanism, and published security policies or incident response contacts, which are important for compliance and trust. The WHOIS data is unavailable due to privacy protection or query failure, but this is typical for organizations of this nature and does not raise immediate concerns. Overall, the website is trustworthy, professionally maintained, and serves its audience well. Strategic improvements in privacy compliance, security policy transparency, and contact information availability would enhance its security posture and user trust.

E

European University Foundation

uni-foundation.eu

9

The European University Foundation (EUF) operates as a non-profit organization focused on fostering collaboration among European universities and supporting higher education initiatives. The website presents a professional and consistent brand image, targeting academic institutions and stakeholders within the European education sector. The technical infrastructure is based on WordPress with the Divi theme, leveraging modern web technologies and integrating Google Analytics and Tag Manager for user tracking and analytics. The site demonstrates moderate digital maturity with good mobile optimization and basic SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of explicit security headers and lack of published privacy and security policies indicate areas for improvement. Overall, the website is safe, trustworthy, and suitable for a general audience, but could enhance compliance and security transparency to strengthen user trust and regulatory adherence.

C

CESAER

cesaer.org

68

CESAER is a prominent non-profit association representing over 50 leading universities of science and technology across more than 25 European countries. The organization serves as a unified voice advocating for the interests of its members in European research and education policy arenas, including the European Research Area and European Education Area. Its key services include advocacy, networking, policy influence, organizing events, and publishing relevant materials to support its mission. The website reflects a professional and consistent brand image, targeting academic institutions, researchers, and policymakers in the science and technology education sector. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and utilizes libraries like Slick Slider and a custom cookie consent mechanism (Brainlane Cookiewall). The site is mobile-optimized with good SEO practices and moderate performance. While no CMS or hosting provider is explicitly identified, the infrastructure appears stable and well-maintained. From a security perspective, the site enforces HTTPS and implements a granular cookie consent mechanism, demonstrating compliance with GDPR. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable or privacy protected, which is common and justified for non-profit organizations, and no suspicious patterns were found. Overall, CESAER's website is a credible, secure, and well-maintained platform that effectively supports its mission. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen its security posture and compliance.

E

Eugloh

eugloh.eu

40

EUGLOH is a European University Alliance focused on global health, uniting nine research-intensive universities to provide innovative education, research, and international collaboration opportunities. The website is professionally designed using TYPO3 CMS and integrates Matomo analytics with privacy-conscious settings. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and cookie consent mechanisms. The domain is privacy protected under EURid, which is typical for EU domains, and the website content strongly supports legitimacy and trustworthiness. Overall, the site serves as a comprehensive platform for students, academics, and partners engaged in global health education and research.

É

École normale supérieure Paris-Saclay

ens-paris-saclay.fr

56

École normale supérieure Paris-Saclay is a prestigious French Grande École specializing in higher education and research, particularly in fundamental sciences, engineering, and social sciences. It operates as part of the Université Paris-Saclay ecosystem and targets students, researchers, and academic partners. The website reflects a mature digital presence with comprehensive academic content, events, and testimonials, supporting its market position as a leading educational institution. Technically, the website is built on Drupal 9 with modern front-end libraries such as Bootstrap, jQuery, and Swiper, and employs Matomo analytics with privacy-conscious settings. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure suitable for its audience. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or suspicious activities were detected. The WHOIS data confirms domain legitimacy and consistency with the institution's identity. Overall, the website presents a low-risk profile with strong compliance to privacy regulations and good user experience. Strategic improvements could include publishing security policies and enhancing security headers to further strengthen trust and resilience.

C

CentraleSupélec

centralesupelec.fr

51

CentraleSupélec is a prestigious French engineering school focused on delivering high-quality education and cutting-edge research. The institution offers a broad range of programs including bachelors, masters, doctorates, and executive education, supported by strong partnerships with industry and academia. The website reflects a mature digital presence with modern technologies such as Drupal 10, Matomo analytics, and a comprehensive cookie consent mechanism, ensuring compliance with GDPR and privacy standards. Security posture is solid with HTTPS and privacy-focused analytics, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-structured, serving a diverse audience including students, enterprises, researchers, and alumni.

The University of Wisconsin–Madison is a prestigious public research university located in Madison, Wisconsin, founded in 1849. It offers comprehensive education opportunities to undergraduate, graduate, and professional students, and is recognized as one of the top-ranked research institutions in the United States. The university emphasizes public service through the Wisconsin Idea, aiming to improve lives beyond campus boundaries. Its website reflects a mature digital presence with extensive content, clear navigation, and strong branding consistency. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and Eloqua for marketing and analytics. The site is well-optimized for mobile and accessibility, with good SEO practices. Hosting appears to be managed via university infrastructure or a dedicated CDN. Performance is moderate, with room for improvement in security headers and explicit security policy disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with user consent mechanisms. However, the absence of a published security policy or vulnerability disclosure program is noted. WHOIS data is unavailable, which is unusual but does not detract from the overall legitimacy given the institutional nature and external trust signals. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's mission and public image effectively.

C

CEA

prisonnier-quantique.fr

52

Le Prisonnier quantique is an educational interactive game developed and hosted by the French public research organization CEA. It aims to promote scientific and technical culture through a free browser-based adventure game targeting a general audience including students and educators. The website is well-branded with official CEA logos and partnerships, providing a trustworthy platform for educational content. Technically, the site uses standard web technologies with responsive design and integrates Matomo analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and explicit cookie consent mechanisms are missing. Contact information is limited to official CEA email addresses, supporting legitimacy but lacking phone or physical address details. Overall, the site is professional, secure, and suitable for its educational mission.

C

Centrum dokumentárního filmu

c-d-f.cz

10

Centrum dokumentárního filmu (CDF) is a Czech non-profit organization focused on documentary film education, research, and cultural promotion. The website offers courses in film and media education, a videotéka (film library), a documentary book library, and research/production services. It targets educators, students, researchers, and film enthusiasts primarily in the Czech Republic. The organization collaborates with notable partners such as MFDF Ji.hlava and is supported by governmental and EU bodies, indicating a credible cultural institution. Technically, the website uses a modern JavaScript stack including jQuery, Knockout.js, and Owl Carousel, with Google Analytics for tracking. The site is mobile-optimized and provides a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details are evident, and some security headers appear missing, which could be improved. Security posture is generally good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic but present, with a privacy policy and cookie consent banner. The absence of WHOIS data limits domain legitimacy verification, but the website content and partnerships strongly suggest a legitimate entity. Overall, the site is professionally designed, content-rich, and trustworthy, though improvements in security headers and transparency policies are recommended to enhance compliance and trust further.

I

Interpole

mon-parcours-collaboratif.fr

51

Interpole is a small, community-driven educational platform based in France, focusing on collaborative work, digital tools, and commons creation. It integrates content from the 'Mon Parcours Collaboratif' project, providing resources and guides for collaborative project management and digital tool usage. The website uses YesWiki CMS with Bootstrap and FontAwesome, hosted by OVH, and presents good content quality and user experience. However, it lacks formal privacy, cookie, and security policies, and does not provide explicit contact information. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. The domain registration is consistent and legitimate, supporting trust in the platform. Overall, the website is safe, professional, and targeted at general audiences interested in collaborative digital work.

Ú

Ústav filmové, televizní a rozhlasové tvorby (ÚFTaRT), Slezská univerzita v Opavě

audiovizualnitvorba.cz

55

The website represents the Ústav filmové, televizní a rozhlasové tvorby (ÚFTaRT), an academic institute affiliated with the Silesian University in Opava, Czech Republic. It focuses on providing quality education in audiovisual creation, supporting students, and engaging in cultural and media projects including film festivals, exhibitions, and conferences. The site serves students, academics, and the cultural community with a professional and content-rich platform. Technically, the site is built on WordPress with modern plugins and themes, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust assessment, but the university affiliation and professional presentation support legitimacy. Overall, the site is a credible academic and cultural resource with room for improvement in privacy and security compliance.

C

CIHEAM

ciheam.org

49

CIHEAM is a Mediterranean intergovernmental organization founded in 1962, focusing on advanced agronomic studies and cooperation among 13 member states. The website serves as a comprehensive platform for education, research, policy dialogue, and dissemination of publications related to Mediterranean agronomy and sustainable food systems. The organization targets policymakers, researchers, students, and stakeholders in the Mediterranean region. Technically, the website is built on WordPress with modern libraries and plugins, offering good performance, mobile responsiveness, and strong SEO practices. Security posture is solid with HTTPS and secure forms, though some security headers and explicit privacy policies are missing. The WHOIS data is unavailable due to query failure or privacy protection, which is common for such organizations. Overall, the website is professional, trustworthy, and content-rich, supporting CIHEAM's mission effectively.

É

École Nationale Supérieure de Chimie de Montpellier

enscm.fr

53

The École Nationale Supérieure de Chimie de Montpellier (ENSCM) is a reputable French public engineering school specializing in chemistry education and research. The website presents a professional and well-structured digital presence, targeting prospective students, researchers, and industry partners. It highlights the institution's long history since 1889, its international partnerships, and its position as the second leading chemistry engineering school in France. Technically, the site is built on WordPress, uses modern web technologies including jQuery and TinyMCE, and integrates Matomo analytics for user tracking. Security best practices such as HTTPS and security headers are implemented, though privacy and cookie policies are not clearly presented, indicating room for compliance improvement. Overall, the site is trustworthy, content-rich, and professionally maintained, supporting the institution's credibility and market position.

C

CHARM-EU

charm-eu.eu

61

CHARM-EU is a European university alliance focused on delivering challenge-driven, accessible, research-based, and mobile education primarily in sustainability and global challenges. The website presents a well-structured educational platform offering master's programs, micro-credentials, mobility opportunities, and research hubs. The technical infrastructure is built on a modern WordPress CMS with Elementor, enhanced by SEO and analytics tools such as Yoast SEO, Matomo, and Google Tag Manager. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though explicit cookie consent and security policies are not prominently published. The site demonstrates good design quality, navigation, and content relevance, targeting learners, academics, researchers, and institutional partners. Overall, the domain registration and WHOIS data align with the website's educational mission, indicating legitimacy and trustworthiness.

C

Campus France

campusfrance.org

59

Campus France is the official French government agency dedicated to promoting higher education and research opportunities in France to international students and researchers. The website serves as a comprehensive portal offering detailed information on study programs, research initiatives, scholarships, visa procedures, and student life in France. It targets international students, researchers, and institutional partners, positioning itself as a key facilitator of academic mobility and cooperation. Technically, the website is built on Drupal 10, leveraging modern web technologies such as jQuery UI and cookie consent management via tarteaucitron. The site is well-structured, mobile-optimized, and incorporates accessibility and SEO best practices. It integrates multimedia content including videos and interactive maps, enhancing user engagement. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and shows indications of standard security headers, although some headers could be explicitly verified or enhanced. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned policies and user consent management. Overall, Campus France's website demonstrates a high level of professionalism, trustworthiness, and technical maturity, supporting its mission as a government-backed educational promotion entity. The lack of WHOIS registrant details is typical for such domains and does not detract from its legitimacy. Strategic recommendations include enhancing explicit security headers and continuous monitoring of third-party scripts.

Q

Quae

quae-open.com

67

Quae-Open is an educational platform providing open access to scientific books primarily in the natural sciences domain. The website offers a catalog of over 300 books available for free download in PDF and ePub formats, targeting researchers, academics, and authors. The platform supports multilingual access (English and French) and includes author support and newsletter subscription features. Technically, the site uses modern web technologies including jQuery, Bootstrap, Matomo analytics, and Google Tag Manager, with a responsive design and good SEO practices. Security posture is solid with HTTPS and CSRF protections, but lacks some advanced security headers and explicit privacy policy documentation. The absence of WHOIS data for the domain is a notable concern for legitimacy and trust, although the site links to a known publisher domain, mitigating some risk. Overall, the site is functional, professional, and trustworthy for its educational purpose but would benefit from improved transparency and security disclosures.

P

Planetárium Ostrava

planetko.cz

57

Planetárium Ostrava is an educational and cultural institution affiliated with the Mining-Geological Faculty of the Technical University of Ostrava. It provides a wide range of astronomy and natural science educational programs, cultural events, and interactive exhibits targeting visitors of all ages, including schools and the general public. The website reflects a professional and consistent brand image with clear navigation and rich content focused on its mission. Technically, the website is built on the MySUITU CMS platform and leverages modern web technologies such as YouTube IFrame API, jQuery, Swiper.js, and Google Tag Manager. The site is hosted likely by Active24, with good mobile optimization and moderate performance. SEO and accessibility are adequately addressed, though accessibility could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating legitimacy and consistency. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy standards, though it would benefit from enhanced security policies and accessibility improvements.

A

admin1

porg.cz

56

PORG is a reputable educational institution operating gymnasium and primary schools in Prague, Ostrava, and Brno, Czech Republic. The website reflects a well-established brand focused on delivering high-quality education with a unique curriculum and strong university counseling services. The digital infrastructure is modern, leveraging WordPress with Elementor, Google Tag Manager, and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust assessment but the website content and structure indicate legitimacy. Overall, PORG presents a professional and trustworthy online presence aligned with its educational mission.

Richie.education is an open source content management system designed to help educators and educational institutions create rich, multilingual online learning portals and course catalogs. The platform integrates with multiple LMS systems such as Open edX and Moodle, providing a centralized portal for course discovery and management. The website demonstrates a clear focus on education technology with a modern technical stack including Django CMS, Django, and React. The site is well-structured, mobile-optimized, and provides comprehensive documentation and community engagement channels, including GitHub and Slack. However, the website lacks published privacy, cookie, and security policies, and does not provide direct contact information, which impacts its privacy compliance and trustworthiness scores. No forms or data collection mechanisms are present, reducing immediate security risks but also limiting user engagement options. Overall, Richie.education presents a credible and professional open source educational platform with room for improvement in privacy and security transparency.

S

Střední odborná škola a Střední odborné učiliště, Kaplice

geukaplice.cz

48

The website represents Střední odborná škola a Střední odborné učiliště, Kaplice, a Czech secondary vocational school providing a variety of educational programs including maturitní obory and učební obory. It targets prospective and current students, offering detailed information about courses, events, and school services. The site is well-structured with clear navigation and a professional design, supporting its educational mission effectively. Technically, the site uses modern JavaScript libraries such as jQuery, Flatpickr, and Tippy.js, and is built on the Nette PHP framework. It employs HTTPS and Google reCAPTCHA for security, though some security headers are not visibly set in the HTML source. Privacy and cookie policies are present but lack an explicit consent mechanism. The absence of WHOIS data reduces domain trustworthiness, but the website content and social media presence support its legitimacy as an educational institution.