Education security reports

U

Université Paris-Saclay

universite-paris-saclay.fr

65

Université Paris-Saclay is a prominent French public university that integrates multiple faculties, grandes écoles, and research organizations to provide comprehensive education and research services across sciences, engineering, life sciences, health, and social sciences. It holds a strong global position, ranked in the top 20 universities worldwide, and is a key contributor to French research. The website reflects a mature digital presence with professional design, multilingual support, and extensive content catering to students, researchers, and partners. Technically, it is built on Drupal 10 with modern web standards and includes cookie consent mechanisms, though some security headers could be enhanced. The security posture is good with HTTPS enforced and no visible vulnerabilities. Privacy policies and terms of service are clearly presented and GDPR compliant. The absence of WHOIS data limits domain trust analysis but is likely due to registry privacy policies common for public institutions. Overall, the site is trustworthy, professional, and well-maintained.

L

Librairie Quae

quae.com

71

Librairie Quae operates as a specialized online bookstore focused on scientific literature, offering a broad catalog of printed and digital books, including open access ebooks through its partner platform Quae-open. The website demonstrates a professional e-commerce infrastructure with modern technologies such as jQuery, Google Analytics, Matomo, and Owl Carousel, and is built likely on a Ruby on Rails framework. The site is well-structured with clear navigation and a responsive design, targeting scientists, professionals, and the general public interested in science. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and explicit policies such as privacy and terms of service. Cookie consent is implemented, indicating some privacy compliance efforts. Overall, the site is functional and trustworthy in content but requires improvements in transparency and security documentation.

U

Université de Montpellier

umontpellier.fr

60

Université de Montpellier is a large, historic French public university founded in 1220, offering higher education, research, innovation, and international cooperation services. It holds a strong market position with recognized certifications such as the European HR Excellence in Research label. The website targets students, researchers, and academic partners, providing comprehensive information on academic programs, research units, campus life, and international partnerships. Technically, the site is built on WordPress with modern frameworks like Bootstrap and jQuery, supporting multilingual content via Weglot and analytics through Piwik/Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is partial with a clear privacy policy but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting the university's mission and reputation.

R

Réseau Canopé

mathador.fr

59

Mathador is an educational platform operated by Réseau Canopé, focused on promoting mental calculation skills through engaging games and contests. The website offers both digital and physical game formats, targeting students and educators primarily in France. The platform is well integrated with educational initiatives and provides resources to motivate learners in mathematics. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, with a cookie consent mechanism compliant with GDPR. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers and explicit security policies are not evident, suggesting room for improvement in security hardening. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain trust verification, but the strong affiliation with a reputable educational network and consistent branding supports legitimacy. Privacy compliance is well addressed through cookie management and privacy policy presence. Overall, Mathador presents a trustworthy and professional educational service with a solid digital presence. Strategic enhancements in security headers, incident response transparency, and WHOIS data availability could further strengthen trust and compliance.

R

Réseau Canopé

hiboutheque.fr

56

Hibouthèque is an online documentary management solution specifically designed for primary school libraries (BCD) offered by Réseau Canopé. It targets French-speaking teachers in France and abroad, providing a subscription-based service that facilitates catalog management, loans, returns, and reservations. The platform is web-based, requiring no installation, and supports multiple simultaneous users. It includes user assistance through monthly webinars and technical support. The website is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence in the education sector. Technically, it leverages modern frameworks such as Symfony 6.4, Bootstrap 5.3, and jQuery 3.7, with Matomo analytics for privacy-conscious user tracking. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and formal security policies are absent. Privacy compliance is strong, with clear GDPR-aligned policies and cookie management. Overall, the site is trustworthy and well-positioned within its niche.

R

Réseau Canopé / eTwinning France

etwinning.fr

62

eTwinning.fr is a professionally maintained educational support website operated under the auspices of Réseau Canopé and linked to the French Ministry of Education and Erasmus+. It serves as a community and resource hub for European schools and teachers to collaborate on educational projects. The site offers training, project management tools, and recognition programs to enhance educational collaboration across Europe. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the site’s official affiliations and professional presentation indicate legitimacy. Overall, the site is a high-quality, trustworthy resource for its target audience.

E

Formez-vous en ligne | Formation enseignant | e-inspé

e-inspe.fr

57

The website www.e-inspe.fr is a public online educational platform dedicated to providing free training courses for teachers in France, from kindergarten through high school. It is supported by the French Ministry of Education and offers pedagogical resources and video-based learning modules designed by experts. The platform targets educators seeking to enhance their teaching skills with accessible, research-based content. Technically, the site is built on Drupal 10 CMS, uses Bootstrap for styling, and integrates Video.js for media playback. It employs Matomo analytics for user tracking with cross-domain capabilities. Security-wise, the site enforces HTTPS and secure login via SAML but lacks some security headers and explicit privacy and cookie policies. WHOIS data is unavailable, which is typical for .fr domains managed by AFNIC, and does not detract from the site's legitimacy. Overall, the site presents a professional, trustworthy, and well-structured educational resource with room for improvement in privacy transparency and security headers.

C

CanoTech

canotech.fr

58

CanoTech is a French educational platform specializing in continuing education for primary and secondary school teachers and educational teams. The website offers training modules aimed at diversifying student learning experiences. The business operates in the education sector with a focus on teacher professional development. The website is built using modern web technologies including Angular and employs Matomo and Piwik Pro for analytics tracking. The site is responsive and well-structured, providing a good user experience for its target audience. However, the absence of WHOIS data for the domain and lack of visible privacy and cookie policies indicate areas for improvement in transparency and compliance. Security headers are not detected, and SSL configuration details are unknown, suggesting potential enhancements in security posture. Overall, the website appears legitimate and safe, but the missing WHOIS information and privacy compliance gaps reduce trustworthiness.

S

Simplon

simplon.co

65

Simplon is a French educational organization specializing in accessible tech training from beginner to advanced levels, including development, cybersecurity, data, and digital skills. The website demonstrates a strong market position with partnerships from major tech companies like IBM, Meta, and Microsoft, and offers a wide range of training services including alternance and personalized career support. Technically, the site is built on Webflow with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security policies and headers could be improved. Privacy compliance is lacking due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

O

OpenClassrooms

openclassrooms.com

67

OpenClassrooms is a well-established online education platform founded in 2008, offering courses and mentorship programs to a global audience. The platform targets students and professionals seeking to develop skills and advance their careers through accessible online learning. The business model combines free and premium content with personalized mentorship, positioning OpenClassrooms as a significant player in the education sector, particularly in France and internationally. Technically, the website employs modern JavaScript frameworks and integrates multiple analytics and marketing tools such as Datadog RUM, Hotjar, Blueshift, and Satismeter. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The site demonstrates good mobile optimization and basic accessibility features, with room for improvement in SEO and security headers. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements a comprehensive cookie consent mechanism via TrustArc. However, it lacks DNSSEC, a published security policy, incident response contacts, and a vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture with opportunities for enhancement. Overall, OpenClassrooms presents a trustworthy and professional online presence with strong business credibility and compliance with privacy regulations. Strategic improvements in security transparency and technical hardening would further strengthen its risk profile and user trust.

I

IZUM – Institut informacijskih znanosti, Maribor

cobiss.si

60

COBISS.SI is a well-established Slovenian national library information system portal managed by IZUM, providing comprehensive access to library catalogs, e-book lending, and user profile services. The platform targets library users, researchers, authors, and librarians, offering a centralized and integrated library experience. The website demonstrates a mature digital infrastructure with modern JavaScript libraries and social media integration, supporting good user experience and mobile responsiveness. Security posture is adequate with HTTPS and secure form handling, though improvements in security headers and explicit security policies are recommended. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR through clear privacy and cookie policies. The domain's WHOIS data confirms legitimacy and institutional backing, supporting a high trust level.

P

ProfiBeauty Kurzy

kurzyprodluzovanivlasu.cz

57

ProfiBeauty Kurzy is a Czech-based professional training provider specializing in hair extension and thickening courses. The company offers a range of educational services, including workshops and seminars, supported by a strong online presence and social media engagement. Their business model integrates education, retail through an e-shop, and salon services, positioning them as a comprehensive player in the beauty education sector. Technically, the website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some recommended security headers and visible privacy compliance mechanisms. The absence of WHOIS data reduces domain trustworthiness, though the website content and social signals suggest legitimacy. Strategic improvements in privacy compliance and security headers would enhance overall trust and compliance.

F

Formation Animacoop

animacoop.net

50

Formation Animacoop is a French educational organization specializing in cooperative training across multiple cities in France. Established in 2010, it offers comprehensive training programs focused on animating and facilitating cooperative projects, collective intelligence, and collaborative digital tools. The organization targets professionals involved in project management, facilitation, coaching, and collective initiatives, providing blended learning with both in-person and remote sessions. The website reflects a mature digital presence with structured data, social media integration, and clear contact points. Technically, the site is built on WordPress with modern frameworks and includes GDPR-compliant cookie consent and privacy policies. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the site is professional, trustworthy, and well-positioned in its niche.

S

Studo GmbH

studoflow.com

78

Studo GmbH is a European software company specializing in digital solutions for higher education institutions. Their flagship product, Studo Flow, is a SaaS platform designed to help universities digitize and simplify administrative processes through modular, configurable software components. The company targets small and emerging higher education institutions, offering a user-friendly and integrable platform that supports various administrative needs. Their market position is strong as a pioneer in European higher education SaaS solutions, supported by EU and Austrian funding agencies. Technically, the website is well-constructed with modern web technologies, including Cloudflare DNS and CDN services, and uses Piwik PRO for privacy-conscious analytics. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. However, some security best practices such as DNSSEC and explicit security headers could be improved. From a security perspective, the company demonstrates a solid posture with HTTPS enforcement, GDPR compliance, and support for modern authorization frameworks like OAuth, SAML, and LDAP. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and explicit incident response contacts are areas for enhancement. Overall, the website and company present a trustworthy and professional image with a high level of business credibility and technical maturity. Strategic improvements in security headers, DNSSEC, and privacy mechanisms would further strengthen their security and compliance stance.

I

IZUM – Institute of information science

cobiss.net

63

COBISS.net operates as a cooperative network of library and research information systems primarily serving multiple countries in the Balkan and Central European region. Managed by IZUM – Institute of information science, the platform provides shared bibliographic cataloguing, union catalogues, and current research information systems, supporting libraries and academic institutions. The network is well-established with a domain age of over 20 years and a strong institutional backing. Technically, the website uses a custom-built platform with Java and Oracle backend technologies, supported by modern front-end frameworks like Bootstrap and jQuery. The site is moderately performant and mobile-optimized, with good navigation and content relevance. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is partial, with a privacy-related accessibility statement but no explicit cookie or privacy policies on the main site. Overall, the website is professional, trustworthy, and serves a specialized educational and research audience effectively.

SVČ Lužánky is a well-established educational and leisure center based in Brno, Czech Republic, offering a wide range of activities including clubs, courses, camps, and events targeted primarily at children, youth, families, and schools. The organization operates as a non-profit entity focused on providing quality extracurricular and educational experiences. The website reflects a professional and modern digital presence, built using Next.js and React technologies, optimized for mobile devices and accessibility. It features comprehensive content, clear navigation, and integration with social media platforms, enhancing user engagement and outreach. Security posture is solid with HTTPS enforced and secure form handling, though there is room for improvement in implementing security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, but the overall site professionalism and transparency in contact information support legitimacy. Strategic recommendations include enhancing security headers, adding explicit cookie consent, and publishing incident response policies to strengthen trust and compliance.

E

ENVF - Écoles Nationales Vétérinaires de France

envf.fr

37

ENVF (Écoles Nationales Vétérinaires de France) is a French governmental network of four national veterinary schools, established in 2020 under the Ministry of Agriculture and Food Sovereignty. The website serves as an official portal to present the network's mission, values, and member schools, targeting veterinary students, professionals, and academic communities. The business model is educational and governmental, focusing on veterinary training, research, and coordinated activities such as internships and competitions. The site maintains a consistent and professional brand image aligned with its authoritative position in veterinary education in France. Technically, the website is built on WordPress using the Kadence theme and related plugins, hosted by OVH. It employs modern web technologies including Google Fonts and supports mobile responsiveness with good design quality. Performance is moderate, and accessibility is basic but functional. SEO optimization is basic with proper meta tags but lacks advanced features. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No cookie consent mechanism or comprehensive privacy compliance indicators are present, which may pose compliance risks under GDPR. No contact emails or phone numbers are clearly provided on the homepage, limiting direct communication channels. Overall, the website is trustworthy and professional but could improve privacy compliance and security posture by implementing cookie consent, security headers, and publishing incident response information. The domain registration is consistent with the business history and supports legitimacy. Strategic improvements in privacy and security would enhance user trust and regulatory compliance.

E

ENSV-FVI

ensv-fvi.fr

55

ENSV-FVI is a specialized educational institution focused on training Veterinary Public Health Inspectors and providing continuing education and degree programs in veterinary public health. Affiliated with VetAgro Sup and hosting the One Health Institute, it serves a national and international audience of veterinary and government professionals. The website is built on a modern WordPress platform using Elementor and includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good digital maturity. Security posture is solid with HTTPS and GDPR compliance, though some security headers and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-branded, supporting the institution's authoritative position in its niche.

R

Réseau Canopé

reseau-canope.fr

52

Réseau Canopé is a French public operator under the Ministry of National Education, Higher Education and Research, dedicated to the training of teachers and educational staff. It holds a strong market position as the national network for teacher training, offering a wide range of services including online courses, workshops, and digital educational resources. The website reflects a mature digital infrastructure using TYPO3 CMS and integrates advanced analytics tools such as Matomo and Piwik PRO for user engagement tracking. The site is well-designed, accessible, and optimized for mobile devices, providing a professional user experience. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in explicit security policies and vulnerability disclosure. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility with official government affiliation, certifications, and active social media presence.

L

La Rochelle Université

univ-larochelle.fr

58

La Rochelle Université is a public higher education institution based in France, offering a broad range of academic programs, research initiatives, and international partnerships. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and academic partners. The institution emphasizes personalized student support and sustainable development in its strategic vision. Technically, the website is built on WordPress with modern frameworks and includes SEO and accessibility best practices. Security measures include HTTPS, cookie consent, and reCAPTCHA integration, though some security headers and explicit incident response policies are absent. The absence of WHOIS data is a notable anomaly but does not detract from the overall legitimacy indicated by the website content and social media presence. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving transparency of contact information.

P

Padlet

padlet.com

70

Padlet is a well-established SaaS company founded in 2004, specializing in visual collaboration tools for creative work and education. The platform serves a large global user base of 40 million, targeting educators, students, and creative professionals. Their business model is freemium with tiered subscription plans for individuals, teams, classrooms, and schools. The website reflects a mature market position with strong branding and user engagement through social media and positive reviews on multiple platforms. Technically, Padlet employs modern web technologies including Vue.js and Cloudflare services for DNS and CDN. The site is well optimized for performance, mobile responsiveness, and accessibility. Analytics are implemented via RudderStack, indicating a moderate level of user tracking. The website is professionally designed with clear navigation and comprehensive content. From a security perspective, Padlet enforces HTTPS, uses security headers, and maintains a clientTransferProhibited domain status, indicating good domain security practices. However, DNSSEC is not enabled, and there is no visible vulnerability disclosure or security.txt file. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks an explicit cookie consent mechanism. Contact information for security incidents or data protection officers is not publicly available. Overall, Padlet presents a high level of business credibility and technical maturity with minor gaps in privacy compliance and security transparency. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing vulnerability disclosure information, and providing clearer contact channels for security and privacy matters.

M

Muzeum Říčany

muzeumricany.cz

43

Muzeum Říčany is a small, non-profit cultural and educational institution based in the Czech Republic, focused on providing modern educational experiences for families, children, students, and educators. The website highlights their key services including exhibitions, educational programs, a Geopark, and public events. Their market position is that of a local community museum with a strong emphasis on education and family engagement. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integration of Google Analytics for visitor tracking. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and serves its target audience effectively.

F

FUN MOOC

fun-mooc.fr

64

FUN MOOC is a prominent French online education platform offering free MOOCs from various universities and organizations. It provides learners worldwide with access to diverse courses, supporting lifelong learning and professional development. The platform is backed by France Université Numérique, enhancing its credibility and reach. Technically, the website employs modern web technologies including React and the Richie MOOC platform, hosted likely on Scaleway infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security-wise, HTTPS is enforced and cookie consent mechanisms are in place, though explicit security headers and policies could be improved. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the platform demonstrates a mature digital presence with a strong focus on education and user experience.

V

VetAgro Sup

vetagro-sup.fr

55

VetAgro Sup is a French public higher education and research institution specializing in veterinary medicine, agronomy engineering, and public veterinary health inspector training. The institution holds multiple accreditations and offers a range of educational and clinical services, positioning itself as a reputable player in the education and healthcare sectors in France. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to students, researchers, and professionals in related fields. Technically, the site is built on WordPress with modern plugins and frameworks, including Elementor and Bootstrap, and integrates analytics tools such as Google Analytics and Matomo. Security posture is good with HTTPS enforced and use of ReCaptcha, although explicit security headers and published security policies are lacking. Privacy compliance is well addressed with visible cookie consent and privacy policies. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or content blocking.

Oniris Nantes is an educational institution based in France, likely specializing in veterinary and food sciences. The domain is registered since 2009 through GIP RENATER, a reputable academic network provider, indicating a legitimate and established presence. However, the website content is currently inaccessible, returning a 503 Service Unavailable error, which prevents detailed analysis of the site's content, policies, and technical infrastructure. The lack of accessible content also means no privacy, cookie, or security policies are detectable, and no contact information or forms are available for review. This limits the ability to assess the website's compliance and user engagement capabilities. The domain registration data is consistent with the institution's profile, supporting its legitimacy despite the current unavailability of the website.

E

ENVT

envt.fr

61

ENVT (École Nationale Vétérinaire de Toulouse) is a well-established French educational institution specializing in veterinary education, research, and clinical services. The website reflects a mature digital presence with comprehensive content targeting students, veterinarians, researchers, and related stakeholders. It offers detailed information on educational programs, clinical services, research units, and international collaborations. The institution holds a strong market position as a national reference in veterinary training in France. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and FontAwesome, supported by various plugins for SEO, analytics (Matomo), and user interaction. The site is mobile-optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, some security headers are not explicitly detected, and no public security policy or incident response contacts are found. No vulnerabilities or suspicious activities were identified in the content or scripts. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear business credibility and a high legitimacy score. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

A

AgroParisTech

agroparistech.fr

55

AgroParisTech is a prominent French higher education and research institution specializing in agronomy, life sciences, environment, and food sciences. The website reflects a well-established academic entity with a comprehensive offering of engineering, master, doctoral, and continuing education programs. It also highlights active research, innovation initiatives, and international collaborations, positioning AgroParisTech as a leader in its sector within France and the Paris-Saclay academic ecosystem. The site targets students, researchers, academic staff, and industry partners interested in these domains. Technically, the website is built on Drupal 10, a modern and robust content management system, and employs Matomo for privacy-conscious analytics. The site demonstrates good mobile optimization, clear navigation, and professional design quality. While performance is moderate, the infrastructure appears stable and suitable for an academic institution. Accessibility features are present but could be enhanced for better compliance. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. However, it lacks explicit security headers and a publicly available security or vulnerability disclosure policy. Cookie consent mechanisms are implemented, indicating GDPR awareness, but no dedicated privacy or terms of service pages were detected in the provided content. Social media presence is active and official, enhancing trust. Overall, AgroParisTech's website is credible, professional, and secure with room for improvement in privacy policy transparency and security best practices. The domain registration data aligns well with the institution's profile, reinforcing legitimacy.

U

Univerza Alma Mater Europaea

almamater.si

44

Univerza Alma Mater Europaea is a Slovenian international university established in 2012, offering a wide range of academic programs including undergraduate, graduate, doctoral, specialist, and lifelong learning courses. The institution targets students and academic professionals seeking career-oriented education aligned with future job market demands. The website reflects a mature digital presence with multilingual support and comprehensive academic and institutional information. Technically, the site employs modern web technologies such as Google Tag Manager, Hotjar, Facebook Pixel, and Swiper.js, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and privacy-conscious analytics configurations, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and well-aligned with the university's mission and audience.

Q

QS ImpACT

qsimpact.org

67

QS ImpACT is a youth-led non-profit organization dedicated to empowering young people globally to create social impact aligned with the United Nations Sustainable Development Goals (UN SDGs). The platform offers scholarships, awards, youth summits, and community leadership programs to recognize and support youth contributions to sustainable development. The website presents a professional and consistent brand image with clear navigation and relevant content targeting youth interested in social change and education opportunities. Technically, the website is built using modern web technologies including Next.js and React, hosted likely on AWS infrastructure with DNS managed via AWS nameservers. It integrates analytics tools such as Microsoft Clarity and Google Analytics via Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and no security headers were detected in the provided data. There is no visible privacy policy, cookie consent mechanism, or security incident contact information, which are gaps in compliance and user trust. No WAF or blocking mechanisms were detected, and the domain registration is consistent with the business age and profile. Overall, QS ImpACT presents a trustworthy and professional platform with room for improvement in privacy compliance and security best practices. Strategic enhancements in policy transparency, security headers, and user data protection would strengthen the organization's digital trust and compliance posture.

L

Lidová konzervatoř a Múzická škola, p. o.

lkms.cz

58

Lidová konzervatoř a Múzická škola Ostrava is a public educational institution offering serious artistic education in music, visual arts, drama, dance, and artistic therapies. It serves both professional aspirants and hobbyists, operating under the auspices of the Statutární město Ostrava. The website reflects a well-structured, content-rich platform targeting students and the general public interested in cultural education. Technically, the site uses modern web technologies including JavaScript, SVG, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. The lack of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its public affiliation. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

A

Alumni Agro Bordeaux

alumni-agro-bordeaux.org

57

Alumni Agro Bordeaux is a French alumni association dedicated to graduates of Bordeaux Sciences Agro, providing a platform for networking, career development, and community engagement. The website offers access to alumni directories, event information, a career center, and a magazine publication, targeting agronomy professionals and students. Technically, the site uses a mix of modern JavaScript libraries and frameworks, including jQuery, Bootstrap, and hCaptcha for security, with a CMS likely based on NetAssoc. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and spam protection, though improvements in HTTP security headers and incident response transparency are recommended. The absence of WHOIS data limits domain trust analysis, but the association with reputable educational institutions and federations supports legitimacy. Overall, the website is professional, secure, and well-suited for its audience.

A

AnaEnsaia

anaensaia.org

58

AnaEnsaia is a French alumni association for graduates of ENSAIA, an agricultural engineering school. The website serves as a community hub offering networking, career services, events, and publications to its members. It is well-branded and professionally maintained, targeting alumni and professionals in the agricultural sector. The technical infrastructure uses modern JavaScript libraries and CMS features, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, CSRF protection, and GDPR-compliant cookie consent, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but the website's content and social presence strongly indicate legitimacy. Overall, AnaEnsaia presents a trustworthy, professional online presence supporting its community effectively.

I

Institut Agro Alumni

institut-agro-alumni.fr

46

Institut Agro Alumni operates as a dedicated alumni community platform for graduates of Institut Agro schools in France. The website offers a range of services including networking, career support, event organization, and publication of a magazine. It targets alumni and professionals connected to the agricultural and educational sectors, positioning itself as a niche but important community resource. The platform integrates modern web technologies and provides a mobile-friendly experience, including a dedicated mobile app. Security measures such as HTTPS, CSRF tokens, and hCaptcha are implemented, alongside GDPR-compliant cookie consent mechanisms. Contact information and social media presence enhance trust and accessibility.

A

Aptalumni

aptalumni.org

48

Aptalumni is a well-established alumni association serving graduates of AgroParisTech, a prestigious French engineering school. The website provides a comprehensive platform for alumni networking, career services, events, solidarity initiatives, and publications. It targets AgroParisTech alumni and professionals connected to the institution, offering membership benefits and community engagement. The site is professionally designed with consistent branding and clear navigation, supporting a medium-sized organization in the education and non-profit sectors based in France. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, SweetAlert, and hCaptcha for security. It uses a specialized CMS likely based on NetAssoc. The site is mobile-optimized and includes accessibility and SEO best practices. Privacy and cookie policies are well implemented with GDPR compliance, including a consent banner managed by tarteaucitron. Analytics and error tracking are handled via Google Analytics and Raygun. Security posture is strong with HTTPS enforced, CSRF protection on forms, and bot mitigation via hCaptcha. However, security headers are not visibly configured, and no explicit security or incident response policies are published. WHOIS data is unavailable due to a malformed response, but the website's professionalism and content quality indicate legitimacy. No suspicious or malicious indicators were found. Overall, the site presents a low-risk profile with good privacy and security hygiene, serving an important educational community. Strategic improvements include adding security headers, publishing a security policy, and enhancing incident response transparency.

E

Euroleague for Life Sciences (ELLS)

euroleague-study.org

62

The Euroleague for Life Sciences (ELLS) is a well-established European university alliance focused on life sciences and sustainability. It brings together leading academic institutions to collaborate on education, research, and innovation in agri-food systems and environmental sciences. The alliance supports student mobility, joint teaching programs, and scientific conferences, targeting students and researchers in the life sciences domain. The website reflects a professional academic portal with consistent branding and clear contact information, primarily hosted and managed by the Czech University of Life Sciences Prague and Wageningen University & Research.

A

Agreenium

agreenium.fr

63

Agreenium is a French non-profit alliance focused on education and research in agriculture, food, environment, and global health. The organization provides a comprehensive platform for educational resources, doctoral and international research training, and thematic research coordination. The website is built on Drupal 10 and uses modern frontend technologies including Alpine.js and Swiper.js, with Matomo analytics for privacy-conscious user tracking. The site is well-designed, mobile-optimized, and offers clear navigation and professional content targeted at students, researchers, and professionals in related fields. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is a valuable resource in its sector but would benefit from enhanced transparency on privacy and security policies.

L

Lumni

lumni.fr

54

Lumni is a French educational multimedia platform offering free videos, quizzes, and games aimed at students, parents, teachers, and educational mediators. It serves as a cultural and knowledge access point, positioning itself as a trusted public educational content provider in France. The website demonstrates a mature digital infrastructure with integrations of advanced analytics and consent management tools, reflecting a commitment to user privacy and performance monitoring. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, Lumni presents a professional, trustworthy, and well-maintained online presence suitable for its educational mission.

F

Fondation Thuram

education-racisme.fr

49

The website education-racisme.fr is a French non-profit educational platform dedicated to combating racism through awareness and scientific knowledge dissemination. It is affiliated with the Fondation Thuram and offers interactive educational resources such as videos, animations, cards, and legal texts. The site targets educators, students, and the general public interested in anti-racism education. Technically, it is built on WordPress with common plugins for SEO and caching, and uses Google Analytics for visitor tracking. The site is secured with HTTPS and includes cookie consent mechanisms, reflecting good privacy compliance. However, WHOIS data is unavailable, likely due to privacy protection, but the website's content and partner affiliations support its legitimacy. Security headers could be improved, and accessibility and mobile optimization are basic but functional.

S

Střední pedagogická škola da Vinci

pedagogickaskoladavinci.cz

58

Střední pedagogická škola da Vinci is a small educational institution based in the Czech Republic specializing in preschool and extracurricular pedagogy. The website presents the school’s educational offerings, admission process, team information, and inspirational events, targeting students and educators interested in pedagogical studies. The business model is focused on providing secondary education with a niche focus on pedagogical training. The website is built on the Webnode CMS platform and uses Amazon Cloudfront CDN for content delivery, indicating a modern but modest technical infrastructure. The site is mobile-optimized with good design and navigation, though some SEO and accessibility features could be improved. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, but lacks advanced security headers and explicit privacy policies. No WHOIS data is available, likely due to privacy protection, but the website content and structure suggest a legitimate educational entity. Overall, the site is safe, professional, and functional with room for enhancements in privacy compliance and security best practices.

F

Fondation Lilian Thuram

thuram.org

46

Fondation Lilian Thuram is a French non-profit organization dedicated to education against racism and promoting equality. The website serves as a platform to provide educational resources, multimedia content, and public awareness campaigns. It targets a broad audience including educators, students, and activists. The foundation is well-positioned in the non-profit education sector with a clear mission and professional online presence. Technically, the site is built on WordPress with common plugins and multimedia integrations, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification, but the website's content and structure support its legitimacy. Overall, the site is a credible and valuable resource for anti-racism education.

G

Grenoble INP - UGA

grenoble-inp.fr

52

Grenoble INP - UGA is a prominent French public higher education and research institution specializing in engineering and management education. It comprises eight public engineering and management schools and is affiliated with Université Grenoble Alpes. The institution emphasizes scientific training aligned with societal challenges and supports its programs with research laboratories and technological platforms. With a significant annual graduation rate, it holds a leading position in the French public engineering education sector. Technically, the website is built on the K-Sup CMS platform, uses modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data, though it could improve by adding more security headers and publishing explicit security policies. Overall, the domain WHOIS data is unavailable, which is common for .fr domains, but the website's official nature and comprehensive content indicate high legitimacy and trustworthiness.

2

20ecolesdechimie

20ecolesdechimie.com

41

20ecolesdechimie.com is the official website of the Fédération Gay-Lussac, a federation of 20 chemistry and process engineering schools in France. The site serves as an informational and promotional platform targeting prospective students, educators, and partners interested in chemistry engineering education. It provides detailed information on admissions, student life, international programs, and federation activities, positioning itself as a key resource in the French higher education sector for chemistry engineering. The federation is well-established, with a domain registered since 2015 and a consistent brand presence. Technically, the website is built on WordPress, utilizing common plugins such as Formidable Forms for contact and newsletter forms, Mailjet for email marketing, and Matomo for analytics. The site employs modern web technologies including lazy loading for images and SVG icons, ensuring good performance and mobile responsiveness. SEO and accessibility are adequately addressed, with proper meta tags, structured data, and language alternates. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and some recommended security headers, which could be improved. The presence of a cookie consent mechanism and privacy policy indicates GDPR awareness, though no explicit security policy or incident response contact was found. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. It demonstrates a solid digital maturity level with room for security enhancements. The risk profile is low, with no signs of malicious activity or content safety concerns.

A

AIA7

aia7.fr

50

AIA7 is a French online community platform dedicated to members of ENSIACET, including students, alumni, teachers, and recruiters. It offers networking, career services, event management, and news updates to foster engagement within the academic and professional community. The platform supports multiple OAuth login providers and integrates social media for broader connectivity. Technically, the site uses modern web technologies such as Vue.js, Google Analytics, Google Maps API, and Leaflet.js, providing a responsive and user-friendly experience. Security is reasonably well implemented with HTTPS and OAuth authentication, though some security headers could be improved. Privacy compliance is addressed with clear privacy and cookie policies, including GDPR considerations. The absence of WHOIS data reduces domain trust slightly, but the website content and structure indicate a legitimate and professional organization.

Y

YMAG

ymag.fr

63

YMAG is a French company specializing in innovative and scalable software solutions designed to simplify and digitalize administrative and operational management for training organizations such as CFA, OFA, and OF. Their key offerings include the ORYZEA SaaS software and the modular ERP YPAREO, targeting complex organizational needs. The website demonstrates a professional digital presence with a focus on education sector clients in France. The technical infrastructure leverages modern web technologies including Webflow CMS, Google Tag Manager, HubSpot marketing and analytics tools, and a GDPR-compliant cookie consent mechanism. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though explicit security headers and privacy policies are missing. The absence of WHOIS data from the AFNIC server is a concern but the website content and branding suggest a legitimate business. Strategic recommendations include adding explicit privacy and security policies, improving security headers, and publishing vulnerability disclosure information to enhance trust and compliance.

D

Dendreo

dendreo.com

55

Dendreo is a French SaaS company providing a comprehensive management software solution tailored for professional training centers. The platform covers administrative, commercial, financial, pedagogical, and quality management aspects, including compliance with the Qualiopi certification. The website demonstrates a mature digital presence with detailed product features, client testimonials, and integration of modern web technologies such as Webflow, Google Tag Manager, and HubSpot. The inclusion of an AI assistant and e-learning integrations highlights a focus on innovation and user experience. Security posture is generally good with HTTPS and deferred script loading, but lacks explicit security headers and visible privacy policies. The absence of WHOIS data is a notable concern for domain legitimacy, though the website content and client references suggest a legitimate and established business. Overall, the site is professional, well-branded, and targeted at training organizations in France.

Coop Formations is a French cooperative organization specializing in professional training aimed at transforming work, organizations, and society. Founded in 2020, it operates as a small, human-scale entity focused on delivering accessible, high-quality educational sessions and courses. The cooperative emphasizes combining critical thinking with practical action, supported by passionate trainers and personalized learner support. The website reflects a clear mission and strong trust signals such as the Qualiopi certification and a 100% learner recommendation rate. Technically, the website is built on the Odoo CMS platform, hosted via Infomaniak, and employs modern web technologies including Bootstrap, FontAwesome, and Chart.js. It demonstrates good mobile optimization, accessibility, and SEO practices. Analytics are implemented with privacy-conscious tools like Plausible alongside Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled and no explicit security policies or incident response contacts are published, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and enhancing security headers to further strengthen trust and resilience.

U

University of California, Davis

ucdavis.edu

70

University of California, Davis (UC Davis) is a large, top-tier public university located in California, USA. The institution focuses on education, research, and community engagement, with nationally recognized programs in agriculture, veterinary medicine, and graduate financial success. The website serves prospective and current students, faculty, staff, alumni, and visitors, providing comprehensive information about admissions, academics, campus life, and research. The digital presence reflects a mature and professional organization with consistent branding and rich content.

한

한국과학기술원 (KAIST)

kaist.ac.kr

56

KAIST is a prestigious national science and technology university in South Korea, established to foster scientific talent and conduct advanced research aligned with national policies. The website reflects its institutional stature, providing comprehensive academic, research, and campus life information targeted at students, researchers, and stakeholders. The domain is longstanding and registered transparently under the institution's name, reinforcing its legitimacy. Technically, the website employs common web technologies such as jQuery and Bootstrap, with moderate performance and good mobile responsiveness. However, it lacks modern security headers and DNSSEC, which could be improved to enhance security posture. Privacy and cookie policies are not explicitly found, indicating a gap in compliance with modern privacy standards. Security-wise, the site uses HTTPS and does not expose sensitive data, but could benefit from publishing incident response contacts and vulnerability disclosure policies. Overall, the site is trustworthy and professional but should address privacy compliance and security best practices to strengthen its digital maturity. The risk assessment is low given the institutional nature and absence of suspicious elements, but strategic improvements in privacy and security policies are recommended to maintain trust and compliance.

W

Washington University in St. Louis

washu.edu

55

Washington University in St. Louis (WashU) is a prominent private research university offering a wide range of academic degrees and programs, supporting extensive research and innovation activities, and providing comprehensive student life services. The website reflects a mature digital presence with strong branding, clear navigation, and rich content targeting prospective and current students, faculty, staff, alumni, and researchers. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and accessibility. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although privacy compliance could be improved by adding cookie consent mechanisms and explicit terms of service. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the university's identity.