Education security reports

T

Toulouse INP-ENSIACET

ensiacet.fr

53

ENSIACET is a French engineering school specializing in the transformation of matter and energy, offering multiple engineering diplomas and masters programs. It is part of the Toulouse INP group and maintains strong partnerships with governmental and educational institutions. The website is professionally designed, content-rich, and targets prospective students, researchers, and industry partners. The technical infrastructure is based on Ametys CMS with common JavaScript libraries and includes a cookie consent mechanism and Matomo analytics for privacy-conscious tracking. Security posture is moderate with no visible critical vulnerabilities, but lacks explicit security headers and incident response information. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the presence of official certifications and partner links supports legitimacy. Overall, the site is well-maintained, compliant with GDPR, and provides clear contact information.

U

UNIVERSEH

universeh.eu

44

UNIVERSEH is a European Space University dedicated to providing high-level education and research programs focused on space studies. It operates as a consortium of European universities and research institutions, offering courses, mobility programs, and research projects to students, researchers, staff, stakeholders, and citizens interested in space and humanity. The website reflects a well-structured and professionally designed platform with a clear focus on education and research in the space sector. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, and it integrates Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not detected and incident response information is absent. Overall, the domain registration is consistent with the business purpose, registered through BELNET, a reputable academic registrar. The site maintains a strong social media presence, enhancing its trustworthiness and outreach.

G

Groupe INP

groupe-inp.fr

53

Groupe INP is a consortium of public engineering and management schools in France, offering high-quality education and research opportunities across multiple regions including Brittany, Bordeaux, Clermont-Ferrand, Grenoble, Nancy, and Toulouse. The group emphasizes professional training, scientific excellence, and strong ties with industry and international partners. The website reflects a well-structured educational institution with clear branding and a focus on student engagement and admissions. Technically, the site uses a custom CMS (K-Sup), modern web technologies, and Matomo analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts domain trust but the site content and branding strongly indicate legitimacy. Overall, the site is professional, accessible, and trustworthy for its target audience.

M

Mouvement Colibris

colibris-universite.org

46

The Université des Colibris is a French non-profit educational platform operated by the Mouvement Colibris, focused on empowering individuals and organizations to engage in ecological and social transition. The website offers a variety of MOOCs and training programs targeting citizens and professionals interested in sustainable development, governance, and community projects. The organization is well-established with a domain registered since 2016 and holds the Qualiopi certification, reinforcing its credibility in the education sector. Technically, the website is built on Drupal 7, utilizing JavaScript and Matomo analytics for user tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data enhancing search visibility. Hosting is provided by Gandi SAS, a reputable registrar and hosting provider. However, some security enhancements such as enabling DNSSEC and adding security headers could improve the overall security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit security policies or incident response contacts. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected. The site tracks users moderately via Matomo, a privacy-friendly analytics tool. No vulnerabilities or exposed sensitive data were identified. Overall, the website presents a trustworthy and professional front for the educational services it offers, with room for improvement in security and privacy compliance to align with best practices and regulatory requirements.

Q

QS GEN

qs-gen.com

70

QS GEN operates as a specialized global education news platform delivering timely and relevant content focused on higher education developments worldwide. The website targets academics, education professionals, and students by providing news, features, and insights related to universities and educational trends. The platform is built on WordPress, leveraging common web technologies and third-party services such as Google Analytics and Facebook SDK for analytics and marketing. The site demonstrates good content quality, professional design, and consistent branding aligned with its niche. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and transparent, supporting the site's legitimacy.

Q

QS Quacquarelli Symonds Limited

edudatasummit.com

68

EduData Summit is a globally recognized event organized by QS Quacquarelli Symonds Limited, focusing on the intersection of education and data analytics. The 2025 event is scheduled in Singapore, targeting a professional audience of educators, data scientists, and institutional leaders. The website is built on WordPress with modern plugins and provides comprehensive event information, speaker details, and registration options. The technical infrastructure is solid with Cloudflare DNS and HTTPS, though DNSSEC is not enabled. Privacy and cookie policies are present and GDPR compliant, enhancing trust. Security posture is good but could be improved with additional headers and vulnerability disclosures. Overall, the site reflects a mature digital presence with strong business credibility and moderate technical sophistication.

M

Mission H

mission-h.org

56

Mission H is a French educational non-profit project focused on promoting social cohesion, anti-racism education, and cultural diversity awareness among youth. It operates through interactive exhibitions, thematic educational toolkits, and international collaborations such as the Erasmus+ program. The website content is rich, well-structured, and targeted primarily at educational institutions and youth audiences. Technically, the site uses basic web technologies hosted on Infomaniak servers, with moderate performance and basic mobile optimization. Security posture is average, with domain transfer protections but lacking DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is limited but includes a valid organizational email. Overall, the site is trustworthy and professional but could improve in security and compliance aspects.

P

Kurzy a školení PRVNÍ POMOCI

pomahej-kvalitne.cz

44

The website pomahej-kvalitne.cz represents a small Czech business specializing in first aid training courses and workshops. Their offerings include basic and extended first aid courses, specialized training for schools and families, and AED defibrillator usage training. The business targets firms, schools, and individuals, positioning itself as a niche educational provider in the Czech Republic. The website is built on WordPress and hosted by cesky-hosting.eu, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Contact information is minimal, limited to a Facebook social media link without explicit emails or phone numbers on the main page. The domain registration is consistent with the business profile and founded in 2022, indicating legitimacy. Overall, the site is professional and relevant but could improve compliance and security practices.

F

Fondation de L'Institut Agro

fondation-institut-agro.fr

56

Fondation de L'Institut Agro is a recently established non-profit foundation (2023) dedicated to supporting and enhancing the activities of Institut Agro, a French agricultural education and research institution. The foundation focuses on providing scholarships, supporting entrepreneurship and innovation, and organizing events to promote agricultural education. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and GiveWP for donations, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the foundation presents a trustworthy and compliant online presence aligned with its educational mission.

L

L'Institut Agro

institut-agro.fr

56

L'Institut Agro is a prominent French national higher education institution specializing in agriculture, food, and environmental sciences. It operates multiple campuses and is supervised by French government ministries, positioning itself as a leader in agroecological and environmental education and research. The website reflects a professional and comprehensive digital presence, targeting students, researchers, and academic partners. The institution emphasizes innovation, sustainability, and international collaboration. Technically, the website is built on Drupal 9 with modern frameworks such as Bootstrap and Font Awesome, and integrates Matomo for analytics with privacy-conscious configurations. The site is mobile-optimized, accessible, and features a robust cookie consent mechanism compliant with GDPR. Performance is moderate with good SEO and accessibility practices. From a security perspective, HTTPS is enforced, and privacy controls are well implemented. However, the absence of visible security headers and lack of published security policies or incident response contacts indicate areas for improvement. The WHOIS data is unavailable, which limits domain trust verification, but the website's content and external affiliations strongly support its legitimacy. Overall, the website presents a secure, professional, and user-friendly platform for its educational mission, with recommendations to enhance security posture and transparency to further strengthen trust and compliance.

F

Fédération UniAgro

uniagro.fr

53

Fédération UniAgro is a French federation uniting eight alumni associations of life sciences engineers, providing a centralized platform for networking, career services, community engagement, and professional publications. The website is professionally designed, mobile-optimized, and integrates modern web technologies including jQuery, Bootstrap, and GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and hCaptcha protecting forms, though security headers and explicit security policies are absent. WHOIS data is unavailable, which limits domain legitimacy verification, but the website's content and partner ecosystem support its credibility. Overall, the site serves as a trusted hub for its target audience of alumni and professionals in the agro-life sciences sector.

M

Maharishi College of Perfect Health International

ayurvedatraining.eu

55

Maharishi College of Perfect Health International operates the ayurvedatraining.eu website, offering a one-year, part-time professional training program in Maharishi AyurVeda at an accredited European university in Slovenia. The business targets health professionals and individuals interested in integrative Ayurvedic medicine, providing a hybrid online and in-residence educational experience. The website is well-branded and contains testimonials, structured data, and SEO metadata that support its credibility and market positioning as a niche educational provider in Europe. Technically, the website is built on WordPress using Elementor and Gravity Forms, integrating Google reCAPTCHA and Google Tag Manager for security and analytics. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features. SEO practices are good, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, it lacks explicit security headers such as Content-Security-Policy and X-Frame-Options, and does not provide a security policy or incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Contact information is limited to a detailed contact form, with no direct emails or phone numbers published. Overall, the website presents a professional and trustworthy front for its educational services, with a solid technical foundation and good business credibility. Improvements in privacy compliance, security headers, and direct contact information would enhance its security posture and user trust.

QS I-GAUGE is a credible Indian education rating platform operated by Quixta, providing comprehensive ratings for universities, colleges, and schools to assist students and parents in making informed educational choices. The platform leverages a robust methodology overseen by the QS Intelligence Unit, ensuring independent and quality assessments. Technically, the website is built on modern frameworks like Next.js and React, with good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks some security headers and explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact/security policies.

Q

QS Quacquarelli Symonds Limited

qshesummits.com

66

QS Quacquarelli Symonds Limited operates a professional website focused on higher education analytics, events, and publications. The company is positioned as a global leader in providing services and insights to the higher education sector, organizing multiple international summits and conferences. The website content is well-structured, professionally designed, and targets education professionals and stakeholders worldwide. The technical infrastructure is based on WordPress with modern plugins and integrations including HubSpot and Google Analytics, hosted with Cloudflare DNS services. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some security headers and DNSSEC are missing. Privacy compliance is supported by a cookie consent mechanism and a privacy policy linked to the main QS corporate site. Overall, the website reflects a credible and trustworthy business presence with good digital maturity.

Q

Quacquarelli Symonds Limited

reimagine-education.com

57

Reimagine Education is a globally recognized conference and awards platform operated by Quacquarelli Symonds Limited, focusing on innovation in education and employability. The website serves as a hub for event information, award applications, showcases, and partner engagement. It targets educational innovators, academic institutions, and edtech startups worldwide. The platform is well-positioned in the education sector with a strong brand and professional digital presence. Technically, the website is built on WordPress with a modern tech stack including popular plugins and integrations such as Yoast SEO, WPBakery, Slider Revolution, and Google Analytics. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility could be improved. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks a publicly stated security policy or incident response information. The WHOIS data is notably absent or unavailable, which introduces some uncertainty regarding domain registration legitimacy. However, the website's content, structured data, and branding strongly associate it with the reputable QS organization. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. Overall, the website is professional, secure, and trustworthy from a business and technical perspective, with minor gaps in transparency around domain registration and security policies. Strategic improvements in these areas would enhance trust and compliance.

U

Università degli Studi di Palermo

unipa.it

62

The Università degli Studi di Palermo is a large, well-established public university in Italy, founded in 1806, serving over 40,000 students. It offers a broad range of academic programs including undergraduate, graduate, and single-cycle degrees. The website reflects its educational mission with content focused on academic offerings and institutional information. Technically, the site uses standard web technologies such as Bootstrap and FontAwesome, providing a good user experience with responsive design and clear navigation. However, there is a lack of visible privacy and cookie policies, as well as security and incident response information, which are critical for compliance and trust in today's digital environment. The security posture is moderate but could be improved by implementing security headers and disclosing vulnerability handling procedures. Overall, the domain registration data aligns well with the university's identity, indicating high legitimacy and trustworthiness.

T

Times Higher Education (THE)

timeshighereducation.com

10

Times Higher Education (THE) is a leading global media organization specializing in higher education news, university rankings, and academic insights. The website serves a broad audience including academics, university administrators, and students, providing authoritative content and comprehensive coverage of the higher education sector. THE operates under TES Global and maintains a strong market position as a trusted source for education-related information. Technically, the website leverages modern frameworks such as React and Next.js, with a responsive design and good SEO practices, ensuring a high-quality user experience across devices. Security-wise, the site enforces HTTPS, employs security headers, and integrates GDPR-compliant cookie consent mechanisms, reflecting a mature security posture. However, the absence of WHOIS registration data introduces some uncertainty regarding domain registration transparency. Overall, the site is professional, trustworthy, and well-maintained, with minor recommendations to enhance security policy disclosures and vulnerability reporting.

Q

QS Quacquarelli Symonds Ltd

topuniversities.com

11

TopUniversities.com is a leading global platform operated by QS Quacquarelli Symonds Ltd, providing authoritative university rankings, study abroad guidance, scholarships, and career advice to students worldwide. The website is professionally designed, mobile-optimized, and rich in relevant content targeting prospective students seeking higher education opportunities globally. The technical infrastructure leverages Drupal 10 CMS and integrates advanced analytics and marketing tools such as Google Analytics, Mixpanel, Hotjar, and HubSpot, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, modern security headers, and no visible vulnerabilities, though the absence of a public security policy or incident response page is noted. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The lack of WHOIS data reduces transparency but is common for commercial entities protecting registrant privacy. Overall, the website presents a trustworthy, professional, and comprehensive resource for its audience.

The website kopkatalogs.lv serves as a shared electronic catalog platform for nine national-level libraries in Latvia, leveraging the Ex Libris ALEPH integrated library system. It targets library users including students, researchers, and the general public seeking access to Latvian library resources. The platform is positioned as a key national service facilitating unified catalog access and user authentication. Technically, the site employs JavaScript, Matomo, and Google Analytics for tracking, and is hosted with DNS services on Microsoft Azure. The site uses HTTPS for secure login but lacks visible security headers and cookie consent mechanisms, indicating room for security and privacy improvements. The privacy policy is linked to an official government domain, supporting GDPR compliance, though cookie consent is absent. Overall, the site is functional with moderate technical maturity and basic content quality, suitable for its educational sector role.

F

FORTHEM Alliance

forthem-alliance.eu

65

FORTHEM Alliance is a European network of nine multidisciplinary public research universities focused on fostering cooperation across languages, borders, and disciplines to address societal challenges and skills shortages in Europe. The alliance provides various mobility programs, digital learning platforms, research innovation services, and collaborative labs targeting students, staff, researchers, and public organizations. The website reflects a well-structured and content-rich platform that supports the alliance's educational and research mission. Technically, the website leverages modern web technologies including React and Next.js, delivering a responsive and moderately performant user experience. The site is accessible and SEO optimized, though accessibility features could be enhanced. Security posture is solid with HTTPS enforced, but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. The domain WHOIS data is privacy protected by EURid, which is common for .eu domains and justified for this non-profit educational alliance. No suspicious patterns or vulnerabilities were detected. Overall, the website demonstrates a trustworthy and professional presence with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding a cookie consent banner, publishing a security policy and incident response information, and enhancing accessibility features to further strengthen the website's security and compliance posture.

C

Centre For Shaiva Studies

shaivastudies.in

48

The Centre For Shaiva Studies is a small, specialized academic research institute based in India, focusing on the advanced study of Shaiva traditions. It offers fellowships, publishes critical editions, and conducts lectures to promote scholarly understanding of Shaivism. The website is professionally designed using WordPress with the Avada theme and Yoast SEO, providing a good user experience and clear navigation. Contact information and physical address are clearly presented, enhancing business credibility. However, the site lacks published privacy and cookie policies, security policies, and incident response contacts, which are important for compliance and trust. The security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and formal policies. Overall, the site is safe, accessible, and trustworthy, serving its academic and cultural mission effectively.

I

Indic Today

indica.today

39

Indic Today is a niche educational and cultural media platform focused on publishing content related to Shastraas, Indic Knowledge Systems, and Indology. It serves scholars, researchers, and enthusiasts interested in Indic studies. The website operates on WordPress with a professional design, structured content categories, and uses modern web technologies including Bootstrap and Owl Carousel. The platform integrates Google Analytics with opt-out capabilities, indicating moderate user tracking. Security posture is good with HTTPS enabled, but lacks explicit security headers and privacy/cookie policies, which are recommended for compliance and trust. WHOIS data is unavailable or privacy protected, which is common for small educational sites but reduces transparency. Overall, the site is trustworthy and professionally maintained but can improve privacy compliance and security best practices.

I

Indica Courses

indica.courses

58

Indica Courses is a niche educational platform founded in 2021, focused on delivering online and offline courses centered around Indic knowledge systems and wisdom. The platform targets teachers and seekers interested in transformative learning through Indic traditions. It operates primarily as a WordPress-based e-commerce site using WooCommerce to offer self-paced and cohort courses. The website demonstrates moderate digital maturity with integration of popular analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The technical infrastructure is standard for WordPress sites, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy within its niche but would benefit from enhanced privacy and security measures.

I

Indica Books

indicabooks.org

41

Indica Books is a niche educational and cultural publishing platform focused on promoting Indic civilisational knowledge through books, workshops, and events. The platform supports authors and researchers by providing publishing assistance, book loans, and community engagement. Technically, the website is built on WordPress with modern libraries and SEO tools, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and cookie consent mechanisms. The WHOIS data aligns well with the website's claims, indicating legitimacy and consistent registration details. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security hardening.

I

Indica Academy

indica.events

45

Indica Events is a specialized platform dedicated to curating and conducting a variety of cultural and educational events centered around Indic Civilisational Thought. The website serves as a hub for conferences, seminars, workshops, retreats, and festivals, targeting an audience interested in Indic studies and related cultural activities. The platform is part of a broader Indica ecosystem, linking to related academic and cultural sites. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it employs SEO best practices via the Yoast SEO plugin. The site is mobile-optimized and provides a user-friendly event filtering and registration experience. Security-wise, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The WHOIS data is privacy protected, which is justified given the non-profit educational nature of the platform. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

Latvijas Universitāte is a prominent higher education institution in Latvia, offering a broad spectrum of academic programs and engaging in extensive research and international collaboration. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and academic partners. Technically, the site is built on TYPO3 CMS with integration of modern web technologies and analytics tools, ensuring good performance and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism and trustworthiness, supporting the university's reputable market position.

Indica is an educational and cultural institute focused on advancing Indic knowledge systems through immersive learning experiences, research, and ecosystem building. The website presents a professional and well-structured platform with multiple specialized centers and offerings including courses, books, and events. Technically, the site is built on WordPress with modern libraries and frameworks, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and vulnerability disclosures. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is trustworthy and serves a niche educational audience effectively.

E

Europe Ayurveda Academy

europeayurvedaacademy.org

48

Europe Ayurveda Academy (EAA) is a specialized educational institution providing authentic Ayurvedic education in Europe, with campuses in France and strong partnerships in India. The academy offers hybrid courses combining online lectures and practical in-person training, accredited by the Ayurveda Training Accreditation Board (ATAB) under the Ministry of AYUSH, Government of India. The website is professionally designed using WordPress and related modern plugins, providing detailed course information, testimonials, and contact details. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS and domain locking but could be improved by enabling DNSSEC and publishing security policies.

C

Commission des Titres d'Ingénieur

cti-commission.fr

50

The Commission des Titres d'Ingénieur (CTI) is an independent French organization established in 1934, responsible for accrediting engineering schools in France and abroad. It promotes the engineering profession and ensures the quality of engineering education. The website serves as an official portal providing information on accreditation, quality assurance, international activities, and communication related to engineering education. The target audience includes educational institutions, students, young graduates, and recruiters. The CTI holds recognized certifications such as ENQA, EUR-ACE, EQAR, and CeQuInt, reinforcing its authoritative position in the education sector. Technically, the website is built on WordPress with common plugins for forms, multilingual support, and email obfuscation. It uses Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized and has good SEO practices, though some accessibility features are basic. Performance is moderate, and the site uses HTTPS with a good SSL configuration. However, security headers are not visibly present, and no cookie consent mechanism was detected, indicating areas for improvement in privacy compliance. From a security perspective, the site shows good practices such as HTTPS enforcement and email address protection. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data is a concern but likely due to registry privacy or query failure rather than malicious intent. Overall, the site is trustworthy and professional but could enhance its security posture and privacy compliance. Strategically, the CTI should implement a cookie consent banner to comply with GDPR, add security headers to improve protection against common web attacks, and publish explicit security and incident response policies. Regular updates and monitoring of the WordPress environment are recommended to maintain security and performance.

Les Alvéoles is a French-based ecological education center specializing in permaculture and agroecology. The organization offers a variety of services including in-person and online training, consulting, a nursery, and an experimental garden. Their target audience includes individuals and organizations interested in sustainable landscape design and ecological transition. The website is professionally designed using the Odoo CMS platform and integrates modern technologies such as Google Analytics and Vimeo for content delivery. While the site is accessible and well-structured, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled and CSRF tokens present, but missing explicit security headers and incident response contacts. Overall, the domain registration is consistent and legitimate, supporting the business's credibility.

C

CCI Paris Ile-de-France

cci-paris-idf.fr

66

CCI Paris Ile-de-France is a major regional economic and educational institution supporting business creation, development, and training in the Ile-de-France region. The website offers comprehensive resources for entrepreneurs, students, companies, and local authorities, including business advice, educational programs, international development support, and event hosting. The site is built on a modern Drupal 10 CMS with integrated analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit privacy policies and incident response contacts are lacking. The absence of WHOIS data reduces domain registration trust but the website content and branding strongly indicate legitimacy. Overall, the site is professional, well-structured, and trustworthy for its target audience.

U

Université Populaire de Permaculture

permaculture-upp.org

54

Université Populaire de Permaculture is a French non-profit educational network dedicated to permaculture training, events, and community building. It operates a WordPress-based website providing rich content including webinars, training schedules, and partnerships with other permaculture organizations. The website targets individuals interested in permaculture education and practice, offering courses and networking opportunities. Technically, the site uses common WordPress plugins and is hosted by OVH sas, with a moderate performance profile and basic SEO and accessibility features. Security posture is adequate with HTTPS and domain locking but lacks advanced security headers and published security policies. Privacy compliance is partial due to absence of cookie consent mechanisms. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

P

Phacelia

phacelia.fr

32

Phacelia is a French educational organization dedicated to supporting agricultural renewal through training and educational services. The website presents a professional and consistent brand image with a focus on agricultural education. The technical infrastructure is based on WordPress with WooCommerce and Tutor LMS plugins, hosted on a provider consistent with the domain registrar. The site is mobile optimized and uses HTTPS, indicating a modern digital presence. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of visible contact information, limits its privacy compliance and user trust. Security posture is moderate with HTTPS and domain transfer protection but lacks security headers and vulnerability disclosure mechanisms. Overall, the website is functional and credible but would benefit from enhanced privacy and security transparency.

C

Cairn.info

cairn.info

56

Cairn.info is a leading digital publishing platform specializing in humanities and social sciences publications, primarily serving French-speaking researchers, academics, and institutions. The platform offers access to a wide range of academic journals, books, magazines, and dossiers, positioning itself as a key resource in its sector. The website is professionally designed, mobile-optimized, and provides advanced search and thematic browsing capabilities, enhancing user experience and accessibility. Technically, the site employs modern web technologies including Alpine.js and Laravel Livewire, with bot protection via Datadome and progressive loading indicators. The infrastructure supports a responsive and accessible user interface with good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes standard security headers, and protects user input forms with CSRF tokens. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policies and incident response contacts are not published. Overall, Cairn.info demonstrates a mature digital presence with strong content quality and security posture. The lack of public WHOIS data is consistent with privacy regulations and does not detract from the platform's legitimacy. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

A

Association Française de Science Politique

afsp.info

60

The Association Française de Science Politique (AFSP) operates as a prominent non-profit academic association dedicated to political science in France. The website serves as a comprehensive portal offering information on congresses, research groups, professional activities, and resources for political science scholars and practitioners. The organization maintains a strong market position within the French academic community, providing key services such as event organization, publications, and professional networking. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, integrating modern web technologies including Google Tag Manager and social media embeds. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. Performance is moderate, with a professional design and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit privacy policy documentation. WHOIS data is unavailable, likely due to privacy protection, which is justifiable for this type of non-profit entity. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences. Overall, the AFSP website is a credible and professionally maintained platform with room for improvement in privacy transparency and security hardening to enhance trust and compliance.

Sportovně kulturní centrum v Ondřejově is a local community center in the Czech Republic providing a wide range of sports, cultural, educational, and recreational courses and events. Established since 2006, it serves a general audience including families and individuals interested in active leisure. The website offers detailed information about courses, events, rental services, and a café with a children's play area, reflecting a well-rounded community service model. Technically, the website uses a mix of older and modern web technologies including jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics, running on the IPO content management system. The site is mobile responsive with good navigation and content structure, though some libraries are outdated. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and formal privacy or terms of service documents. The cookie consent mechanism is present and functional, indicating some GDPR awareness. WHOIS data is unavailable, limiting domain trust verification, but the site content and contact details appear legitimate and consistent with a community organization. Overall, the site is trustworthy and professionally presented but would benefit from enhanced security headers, updated libraries, published privacy policies, and improved WHOIS transparency to strengthen its security posture and compliance.

C

Centrum vzdělávání, informací a kultury p. o.

cvik.info

45

Centrum vzdělávání, informací a kultury Český Brod is a local public institution combining educational, informational, and cultural services including a municipal library, information center, and cultural house. The website serves as a portal for event calendars, ticket sales, photo galleries, and official communications targeting the local Czech community. The business model is focused on community engagement and cultural enrichment rather than commercial activities. Technically, the website employs a modern frontend stack with Bootstrap, jQuery, FontAwesome, and other libraries, ensuring a responsive and user-friendly experience. Google Tag Manager is used for analytics and marketing tracking, with a cookie consent mechanism implemented to comply with GDPR requirements. The site is well-structured with clear navigation and accessible contact options. From a security perspective, the site uses HTTPS and has implemented cookie consent controls, but lacks visible HTTP security headers and explicit security or incident response policies. The WHOIS data is incomplete and malformed, which reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a public cultural institution. Overall, the website is functional, professional, and trustworthy for its intended audience, but improvements in security headers, WHOIS transparency, and explicit security policies would enhance its security posture and compliance.

Základní umělecká škola Říčany is a Czech educational institution specializing in artistic education for children and youth, including music, dance, visual arts, and drama. The website serves as a communication platform for news, events, and projects related to the school and its community. It holds partnerships with cultural institutions such as the National Theatre and participates in EU-funded educational projects, indicating a stable position in the regional education sector. Technically, the website is built on a custom CMS developed by Vitalex Computers, utilizing a variety of JavaScript libraries including jQuery, Bootstrap, and TinyMCE. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as adding security headers and enhancing accessibility. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting awareness of privacy compliance. Nonetheless, the absence of WHOIS data and security headers, as well as missing explicit contact information for security incidents, represent areas for improvement. No vulnerabilities or malicious content were detected. Overall, the website is a trustworthy and professional platform for the school’s community, but it would benefit from enhanced transparency in domain registration and improved security practices to strengthen its credibility and compliance posture.

S

Superprof

superprof.fr

58

Superprof is a leading French online platform that connects students with private tutors across a wide range of subjects, offering both in-person and online lessons. The website is professionally designed, mobile-optimized, and provides comprehensive content including tutor profiles, reviews, and educational resources. The platform targets learners in France and positions itself as a major player in the private tutoring market. Technically, the website employs modern web technologies such as Vue.js, integrates multiple analytics and advertising tools including TikTok Analytics, Bing Ads, and Google Tag Manager, and uses security measures like HTTPS and Google reCAPTCHA to protect against bots. The site demonstrates good SEO and accessibility practices, ensuring a positive user experience. From a security perspective, the site has a solid posture with appropriate security headers and encrypted connections. However, it lacks explicit security policies and incident response contact information, which could be improved to enhance transparency and trust. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the professional web presence and social media links support its credibility. Overall, Superprof presents a trustworthy and well-maintained educational service platform with room for improvement in security transparency and domain registration visibility.

E

egraine

e-graine.org

45

e-graine is a French non-profit association specializing in popular education and territorial cooperation, with a presence throughout France. The website reflects a professional and consistent brand identity, targeting a general audience interested in educational and cooperative initiatives. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and analytics tools such as Yoast SEO and Google Analytics. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate, with HTTPS implied but no visible security headers or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit entities. Overall, the site is trustworthy but could improve in privacy and security transparency.

M

Mouvement Utopia

mouvementutopia.org

52

Mouvement Utopia is a French non-profit cooperative dedicated to popular education and social activism. Established in 2008, it operates as a citizen cooperative offering educational resources, events, podcasts, and cultural activities. The organization maintains a strong presence in its niche sector with active engagement through its website and social media channels. The website serves as a hub for news, event announcements, and educational content, targeting citizens interested in social change and education.

Les Petits Débrouillards is a French non-profit association dedicated to promoting scientific culture, education, and civic engagement among children and youth. The organization operates nationally with regional branches, offering educational programs, exhibitions, training, and volunteer opportunities. Their mission emphasizes curiosity, critical thinking, solidarity, and citizenship, positioning them as a key player in the French educational non-profit sector. Technically, the website is built with standard HTML5 and CSS, featuring multimedia content such as videos. While the site is accessible and well-structured, it lacks advanced technical frameworks or CMS indications. Mobile optimization and accessibility are basic but functional. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. The WHOIS data is malformed and incomplete, which reduces domain trustworthiness from a registration standpoint. However, the professional content, official contact information, and external partnerships support the site's legitimacy. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a trustworthy and professional front for a medium-sized educational non-profit. Strategic improvements in security headers, cookie consent mechanisms, and WHOIS transparency would enhance trust and compliance.

I

iQLANDIA

iqlandia.cz

61

iQLANDIA.cz is a well-established modern science and entertainment center based in Liberec, Czech Republic, founded in 2011. It operates multiple venues including science centers, a planetarium, and a fab lab, targeting families, children from age 3, schools, and corporate clients. The website reflects a professional and consistent brand with rich content focused on educational and entertaining experiences. Technically, the site uses Concrete CMS, modern JavaScript libraries, and embeds multimedia content such as YouTube videos. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced, but lacks explicit security headers and visible privacy or cookie policies, indicating room for compliance improvement. Analytics are implemented via Google Tag Manager, suggesting moderate user tracking. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

W

WPFormation

wpformation.com

68

WPFormation is a French-based company specializing in WordPress education, offering tutorials, themes, plugins reviews, and certified training courses including SEO and WooCommerce. Established in 2012, it holds the QUALIOPI certification and targets WordPress users and businesses seeking professional development in WordPress technologies. The website is well-structured, professionally designed, and optimized for SEO and mobile use. Technically, it leverages WordPress CMS, jQuery, Google Analytics, and Cloudflare DNS with performance optimizations such as WP Rocket caching. Security posture is strong with HTTPS enforced, domain locking, and cookie consent mechanisms, though DNSSEC is not enabled. Privacy compliance is robust with clear policies and consent banners. Contact information is transparent and consistent with WHOIS data, enhancing trustworthiness.

G

GOBELINS Paris

gobelins.fr

57

GOBELINS Paris is a prestigious French educational institution specializing in arts and digital creation, including animation, photography, video, graphic and interactive design, game development, and music. It operates as a private non-profit higher education establishment under the Chamber of Commerce and Industry of Paris Ile-de-France and is recognized as a member of the Conférence des Grandes Ecoles. The school has a strong market position with international partnerships and a broad target audience including students, professionals, and enterprises. The website reflects a mature digital presence with comprehensive content and clear navigation.

L

Les AgroToulousains

agrotoulousains.org

56

Les AgroToulousains is a French non-profit association serving as a network for students and alumni of ENSAT. The website provides access to community events, career services, publications, and membership management. The organization positions itself as a niche educational and professional network with a strong community focus. Technically, the site uses a modern JavaScript stack with jQuery, Bootstrap, and various UI libraries, hosted by OVH sas. Security measures include HTTPS, CSRF tokens, and hCaptcha for form protection, alongside cookie consent management compliant with GDPR. The site is well-structured, mobile-optimized, and integrates social media channels effectively. No critical security vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with the business profile, supporting legitimacy. Overall, the website demonstrates good digital maturity and trustworthiness for its target audience.

M

Midisup

midisup.com

61

Midisup is a French educational organization specializing in higher education through alternance (work-study) contracts. Established since 2006, it offers a broad catalog of 93 training programs across 20 member institutions in the Occitanie region. The website targets students seeking apprenticeship or professionalization contracts and companies interested in hiring alternants. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, hosted by OVH. It employs HTTPS and Google reCAPTCHA for security but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a cookie notice and a quality policy page but no explicit GDPR or incident response policies. Overall, the site is professional, well-branded, and trustworthy, with good content quality and user experience.

L

L’Ecole Nationale Supérieure Agronomique de Toulouse (AgroToulouse)

agrotoulouse.fr

56

L’Ecole Nationale Supérieure Agronomique de Toulouse (AgroToulouse) is a reputable public engineering school in France specializing in agronomy, environment, food, and oenology education. The institution serves a diverse audience including students, apprentices, partner companies, and international students. It holds recognized certifications such as CTI, ISO 9001, and EUR-ACE, reinforcing its market position as a quality educational provider. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on the Ametys CMS platform, leveraging common frontend libraries like jQuery, Bootstrap, and Owl Carousel. It demonstrates good mobile optimization and moderate performance. The site employs HTTPS with excellent SSL configuration and integrates a cookie consent mechanism compliant with GDPR using tarteaucitron.js. Analytics are handled via Matomo, indicating a moderate level of user tracking with privacy considerations. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. The WHOIS data aligns well with the website’s claims, confirming legitimacy and consistency. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, making it a reliable digital presence for AgroToulouse. Strategic improvements in security transparency and accessibility could further strengthen its position.

P

Power Yoga Akademie

poweryoga.cz

45

Power Yoga Akademie is a Czech Republic-based accredited educational center specializing in yoga instructor training and workshops. The organization holds official accreditations from the Ministry of Education, Youth and Sports (MŠMT) and Yoga Alliance, offering recognized certifications including state exams and international diplomas. Their services cater primarily to individuals seeking professional yoga qualifications and enthusiasts interested in seminars and online courses. The website presents a professional and consistent brand image with clear navigation and relevant content.