Security Directory

B

Belle Main

bellemain.org

54

Belle Main is a French non-profit foundation dedicated to the conservation of movable heritage and the preservation of artisanal craftsmanship. Founded in 2015 and affiliated with the Fondation du patrimoine, it provides financial support for restoration projects and artisan training. The website presents a professional and consistent brand image, targeting proprietors of antique furniture and artisans. Technically, the site is built on WordPress with a moderate performance profile, employing common plugins for SEO, forms, and cookie compliance. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and well-maintained, with no critical security or content safety issues detected.

L

Les Bricos du Cœur

bricosducoeur.org

49

Les Bricos du Cœur is a French non-profit association founded in 2013 dedicated to supporting social aid organizations by organizing solidarity renovation projects, managing donations of materials, and operating a solidarity hardware store. The website reflects a well-established organization with a clear mission to improve the living and working environments of social structures such as associations, foundations, hospitals, and EHPADs. Their market position is strengthened by over 1200 completed projects and a network of engaged partners. Technically, the site is built on WordPress with modern libraries and performance optimizations, ensuring good user experience and mobile responsiveness. Security posture is strong with HTTPS, security headers, and anti-bot protections, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with visible cookie consent and privacy policy. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

F

Fintech asociace

czechfintech.cz

50

The Czech Fintech Association (Fintech asociace) is a professional organization dedicated to uniting entrepreneurs and innovation enthusiasts in the financial technology sector within the Czech Republic. Their mission is to elevate the Czech fintech ecosystem to a leading global position. The website serves as a hub for promoting fintech events, projects, and membership opportunities, targeting fintech professionals and stakeholders in the region. The association positions itself as a key player in the national fintech landscape, fostering collaboration and innovation. Technically, the website is built on WordPress using the Divi theme framework, enhanced with multilingual support via WPML and SEO optimization through Rank Math. The site integrates event management via the Tribe Events Calendar plugin, indicating a focus on community engagement and event promotion. The technical infrastructure is modern and moderately performant, with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and employs deferred script loading, but lacks explicit security headers and published security policies. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional and trustworthy with a clear business focus, but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

P

PMS ČR

pmscr.cz

55

The website pms.gov.cz is the official portal for the Probační a mediační služba (Probation and Mediation Service) of the Czech Republic, a government agency under the Ministry of Justice. It provides a wide range of services including probation supervision, mediation between victims and offenders, juvenile justice, electronic monitoring, parole, community service, and victim support. The site targets the general public, legal professionals, victims, and offenders, positioning itself as a key national public service entity in the justice sector. The content is comprehensive, professionally presented, and consistent with government standards.

O

Obec Šilheřovice

silherovice.cz

51

Obec Šilheřovice operates an official municipal website serving the local community and visitors with comprehensive information about local governance, events, public services, and tourism. The site is well-positioned as a trusted source for residents, providing timely updates and access to official documents. The website leverages modern web technologies including jQuery, Bootstrap, and Leaflet for maps, ensuring a responsive and user-friendly experience across devices. Privacy and cookie consent mechanisms are implemented, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence appropriate for a small municipal government entity.

S

Sírius, příspěvková organizace

sirius-opava.cz

56

Sírius, příspěvková organizace, is a Czech non-profit social service provider focused on supporting people with disabilities who cannot live in their natural environment and require assistance. The organization operates primarily in the Moravskoslezský region, offering services such as residential homes for disabled persons, protected housing, respite care, and social-health care. The website reflects a stable regional presence with clear contact information, social media engagement, and partnership with local government entities. Technically, the site is built on ASP.NET WebForms with Kentico CMS, leveraging modern JavaScript libraries and responsive design principles, ensuring good user experience and accessibility. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and a privacy policy page. Overall, the site is professional, trustworthy, and well-suited to its audience.

H

Helloworkplace

helloworkplace.fr

58

Helloworkplace is a French media platform specializing in employment, recruitment, and human resources content. It serves HR professionals, recruiters, and job market participants by providing news articles, podcasts, newsletters, and event information. The site is part of the larger Hellowork group, a recognized player in the French recruitment and employment media sector. The website demonstrates a mature digital infrastructure built on WordPress with modern performance and SEO optimizations, including the use of WP Rocket, Bootstrap 5, and analytics tools such as Microsoft Clarity and Google Tag Manager. Security posture is strong with HTTPS enforcement and security headers, although there is room for improvement in publishing dedicated security policies and incident response information. Privacy compliance is well addressed with clear cookie consent mechanisms and comprehensive privacy policies. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

B

BDM

blogdumoderateur.com

61

BDM is a French digital media platform focused on delivering news, insights, and resources for professionals in digital marketing, social media, AI, SEO, product design, and technology. It operates under the HelloWork group, offering a comprehensive suite of content including articles, newsletters, guides, and event listings. The website demonstrates a mature digital infrastructure with modern technologies such as WordPress CMS, Bootstrap framework, and advanced performance optimizations including lazy loading and caching via WP Rocket. Analytics and marketing tools like Google Tag Manager, Microsoft Clarity, and Abtasty are integrated for user behavior tracking and optimization. Security posture is strong with HTTPS enforced and partial content security policies, though explicit security policy and incident response pages are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and content-rich experience for its target audience of digital professionals and marketers.

R

Rivacom

rivacom.fr

50

Rivacom is a regional communication agency operating primarily in Brittany, France, with offices in Brest and Rennes. The company offers a comprehensive suite of communication services including press relations, event management, digital marketing, branding, and audiovisual production. Positioned as a 360° communication agency, Rivacom targets businesses and organizations seeking professional marketing and communication support within the regional market. The website reflects a professional and consistent brand image, supported by active social media channels and modern web technologies. Technically, the website is built on WordPress using the Elementor page builder, leveraging popular libraries such as jQuery and Slick Carousel. It integrates Google Tag Manager, Google Analytics, and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and demonstrates good SEO practices with appropriate meta tags and structured data. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. Cookie consent mechanisms are implemented, indicating awareness of GDPR requirements. However, the absence of additional security headers and lack of visible privacy policy or terms of service pages suggest areas for improvement. The WHOIS data is unavailable, likely due to privacy protection, but the website content and social presence support legitimacy. Overall, Rivacom presents a trustworthy and professional online presence suitable for its business domain. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving contact information visibility to strengthen trust and compliance.

S

Salon professionnel medFEL

medfel.com

45

medFEL is a professional trade show and conference organizer specializing in the fruits and vegetables sector, primarily serving the French and international markets. The website promotes the annual event scheduled for April 2025, targeting industry professionals including exhibitors and visitors. The business is well-established, with a domain registered since 2008, indicating maturity and stability in the market. The company provides key services such as event hosting, exhibitor support, and conference programming, positioning itself as a key player in the agricultural trade event space in France.

S

Seafile Ltd.

seafile.com

51

Seafile Ltd. operates a professional website offering an open source, self-hosted file synchronization and sharing platform targeting teams, companies, and organizations globally. The company provides both on-premise and cloud-based solutions with advanced features such as AI-powered file property automation, collaborative document editing, and enterprise-grade security. The website demonstrates a strong market position with over one million users and notable customers including universities and cybersecurity firms. Technically, the site employs modern web technologies including Bootstrap, jQuery, and FontAwesome, with Google Analytics integrated for user tracking. The design is professional, mobile-optimized, and content-rich, supporting a positive user experience. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises some concerns about domain registration legitimacy but does not detract from the business credibility evidenced by the website content and customer references. Overall, the site is trustworthy and well-maintained but would benefit from enhanced security headers and clearer domain registration transparency.

H

Helloworkplace

hellowork-group.com

60

Hellowork group is a well-established French company specializing in recruitment, education, and media services. Founded in 2000, it operates multiple platforms that connect job seekers, professionals, schools, and institutions. The company positions itself as a market leader in its sector, offering comprehensive solutions for human resources, education, and digital media. The website reflects a professional and consistent brand image with clear messaging targeting individuals and professionals seeking career and training opportunities. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular analytics tools such as Google Tag Manager and Piano Analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with efficient use of preloading and caching techniques. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and compliant with privacy regulations, making it a reliable platform for its users. Strategic improvements in security headers and transparency around security policies would further strengthen its posture.

C

CRESS GRAND EST

cress-grandest.org

51

CRESS GRAND EST is a regional non-profit organization dedicated to supporting and promoting the Social and Solidarity Economy (ESS) in the Grand Est region of France. The website serves as a comprehensive resource hub offering information, events, employment opportunities, and promotional activities related to ESS. It holds a recognized certification (QUALIOPI) indicating quality in training services and maintains partnerships with regional and European institutions. The organization targets ESS actors, entrepreneurs, and stakeholders within the region, positioning itself as a key regional player in the social economy ecosystem. Technically, the website is built on the Flexit CMS platform, utilizing modern web technologies including jQuery and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good navigation and SEO practices. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, alongside a GDPR-compliant cookie consent mechanism. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies. The absence of direct contact emails or phone numbers on the homepage suggests contact is likely handled through dedicated pages or forms. Social media presence is robust, enhancing trust and engagement. Overall, the website reflects a professional, trustworthy, and well-maintained digital presence for a regional non-profit entity. Recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility features to further strengthen compliance and user experience.

B

Bílý kruh bezpečí, z.s.

bkb.cz

46

Bílý kruh bezpečí, z.s. is a well-established Czech non-profit organization dedicated to providing professional, free, and confidential support to victims of crime and domestic violence. With over three decades of experience, it operates multiple regional offices across the Czech Republic and offers helpline services, counseling, and prevention projects. The website reflects a mature organization with a clear mission and target audience including victims, social workers, and law enforcement. Technically, the site uses modern web technologies such as jQuery, Foundation framework, and integrates Google Analytics with IP anonymization to respect user privacy. However, the absence of explicit privacy and terms of service pages and missing WHOIS data slightly reduce trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers. Overall, the site is accessible, professionally designed, and provides comprehensive contact information and social media presence, supporting its credibility.

C

CENTROM z.s.

centrom.cz

51

CENTROM z.s. is a Czech non-profit organization dedicated to providing social support and assistance to families and individuals, particularly those living in socially excluded, predominantly Roma communities. The organization offers key services including low-threshold facilities for children and youth, social activation services for families with children, and outreach programs aimed at improving quality of life and supporting self-sufficient solutions to social challenges. Established in 1999, CENTROM operates primarily in the Ostrava region and maintains a strong local presence with partnerships and funding from municipal and regional authorities. Technically, the website is built on a modern WordPress platform using the Astra theme and Elementor page builder, incorporating structured data for SEO and Google Analytics for visitor tracking. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms, reflecting a good level of digital maturity. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent banners to comply with privacy regulations. However, it lacks explicit published security policies, incident response contacts, and security headers that could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration data is consistent with the organization's claims, indicating legitimacy and trustworthiness. Overall, CENTROM z.s. presents a professional and trustworthy online presence suitable for its non-profit social service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a security.txt file to improve transparency and trust.

Centrum psychologické pomoci (CEPP) is a Czech non-profit organization providing psychological and social support services, including foster care assistance and counseling. The organization is regionally funded and collaborates with various social and educational partners, positioning itself as a trusted regional social service provider. The website reflects a mature digital presence built on WordPress, with modern plugins supporting galleries, testimonials, and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is professional, compliant, and trustworthy, serving a general audience seeking social and psychological assistance.

C

Centrum sociálních služeb Poruba, příspěvková organizace

cssporuba.cz

40

Centrum sociálních služeb Poruba is a Czech public contributory organization established in 2004 by the municipal district of Ostrava-Poruba. It provides a range of social services including care services, day centers, homes for mothers with children, and asylum facilities. The organization targets residents of Ostrava-Poruba and vulnerable populations requiring social support. The website reflects a government-affiliated entity with clear contact information and service descriptions, positioning it as a local social service provider. Technically, the website employs standard and widely used web technologies such as Bootstrap, jQuery, and Flexslider, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident, and no analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The WHOIS data is missing, which raises concerns about domain registration transparency, although the website content and business information appear legitimate. No forms or input fields are present on the analyzed page, reducing attack surface but also limiting user interaction. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and compliance posture.

S

Salesiáni Dona Bosca Ostrava

boscoostrava.cz

48

Salesiáni Dona Bosca Ostrava is a local non-profit organization focused on youth and community engagement in Ostrava, Czech Republic. The website serves as an information portal for their activities including youth clubs, workshops for schools, accommodation, and church services. The organization maintains a consistent brand presence with official contact emails and social media channels, supporting community outreach and engagement. Technically, the website is built on WordPress using modern plugins and frameworks such as Bootstrap and Smart Slider 3, providing a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. The absence of WHOIS data limits domain trust verification, but the overall digital footprint and content quality support the legitimacy of the organization. Strategic recommendations include enhancing security headers, publishing a privacy policy, and improving accessibility features to strengthen compliance and trust.

K

KAFIRA o.p.s.

kafira.cz

41

KAFIRA o.p.s. is a Czech non-profit organization dedicated to assisting people with visual impairments, with a history of over 20 years. The website reflects this mission clearly, targeting individuals with visual disabilities and offering support and community services. The organization appears to be well-established within its niche, focusing on social assistance rather than commercial activities. Technically, the website is built on WordPress, utilizing common web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized and has a good design quality, though accessibility features could be enhanced further to better serve its target audience. Security-wise, the site uses HTTPS and has a basic SSL configuration, but lacks important security headers and visible privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data limits transparency but is not uncommon for non-profit entities using privacy protection services. Overall, the website is functional and professional but would benefit from improved privacy compliance and security hardening.

Mikasa.cz is the official Czech Republic representative and retailer of Mikasa sports balls and accessories, specializing in volleyball, beach volleyball, water polo, and basketball equipment. The company, DASSAR s.r.o., has been operating since 2004 and offers products approved by international sports federations including FIVB and WORLD AQUATIC. The website is built on WordPress with WooCommerce, providing an e-commerce platform for direct sales. The technical infrastructure is modern and includes common libraries and frameworks such as jQuery, Bootstrap, and Font Awesome, hosted likely by WEDOS, a Czech hosting provider. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is partial, with no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-branded, targeting sports professionals and enthusiasts in the Czech market.

NOVÁ ŠANCE, z.s. is a Czech non-profit organization established in 1998, dedicated to providing social services primarily to men released from prison and homeless individuals in the Northern Moravia and Silesia region. The organization operates an asylum house, manages a large facility, and participates in various social projects including support for Ukrainian children and collaboration with probation services. The website is built on WordPress with common plugins and offers good mobile optimization and user experience. However, it lacks published privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but security headers are missing. No WAF or blocking mechanisms were detected, and no advertising or tracking services are present, indicating a privacy-conscious approach. Overall, the website is trustworthy and professional but could improve compliance and security practices.

B

Bez Bariér

ostrava-bezbarier.cz

50

Bez Bariér is a small non-profit organization based in Ostrava, Czech Republic, providing free advisory and mapping services to severely physically disabled citizens, particularly those using wheelchairs. Established in 2000, it focuses on barrier-free access consulting, accessibility mapping, and project documentation review for local authorities. The website reflects a specialized local service with strong ties to municipal partners and accessibility initiatives. Technically, the site is built on WordPress with common libraries like jQuery and Lightbox2, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS data reduces domain trust but the site's content and partnerships support its legitimacy. Overall, the site is professional and trustworthy for its niche audience but should enhance privacy compliance and security best practices.

T

Tyfloservis o. p. s.

tyfloservis.cz

44

Tyfloservis o. p. s. is a Czech non-profit organization dedicated to supporting individuals with severe visual impairments by providing information, support, and skills training to promote independent living. The website is professionally designed using WordPress with the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. The content is relevant and targeted specifically at visually impaired persons seeking rehabilitation services. Technically, the site is moderately performant and mobile-optimized, with good accessibility features. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the website's professional presentation and clear mission support its legitimacy. Overall, the site is safe for general audiences and serves an important social function.

The Kraft Heinz Company website presents a comprehensive corporate presence for one of the world's largest food and beverage manufacturers. The company is positioned as a global leader with a strong portfolio of iconic brands, targeting consumers, investors, suppliers, and job seekers. The website content is professionally structured, providing detailed information about the company, its brands, investor relations, and career opportunities. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, Bootstrap, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and linked official domains appear legitimate. Overall, the site scores well on content quality, technical implementation, and security posture, with room for enhancement in transparency and security disclosures.

A

Association for Comprehensive NeuroTherapy

latitudes.org

47

The Association for Comprehensive NeuroTherapy operates a well-established website focused on natural and integrative approaches to neurological and behavioral problems. The organization targets parents, teachers, and individuals seeking educational resources, offering memberships, digital products, and community forums. The website is positioned as a niche non-profit with a strong content offering and active social media presence. Technically, the site is built on WordPress with a modern theme and plugins, including Bootstrap and jQuery. It is mobile-optimized and SEO-friendly, employing structured data for enhanced search visibility. The hosting provider is not explicitly identified, but the domain is registered with GoDaddy and has a long history dating back to 1997. From a security perspective, the site uses HTTPS and reCAPTCHA, but lacks DNSSEC and explicit security headers, which are recommended for improved protection. No privacy or cookie policies were found, indicating a gap in compliance with privacy regulations such as GDPR. User tracking is moderate via Google Analytics and social sharing tools. Overall, the website is credible and professional but would benefit from enhanced privacy compliance and security hardening to better protect users and improve trustworthiness.

C

CV-Library LTD

cv-library.co.uk

64

CV-Library LTD operates one of the UK's largest independent job boards, offering a comprehensive platform for job seekers and recruiters. Founded in 2000, it provides services including job search, CV registration, job alerts, career advice, and a company directory. The website targets UK job seekers and recruitment professionals, maintaining a strong market position with over 123,000 live vacancies and more than 10,000 companies registered. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Amplitude analytics, and OneTrust for cookie consent management. It is well-optimized for mobile devices and accessibility, with structured data enhancing SEO. The site uses HTTPS with good SSL configuration, though some security headers could be improved. From a security perspective, the site follows best practices such as HTTPS enforcement and secure form handling. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, WHOIS data is unavailable due to domain naming rules errors, which slightly impacts trust but does not detract from the site's professionalism. Overall, CV-Library presents a secure, professional, and user-friendly platform with a solid business model and market presence. Strategic improvements in security headers and WHOIS transparency could further enhance trust and compliance.

C

Communauté Emmaüs de Paris

emmaus-paris.fr

38

Emmaüs Paris is a non-profit community organization focused on social solidarity through donation collection, volunteer engagement, and operation of eight solidarity shops in Paris. The website serves as a portal for donors, buyers, and volunteers, providing information on how to contribute and participate. The organization maintains active social media profiles and provides contact information including a physical address and email. Technically, the website is built on WordPress with common plugins for SEO, forms, and maps, and enforces HTTPS for secure communication. However, the Google Maps integration suffers from API key issues, and no advanced security headers are detected. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and social presence support legitimacy. Privacy compliance is addressed with a cookie consent banner and a privacy policy page. Overall, the site is functional, professional, and serves its community purpose effectively.

R

REFER

reemploi-idf.org

56

REFER is a non-profit regional network based in Île-de-France focused on promoting and coordinating the reuse of objects in a solidarity and ecological framework. The organization supports local actors through accompaniment, events, advocacy, and mapping of reuse resources. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation. It integrates privacy-conscious analytics via Matomo and maintains a consistent brand presence with partner logos and social media channels. However, explicit privacy and cookie policies are not found, representing a compliance gap. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the website demonstrates a good security posture with HTTPS and no visible vulnerabilities but could improve by adding security headers and incident response information.

N

Personlige Navneskilt, Høydemålere & Strikketilbehør i Tre – Håndlaget i Norge

nostenett.no

61

Nøstenett.no is a Norwegian e-commerce website specializing in handcrafted wooden products such as personalized nameplates, height charts, and knitting accessories. The business targets a general audience interested in personalized gifts and craft supplies, positioning itself as a niche artisan retailer within Norway. The website demonstrates a moderate level of digital maturity, utilizing modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and customer chat integration. Security measures include CSRF token implementation in forms, but lack explicit security headers and privacy policies, indicating room for improvement in compliance and security posture. Overall, the site appears legitimate and functional with a good user experience and mobile optimization, but would benefit from enhanced transparency and security practices.

V

Vinofil Vinkurs

vinforedrag.no

52

Vinofil Vinkurs is a Norwegian small business specializing in wine education through in-person and digital courses, targeting both corporate and private clients. The website presents a professional and consistent brand image with clear offerings such as wine courses at workplaces, private homes, and gift cards. The business is newly established in 2023, and the domain registration aligns with this timeline. The site leverages modern web technologies and analytics tools but lacks critical privacy and security disclosures, which impacts compliance and trustworthiness. No blocking or WAF mechanisms hinder content access, allowing full analysis.

G

Gutta på Haugen

gutta.no

59

Gutta på Haugen is a well-established Norwegian gourmet food retailer, operating both a physical delicatessen store in Oslo and an e-commerce platform serving customers across Norway. The website reflects a mature business with a focus on quality food products and a loyal customer base. Their digital infrastructure includes modern tracking and marketing tools, with a CMS platform customized for retail needs. Security posture is adequate with HTTPS and CSRF protections, though improvements in security headers and incident response transparency are recommended. Privacy policies and cookie consent mechanisms are present and localized in Norwegian, supporting GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, with moderate technical performance and good mobile optimization.

B

beIN MENA

bein.com

64

beIN MENA operates as a global sports and entertainment media group, offering 44 channels across multiple continents and languages, serving over 50 million subscribers. The company focuses on subscription-based broadcasting and online streaming services, targeting sports and entertainment consumers worldwide. The website reflects a large, established media entity with consistent branding and professional content. Technically, the site is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates multiple third-party analytics and advertising tools. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site content and external references support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

K

KD Mlejn, z. ú.

mlejn.cz

40

KD Mlejn is a well-established non-profit cultural organization based in Prague, Czech Republic, with a history dating back to 1988 through its predecessor Klub Mlejn. The organization offers a variety of cultural services including theater performances, concerts, courses, residencies, and community events, targeting a broad audience interested in arts and culture. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site runs on WordPress with standard plugins for analytics and cookie compliance, hosted on a Czech hosting provider. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. The domain is long-registered and consistent with the organization's history, indicating legitimacy. Overall, the site is trustworthy and serves its community well, though improvements in privacy and security documentation are recommended.

C

Conseil Régional de Guadeloupe

regionguadeloupe.fr

60

The website www.regionguadeloupe.fr is the official digital presence of the Regional Council of Guadeloupe, serving as a comprehensive portal for regional aids, services, news, and public transport information. It targets a broad audience including local residents, businesses, students, and public sector entities. The site leverages TYPO3 CMS and integrates common web technologies such as jQuery, Google Analytics, and social media SDKs to deliver content and track engagement. While the site is well-structured and professionally designed, it lacks a publicly accessible privacy policy and shows accessibility non-compliance, which are areas for improvement. Security posture is moderate with HTTPS enabled but missing some security headers. WHOIS data is unavailable, which slightly impacts trust but the official .fr domain and consistent content support legitimacy.

R

Réseau Entreprendre®

reseau-entreprendre.org

63

Réseau Entreprendre® is a well-established non-profit organization focused on supporting entrepreneurs and business leaders through personalized mentoring and community engagement. The organization operates internationally with a strong presence in France and partners with numerous reputable companies and institutions. The website reflects a professional and comprehensive digital presence, leveraging WordPress and modern web technologies to deliver content effectively. Privacy and cookie policies are in place, indicating GDPR compliance. Security posture is good with HTTPS and recaptcha protections, though some security headers and explicit incident response information are absent. The lack of WHOIS data limits domain registration trust assessment, but the website's content and partner ecosystem support legitimacy. Overall, the site is a credible resource for entrepreneurship support and community building.

M

Mulhouse Expo S.A.E.M.L

exterieursetjardin.fr

35

The website exterieursetjardin.fr represents a French event organizer, Mulhouse Expo S.A.E.M.L, specializing in gardening, outdoor living, and organic agriculture exhibitions. The site promotes the 'Extérieurs & Jardin' salon and the 'Ma Planète Bio' event, targeting gardening enthusiasts and the general public interested in bio and wellness. The business operates primarily as an event organizer with a regional market presence and a small company size founded in 2016. Technically, the website uses a traditional tech stack including jQuery 1.11.2, Bootstrap 3.3.4, and Revolution Slider, hosted on OCI CLOUD infrastructure. The site is mobile responsive with good navigation and content quality but lacks modern CMS integration and advanced SEO or accessibility features. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS but lacks important security headers such as CSP and HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR. The contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are found. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is functional and professional but requires improvements in privacy compliance, security hardening, and modernization of technical components to enhance trust and security posture.

M

Musée du Désert

museedudesert.com

52

The Musée du Désert website presents a small cultural and historical museum focused on the Huguenot and Camisard heritage in France. The site offers information about the museum, its exhibitions, and related activities, targeting a general audience interested in history and culture. The business model appears to be non-profit and educational, with a boutique for visitors. Technically, the site is built on the SPIP CMS platform using jQuery and Colorbox for UI enhancements. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. Security posture is weak, with no visible security headers or privacy policies, and the WHOIS data is missing or indicates the domain may be unregistered, which raises concerns about domain legitimacy. Overall, the site is functional but requires improvements in security, privacy compliance, and domain registration transparency.

G

GARA

gara.fr

54

GARA is a French archaeological research group focused on regional archaeological activities, exhibitions, conferences, and publications. The website serves as a platform to disseminate information about their research, events, and museum activities, targeting archaeology enthusiasts and the local community. The organization appears to be a small, non-profit entity founded recently in 2023, with a clear focus on cultural heritage preservation and education. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Contact Form 7, and WP Statistics for analytics. Hosting is provided by OVH sas, a reputable French hosting provider. The site shows moderate performance and basic mobile optimization. SEO practices are good with proper meta tags and structured data, but accessibility features are basic. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and important security headers like CSP or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Contact information is available, including a company domain email and phone number, enhancing business credibility. No WAF or blocking mechanisms are detected, and the site content is safe and appropriate for general audiences. Overall, the website is professional and trustworthy but would benefit from improved security configurations and privacy compliance measures to enhance user trust and regulatory adherence.

N

Notre aluminium

notrealuminium.ca

58

Notre aluminium is a Quebec-based industry platform promoting the region's aluminium sector, emphasizing its low-carbon footprint and critical role in North America's energy transition. The website positions Quebec as a global leader in aluminium production, highlighting historical milestones and industry achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and contact details. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

R

Redback Solutions

rb.com.au

55

Redback Solutions is a well-established digital marketing and web design agency based in Newcastle, Australia, operating since 1999. The company offers a comprehensive range of services including web design and development, ecommerce solutions, SEO, digital marketing, and creative content production. Their market position is strong, supported by multiple industry partnerships and awards such as the 2025 Australian Web Awards. The website reflects a professional and trustworthy digital presence targeting businesses seeking digital growth and online results. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Facebook Pixel, and live chat services, demonstrating a mature digital infrastructure. Performance and mobile optimization are good, with SEO best practices well implemented. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and credible with room for improvement in privacy and security transparency.

H

HOSTEUR SA

hosteur.com

70

HOSTEUR SA is a Swiss-based technology company specializing in web hosting, domain registration, cloud services, and IT management with over 20 years of experience. The company emphasizes European data sovereignty, operating datacenters exclusively in Europe, and holds multiple ISO certifications (27001, 9001, 14001) that attest to its commitment to security, quality, and environmental responsibility. The website is professionally designed, mobile-optimized, and provides comprehensive service information targeting businesses and individuals seeking secure hosting solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google Fonts, with a cookie consent mechanism implemented via Tarteaucitron. The site is served over HTTPS with no visible security vulnerabilities in the HTML content. However, no explicit HTTP security headers were detected, and no CMS or hosting provider details are disclosed. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, HOSTEUR demonstrates strong compliance with recognized standards through its ISO certifications and cookie consent implementation. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the website content and certifications support legitimacy. No incident response or vulnerability disclosure information is publicly available, indicating an area for improvement. Overall, HOSTEUR presents as a credible and professional hosting provider with a solid security posture and compliance focus. Strategic recommendations include enhancing transparency around incident response, publishing vulnerability disclosure policies, implementing additional security headers, and clarifying domain registration details to improve trust and compliance further.

P

PlanetHoster

planethoster.live

57

PlanetHoster Forums is an official community platform supporting PlanetHoster's web hosting services. It serves as a hub for customers to discuss maintenance, outages, reviews, tutorials, and technical support. The forum is well-structured, bilingual (primarily French), and actively maintained with thousands of discussions and messages. The website uses modern web technologies including XenForo CMS, jQuery, FontAwesome, and integrates Google Analytics and Tag Manager for analytics. HTTPS is enforced with a valid SSL certificate, and forms include CSRF tokens, indicating a good security baseline. However, some security headers are missing, and no explicit security or incident response policies are published on the forum site. Privacy and terms of service pages are present and linked, showing attention to compliance. The WHOIS data is privacy protected but consistent with an active and legitimate domain. Overall, the site demonstrates a professional and trustworthy presence with a strong community focus.

L

LWS

lws-hosting.be

60

LWS is a well-established French web hosting and domain registration company founded in 1999, offering a broad range of services including shared hosting, VPS, dedicated servers, WordPress optimized hosting, email solutions, and cloud storage. The company targets individuals, professionals, and agencies seeking reliable and affordable web presence solutions. Their market position is strong with over 680,000 hosted sites and 800,000 registered domains, supported by ISO 27001 certified datacenters in France. Technically, the website demonstrates a mature digital infrastructure using modern JavaScript libraries, Google Tag Manager, Bing Ads tracking, and cookie consent mechanisms. The site is fast, mobile-optimized, and SEO-friendly, reflecting a high level of digital maturity. Hosting is self-managed with servers located in France, emphasizing data sovereignty and security. From a security perspective, LWS enforces HTTPS, implements daily backups, and operates ISO 27001 certified datacenters. However, explicit security headers like CSP and HSTS are not detected, and no public vulnerability disclosure or incident response contacts are published, indicating areas for improvement. The WHOIS data for the domain is restricted, which is common for .be domains but slightly reduces transparency. Overall, LWS presents a professional and trustworthy web presence with strong business credibility and technical implementation. The risk profile is low, with recommendations to enhance security headers and publish clearer security policies to further strengthen trust and compliance.

L

LWS

lws-hosting.ca

64

LWS is a well-established French web hosting company with a strong presence in Canada, offering a wide range of hosting services including domain registration, VPS, WordPress hosting, and cloud storage. Founded in 1999, it hosts over 680,000 websites and operates 4500 servers in France, emphasizing performance, security, and customer support. The company targets individuals, enthusiasts, and businesses seeking reliable and affordable web hosting solutions. Technically, the website employs modern technologies such as jQuery, Google Tag Manager, and integrates cookie consent mechanisms, ensuring GDPR compliance. The hosting infrastructure is self-managed with ISO 27001 certified datacenters in France, providing robust security and data protection. Security posture is strong with HTTPS enforced, daily backups, and secure data centers, though some security headers could be improved and a security.txt file added. The website is professional, mobile-optimized, and SEO-friendly, with extensive trust signals including customer reviews and certifications. However, the absence of WHOIS data for the domain introduces some uncertainty about domain registration transparency, though the overall business credibility remains high.

S

SEMNAUT

semnaut.com

43

SEMNAUT operates as a SaaS platform focused on SEO project management, targeting SEO professionals, agencies, freelancers, and e-retailers. The platform offers features such as position tracking, action management, automated reporting, SEO alerts, and suggestions to improve SEO performance. The website is professionally designed, with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on WordPress with modern plugins and analytics tools, including Matomo and Google Tag Manager, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled, but lacks some security headers and published security policies. WHOIS data is missing, which raises concerns about domain registration legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

C

Culligan Storkök AB

3s.nu

55

Culligan Storkök AB operates as a leading Swedish provider of commercial kitchen solutions, offering comprehensive services from planning and design to installation and maintenance. With over 30 years of industry experience and a nationwide service network, the company targets professional kitchens including restaurants, cafes, and schools. The website reflects a mature digital presence with professional branding, clear service offerings, and strong customer engagement channels. Technically, the site is built on WordPress with modern frameworks and integrates advanced analytics and marketing tools while maintaining GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, though there is room for improvement in HTTP security headers and formal security policies. Overall, the site demonstrates high professionalism and trustworthiness, supporting Culligan Storkök's market position as a reliable B2B partner in the hospitality sector.

D

Deutsche Telekom

telekom-domains.de

60

The website represents a secure login portal for Telekom Deutschland GmbH's domain management system, facilitating the registration and administration of internet domain names and DNS zones. It serves primarily Telekom's domain customers and administrators, reflecting the company's position as a leading telecommunications provider in Germany. The platform is branded consistently with Deutsche Telekom's corporate identity and provides clear contact channels for support. Technically, the site is built using JavaServer Faces with PrimeFaces 11.0.0 and jQuery, indicating a mature enterprise web application stack. While the site shows moderate performance and basic mobile optimization, it lacks advanced SEO and accessibility features. Security practices include secure cookies and password input protections, but HTTP security headers are not evident, suggesting room for improvement. From a security perspective, the site does not exhibit vulnerabilities or exposed sensitive data. However, the absence of explicit security policies and incident response information publicly available limits transparency. The WHOIS data is restricted due to DENIC policies but aligns with Telekom's infrastructure, supporting legitimacy. Overall, the site is trustworthy and professionally maintained. Recommendations include enhancing security headers, improving mobile responsiveness and accessibility, and publishing clear security and incident response policies to strengthen user trust and compliance posture.

D

DTScout

dtscout.com

61

DTScout is a small technology company based in Israel specializing in audience discovery and data aggregation for marketers and publishers. Their platform aggregates large-scale audience data to enable targeted advertising and improved monetization for publishers. The website demonstrates a professional design with clear navigation and a strong emphasis on privacy compliance, including opt-out mechanisms and user data request forms. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and integrates analytics and advertising tools like Google Analytics and AdRoll. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trust. Security practices are moderate with room for improvement in headers and incident response transparency. Overall, the site is functional and business-focused but requires domain registration verification and enhanced security policies to improve credibility.

W

whos.amung.us Inc.

amung.us

64

whos.amung.us Inc. operates a web analytics platform offering free and pro-tier real-time visitor statistics and heatmap widgets for websites and blogs. The service targets website owners and bloggers seeking immediate insights into visitor behavior without requiring account registration. The company positions itself as an established player in the web analytics market, with a business model centered on free widget usage complemented by paid Pro features. The website content is professionally designed, consistent, and supported by mentions in reputable technology media outlets, indicating moderate market trust and recognition. Technically, the website employs a modern JavaScript technology stack including jQuery, Bootstrap, Fancybox, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with good SEO practices and moderate performance. However, accessibility features are basic and no CMS or hosting provider details are evident. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and no explicit security policies are published. From a security and compliance perspective, the site lacks explicit cookie consent mechanisms and GDPR compliance indicators, which could pose privacy compliance risks. The absence of WHOIS data due to privacy protection reduces transparency but is common for this business type. No incident response or vulnerability disclosure policies are found, limiting the security maturity visibility. Overall, the site is safe with no adult or questionable content, but improvements in privacy compliance and security transparency are recommended. Strategically, whos.amung.us should enhance its privacy and security disclosures, implement cookie consent, and publish incident response and vulnerability disclosure policies to strengthen trust and compliance. Technical modernization focusing on accessibility and security headers would further improve the security posture and user experience.