Security Directory

A

Achmea

achmeainnovationfund.nl

40

Achmea Innovation Fund is a corporate investment initiative focused on supporting startups and scale-ups with proven product-market fit and innovative business models in strategic sectors such as health, mobility, sustainability, and income security. The fund provides capital, access to Achmea's extensive network, and knowledge sharing to accelerate growth and innovation. The website presents a professional and consistent brand image aligned with Achmea, a major Dutch insurance and financial services group. Technically, the website uses modern front-end technologies including Bootstrap and integrates Google Analytics and Tag Manager for tracking. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security and trust concern. The DNS configuration shows some misconfigurations, particularly in CAA and MX records, which could affect email delivery and certificate issuance. From a security perspective, while some security headers like Content-Security-Policy and Permissions-Policy are implemented, the absence of HTTPS and modern TLS protocols severely weakens the security posture. No incident response or security policy pages were found, though a responsible disclosure page is linked. Privacy and cookie policies are present on the parent Achmea domain, indicating GDPR compliance. Contact information is limited to an email address and physical address, with no phone numbers or social media links provided. Overall, the website is functional and professional but requires urgent improvements in SSL/TLS deployment and DNS configuration to enhance security and trustworthiness. Strategic recommendations include obtaining and maintaining a valid SSL certificate, enabling HTTPS, fixing DNS records, and enhancing security headers and incident response information.

A

Attention Required! | Cloudflare

daveyandkrista.academy

40

D&K Academy operates as an online educational platform providing membership-based access to courses or training content. The website is built on the Kajabi platform and leverages common web technologies such as Bootstrap and Font Awesome. The target audience appears to be students or members seeking educational resources. The business is small-scale, US-based, and has been established since 2017. However, the website lacks publicly available privacy, cookie, or terms of service policies, and does not display contact information, which limits transparency and trust. Technically, the site uses modern frameworks and third-party services for analytics and marketing, including RudderStack and Facebook Pixel. Despite this, the website suffers from poor performance with a slow load time and a large number of resources. Mobile optimization and accessibility are basic but functional. Critically, the site does not have a valid SSL certificate or HTTPS enabled, exposing users to security risks. From a security perspective, the absence of HTTPS, security headers, and DNSSEC, combined with no visible incident response or security policies, indicates a low security maturity level. The domain is privacy protected but mature and registered with a reputable registrar, suggesting legitimacy. Overall, the website presents significant security and privacy compliance gaps that should be addressed to improve user trust and regulatory adherence. Strategic recommendations include obtaining a valid SSL certificate, implementing security headers and DNS security measures, publishing privacy and cookie policies, and providing clear contact information. Improving site performance and accessibility will also enhance user experience and SEO.

B

BikeFriend

bikefriend.com

54

BikeFriend is a mature e-commerce and retail business specializing in bicycles and related accessories, operating primarily in Belgium and the Netherlands. The company combines an extensive online catalog with physical stores offering test rides and maintenance services, positioning itself as a significant player in the regional bicycle market. Technically, the website uses modern frontend technologies and is hosted on Amazon AWS infrastructure, but lacks a valid SSL certificate, which critically impacts its security posture. The site includes standard privacy and cookie policies but lacks a visible consent mechanism and explicit security or incident response policies. Overall, the business shows strong domain registration practices and trust signals but must urgently address HTTPS implementation to improve security and user trust.

OldPostcards.com is a mature, niche e-commerce retailer specializing in vintage and collectible postcards, operating since 1998. The website offers a broad catalog of postcards including US states, world countries, trade cards, and thematic categories, targeting collectors and enthusiasts. The business maintains multiple related stores and demonstrates consistent branding and trust signals such as BBB accreditation and PayPal acceptance. Technically, the site is built on the ShopSite Pro platform with a traditional Apache hosting environment and uses common web technologies like jQuery and Bootstrap. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security deficiency. Privacy compliance is minimal, with no cookie consent mechanism and only basic privacy and terms of service pages. The site employs several analytics and marketing tools including Google Analytics, Facebook Pixel, and Constant Contact, but without clear user privacy controls. Overall, the site is functional and professional but requires urgent security and privacy improvements.

S

SEO Blueprint

seoblueprint.com

58

SEO Blueprint is a small technology-focused business offering exclusive SEO training courses led by Glen Allsopp, a recognized SEO expert. The website targets SEO professionals and digital marketers seeking advanced tactics to improve search rankings. The business operates on a membership model with limited enrollment periods and a waiting list. Technically, the site uses modern JavaScript libraries and Bootstrap framework, hosted behind Cloudflare DNS, but suffers from slow load times and lacks a valid SSL certificate, impacting security and user trust. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is minimal with no cookie consent mechanisms. Overall, the site presents professional content and branding but requires improvements in security and privacy to enhance trust and compliance.

M

Mapon

mapon.com

57

Mapon is a Finnish-based company specializing in fleet management and video telematics solutions, serving a broad range of industries including transportation, logistics, construction, and service companies. Established in 2006 and part of the Draugiem Group, Mapon offers a comprehensive platform integrating GPS tracking, driver behavior analysis, fuel monitoring, and video evidence to optimize fleet operations and enhance safety. The website reflects a mature digital presence with professional design, multilingual support, and extensive product information targeting B2B customers. Technically, the site leverages modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Cookiebot for consent management, hosted behind Cloudflare. However, the SSL/TLS configuration is currently deficient, lacking a valid certificate and TLS protocol support, which poses a significant security risk and undermines user trust. Security headers are well implemented, and privacy compliance is strong with GDPR-aligned policies and consent mechanisms. The security posture is weakened by the absence of proper HTTPS, which is critical for protecting data in transit and ensuring secure user interactions. Despite this, the site demonstrates good business credibility with clear contact information, certifications, and client references. Overall, Mapon presents as a reputable and professional company with a robust service offering but requires urgent remediation of its SSL/TLS configuration to meet modern security standards.

Istabai Ltd operates a smart heating system business focused on providing homeowners with remote heating control, home security features, and energy-saving automation. The company targets environmentally conscious consumers seeking convenience and cost savings through smart home technology. The website presents a professional and consistent brand image with clear product offerings and starter kits. However, the technical infrastructure shows signs of aging with AngularJS and jQuery usage, and the lack of a valid SSL certificate significantly undermines security and user trust. Advertising and analytics tools are integrated, but privacy compliance is lacking due to missing privacy and cookie policies. Overall, the business appears legitimate and established in Latvia with a niche market position in smart home energy solutions.

1

180 Marketing

180marketing.com

64

180 Marketing is a specialized eCommerce SEO service provider with a mature domain and a strong market position in the eCommerce digital marketing sector. The company offers high ROI SEO services tailored specifically for eCommerce businesses, leveraging extensive industry experience and a focused business model. Their website reflects a professional and trustworthy brand with clear client testimonials, case studies, and recognizable partner logos. Technically, the site is built on WordPress with modern frameworks and performance optimizations, including Cloudflare CDN and WP Rocket caching. Security posture is adequate with HTTPS and some security headers, though improvements such as enabling HSTS and a stronger CSP are recommended. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, but GDPR compliance indicators are limited. Overall, the website is credible, well-structured, and serves its target audience effectively.

S

Sky Internet Marketing

skyinternetmarketing.nl

40

Sky Internet Marketing is a mature, small-sized Dutch internet marketing bureau specializing in SEO, SEA (Google Ads), and website development services. Established in 2012, the company positions itself as a leading SEO expert in its region, supported by a team of seven specialists and strong client testimonials. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a high level of digital maturity. Technically, the site runs on WordPress with modern frameworks and integrates marketing and analytics tools such as Google Tag Manager and Ahrefs. Security posture is good with HTTPS enforced, SPF and DMARC policies configured, but there are minor gaps such as missing OCSP stapling and malformed CAA records. Privacy and terms policies are comprehensive and GDPR compliant, with clear contact channels provided. Overall, the site demonstrates strong business credibility and technical implementation, with room for security enhancements.

T

twoday

twoday.dk

40

twoday is a large Danish technology company specializing in digital transformation, AI, software engineering, business applications, and cloud platform services. With over 3,000 specialists and more than 8,000 customers across the Nordic region, twoday positions itself as a leading Microsoft Solution Partner delivering comprehensive IT consulting and digital solutions for private and public sectors. The website is professionally designed, content-rich, and well-branded, targeting organizations seeking advanced technology services. Technically, the site leverages HubSpot CMS and modern JavaScript libraries but lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Security headers are present but cannot compensate for the missing SSL/TLS configuration. Privacy compliance is strong with clear privacy and cookie policies and a consent mechanism. Overall, the site demonstrates good digital maturity but requires urgent security improvements to meet modern standards.

T

twoday

twoday.lt

54

twoday is a large IT services company based in Lithuania, specializing in advanced software development, software modernization, and business analytics and AI solutions primarily for the Nordic and Northern European markets. The company positions itself as a leading technology partner with a strong focus on SaaS products and digital transformation, serving over 8000 customers with nearly 3000 employees. The website is professionally designed, content-rich, and well-structured, leveraging HubSpot CMS and modern JavaScript libraries for enhanced user experience and marketing analytics. However, a critical security concern is the invalid or missing SSL certificate and lack of enabled TLS protocols, which significantly impacts the security posture and trustworthiness of the site. Privacy and cookie policies are present and integrated with consent management tools, indicating good privacy compliance. No explicit terms of service or security incident response policies are publicly disclosed. Strategic improvements in SSL configuration and security best practices are recommended to enhance overall security and trust.

T

twoday

twoday.se

40

twoday is a large Nordic IT consultancy specializing in IT consulting, data and AI, software engineering, digital experiences, business applications, and cloud platforms with security focus. The company serves over 8,000 clients in both public and private sectors, supported by a team of 2,700 technology experts. The website is professionally designed, content-rich, and well-structured, targeting large and medium-sized organizations primarily in Sweden and the Nordic region. Technically, the site uses HubSpot CMS, Bootstrap, jQuery, and modern JavaScript libraries, hosted behind Cloudflare. However, the SSL/TLS configuration is currently invalid or missing, which significantly impacts the security posture. Security headers are present but cannot compensate for the lack of valid HTTPS. Privacy compliance is strong with a clear privacy policy, cookie policy, and consent mechanisms implemented via Cookiebot. Contact information is clearly provided including email, phone, and a contact form. Overall, the site is professional and trustworthy but requires urgent SSL/TLS fixes to improve security and trust.

T

twoday

twoday.no

56

twoday is a leading Nordic IT solutions provider specializing in digital transformation, data-driven technologies, and consultancy services for both public and private sectors. The company offers a broad range of services including Data & AI, Software Engineering, Digital Experiences, Business Applications, and Cloud Platforms and Security. Their market position is strong, supported by strategic partnerships with government agencies and recognition as a top employer. Technically, the website is built on HubSpot CMS with modern JavaScript libraries and frameworks, hosted via Cloudflare, and integrates multiple marketing and analytics tools. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate and disabled HTTPS protocols, which significantly impacts the security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a professional and trustworthy image but requires urgent remediation of its SSL configuration to ensure secure communications and maintain trust.

T

twoday

twoday.com

74

twoday is a large Nordic IT services company specializing in software development, data & AI solutions, consulting, and digital transformation services for public and private sector clients. The company holds a strong market position as a Nordic leader in AI and data engineering, reinforced by strategic acquisitions such as Kaito Insight and major contracts with government agencies. Their website reflects a mature digital presence built on HubSpot CMS, leveraging modern JavaScript libraries and cloud hosting via Cloudflare. Security posture is strong with HTTPS enforcement, security headers, and no detected vulnerabilities, though improvements in HSTS and transparency compliance are recommended. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, twoday demonstrates a professional, trustworthy, and technically sound online presence suitable for its B2B audience.

M

Momentin Group Oy

momentingroup.com

57

Momentin Group Oy is a Finnish holding company fully owned by the Lehdon family, operating primarily in the hospitality sector with a focus on beverage products and restaurant services. The group comprises approximately 150 experts and leverages over 30 years of industry experience. Their subsidiaries include Brew Seeker, Restaurants, Mallaskoski, eDrinks, Momentin Baltics, and various minority ownerships. The website presents a professional and consistent brand image with good content quality and clear navigation, targeting both B2B and B2C audiences within the hospitality industry in Finland. Technically, the website is built on WordPress with WooCommerce and uses modern frontend technologies such as Bootstrap and jQuery. Hosting is provided via WP Engine with Cloudflare as a CDN and security proxy. SEO is supported by structured data (JSON-LD) and Yoast SEO plugin. However, performance metrics are unavailable, and accessibility is basic. The site is mobile optimized and includes cookie consent mechanisms. From a security perspective, the website has critical deficiencies. There is no valid SSL certificate detected, and no TLS protocols are enabled, resulting in a lack of HTTPS protection. Security headers are partially implemented but could be improved. DNS security features such as DNSSEC and CAA records are missing, and no DMARC record is present for email protection. These issues expose the site to potential interception and phishing risks. Overall, the site scores moderately on content and business credibility but poorly on security posture. Strategic improvements in SSL/TLS deployment, DNS security, and privacy compliance are recommended to enhance trust and protect user data.

O

Oaktree Capital Management, L.P.

oaktreeacquisitioncorp.com

53

Oaktree Acquisition Corp. is a finance-focused platform operating multiple SPAC vehicles to facilitate investment and acquisition transactions. The company is positioned as an established player in the SPAC market, targeting investors and partners interested in SPAC transactions. The website presents clear business information, including multiple SPAC vehicles and recent news updates, reflecting a professional and consistent brand image. Technically, the site uses modern front-end frameworks such as Bootstrap 5 and integrates with Cloudflare for hosting and CDN services. However, the absence of a valid SSL certificate and lack of modern TLS protocols significantly weaken the security posture. Privacy compliance is partially addressed through Evidon cookie consent mechanisms and a privacy policy hosted on the parent domain, but GDPR compliance is not clearly demonstrated. Overall, the website is functional and informative but requires critical security improvements to enhance trust and compliance.

T

TennisClub

tennisclub.fi

40

TennisClub.fi is a Finnish tennis club management platform owned by the Finnish Tennis Association, providing services for players, coaches, and clubs to manage memberships and coaching applications. The website is minimalistic, focusing on user role selection and basic information about the platform. Technically, the site uses common web technologies such as the Yii framework, Bootstrap, and jQuery, but lacks modern security implementations such as HTTPS. The absence of SSL/TLS significantly impacts the security posture and trustworthiness of the site. No privacy, cookie, or terms of service policies are present, and no contact information is provided, which limits user trust and compliance with data protection regulations. Overall, the site is functional but basic, with significant room for improvement in security and compliance.

A

Applied Systems, Inc.

appliedsystems.com

50

Applied Systems, Inc. is a leading enterprise technology company specializing in insurance software and agency management solutions for independent insurance agencies and brokers. The company offers a comprehensive suite of cloud-based products including agency management platforms, marketing automation, digital payments, and business intelligence tools. With a strong market position evidenced by adoption among top insurance brokerages and multiple industry awards, Applied Systems serves a primarily US-based audience with a focus on innovation and digital transformation in the insurance sector. The company was founded in 1983 and operates several subsidiaries such as EZLynx, Ivans, Indio, and Tarmika, enhancing its product ecosystem. Technically, the website employs modern JavaScript libraries like jQuery and Bootstrap, integrates marketing tools such as Marketo Forms, and uses Google Tag Manager for analytics. Hosting is via Cloudflare, but a critical security gap exists due to the absence of a valid SSL certificate and disabled TLS protocols, severely impacting the security posture. The site is well-structured with comprehensive metadata, JSON-LD structured data, and good SEO practices, providing a professional and trustworthy user experience. Security-wise, the lack of HTTPS and TLS support is a major vulnerability, exposing users to risks and undermining trust. While privacy and cookie policies are present and GDPR compliant, no explicit incident response or vulnerability disclosure mechanisms were found. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to meet modern standards and protect user data effectively.

Solaria Labs is an enterprise incubator operated by Liberty Mutual Insurance, focused on innovation and disruption within the insurance industry. The website presents the lab's mission to partner across Liberty Mutual to explore emerging trends, rapidly prototype new products, and scale successful innovations. The target audience includes internal teams, innovation professionals, and insurance industry stakeholders. The business model leverages Liberty Mutual's resources combined with a startup mindset to drive product and service innovation. The site is professionally designed with consistent branding and clear messaging, reflecting a mature enterprise presence. Technically, the website uses a standard modern stack including nginx, Bootstrap, jQuery, and various JavaScript libraries. Hosting appears to be via Akamai CDN and Liberty Mutual infrastructure. The site is mobile optimized and SEO friendly with proper meta tags and Open Graph data. However, performance metrics are unavailable, and accessibility is basic. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical issue. No advanced security headers or mechanisms like HSTS or OCSP stapling are implemented. The DNS configuration lacks DNSSEC and CAA records. While no vulnerabilities or WAF blocking were detected, the absence of HTTPS significantly lowers the security posture. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust. Privacy policies are comprehensive and GDPR compliant, but cookie consent mechanisms are missing. Contact information is limited to an email address and a physical address in Boston. No incident response or security policy disclosures are present.

C

Center for Technology & Society

cts.wien

50

The Center for Technology & Society (CTS) is an inter-university and interdisciplinary cooperation platform based in Vienna, Austria, involving prominent academic institutions such as TU Wien, FH Campus Wien, FH Technikum Wien, and Universität Wien. It focuses on research, teaching, and societal engagement addressing technological and social challenges like climate change and digital transformation. The platform supports researchers, students, and societal stakeholders through networking, coordination, and participatory approaches. Technically, the website is built using the Hugo static site generator and leverages multiple JavaScript libraries including jQuery, Bootstrap, and Leaflet for interactive maps. However, the site suffers from a lack of HTTPS security, with no valid SSL certificate and no modern TLS protocols enabled, which significantly impacts its security posture. The site also lacks privacy and cookie policies, which affects compliance with data protection regulations. Performance is slow with a high load time and large page size, though mobile responsiveness and navigation are well implemented. Overall, the site presents a professional academic presence but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

M

Mines Plus

mines-plus.org

40

Mines Plus is an alumni association website serving graduates of the Mines d'Albi, Alès, and Douai engineering schools in France. It offers networking, career services, event information, and regional group management for its members. The site targets alumni, students, and recruiters connected to these institutions. Technically, the website uses a custom CMS with a PHP/Apache backend and front-end technologies including jQuery, Bootstrap, and various JavaScript libraries. It integrates cookie consent management and social login options. However, the website suffers from a critical security issue: the SSL certificate is invalid or missing, and no TLS protocols are enabled, which severely impacts secure HTTPS access. Security headers are well implemented, but the lack of proper SSL/TLS undermines overall security. Privacy compliance is addressed with a cookie policy and consent mechanism, but no explicit privacy policy or terms of service pages are clearly found. Contact information is limited to an email address in the footer and a contact page link, with no phone numbers or physical addresses visible. Overall, the site is functional and professionally designed but requires urgent security improvements to protect user data and trust.

I

IMT Mines Alès Alumni

mines-ales.org

40

IMT Mines Alès Alumni operates as a non-profit alumni association dedicated to serving graduates, students, and recruiters associated with IMT Mines Alès. The website provides comprehensive services including networking, career support, event management, and community engagement. It maintains a strong presence on social media and integrates multiple partner organizations, reflecting a well-established position within the French educational sector. The content is professionally presented in French, targeting alumni and related stakeholders. Technically, the website is built on a custom CMS platform with a technology stack including Apache, PHP, jQuery, Bootstrap, and various JavaScript libraries. While the site is mobile-optimized and SEO-friendly, performance metrics indicate slow loading times. The hosting appears to be with OVH, and the site uses several third-party services for analytics, cookie consent, and anti-bot measures. From a security perspective, the site implements several important HTTP security headers and a content security policy. However, the absence of a valid SSL certificate and lack of TLS protocol support significantly weaken its security posture. Cookies are set with secure and HttpOnly flags, and forms include anti-bot protection via hCaptcha. Privacy compliance is strong, with clear cookie and privacy policies and GDPR adherence. Overall, the site is functional and professional but requires urgent improvements in SSL/TLS configuration to enhance security and user trust. Addressing these issues will improve the security score and overall risk profile, ensuring better protection for users and data integrity.

I

IMT Nord Europe Alumni

imt-lille-douai.org

40

IMT Nord Europe Alumni is a French non-profit alumni association serving graduates and students of IMT Nord Europe. The website provides a comprehensive platform for alumni networking, career services, events, and publications. It targets alumni, students, recruiters, and partners, positioning itself as a key community hub for the institution's graduates. The site is professionally designed with consistent branding and good content relevance, supporting a medium-sized organization in the education sector. Technically, the website uses a traditional LAMP stack with Apache and PHP, enhanced by modern JavaScript libraries such as jQuery, Bootstrap, and TinyMCE. The site is mobile-optimized and includes accessibility and SEO best practices, although performance is moderate. Hosting appears to be on a standard provider with no advanced CDN or cloud infrastructure detected. From a security perspective, the site implements several important HTTP security headers and a comprehensive Content Security Policy. However, it lacks a valid SSL certificate and proper TLS configuration, which is a critical vulnerability impacting user trust and data security. Cookie consent and privacy policies are implemented, indicating good privacy compliance, but no explicit security policy or incident response information is available. Overall, the site is functional and professional but requires urgent improvements in SSL/TLS deployment and security posture to protect user data and maintain trust. Strategic enhancements in incident response and vulnerability disclosure policies would further strengthen its security maturity.

R

Rassemblement Annuel Philanthropique

raphilanthropique.ca

32

Rassemblement Annuel Philanthropique is a small non-profit organization focused on organizing an annual philanthropic event in Quebec, Canada. The event targets professionals and stakeholders in the philanthropic sector, offering workshops, conferences, and networking opportunities. The website is built on WordPress using Elementor and Bootstrap frameworks, with SEO optimized via Yoast plugin. However, the site suffers from critical security issues including lack of HTTPS and security headers, which significantly impacts its security posture. Performance is slow, and while the site is mobile optimized and content-rich, it lacks privacy compliance mechanisms such as cookie consent banners. Overall, the business presents a professional image but must urgently address security and privacy compliance gaps.

A

Amicale des Ingénieurs Généraux des Ponts, des Eaux et des Forêts

aigpef.org

40

The website aigpef.org represents the Amicale des Ingénieurs Généraux des Ponts, des Eaux et des Forêts, a French professional association focused on engineers from the IPEF corps. It provides member services including a directory, events, publications, and a private member area. The site targets members and alumni of this engineering corps and operates as a small non-profit entity within the government/association sector. Technically, the site uses a traditional LAMP stack with Apache, PHP, jQuery, and Bootstrap, and is likely hosted by OVH. While the site has a professional design and good content quality, it suffers from a critical security issue: the SSL certificate is invalid or missing, resulting in no HTTPS support. This severely impacts the security posture and trustworthiness of the site. Security headers and cookie consent mechanisms are well implemented, and analytics tools like Google Analytics and Hotjar are used with privacy compliance in mind. Overall, the site is functional and professional but requires urgent SSL remediation to improve security and user trust.

U

Union des Ingénieurs des Ponts, des Eaux et des Forêts

unipef.org

40

UnIPEF is a French professional association serving engineers specialized in civil engineering, water management, and forestry sectors. It offers membership services including networking, career support, events, and publications. The website is well-structured, content-rich, and targets primarily French-speaking engineering professionals. The association maintains partnerships with several related organizations and provides multiple channels for member engagement.

N

Neoweb

neoweb.fr

40

Neoweb is a French digital agency established in 2004, specializing in custom web and mobile application development, consulting, and accessibility services. The company targets startups, enterprises, and institutions primarily in Lille and Paris, leveraging technologies such as React, Symfony, WordPress, and Directus. Their website reflects a mature digital presence with professional design, rich content, and structured data enhancing SEO and user experience. Technically, the site is built on WordPress with Elementor and Gravity Forms, incorporating modern JavaScript libraries and optimization tools like WP Rocket. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support and lack of modern TLS protocols, which significantly impacts the site's security posture. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the site demonstrates strong business credibility and technical maturity but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

I

IMT Nord Europe Alumni

imt-nord-europe.org

40

IMT Nord Europe Alumni is a French non-profit alumni association serving graduates, students, and recruiters affiliated with IMT Nord Europe. The website offers a comprehensive platform for alumni networking, career services, events, and publications, supported by a large member base. Technically, the site uses a modern JavaScript stack with libraries such as jQuery, Bootstrap, and slick-carousel, and integrates security features like hCaptcha and GDPR-compliant cookie consent. The SSL configuration is valid but could be improved with HSTS and stronger DMARC policies. Overall, the site is professional and trustworthy but has room for performance and security enhancements.

L

Logilys Inc.

imakeanonlinedonation.org

52

I Make An Online Donation is a French-language website initiative by Logilys Inc. offering an integrated online donation solution primarily targeting charitable organizations. The platform enables organizations to manage online donation forms integrated with the Prodon Donation and Donor Management Software, positioning itself as a niche SaaS provider in the non-profit sector in Canada. The website content is professionally presented with clear navigation and relevant business information, including contact details and social media presence. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Fonts, Font Awesome, Google reCAPTCHA v3, and Google Tag Manager, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security and trust.

Logilys is a small Canadian technology company specializing in the development and distribution of specialized management software solutions, including PRODON for donation and donor management, PROLOC for leisure, sports, and culture management, and PROLYS for project and client relationship management. The company targets organizations requiring tailored software solutions primarily in Quebec, Canada. Their market position is niche with a focus on specialized software for non-profit and cultural sectors. Technically, the website uses modern frontend technologies such as Bootstrap and jQuery, with Google Tag Manager for analytics. However, the site lacks a valid SSL certificate, resulting in HTTP-only access, which negatively impacts security posture and user trust. Performance is slow with a high page load time, though mobile optimization and SEO are reasonably good. Security-wise, the company holds a COCD certification for its PRODON software, indicating a commitment to security in their product offerings, but the website itself lacks HTTPS, security headers, and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie banner or GDPR-specific indicators. Contact information is clearly provided with phone numbers and a physical address in Rimouski, Quebec. Overall, the website is professional and informative but requires significant improvements in security and privacy compliance to enhance trust and protect users.

S

SIA "Juridiskā koledža"

jk.lv

40

Juridiskā koledža is a Latvian educational institution specializing in legal and related professional studies. The website presents a comprehensive offering of study programs, courses, and international cooperation such as ERASMUS. The institution positions itself as a provider of qualified specialists with practical and theoretical knowledge for the labor market in Latvia and abroad. Technically, the website is built on WordPress with common libraries like jQuery and Bootstrap, but suffers from slow performance and lacks a valid SSL certificate, which impacts security and user trust. Security posture is weak due to missing HTTPS, lack of security headers, and absence of DMARC records, although SPF is correctly configured. Privacy compliance is minimal with no visible privacy or cookie policies or consent mechanisms. Contact information and certifications are clearly presented, supporting business credibility. Overall, the site is functional but requires significant improvements in security and privacy to meet modern standards.

J

JDM Technology Group

jdmtechnologygroup.com

33

JDM Technology Group is a well-established company providing integrated software solutions for the construction industry and built environment. With over 41 years in business, 34 subsidiary companies, and a global customer base exceeding 18,000, they offer a broad portfolio of construction management, maintenance, estimating, and operational software. Their business model focuses on strategic acquisitions to expand market share and deliver comprehensive solutions. Technically, the website is built on WordPress with modern frontend technologies like Bootstrap and jQuery, optimized by NitroPack, but suffers from slow load times and lacks a valid SSL certificate, impacting security and user trust. Security posture is weak due to missing HTTPS and TLS protocols, though DNS records show good email security practices with SPF and DMARC. Privacy compliance is poor with no visible privacy or cookie policies, and no contact information is provided on the homepage. Overall, the site is professional and content-rich but requires significant improvements in security and privacy to enhance trust and compliance.

S

Sodern

sodern.com

50

Sodern is a French technology company specializing in space optronics and neutron technology, operating as a subsidiary of ArianeGroup. The company holds a leading position globally and in Europe in its niche markets, providing advanced products such as star trackers, spatial cameras, and neutron analysis equipment primarily for defense, space, and mining sectors. The website reflects a professional corporate presence with comprehensive content, legal compliance pages, and active social media engagement. Technically, the site is built on WordPress with modern plugins and frameworks, but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

E

EURECOM

eurecom.fr

40

EURECOM is a reputable graduate school and research center specializing in digital science, located in Sophia Antipolis, France. It offers advanced education and research programs in computer science, telecommunications, and digital security, targeting students, researchers, and industry partners. The institution holds recognized certifications such as the 4DIGITAL label and European Heritage Award, positioning it as a key player in digital education and research in Europe. Technically, the website is built on Drupal 9 with modern frontend libraries and integrates Google Tag Manager for analytics. However, the site suffers from a lack of HTTPS support due to an invalid or missing SSL certificate, which significantly impacts its security posture. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages are found on the homepage. Contact information is limited to a physical address and phone number, with no verified company emails available. Overall, the website presents professional content and good user experience but requires urgent security improvements to protect user data and enhance trust.

I

IMT Nord Europe

imt-nord-europe.fr

40

IMT Nord Europe is a French graduate engineering school affiliated with the Institut Mines-Télécom and partnered with the University of Lille. Positioned strategically in northern France, it serves as a key educational and research institution focusing on energy, ecological, digital, and industrial transitions. The website presents a professional and content-rich platform targeting students, researchers, and industry partners, offering a wide range of engineering programs and continuous training. Technically, the site is built on WordPress with modern plugins and frameworks but lacks a valid SSL certificate, which impacts its security posture. While security best practices such as hCaptcha and cookie consent are implemented, the absence of HTTPS and minimal security headers present significant vulnerabilities. Overall, the site is functional and trustworthy but requires urgent improvements in security to protect user data and enhance trust.

E

Ensae-Ensai Formation Continue (Cepe)

lecepe.fr

40

Ensae-Ensai Formation Continue (Cepe) is a well-established continuing education center affiliated with the Groupe des écoles nationales d'économie et statistique (Genes) in France. It specializes in providing professional training and certification programs in statistics, data science, finance, and economics. The organization maintains strong partnerships with prestigious institutions such as Ensae Paris, Ensai, Crest, and Institut Polytechnique de Paris, positioning itself as a reputable education provider in its sector. The website reflects a professional and comprehensive approach to education, targeting professionals and learners seeking advanced skills and certifications in quantitative fields. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and integrates third-party services like Google Analytics and Calendly for analytics and scheduling. Hosting is managed through Gandi, and the site uses a valid SSL certificate with strong key length, although some security enhancements such as HSTS and DNSSEC are absent. Performance is moderate to slow due to a large number of resources and page size, but mobile optimization and accessibility are adequately addressed. From a security perspective, the site uses HTTPS with a valid certificate and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks several security headers and DNS security features that could improve its security posture. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and secure environment for users. Privacy policies and terms of service are clearly available, enhancing compliance and user trust. Overall, the website demonstrates a strong business credibility and professional presence with room for technical and security improvements. Strategic recommendations include enhancing security headers, enabling DNSSEC and CAA, optimizing performance, and publishing incident response information to further strengthen trust and compliance.

X

XMP-Consult

xmp-consult.org

40

XMP-Consult operates as a network of independent consultants primarily serving French-speaking business leaders and members seeking consulting services. The website provides a membership platform, events calendar, publications, and a newsletter to engage its community. The business model focuses on connecting consultants with clients and fostering professional development through events and shared resources. Technically, the site is hosted on OVH with Apache server, uses a variety of JavaScript libraries including jQuery, Bootstrap, and TinyMCE, and employs a CMS likely based on NetAssoc. While the site is content-rich and well-structured with good mobile optimization, performance is slow and SEO is basic. Security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocols, despite good security headers and cookie consent mechanisms. Privacy compliance is strong with GDPR-aligned cookie policies and consent banners. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to enhance security and user trust.

Ash Allen Design is a small freelance web design and Laravel development business based in Preston, UK. The company offers affordable, high-quality website design and development services tailored to small local businesses and developers. The website presents a professional image with comprehensive service descriptions, client testimonials, and a portfolio, positioning itself as a trusted local provider with a strong digital presence including authored books and free resources. Technically, the site uses modern web technologies such as Bootstrap, Livewire, and Font Awesome, hosted likely on DigitalOcean, with moderate performance and excellent mobile optimization. However, the security posture is weak due to the absence of a valid SSL certificate and HTTPS support, which is a critical issue. Privacy compliance is addressed with a cookie consent mechanism and a clear privacy policy. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.

P

Packet Clearing House

pch.net

55

Packet Clearing House (PCH) is a well-established intergovernmental organization focused on supporting critical Internet infrastructure such as Internet Exchange Points (IXPs) and the Domain Name System (DNS). The organization has a strong global presence and is recognized as a pioneer in DNS anycast and IXP support, serving a technical audience including ISPs, network operators, and governance bodies. The website content is professionally presented with clear navigation and detailed service descriptions, targeting technical and governance stakeholders in the Internet ecosystem. Technically, the website uses a modern frontend stack including Bootstrap and JavaScript libraries like jQuery and D3.js, but lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are partially implemented but undermined by the invalid SSL setup. Privacy policies are present but lack explicit consent mechanisms, and no terms of service or incident response policies are found. Overall, the website is functional and informative but requires urgent improvements in security and compliance to enhance trust and protect users.

Net.Com is a specialized digital agency focused on providing web solutions for the public sector in France, including government agencies, hospitals, educational institutions, and social housing organizations. With over 27 years of experience and more than 500 projects completed, the company offers services such as Drupal and WordPress development, UX design, SEO, and agile development methodologies. The website reflects a professional and well-structured digital presence with comprehensive client references and testimonials. Technically, the site uses modern JavaScript libraries and frameworks but lacks HTTPS support, which is a critical security deficiency. The absence of SSL/TLS and security headers exposes the site and its users to potential risks. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the business demonstrates strong credibility and a clear market niche but must urgently address its security posture to protect its reputation and client data.

Vincent Schmalbach operates a professional freelance web development business specializing in Laravel, Vue.js, AI integration, and SEO services. The website presents a comprehensive portfolio of services targeting startups, established businesses, development teams, and product companies globally. The technical infrastructure is modern, leveraging a broad technology stack including Laravel 12, Vue.js 3, and cloud hosting providers such as Hetzner and AWS. However, the website lacks a valid SSL certificate, resulting in no HTTPS availability, which is a significant security concern. Security headers and advanced security policies are also absent, reducing the overall security posture. Privacy compliance is minimal with no visible cookie consent mechanisms, though a privacy policy page exists. The website is well-designed, content-rich, and professionally maintained, with strong business credibility supported by client testimonials and social media presence.

7

7Span Internet Private Limited

7span.com

50

7Span Internet Private Limited is a technology consulting and software development company specializing in digital transformation, SaaS, UI/UX design, mobile app development, and branding services. With a strong client base of over 430 clients globally, the company positions itself as a reliable partner for businesses seeking innovative technology solutions. Their business model includes both client projects and in-house products, supported by a diverse technology stack and modern frameworks. The website reflects a professional and consistent brand image with comprehensive service offerings and strong trust indicators such as client logos and high ratings. Technically, the site uses a wide range of modern technologies including Vue.js, React, Laravel, AWS, and various CMS platforms, hosted behind Cloudflare. However, the website currently lacks a valid SSL certificate, which is a critical security concern. Privacy policies are present and GDPR compliance is indicated, but no cookie consent mechanism is detected. Overall, the site is content-rich and professionally designed but requires urgent security improvements to ensure safe user interactions.

G

Globant

globant.com

59

Globant is a leading global IT and software development company specializing in AI-driven business transformation and digital innovation. Operating across multiple countries, Globant offers a subscription-based AI Pods model alongside enterprise AI solutions, software engineering, and design services. The company is recognized as a top IT services brand with strong market positioning and a broad industry reach including finance, healthcare, media, and retail. Technically, the website is built on Drupal CMS, leveraging modern libraries and Google services for analytics and security. However, the site currently lacks a valid SSL/TLS certificate, which significantly impacts its security posture. Despite this, Globant implements strong security headers and privacy policies, including GDPR compliance and cookie consent mechanisms. The website demonstrates excellent content quality, professional design, and clear navigation, supporting a high level of business credibility. Strategic improvements in SSL/TLS configuration and enhanced security practices are recommended to elevate the overall security and trustworthiness.

B

Backpack for Laravel

backpackforlaravel.com

61

Backpack for Laravel is a well-established technology company specializing in providing flexible and easy-to-use admin panel solutions for Laravel developers. Since 2016, it has gained significant traction with over 2.4 million downloads and a strong user base of 30,000 active users. The company operates on an open-core business model, offering a free core product supplemented by paid add-ons and professional services such as premium support, custom features, training, and full web development. The website reflects a professional and consistent brand image, targeting developers, agencies, and companies seeking efficient admin panel solutions.

É

École polytechnique

polytechnique.edu

51

École polytechnique is a prestigious French engineering school that combines research, education, and innovation at the highest scientific and technological levels. It operates as a leading educational institution within the Institut polytechnique de Paris, offering a wide range of programs including Bachelor, Master, Doctorate, and Executive education. The school maintains strong partnerships with industry and alumni networks, supporting entrepreneurship and technology transfer. Technically, the website is built on Drupal CMS with modern frontend libraries, but suffers from slow performance and lacks a valid SSL certificate, which impacts its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the institution presents a professional and trustworthy digital presence, though improvements in security and performance are recommended.

M

MAIF

maif-evenements.fr

40

MAIF Evénements is a French event listing platform affiliated with the MAIF insurance group, focusing on promoting local community events across France. The website provides an interactive map and search functionality for users to find events by department and date. It leverages WordPress CMS with a variety of plugins and scripts to deliver a responsive and SEO-optimized user experience. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which significantly impacts its security posture. While privacy and cookie policies are referenced, they reside on the main MAIF domain rather than this subdomain. Social media links connect to official MAIF accounts, enhancing trust. Overall, the site is functional and professionally designed but requires urgent security improvements to protect user data and ensure compliance.

C

Communauté d'Agglomération du Niortais

niortagglo.fr

40

Communauté d'Agglomération du Niortais operates as a regional government authority serving 40 communes in the Niort area of France. The organization provides a broad range of public services including urban planning, transportation, waste management, cultural activities, and economic development. The website serves as an official portal for residents, businesses, and visitors, offering information, services, and news relevant to the community. The site is built on TYPO3 CMS and leverages modern web technologies such as Bootstrap and jQuery, with integrated Matomo analytics and GDPR-compliant cookie consent mechanisms. However, the site suffers from a lack of a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. Other security headers and best practices are also missing, reducing the overall security posture. Despite these issues, the site maintains good content quality, clear navigation, and strong business credibility through official contact information and social media presence.

A

Agence Locale Pour la Coopération Européenne (ALPC)

europe-en-nouvelle-aquitaine.eu

40

The website europe-en-nouvelle-aquitaine.eu serves as the official digital presence of the Europe office for the Nouvelle-Aquitaine region in France. It provides comprehensive information and support related to European funding, project submission, and regional development initiatives. The site targets a diverse audience including regional businesses, public entities, associations, and individual beneficiaries seeking European aid and partnership opportunities. The business model is that of a public regional agency facilitating access to European funds and promoting regional cooperation. Technically, the website is built on the Drupal CMS platform, utilizing common web technologies such as Bootstrap, jQuery, Google Fonts, and Google Maps API. While the site is mobile-optimized and offers good navigation and content relevance, its performance is slow with a page load time exceeding 12 seconds. SEO and accessibility are basic but functional. From a security perspective, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS protection. No security headers or DNS security features like DNSSEC or CAA records are implemented. Cookie consent is present, but privacy and security policies are basic. The absence of HTTPS and security headers significantly lowers the security posture, posing risks to user data confidentiality and integrity. Overall, the website is professionally designed and serves its informational purpose well but requires urgent improvements in security infrastructure, especially SSL implementation and security headers. Enhancing performance and accessibility would also benefit user experience and trustworthiness.

I

innovAARE AG

parkinnovaare.ch

36

innovAARE AG operates the Park Innovaare, a high-tech innovation and industrial park in Switzerland focused on accelerating deep-tech research and commercialization. The park provides modern office, laboratory, and specialized research spaces, along with community and networking services to startups, SMEs, and R&D departments. The website is professionally designed, content-rich, and well-structured, targeting innovation ecosystem participants. Technically, the site uses TYPO3 CMS with modern frontend libraries and is hosted by cyon AG. However, a critical security gap is the lack of HTTPS/SSL, exposing users to risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Business credibility is strong with clear contact details and legal information.

A

appliedAI Institute for Europe gGmbH

ai-startups-europe.eu

40

The appliedAI Institute for Europe gGmbH is a non-profit organization focused on generating and disseminating high-quality knowledge about trustworthy Artificial Intelligence. It serves professionals and policymakers by providing educational formats, tools, community engagement, and regulatory guidance, positioning itself as a leading AI knowledge hub in Europe. Technically, the website employs modern JavaScript frameworks like Vue.js, Bootstrap for responsive design, and integrates marketing and analytics tools such as Google Tag Manager, HubSpot, and Usercentrics for consent management. However, the security posture is weakened by the absence of a valid SSL certificate, lack of HSTS, and missing DMARC records, which are critical for secure communications and email protection. Overall, the site is content-rich and professionally presented but requires urgent improvements in SSL/TLS configuration to enhance trust and security.