Security Directory

C

Convertim s.r.o.

convertim.com

62

Convertim s.r.o. operates a specialized SaaS platform focused on optimizing e-commerce checkout processes to increase sales and conversion rates. Their service offers one-click checkout, passwordless authentication via SMS PIN, and seamless integration with carriers and payment gateways, targeting online retailers seeking to improve user experience and cross-border sales. The website is professionally designed, multilingual, and leverages modern web technologies such as Webflow, Google Tag Manager, and Weglot for translation. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, alongside a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the active business presence and social media profiles provide mitigating trust signals. No explicit security policy or incident response information is published, indicating room for improvement in transparency and security posture.

Zavod Kersnikova is a Slovenian cultural institution dedicated to contemporary research-based art, operating through its gallery Kapelica and laboratories Rampa and BioTehna. The website serves as an information hub for events, news, and artistic activities, targeting artists, researchers, and the cultural community. The institution is well-established with a domain age since 2011, reflecting its ongoing presence in the cultural sector. Technically, the website is built on modern JavaScript frameworks such as Nuxt.js and uses external libraries like FontAwesome and Google Fonts. It incorporates a cookie consent mechanism and complies with GDPR regulations, demonstrating attention to privacy and user rights. However, some mixed content issues and lack of security headers indicate areas for improvement in security posture. Overall, the website is professional, user-friendly, and trustworthy, though it could benefit from enhanced security practices and explicit policy documentation.

The Slovak-Czech Women's Fund is a small non-profit organization dedicated to advancing women's rights and gender equality in Slovakia and the Czech Republic. Their website provides information about their mission, grant programs, projects, and ways to support their cause. The organization maintains a clear presence with contact details, social media links, and a consistent brand identity. The website content is primarily in Slovak with options for Czech and English, targeting women and supporters of women's rights in the region. Technically, the website uses a custom CMS with modern JavaScript libraries such as jQuery, Slick Carousel, and Underscore.js. It employs Google Fonts and FontAwesome for styling and icons. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Google Analytics is used for visitor tracking, but no explicit cookie consent mechanism is present despite having a cookie policy page. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. No forms or input fields were detected on the main pages, reducing attack surface. There is no vulnerability disclosure or incident response information available. The site appears safe with no adult or questionable content. Overall, the website is professional, trustworthy, and fulfills its informational role well. However, improvements in security headers, privacy compliance mechanisms, and transparency around security policies would enhance its security posture and user trust.

A

ARCHA+

archa-plus.cz

58

ARCHA+ is a multifunctional cultural space operating since 2024 in the premises of the original Divadlo Archa in Prague. The organization offers a diverse program of contemporary arts including music, theater, and dance, targeting a broad audience interested in cultural events. Supported by municipal and governmental bodies, ARCHA+ positions itself as a key cultural institution in Prague with a focus on education and community engagement. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, Vue.js, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing, all implemented with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and well-optimized for users.

I

International Visegrad Fund

visegradfund.org

65

The International Visegrad Fund is a well-established non-profit organization dedicated to fostering sustainable regional cooperation in Central Europe. It provides funding through grants, scholarships, fellowships, and artist residencies, supporting over 5,000 projects historically. The website reflects a professional and consistent brand image with a clear focus on its mission and services, targeting individuals and organizations involved in regional development, culture, and academia. The organization has a strong market position as a key regional fund with a 25-year history. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Select2, and Owl Carousel. It integrates Google Analytics and Facebook Pixel for analytics and marketing purposes. The site is mobile-optimized with good SEO practices and moderate performance. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration and secure form handling. It lacks some security headers and explicit incident response or vulnerability disclosure policies, which are recommended for enhanced security posture. Privacy compliance is mostly addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a trustworthy and professional digital presence for the International Visegrad Fund, with minor improvements suggested in privacy compliance and security best practices to further strengthen its posture.

N

Nadace BLÍŽKSOBĚ

blizksobe.cz

48

Nadace BLÍŽKSOBĚ is a Czech non-profit foundation dedicated to supporting organizations and individuals that enhance social quality of life, focusing on education, democracy, and civil society. The website presents a professional and consistent brand image with clear mission statements and support for known social initiatives such as Člověk v tísni. Technically, the site is built on WordPress with Bootstrap and uses modern web technologies including Google Analytics and reCAPTCHA for security. The site is mobile-optimized and performs moderately well. Security posture is good with HTTPS enforced and anti-bot measures, but lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a compliance gap given GDPR relevance. WHOIS data is unavailable, which limits domain trust verification and reduces overall credibility. No signs of WAF or content blocking were detected, and the site content is safe for general audiences.

S

SAS RESO

captairsolaire.com

39

Capt'air solaire is a specialized importer and exclusive distributor of SolarVenti solar air collectors in France, operating since 2010. The company targets both individual consumers and professional clients, positioning itself as the third largest SolarVenti distributor in the country. Their key services include product sales, installation advice, and customer support, with a strong emphasis on quality Danish manufacturing and European market leadership. The website reflects a professional and consistent brand image with clear contact information and product offerings. Technically, the site is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. Security measures include HTTPS, Google reCAPTCHA, and a GDPR-compliant cookie consent mechanism, although some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

S

Simple et Solaire

simple-et-solaire.com

47

Simple et Solaire is a French company specializing in the sale and support of autonomous solar energy kits and equipment, targeting individuals, professionals, NGOs, and communities both in France and internationally. Established since 2008, the company offers a range of photovoltaic kits, batteries, solar lamps, and related services including technical advice, training, and after-sales support. Their market position is that of a trusted expert in solar autonomy, with a particular focus on solutions for isolated sites and the African market. Technically, the website is built on the PrestaShop CMS platform, utilizing jQuery and Google Analytics for tracking. The site is moderately optimized for performance and mobile use, with good SEO practices and clear navigation. However, some modern security best practices such as security headers and cookie consent mechanisms are missing, which could impact compliance and security posture. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, as it limits verification of domain legitimacy and registration details. Overall, the website presents a professional and trustworthy front for a small energy sector business, but improvements in security policies, privacy compliance, and domain registration transparency are recommended to enhance trust and reduce risk.

P

Partner & Co

semence-biologique.fr

39

SemBio, operated by Partner & Co, is a French e-commerce business specializing in the sale of certified organic seeds and seed mixtures for agricultural use. The website targets French-speaking agricultural professionals and organic farmers, offering a range of products including pure seeds and specialized blends for various farming sectors. The company positions itself as a niche supplier within the organic agriculture retail market in France. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and SEO best practices. It integrates marketing and analytics tools such as Google Analytics, Google Tag Manager, and Sendinblue for newsletter and marketing automation. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and uses security headers, reflecting a good security posture. However, it lacks a publicly available security policy or incident response contact information. The domain WHOIS data is privacy protected, which is common and justified for this business type. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and accessibility.

D

devisocom

devisocom.com

50

Devisocom is a small communication agency based in Avignon, France, founded in 2008 by Odile Devise. The company offers a range of creative services including graphic design, communication strategy, digital and web solutions, and custom games. The website is professionally designed using WordPress with the Divi theme and includes a portfolio and client testimonials, indicating a credible and established presence in its niche market. Technically, the site is well-structured with SEO optimizations and mobile responsiveness, though performance is moderate. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which should be verified. Overall, the website presents a trustworthy and professional image suitable for its target audience.

Φ

Φεστιβάλ Κινηματογράφου Θεσσαλονίκης

filmfestival.gr

72

The website www.filmfestival.gr is the official digital presence of the Thessaloniki International Film Festival, a prominent cultural institution in Greece. It provides comprehensive information about the festival's organization, film screenings, professional activities, museum, archives, and an e-shop. The site targets film enthusiasts, industry professionals, and the general public interested in cinema and cultural events. The business model is non-profit, focusing on cultural promotion and film industry support. The website is well-branded, consistent, and rich in relevant content, reflecting a medium-sized organization with a strong market position in the media sector in Greece. Technically, the site is built on Joomla CMS with Bootstrap 3 and uses modern JavaScript libraries like Swiper.js and jQuery. It integrates Google Analytics, Facebook SDK, and Google Adsense for analytics and advertising. The site is mobile-optimized, accessible, and SEO-friendly, with good performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a mature digital infrastructure with good privacy compliance, including GDPR-aligned privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. The WHOIS data aligns with the website's claims, supporting legitimacy. No adult or questionable content is present, making it safe for general audiences. Strategic recommendations include enhancing security headers, adding a vulnerability disclosure policy, and maintaining regular audits of third-party scripts to sustain security and compliance standards.

goEast Filmfestival is a well-established cultural event organizer specializing in Central and Eastern European cinema. The website provides comprehensive information about the festival, including event dates, program details, and opportunities such as internships and film submissions. The organization targets film enthusiasts and cultural audiences interested in this niche. Technically, the website is built on WordPress with modern JavaScript libraries and SEO optimizations, hosted on a professional DNS provider. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Social media integration is strong, enhancing community engagement and trust. Overall, the website is professional, trustworthy, and serves its audience effectively.

I

Institut français de Prague

festivalff.cz

40

The website www.festivalff.cz represents the 28th Festival francouzského filmu (French Film Festival) organized by the Institut français de Prague. It serves as a cultural platform promoting French cinema in the Czech Republic, featuring film screenings, premieres, tributes, and regional events. The site targets film enthusiasts and the general public interested in French culture. Technically, the site uses a traditional web stack with jQuery and integrates multiple third-party tracking tools such as Google Tag Manager and Facebook Pixel. The website is mobile-optimized and offers good user experience with clear navigation and professional content presentation. Security-wise, the site enforces HTTPS and uses asynchronous loading for tracking scripts but lacks advanced security headers and privacy/cookie policies, which are compliance gaps. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency, though the affiliation with a reputable cultural institute mitigates trust issues. Overall, the site is functional, professional, and trustworthy but would benefit from improved privacy compliance and security hardening.

C

Czech Film Center

filmcenter.cz

53

Czech Film Center is a government-affiliated organization dedicated to promoting Czech audiovisual production globally. It serves as a key resource for film industry professionals, providing information on films, filmmakers, festivals, and industry news. The website is professionally designed with consistent branding and clear navigation, targeting the international film community and industry stakeholders. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and Google services, ensuring a good user experience with moderate performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks some advanced security headers and explicit security policies. Privacy compliance is strong, featuring a comprehensive privacy policy and a granular cookie consent mechanism. The absence of WHOIS data reduces domain trust assessment, but the official affiliations and content quality support legitimacy. Overall, the site is a reliable and professional platform for Czech film promotion.

T

Ticketware SE

cinemaware.eu

39

Ticketware SE operates a specialized ticket sales software platform targeting cultural institutions such as cinemas, theaters, museums, and cultural centers primarily in Slovakia and the Czech Republic. The company offers an integrated solution for online ticket sales, seat reservations, ticket printing, and entry control, serving over 450 clients with monthly sales exceeding one million tickets. The website reflects a professional business presence with clear branding and relevant content tailored to its target audience. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, Google Analytics, Google Tag Manager, Facebook SDK, and Google reCAPTCHA v3 for bot protection. The site is mobile optimized and uses HTTPS with a good SSL configuration. However, it lacks some security headers and explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA integration but misses formal security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious patterns were detected. The WHOIS data aligns well with the website’s business claims, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

L

LEPOR s.r.o.

lepor.cz

41

LEPOR s.r.o. is a well-established Czech advertising agency founded in 2000, providing a range of services including copyshop, signmaking, graphic design, printing, and promotional product sales. The company targets local businesses and consumers primarily in the Czech Republic, leveraging partnerships with specialized online catalogs and product providers. The website reflects a solid local market presence with clear contact information and a focus on customer service. Technically, the site uses a combination of popular JavaScript libraries and frameworks such as jQuery and Bootstrap, with moderate performance and good mobile optimization. Security measures include Google reCAPTCHA Enterprise integration on the contact form, but lack visible advanced security headers or published security policies. Privacy compliance is basic, with a cookie consent banner but no privacy policy or terms of service pages. Overall, the site is functional and professional but could improve in security and compliance transparency.

W

Werich Villa

werichovavila.cz

41

Werichova vila is a cultural and historical center located in the heart of Prague, dedicated to preserving and promoting the legacy of notable Czech personalities such as Jan Werich and Vladimír Holan. The website serves as an official portal offering information about permanent exhibitions, cultural programs, theatrical performances, concerts, and workshops aimed at a broad audience including families, schools, and the general public. The organization positions itself as a small but significant cultural institution with a focus on arts and heritage preservation. Technically, the website is built on WordPress CMS, utilizing popular plugins such as Yoast SEO, Slider Revolution, and WPBakery Page Builder. It integrates Google Analytics and Google reCAPTCHA for analytics and security respectively. The site is hosted under a Czech registrar and uses SSL encryption, ensuring secure communications. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and multilingual support. From a security perspective, the site employs HTTPS and reCAPTCHA but lacks explicit security headers and a published security or incident response policy. Privacy compliance is partially addressed with a GDPR information page, but no cookie consent mechanism is evident. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the website's claims and location, supporting its legitimacy. Overall, Werichova vila's website is a well-maintained cultural portal with good content quality and technical implementation. Enhancements in privacy compliance, security policy transparency, and security headers would further strengthen its security posture and user trust.

M

Městys Jince

jince.cz

48

Městys Jince operates an official municipal website serving the local community of Jince, Czech Republic. The site provides comprehensive information including news, public notices, event calendars, and contact details for municipal offices. It targets residents and visitors seeking local government services and updates. The business model is a governmental service portal with a focus on transparency and community engagement. Technically, the website uses a custom CMS platform likely provided by Galileo Corporation, leveraging technologies such as jQuery, Bootstrap, Swiper, and Highslide for UI components. The site is mobile optimized and accessible, with a clean navigation structure and good SEO practices. Performance is moderate, with room for optimization. From a security perspective, HTTPS is used, and cookie consent mechanisms are in place. However, no explicit security headers were detected, and no public security or incident response policies are available. The WHOIS data is missing, which reduces domain registration trustworthiness, but the website content and contact information strongly indicate legitimacy as a municipal government site. Overall, the site is well-structured and serves its purpose effectively, but improvements in security headers and public security policies are recommended to enhance trust and compliance.

V

Výměník1

vymenik1.cz

33

Výměník1 is a small cultural and community center based in the Czech Republic, offering event space rental and hosting various cultural projects and community events. The website serves as a hub for local cultural activities, providing an event calendar and information about ongoing projects. Technically, the site is built on WordPress with WooCommerce integration, using common libraries such as jQuery and Swiper.js for UI components. The hosting provider is Wedos, a reputable Czech hosting company. Security posture is moderate with HTTPS properly configured and Google reCAPTCHA implemented on forms, but lacks important security headers and explicit cookie consent mechanisms. Privacy policy and terms of service pages are present and appear GDPR compliant. Contact information is primarily via forms, with no explicit emails or phone numbers listed. Overall, the site is professionally designed with consistent branding and good user experience, targeting local community members and cultural event attendees.

Z

Zámek Osečany BUDE!

zamekbude.cz

48

Zámek Osečany BUDE! is a small-scale cultural heritage and tourism project focused on the restoration and promotion of the Osečany Castle in the Czech Republic. The website serves as an information portal for visitors, offering details about the castle's history, upcoming events, guided tours, and accommodation options. The business model is primarily non-profit with revenue streams from ticket sales and merchandise. The site is built on WordPress with WooCommerce integration, indicating a moderate level of digital maturity. Technical infrastructure includes modern plugins and a cookie consent mechanism ensuring GDPR compliance. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and headers. Overall, the website is professional, trustworthy, and well-targeted to its audience, with room for improvement in security and incident response transparency.

M

Město Dačice

dacice.cz

43

The website www.dacice.cz serves as the official online presence for the town of Dačice in the Czech Republic, providing comprehensive municipal information, news, and public services to residents and visitors. The site is well-structured with clear navigation and a broad range of content covering local government, community programs, and practical information. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, with a custom CMS indicated by versioned assets. The site is mobile-optimized and includes accessibility features, though these could be improved further. From a security perspective, the website enforces HTTPS and includes several important security headers, contributing to a good security posture. A cookie consent mechanism is implemented, supporting GDPR compliance to some extent. However, the absence of a publicly accessible privacy policy, terms of service, and incident response information represents gaps in compliance and transparency. The WHOIS data for the domain is unavailable, which reduces domain trustworthiness and transparency, although the website content and official nature mitigate some concerns. Overall, the site is a reliable and professional municipal resource with good technical implementation and security practices, but it would benefit from enhanced privacy documentation and domain registration transparency to strengthen trust and compliance.

M

Město Kutná Hora

kutnahora.cz

64

Město Kutná Hora operates an official municipal information portal serving citizens, entrepreneurs, and tourists. The website provides comprehensive information about city administration, cultural events, tourism, and local services. It holds a strong market position as the authoritative source for Kutná Hora city information, leveraging official branding and UNESCO heritage association. The portal supports multiple languages and integrates social media channels to enhance engagement. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various JavaScript libraries for UI components and analytics. The CMS identified is Marwel, a specialized platform. The site is mobile optimized with good SEO and accessibility features, though some improvements in security headers and incident response transparency are recommended. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with GDPR-aligned cookie management and privacy policy presence. Overall, the website is a trustworthy, well-maintained municipal portal with moderate technical sophistication and good user experience. The absence of WHOIS data slightly reduces domain trust but does not detract from the legitimacy of the site. Strategic improvements in security policy publication and header implementation would enhance the security posture further.

F

Festival Povaleč z.s.

povalec.cz

47

Festival Povaleč is a well-established cultural festival based in Valeč, Karlovy Vary region, Czech Republic, operating since 2006. The festival offers a diverse multi-genre program including music, theater, lectures, and children's activities, targeting local and regional audiences interested in cultural enrichment. The website reflects a professional and consistent brand image with strong multimedia content and social media integration. Technically, the site is built on WordPress with modern plugins and embeds, providing good mobile responsiveness and SEO optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and privacy policies are lacking. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the festival's public presence and history.

O

Obec Vrdy

obecvrdy.cz

53

Obec Vrdy operates an official municipal website serving the residents and visitors of the Vrdy municipality in the Czech Republic. The site provides comprehensive local government information including news, public notices, contact details, community events, and downloadable forms. It targets local citizens and stakeholders seeking municipal services and information. The website is well-structured with consistent branding and clear navigation, reflecting a professional government portal. Technically, the site employs a custom CMS likely based on Lego2, with modern JavaScript libraries such as jQuery, Bootstrap, Swiper, and Highslide for UI enhancements. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, some security best practices like security headers are missing, and no explicit vulnerability disclosure or security policy pages are present. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent implemented, but lacks advanced security headers and incident response contacts. The absence of WHOIS data for the domain reduces trustworthiness slightly, though the website content and official contact information support legitimacy. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is a functional and professional municipal portal with room for improvement in security practices and transparency. Strategic recommendations include adding security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

Z

Zámek Zruč nad Sázavou

zamek-zruc.cz

56

Zámek Zruč nad Sázavou is a cultural and historical site located in the Czech Republic, offering castle tours, exhibitions, cultural events, and visitor experiences primarily targeting tourists, families, and school groups. The website presents a professional and well-structured digital presence with good content quality and clear navigation. The technical infrastructure includes modern web technologies such as HTTPS, Google Analytics, Facebook Pixel, and a CMS platform called Solidpixels, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement by adding security headers and formal security policies. The absence of WHOIS data limits domain trust verification, but the website's content and external references support its legitimacy as a cultural institution. Overall, the site is safe, family-friendly, and compliant with privacy regulations.

C

CEA-Leti

leti-innovation-days.com

55

CEA-Leti is a prominent technology research institute under CEA, specializing in miniaturization technologies that enable smart, energy-efficient, and secure solutions for various industries. The website serves as a platform to promote and organize multiple semiconductor and technology innovation events globally, targeting industry professionals and researchers. Their market position is strong as a global leader in semiconductor innovation events, supported by a large organization and a consistent brand presence. Technically, the website is built on a modern WordPress CMS with Elementor and several event management plugins. It uses Cloudflare for DNS and serves content over HTTPS, ensuring a secure and reliable user experience. The site is moderately optimized for performance and mobile devices, with good SEO practices and accessibility features. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and advanced security headers like Content-Security-Policy. There is no visible security policy or incident response information, which could be improved. Privacy compliance is partially addressed with a privacy policy and GDPR links, but no cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in security and privacy compliance. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance their posture.

M

Mobibus

tisseomobibus.com

38

Tisséo Mobibus is a specialized transportation service catering to persons with reduced mobility in the Toulouse metropolitan area, operating under the Tisséo Collectivités umbrella. The website provides comprehensive information about their on-demand transport services, reservation systems, tariff details, and accessibility support. The digital presence is well-structured, leveraging WordPress with modern plugins and frameworks to deliver a user-friendly experience. The site is optimized for mobile and accessibility, reflecting the organization's mission. Security posture is solid with HTTPS and cookie consent management, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business and technical indicators suggest a trustworthy public service entity.

T

Tisseo Ingénierie

tisseo-ingenierie.fr

45

Tisseo Ingénierie is a French public local company specializing in the design and realization of sustainable transport infrastructure projects, primarily serving local authorities in the Toulouse metropolitan area. The company positions itself as a key regional player in transport engineering, focusing on innovative and environmentally friendly mobility solutions. Their website reflects a professional and well-structured digital presence, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. The site is well-designed, mobile-optimized, and provides clear navigation and relevant project information. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. The absence of WHOIS data slightly reduces domain trust but does not significantly impact overall legitimacy given the professional content and branding. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain transparency.

L

Le Grand Ouest Toulousain Agglomération

grandouesttoulousain.fr

51

Le Grand Ouest Toulousain Agglomération is a regional public government entity in France providing a range of community services including waste management, social services, urban planning, and mobility. The website serves as an official portal for residents and businesses within the agglomeration, offering information, online procedures, and public communications. The site is well-branded, professionally designed, and provides clear navigation and relevant content for its audience. Technically, it is built on Joomla CMS with modern libraries such as Bootstrap and jQuery, hosted by OVH, and uses HTTPS with Google Analytics for visitor tracking. The cookie consent mechanism is comprehensive and GDPR-aware, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the site is trustworthy and aligns well with its public sector mission.

A

Bienvenue en Muretain

agglo-muretain.fr

52

The website www.agglo-muretain.fr serves as an informational and promotional platform for the Muretain region in France, focusing on tourism, living, and entrepreneurship. It targets residents, tourists, and local entrepreneurs, positioning itself as a regional government or community resource. The site uses WordPress with Elementor and jQuery, indicating a moderate level of digital maturity with a basic but functional technical infrastructure. The content is safe, general audience appropriate, and the design is basic but consistent with regional promotional goals. However, the absence of privacy, cookie, and terms of service policies, as well as lack of contact information, limits its compliance and trustworthiness from a security and privacy perspective. The WHOIS data is missing, which raises concerns about domain legitimacy and registration transparency.

M

Microsoft Corporation

microsoft.fr

73

Microsoft Corporation operates a comprehensive and globally recognized technology website offering a wide range of products and services including Microsoft 365, Azure cloud services, Windows OS, Surface devices, Xbox gaming, and AI-powered tools like Copilot. The website targets both consumer and enterprise audiences, reflecting Microsoft's position as a global technology leader. The site demonstrates a mature digital infrastructure with advanced content management via Adobe Experience Manager and integrates modern analytics and marketing tools while maintaining strong privacy and security standards. Security posture is robust with HTTPS, security headers, and compliance with GDPR, supported by clear privacy and cookie policies. The domain is highly legitimate, consistent with Microsoft's brand, though WHOIS data is privacy protected, which is justified for a corporation of this scale. Overall, the website is professional, secure, and trustworthy, supporting Microsoft's market leadership and customer engagement strategies.

W

WS Interactive

ws-interactive.fr

55

WS Interactive is a well-established French web agency based in Toulouse, offering tailored digital solutions including website creation, mobile app development, SEO, and UX/UI design. With over 25 years of experience, the agency targets businesses seeking high-quality digital presence and marketing strategies. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital infrastructure. Technically, the site runs on WordPress with modern JavaScript libraries and employs analytics tools like Matomo and Google Tag Manager, alongside privacy-compliant cookie consent mechanisms. Security posture is solid with HTTPS and CAPTCHA protections, though explicit security headers and policies could be enhanced. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and compliance. Overall, WS Interactive demonstrates a strong market position in the technology sector with a focus on quality and client engagement.

P

Pays de La Loire Coopération Internationale

paysdelaloire-cooperation-internationale.org

49

Pays de La Loire Coopération Internationale operates as a regional multi-actor network dedicated to supporting international cooperation and solidarity projects within the Pays de la Loire region in France. The organization provides a comprehensive suite of services including networking, training, project support, and resource dissemination, positioning itself as a key regional player in the non-profit sector focused on international development and cooperation. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and SEO best practices to engage its target audience effectively. Technically, the website is built on WordPress with a robust tech stack including Bootstrap, jQuery, and various plugins for SEO, GDPR compliance, and user engagement. The site is mobile-optimized, accessible, and performs moderately well, with room for improvement in security headers and hosting transparency. Privacy compliance is well addressed with clear policies and consent mechanisms. From a security perspective, the site enforces HTTPS and employs cookie consent management, but lacks visible security headers and publicly available incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust verification, though the website content and partner affiliations suggest legitimacy. Overall, the site presents a low-risk profile with strong business credibility and privacy compliance, suitable for its non-profit mission. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving WHOIS transparency to bolster trust and security posture.

C

CAPTOGO

captogo.org

60

CAPTOGO is a French non-profit collective organization that unites various associations focused on Togolese community support and development. The website serves as an information hub, providing resources, event information, and networking opportunities for associations both in Europe and Togo. The organization appears to be well-established, with a domain registered since 2008, reflecting a stable presence in its niche. The target audience includes association members, donors, and individuals interested in Togolese affairs. Technically, the website is built on WordPress, utilizing common plugins such as Events Manager and Newsletter. The hosting is provided by o2switch, a French hosting provider, and the site uses HTTPS with a good SSL configuration. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Cookie consent is implemented with a blocking mechanism, indicating attention to privacy compliance. From a security perspective, the site employs HTTPS and basic security best practices but lacks advanced security headers and DNSSEC. There is no visible security policy or incident response information, and no vulnerability disclosure mechanism is present. The WHOIS data is consistent with the website's claims, showing a legitimate and long-standing domain registration. Overall, CAPTOGO's website is a well-maintained, legitimate non-profit platform with good content quality and moderate technical maturity. Security posture is adequate but could be improved with additional measures. Privacy compliance is basic but present. The site does not exhibit any suspicious or risky behavior, making it a trustworthy resource within its domain.

L

Lendosphere

lendosphere.com

64

Lendosphere is a French crowdfunding platform specializing in financing projects related to the energy and ecological transition. Established in 2014, it positions itself as a leader in responsible investment opportunities within the renewable energy sector. The platform offers investors the ability to directly fund green projects managed by recognized companies, emphasizing transparency and regulatory compliance. The website is professionally designed, mobile-optimized, and provides comprehensive information including risk disclosures, terms of service, and privacy policies in French. Technically, the site employs modern JavaScript libraries, Cloudflare DNS, and monitoring tools like New Relic, ensuring a stable and performant user experience. Security practices include HTTPS enforcement, domain transfer lock, and CAPTCHA protections, although DNSSEC is not enabled and no explicit security policy or incident response page is found. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

F

FAMILY ACE investiční společnost, a.s.

familyace.cz

48

Family Ace is a Czech investment management company specializing in managing investment funds in which they invest their own capital, emphasizing transparency, long-term relationships, and meaningful returns. The company targets investors seeking safer equity investments and operates primarily within the Czech financial sector. Their website reflects a professional and consistent brand image, providing clear information about their services, company background, and investor resources. The company was founded in 2021 and maintains a small but focused market presence.

L

Location Managers Guild International

locationmanagers.org

64

Location Managers Guild International (LMGI) is a well-established professional organization founded in 2003, serving experienced location professionals in the motion picture, television, commercial, and print production industries. The website provides comprehensive information about membership, industry awards, events, and news, positioning LMGI as a recognized guild within the media production sector. The organization targets location professionals and industry stakeholders, offering services such as networking, awards ceremonies, fam tours, and a digital magazine. The domain and website content are consistent, reflecting a credible and professional entity.

A

Association of Film Commissioners International

afci.org

60

The Association of Film Commissioners International (AFCI) is a well-established membership organization founded in 1975, serving the global film commission industry. It provides networking, education, and industry support services to film commissions, business affiliates, film liaisons, and producers worldwide. The website reflects a professional and consistent brand presence, with a focus on events, educational programs, and community engagement. The organization holds a strong market position as the largest network of its kind, primarily targeting media industry professionals and stakeholders. Technically, the website is built on WordPress using modern plugins such as Elementor, WooCommerce, and Yoast SEO, with integration of Google Analytics for user tracking. The site is hosted with Cloudflare DNS and uses HTTPS with a valid SSL certificate, ensuring secure communications. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with structured data and meta tags. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers. There is no publicly visible security policy or incident response information, and no privacy or cookie policies were found, indicating gaps in privacy compliance. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain is long-standing and consistent with the organization's history, supporting legitimacy. Overall, the website is professional, content-rich, and trustworthy but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

AT Computers a.s. operates the ATC Market website, a well-established e-commerce platform specializing in technology products such as computers, servers, and accessories. The company has a strong regional presence in Slovakia and the Czech Republic, supported by a network of partner retail sites. The website offers a comprehensive product catalog, user account features, and a mobile application, targeting both consumers and business customers. The business model focuses on retail and B2B sales with physical and online channels. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Owl Carousel, built on an ASP.NET MVC framework with a custom CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit incident response contacts are provided. The domain registration is consistent with the business identity, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, serving its target audience effectively.

S

Studio Soa Be srl

studiosoa.be

44

Studio Soa Be is a small Brussels-based micro communication agency specializing in social, cultural, and artistic projects. The business is led by Jérôme Hubert, an independent communication officer, WordPress expert, and photographer. The website is built on WordPress using Elementor and jQuery, reflecting a modest but functional digital presence. The technical infrastructure is standard for small agencies, with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. The WHOIS data shows an anomalous domain creation date set in the future, which raises questions about data accuracy or domain legitimacy. Overall, the website is safe, professional, and targeted at clients seeking communication services in Brussels, but it would benefit from enhanced security practices and compliance documentation.

P

PC Presse

linformaticien.com

63

L'Informaticien is a French professional media portal focused on IT and cybersecurity news, targeting IT managers and professionals. It is operated by PC Presse and offers a range of services including news articles, videos, newsletters, and subscription options. The website is well-structured and uses Joomla CMS with modern web technologies, providing a good user experience and mobile optimization. Security measures include HTTPS and hCaptcha for form protection, though some security headers are missing. The absence of WHOIS data for the domain is a concern and should be investigated further to confirm domain legitimacy. Overall, the site presents a professional and trustworthy front for its target audience.

K

Kinsta Inc.

kinsta.com

78

Kinsta Inc. is a well-established managed WordPress hosting provider founded in 2013, offering enterprise-grade hosting solutions with a strong focus on performance, security, and customer support. The company serves a broad audience including agencies, enterprises, and small to medium businesses, positioning itself as a leader in the WordPress hosting market with numerous awards and a large customer base. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, Kinsta leverages Google Cloud Platform infrastructure, Cloudflare integration, and modern web technologies to deliver fast and reliable hosting services. Security posture is robust, supported by certifications such as SOC 2 Type II and ISO 27001, and includes advanced protections like managed WAF, DDoS mitigation, and secure backups. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site and business demonstrate high professionalism, trustworthiness, and technical maturity.

A

Active Citizens Fund

activecitizensfund.cz

10

Active Citizens Fund is a Czech Republic-based non-profit grant program focused on strengthening civil society, promoting openness, tolerance, and citizen participation in public policy. The website presents a professional and consistent brand image, targeting NGOs, vulnerable groups, and civic activists. The program is supported by EEA and Norway Grants, indicating a reputable funding source. Technically, the site is built on WordPress with common plugins for GDPR compliance and user experience enhancements. The presence of Google Tag Manager indicates moderate analytics and tracking capabilities. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a concern for domain transparency but does not detract significantly from the site's legitimacy given the content and social media presence. Overall, the site is well-structured, accessible, and trustworthy for its intended audience.

Komunitní plánování Ostrava is a Czech non-profit organization focused on community planning of social services tailored to the needs of Ostrava citizens. The website serves as an information portal providing news, event calendars, and resources related to social service planning and community engagement. It maintains a network of partner organizations and offers structured content in Czech language. Technically, the site is built on WordPress CMS with plugins for event management and GDPR compliance, and uses Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving its community-focused mission effectively.

L

Léa Nature

corporate-leanature.com

65

Léa Nature is a French company specializing in the manufacturing and online retail of organic and natural products, including food, cosmetics, dietary supplements, and household items. The website serves as an e-commerce platform built on Magento, targeting general consumers interested in organic and natural lifestyle products. The company appears to have a strong market presence in France with a professional and consistent brand image. Technically, the website uses a modern e-commerce stack with various third-party extensions and monitoring tools such as New Relic. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and monitoring in place, but lacks some recommended security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy. Overall, the website is professional and trustworthy but could improve transparency and security practices.

R

Région Centre-Val de Loire

europeocentre-valdeloire.eu

23

Europe O Centre-Val de Loire is an official regional platform operated by the Région Centre-Val de Loire, France, providing comprehensive information and access to European funding programs for project holders in the region. The website serves as a gateway to identify funding opportunities, access calls for projects, and prepare funding applications, supported by official regional and European Union branding. The platform targets residents and organizations in the Centre-Val de Loire region seeking European financial support for development projects. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WP Rocket for optimization, with a responsive design and accessibility considerations. It employs Matomo analytics with a strong cookie consent mechanism via Tarteaucitron, reflecting good privacy compliance. The site uses HTTPS with strong SSL configuration and security headers, although explicit security policy and incident response pages are not found. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS registrant data is consistent with EURid policies for .eu domains and does not detract from the legitimacy of the site, which is well-branded and professionally maintained. Overall, the site demonstrates a high level of trustworthiness, compliance, and technical maturity. Recommendations include publishing explicit security and incident response policies, implementing a security.txt file for vulnerability disclosure, and continuing regular security audits of third-party scripts and forms to maintain a strong security posture.

C

Clermont Auvergne Métropole

clermontmetropole.eu

10

Clermont Auvergne Métropole is a public metropolitan government entity serving 21 communes in the Clermont-Ferrand region of France. The website provides comprehensive information on urban planning, waste management, mobility, cultural activities, and ecological transition initiatives. It targets residents and stakeholders within the metropolitan area, offering services and resources relevant to local governance and community development. The site is positioned as a key regional authority with a broad scope of public services.

C

CAVP (Caisse d'assurance vieillesse des pharmaciens)

interpharmaciens.fr

58

InterPharmaciens is a French financial aid program dedicated to supporting young pharmacists, biologists, and pharmacy owners in their first installations by providing complementary financial contributions through subordinated obligations. The program is offered by the CAVP and managed by ESFIN Gestion, targeting independent pharmacy professionals across metropolitan France and overseas regions. The website presents detailed information about the aid philosophy, eligibility, financial terms, and application process, supported by testimonials and partner logos, establishing a credible and professional presence. Technically, the website employs standard modern web technologies including Bootstrap, jQuery, and Font Awesome, ensuring mobile responsiveness and a good user experience. However, there is no evidence of advanced CMS or analytics tools, and performance is moderate. The site lacks privacy and cookie policies, which is a notable compliance gap. Security headers and SSL configuration details are not provided, limiting the assessment of security posture. From a security perspective, the site does not expose sensitive data or contain forms collecting personal information, reducing immediate risk. However, the absence of security headers and privacy policies suggests room for improvement in compliance and security best practices. WHOIS data is unavailable, likely due to privacy protection, but the domain and content appear consistent with a legitimate French healthcare financial aid service. Overall, the website is trustworthy and professionally presented but should enhance privacy compliance and security measures to improve its security posture and regulatory adherence.

R

Realytics

realytics.io

71

Realytics is a technology company specializing in TV analytics and total video measurement solutions designed to measure the advertising impact of cross-media TV campaigns. Positioned as a leading provider in this niche, Realytics targets advertisers, marketing professionals, and media agencies seeking data-driven insights to optimize their video advertising strategies. The website reflects a professional B2B SaaS business model with a focus on analytics services. Technically, the site is built on WordPress using modern themes and plugins such as Divi and Elementor, with integrated marketing and analytics tools including Google Analytics and LinkedIn Insight. The site demonstrates good SEO practices and mobile optimization, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and cookie consent implemented, but could benefit from additional security headers and a formal vulnerability disclosure policy. Overall, the domain appears legitimate though WHOIS data is privacy protected, which is common for tech companies. No critical security issues or content safety concerns were identified.

P

Pour la Solidarité

transition-europe.eu

42

The website 'Observatoire européen de la Transition' is a French-language platform operated by the non-profit organization Pour la Solidarité, based in Brussels, Belgium. It serves as an information and strategic monitoring hub focused on just and equitable transition initiatives across Europe. The platform offers news, event agendas, resources, and actor information relevant to social and ecological transition stakeholders. Supported by European and regional authorities, it targets professionals and policymakers interested in sustainable development and social economy. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google Analytics for tracking. The design is professional, mobile-optimized, and content-rich, providing a good user experience with clear navigation. Security posture is solid with HTTPS enforced, though explicit security headers and incident response policies are absent. Privacy compliance is basic, with privacy and cookie policies present but lacking active consent mechanisms. Overall, the domain registration is consistent and trustworthy, with no signs of suspicious activity. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism, and adding vulnerability disclosure information to strengthen trust and compliance.