Security Directory

P

Pour la Solidarité

diversite-europe.eu

43

The website 'Observatoire européen de la Diversité' is a French-language platform operated by the non-profit organization Pour la Solidarité, based in Belgium. It serves as an information and strategic monitoring hub focused on diversity issues across Europe, targeting professionals, public decision-makers, and citizens. The platform offers news, events, publications, and resources related to social economy and diversity, positioning itself as a niche observatory with strong ties to European and regional institutions. Technically, the site is built on WordPress using Elementor, with integration of Google Analytics and social media channels, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Overall, the site is professional, trustworthy, and content-rich, suitable for its target audience.

P

Pour la Solidarité

ess-europe.eu

10

The website ess-europe.eu serves as a European observatory and information platform dedicated to the social economy and social entrepreneurship sectors. It is an initiative of the non-profit organization Pour la Solidarité, targeting private and public stakeholders interested in alternative economic models. The platform offers news, events, publications, and good practices to support and inform its audience. The site is professionally designed, primarily in French, and supported by European and regional authorities, enhancing its credibility and trustworthiness. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies including jQuery and Google Analytics for user tracking. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses standard modern libraries, but lacks explicit security headers and published security or incident response policies. There is no visible vulnerability disclosure or security.txt file. Privacy compliance is partially addressed with a privacy and cookie policy page, but no active cookie consent mechanism is implemented. Contact information is available, including a phone number and physical address, but no direct contact emails are exposed. Overall, the website presents a low risk profile with a solid business credibility and good content quality. Strategic improvements include enhancing security headers, publishing security policies, implementing cookie consent mechanisms, and improving accessibility to strengthen compliance and user trust.

G

GenerateBlocks

generateblocks.com

63

GenerateBlocks is a specialized WordPress plugin company offering a lightweight collection of blocks designed to enhance the WordPress editor without bloat. Founded in 2020, it targets WordPress users and developers seeking performance-optimized, flexible design tools. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Stripe for payments and Easy Digital Downloads for commerce. The technical infrastructure is robust, leveraging WordPress CMS, GeneratePress theme, and Cloudflare DNS services. Security posture is solid with HTTPS enforced and domain security flags set, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. No contact emails or phone numbers are publicly listed, which may affect direct user trust. Overall, the site is trustworthy, performant, and well-positioned in its niche.

C

Coopérative d'Installation en Agriculture Paysanne Pays de la Loire

ciap-pdl.fr

48

CIAP Pays de la Loire is a cooperative dedicated to supporting agricultural installation projects in the Pays de la Loire region of France. The organization offers key services including a one-year creative farmer training program, activity incubation (portage d’activités), and permanent test spaces for aspiring farmers. The cooperative aims to secure project leaders, involve local authorities, and promote sustainable peasant agriculture. The website reflects a regional cooperative with a clear mission to facilitate agricultural entrepreneurship and innovation. Technically, the website is built on WordPress using Elementor and several plugins for enhanced functionality, including GDPR compliance and analytics. Hosting is provided by OVH, a reputable provider. The site is mobile-optimized and uses HTTPS with a good SSL configuration. However, some security headers are missing, and no explicit security or incident response policies are published. Security posture is moderate with best practices like HTTPS and reCAPTCHA in place, but improvements are recommended in security headers and formal policies. Privacy compliance is partial due to the absence of a visible privacy policy page, though cookie consent is implemented. Business credibility is high, supported by consistent domain registration, professional content, and social media presence. Overall, the website is a trustworthy and professional platform for its niche cooperative, with room for improvement in privacy and security transparency.

C

CNCRES

cncres.fr

57

CNCRES operates as a French platform connecting socially and ecologically responsible companies with job seekers and employees seeking meaningful work. The website presents a niche business model focused on employment with ethical and environmental values, targeting a French-speaking audience. The platform offers company presentations, job connection services, and publishes articles related to workplace well-being and business development. Technically, the website is built on WordPress using the GeneratePress theme and includes common libraries such as jQuery. It uses Sendinblue for email marketing. The site is mobile-optimized, accessible, and SEO-friendly with structured data implemented. Performance is moderate, and the site uses HTTPS with a good SSL configuration. From a security perspective, the site enforces HTTPS and uses secure forms with nonce tokens. However, it lacks important security headers and does not provide a security policy or incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trustworthiness. Overall, CNCRES presents a professional and trustworthy platform with room for improvement in security headers, privacy compliance, and transparency regarding incident response. The absence of WHOIS data is a minor concern but does not outweigh the positive indicators from the website content and structure.

I

Institut des Territoires Coopératifs (InsTerCoop)

instercoop.fr

61

Institut des Territoires Coopératifs (InsTerCoop) is a French non-profit organization dedicated to action-research on cooperative processes and providing resources to individuals, organizations, and territories to enhance cooperative maturity. The website serves as a resource center offering publications, educational content, and multimedia productions to support cooperative development and social innovation. The organization is small-sized, founded in 2016, and positions itself as a niche player in cooperative research and development within France. Technically, the website is built on WordPress, leveraging common plugins such as Yoast SEO for optimization, Google Analytics for traffic analysis, and Sendinblue (Brevo) for marketing automation. The site is hosted by OVH, a reputable French hosting provider. Performance is moderate with basic mobile optimization and accessibility features. SEO practices are good, with proper metadata and structured data implemented. From a security perspective, the site uses HTTPS and employs Google reCAPTCHA on forms to prevent spam. However, it lacks security headers such as Content-Security-Policy and Strict-Transport-Security, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security practices. There is no evidence of WAF or content blocking, and the content is safe for general audiences.

A

Apec

apec.fr

69

Apec is a prominent French organization specializing in employment services for executives and recruitment consulting. The website offers a comprehensive range of services including job offers, career advice, recruitment tools, and consulting support through a network of 500 consultants across France. The site targets both candidates seeking executive positions and recruiters looking for qualified profiles. The business model revolves around facilitating executive employment and providing professional consulting services, positioning Apec as a key player in the French employment market. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and OneTrust for cookie consent, built on the Jahia CMS platform. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience and professional presentation. From a security perspective, the site enforces HTTPS, uses secure login forms, and implements cookie consent mechanisms. However, it lacks some advanced security headers and does not publicly disclose a security policy or incident response contacts. The absence of WHOIS registration details slightly impacts trust but is mitigated by the professional nature of the site and clear contact information. Overall, Apec's website is a well-structured, secure, and user-friendly platform that effectively supports its business objectives. Strategic improvements in security transparency and WHOIS data disclosure could further enhance trust and compliance.

F

Fédération Nationale des CUMA

cuma.fr

63

The Fédération Nationale des CUMA (FNCuma) is a well-established French non-profit federation representing nearly half of the country's farmers through agricultural cooperatives known as Cuma. The organization provides advocacy, training, communication, and management support services to its members, playing a vital role in the agricultural sector's social and economic fabric. The website reflects a mature digital presence with comprehensive content, clear navigation, and a professional design tailored to its target audience of farmers and agricultural stakeholders. Technically, the site is built on WordPress with modern plugins and performance optimizations, ensuring fast loading and good mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy and professional, though the absence of WHOIS data slightly reduces domain trust. Strategic recommendations include enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen trust and compliance.

ESFIN Gestion is a French fund management company specializing in capital investment for enterprises within the Social and Solidarity Economy (ESS) and impact-driven sectors. Affiliated with Crédit Coopératif (Groupe BPCE), ESFIN focuses on long-term equity financing for non-listed companies, managing multiple investment vehicles dedicated to various niches within the ESS and impact ecosystem. The website reflects a professional and consistent brand image, with clear messaging targeting socially conscious enterprises and investors. Technically, the site is built on WordPress using modern plugins such as Elementor and Yoast SEO, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and formal security policies are absent. WHOIS data is unavailable, limiting domain trust analysis, but the affiliation with a reputable banking group and professional content mitigate concerns. Overall, ESFIN Gestion presents a credible and trustworthy digital presence aligned with its business objectives.

L

Les Canaux

ess2024.org

57

ESS 2024 is a non-profit program managed by Les Canaux, designed to leverage the Paris 2024 Olympic Games as a catalyst for sustainable economic development focused on social and circular economy enterprises. The program acts as an intermediary connecting public and private order givers with small and medium-sized enterprises committed to social impact, ensuring that economic benefits from the Games extend to local territories and socially responsible businesses. Supported by major stakeholders including Paris 2024 and SOLIDEO, ESS 2024 has gained recognition from the OECD as a leading European initiative in this sector. Technically, the website is built on WordPress using WPBakery Page Builder, with integrations of Google Analytics, Google Tag Manager, and accessibility tools like UserWay. The hosting provider is OVH sas, a reputable French hosting company. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and domain protections in place, but could be improved by enabling DNSSEC and adding security headers. From a security and compliance perspective, the site includes a cookie consent mechanism and a privacy policy consistent with GDPR requirements. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are found. The WHOIS data is transparent and consistent with the business timeline and claims, enhancing trustworthiness. Overall, ESS 2024 presents a professional, trustworthy, and well-maintained digital presence aligned with its mission to promote social economy enterprises in the context of the Paris 2024 Olympic Games. Strategic improvements in security headers and disclosure policies could further strengthen its security posture.

C

CoopVenture

coopventure.fr

54

CoopVenture is a French investment fund specializing in evergreen and participative financing for innovative companies that engage their employees in ownership and decision-making. Founded in 2016, it operates with a long-term horizon of at least seven years, focusing on sustainable development and local employment. The website reflects a niche market position combining cooperative values with the French Tech ecosystem, offering financing up to 400 K€ and business acceleration services. Technically, the site is built on WordPress with common plugins and uses Google Analytics for tracking. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and published security policies. No direct contact emails or phone numbers are provided, relying on a contact form instead. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional and trustworthy but could enhance transparency on security and privacy policies.

M

Mieux Vivre

mieuxvivre54.org

45

Mieux Vivre is a French non-profit association dedicated to environmental protection, promotion of organic and local food, and community activities in the Gorcy region. Established since 2004, the association has a strong local presence with a focus on ecological transition and pollution monitoring. The website serves as an information hub with event calendars, photo galleries, and partner links, targeting local residents and ecological activists. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and user experience. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers and DNSSEC are missing. The domain registration is consistent with the association's history, enhancing trustworthiness.

AT Computers a.s. operates the ATC Market e-commerce platform, specializing in technology and electronic products such as computers, servers, accessories, and related IT equipment. The company targets both retail consumers and business clients primarily in the Czech Republic and Slovakia, supported by a network of partner companies and subsidiaries. The website demonstrates a mature digital presence with a comprehensive product catalog, mobile applications, and clear business information. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Owl Carousel, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and explicit security policies are recommended. The absence of WHOIS data limits domain trust analysis, but the overall business credibility and content quality support a positive risk assessment. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to strengthen trust and compliance.

C

Copernicus

copernicus.eu

11

Copernicus is the European Union's flagship Earth observation program, providing environmental data and services for the benefit of European citizens and public authorities. The website reflects a mature digital presence with a professional design, multilingual support, and comprehensive content focused on environmental monitoring, climate change, security, and emergency management. The program collaborates with major European agencies and institutions, reinforcing its authoritative market position. Technically, the site is built on Drupal 10, leveraging modern JavaScript libraries and analytics tools such as Matomo, with a strong emphasis on GDPR compliance and user privacy. The infrastructure supports good performance, mobile responsiveness, and accessibility, although some security headers could be improved. Security posture is solid with HTTPS enforced and privacy-conscious cookie management, but the absence of explicit vulnerability disclosure and incident response contacts suggests room for enhancement. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and stable platform. Overall, Copernicus.eu represents a high-quality, secure, and compliant government service website with strong business credibility and technical maturity, suitable for its broad public and institutional audience.

M

Mercator Ocean International

mercator-ocean.fr

58

Mercator Ocean International is an intergovernmental organization dedicated to providing digital ocean systems and information services, endorsed by multiple European countries and linked with the UN Ocean Conference. The organization delivers global ocean data, monitoring, forecasting, and scientific insights to support climate action and ocean health. The website is professionally designed using WordPress and Elementor, with a strong focus on oceanographic data and community coordination. Social media presence and official endorsements enhance its credibility. Technically, the site uses modern web technologies and analytics tools like Matomo, ensuring moderate user tracking with some privacy considerations. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is partial, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy, authoritative, and well-positioned in its niche, but could enhance transparency and compliance aspects.

L

Léa Nature

leanature.com

9

Léa Nature operates a professional e-commerce website specializing in organic and natural products including food, cosmetics, dietary supplements, and household items. The website is well-structured, primarily in French, and targets consumers interested in healthy and eco-friendly products. The business appears to be established with a consistent brand presence and a comprehensive online catalog. Technically, the site is built on Magento CMS, leveraging modern JavaScript libraries and monitoring tools such as New Relic. The site is served over HTTPS with appropriate security headers, indicating a good security posture. Privacy and cookie policies are present and appear to comply with GDPR requirements. However, the absence of WHOIS domain registration data and lack of explicit security policy or incident response information slightly reduce the overall trustworthiness from a security and compliance perspective.

L

LEA NATURE

recrutement-leanature.com

59

Léa Nature is a well-established French company specializing in organic products, operating a dedicated recruitment website to attract talent across multiple disciplines such as commercial, R&D, marketing, supply chain, production, and support functions. The website serves as a professional portal for job seekers interested in joining the group, showcasing company culture, job offers, and career opportunities. The site is built on WordPress, leveraging modern web technologies and plugins to ensure good performance, SEO, and GDPR compliance. The presence of Google Tag Manager, Hotjar, and Facebook/LinkedIn tracking pixels indicates a mature digital marketing and analytics setup. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response disclosures. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives.

C

Compagnie Léa Nature

compagnie-leanature.com

60

Compagnie Léa Nature is a prominent French manufacturer specializing in organic and natural products across food, health, beauty, and home care sectors. Established in 1993, the company operates as a collective of family-owned businesses united by a commitment to bio-responsibility and sustainability. Their market position is strong as the leading French manufacturer in their niche, supported by a diverse portfolio of brands and active philanthropic engagement in environmental and social causes. The website reflects a professional and comprehensive digital presence, optimized for performance, accessibility, and SEO, leveraging WordPress and modern web technologies. Security measures include HTTPS, GDPR-compliant cookie management, and anti-bot protections, although some security headers could be enhanced. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature security posture and compliance with privacy regulations, supporting the company's credibility and trustworthiness.

L

Léa Nature

leanatureboutique.com

9

Léa Nature operates a French e-commerce platform specializing in organic products, offering promotions and a variety of organic brands. The website is built on Magento 2 with several extensions enhancing user experience and marketing capabilities. The technical infrastructure includes modern JavaScript libraries and monitoring tools such as New Relic and Google Tag Manager, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and monitoring in place, though explicit security headers and privacy policies are not clearly presented. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, but the website content and branding suggest a professional and established business. Overall, the site is suitable for general audiences with no adult or questionable content detected.

W

WebHouse, s.r.o.

mlady-vedec.eu

41

Mladý vedec is a Slovak-based e-commerce retailer specializing in scientific and technical toys, educational kits, and related products aimed at children, students, and educators. The website offers a broad range of categories including physics, biology, astronomy, robotics, and chemistry, positioning itself as a niche educational toy provider in Slovakia. The business model focuses on online sales with a clear target audience interested in educational and science-related products. The site is branded consistently and provides clear contact information, enhancing trustworthiness.

C

Collabora Online and Collabora Office

collaboraoffice.com

72

Collabora Online and Collabora Office provide a comprehensive open-source online document editing suite designed for secure, collaborative editing controlled by the user. The company targets businesses and organizations requiring enterprise-grade document collaboration solutions, offering products such as Collabora Online, Collabora Office desktop applications, mobile apps, and large deployment controllers. Their market position is that of an established technology provider in the open-source productivity software space, supported by a strong partner and integration ecosystem. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, and integrates analytics and marketing tools such as Matomo and Mautic. The site is well-optimized for SEO, mobile-friendly, and accessible, reflecting a mature digital infrastructure. However, some security best practices like explicit security headers and published security policies are not evident. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible privacy and cookie policies and incident response information. The absence of WHOIS registration data reduces trust slightly, though the professional presentation and partner ecosystem support legitimacy. No critical vulnerabilities or adult content were detected. Overall, the website demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and improving contact information visibility to strengthen trust and compliance.

Media Business Insight Limited is a prominent content, insight, and events company serving the creative media industry, particularly in TV, film, and advertising sectors. It operates under the parent company GlobalData Group and offers market-leading brands that provide essential industry information and networking opportunities. The website showcases a professional team and a broad range of services including media databases and event hosting. Technically, the site is built on WordPress with common plugins and libraries, featuring a cookie consent mechanism and HTTPS encryption. However, Google Analytics is present but not configured, and no security headers were detected, indicating room for security improvements. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and branding suggest legitimacy. Overall, the site is well-designed, mobile-optimized, and targets media professionals globally.

C

Competence Centrum Behindertenhilfe (CCB)

versicherungsstelle-ccb.de

53

The Competence Centrum Behindertenhilfe (CCB) operates a specialized insurance information and consulting website focused on people with disabilities, chronic illnesses, and seniors in Germany. The site provides tailored insurance solutions, expert advice, and application support, positioning itself as a niche provider in this sector. The business model centers on delivering accessible, targeted insurance services and educational resources to affected individuals, their caregivers, and institutions. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including JavaScript, Google reCAPTCHA for form security, and accessibility tools such as ReadSpeaker. The site demonstrates good mobile optimization, accessibility features, and SEO practices, hosted on Onix infrastructure with secure HTTPS configuration. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and published incident response policies. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-targeted, with moderate technical sophistication and a solid security baseline. Improvements in privacy compliance and security policy transparency would further strengthen its posture and user trust.

I

Inbound Back Office

inboundbackoffice.com

45

Inbound Back Office is a service provider specializing in white-label virtual assistant and marketing support services tailored for marketing agencies, fractional CMOs, and small businesses. The company positions itself as a scalable and seamless support partner, trusted by hundreds of teams globally to handle marketing execution and administrative tasks without the complexities of hiring. Their website reflects a professional and consistent brand image with clear messaging and client testimonials that reinforce trust. Technically, the website leverages modern front-end technologies including Bootstrap, Tailwind CSS, jQuery, and integrates marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot. The site is built on Zephyr CMS and demonstrates good mobile optimization and user experience. However, some areas such as accessibility and SEO could be improved. Security-wise, HTTPS is properly implemented, but the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and protection. The security posture is moderate with no immediate vulnerabilities detected in the visible content, but the lack of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. This discrepancy between professional website content and missing domain registration information suggests the need for further verification. Overall, the site is functional and credible from a business perspective but requires improvements in privacy compliance and security best practices. Strategically, the company should prioritize establishing clear privacy and cookie policies, implement security headers, and resolve WHOIS registration transparency to strengthen trust and compliance. Enhancing accessibility and SEO will also improve user reach and satisfaction.

A

Akademie klasické homeopatie, spol. s r.o.

studujtehomeopatii.cz

42

Akademie klasické homeopatie, spol. s r.o. is a Czech Republic-based educational organization specializing in professional homeopathy training for medical professionals and the general public. The website offers detailed information about courses, seminars, congresses, and online lectures led by an experienced homeopath. The company has a clear market position with over 32 years of experience in the field. Technically, the website uses a modern JavaScript and CSS stack with responsive design and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and secure login forms, but lacks advanced security headers and explicit privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and company registration details support legitimacy. Overall, the site is professional, informative, and trustworthy for its target audience.

T

terre d'Oc

terredoc.com

67

terre d'Oc operates an e-commerce website powered by PrestaShop, offering products under the terre d'Oc brand. The site targets general consumers interested in retail products, providing a professional and well-branded online shopping experience. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Klaviyo, and Cookiebot for consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and visible security policies. The absence of WHOIS data raises concerns about domain legitimacy, which impacts overall trust. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation.

M

Mercator Ocean International

mercator-ocean.eu

58

Mercator Ocean International is an intergovernmental organization dedicated to providing digital ocean systems and information services. It operates as a public service delivering ocean data, supporting international cooperation, and advancing ocean prediction initiatives. The organization is endorsed by multiple European governments and actively participates in global ocean health and climate monitoring efforts. The website reflects a professional and consistent brand presence with comprehensive ocean-related content targeting governments, researchers, and civil society stakeholders. Technically, the website is built on a modern WordPress platform using Elementor and Yoast SEO, with multilingual support via WPML. It employs Matomo analytics and social sharing tools, indicating a mature digital infrastructure. The site is mobile optimized and accessible, with good SEO practices, though some improvements in security headers and privacy compliance are recommended. Security posture is solid with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit privacy and cookie policies, security headers, and incident response information suggests areas for enhancement. The domain WHOIS data is privacy protected by EURid, which is typical for .eu domains and justified for this type of organization. Overall, the website presents a trustworthy and authoritative presence in the ocean data and intergovernmental domain, with recommendations to improve transparency and privacy compliance to further strengthen user trust and security posture.

C

Climat Médias - Pour plus de climat dans les médias

climatmedias.org

63

Climat Médias is a French non-profit association dedicated to increasing and improving climate and biodiversity coverage in the media. They provide media monitoring data, conduct journalist training, advocate through petitions, and engage citizens to raise awareness. The website is built on WordPress with modern SEO and privacy compliance features, including a cookie consent mechanism and a comprehensive privacy policy. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and some security headers could be improved. Contact is primarily via email and contact forms, with active social media channels. Overall, the site is professional, trustworthy, and well-aligned with its mission.

S

Storck Romania

toffifee.ro

67

The website www.toffifee.ro represents the Romanian localized brand presence of Toffifee, a confectionery product under the Storck group. It provides product information, brand storytelling, and consumer engagement primarily targeting Romanian consumers interested in confectionery. The site is built on TYPO3 CMS and uses modern JavaScript libraries such as RequireJS, jQuery, and Lodash, indicating a moderate level of technical maturity. The design is professional, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Privacy compliance is well addressed with a visible privacy policy and cookie consent mechanism. However, direct contact emails and phone numbers are not explicitly listed on the homepage, relying instead on a contact form.

F

FVI | Solutions et logiciels pour la gestion de patrimoine

fvi.fr

10

FVI is a French company specializing in providing software solutions for wealth management. The website presents a professional image with a clear focus on asset and wealth management software targeted at professionals and individuals interested in managing their patrimony. The company operates in the technology sector with a niche focus on financial software solutions. The website is built on WordPress using the Astra theme and WooCommerce for e-commerce capabilities, enhanced with Elementor for page building. It integrates Google Tag Manager and Google reCAPTCHA, indicating a moderate level of digital maturity and attention to user interaction and security. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although additional security headers could improve protection. The absence of WHOIS data suggests privacy protection, which is common for small technology firms. Overall, the website is well-structured, GDPR compliant, and trustworthy, though it lacks explicit contact emails and phone numbers, relying on contact forms instead.

K

Kolektor

kolektoravtomatizacija.com

44

Kolektor is a well-established company specializing in automation and engineering solutions for industry, energy, and infrastructure sectors. The website highlights their expertise in digitalization of production processes, energy management systems, and electrical equipment. They emphasize over 30 years of experience and a strong partnership network with global manufacturers, positioning themselves as a leading provider in their market segment. The business model focuses on delivering turnkey solutions, consulting, and technical support to industrial and energy clients. Technically, the website employs modern web technologies including Google Tag Manager, reCAPTCHA, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS and CAPTCHA protections, though additional security headers and published policies could enhance trust. The absence of WHOIS data for the domain is a notable concern, potentially impacting domain legitimacy verification. Overall, the site is professional, content-rich, and safe for general audiences, supporting Kolektor's strong market presence.

K

Kolektor

kolektorwater.com

48

Kolektor is a medium-sized Slovenian company specializing in water technologies, providing comprehensive engineering solutions for water preparation, purification, telemetry, and system optimization. The company is part of the larger Kolektor Group and collaborates with several subsidiaries and partners to deliver advanced water management solutions. The website reflects a professional and consistent brand image targeting B2B clients such as municipalities, industrial water users, and technology partners. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and reCAPTCHA for security and analytics, hosted on a CMS platform with good mobile optimization and SEO practices. Security posture is solid with HTTPS and spam protection, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data is a notable anomaly, slightly reducing trust but not detracting significantly from the overall legitimacy. Privacy and cookie policies are present and GDPR compliant, with clear consent mechanisms. Overall, the website is well-designed, user-friendly, and trustworthy for its intended audience.

A

Association Mieux Vivre

foirebiogorcy.eu

43

The website foirebiogorcy.eu represents the Foire Bio de Gorcy, an annual organic fair held in Gorcy, France, organized by the independent association Mieux Vivre since 1996. The event targets visitors and exhibitors interested in organic products from France and neighboring countries, offering free entry and promoting local producers. The site is built on WordPress using Astra theme and Elementor, with standard plugins for forms, cookie consent, and Google reCAPTCHA. While the site is functional and well-structured, it lacks a formal privacy policy and terms of service pages, and the Google Analytics plugin is present but not configured. Security posture is adequate with HTTPS and reCAPTCHA but could be improved with additional headers and policies. Overall, the site is trustworthy and serves its purpose effectively with room for compliance and security enhancements.

Bio 46 is a regional non-profit association dedicated to supporting organic farmers in the Lot department of France. The website serves as a resource hub offering information, training access, and community networking for organic agriculture stakeholders including farmers, local businesses, collectives, and consumers interested in organic products. The organization positions itself as a key regional player in promoting organic farming practices and sustainable agriculture. Technically, the website uses a traditional stack including jQuery, Bootstrap 3, and Font Awesome, hosted by OVH. The site is accessible, moderately performant, and has basic mobile optimization. However, it lacks modern CMS indicators and advanced SEO or accessibility features. No analytics or tracking scripts were detected, indicating a minimal data collection approach. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are compliance gaps especially under GDPR. No incident response or security contact information is provided. The domain registration is consistent and transparent, supporting the legitimacy of the site. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and better mobile and accessibility optimizations to strengthen trust and user experience.

S

Sologne Nature Environnement

sologne-nature.org

57

Sologne Nature Environnement is a well-established non-profit association dedicated to the protection and promotion of nature and the environment in the Sologne region of France. With over 40 years of expertise, the organization offers a variety of services including biodiversity studies, public and school educational programs, environmental consulting, and community engagement through events and advocacy. The website reflects a mature digital presence with clear branding, contact information, and active social media channels. Technically, the site is built on Joomla CMS with modern front-end technologies and includes interactive features such as event calendars and maps. Security posture is generally good with HTTPS enforced and cookie consent implemented, though some security headers and formal policies are missing. The absence of WHOIS data limits domain trust verification, but the overall content and transparency support legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving domain registration transparency.

C

Château de la Bourdaisière · Hôtel de charme *** · Val de Loire

labourdaisiere.com

10

Château de la Bourdaisière is a boutique 3-star hotel located in the Loire Valley, France, offering a blend of hospitality, cultural exhibitions, and leisure activities. The website presents a professional and rich user experience with detailed information about accommodations, dining options, events, and unique experiences such as the tomato-themed attractions. The business targets tourists and visitors seeking a charming and culturally immersive stay in the region. Technically, the site is built on WordPress using Elementor and integrates several plugins for event management and booking, supported by Google Analytics and Facebook Pixel for marketing and analytics. Security posture is generally good with HTTPS and secure booking integration, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the WHOIS data for the domain is missing or not publicly available, which raises concerns about domain registration legitimacy. Overall, the website is trustworthy and professional but would benefit from verification of domain registration and enhanced security headers.

S

salon ARTEMISIA - Marseille

salon-artemisia.com

50

Salon ARTEMISIA is a regional event organizer based in Marseille, France, specializing in bio, well-being, and ecological habitat trade shows. The website presents a professional and well-structured platform showcasing event dates, exhibitor profiles, partner logos, and visitor information. The business targets consumers and exhibitors interested in organic products and sustainable living. Technically, the site is built on WordPress with Elementor and uses modern SEO and analytics tools, including Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS and domain transfer protection, but lacks explicit security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is trustworthy and professionally maintained, with room for improvement in compliance and security transparency.

S

salons ZEN & BIO

salon-zenetbio.com

46

The website salons ZEN & BIO operates as an event organizer specializing in ecological, organic, wellness, and healthy habitat salons primarily in France, with events in Nantes, Lyon, and Angers. The business model focuses on organizing and promoting these niche events, targeting environmentally conscious consumers and exhibitors. The site is supported by SPAS Organisation, indicating a structured parent company backing. The website content is well-structured, professionally designed, and optimized for SEO, with clear event information and calls to action for exhibitors. Social media presence and partner logos enhance credibility. Technically, the site is built on WordPress using Elementor and several plugins for SEO, event management, advertising, and social media integration. It employs modern web technologies and includes consent management for GDPR compliance. Performance is moderate with good mobile optimization. Security posture is adequate with HTTPS and consent mechanisms but lacks explicit security headers and detailed security policies. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and ownership transparency. The site lacks direct contact emails and phone numbers, which could impact trust. Privacy and cookie policies are present and integrated with a consent platform, supporting GDPR compliance. Overall, the website presents a professional and trustworthy front for its business niche but would benefit from improved transparency in domain registration, enhanced security headers, and clearer contact information to strengthen trust and compliance.

S

Studio 2 Com

studio2com.net

9

Studio 2 Com is a small French company specializing in organizing well-being and artisan salons primarily in the Maine-et-Loire region and neighboring departments. The website presents a professional and consistent brand image, offering event organization services that highlight local artisans, artists, and innovative small businesses. The company has been active since 2019 and targets visitors and professionals interested in well-being and arts divinatoires. Technically, the website is built on WordPress using Elementor and several popular plugins, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and secure forms, though security headers and explicit policies are lacking. Privacy and cookie policies are present and GDPR compliant. However, the domain WHOIS data is missing or unavailable, which raises concerns about domain legitimacy and reduces overall trust. Contact information is clearly provided, including a company email and phone number, and social media presence is established on Facebook.

The website salons-bienetre.com represents Agence Plan B, an organizer of wellness fairs in France, targeting individuals interested in health, relaxation, and natural products. The site promotes events in multiple cities with dates and venues, providing a contact form and social media links for engagement. Technically, the site is built on WordPress using the Divi theme, leveraging standard web technologies such as jQuery and Google Fonts. The site is served over HTTPS, ensuring encrypted communication, and includes a captcha-protected contact form to mitigate spam. However, the absence of WHOIS data for the domain raises concerns about transparency and domain legitimacy. No privacy or cookie consent mechanisms were detected, which may impact compliance with privacy regulations. Security headers are not present, indicating room for improvement in security posture. Overall, the website is functional, professionally designed, and provides relevant content for its audience, but lacks some critical compliance and security features.

B

Bio en Grand Est

biograndest.org

9

Bio en Grand Est is a regional non-profit organization dedicated to supporting and promoting organic agriculture in the Grand Est region of France. The website serves as a network hub for organic producers and provides information, news, events, and resources related to organic farming. The organization targets both professionals in the organic sector and consumers interested in organic products. The site is professionally designed using WordPress and integrates modern web technologies and plugins to deliver a good user experience. Social media integration and structured data enhance its digital presence. Security measures such as HTTPS and reCAPTCHA are implemented, but there is room for improvement in DNS security and HTTP headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and serves its business purpose effectively.

The website represents the Festival International du Film Ornithologique de Ménigoute, a well-established non-profit cultural event focused on wildlife and nature documentaries, particularly ornithology. Founded in 1985 and organized by Association MAINATE, it serves a general audience interested in nature and film. The site provides comprehensive information about the festival's program, activities, and participation opportunities, supported by social media and newsletter engagement. Technically, the site is built on the Contao CMS platform with modern JavaScript libraries and includes GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the site is professional, trustworthy, and well-maintained.

S

Spas Organisation

spas-expo.com

10

Spas Organisation is a leading French event organizer specializing in bio, well-being, natural health, and sustainable development sectors. The company operates multiple public and professional salons and events, positioning itself as a market leader in France. Their digital presence is built on a WordPress platform with modern SEO practices and a clear focus on event promotion and partner collaboration. Technically, the website is well-structured, mobile-optimized, and uses recognized technologies such as Elementor and Yoast SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although incident response and vulnerability disclosure mechanisms could be improved. Privacy compliance is adequate with GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a professional and trustworthy business with a solid market position.

B

Brdy a Podbrdsko - dovolená kousek za Prahou

brdyapodbrdsko.cz

10

The website www.brdyapodbrdsko.cz serves as an official regional tourism portal for the Brdy and Podbrdsko area near Prague, Czech Republic. It provides visitors with comprehensive travel information including event calendars, accommodation options, cultural and natural attractions, and travel planning tools. The content is primarily in Czech and targets tourists and visitors interested in exploring this region. The business model focuses on promoting regional tourism through informational content and digital engagement. The site maintains a consistent brand image aligned with regional tourism authorities and governmental partners.

V

Virtual Visit

virtualvisit.cz

10

Virtual Visit is a Czech Republic-based digital agency specializing in innovative digital presentations including custom web design, virtual tours, accessibility audits, branding, and video production. The company targets a diverse audience including businesses, schools, healthcare, tourism, hospitality, and real estate sectors. Their market position is that of an established small agency with a professional portfolio and strong client references. Technically, the website employs modern web technologies such as jQuery, Nette Framework, Flatpickr, and integrates Google reCAPTCHA v3 for security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit incident response or security policy pages are found. Overall, the website is professional and trustworthy, but the absence of WHOIS data reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security readiness.

Pretekaj.sk is a Slovak sports registration and results platform operated by Matj.sk. It serves organizers and athletes by simplifying event registration and providing easy access to sports performance data. The platform targets a niche market within Slovakia, focusing on regional sports events and races. The website is well-structured, professionally designed, and provides clear navigation and relevant content for its audience. Technically, it employs modern web technologies including Bootstrap, jQuery, Google Analytics, and Facebook SDK, hosted likely behind Cloudflare for performance and security. Security posture is good with HTTPS enforced and secure payment logos displayed, though some security headers and explicit policies are missing. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Overall, the site is trustworthy, functional, and well-positioned within its market niche.

M

ME-METAL

me-metal.cz

47

ME-METAL is a Czech manufacturing company specializing in precision milling and turning of parts primarily from aluminum alloys, steel, and plastics. Founded in 1994 and operating from a large facility near Chomutov, the company focuses on small batch and custom production, serving both domestic and international clients. Their business model includes full production services with in-house transport for delivery. The website reflects a stable and established market position with over 30 years of experience and a consistent brand presence. Technically, the website is built using Nicepage site builder with standard web technologies including HTML5, CSS3, JavaScript, and jQuery. Hosting is likely provided by WEDOS, consistent with the registrar and nameservers. The site is mobile optimized and SEO friendly, though accessibility features are basic. No advanced analytics or advertising tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (inferred though not explicitly confirmed), includes GDPR and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website presents a professional and trustworthy image with good content quality and privacy compliance. Security posture is moderate with room for improvement in security headers and incident response transparency. The risk level is low, but strategic enhancements in security documentation and technical hardening are recommended.

D

Divio AG

django-cms.org

10

django CMS is an established open-source enterprise content management system built on the Django framework, supported by the django CMS Association and backed by Divio AG. It targets enterprise marketers, digital agencies, developers, and educational institutions, offering a scalable, secure, and flexible CMS solution with extensive community and expert support. The platform holds a strong market position, evidenced by multiple industry awards and adoption by notable organizations such as NASA and National Geographic. Technically, the website employs a modern technology stack including Python, Django, jQuery, and integrates analytics tools like Google Analytics, Hotjar, and Segment. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting good privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS usage and cookie consent but lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to privacy protection, which is justified for this type of open-source project. Overall, django CMS.org presents a trustworthy, professional, and technically sound web presence with strong community and business credibility. Strategic improvements in security transparency and policy publication would further enhance its security posture and user trust.

C

Crowdin

crowdin.com

75

Crowdin is a well-established localization and translation management platform founded in 2008 and headquartered in Estonia. It serves teams and businesses by providing a comprehensive SaaS solution that integrates AI-powered translation, automated workflows, and extensive integrations with development and marketing tools. The platform is positioned as a leader in the localization technology market, offering services tailored for engineering, marketing, support, design, and translation teams. Crowdin's website reflects a mature digital infrastructure with fast performance, mobile optimization, and strong SEO practices. The use of modern analytics and monitoring tools such as Google Analytics, PostHog, and Sentry indicates a high level of digital maturity. Security posture is robust with HTTPS enforcement, security headers, CSRF protections, and Cloudflare bot management, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, Crowdin presents a trustworthy and professional online presence with strong business credibility and technical implementation.