Security Directory

C

Certisolis

certisolis.com

47

Certisolis is a specialized French laboratory focused on photovoltaic panel testing and certification, uniquely accredited by COFRAC. The company serves manufacturers, developers, and operators in the solar energy sector, providing conformity testing, defect analysis, and mobile laboratory services to ensure product quality and durability. The website is professionally designed using WordPress and the Divi theme, with good content quality and clear navigation primarily in French. Technical infrastructure includes modern web technologies and SEO optimization, with HTTPS and reCAPTCHA implemented for security. However, the absence of WHOIS data and lack of visible privacy and security policies indicate areas for improvement in transparency and compliance. Overall, the site presents a credible business with a solid market position but could enhance its security posture and privacy compliance.

M

Moore Global

moore-global.com

71

Moore Global is a prominent international network of independent accounting and advisory firms, offering a broad range of professional services including audit, consulting, risk advisory, and tax services. With over 34,000 professionals across more than 228 firms in 112 countries, Moore Global positions itself as a major player in the global finance and advisory sector. The website reflects this stature with a professional design, comprehensive content, and strong branding consistency. Technically, the website is built on WordPress and leverages modern technologies such as jQuery, Yoast SEO, Google Tag Manager, and Hotjar for analytics and user experience enhancement. The site is well-optimized for SEO, mobile responsiveness, and accessibility, indicating a mature digital infrastructure. Performance is moderate, with room for optimization. From a security perspective, the site employs HTTPS with strong SSL configuration and includes multiple security headers, demonstrating adherence to best practices. However, there is no publicly available security policy or incident response information, which could be improved to enhance transparency and trust. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or a recent domain registration, which slightly impacts the trust score. Overall, Moore Global's website presents a high level of professionalism and security maturity suitable for an enterprise-level financial services network. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further strengthen trust and compliance.

Agence Wordpress Roquette is a French web agency specializing in eco-conscious WordPress website creation, maintenance, and consulting. Positioned as a niche player in sustainable and accessible web design, the agency primarily serves local Breton clients as well as national French businesses and organizations. Their services emphasize performance, security, and environmental responsibility. The website is well-structured, professionally designed, and optimized for mobile and accessibility, reflecting a mature digital presence. Technically, the site leverages WordPress CMS with LiteSpeed caching and modern front-end technologies, ensuring moderate to good performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit incident response policies suggests room for improvement. Privacy compliance is partially addressed with a privacy policy present but lacking a cookie consent mechanism. Overall, the site projects high trustworthiness and professionalism with active social media engagement and client case studies.

Sémaphore Communication is a small French communication agency based in Melle, affiliated with the cooperative SCOP Oxalis. Founded in 2009, it offers comprehensive communication services including graphic design, web projects, strategic consulting, training, and multimedia production. The agency targets local businesses, associations, and collectives seeking tailored communication solutions. The website reflects a professional and consistent brand image with clear service descriptions and team presentation. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript libraries including jQuery, GSAP, ScrollMagic, and Barba.js for animations and page transitions. It is hosted by O2Switch, a reputable French hosting provider. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. SEO optimization is minimal but present. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers, privacy and cookie policies, and incident response information. The contact form is present but commented out, limiting user interaction. The use of Crisp chat provides live communication but also introduces tracking. Overall, the security posture is moderate but could be improved with better compliance and security practices. The domain registration data aligns well with the business claims, showing consistency and legitimacy. No WAF or blocking mechanisms are detected, and the site content is fully accessible and safe for general audiences.

J

JUMP Lab'Orione

jump-lab-orione.tg

57

JUMP Lab'Orione is a small non-profit association based in Togo, focused on providing access to information and communication technologies and supporting educational development, particularly in the Savanes region. The organization is linked to the Don Orione centers, emphasizing social aid and community support. The website is built on WordPress using the Astra theme and includes SEO optimization via Yoast. It features clear navigation, relevant content, and social media integration, targeting youth and local communities. The technical infrastructure is modern but lacks some advanced security headers and privacy compliance mechanisms. Security posture is adequate with HTTPS enabled but could be improved with additional policies and headers. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices.

Y

YOVOTOGO

yovotogo.fr

52

YOVOTOGO is a French non-profit association dedicated to international solidarity, primarily focusing on supporting children and youth with disabilities in northern Togo, promoting female leadership, and enhancing education through access to computing. Founded in 2011, the organization operates with a clear humanitarian, secular, and apolitical mission. Its market position is niche, serving a specific regional and social cause with a small organizational size. The website reflects this mission with relevant content, clear navigation, and active social media engagement.

B

Blabla Linux

blablalinux.be

53

Blabla Linux is a small, technology-focused entity operating a French-language blog dedicated to Linux, open source software, and data sovereignty. The website promotes free software and reuse initiatives, notably through the Emmabuntüs collective. It offers rich content and self-hosted services, demonstrating technical proficiency and community engagement. The domain is registered with OVH since 2020, consistent with the website's content timeline. Technically, the site is built on WordPress with modern plugins and integrations such as Jetpack, Google Site Kit, and OnlyOffice. The hosting provider is OVH, a reputable company. The website is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security is adequate with HTTPS enforced and some security plugins, but lacks advanced HTTP security headers and explicit security policies. Privacy compliance is partial; a privacy policy and terms of service are present, but no cookie consent mechanism is detected, representing a GDPR compliance gap. Contact information is limited to a contact form, with no direct emails or phone numbers published. Analytics usage includes Google Analytics and Jetpack Stats, with moderate user tracking. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. Strategic improvements in privacy compliance and security posture would enhance its credibility and reduce risk.

O

Opquast

opquast.com

58

Opquast is a French-based company specializing in web quality assurance through collaborative checklists, professional training, and certification programs. It serves a niche market of web professionals seeking to improve digital quality and user experience. The company has a strong market position supported by a large certified community and partnerships with educational institutions and agencies. Technically, the website is built on WordPress with modern technologies such as jQuery, Typesense for search, and Matomo for analytics, demonstrating a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security posture is solid with HTTPS and secure forms, though it lacks some advanced security headers and explicit security policies. WHOIS data is missing or inconsistent, likely due to privacy protection, but the website's professionalism mitigates concerns. Overall, Opquast presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency.

W

WS Interactive

ws-interactive.net

59

WS Interactive is a small, established web agency based in Toulouse, France, with 25 years of experience providing tailored web development, mobile app creation, SEO, UX/UI design, and digital marketing services. The company targets businesses seeking professional digital solutions and positions itself as a high-quality service provider in the local market. Technically, the website is built on WordPress with modern JavaScript libraries and includes analytics and optimization tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CAPTCHA on contact forms, and implements cookie consent with Google Consent Mode, but lacks explicit security policies and incident response information. The absence of WHOIS domain registration data reduces trust in domain legitimacy, though the website content and branding are professional and consistent. Overall, the site scores well on content quality, technical implementation, and security posture, with room for improvement in business credibility and transparency.

R

Robin Labadie

lrob.net

59

Robin Labadie operates a specialized French web hosting service focused on WordPress users, emphasizing professional, fast, secure, and ecological hosting solutions. The company targets web professionals, agencies, and WordPress site owners, offering a comprehensive suite of services including domain registration, server management with Plesk, security audits, and webmastering. The website reflects a small but professional business with a clear market niche in the French hosting industry. Technically, the site is built on WordPress with modern plugins and technologies, delivering good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent, and active monitoring, though some security headers and explicit policies could be improved. Privacy compliance is good with GDPR cookie consent and use of privacy-friendly analytics (Matomo). WHOIS data is privacy protected but consistent with the business profile. Overall, the site is trustworthy, professional, and well-positioned in its market segment.

C

Coodoeil

coodoeil.fr

45

Coodoeil.fr is a French-language free and independent web directory established since 2005, offering categorized listings of websites across multiple sectors with geolocation features and SEO-focused natural referencing. The site targets French-speaking users seeking a comprehensive directory of businesses and services. Technically, the website uses common web technologies including jQuery, Google Tag Manager, Google Adsense, and Didomi for cookie consent management. The site is moderately optimized for performance and mobile use, with good SEO practices evident in metadata and structured content. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but explicit security headers and a privacy policy page are missing, which are recommended for enhanced compliance and trust. The WHOIS data is unavailable, which limits domain registration trust assessment, but the website content and technical setup appear legitimate and professional. Overall, the site is safe for general audiences and does not contain adult or explicit content.

L

La Cantine X La French Tech Nantes

lacantine.co

50

La Cantine X La French Tech Nantes is a well-established non-profit association founded in 2008, focused on fostering innovation and entrepreneurship within the Nantes tech ecosystem. The organization provides a comprehensive range of services including networking opportunities, coworking spaces, events, and business support programs tailored to startups, SMEs, freelancers, and entrepreneurs in the region. Their market position is strong as a key regional player with numerous partnerships and a sizable member base. Technically, the website is built on WordPress with modern plugins and integrations such as Yoast SEO, Google Tag Manager, and Brevo for email marketing. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with good user experience and clear navigation. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and implements GDPR-compliant cookie consent. However, explicit security headers like CSP or X-Frame-Options were not detected in the provided data, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and continuing transparent privacy practices.

SRAE Sensoriel is a regional support and expertise structure focused on sensory disabilities (auditory and visual) in the Pays de la Loire region of France. It aims to improve the quality of life and care pathways for people with sensory impairments. The organization is mandated by the regional health agency (ARS) and operated by the Vyv3 group, positioning it as a trusted non-profit/governmental resource. The website offers resources, news, events, and professional tools targeting both individuals and professionals concerned with sensory disabilities. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Tarteaucitron.js for cookie consent management. It uses Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and well-structured with good SEO practices. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, no explicit security headers were detected in the provided data, and no incident response or security policy information is publicly available. No vulnerabilities or exposed sensitive data were found. The lack of WHOIS data limits domain trust verification, but the professional content and contact information support legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a specialized regional audience. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular updates to WordPress and plugins to ensure ongoing security and compliance.

The website represents A.C.I.A.H, a French non-profit association specializing in accessible computer training and human accompaniment services, particularly for visually impaired and disabled individuals. The site offers educational content, training agendas, and workshops, positioning itself as a niche regional player in the accessibility and education sector. The business model is non-profit, supported by various foundations and local organizations, with a clear focus on community service and accessibility. Technically, the site is built on the SPIP CMS platform with jQuery and mediabox for media handling. The hosting is provided by OVH, a reputable provider, and the domain registration is consistent with the business timeline. The website is moderately optimized for performance and accessibility but lacks advanced SEO and mobile optimization features. Security posture is basic, with HTTPS implied but no visible security headers or policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security measures.

L

Liquid Themes

liquid-themes.com

61

Liquid Themes is a London-based creative agency specializing in comprehensive web solutions including hosting, web design, premium support, and maintenance services. The company targets businesses and individuals seeking tailored website packages and digital presence management. Their market position is that of a niche service provider with a focus on user-centric and sustainable digital experiences. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, hosted with Cloudflare DNS, and secured with HTTPS. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with SSL and domain registration protections but lacks security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

A

Association des élèves de l'INP Toulouse

inpt.fr

49

The website www.bde.inp-toulouse.fr serves as the official portal for the student association of INP Toulouse, providing information about student clubs, events, and elected representatives. It targets students within the INP Toulouse network and associated schools, offering community engagement and event participation opportunities. The business model is non-profit and focused on student services and communication. Technically, the site uses standard web technologies including jQuery, Bootstrap, and FontAwesome, with a responsive design suitable for mobile devices. The site is accessible without WAF or blocking mechanisms and loads with moderate performance. However, there is a lack of advanced security headers and no detected analytics or tracking scripts, indicating a minimalistic technical footprint. From a security perspective, the site uses HTTPS but lacks security headers and formal privacy or cookie policies, which are important for GDPR compliance. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The absence of WHOIS data reduces domain trustworthiness slightly, but the content and external links align with a legitimate student association portal. Overall, the site is functional and serves its intended audience well but would benefit from improved security practices, privacy compliance, and enhanced contact transparency to strengthen trust and compliance posture.

C

CAn7

can7.fr

51

CAn7 is a French student association affiliated with INP-ENSEEIHT, specializing in providing sound and lighting services for a variety of events including school galas, concerts, and conferences. The organization has over 20 years of experience and serves primarily the student and local community event market. The website reflects a small, non-profit entity with a clear focus on event technical support. Technically, the website uses standard web technologies including HTML5, CSS3, and jQuery, hosted by OVH, a reputable provider. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. Security posture is moderate; while no critical vulnerabilities or exposed data are evident, the absence of security headers and unclear SSL status suggest room for improvement. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the site is trustworthy but would benefit from enhanced security and compliance measures.

T

Tisséo Collectivités

tisseo-collectivites.fr

56

Tisséo Collectivités is the public authority responsible for organizing and managing mobility services in the Toulouse metropolitan area, France. The organization focuses on sustainable urban transport solutions including metro lines, bus networks, and bike-sharing services. The website reflects a medium-sized public sector entity with a clear mission to serve local governments and residents by providing information and resources related to mobility projects and services. The company is well-positioned in its regional market as a key mobility authority. Technically, the website is built on Drupal 10, leveraging modern web technologies such as jQuery, Swiper for carousels, and FontAwesome for icons. The site is mobile-optimized with good SEO and accessibility features, although full RGAA compliance is partial. Hosting and domain registration are consistent with the organization's profile, and the site uses HTTPS with cookie consent mechanisms to comply with GDPR. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It serves its public sector audience effectively with relevant content and clear navigation. Strategic recommendations include enhancing security headers, completing accessibility compliance, and publishing security and incident response policies to further strengthen trust and compliance.

V

Viveris

viveris.fr

68

Viveris is a French IT engineering group specializing in embedded systems, digital transformation, and cybersecurity services. The company operates across multiple cities in France, Belgium, and Morocco, offering a broad portfolio including projects, training, and consulting. Their market position is that of a medium-sized, established technology service provider with a focus on innovation and simplification of IT solutions for enterprises. Technically, the website is built on WordPress with modern JavaScript libraries and analytics tools, showing a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response information could enhance their stance. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, though the absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy.

D

Deedivine.com

deedivine.com

36

Deedivine.com is a Czech Republic based small retail business specializing in custom tailored skirts, bodysuits, and matching accessories such as hair bows and bow ties. The website presents a well-structured e-commerce platform built on WordPress with WooCommerce and Elementor, targeting consumers seeking personalized fashion items. The business emphasizes quality craftsmanship, made-to-measure products, and family matching outfits. Technically, the site uses modern web technologies and provides a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and secure forms, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which reduces trustworthiness but the site content and contact information support legitimacy. Overall, the site is functional and professional but could improve privacy compliance and security transparency.

E

eezy.cz

eezy.cz

44

eezy.cz is a Czech-based media company specializing in organizing conferences, custom events, and publishing books and magazines. With over 15 years of market presence, they have published more than 450 titles and realized over 215 events, positioning themselves as a trusted service provider in their sector. Their target audience includes professionals and organizations seeking tailored event solutions and quality publications. Technically, the website is built on WordPress using popular plugins like Elementor and WooCommerce, indicating a modern and maintainable infrastructure. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS and bot protection via reCAPTCHA, but lacks advanced security headers and formal policies. No privacy or cookie policies were detected, which is a compliance gap. Overall, the business appears legitimate and professionally presented, but could improve transparency and security practices.

D

Dorsen

dorsen.cz

33

Dorsen is a Czech-based company specializing in the handcrafted production of high-quality pocket spring mattresses and beds, emphasizing natural materials and traditional craftsmanship rooted in the Jizerské Mountains region. The company targets both retail customers seeking premium sleep products and B2B clients such as hotels and interior designers. The website reflects a modern digital presence built on WordPress with Elementor, integrating marketing and analytics tools like Google Tag Manager and Smartsupp live chat, ensuring good user experience and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. Overall, the domain registration aligns well with the business launch, supporting legitimacy and trustworthiness.

R

Realityumore.com

realityumore.com

47

Realityumore.com is a Czech-based real estate business specializing in the sale and rental of properties abroad, offering a portfolio of over 3000 listings. The company targets investors and individuals interested in foreign real estate, providing services including sales, rental mediation, and investment advice. The website is built on WordPress using Elementor and JetEngine, hosted by WEDOS Internet, a Czech provider. It features a professional design with good navigation, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. Privacy compliance is strong with a comprehensive cookie policy and GDPR adherence. The domain registration is consistent with the business claims, indicating legitimacy. Overall, the site presents a trustworthy and professional digital presence in the real estate sector.

W

We Are ILL

wearewellnessweekend.com

52

We Are ILL is a non-profit organization dedicated to supporting Black women living with multiple sclerosis and other autoimmune disorders through its signature annual event, Wellness Week(end). The event offers education, community, and wellness activities, expanding its reach to include lupus and NMOSD patients and their support networks. The website is professionally designed using Squarespace, with a clear focus on community and advocacy. The event is hosted in Atlanta, GA, with ticketing managed via Eventbrite. Social media presence is active on Instagram, YouTube, and Facebook. The domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the website content and external links indicate a legitimate operation.

N

National Scleroderma Foundation

scleroderma.org

59

The National Scleroderma Foundation is a well-established non-profit organization dedicated to advancing research, raising awareness, and providing support for individuals affected by scleroderma. The website reflects a mature digital presence with comprehensive educational resources, support group information, and event management capabilities. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and no obvious vulnerabilities, though improvements such as enabling DNSSEC and publishing security policies would enhance trust. Privacy compliance is limited by the absence of explicit privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is professional, trustworthy, and serves its target audience effectively.

R

Raynauds Association

raynauds.org

57

The Raynauds Association is a non-profit organization dedicated to providing support and education to individuals suffering from Raynaud's Phenomenon. The website serves as an informational and community resource, targeting affected individuals and caregivers. The organization appears to have a niche market position focused on healthcare support and education. Technically, the website is built on WordPress using the Avada theme and WooCommerce plugin, indicating a modern CMS platform with e-commerce capabilities, although no direct sales were evident in the analyzed content. The site employs Google Analytics and Google Tag Manager for visitor tracking and SEO optimization via Yoast SEO plugin. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is weak due to missing explicit privacy and cookie policies. WHOIS data is incomplete and malformed, limiting domain trust verification, but the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

N

National Eczema Association

nationaleczema.org

11

The National Eczema Association is a well-established non-profit organization founded in 2002, dedicated to providing education, support, advocacy, and research funding for individuals affected by eczema. The website serves a broad audience including patients, caregivers, healthcare providers, and researchers, positioning itself as a leading resource in the eczema healthcare sector in the United States. The organization demonstrates strong market presence through comprehensive services such as educational resources, community stories, advocacy campaigns, and digital tools like the EczemaWise app. Technically, the website is built on a modern WordPress platform with integrations including Gravity Forms for data collection, Yoast SEO for search optimization, and Google Tag Manager for analytics. Hosting is managed via Amazon AWS infrastructure, ensuring reliable performance and scalability. The site exhibits excellent mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with domain status locks to prevent unauthorized changes. While no advanced security headers were detected, no vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact is noted as an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies and GDPR considerations. The organization displays multiple trust certifications and maintains transparent contact information, enhancing credibility. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on user engagement and community support. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security policy, and establishing a vulnerability disclosure process to further strengthen security posture and trust.

B

Bone Marrow & Cancer Foundation

bonemarrow.org

60

The Bone Marrow & Cancer Foundation is a well-established non-profit organization dedicated to supporting cancer and transplant patients through a variety of services including financial assistance, patient navigation, clinical counseling, housing support, and peer connection via their CancerBuddy™ app. The organization has a strong market position with over three decades of experience, a recognized medical advisory board, and partnerships with hospitals across the United States. Their business model relies on private donations and corporate sponsorships, with no government funding, emphasizing community-driven support and fundraising events. Technically, the website is built on WordPress using modern plugins such as GiveWP for donations and Events Manager for event handling. It employs Bootstrap for responsive design and integrates Stripe for payment processing. The site demonstrates good digital maturity with SEO optimization, mobile responsiveness, and moderate performance. However, there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers. There is no visible security or incident response policy, and cookie consent mechanisms are absent, which may impact GDPR compliance. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic improvements in security policies, cookie consent, and DNS security would enhance its compliance and trustworthiness further.

G

GBS/CIDP Foundation International

gbs-cidp.org

60

GBS/CIDP Foundation International is a well-established non-profit organization dedicated to supporting individuals and families affected by Guillain-Barré syndrome, chronic inflammatory demyelinating polyneuropathy, and related neurological conditions. The foundation provides educational resources, funds research grants, advocates for patient needs, and fosters community engagement through events and volunteer programs. It holds a strong market position as a leading global non-profit in its healthcare niche, supported by trust indicators such as a Charity Navigator Four Star rating and membership in the National Health Council. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple third-party analytics and marketing tools including Google Analytics, Facebook Pixel, and ShareThis. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security transparency would further strengthen its posture and user trust.

F

Fabry Support & Information Group (FSIG)

fabry.org

59

Fabry Support & Information Group (FSIG) is a well-established non-profit organization focused on supporting patients and families affected by Fabry disease. The organization provides educational resources, advocacy, financial assistance information, and community engagement through events and patient stories. Their website reflects a professional and consistent brand presence with clear contact channels and active social media integration. Technically, the site is built on WordPress with a modern theme and plugins, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet regulatory standards. Overall, FSIG demonstrates strong business credibility and trustworthiness within its healthcare non-profit sector.

The US Hereditary Angioedema Association (HAEA) is a specialized non-profit organization dedicated to supporting individuals affected by Hereditary Angioedema (HAE), a rare genetic condition. The organization provides education, advocacy, research support, and access to treatment resources, positioning itself as a leading voice in the HAE community within the United States. Their website reflects a strong commitment to patient and caregiver engagement through comprehensive resources, community stories, and advocacy opportunities. Technically, the website employs a modern and stable technology stack including Bootstrap, jQuery, Handlebars.js, and Google Analytics for tracking. Hosting utilizes Amazon S3 for media assets, indicating a reliable infrastructure. The site is mobile-optimized with good navigation and SEO practices, though accessibility features could be enhanced. Security is solid with HTTPS enforced, but the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and protection. From a security perspective, the site shows no signs of vulnerabilities or malicious content. However, the lack of visible security policies, incident response contacts, and vulnerability disclosure mechanisms indicates a moderate maturity level in security governance. The WHOIS data is unavailable due to query failure or privacy protection, but the website content and domain usage strongly support legitimacy and trustworthiness. Overall, the HAEA website is a professional, trustworthy, and well-maintained platform serving a niche healthcare advocacy role. Strategic improvements in privacy compliance, security headers, and transparency around security policies would further enhance its risk posture and user trust.

A

American Lung Association

lung.org

69

The American Lung Association is a leading non-profit organization dedicated to improving lung health and preventing lung disease through education, advocacy, research funding, and community support. The website reflects a mature and professional digital presence with comprehensive content targeting patients, caregivers, healthcare professionals, and advocates. It offers multiple engagement channels including donations, events, and support services. Technically, the site employs modern web technologies and analytics tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and use of CAPTCHA for form protection, though explicit security headers and a published security policy are absent. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and authoritative in its domain, though WHOIS data is unavailable due to query issues, which slightly impacts domain legitimacy assessment.

N

National Alopecia Areata Foundation

naaf.org

51

The National Alopecia Areata Foundation (NAAF) is a well-established non-profit organization dedicated to supporting individuals affected by alopecia areata, a common autoimmune disease causing hair loss. The foundation provides a comprehensive range of services including education, support groups, research funding, advocacy, and awareness campaigns. Their website reflects a strong market position as a leading resource in the alopecia community, targeting patients, families, medical professionals, and researchers. The organization leverages digital platforms effectively to engage its audience and facilitate donations and community involvement. Technically, the website is built on WordPress with modern plugins and frameworks such as Visual Composer, Gravity Forms, and Swiper.js. It integrates key marketing and analytics tools including Google Tag Manager and Facebook Pixel, enabling moderate user tracking and data collection. The site demonstrates good performance, mobile optimization, and accessibility, with a professional design and clear navigation enhancing user experience. From a security perspective, the site employs HTTPS with good SSL configuration and standard security headers, indicating a solid security posture. However, there is no publicly available security policy or vulnerability disclosure program, which could be improved to enhance transparency and incident response readiness. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR considerations. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure channel, and enhancing incident response contact visibility to further strengthen trust and security culture.

A

American Liver Foundation

liverfoundation.org

71

The American Liver Foundation is a well-established nonprofit organization dedicated to education, advocacy, support services, and research funding for liver disease prevention and treatment. With a domain age dating back to 1996 and a strong market position as the largest liver disease-focused nonprofit in the U.S., ALF serves a broad audience including patients, caregivers, and healthcare professionals. Their website offers comprehensive resources, clinical trial information, and multiple signature programs and events to engage the community. Technically, the website is built on WordPress with modern integrations such as Oxygen Builder, Google Tag Manager, Facebook Pixel, and live chat via PureChat. The site is mobile optimized, well-structured, and SEO-friendly, reflecting a mature digital presence. Hosting and DNS are managed via Cloudflare, enhancing performance and security. Security posture is good with HTTPS enforced and domain transfer locked, but improvements are recommended such as enabling DNSSEC and publishing explicit security policies and incident response contacts. Privacy compliance is partial; while a comprehensive privacy policy exists, no cookie consent mechanism was detected, which may impact GDPR compliance. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing privacy compliance, improving DNS security, and formalizing security incident response information to further strengthen trust and security posture.

N

National Breast Cancer Foundation, Inc.

nationalbreastcancer.org

77

The National Breast Cancer Foundation, Inc. is a well-established non-profit organization dedicated to providing help and hope to those affected by breast cancer through early detection, education, and support services. The website positions the organization as a top-rated breast cancer charity with strong trust signals including high charity ratings and corporate partnerships. Their target audience includes breast cancer patients, survivors, donors, volunteers, and the general public seeking breast health information. The business model focuses on fundraising, awareness campaigns, and community support programs. Technically, the website is built on WordPress with a modern tech stack including jQuery, HubSpot analytics, Google Tag Manager, and other marketing tools. It is well-optimized for SEO, mobile responsiveness, and accessibility. The site uses HTTPS with good SSL configuration and implements security best practices such as reCAPTCHA and cookie consent mechanisms. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. From a security posture perspective, the site shows a mature approach with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear privacy and cookie policies and GDPR indicators. The WHOIS data is unavailable due to a malformed response, likely indicating privacy protection, which is justified for this type of non-profit organization. Overall, the domain and website content align well, supporting legitimacy. The overall risk assessment is low with no critical issues detected. Strategic recommendations include enhancing security headers, maintaining regular audits of third-party scripts, and improving transparency around incident response policies. The website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its mission and audience.

S

Somfy

somfy.sk

63

Somfy Slovakia operates as a regional branch of the global Somfy Group, specializing in home automation products including motors for blinds, shutters, awnings, gates, and smart home solutions such as alarms, cameras, heating, and lighting control. The website targets Slovak consumers and businesses interested in smart home technology, offering a comprehensive product catalog and support services. The company is well-established, founded in 1969, and maintains a strong market presence with consistent branding and professional digital assets. Technically, the website employs modern web technologies, is mobile optimized, and integrates tracking and analytics tools responsibly. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

A

AiVision, s.r.o.

ai-shop.cz

46

AiVision, s.r.o. operates the website www.ai-shop.cz offering advanced e-shop solutions with ERP system integrations such as Pohoda, Helios, Money, Cezar, Premier, and SAP. The company targets small to medium-sized businesses seeking customizable e-commerce platforms with B2B and B2C capabilities. With over 20 years of experience and more than 1100 satisfied clients, AiVision positions itself as a reliable technology provider in the Czech Republic's e-commerce sector. The website showcases a modern, responsive design with comprehensive content, client references, and integration options, reflecting a mature digital presence. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and reCAPTCHA, ensuring good performance and security basics. However, explicit security headers and incident response policies are not published, indicating areas for improvement. The site is GDPR compliant with a clear privacy and cookie policy, and contact information is readily available. WHOIS data is missing or privacy protected, which slightly reduces trustworthiness but does not negate the evident business legitimacy. Overall, the website demonstrates a strong business and technical foundation with moderate security posture and good privacy compliance.

F

Ferrino

ferrino.sk

51

Ferrino is a well-established outdoor equipment retailer with a rich history dating back to 1870. The company offers a comprehensive range of products including backpacks, sleeping bags, tents, clothing, and accessories for outdoor enthusiasts. Their market position is strong in Slovakia and the Czech Republic, supported by a professional e-commerce platform and physical store pickup options. The website demonstrates a good level of digital maturity with modern technologies and responsive design, catering well to their target audience of hikers, climbers, and outdoor lovers. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

R

RI OKNA

ri-okna.fr

53

RI OKNA is a traditional Czech manufacturer specializing in high-quality windows and doors, operating since 1994 with nearly 30 years of experience. The company targets both domestic and international markets, offering a wide range of products including PVC, aluminum, wood, and composite windows and doors. Their business model focuses on manufacturing and direct sales, emphasizing quality materials and customer service. The website is professionally designed, multilingual, and optimized for French-speaking customers, reflecting a medium-sized enterprise with a strong market position in manufacturing.

E

EastBiz.com, Inc.

incparadise.com

59

EastBiz.com, Inc., operating the IncParadise website, is a specialized service provider focusing on business incorporation and registered agent services primarily in Nevada and Wyoming. The company offers a comprehensive suite of services including corporation and LLC formation, registered agent services, mail forwarding, and compliance support. Their market position is that of an established niche player with over a decade of experience, targeting entrepreneurs and small to medium-sized businesses seeking incorporation in the United States. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Google Tag Manager, and various marketing and analytics tools such as Facebook Pixel and Hotjar. The site is hosted with reputable providers and uses Cloudflare DNS, ensuring good performance and availability. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs reCAPTCHA for form protection. However, it lacks some security headers and DNSSEC is not enabled, which are areas for improvement. The presence of multiple tracking scripts without a visible cookie consent mechanism indicates partial privacy compliance. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website presents a professional and trustworthy front for its business services, with good technical and security foundations but room for enhancement in privacy compliance and security hardening.

S

Société des Avis Garantis

societe-des-avis-garantis.fr

53

Société des Avis Garantis is a French company specializing in providing authentic customer review solutions for e-commerce merchants. Their platform supports multiple popular e-commerce platforms such as PrestaShop, Shopify, Magento, and WooCommerce, offering features like review moderation, Google Shopping integration, multilingual support, and customizable widgets. The website is professionally designed, well-structured, and provides clear information about their services, target audience, and trust indicators including GDPR compliance and certifications. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including Google reCAPTCHA for form security. The SSL configuration is good, and cookie consent mechanisms are in place, reflecting a strong privacy posture. However, WHOIS data is not publicly available, indicating privacy protection which is reasonable for this business type. Overall, the site demonstrates a mature digital presence with good security and compliance practices.

L

Limette Czech s.r.o.

limette.cz

58

Limette Czech s.r.o. is a small Czech Republic-based IT service company founded in 2019, specializing in comprehensive IT solutions including web development, IT training, software development, data analysis, and artificial intelligence training. The company has established its own office premises and operates as a registered legal entity, positioning itself as a growing player in the local IT services market. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the website is built on WordPress using the Elementor page builder and incorporates SEO optimization via the Rank Math plugin. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security hardening. HTTPS is enabled, but security headers are missing, and no advanced security policies or incident response information is published. From a security perspective, the site shows basic good practices such as HTTPS but lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms. No forms or contact emails are present on the homepage, limiting direct user interaction points. The WHOIS data is consistent with the business claims, indicating legitimacy. Overall, the site is safe, professional, and suitable for general audiences without any adult or questionable content. Strategically, the company should prioritize implementing privacy and cookie policies to improve GDPR compliance, add security headers to enhance protection, and publish incident response and vulnerability disclosure information to build trust. Enhancing contact information visibility and adding social media presence could also improve business credibility and user engagement.

SLUTO s.r.o. operates an online platform (sluto.online) providing electronic tax forms and declarations primarily targeting Czech-speaking users. The website offers a streamlined service for submitting tax-related documents such as annual tax reconciliations. The business appears to be a small-sized entity founded in 2021, with a niche focus in the tax services sector. The site is professionally designed with consistent branding and clear navigation, supporting both Czech and English languages. Technical infrastructure is based on WordPress CMS hosted likely by Websupport, utilizing common plugins and Google Analytics for visitor insights. The site implements a cookie consent mechanism aligned with GDPR requirements, although a dedicated privacy policy page on the domain is absent, with references to an external domain for cookie usage information. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, but lacks advanced security headers and explicit security policies. Overall, the website is functional, trustworthy, and compliant with basic privacy standards, serving its target audience effectively.

S

Site officiel de la Ville de Tarbes

tarbes.fr

48

The website www.tarbes.fr serves as the official digital portal for the city of Tarbes, France, providing residents and visitors with comprehensive information about municipal services, news, urban planning, social programs, and cultural activities. The site is positioned as a key communication channel for the local government, offering a broad range of public service information and administrative resources. The target audience primarily includes local citizens, businesses, and visitors seeking official city information. Technically, the website is built on the WordPress CMS platform, utilizing popular plugins such as Yoast SEO for search engine optimization and Matomo for analytics, alongside Google Analytics which is disabled by default pending user consent. The site incorporates modern web technologies including jQuery, FontAwesome, and Leaflet for interactive maps. Mobile optimization and navigation clarity are well addressed, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR principles. However, the absence of a published privacy policy, terms of service, and incident response contact information represents gaps in compliance and transparency. The WHOIS data is unavailable, which slightly reduces trustworthiness but does not detract significantly given the official nature and branding of the site. Overall, the website demonstrates a solid foundation in content quality, technical implementation, and business credibility, with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and terms documents, enhancing security headers, and establishing clear incident response channels to strengthen trust and compliance.

R

Rozum a Cit, z. s.

pestouni-rac.cz

10

Rozum a Cit, z. s. is a Czech non-profit organization dedicated to supporting foster families and promoting substitute family care in the Czech Republic for over 20 years. The organization offers comprehensive services including foster family accompaniment, counseling and therapy, education for foster parents, and facilitating contact with biological families. Their market position is stable within the non-profit sector, focusing on social support and education. The website is professionally designed with clear navigation and good content relevance, targeting foster families and professionals in the field. Technically, the site uses a modern stack including jQuery, Bootstrap, and various UI libraries, with a CMS named inPage. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and incident response information. WHOIS data is missing, which reduces domain trustworthiness, but the site content and contact details appear legitimate and consistent with the organization's claims.

T

Ticket for Change

ticketforchange.org

50

Ticket for Change is a French non-profit organization focused on fostering social entrepreneurship and leadership development. Established in 2013, it offers educational programs, community support, and resources to entrepreneurs, young adults, and corporate leaders aiming to create positive social and environmental impact. The organization positions itself as a pioneering school for changemakers, leveraging innovative pedagogies and a strong community network. Technically, the website is built on WordPress with modern SEO and analytics tools, hosted behind Cloudflare for performance and security. The site features comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements. Security posture is solid with HTTPS and domain protections, though improvements in security headers and incident response transparency are recommended. Overall, the website reflects a professional, trustworthy, and well-established entity with a clear mission and audience.

M

Krby a kamna

mojekrby.cz

60

The website www.mojekrby.cz is a Czech e-commerce platform specializing in the sale of fireplaces, stoves, and related accessories. It targets residential customers and craftsmen seeking heating solutions. The business operates a niche retail model with a clear product catalog and online shopping capabilities, including user registration and newsletter subscription. The site is professionally designed with good navigation and mobile optimization, leveraging modern web technologies such as jQuery, Swiper.js, and Google Analytics for tracking and marketing. Technically, the site uses the K2 e-shop system and integrates several third-party services including Google Tag Manager and Packeta for logistics. Performance is moderate with good SEO practices and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though no advanced security headers or explicit security policies are published. The absence of WHOIS registration data is a concern for domain legitimacy and trust. Overall, the site presents a professional and trustworthy front for its business, but the lack of publicly available domain registration details and direct contact information slightly reduces its credibility. There are no indications of malicious content or security vulnerabilities in the visible content. Strategic improvements in security transparency and contact information disclosure would enhance trust and compliance.

K

Klasik dutalon

klasikduatlon.cz

42

The website klasikduatlon.cz is dedicated to organizing and promoting duathlon events in Příbram, Czech Republic, targeting athletes and sports enthusiasts. It provides detailed information about race categories, schedules, registration, and event logistics. The site is built on WordPress using common libraries such as jQuery and Bootstrap, with moderate mobile optimization and basic SEO features. However, it lacks critical security features such as HTTPS and security headers, and does not provide privacy or cookie policies, which are essential for compliance and user trust. The domain registration data is inconsistent with the website's content timeline, raising questions about the domain's history and ownership transparency. Overall, the site serves its business purpose but requires significant improvements in security and compliance to enhance trustworthiness and protect users.

Tyvado is a Czech company specializing in modern shading technology products including awnings, blinds, pergolas, and insect screens. The company targets homeowners and investors seeking comfort, ecological solutions, and energy savings. With over 12 years of experience and more than 200 completed projects, Tyvado positions itself as a trusted provider in the local market. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options including a detailed contact form and physical address. Technically, the site uses common web technologies such as jQuery and Google Analytics, with HTTPS enforced and cookie consent implemented. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. Security headers are not detected, suggesting room for improvement in security posture. Overall, the website is safe, professional, and compliant with GDPR requirements, but would benefit from enhanced security policies and domain legitimacy verification.