Security Directory

G

Global Destination Sustainability Movement

gds.earth

55

Global Destination Sustainability Movement (GDS-Movement) is a professional organization focused on empowering sustainable and regenerative tourism through consulting, benchmarking, education, and impact measurement services. The website is well-structured, professionally designed, and targets organizations involved in sustainable travel. Technically, the site is built on WordPress using modern plugins and frameworks, with good SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response information is published. Privacy compliance is good with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy and credible, though lack of WHOIS transparency slightly reduces trust.

S

salon Marjolaine - Parc Floral de Paris

salon-marjolaine.com

49

Salon Marjolaine is a well-established French event focused on organic agriculture, ecology, and sustainable living, operating since 2006. It serves as a major marketplace and meeting point for organic producers, consumers, and enthusiasts. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content about the event, exhibitors, and program. Technically, it is built on WordPress with modern plugins and tracking tools, hosted likely by Infomaniak, and uses HTTPS with basic security measures. Privacy compliance is well addressed with GDPR-aligned cookie consent and a detailed privacy policy. However, explicit security policies and vulnerability disclosures are absent, and some security headers could be improved. Overall, the site is trustworthy and professionally managed, with no signs of malicious activity or content safety concerns.

K

Korrigan Creations

korrigan-creations.com

50

Korrigan Creations is a small, professional graphic design and communication studio based in Rennes, Brittany, France. Established since 2005, the company offers a broad range of creative services including visual identity creation, print and web design, video and photo production, marketing, and media relations. The website presents a well-structured, content-rich platform that effectively showcases their portfolio and client testimonials, positioning them as a trusted local creative agency. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, ensuring good SEO and user experience. Security measures include HTTPS and Google reCAPTCHA on forms, though additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, warranting further verification. Overall, the website is professional, secure, and user-friendly, serving its target audience effectively.

H

Hotel Košice DoubleTree by Hilton

doubletree-kosice.com

58

Hotel Košice DoubleTree by Hilton operates as a prominent hospitality provider located in the heart of Košice, Slovakia. Affiliated with the global Hilton brand, it offers accommodation, conference facilities, event hosting, and gastronomy services. The website reflects a professional and consistent brand image targeting travelers, business clients, and event organizers. The business model focuses on delivering premium hospitality experiences with loyalty program integration and additional VIP services. Technically, the website is built on WordPress with Elementor, optimized for SEO and mobile responsiveness, and incorporates modern web technologies including Google Analytics and reCAPTCHA for security. Security posture is strong with HTTPS enforcement and form protections, though explicit security headers could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. However, the absence of WHOIS registration data for the domain raises legitimacy concerns that should be investigated further. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

U

UP COOP

up.coop

59

UP COOP operates the website up.coop, providing payment solutions focused on enhancing the well-being of employees and citizens through targeted purchasing power products such as meal vouchers, cultural and service checks, and social aid solutions. The company is positioned as a leader in France's multi-enseigne gift and payment solutions market, targeting SMEs, HR professionals, commercial directors, and employee committees. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern marketing and analytics tools including Google Tag Manager, Piano Analytics, and Didomi for consent management. Security posture is good with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. The domain registration data is consistent with the business identity and country, supporting legitimacy. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

N

Novaxia Groupe

novaxia.fr

43

Novaxia Groupe is a French real estate company specializing in sustainable and impact-driven real estate investment and urban recycling projects. The group operates through two main subsidiaries: Novaxia Investissement, which manages real estate investment funds focused on responsible and durable assets, and Novaxia Développement, which leads urban recycling projects transforming obsolete tertiary real estate into housing and mixed-use developments. The company positions itself as a leader in sustainable real estate savings in France, targeting investors seeking to align financial returns with environmental and social impact. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, Piano Analytics, and LinkedIn Insight Tag. It employs HTTPS with good SSL configuration and uses Google reCAPTCHA to secure forms. The site is well-optimized for mobile devices and accessibility, with comprehensive privacy and cookie policies that comply with GDPR requirements. From a security perspective, while HTTPS and form protections are in place, the site lacks explicit security headers and published security policies or incident response information. The absence of WHOIS data limits domain legitimacy verification, though the professional presentation and regulatory disclosures support trustworthiness. Overall, the website demonstrates a mature digital presence with moderate tracking and good privacy compliance. Strategically, Novaxia should enhance its security posture by implementing recommended HTTP security headers, publishing a security policy, and providing incident response contacts. Addressing the WHOIS data gap or clarifying domain registration details would improve trust and credibility. These steps will strengthen the company's digital security and compliance, supporting its market position as a responsible real estate investment leader.

F

FORUM MONDIAL DE l'ÉCONOMIE SOCIALE ET SOLIDAIRE

bordeauxgsef2025.org

60

The website bordeauxgsef2025.org represents the official online presence for the 7th Global Social and Solidarity Economy Forum scheduled in Bordeaux, France, from October 29 to 31, 2025. It serves as an informational and promotional platform targeting governments, institutions, ESS actors, and the general public interested in social economy initiatives. The site provides comprehensive event details, program highlights, partner information, and multilingual support, reflecting a well-established international event organizer in the non-profit sector. Technically, the site is built on WordPress using Elementor and Yoast SEO, with integrations for Google Analytics and cookie consent management, hosted by OVH sas, a reputable French provider. Security posture is good with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit security or incident response policies are published. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO, with moderate tracking and good privacy compliance.

Q

QS GEN

qs-gen.com

70

QS GEN operates as a specialized global education news platform delivering timely and relevant content focused on higher education developments worldwide. The website targets academics, education professionals, and students by providing news, features, and insights related to universities and educational trends. The platform is built on WordPress, leveraging common web technologies and third-party services such as Google Analytics and Facebook SDK for analytics and marketing. The site demonstrates good content quality, professional design, and consistent branding aligned with its niche. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and transparent, supporting the site's legitimacy.

H

Helexia

helexia.be

65

Helexia is a Belgian company specializing in guiding businesses through their energy transition towards sustainable solutions. The company offers a comprehensive portfolio of services including energy savings, energy production, consultancy, monitoring, and maintenance. Their website reflects a mature digital presence built on WordPress with Elementor and Yoast SEO, indicating a focus on usability and search engine optimization. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though there is room for improvement in security headers and explicit security policies. The WHOIS data is restricted due to registry policies, but the domain and website content align well, suggesting legitimacy. Overall, Helexia presents a professional and trustworthy online presence suitable for its target audience of businesses seeking sustainable energy solutions.

A

Altsis

altsis.fr

52

Altsis is a French software publisher specializing in energy sector solutions, focusing on metering data management and operational tools for energy market actors such as network managers, suppliers, and brokers. The company is part of Groupe SORÉGIES, a significant player in the energy value chain. The website presents a professional image with clear business offerings and contact information, targeting energy professionals seeking software to optimize data and operations. Technically, the website is built on WordPress with React components and uses modern SEO and analytics tools like Yoast SEO and Google Tag Manager. The site is mobile-optimized and provides a good user experience, though some accessibility features could be improved. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy or cookie policies. The absence of WHOIS data is a notable concern, reducing domain trustworthiness, but the affiliation with Groupe SORÉGIES and professional web presence mitigate some risk. No security incidents or vulnerabilities are evident from the site content. Overall, the site is suitable for its business purpose but would benefit from enhanced privacy compliance and security transparency.

M

musee-ile-oleron

musee-ile-oleron.fr

38

The Musée de l’île d’Oléron is a regional cultural institution dedicated to preserving and showcasing the heritage and traditions of the Oléron island. The museum offers a rich collection of over 500 objects spanning from prehistory to modern times. Currently closed for renovations with a reopening planned in 2027, it maintains engagement through temporary exhibitions, educational programs, and a mobile app for virtual tours. The website reflects a well-maintained digital presence with clear visitor information and official certifications, positioning the museum as a trusted cultural destination in the region. Technically, the website is built on WordPress with modern plugins and frameworks such as Yoast SEO, Bootstrap, and Ultimate Addons for Gutenberg. It employs HTTPS, Google reCAPTCHA v3 for form security, and a cookie consent mechanism via Axeptio, indicating a mature approach to privacy and security. Analytics are handled by Matomo, supporting privacy-conscious tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS and form protections, but lacks explicit security headers and published security policies or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common and not suspicious for this type of institution. Overall, the site demonstrates good security hygiene and compliance with GDPR requirements. Strategically, the museum should consider publishing detailed security policies and incident response plans to enhance trust and transparency. Implementing security.txt and improving accessibility compliance would further strengthen its digital maturity. The website effectively supports the museum’s mission and audience engagement, with room for incremental security and technical improvements.

B

BeNomad

benomad.com

61

BeNomad is a specialized technology company focused on designing, developing, and marketing mapping and navigation software since 2002. Their offerings target companies that manage mobile resources, positioning them as a leading provider in location-based services and professional GPS navigation software. The website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the site is built on WordPress with common plugins such as Yoast SEO and MonsterInsights for analytics, indicating a moderate level of digital maturity. HTTPS is properly configured with IP anonymization in Google Analytics, but the absence of security headers and explicit privacy or cookie policies suggests room for improvement in security posture and privacy compliance. Overall, the site is safe, business-focused, and trustworthy, but lacks some compliance and security best practices.

V

Vorwerk Thermomix®️

vorwerk.com.tw

46

Vorwerk Taiwan operates a professional website focused on marketing and selling smart kitchen and home cleaning appliances, primarily Thermomix® and Kobold products. The site targets Taiwanese consumers interested in innovative home solutions and provides product information, experience booking, and links to official e-commerce platforms. Technically, the website is built on WordPress with Elementor and uses modern front-end libraries and tracking tools such as Google Tag Manager and Facebook Pixel. The security posture is solid with HTTPS and no visible vulnerabilities, but lacks published privacy and cookie policies, which are critical for compliance. Overall, the site is well-branded, user-friendly, and trustworthy but should improve privacy transparency and contact accessibility.

H

Helexia Group

helexia.group

10

Helexia Group is a professional energy transition company offering comprehensive engineering expertise, business analysis, and financing solutions to accelerate clients' energy transition projects. The company operates internationally with multiple country-specific domains, indicating a broad European and Latin American presence. The website is well-structured, professionally designed, and optimized for SEO, reflecting a mature digital presence. Technically, the site uses WordPress CMS with modern frameworks like Bootstrap and integrates marketing and analytics tools such as Google Analytics, HubSpot, and LinkedIn Insight Tag. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and terms policies are missing. Overall, the domain appears legitimate with privacy-protected WHOIS data, which is reasonable for this business type.

Q

Quacquarelli Symonds Limited

reimagine-education.com

57

Reimagine Education is a globally recognized conference and awards platform operated by Quacquarelli Symonds Limited, focusing on innovation in education and employability. The website serves as a hub for event information, award applications, showcases, and partner engagement. It targets educational innovators, academic institutions, and edtech startups worldwide. The platform is well-positioned in the education sector with a strong brand and professional digital presence. Technically, the website is built on WordPress with a modern tech stack including popular plugins and integrations such as Yoast SEO, WPBakery, Slider Revolution, and Google Analytics. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility could be improved. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks a publicly stated security policy or incident response information. The WHOIS data is notably absent or unavailable, which introduces some uncertainty regarding domain registration legitimacy. However, the website's content, structured data, and branding strongly associate it with the reputable QS organization. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. Overall, the website is professional, secure, and trustworthy from a business and technical perspective, with minor gaps in transparency around domain registration and security policies. Strategic improvements in these areas would enhance trust and compliance.

C

Centre For Shaiva Studies

shaivastudies.in

48

The Centre For Shaiva Studies is a small, specialized academic research institute based in India, focusing on the advanced study of Shaiva traditions. It offers fellowships, publishes critical editions, and conducts lectures to promote scholarly understanding of Shaivism. The website is professionally designed using WordPress with the Avada theme and Yoast SEO, providing a good user experience and clear navigation. Contact information and physical address are clearly presented, enhancing business credibility. However, the site lacks published privacy and cookie policies, security policies, and incident response contacts, which are important for compliance and trust. The security posture is good with HTTPS and no exposed sensitive data, but could be improved by adding security headers and formal policies. Overall, the site is safe, accessible, and trustworthy, serving its academic and cultural mission effectively.

I

Indic Today

indica.today

39

Indic Today is a niche educational and cultural media platform focused on publishing content related to Shastraas, Indic Knowledge Systems, and Indology. It serves scholars, researchers, and enthusiasts interested in Indic studies. The website operates on WordPress with a professional design, structured content categories, and uses modern web technologies including Bootstrap and Owl Carousel. The platform integrates Google Analytics with opt-out capabilities, indicating moderate user tracking. Security posture is good with HTTPS enabled, but lacks explicit security headers and privacy/cookie policies, which are recommended for compliance and trust. WHOIS data is unavailable or privacy protected, which is common for small educational sites but reduces transparency. Overall, the site is trustworthy and professionally maintained but can improve privacy compliance and security best practices.

I

Indica Books

indicabooks.org

41

Indica Books is a niche educational and cultural publishing platform focused on promoting Indic civilisational knowledge through books, workshops, and events. The platform supports authors and researchers by providing publishing assistance, book loans, and community engagement. Technically, the website is built on WordPress with modern libraries and SEO tools, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and cookie consent mechanisms. The WHOIS data aligns well with the website's claims, indicating legitimacy and consistent registration details. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security hardening.

I

Indica Academy

indica.events

45

Indica Events is a specialized platform dedicated to curating and conducting a variety of cultural and educational events centered around Indic Civilisational Thought. The website serves as a hub for conferences, seminars, workshops, retreats, and festivals, targeting an audience interested in Indic studies and related cultural activities. The platform is part of a broader Indica ecosystem, linking to related academic and cultural sites. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it employs SEO best practices via the Yoast SEO plugin. The site is mobile-optimized and provides a user-friendly event filtering and registration experience. Security-wise, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. The WHOIS data is privacy protected, which is justified given the non-profit educational nature of the platform. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

A

A2LA

a2la.org

65

A2LA is a well-established accreditation organization founded in 1996, providing comprehensive accreditation services to laboratories, inspection bodies, product certification bodies, and proficiency testing providers. The company operates primarily in the government and healthcare sectors, offering a wide range of ISO-based accreditation programs and training services. Their website reflects a strong market position with professional branding, extensive service offerings, and a clear focus on quality and public safety. The target audience includes laboratories, organizations, and individuals seeking accreditation and quality assurance services. Technically, the website is built on WordPress using the Genesis Framework, leveraging modern web technologies such as Bootstrap, jQuery, and various analytics and marketing tools including Google Analytics, Facebook Pixel, and Salesforce Live Chat. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs domain locking statuses, and avoids exposing sensitive data. However, DNSSEC is not enabled, and there is no explicit cookie consent mechanism, which may affect GDPR compliance. No security policy or incident response information is published, and no vulnerability disclosure program is evident. Tracking technologies are used moderately, with standard marketing and analytics tools. Overall, A2LA's website demonstrates a high level of professionalism, trustworthiness, and business credibility. The security posture is good but could be improved with enhanced privacy compliance and DNS security. The site is safe for general audiences, with no adult or questionable content. Strategic recommendations include implementing cookie consent, enabling DNSSEC, publishing security policies, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

V

Ve hvězdách TV

vehvezdach.cz

52

Ve hvězdách TV is a Czech Republic based niche media outlet specializing in spirituality, health, astrology, and personal development content. Established in 2008, it offers a variety of services including online TV content, magazine subscriptions, and an e-commerce shop for related products. The website targets a general audience interested in spiritual and holistic health topics. Technically, the site is built on WordPress using popular plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure login forms, but lacks advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is legitimate, well-branded, and maintains a consistent online presence with active social media integration.

C

CGIAR

cgiar.org

58

CGIAR is a globally recognized non-profit research partnership focused on agricultural innovation to address poverty, hunger, and environmental degradation. It operates a network of 15 research centers and collaborates with over 3,000 partners worldwide. The website reflects a mature digital presence with comprehensive content, including research portfolios, impact reports, and news updates, targeting global stakeholders in agriculture and development. Technically, the site is built on WordPress with modern JavaScript libraries and SEO tools, hosted with secure HTTPS and optimized for mobile devices. While performance is moderate, the site demonstrates good accessibility and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response information. The WHOIS data is unavailable due to malformed output, limiting domain registration verification. However, the website's professionalism, transparency, and extensive content strongly indicate legitimacy. No signs of blocking or WAF interference were detected, allowing full content access and analysis. Overall, CGIAR's website is a trustworthy and authoritative source for agricultural research information, with room for security enhancements and more explicit contact details for incident response and vulnerability disclosures.

T

Terre Vivante

terrevivante.org

65

Terre Vivante is a French organization focused on promoting organic gardening, permaculture, ecological housing, and healthy cooking. It operates a content-rich website offering advice, books, and a magazine called Les 4 Saisons. The organization targets environmentally conscious individuals and gardeners interested in sustainable living. The website uses WordPress with WooCommerce for e-commerce and integrates multiple marketing and analytics tools to support its business model. Technically, the site is well-structured, mobile-optimized, and SEO-friendly, though performance is moderate due to numerous third-party scripts. Security posture is good with HTTPS and captcha protections, but could be improved by adding explicit security headers and publishing a security policy. Privacy compliance is strong with cookie consent and GDPR-aligned policies. The absence of WHOIS registration data reduces domain trust slightly, but overall the site appears legitimate and professional.

C

Citoyen'R

citoyenr.org

49

Citoy’enR is a French cooperative (SCIC) focused on developing renewable energy production means, primarily photovoltaic solar panels, within the Toulouse urban area. The cooperative model emphasizes citizen participation, social economy values, and ecological responsibility. The business model involves collective citizen investment to finance installations, with electricity sold at guaranteed tariffs to fund new projects, educational initiatives, and member remuneration. The website presents a professional and consistent brand image, targeting local citizens and stakeholders interested in sustainable energy solutions.

P

Post Carbon Institute

resilience.org

61

Resilience.org is a non-profit program under the Post Carbon Institute focused on supporting community resilience in response to ecological and social challenges. The website offers editorial content, podcasts, events, and subscription-based deep dives to educate and engage its audience. The organization positions itself as a thought leader in sustainability and resilience, targeting a general audience interested in these topics. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy transparency and WHOIS data availability for improved domain trust.

E

ECOLISE

ecolise.eu

53

ECOLISE is a European non-profit network dedicated to empowering community-led initiatives focused on climate change and sustainability. The organization provides participatory advocacy, funding through the Regenerative Communities Fund, project support, and a variety of resources including publications and activity reports. Their target audience includes communities and stakeholders engaged in environmental sustainability across Europe. The website positions ECOLISE as a key network in the European sustainability ecosystem, emphasizing collaboration and community empowerment. Technically, the website is built on WordPress using the Kadence theme and several plugins such as Yoast SEO, Events Calendar Pro, and Groundhogg for marketing automation. The site is well-structured with good SEO practices, mobile optimization, and accessibility features. Google Analytics is used with consent mode configured to deny personalization and storage in certain regions, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements consent mechanisms for cookies. However, no explicit security headers were detected, and there is a lack of published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. The domain registration is consistent and trustworthy, with no privacy protection masking registrant details. Overall, ECOLISE's website demonstrates a solid digital presence with good business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and terms of service policies, add security policy information, and consider a vulnerability disclosure mechanism. These steps will strengthen the site's privacy compliance and security posture, supporting its mission to empower communities for a sustainable future.

P

PROFI CREDIT Czech, a. s.

proficredit.cz

53

PROFI CREDIT Czech, a. s. is a well-established financial services company based in the Czech Republic, specializing in non-bank insured loans up to 250,000 CZK. The company targets individuals and small business clients seeking flexible loan options with insurance for repayment capability. With a domain age dating back to 2006, PROFI CREDIT has a solid market presence and a good reputation, supported by positive customer ratings and professional branding. The website reflects a mature digital infrastructure built on WordPress, integrating modern tools such as Cookiebot for privacy compliance, Google Tag Manager, Hotjar for analytics, and a chat system for customer support. The site is mobile-optimized and SEO-friendly, providing a good user experience.

C

CanvasJS

canvasjs.com

68

CanvasJS is a specialized technology company providing a high-performance HTML5 JavaScript charting library designed for developers and businesses requiring advanced data visualization solutions. The company offers a broad range of chart types and supports multiple popular frameworks such as React, Angular, and jQuery, positioning itself as a versatile and developer-friendly solution in the data visualization market. The business is a subsidiary of Fenopix and has been operational since 2013, with a domain registration dating back to 2011, indicating a stable and established presence. Technically, the website is built on WordPress with modern front-end technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is optimized for performance and mobile responsiveness, with good SEO practices implemented via Yoast SEO. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, ensuring reliable uptime and performance. From a security perspective, the site enforces HTTPS with strong domain status protections and includes standard security headers. However, DNSSEC is not enabled, which is a recommended improvement. No explicit security policies or incident response contacts are published, suggesting room for enhancement in transparency and security governance. The site does not expose sensitive data and uses asynchronous loading for analytics scripts to minimize performance impact. Overall, CanvasJS presents a professional, trustworthy, and technically sound web presence with strong business credibility. Strategic recommendations include enabling DNSSEC, publishing formal security and incident response policies, and considering a vulnerability disclosure program to further enhance trust and security posture.

E

egraine

e-graine.org

45

e-graine is a French non-profit association specializing in popular education and territorial cooperation, with a presence throughout France. The website reflects a professional and consistent brand identity, targeting a general audience interested in educational and cooperative initiatives. Technically, the site is built on WordPress using the Divi theme, enhanced with SEO and analytics tools such as Yoast SEO and Google Analytics. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate, with HTTPS implied but no visible security headers or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit entities. Overall, the site is trustworthy but could improve in privacy and security transparency.

B

Bio Consom'acteurs

bioconsomacteurs.org

62

Bio Consom'acteurs is a French non-profit organization dedicated to promoting local, equitable, and accessible organic agriculture and food systems. The website serves as a platform for advocacy, community engagement, and information dissemination, targeting a general audience interested in sustainable agriculture and organic consumption. The organization has a clear market position within the non-profit sector focused on environmental and social sustainability. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by OVH sas, and incorporates modern web technologies and a cookie consent mechanism compliant with GDPR standards. Security posture is good with HTTPS enabled and cookie consent implemented, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and well-structured, with strong social media integration and a clear business model. No critical security or compliance issues were detected.

T

Transiscope

transiscope.org

59

Transiscope is a small non-profit project based in France, founded in 2018, focused on connecting citizen initiatives for territorial transition through an open source web portal featuring a unified map and directory. The website is built on WordPress using Elementor and Astra theme, with a moderate technical maturity and good mobile optimization. Security posture is adequate with HTTPS and domain protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

S

Sunelis Services

sunelis-services.com

59

Sunelis Services is a French company specializing in the maintenance, repair, and monitoring of photovoltaic solar power installations. Established since 2008, the company offers a range of services including maintenance contracts, after-sales service, troubleshooting, remote monitoring, cleaning, and thermographic analysis. Their target audience includes professionals, private individuals, local authorities, and farmers. The company maintains a professional online presence with clear contact information and social media links, positioning itself as a trusted regional service provider in the renewable energy sector. Technically, the website is built on WordPress using Elementor and several plugins such as Yoast SEO and MonsterInsights for analytics. The site is hosted under the registrar IONOS SE with DNS services from ui-dns providers. The website is mobile-optimized and SEO-friendly, though some accessibility features are basic. Performance is moderate, with modern technologies employed but some room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protection enabled. However, no advanced security headers were detected, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Analytics tracking is implemented via Google Analytics and MonsterInsights, with moderate user tracking. Overall, the website is professional, trustworthy, and serves its business purpose well. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and providing clear incident response contacts to improve compliance and security posture.

C

Copergreen

copergreen.fr

47

Copergreen is an independent pioneer group founded in 2008 specializing in the development and integration of photovoltaic energy projects. The company targets individuals and businesses interested in energy transition and solar power solutions, offering services such as project development, maintenance, optimization, and investment options. The website reflects a medium-sized energy sector business based in France, with consistent branding and professional content. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, hosted by OVH. It employs modern web technologies including Google Analytics for tracking and CookieYes for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No security policy or incident response information is published, and no vulnerability disclosure mechanism is present. Cookie consent is well implemented with detailed categories and user controls, indicating good privacy compliance. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. However, it could enhance its security posture by adding security headers, publishing security policies, and improving accessibility. No critical vulnerabilities or suspicious activities were detected.

V

valemo.fr

valemo.fr

54

VALEMO is a French company specializing in the exploitation, maintenance, and supervision of renewable energy assets including wind, solar, hydroelectric, and marine energies. Established in 2011, the company has grown to a medium-sized enterprise with over 145 employees distributed across 15 bases, including a dedicated offshore team. VALEMO positions itself as a leading multi-energy operator in France, recently ranked as the 5th largest wind energy operator nationally. The company offers a comprehensive suite of services from engineering to onshore and offshore operations, targeting clients who own and operate renewable energy installations. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by OVH, a reputable provider. The site integrates Matomo analytics for privacy-conscious user tracking and embeds YouTube videos for multimedia content. The website is mobile-optimized with good SEO practices but could improve accessibility and performance further. Security posture is solid with HTTPS enforced, though security headers and explicit security policies are absent. From a security and compliance perspective, the site implements a GDPR cookie consent mechanism but lacks visible privacy policies, terms of service, or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, showing a long-standing presence and no privacy protection, which supports legitimacy. Overall, VALEMO presents a professional and trustworthy online presence aligned with its business sector. However, improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.

H

Helexia

helexia.green

46

Helexia is a French company specializing in providing personalized energy transition trajectories for businesses. Their services encompass energy audits, photovoltaic solar installations, energy efficiency solutions, and regulatory compliance support. The company positions itself as a medium-sized enterprise under the Helexia Group umbrella, targeting corporate clients seeking sustainable energy solutions. The website is professionally designed using WordPress with modern plugins and integrates HubSpot forms for lead generation. The technical infrastructure is solid with HTTPS and cookie consent mechanisms in place, although some security headers and explicit privacy policies are missing. The WHOIS data is unavailable or malformed, which slightly reduces trustworthiness but the overall digital presence is consistent and professional. The company leverages marketing and analytics tools such as HubSpot, Facebook Pixel, and LinkedIn Insight Tag to optimize user engagement and tracking.

U

Un Deux Toits Soleil

undeuxtoitssoleil.fr

43

Un Deux Toits Soleil is a citizen cooperative focused on renewable energy projects, specifically photovoltaic solar installations on public and private buildings in the Lyon metropolitan area. The cooperative aims to promote energy sobriety and renewable energy awareness among local residents. The website is professionally designed using WordPress with SEO optimization and provides real-time production data and partner information, indicating a mature digital presence. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the content and partnerships suggest a legitimate organization. Security posture is good with HTTPS enforced but could be improved with additional security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned within its local energy cooperative market.

I

Inddigo

inddigo.com

56

Inddigo is a well-established French consulting and engineering firm specializing in ecological and energy transition services for public and private sectors. Founded in 1986, it employs over 400 professionals across 16 locations in France and the Caribbean. The company offers a broad range of services including consulting, engineering, training, and innovation to support sustainable development and complex territorial projects. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress with modern plugins such as Yoast SEO and WP Rocket for performance. Security posture is good with HTTPS and some security headers, but lacks explicit privacy, cookie, and incident response policies visible on the site. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business information appear credible and trustworthy. Overall, the site demonstrates a mature digital presence but would benefit from enhanced transparency in privacy and security policies.

F

Fondation la France s’engage

fondationlafrancesengage.org

63

Fondation la France s’engage is a French non-profit foundation dedicated to identifying and promoting bold social and environmental innovations. It supports impactful projects in education, health, inclusion, equality, ecology, and digital sectors through a national contest and ongoing accompaniment. The foundation has established a strong market position in France with over 200 supported structures and significant investment. Technically, the website is built on WordPress with modern plugins and tools, hosted by OVH, and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS and privacy-conscious analytics, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear business credibility and active social media presence.

D

Delalande Pêche

delalande-peche.fr

50

Delalande Pêche is a well-established French manufacturer and retailer specializing in soft fishing lures and accessories for both freshwater and saltwater fishing. Founded in 1979, the company has built a strong market presence with a distribution network of approximately 900 stores domestically and internationally. The website serves as both an e-commerce platform and an educational resource, featuring a comprehensive blog and product catalog. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for SEO and GDPR compliance. Hosting is provided by o2switch, a reputable French hosting provider, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, but incident response and vulnerability disclosure information are absent. Overall, the website is professional, trustworthy, and well-aligned with the business's offline reputation.

B

boutique-bleuetdefrance.fr

boutique-bleuetdefrance.fr

47

Boutique-bleuetdefrance.fr is a French e-commerce website specializing in natural, organic, and holistic health and wellness products. The site targets French-speaking consumers interested in healthy lifestyles and offers a curated selection of products in categories such as health, beauty, and weight loss. The business model is retail e-commerce with an integrated blog for content marketing and customer engagement. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

A

American Liver Foundation

alfflavors.org

54

The American Liver Foundation's ALF Flavors website is a professionally maintained platform promoting a national culinary fundraising event dedicated to supporting liver disease education, advocacy, and research. The event leverages local culinary talent to engage philanthropists and food enthusiasts, positioning itself as a reputable and established non-profit initiative. The website demonstrates a solid digital presence with clear branding, trust indicators, and comprehensive event information. Technically, the site is built on WordPress with Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements such as DNSSEC and explicit security policies are recommended. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy, safe, and well-aligned with its non-profit mission.

S

Sdružení pro hračku a hru, z.s.

sdruzenihracky.cz

38

Sdružení pro hračku a hru, z.s. is a well-established Czech association founded in 1990, dedicated to supporting the toy manufacturing and distribution sector. The organization acts as a professional body connecting manufacturers, importers, and sellers of toys, providing industry information, quality and safety standards, and organizing events such as trade fairs and awards. The website reflects a mature digital presence with clear business information, membership benefits, and active communication channels. Technically, the site is built on WordPress with modern plugins and SEO tools, offering a responsive and user-friendly experience. Security posture is solid with HTTPS, reCAPTCHA protection on forms, and cookie consent mechanisms, though there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting the association's mission effectively.

W

Woman & Style

womanandstyle.cz

48

Woman & Style is a Czech online magazine targeting modern women interested in fashion, beauty, culture, relationships, health, and weight loss. The website offers editorial content, contests, and gift tips, positioning itself as a niche lifestyle media outlet. Technically, the site is built on WordPress with Elementor and Yoast SEO, indicating a modern CMS infrastructure with good SEO practices. The presence of cookie consent and privacy policy pages demonstrates GDPR compliance awareness. Security posture is moderate with HTTPS enabled but lacking visible security headers and incident response contacts. No WHOIS data was found, which slightly reduces domain trust but the website content and structure appear professional and legitimate. Overall, the site is safe for general audiences and well-optimized for user experience.

M

MeziŽenami.cz

mezizenami.cz

41

MeziŽenami.cz is a Czech online women's lifestyle magazine providing daily content on beauty, health, family, leisure, gastronomy, and competitions. The site is well-established with consistent branding and active social media presence, targeting primarily women in the Czech Republic. Technically, it is built on WordPress with modern plugins and SEO tools, delivering a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS and standard protections, though some security headers could be improved. Privacy compliance is basic with privacy and terms documents available but lacking explicit cookie consent mechanisms. Overall, the website is legitimate and professionally maintained, with standard advertising and tracking practices for a media site.

W

WPMarmite

wpmarmite.com

47

WPMarmite is a well-established French-based WordPress educational media platform founded in 2011, offering comprehensive tutorials, theme and plugin reviews, and training programs targeted at WordPress beginners and intermediate users. The website is professionally designed, mobile-optimized, and uses modern technologies including WordPress CMS, Elementor, and various analytics tools. Hosting is provided by o2switch, a reputable French hosting provider. Security posture is good with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and security headers are not detected. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy found in the analyzed content. The domain registration is consistent and legitimate, supporting the credibility of the business. Overall, WPMarmite presents a trustworthy and professional online presence focused on WordPress education.

I

Instant System

instantsystem.hu

55

Instant System is a Hungarian IT service provider specializing in professional IT solutions tailored for small to medium businesses and veterinary professionals. Their offerings include IT repairs, maintenance, cloud services, electronic mail solutions, and specialized software and hardware support. The company appears to be relatively new, founded in 2023, with a focused local market presence. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern SEO and marketing tools such as Yoast SEO and Klaviyo. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the domain registration is consistent with the business profile, supporting legitimacy. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

R

Réseau Action Climat

reseauactionclimat.org

59

Réseau Action Climat is a French non-profit federation of 27 associations dedicated to combating climate change and promoting ecological transition. The organization provides advocacy, educational resources, and networking services to its members and the public. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and GDPR-compliant cookie management. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance trust. Overall, the domain registration and hosting details support the legitimacy and stability of the organization. The site is safe for general audiences and does not contain any adult or questionable content.

V

Vitacom

vitacom.fr

58

Vitacom is a small, established web agency based in Toulouse, France, specializing in e-commerce, website creation, SEO, digital marketing, and training services. With over 20 years of experience, the company targets small and medium-sized enterprises (PME/PMI) and very small businesses (TPE) seeking to develop their online presence and sales. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. The agency showcases a portfolio of client projects and maintains active social media profiles, enhancing its market credibility. Technically, the site leverages WordPress with popular plugins such as WPBakery Page Builder and Slider Revolution, and integrates Google Tag Manager and social media tracking pixels for marketing analytics. The site is mobile-optimized and employs HTTPS, indicating a good baseline security posture. However, some security headers are not explicitly detected, and no formal security or incident response policies are published on the site. From a security and compliance perspective, the site uses HTTPS and includes cookie consent mechanisms, but lacks a visible privacy policy and terms of service pages, which are important for GDPR compliance. The WHOIS data for the domain is missing, which reduces trust in domain registration legitimacy, although the website content and business information appear consistent and professional. Overall, Vitacom presents as a credible and professional web agency with solid technical implementation and marketing integration, but should improve transparency on privacy policies and domain registration details to enhance trust and compliance.

W

WPLift

wplift.com

73

WPLift is a well-established WordPress resource website founded in 2010, offering comprehensive tutorials, reviews, and guides focused on WordPress themes, plugins, hosting, and optimization. The site targets WordPress users of varying skill levels, providing actionable and engaging content to help users succeed with WordPress. The business model primarily revolves around content publishing combined with affiliate marketing and sponsored promotions. Technically, the site is built on WordPress 6.7.2, leveraging a modern tech stack including popular plugins for SEO, analytics, and user engagement. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and no exposed sensitive data, though additional security headers and a published security policy would enhance trust. Privacy compliance is strong, with professional policies managed via Iubenda and a cookie consent mechanism in place. Overall, WPLift presents a professional, trustworthy, and content-rich platform with a high level of digital maturity.

F

federation flame

federation-flame.org

65

The Fédération des Agences Locales de l’Énergie et du Climat (FLAME) is a French non-profit federation coordinating a network of local energy and climate agencies (ALEC) across France. It supports territorial energy transition through expertise in public territorial engineering, training, and resource provision. The website positions FLAME as a key reference in energy transition and climate action in France, targeting local authorities, energy operators, and community organizations. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted likely by WPServeur, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly visible. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of organization. Overall, the site is professional, trustworthy, and compliant with GDPR, with moderate user tracking via Matomo analytics.