Medium-risk security reports

REGIO AUTO, spol. s r.o. is an authorized automotive dealership specializing in Fiat, Jeep, Alfa Romeo, and Fiat Professional vehicles, operating primarily in the Hradec Králové region of the Czech Republic. The company offers new and used car sales, financial services, authorized servicing, and original spare parts, positioning itself as a trusted regional dealer with a professional online presence. The website reflects a medium-sized business with a clear focus on automotive retail and service, targeting general consumers interested in these vehicle brands. Technically, the website employs a modern technology stack including jQuery, Font Awesome, Google Fonts, and various JavaScript libraries for galleries and popups. It uses the EasyWeb CMS platform and integrates tracking tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security or incident response policies. Cookie consent mechanisms are implemented, indicating some privacy compliance, but no terms of service or vulnerability disclosure information is present. The absence of WHOIS data for the domain reduces trust in domain legitimacy, though the website content and business information appear professional and consistent. Overall, the website is functional, professional, and safe for general audiences, but improvements in security posture, domain transparency, and compliance documentation are recommended to enhance trust and resilience.

Weleda.cz is the Czech Republic localized website of Weleda, a well-established international natural cosmetics brand. The site offers a comprehensive e-commerce platform featuring a wide range of natural skincare and body care products, supported by educational content and a magazine section. The brand emphasizes holistic and natural care, targeting general consumers interested in natural and sustainable beauty products. The website demonstrates a consistent and professional brand presence with clear navigation and good content quality. Technically, the site uses modern JavaScript frameworks such as AngularJS, integrates Google Tag Manager and other tracking tools, and provides a cookie consent mechanism aligned with GDPR requirements. Security posture is generally good with HTTPS enforced, though some security headers are not evident in the provided data. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for commercial sites. Contact information and social media presence are comprehensive, supporting business credibility.

MyQ is a professional provider of print management software solutions designed to optimize printing processes, reduce costs, and promote eco-friendly practices. The company targets businesses and organizations seeking efficient print management and control. The website reflects a mature digital presence with multi-language support, comprehensive product information, and clear calls to action. Technically, the site employs modern JavaScript libraries and frameworks, integrates analytics tools, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS enforcement and security headers, although the absence of a published security policy and incident response information suggests room for improvement. The lack of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Strategic recommendations include enhancing transparency around security practices and verifying domain registration details to bolster credibility.

Pivovar Hostivar is a well-established Czech brewery and hospitality business operating since 2011. The company runs multiple restaurant locations, a bakery, and hosts cultural events such as concerts and cinema screenings. Their business model combines onsite hospitality services with an e-commerce platform for beer sales, targeting local residents and visitors interested in craft beer and cultural experiences. The website is built on Drupal 10 with modern frontend libraries, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. Overall, the domain registration and business information are consistent and trustworthy, supporting a medium-sized hospitality enterprise in the Czech Republic.

The website www.send.cz is an e-commerce platform specializing in magazine subscriptions primarily for the Czech market. It represents the publisher Časopisy pro volný čas, s.r.o. and offers a wide catalog of magazines across various themes, including options for gift certificates and bonuses. The platform targets readers interested in periodicals and provides a user-friendly interface with clear navigation and mobile optimization. The business model revolves around direct subscription sales and online management of subscriptions, positioning itself as a key player in the Czech magazine subscription market. Technically, the site employs modern web technologies such as Bootstrap 4, jQuery, FontAwesome Pro, and Google Fonts, ensuring a responsive and visually consistent user experience. It integrates Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is served over HTTPS with a good SSL configuration, although some advanced security headers are missing. Performance is moderate, with deferred image loading and carousel normalization enhancing user experience. From a security perspective, the site enforces HTTPS and uses secure login modals. It includes a cookie consent banner compliant with GDPR requirements. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency and trustworthiness. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present, indicating room for improvement in security governance. Overall, the website is professional, trustworthy, and well-structured for its business purpose. The main risk lies in the lack of domain registration data and limited security policy disclosures. Strategic recommendations include enhancing security headers, publishing detailed privacy and security policies, and improving domain registration transparency to bolster trust and compliance.

DAKACOM.CZ s.r.o. is a Czech Republic-based market leader specializing in comprehensive marketing campaigns and instore solutions, leveraging advanced printing and 3D technologies with a strong emphasis on sustainability. The company serves a broad B2B audience including businesses and institutions across the EMEA region. Their service portfolio includes high-quality printing, 3D printing, plastic and plexi work, and carton packaging, supported by a robust technological infrastructure and a skilled workforce. The website reflects a professional and modern digital presence with multilingual support and multimedia content.

EZOfit s.r.o. operates the website zdravetrhy.sk, which promotes and organizes the 'Zdravé Vianočné Trhy' health and wellness exhibition held in Košice, Slovakia. The business focuses on providing a platform for exhibitors offering ECO, BIO, RAW products, personal and spiritual development, and health analyses. The website targets a general audience interested in health, wellness, and related lifestyle products. Technically, the site is built on WordPress with Yoast SEO and Google Analytics integrated, showing a moderate level of digital maturity with good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and explicit incident response policies. Privacy compliance is well addressed with GDPR-aligned policies and consent management. Overall, the site is professional and trustworthy but could improve security and transparency aspects.

Estetica Magazine is a professional media publication specializing in the Spanish hairdressing industry, providing up-to-date news, trends, educational content, and event coverage. It maintains a strong market presence with multiple international editions, targeting professionals and enthusiasts in the hairdressing sector. The website is built on a modern WordPress CMS infrastructure, leveraging popular plugins such as Yoast SEO and Elementor, and integrates marketing and analytics tools including Google Analytics, Google Tag Manager, Facebook Pixel, and advertising networks like Google AdSense. The site demonstrates good mobile optimization and user experience with a consistent branding approach. From a security perspective, the website employs HTTPS with a good SSL configuration but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No signs of WAF or content blocking were detected, and the site content is fully accessible. The WHOIS data is restricted due to registry policies for .es domains, limiting direct verification of domain registration details. However, the professional presentation and network of related international domains support the legitimacy of the site. Overall, the site scores well on content quality, technical implementation, and business credibility but has room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

Estetica Magazine Deutschland is a professional media publication focused on the German hairdressing industry, providing news, trends, product information, and educational content. It is part of an international network of Estetica Magazine editions, targeting professional hairdressers and industry stakeholders. The website demonstrates a solid market position with consistent branding and a medium-sized business profile founded around 2020. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, integrating Google Analytics and AdSense for performance and monetization. The site is mobile-optimized and SEO-friendly, with good user experience and navigation. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are missing. Overall, the site is trustworthy and professional, with room for improvement in compliance documentation and contact transparency.

Estetica Magazine is a professional media publication focused on the French hairdressing industry, providing news, trends, product information, and event coverage. The website targets professionals and enthusiasts in the hairdressing sector, positioning itself as a niche media outlet with international editions. The business model revolves around content publication and advertising revenue. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Elementor, and integrates multiple tracking and advertising services including Google Tag Manager, Facebook Pixel, and Google AdSense. The site is mobile optimized and SEO friendly, though some accessibility features are basic. Security posture is generally good with HTTPS enforced and bot protection via reCAPTCHA, but lacks explicit security headers and privacy compliance mechanisms. WHOIS data is not publicly available, indicating privacy protection which is common and justified for media businesses. Overall, the site is professional and trustworthy but should improve privacy and cookie compliance.

EsteticaMagazine.com is an online media publication specializing in the hairdressing industry, providing news, techniques, product information, and fashion trends to professionals and enthusiasts worldwide. The website is built on a modern WordPress platform with SEO and marketing tools integrated, reflecting a medium-sized, professional digital media presence. While the site demonstrates good technical implementation, mobile optimization, and privacy compliance, the lack of publicly available WHOIS registration data raises concerns about domain legitimacy. Security posture is generally strong with HTTPS, security headers, and GDPR-compliant cookie consent, but the absence of a published security policy and incident response details suggests room for improvement. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

Slovenský kozmetologický zväz (SKZ) is a Slovak independent professional association focused on the cosmetics industry, uniting manufacturers, importers, distributors, educators, researchers, and experts in related fields. The organization promotes professional standards, research, manufacturing best practices, and consumer safety in cosmetics within Slovakia. The website serves as an information hub for members and the public, featuring event announcements, news, and organizational details. Technically, the site is built on WordPress with common plugins like WooCommerce and Elementor, providing a modern but moderately optimized infrastructure. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is limited due to absence of a privacy policy page, though a cookie consent mechanism is present. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

The website veletrhkosmetiky.cz represents a professional event organizer, ABF, a.s., specializing in biannual beauty trade fairs in the Czech Republic. The site targets beauty professionals, exhibitors, and visitors interested in cosmetics, hairdressing, nail design, and foot care. It offers comprehensive event information, exhibitor catalogs, and professional competition details, positioning itself as a leading organizer in the beauty industry within the region. Technically, the site is built on WordPress with modern libraries and plugins, including Google Tag Manager and Yoast SEO, ensuring good SEO and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with room for improvement in security best practices and accessibility.

Jakub Míšek is a seasoned PHP developer specializing in custom e-commerce solutions using the Nette framework, with over 15 years of experience. The website presents a professional portfolio targeting businesses seeking scalable and tailored e-shop development, emphasizing reliability, advanced functionality, and long-term support. The business operates as a sole proprietorship based in the Czech Republic, with clear contact and billing information provided. Technically, the site uses modern PHP technologies and frameworks, though hosting details are not disclosed. The website is well-designed, mobile-optimized, and provides clear navigation and client references, enhancing trust and credibility. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and privacy compliance documentation. No forms or tracking scripts are present, indicating minimal data collection and user tracking. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the professional presentation and detailed business info mitigate concerns. Overall, the site is a strong representation of a small, specialized software development business with room for improvement in privacy and security policy transparency.

Napovime.cz is a Czech technology-focused informational portal specializing in artificial intelligence, automation, and robotics. Founded in 2019, it provides educational articles, practical how-to guides, and analyses of the latest trends in digital technologies. The site targets a general audience interested in technology and practical knowledge, positioning itself as a niche content provider in the Czech market. The business model centers on content publishing supported by advertising and affiliate marketing. Technically, the site is built on WordPress, leveraging multiple plugins for content management, social sharing, and analytics. It uses Google Fonts, Google Analytics, and Google Adsense, hosted on a WEDOS infrastructure. The website demonstrates good SEO practices, mobile optimization, and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR consent dialogs. Contact information and company registration details are clearly presented, enhancing business credibility. Overall, the site is professional, trustworthy, and well-maintained.

General Code is a company specializing in municipal code solutions that enable integration of ordinances, zoning codes, and building codes with various systems. The website positions the company as a forward-thinking provider targeting municipalities and government entities. The technical infrastructure is based on WordPress CMS with modern SEO and analytics tools such as Yoast SEO, Google Analytics, Microsoft Clarity, and Google Tag Manager. The website is well-optimized for mobile and has good design and navigation quality. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is professional and functional but would benefit from improved privacy disclosures and security best practices.

The International Code Council (ICC) is a prominent non-profit organization dedicated to building safety solutions, codes and standards development, professional development, accreditation, and consulting services. The website reflects ICC's leadership position in the building safety sector, targeting professionals, members, and industry stakeholders. The business model is membership-based, offering a broad range of services including training, certification, and innovation initiatives. ICC maintains a strong market presence with multiple subsidiaries and partner organizations supporting its mission. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, Facebook SDK, and New Relic monitoring. The site demonstrates good performance, mobile optimization, and accessibility features. SEO is well implemented with Yoast SEO plugin and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses CSRF tokens and math challenge CAPTCHAs on forms, and integrates security monitoring tools. However, explicit security headers like CSP and X-Frame-Options are not clearly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting ICC's authoritative role. The lack of WHOIS data limits domain registration trust analysis but the site content and branding strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving incident response visibility.

The website handpanista.cz is a professionally designed personal business site dedicated to the handpan musical instrument activities of Jiří Káš. It focuses on the production of NEO handpans, handpan courses, workshops, and performances. The site targets handpan enthusiasts and musicians interested in learning and purchasing handpans. The business operates in a niche artisanal musical instrument sector within the Czech Republic and is relatively small in scale, founded in 2019. Technically, the site is built on WordPress 6.8.3 with a custom theme and hosted on cesky-hosting.eu. The site shows good mobile optimization and SEO practices but lacks some advanced accessibility features. Performance is moderate, and the site uses modern web technologies including JavaScript and SVG icons. From a security perspective, HTTPS is enabled ensuring encrypted communication. However, the site lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve its security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the site is safe with no adult or questionable content detected. The domain registration data is consistent with the website content and business claims, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clear contact information to enhance compliance and trust.

The website jirikas.com serves as a personal CV and business showcase for Jiří Káš, highlighting his professional engagements in advertising, photography, and handpan music and manufacturing. The site presents a niche personal brand with diversified activities including managing an advertising company (Webintrek s.r.o.), collaborations with various media outlets as a photographer, and handpan performances, workshops, and manufacturing under the NEO handpan brand. The target audience includes general visitors interested in these fields. Technically, the site is built on WordPress 6.8.3 with common libraries such as jQuery and Font Awesome, hosted likely on Czech hosting providers. The site is moderately performant, mobile-optimized, and has basic SEO and accessibility features.

The website handpan-kurz.cz is a small-scale educational platform focused on teaching handpan music, primarily through in-person courses and workshops led by Jiří Káš, a recognized handpan player in the Czech Republic. The site offers rich content including detailed explanations, images, and links to related handpan resources and artists, targeting individuals interested in learning and mastering the handpan instrument. Technically, the site is built on WordPress using the Donovan theme, hosted by a Czech hosting provider, and employs modern web technologies such as JavaScript and SVG icons. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks security headers and formal privacy or cookie policies, which limits its compliance posture. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the site is legitimate and consistent with its domain registration data, but improvements in privacy compliance and security best practices are recommended.

Bici.cz is a Czech Republic based e-commerce and retail business specializing in drums, percussion instruments, and related musical accessories. Established since 1996, it serves professional, amateur, and beginner musicians with a broad product catalog and a physical store located in Prague. The website demonstrates a mature digital presence with modern web technologies and integration of popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit security policies. Overall, the business appears legitimate and well-positioned in its niche, but should enhance privacy compliance and security disclosures to strengthen trust and regulatory adherence.

Handpan s.r.o., operating the website handpan.cz, is a Czech Republic based small business specializing in the manufacturing, sale, and education of handpan musical instruments. The company offers handpan production under the NEO handpan brand, organizes workshops and courses primarily for beginners and enthusiasts, and provides rich content about handpan history and playing techniques. The website reflects a niche market position with a focus on quality and community engagement. Technically, the site is built on WordPress with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Contact information is limited but includes a phone number and physical address in Říčany near Prague. Social media presence on Facebook and YouTube supports brand trust and outreach. Overall, the website is professional, content-rich, and trustworthy, though it would benefit from enhanced privacy compliance and security practices.

Konica Minolta Business Solutions Finland Oy operates as a key regional branch of the global Konica Minolta group, providing advanced office printing, professional printing, and digital work automation solutions. The company targets business and organizational customers seeking modern, secure, and efficient technology solutions in printing, data analytics, and healthcare imaging. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with a large enterprise. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Maps and Usercentrics for consent management, and is hosted on a reliable CDN, ensuring good performance and mobile optimization. Security posture is robust with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

The website www.pausch.com is a parked domain landing page indicating the domain is for sale. It provides a contact form for inquiries with data collection consent and Google reCAPTCHA protection. The site uses modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. However, the WHOIS data is unavailable, suggesting the domain may be unregistered or recently expired, which reduces trust and legitimacy. There is no business identity, contact emails, phone numbers, or physical addresses provided, limiting business credibility. The privacy policy is present but basic, and no cookie policy or terms of service pages are found. Security posture is moderate with HTTPS implied and reCAPTCHA in place, but lacks security headers and incident response information.

Grassrootz is a small Australian-based company providing a SaaS platform focused on event fundraising and community engagement for non-profit organizations and event organizers. Their website is professionally designed using Squarespace, featuring clear navigation, social media integration, and modern web technologies such as Google Tag Manager and reCAPTCHA. The platform offers services including event ticketing, registrations, and integrations to support fundraising efforts. Technically, the site is well-implemented with HTTPS and HSTS enabled, indicating a strong security posture. However, the absence of WHOIS data and lack of explicit privacy and terms of service policies represent gaps in transparency and compliance. No direct contact information or security incident response details are provided, which could impact trust and user confidence.

Somfy Projects is a specialized division of the Cross - Groupe Micropole, focusing on the manufacturing and automation of solar shading solutions for buildings. Their offerings include motors, building controls, and local control systems designed to improve energy efficiency and occupant comfort. The company targets building professionals and owners seeking dynamic solar shading solutions, positioning itself as a market leader in this niche. The website reflects a mature digital presence with multilingual support and regional sites, indicating a global footprint primarily focused in the Middle East and Europe. Technically, the website is built on a ColdFusion backend with modern JavaScript libraries and performance monitoring tools such as Boomerang and TagCommander. The site is hosted likely behind Akamai CDN, ensuring good performance and availability. The site is mobile optimized and SEO friendly, with structured data implemented for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses captcha on its contact forms to prevent spam. However, it lacks explicit security headers and a visible cookie consent mechanism, which are areas for improvement. The WHOIS data is unavailable due to privacy protection or query failure, but the website content and external references indicate a legitimate and professional business. Overall, Somfy Projects presents a solid business and technical profile with room for enhancement in privacy compliance and security best practices to further strengthen trust and regulatory adherence.

SomfyPro.be is a professional B2B website for Somfy, a company specializing in automation and smart home solutions primarily in the energy sector. The website targets professionals in Belgium and offers products such as motors, controls, sensors, and accessories, along with smart home and solar energy solutions. The site is well-structured, multilingual, and professionally designed, reflecting a mature digital presence. Technically, it leverages modern frameworks like React and Front-Commerce, integrates with services such as Algolia and Google Maps, and uses analytics tools like New Relic. Security posture is solid with HTTPS enforced, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. WHOIS data is restricted due to registry policy, but the website's professionalism and consistency support its legitimacy. Overall, the site presents a trustworthy and business-focused platform with room for minor security enhancements.

Somfy Shop KR operates as a specialized e-commerce platform focused on motorized blinds, curtains, and smart home window covering solutions in South Korea. The company offers a broad product range including IoT-enabled blinds and remote controls, targeting tech-savvy consumers seeking home automation. The website is built on the Magento platform, leveraging modern JavaScript libraries and integrations such as Google Tag Manager and Naver Analytics, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and provides comprehensive customer support information, including consulting services and multiple contact channels. Security posture is solid with HTTPS enforced and secure cookies, though some security headers could be improved. Privacy and cookie policies are present, supporting basic GDPR compliance, though no explicit advanced compliance frameworks are evident. The absence of WHOIS data for the domain is a notable anomaly that slightly detracts from overall trust but does not undermine the professional presentation and operational maturity of the site. Strategic partnerships with platforms like Naver Smartstore and Samsung SmartThings enhance market reach and product integration. Overall, the site presents a trustworthy and professional front for a medium-sized retail business in the smart home sector.

SIDO LYON operates as a leading European event and showroom specializing in IoT, Artificial Intelligence, Robotics, and Extended Reality technologies. The website presents a professional and well-structured platform targeting industry professionals and companies interested in these advanced technology sectors. The business model centers around organizing and showcasing innovative technology solutions, positioning itself as a key player in the European technology event market. Technically, the website is built on WordPress CMS, leveraging popular plugins such as Contact Form 7 and Yoast SEO, alongside marketing and analytics tools including Google Tag Manager, Google Ads, and LiveChat. The site demonstrates good mobile optimization and SEO practices, with GDPR compliance implemented via the Didomi consent management platform. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS with strong SSL configuration and integrates GDPR consent mechanisms. However, the absence of explicit security headers and lack of published security policies or incident response contacts indicate areas for enhancement. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the active and professional website presence suggests a legitimate business operation. Overall, SIDO LYON presents a credible and professional digital presence with solid business positioning in the technology event sector. Strategic improvements in security transparency, domain registration verification, and contact information disclosure would further strengthen trust and compliance.

CS GROUP is a medium-sized European technology company specializing in the design, integration, and operation of critical information and communication systems tailored to clients' operational needs. The company operates primarily in strategic sectors such as defense, aerospace, space, transport, energy, industry 4.0, and finance & services. It is positioned as an agile and innovative player with a strong focus on delivering operational solutions and technological innovation. The website reflects a professional and consistent brand image, supported by active content updates and social media presence. The parent company is Sopra Steria, a major European tech player, which adds to its credibility. Technically, the website is built on WordPress with modern plugins and technologies including Yoast SEO, Slider Revolution, and Google Analytics. The site is mobile-optimized, uses HTTPS, and implements cookie consent mechanisms compliant with GDPR. Performance is moderate with good SEO and accessibility basics in place. However, some improvements can be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit published security policies, incident response contacts, and vulnerability disclosure information. No direct contact emails or phone numbers are found on the homepage, which may impact user trust. The WHOIS data is missing or unavailable, which raises concerns about domain transparency and trustworthiness despite the professional website content. Overall, CS GROUP presents a strong business and technical profile with room for improvement in transparency and security communication. The risk level is moderate with recommendations to enhance security policies, contact availability, and domain registration clarity.

ACIAH is a French non-profit organization dedicated to digital inclusion and accessibility, primarily targeting seniors, people with disabilities, and those less familiar with digital technology. They offer a simplified Linux system (ACIAH-Linux), workshops, personalized support, and educational resources to foster autonomy and digital literacy. The website is professionally designed, mobile-optimized, and uses a mature technology stack including SPIP CMS and Bootstrap. The hosting is provided by OVH, a reputable registrar, with domain registration consistent with the organization's founding date and mission. Security posture is moderate with HTTPS enabled but lacking advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy, content-rich, and focused on social good but could improve in privacy and security transparency.

Tice-Éducation is a French digital education portal providing free and independent resources on topics such as coding, AI, EdTech, and digital transformation in schools. The site targets educators, students, and parents interested in educational technology. Technically, it is built on Joomla CMS with modern frontend libraries and includes advertising managed by Revive Adserver. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism, indicating a moderate level of privacy compliance. Security posture is good with HTTPS enabled, but lacks explicit security headers and published security policies. WHOIS data is not publicly available, suggesting privacy protection, which is reasonable for this type of site. Overall, the site is professional, trustworthy, and safe for general audiences.

INRAE is a prominent French public research institute specializing in agriculture, food, and environmental sciences. The website reflects a mature digital presence with comprehensive content targeting researchers, students, policymakers, and the general public. It offers extensive resources including research dossiers, events, and collaboration opportunities. The site is multilingual and well-branded with official government logos and certifications, reinforcing its authoritative position. Technically, the website is built on Drupal 10, leveraging modern web standards and responsive design to ensure accessibility and usability across devices. The presence of cookie consent mechanisms and privacy policies indicates attention to regulatory compliance, particularly GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. The WHOIS data is unavailable due to AFNIC policies, but the domain is active and updated, consistent with a legitimate public institution. No suspicious or malicious indicators were found. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a government research entity.

Toulouse INP is a reputable French higher education and research institution specializing in engineering education and scientific research. The website presents a comprehensive offering of academic programs, research initiatives, and innovation partnerships, targeting students, researchers, and industry collaborators. The institution maintains a strong regional presence with multiple partner schools and international collaborations. Technically, the website is built on the Ametys CMS platform, leveraging modern JavaScript libraries for an interactive user experience. It is mobile-optimized and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and WHOIS data transparency are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, supporting the institution's mission effectively.

IRIT (Institut de Recherche en Informatique de Toulouse) is a prominent academic research institute specializing in computer science and information technology, affiliated with Toulouse universities in France. The website serves as an informational and academic portal targeting researchers, students, and industry partners. It offers insights into research activities, educational programs, and collaborations. The site is well-structured, professionally designed using modern web technologies such as Bootstrap, and supports multilingual content in French and English. The technical infrastructure reflects a mature digital presence with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, though explicit security headers and policies are not clearly documented. Privacy compliance is lacking due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the domain registration and WHOIS data align well with the institution's academic nature, indicating high legitimacy and trustworthiness.

The website at toulouse-tech-transfer.com/owa/auth/logon.aspx is a Microsoft Outlook Web Access (OWA) login portal hosted on a custom domain registered with OVH sas since 2011. The site primarily serves as an authentication gateway for email access and does not provide business descriptive content, privacy policies, or contact information on the login page. The domain registration is consistent and legitimate, hosted by a reputable provider, but the website content is minimal and focused solely on login functionality. Technically, the site uses standard Microsoft OWA web technologies including JavaScript, HTML5, and CSS, with some legacy ActiveX references for S/MIME controls. The hosting provider is OVH sas, and the domain is not DNSSEC enabled. The site lacks modern security headers and privacy compliance disclosures, which limits its security posture and GDPR compliance. Mobile optimization and SEO are basic, and no analytics or advertising scripts are detected. From a security perspective, the site uses HTTPS (implied by URL), employs POST method for login form submission with autocomplete disabled, and includes client-side scripts for password visibility toggling. However, the absence of security headers and privacy policies reduces the overall security maturity. No vulnerabilities or malware indicators are detected in the provided data. Overall, the website functions as a secure login portal but lacks comprehensive privacy, security, and business transparency features. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and compliance.

Tetaneutral.net is a French non-profit association providing internet access and hosting services primarily in the Toulouse region. It operates a radio network to serve local and rural communities, especially in underserved 'zones blanches'. The organization emphasizes network neutrality, free software advocacy, and community education. It also supports IoT projects and contributes to open source software. The website reflects a community-driven, transparent, and educational mission with a modest but consistent technical infrastructure hosted by Scaleway SAS. The site uses lightweight technologies such as PureCSS and minimal JavaScript, focusing on content clarity and accessibility. Security posture is moderate but lacks advanced protections such as DNSSEC and security headers, and no explicit HTTPS information was found. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is strong given the domain age, transparency, and community trust signals. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices.

Theoma is a French financial services firm specializing in comprehensive back-office support for SMEs and business leaders, including accounting, financial management, HR, legal, digitalization, and CSR services. Founded in 2019, it positions itself as a trusted partner offering a 360° financial expertise to help clients manage their businesses with confidence. The website is professionally designed, mobile-optimized, and rich in content, showcasing client testimonials and detailed service descriptions that reinforce its market credibility. Technically, the site is built on Webflow with modern libraries such as jQuery and Finsweet CMS Slider, hosted on Webflow's platform, ensuring good performance and accessibility. Security posture is solid with HTTPS enabled and secure forms, though explicit security headers and privacy/cookie policies are missing, which are recommended for compliance and trust. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the professional presentation and business legitimacy. Overall, Theoma's digital presence reflects a mature, client-focused financial services provider with room for improvement in privacy compliance and security transparency.

Swile is a French technology company specializing in employee engagement solutions through a smart card and app that consolidates various employee benefits such as meal vouchers, gift vouchers, mobility, and cultural checks. Positioned as an innovative leader in the French market, Swile targets both employees and employers with a B2B SaaS and payment services model. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, it leverages modern frameworks like React and Next.js, ensuring fast performance and good accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response information are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website is trustworthy and well-aligned with the company's business claims.

Tourny Meyer is a well-established French real estate consultancy specializing in commercial properties such as offices, warehouses, retail spaces, and investments. The company positions itself as a trusted advisor for professionals seeking to buy, rent, or invest in business real estate across multiple French regions. Their website reflects a mature digital presence with comprehensive service descriptions, multiple agency locations, and a professional design consistent with their market position. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and Google APIs for enhanced user experience and property search functionality. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. The absence of WHOIS data reduces transparency but is typical for commercial entities using privacy protection. Overall, the site is credible, professional, and well-suited for its target audience.

Digital Korner is a specialized web agency based in Nantes, France, focusing on WordPress and No Code digital project development. The company combines the strengths of a traditional agency with the flexibility of independent experts, offering tailored services including website creation, redesign, web design, maintenance, SEO, and automation. Their active involvement in the WordPress community and plugin development positions them as a reputable player in the local digital services market. Technically, the website is built with modern frameworks such as Next.js and integrates scheduling tools like Cal.com, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS usage, but lacks explicit security headers and documented policies. The absence of WHOIS data reduces transparency but does not detract significantly from the professional presentation and trust signals on the site. Overall, the website is well-designed, mobile-optimized, and user-friendly, targeting businesses seeking expert digital solutions in the Nantes region.

padam is a French national and independent communication agency specializing in strategic communication, press relations, media relations, and influence strategies primarily serving clients in Nantes, Paris, and the Grand Ouest region. With 16 years of experience, the agency emphasizes pragmatic, clear, and measurable communication strategies to enhance visibility and reputation for businesses and organizations. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site uses WordPress with Elementor and integrates Google Analytics and Tag Manager for tracking, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is missing, which slightly impacts trust but the overall professional presentation and active social media presence support legitimacy. Strategic recommendations include enhancing security headers and verifying domain registration details to strengthen trust.

EPSA Innovation, formerly known as Sogedev, is a French consulting firm specializing in public funding advisory services for companies, particularly in innovation and research financing such as Crédit Impôt Recherche (CIR) and Crédit Impôt Innovation (CII). The company holds a strong market position as one of the top referenced experts by the Médiation des entreprises and operates multiple offices across France and internationally in Brazil. Their business model focuses on assisting companies in securing public financial aids and optimizing innovation-related tax credits. The website is professionally designed, content-rich, and targets French SMEs and larger enterprises seeking funding solutions. Technically, the website uses a modern but somewhat dated JavaScript stack including jQuery 1.9.1, Google Tag Manager, and Pardot for marketing automation. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and incident response documentation. Privacy compliance is basic with a privacy and cookie policy present, including consent mechanisms. The WHOIS data for the domain www.sogedev.com is missing, which raises some concerns about domain transparency and registration legitimacy. However, the website branding and content clearly indicate affiliation with EPSA, a known entity, mitigating some risk. No adult or questionable content is present, making the site safe for general audiences. Overall, EPSA Innovation presents a credible and professional online presence with moderate technical maturity and a good security baseline. The main risk area is the lack of WHOIS transparency and some missing security best practices. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving privacy compliance documentation.

uZine is a French independent web magazine focusing on topics such as independent web culture, cyber-economy, internet journalism, and social issues. The site provides articles, briefs, and forums aimed at a French-speaking audience interested in alternative media and social commentary. The business model appears to be content publishing with community participation and private member areas, positioning itself as a niche independent media outlet. Technically, the site is built on the SPIP CMS platform and uses older JavaScript libraries such as jQuery 1.x, with no evidence of modern performance or mobile optimization. Security posture is weak, with no HTTPS enforcement visible, outdated libraries, and no security headers detected. Privacy and cookie policies are absent, and no contact information is provided, which impacts trust and compliance. The WHOIS data is missing or indicates the domain is unregistered, which is a significant concern for legitimacy. Overall, the site is functional but lacks modern security, privacy, and technical standards, and the domain registration inconsistency poses a risk.

April is a well-established French non-profit association dedicated to promoting and defending free software and open standards since 1996. It serves a broad francophone audience including individuals, professionals, and institutions. The website reflects an active organization with frequent news, events, and educational content. Technically, the site is built on Drupal CMS, uses jQuery and Matomo analytics, and is moderately optimized for mobile and SEO. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve transparency and security practices.

Libre en Fête is a French non-profit initiative coordinated by April that promotes free software and free culture through annual events across France. The website provides detailed information about the 2025 edition of the event, including dates, how to participate, and links to related free software projects. The site targets the general public interested in technology and free culture, positioning itself as a well-established community-driven event organizer with a history dating back to 2001. Technically, the website is built on the SPIP CMS platform and uses Matomo for analytics, reflecting a moderate level of digital maturity with a focus on privacy-conscious tracking. The site is mobile-optimized and has a clear navigation structure, although accessibility features are basic. Performance is moderate, and SEO optimization is basic but functional. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and Strict-Transport-Security. There are no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, as well as incident response information, indicates gaps in compliance and security transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information to strengthen its security posture and user trust.

The website debian-fr.org is a French-language community forum dedicated to Debian GNU/Linux users and enthusiasts. It serves as a support and discussion platform, providing categorized forums for technical support, programming, announcements, and general community interaction. The site is powered by the Discourse forum software, indicating a modern and interactive technical infrastructure. The forum is active with recent posts and pinned official announcements, reflecting a well-maintained community resource. However, the absence of visible privacy, cookie, and terms of service policies suggests gaps in compliance and transparency. The WHOIS data is unavailable due to a malformed request, limiting the ability to verify domain registration details and reducing trust slightly. Overall, the site demonstrates good content quality and technical implementation but would benefit from enhanced privacy compliance and clearer business contact information.

Debian is a globally recognized open source operating system distribution maintained by a large community of volunteers. The website serves as a hub for project news, downloads, community engagement, and security advisories. It targets a broad audience including developers, users, and contributors interested in free software. The project is well-established with a strong reputation in the technology sector, particularly in Linux and open source communities. Technically, the website is built with standard HTML and CSS technologies, with no advanced frameworks detected. It is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. The site uses HTTPS for secure form submissions but lacks visible advanced security headers or explicit security policies. From a security perspective, the site shows good basic practices such as no exposed sensitive data and secure form handling. However, the absence of explicit privacy, cookie, and security policies, as well as missing WHOIS registration details, limits the overall trust and compliance posture. There is no evidence of vulnerability disclosure mechanisms or incident response contacts. Overall, Debian's website is trustworthy and professional, reflecting the project's maturity and community-driven nature. Strategic improvements in transparency around privacy, security policies, and WHOIS data would enhance trust and compliance. The site is safe for general audiences with no adult or questionable content detected.

We Recruit is a French-based recruitment software company offering a customizable ATS platform designed to optimize recruitment processes for recruiters, managers, and candidates. The company positions itself as a niche provider with a modular solution adaptable to various recruitment needs. The website reflects a mature business with a strong market presence supported by client testimonials and a professional digital footprint. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, hosted by OVH sas. Security posture is solid with HTTPS, domain locks, and no exposed sensitive data, though DNSSEC is not enabled and no explicit security policy is published. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site demonstrates high professionalism and trustworthiness.

Soren is a French eco-organism officially accredited to manage the collection and recycling of used photovoltaic solar panels across France. It acts as a key coordinator in the circular photovoltaic energy sector, collaborating with various stakeholders including individual holders, market producers, institutions, and local authorities. The organization offers free collection services, recycling, reuse initiatives, and educational resources to promote sustainable energy transition. The website demonstrates a mature digital presence built on WordPress with modern plugins and SEO optimizations, reflecting a professional and trustworthy business. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No WHOIS data is available, likely due to privacy protection, but the website's content and structure strongly support legitimacy. Overall, Soren presents a credible and well-established entity in the renewable energy recycling sector.