Medium-risk security reports

WS Interactive is a small, established web agency based in Toulouse, France, with 25 years of experience providing tailored web development, mobile app creation, SEO, UX/UI design, and digital marketing services. The company targets businesses seeking professional digital solutions and positions itself as a high-quality service provider in the local market. Technically, the website is built on WordPress with modern JavaScript libraries and includes analytics and optimization tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses CAPTCHA on contact forms, and implements cookie consent with Google Consent Mode, but lacks explicit security policies and incident response information. The absence of WHOIS domain registration data reduces trust in domain legitimacy, though the website content and branding are professional and consistent. Overall, the site scores well on content quality, technical implementation, and security posture, with room for improvement in business credibility and transparency.

Robin Labadie operates a specialized French web hosting service focused on WordPress users, emphasizing professional, fast, secure, and ecological hosting solutions. The company targets web professionals, agencies, and WordPress site owners, offering a comprehensive suite of services including domain registration, server management with Plesk, security audits, and webmastering. The website reflects a small but professional business with a clear market niche in the French hosting industry. Technically, the site is built on WordPress with modern plugins and technologies, delivering good performance and mobile optimization. Security posture is strong with HTTPS, cookie consent, and active monitoring, though some security headers and explicit policies could be improved. Privacy compliance is good with GDPR cookie consent and use of privacy-friendly analytics (Matomo). WHOIS data is privacy protected but consistent with the business profile. Overall, the site is trustworthy, professional, and well-positioned in its market segment.

SPIP is an established open source publishing system designed for collaborative and multilingual web content management. Founded in 2001, it serves a broad audience of web authors, developers, and institutions seeking a free and community-driven CMS solution. The website provides comprehensive documentation and community resources, reflecting a mature and active project. Technically, the site uses SPIP CMS version 4.4.6 with modern web technologies including JavaScript, CSS, SVG, and MathJax for math rendering. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers are not detected and privacy policies are absent, indicating room for improvement in compliance and security transparency. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the site's open source nature and community presence. Overall, the site is professional, trustworthy, and well-maintained, but could enhance privacy and security disclosures.

The Gérontopôle Autonomie Longévité des Pays de la Loire is a regional non-profit organization dedicated to improving the quality of life for elderly people in the Pays de la Loire region of France. It acts as a network of stakeholders focused on aging well, offering services such as training, research, economic development in the silver economy, and support for territorial policies. The website is professionally designed using Drupal CMS and integrates modern technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for security. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. However, the absence of WHOIS data raises concerns about domain registration status, which should be verified to ensure legitimacy. Security posture is generally good with HTTPS and secure forms, but could be improved by adding security headers and publishing incident response policies. Overall, the site presents a trustworthy and professional digital presence for a specialized healthcare non-profit.

Le Comptoir des Solutions is a French non-profit association dedicated to cataloging and promoting innovations that assist people with disabilities. The organization operates a free and accessible web platform that regularly updates with new innovations, news, and interviews related to disability support technologies and solutions. Their target audience includes individuals with disabilities, caregivers, professionals, and partner organizations. The platform is supported by notable partners such as Crédit Agricole, Microsoft, and IFP Energies nouvelles, enhancing its credibility within the niche market of disability innovation. Technically, the website is built on WordPress and leverages modern web technologies including Bootstrap for responsive design, Swiper.js for interactive sliders, and multiple analytics tools such as Google Analytics, Google Tag Manager, and Plausible Analytics. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience and effective content delivery. From a security perspective, the site enforces HTTPS and uses secure forms for data collection. However, it lacks several recommended security headers and does not provide a cookie consent mechanism, which may impact GDPR compliance. The absence of WHOIS data limits domain trust analysis, but the presence of partner endorsements and consistent branding supports legitimacy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for its mission, with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, adding cookie consent, publishing a security policy, and establishing a vulnerability disclosure process to enhance trust and compliance.

La Cantine X La French Tech Nantes is a well-established non-profit association founded in 2008, focused on fostering innovation and entrepreneurship within the Nantes tech ecosystem. The organization provides a comprehensive range of services including networking opportunities, coworking spaces, events, and business support programs tailored to startups, SMEs, freelancers, and entrepreneurs in the region. Their market position is strong as a key regional player with numerous partnerships and a sizable member base. Technically, the website is built on WordPress with modern plugins and integrations such as Yoast SEO, Google Tag Manager, and Brevo for email marketing. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with good user experience and clear navigation. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for form protection, and implements GDPR-compliant cookie consent. However, explicit security headers like CSP or X-Frame-Options were not detected in the provided data, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and continuing transparent privacy practices.

SRAE Sensoriel is a regional support and expertise structure focused on sensory disabilities (auditory and visual) in the Pays de la Loire region of France. It aims to improve the quality of life and care pathways for people with sensory impairments. The organization is mandated by the regional health agency (ARS) and operated by the Vyv3 group, positioning it as a trusted non-profit/governmental resource. The website offers resources, news, events, and professional tools targeting both individuals and professionals concerned with sensory disabilities. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Tarteaucitron.js for cookie consent management. It uses Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and well-structured with good SEO practices. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism. However, no explicit security headers were detected in the provided data, and no incident response or security policy information is publicly available. No vulnerabilities or exposed sensitive data were found. The lack of WHOIS data limits domain trust verification, but the professional content and contact information support legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a specialized regional audience. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular updates to WordPress and plugins to ensure ongoing security and compliance.

The website www.aidants44.fr serves as an informational and support portal for family caregivers in the Loire-Atlantique region of France, operated by the UDAF de Loire-Atlantique. It provides comprehensive resources including rights information, support services, event calendars, and contact options tailored to caregivers' needs. The site is well-branded with regional government logos and maintains a professional and accessible design. Technically, it is built on the Jalios JCMS platform, integrates Google Tag Manager for analytics, and uses modern UI components such as carousels and date pickers. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. The absence of WHOIS data is a notable concern, impacting domain trustworthiness, but the website content and branding strongly indicate legitimacy as a government/non-profit resource. Overall, the site is a valuable regional resource with good technical and privacy compliance maturity.

L'Agenda du Libre is a community-focused platform dedicated to aggregating and promoting events related to free and libre software, arts, data, hardware, and commons. It serves a niche audience interested in open source and libre culture, providing a comprehensive calendar of events, organization listings, and news updates. The website is closely associated with the April organization and related libre initiatives, reinforcing its position within the free software community. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, and Turbolinks, offering a mobile-responsive and user-friendly experience. However, there is a lack of explicit privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is moderate with no visible security headers or incident response information, and WHOIS data is unavailable, limiting domain trust verification. Overall, the site is functional and relevant for its target audience but would benefit from enhanced security and privacy transparency.

The website represents A.C.I.A.H, a French non-profit association specializing in accessible computer training and human accompaniment services, particularly for visually impaired and disabled individuals. The site offers educational content, training agendas, and workshops, positioning itself as a niche regional player in the accessibility and education sector. The business model is non-profit, supported by various foundations and local organizations, with a clear focus on community service and accessibility. Technically, the site is built on the SPIP CMS platform with jQuery and mediabox for media handling. The hosting is provided by OVH, a reputable provider, and the domain registration is consistent with the business timeline. The website is moderately optimized for performance and accessibility but lacks advanced SEO and mobile optimization features. Security posture is basic, with HTTPS implied but no visible security headers or policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security measures.

Liquid Themes is a London-based creative agency specializing in comprehensive web solutions including hosting, web design, premium support, and maintenance services. The company targets businesses and individuals seeking tailored website packages and digital presence management. Their market position is that of a niche service provider with a focus on user-centric and sustainable digital experiences. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, hosted with Cloudflare DNS, and secured with HTTPS. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with SSL and domain registration protections but lacks security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

Artilect FabLab is a collaborative maker space and coworking hub located in Toulouse, France. It offers a variety of services including access to digital fabrication machines such as 3D printers and laser cutters, professional and hobbyist training courses, coworking spaces, and event hosting including team building activities. The website is built on the Odoo CMS platform and integrates modern web technologies and analytics tools such as Google Tag Manager and Plausible Analytics. The site is well-structured, mobile-optimized, and provides clear navigation and contact information. However, it lacks a publicly accessible privacy policy and terms of service, which are important for compliance and user trust. Security headers are not detected, indicating room for improvement in security posture. WHOIS data for the domain is unavailable, limiting the ability to fully verify domain legitimacy. Overall, the website presents a professional and trustworthy image for its target audience of makers, entrepreneurs, and creatives.

The website itch.io is a well-established online platform primarily serving indie game developers and gamers by providing a marketplace and community for digital game distribution. The domain is registered since 2011 with consistent WHOIS data, indicating a legitimate and stable business presence. However, the analyzed content is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge, which blocks direct content access and limits detailed analysis. The visible page is minimal, serving only as a security verification step without any business or policy information. The technical infrastructure includes Cloudflare services for security and CDN, but no further technology stack details are visible. Security posture cannot be fully assessed due to blocked content, but the domain registration status and registrar are trustworthy. Privacy and cookie policies, contact information, and security policies are not visible on this page, indicating either they are on other pages or not publicly exposed here. Overall, the site is legitimate but currently inaccessible for full content and security evaluation.

net7 is a student-run IT association at ENSEEIHT in Toulouse, France, focused on developing and maintaining IT services for students and clubs, organizing technical training, and participating in programming and cybersecurity challenges. The website is built using modern technologies such as Astro and Svelte, indicating a good level of technical maturity. However, the site lacks formal privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The security posture is moderate but could be enhanced by implementing best practices and transparency measures. Overall, the website is functional and serves its community well but would benefit from improved compliance and security documentation.

The website www.bde.inp-toulouse.fr serves as the official portal for the student association of INP Toulouse, providing information about student clubs, events, and elected representatives. It targets students within the INP Toulouse network and associated schools, offering community engagement and event participation opportunities. The business model is non-profit and focused on student services and communication. Technically, the site uses standard web technologies including jQuery, Bootstrap, and FontAwesome, with a responsive design suitable for mobile devices. The site is accessible without WAF or blocking mechanisms and loads with moderate performance. However, there is a lack of advanced security headers and no detected analytics or tracking scripts, indicating a minimalistic technical footprint. From a security perspective, the site uses HTTPS but lacks security headers and formal privacy or cookie policies, which are important for GDPR compliance. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The absence of WHOIS data reduces domain trustworthiness slightly, but the content and external links align with a legitimate student association portal. Overall, the site is functional and serves its intended audience well but would benefit from improved security practices, privacy compliance, and enhanced contact transparency to strengthen trust and compliance posture.

CAn7 is a French student association affiliated with INP-ENSEEIHT, specializing in providing sound and lighting services for a variety of events including school galas, concerts, and conferences. The organization has over 20 years of experience and serves primarily the student and local community event market. The website reflects a small, non-profit entity with a clear focus on event technical support. Technically, the website uses standard web technologies including HTML5, CSS3, and jQuery, hosted by OVH, a reputable provider. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. Security posture is moderate; while no critical vulnerabilities or exposed data are evident, the absence of security headers and unclear SSL status suggest room for improvement. Privacy compliance is lacking as no privacy or cookie policies are present. Overall, the site is trustworthy but would benefit from enhanced security and compliance measures.

TVn7 is a well-established student video association based at ENSEEIHT in Toulouse, France, founded in 1992. The organization provides a variety of video production services including event coverage, multi-camera live broadcasts, and promotional clips primarily targeting the academic community and local organizations. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the site uses standard web technologies with good mobile optimization and SEO practices, though it lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS implied but missing explicit security headers and cookie consent mechanisms. The absence of WHOIS data limits domain trust analysis, but the presence of partner logos, testimonials, and active social media accounts supports legitimacy. Overall, the site is safe, trustworthy, and serves its niche effectively.

Tisséo Collectivités is the public authority responsible for organizing and managing mobility services in the Toulouse metropolitan area, France. The organization focuses on sustainable urban transport solutions including metro lines, bus networks, and bike-sharing services. The website reflects a medium-sized public sector entity with a clear mission to serve local governments and residents by providing information and resources related to mobility projects and services. The company is well-positioned in its regional market as a key mobility authority. Technically, the website is built on Drupal 10, leveraging modern web technologies such as jQuery, Swiper for carousels, and FontAwesome for icons. The site is mobile-optimized with good SEO and accessibility features, although full RGAA compliance is partial. Hosting and domain registration are consistent with the organization's profile, and the site uses HTTPS with cookie consent mechanisms to comply with GDPR. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, there is room for improvement in implementing security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It serves its public sector audience effectively with relevant content and clear navigation. Strategic recommendations include enhancing security headers, completing accessibility compliance, and publishing security and incident response policies to further strengthen trust and compliance.

CS GROUP is a medium-sized European technology company specializing in the design, integration, and operation of intelligent, secure, and interconnected information and communication systems. The company serves critical sectors including defense, space, aeronautics, transport, energy, and finance. Their business model focuses on delivering operationally oriented ICT solutions with a strong emphasis on cybersecurity, data intelligence, and industrial digitalization. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Revolution Slider, ensuring good SEO and user experience. The site is mobile-optimized and uses HTTPS with cookie consent mechanisms, indicating a mature digital infrastructure. Analytics tools like Google Analytics and Golden Bees are used for user tracking and marketing. From a security perspective, the site enforces HTTPS and has implemented cookie consent, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registration data is a concern and reduces overall trustworthiness. Overall, CS GROUP's website is professional, secure, and compliant with privacy regulations, serving a specialized and critical market segment. Strategic improvements in security transparency and domain registration verification are recommended to enhance trust and compliance.

Centreon is a well-established company specializing in IT infrastructure monitoring software, offering scalable and cost-effective observability solutions including log management and digital experience monitoring. The company targets enterprises, managed service providers, and IT teams seeking comprehensive monitoring capabilities. Their market position is strong, supported by a large user base and partner network. Technically, the website is built on WordPress with modern SEO and analytics tools, demonstrating digital maturity and good performance. Security posture is robust with HTTPS, security headers, and consent management, though explicit security policies and incident response details are lacking. Overall, the website presents a professional and trustworthy digital presence with minor gaps in transparency around domain registration and security contact information.

MyMGLife operates as a niche e-commerce fundraising platform dedicated to supporting research for Myasthenia Gravis, a rare neuromuscular disease. The website leverages the Shopify platform to sell branded merchandise, with proceeds directed towards a non-profit organization focused on this cause. The site targets individuals interested in supporting medical research and awareness efforts related to Myasthenia Gravis. The business model is straightforward, combining retail sales with charitable fundraising, positioning itself as a specialized player within the non-profit e-commerce space. Technically, the website is built on a modern and robust infrastructure using Shopify's e-commerce platform, ensuring reliable hosting, secure payment processing (including Shopify Pay, Apple Pay, and PayPal), and responsive design optimized for mobile devices. The site employs standard web technologies such as JavaScript, CSS, and HTML5, with good SEO and accessibility practices evident. Performance is generally fast, benefiting from Shopify's CDN and optimized assets. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes essential security headers. Payment integrations are secure, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of explicit privacy and cookie policies, GDPR compliance indicators, and contact information for security incidents or abuse reduces the overall security posture and compliance maturity. Overall, the website presents a professional and trustworthy front for its fundraising mission but would benefit from enhanced transparency and compliance documentation. The lack of WHOIS data introduces some uncertainty regarding domain legitimacy, though the Shopify platform usage and secure infrastructure mitigate this risk. Strategic improvements in privacy, cookie consent, and incident response disclosures would strengthen trust and regulatory compliance.

We Are ILL is a non-profit organization dedicated to supporting Black women living with multiple sclerosis and other autoimmune disorders through its signature annual event, Wellness Week(end). The event offers education, community, and wellness activities, expanding its reach to include lupus and NMOSD patients and their support networks. The website is professionally designed using Squarespace, with a clear focus on community and advocacy. The event is hosted in Atlanta, GA, with ticketing managed via Eventbrite. Social media presence is active on Instagram, YouTube, and Facebook. The domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the website content and external links indicate a legitimate operation.

The National Scleroderma Foundation is a well-established non-profit organization dedicated to advancing research, raising awareness, and providing support for individuals affected by scleroderma. The website reflects a mature digital presence with comprehensive educational resources, support group information, and event management capabilities. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and no obvious vulnerabilities, though improvements such as enabling DNSSEC and publishing security policies would enhance trust. Privacy compliance is limited by the absence of explicit privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the site is professional, trustworthy, and serves its target audience effectively.

The Raynauds Association is a non-profit organization dedicated to providing support and education to individuals suffering from Raynaud's Phenomenon. The website serves as an informational and community resource, targeting affected individuals and caregivers. The organization appears to have a niche market position focused on healthcare support and education. Technically, the website is built on WordPress using the Avada theme and WooCommerce plugin, indicating a modern CMS platform with e-commerce capabilities, although no direct sales were evident in the analyzed content. The site employs Google Analytics and Google Tag Manager for visitor tracking and SEO optimization via Yoast SEO plugin. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is weak due to missing explicit privacy and cookie policies. WHOIS data is incomplete and malformed, limiting domain trust verification, but the website content and social media presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

The Lymphatic Education & Research Network (LE&RN) is a well-established nonprofit organization dedicated to fighting lymphedema and lymphatic diseases through education, research funding, advocacy, and community support. The website serves as a comprehensive resource hub for patients, researchers, and healthcare professionals, offering access to educational materials, research grants, clinical trial information, and community engagement opportunities. LE&RN holds a strong market position as a trusted leader in lymphatic disease awareness and research advocacy within the healthcare nonprofit sector. Technically, the website employs a mature technology stack including jQuery, Modernizr, Font Awesome, Google Analytics, and Google Tag Manager, hosted via GoDaddy with domain control nameservers. The site is mobile optimized with good SEO practices and moderate performance. However, it lacks some modern security headers and a cookie consent mechanism, which are recommended for enhanced privacy compliance and security. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It integrates third-party analytics and fundraising tools responsibly but could improve by implementing additional security headers and publishing formal security policies. The WHOIS data confirms domain legitimacy and consistency with the organization's history, supporting a high trustworthiness rating. Overall, LE&RN's website is professional, content-rich, and trustworthy, serving its audience effectively. Strategic improvements in privacy compliance and security posture would further strengthen its digital maturity and user trust.

Danny's Dose is a small US-based non-profit organization dedicated to improving specialized emergency care for individuals with bleeding disorders. The website serves as an educational and advocacy platform, providing treatment guidelines, emergency preparedness resources, and volunteer opportunities. The organization maintains an active social media presence and uses modern web technologies via Squarespace. Technically, the site is well-configured with HTTPS and HSTS, ensuring secure communications. However, the absence of visible privacy and cookie policies indicates a gap in compliance with privacy regulations. The WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits but slightly reduces transparency. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and contact information.

The Bone Marrow & Cancer Foundation is a well-established non-profit organization dedicated to supporting cancer and transplant patients through a variety of services including financial assistance, patient navigation, clinical counseling, housing support, and peer connection via their CancerBuddy™ app. The organization has a strong market position with over three decades of experience, a recognized medical advisory board, and partnerships with hospitals across the United States. Their business model relies on private donations and corporate sponsorships, with no government funding, emphasizing community-driven support and fundraising events. Technically, the website is built on WordPress using modern plugins such as GiveWP for donations and Events Manager for event handling. It employs Bootstrap for responsive design and integrates Stripe for payment processing. The site demonstrates good digital maturity with SEO optimization, mobile responsiveness, and moderate performance. However, there is room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and has domain registration protections in place, but lacks DNSSEC and explicit security headers. There is no visible security or incident response policy, and cookie consent mechanisms are absent, which may impact GDPR compliance. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic improvements in security policies, cookie consent, and DNS security would enhance its compliance and trustworthiness further.

GBS/CIDP Foundation International is a well-established non-profit organization dedicated to supporting individuals and families affected by Guillain-Barré syndrome, chronic inflammatory demyelinating polyneuropathy, and related neurological conditions. The foundation provides educational resources, funds research grants, advocates for patient needs, and fosters community engagement through events and volunteer programs. It holds a strong market position as a leading global non-profit in its healthcare niche, supported by trust indicators such as a Charity Navigator Four Star rating and membership in the National Health Council. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates multiple third-party analytics and marketing tools including Google Analytics, Facebook Pixel, and ShareThis. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security transparency would further strengthen its posture and user trust.

Fabry Support & Information Group (FSIG) is a well-established non-profit organization focused on supporting patients and families affected by Fabry disease. The organization provides educational resources, advocacy, financial assistance information, and community engagement through events and patient stories. Their website reflects a professional and consistent brand presence with clear contact channels and active social media integration. Technically, the site is built on WordPress with a modern theme and plugins, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is a notable gap, with no visible privacy or cookie policies, which should be addressed to meet regulatory standards. Overall, FSIG demonstrates strong business credibility and trustworthiness within its healthcare non-profit sector.

The US Hereditary Angioedema Association (HAEA) is a specialized non-profit organization dedicated to supporting individuals affected by Hereditary Angioedema (HAE), a rare genetic condition. The organization provides education, advocacy, research support, and access to treatment resources, positioning itself as a leading voice in the HAE community within the United States. Their website reflects a strong commitment to patient and caregiver engagement through comprehensive resources, community stories, and advocacy opportunities. Technically, the website employs a modern and stable technology stack including Bootstrap, jQuery, Handlebars.js, and Google Analytics for tracking. Hosting utilizes Amazon S3 for media assets, indicating a reliable infrastructure. The site is mobile-optimized with good navigation and SEO practices, though accessibility features could be enhanced. Security is solid with HTTPS enforced, but the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and protection. From a security perspective, the site shows no signs of vulnerabilities or malicious content. However, the lack of visible security policies, incident response contacts, and vulnerability disclosure mechanisms indicates a moderate maturity level in security governance. The WHOIS data is unavailable due to query failure or privacy protection, but the website content and domain usage strongly support legitimacy and trustworthiness. Overall, the HAEA website is a professional, trustworthy, and well-maintained platform serving a niche healthcare advocacy role. Strategic improvements in privacy compliance, security headers, and transparency around security policies would further enhance its risk posture and user trust.

Hope Charities operates as a non-profit organization dedicated to supporting individuals and families affected by hemophilia and related chronic illnesses. The organization provides financial assistance, educational resources, emotional support, and advocacy services to its target audience. The website reflects a focused mission with clear calls to action, event promotion, and community engagement through social media and podcasts. The organization maintains partnerships with healthcare-related sponsors, enhancing its credibility and outreach. Technically, the website is built on the Weebly platform, utilizing common web technologies such as jQuery, Google Analytics, and Facebook Pixel for tracking and analytics. The site is mobile-optimized and includes multimedia content such as videos and podcasts, contributing to a positive user experience. However, the use of an outdated jQuery version and minimal security headers indicate areas for technical improvement. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, which are positive indicators. Nonetheless, the absence of comprehensive security headers and the outdated JavaScript library present potential vulnerabilities. Privacy compliance is basic, with a privacy policy page present but no visible cookie consent mechanism. Contact information is clearly provided, supporting business credibility. Overall, the website presents a trustworthy and professional front for a small healthcare non-profit organization. Strategic improvements in security practices and privacy compliance would enhance the site's resilience and user trust.

The website patientservicesinc.org is currently inaccessible due to a Cloudflare error 521 indicating the origin web server is down and not responding. The domain is registered since 2009 with GoDaddy.com, LLC and uses Cloudflare as a CDN and security provider. Due to the server downtime, no business content, contact information, or policies are available for review. The website lacks privacy, cookie, and terms of service policies, and no security headers or SSL configuration details are evident from the data provided. This limits the ability to assess the company's digital maturity and security posture comprehensively. The domain registration appears consistent and legitimate, but the lack of accessible content and security best practices reduces trustworthiness and business credibility.

The American Lung Association is a leading non-profit organization dedicated to improving lung health and preventing lung disease through education, advocacy, research funding, and community support. The website reflects a mature and professional digital presence with comprehensive content targeting patients, caregivers, healthcare professionals, and advocates. It offers multiple engagement channels including donations, events, and support services. Technically, the site employs modern web technologies and analytics tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement and use of CAPTCHA for form protection, though explicit security headers and a published security policy are absent. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is trustworthy and authoritative in its domain, though WHOIS data is unavailable due to query issues, which slightly impacts domain legitimacy assessment.

The Restless Legs Syndrome Foundation is a specialized non-profit organization dedicated to supporting individuals affected by Restless Legs Syndrome through education, research funding, and community support. The website serves as a comprehensive resource hub offering information on diagnosis, treatment, support groups, and opportunities for involvement such as donations and memberships. The foundation positions itself as a leading authority in the RLS community with a clear mission and strong trust signals including certifications and testimonials. Technically, the website is built on the Blackbaud NetCommunity platform using ASP.NET WebForms and modern JavaScript libraries like jQuery. It integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. Hosting appears to be managed by Blackbaud, a reputable provider for non-profits. From a security perspective, the site enforces HTTPS and uses secure form handling mechanisms. However, it lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced security and privacy compliance. WHOIS data is unavailable due to privacy protection, which is common and justified for non-profits. No signs of blocking or WAF challenges were detected, indicating full accessibility. Overall, the website demonstrates a strong security posture and professional digital presence suitable for its non-profit healthcare mission. Strategic improvements in privacy compliance and security headers would further enhance trust and regulatory adherence.

The National Alopecia Areata Foundation (NAAF) is a well-established non-profit organization dedicated to supporting individuals affected by alopecia areata, a common autoimmune disease causing hair loss. The foundation provides a comprehensive range of services including education, support groups, research funding, advocacy, and awareness campaigns. Their website reflects a strong market position as a leading resource in the alopecia community, targeting patients, families, medical professionals, and researchers. The organization leverages digital platforms effectively to engage its audience and facilitate donations and community involvement. Technically, the website is built on WordPress with modern plugins and frameworks such as Visual Composer, Gravity Forms, and Swiper.js. It integrates key marketing and analytics tools including Google Tag Manager and Facebook Pixel, enabling moderate user tracking and data collection. The site demonstrates good performance, mobile optimization, and accessibility, with a professional design and clear navigation enhancing user experience. From a security perspective, the site employs HTTPS with good SSL configuration and standard security headers, indicating a solid security posture. However, there is no publicly available security policy or vulnerability disclosure program, which could be improved to enhance transparency and incident response readiness. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR considerations. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a security policy, establishing a vulnerability disclosure channel, and enhancing incident response contact visibility to further strengthen trust and security culture.

Chronically Capable is a specialized online platform dedicated to connecting over 133 million Americans with chronic illnesses to employers offering flexible, remote work opportunities. The platform emphasizes inclusivity, community support, and employer partnerships to facilitate meaningful employment for individuals with disabilities. Its market position is niche but impactful, supported by testimonials and press coverage from reputable sources such as Forbes and Fast Company. Technically, the website leverages modern web technologies including Webflow CMS, Google Analytics, Facebook Pixel, and other marketing and analytics tools, ensuring a robust digital presence. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR considerations. Overall, the website demonstrates a professional, trustworthy, and user-friendly environment tailored to its target audience.

Centrum realitního vzdělávání, operated by JUDr. Tomáš Philippi, is a specialized Czech Republic-based education and legal consultancy business focused on real estate brokerage training and certification. The website offers preparatory courses, exams, online testing, and legal documentation services, positioning itself as an authoritative niche provider with strong legal expertise backing. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without modern frameworks or CMS, resulting in moderate performance and basic mobile optimization. Security posture is average with no visible advanced security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. The WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and contact information support legitimacy. Overall, the site is professional and trustworthy for its target audience but would benefit from enhanced security and compliance measures.

Somfy Slovakia operates as a regional branch of the global Somfy Group, specializing in home automation products including motors for blinds, shutters, awnings, gates, and smart home solutions such as alarms, cameras, heating, and lighting control. The website targets Slovak consumers and businesses interested in smart home technology, offering a comprehensive product catalog and support services. The company is well-established, founded in 1969, and maintains a strong market presence with consistent branding and professional digital assets. Technically, the website employs modern web technologies, is mobile optimized, and integrates tracking and analytics tools responsibly. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

Fondation SOMFY is a corporate foundation linked to Groupe SOMFY, dedicated to supporting social and environmental initiatives primarily in France and internationally. The foundation focuses on promoting healthy and sustainable housing, social integration, and environmental preservation through financial and human sponsorship. The website reflects a well-established non-profit entity with consistent branding and a clear mission. Technically, the site uses a mix of JavaScript libraries including jQuery and TagCommander for analytics and tracking, and it is hosted securely with HTTPS and cookie consent mechanisms in place. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency, although the website content and external links strongly indicate legitimacy. Security posture is good with no visible vulnerabilities, but the site lacks explicit security policies or incident response information. Overall, the website is professional, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

Ferrino is a well-established outdoor equipment retailer with a rich history dating back to 1870. The company offers a comprehensive range of products including backpacks, sleeping bags, tents, clothing, and accessories for outdoor enthusiasts. Their market position is strong in Slovakia and the Czech Republic, supported by a professional e-commerce platform and physical store pickup options. The website demonstrates a good level of digital maturity with modern technologies and responsive design, catering well to their target audience of hikers, climbers, and outdoor lovers. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

RI OKNA is a traditional Czech manufacturer specializing in high-quality windows and doors, operating since 1994 with nearly 30 years of experience. The company targets both domestic and international markets, offering a wide range of products including PVC, aluminum, wood, and composite windows and doors. Their business model focuses on manufacturing and direct sales, emphasizing quality materials and customer service. The website is professionally designed, multilingual, and optimized for French-speaking customers, reflecting a medium-sized enterprise with a strong market position in manufacturing.

EastBiz.com, Inc., operating the IncParadise website, is a specialized service provider focusing on business incorporation and registered agent services primarily in Nevada and Wyoming. The company offers a comprehensive suite of services including corporation and LLC formation, registered agent services, mail forwarding, and compliance support. Their market position is that of an established niche player with over a decade of experience, targeting entrepreneurs and small to medium-sized businesses seeking incorporation in the United States. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Google Tag Manager, and various marketing and analytics tools such as Facebook Pixel and Hotjar. The site is hosted with reputable providers and uses Cloudflare DNS, ensuring good performance and availability. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs reCAPTCHA for form protection. However, it lacks some security headers and DNSSEC is not enabled, which are areas for improvement. The presence of multiple tracking scripts without a visible cookie consent mechanism indicates partial privacy compliance. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website presents a professional and trustworthy front for its business services, with good technical and security foundations but room for enhancement in privacy compliance and security hardening.

Société des Avis Garantis is a French company specializing in providing authentic customer review solutions for e-commerce merchants. Their platform supports multiple popular e-commerce platforms such as PrestaShop, Shopify, Magento, and WooCommerce, offering features like review moderation, Google Shopping integration, multilingual support, and customizable widgets. The website is professionally designed, well-structured, and provides clear information about their services, target audience, and trust indicators including GDPR compliance and certifications. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including Google reCAPTCHA for form security. The SSL configuration is good, and cookie consent mechanisms are in place, reflecting a strong privacy posture. However, WHOIS data is not publicly available, indicating privacy protection which is reasonable for this business type. Overall, the site demonstrates a mature digital presence with good security and compliance practices.

DesignPlanet is a Ukrainian web development and branding agency with over 14 years of experience and a portfolio of more than 300 projects. The company offers comprehensive digital services including web development, branding, UX/UI design, and mobile app development targeting businesses seeking professional digital solutions. The website is well-designed, mobile-optimized, and presents a professional image with strong client trust indicators such as notable client logos and social media presence on Behance and Clutch. Technically, the site is built on WordPress with modern JavaScript libraries including Three.js and uses Google Tag Manager and reCAPTCHA for analytics and security. However, the site lacks explicit privacy and cookie policies, which impacts compliance and user trust. Security posture is good with HTTPS and form protections but could be improved by adding security headers and a vulnerability disclosure policy.

The Château de Pau website represents the official digital presence of the Musée national et domaine du château de Pau, a French national museum under the Ministry of Culture. The site offers comprehensive information about the museum's history, collections, exhibitions, events, and visitor services, targeting a broad audience including tourists, educators, researchers, and cultural professionals. The business model is government-funded, focusing on cultural preservation and public education. The museum maintains a strong market position as a recognized heritage site with partnerships with national cultural organizations.

Les Amis du Palais de Tokyo is a cultural association founded in 2019 that supports the Palais de Tokyo contemporary art center in Paris through membership and patronage. The website serves as a platform to inform members and potential donors about exclusive events, artist meetings, and benefits. The site is well-branded, consistent, and targets art enthusiasts and patrons. Technically, the site uses modern web technologies including Laravel backend, Google Analytics, Facebook SDK, and Google reCAPTCHA, hosted by OVH sas. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS, CSRF tokens, and cookie consent, but lacks advanced security headers and formal security policies. No blocking or WAF challenges were detected, allowing full content access. Overall, the site is trustworthy and professionally maintained, with room for improvement in security policy transparency and incident response readiness.

Limette Czech s.r.o. is a small Czech Republic-based IT service company founded in 2019, specializing in comprehensive IT solutions including web development, IT training, software development, data analysis, and artificial intelligence training. The company has established its own office premises and operates as a registered legal entity, positioning itself as a growing player in the local IT services market. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the website is built on WordPress using the Elementor page builder and incorporates SEO optimization via the Rank Math plugin. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security hardening. HTTPS is enabled, but security headers are missing, and no advanced security policies or incident response information is published. From a security perspective, the site shows basic good practices such as HTTPS but lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms. No forms or contact emails are present on the homepage, limiting direct user interaction points. The WHOIS data is consistent with the business claims, indicating legitimacy. Overall, the site is safe, professional, and suitable for general audiences without any adult or questionable content. Strategically, the company should prioritize implementing privacy and cookie policies to improve GDPR compliance, add security headers to enhance protection, and publish incident response and vulnerability disclosure information to build trust. Enhancing contact information visibility and adding social media presence could also improve business credibility and user engagement.

SLUTO s.r.o. operates an online platform (sluto.online) providing electronic tax forms and declarations primarily targeting Czech-speaking users. The website offers a streamlined service for submitting tax-related documents such as annual tax reconciliations. The business appears to be a small-sized entity founded in 2021, with a niche focus in the tax services sector. The site is professionally designed with consistent branding and clear navigation, supporting both Czech and English languages. Technical infrastructure is based on WordPress CMS hosted likely by Websupport, utilizing common plugins and Google Analytics for visitor insights. The site implements a cookie consent mechanism aligned with GDPR requirements, although a dedicated privacy policy page on the domain is absent, with references to an external domain for cookie usage information. Security posture is adequate with HTTPS enforced and no obvious vulnerabilities detected, but lacks advanced security headers and explicit security policies. Overall, the website is functional, trustworthy, and compliant with basic privacy standards, serving its target audience effectively.

Pau Agglomération operates an official government website serving the city of Pau and its surrounding agglomeration in France. The site provides comprehensive information on daily life, urban planning, social services, culture, environment, and more, targeting residents and visitors. It is positioned as a key local government communication and service platform. Technically, the website is built on Drupal 10, employs Matomo for analytics, and uses modern web technologies ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with privacy and cookie policies and consent mechanisms. However, explicit contact emails and phone numbers are not directly visible, and no terms of service or vulnerability disclosure pages were found. Overall, the website is professional, trustworthy, and well-maintained, reflecting a mature digital presence for a government entity.

Cité du design – Esad Saint-Étienne is a well-established cultural and educational institution based in France, specializing in design and art education, exhibitions, and research. The website reflects a mature organization with a strong regional presence and partnerships with governmental and cultural bodies. Their services cater to students, researchers, and the general public interested in design. Technically, the website employs modern JavaScript libraries and multimedia content, hosted by a reputable registrar OVH sas, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong, featuring a comprehensive privacy policy and a robust cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.