Security Directory

M

Ministerium für Schule und Bildung des Landes Nordrhein-Westfalen

bildungsland.nrw

64

The website www.schulministerium.nrw is the official digital presence of the Ministry for Schools and Education of North Rhine-Westphalia, Germany. It serves as a comprehensive information portal for education stakeholders including students, teachers, and parents. The site offers detailed content on school organization, education policies, legal frameworks, press releases, and various educational services. It is well-positioned as a government entity with a strong market presence in the public education sector of NRW. Technically, the website is built on Drupal CMS, leveraging modern web technologies such as Bootstrap for responsive design, Matomo for privacy-respecting analytics, and accessibility features. The site demonstrates good performance and SEO practices, with mobile optimization and clear navigation. From a security perspective, the site enforces HTTPS, respects user privacy with cookie consent mechanisms, and avoids exposing sensitive data. While explicit security headers are not fully confirmed, the overall security posture is strong with no evident vulnerabilities. The WHOIS data is privacy protected but consistent with official government use, supporting the domain's legitimacy. Overall, the website is a trustworthy, professional, and well-maintained government portal with excellent content quality and compliance with privacy regulations. It poses low risk and serves its public service mission effectively.

M

Ministerium für Schule und Bildung des Landes Nordrhein-Westfalen

schulministerium.nrw

64

The website www.schulministerium.nrw is the official digital presence of the Ministry for Schools and Education of the State of North Rhine-Westphalia, Germany. It serves as a comprehensive information portal for education-related topics, school organization, legal frameworks, press releases, and public services. The site targets students, educators, school administrators, parents, and the general public interested in education policies and resources within NRW. It is positioned as a key government resource with authoritative content and official branding. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and Hyphenopoly for text hyphenation. The site demonstrates good mobile optimization, accessibility features, and SEO practices. It employs HTTPS with strong SSL configuration and includes a cookie consent mechanism compliant with GDPR requirements. From a security perspective, the site shows a mature posture with HTTPS enforcement, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly detected and could be improved. The WHOIS data is privacy protected, which is somewhat unusual for a government domain but does not detract from the site's legitimacy given the official content and domain namespace (.nrw). Overall, the website is a trustworthy, well-maintained government portal with high content quality and good security and privacy practices. It poses low risk and serves its public service mission effectively.

T

TGZ Halle Technologie- und Gründerzentrum Halle GmbH & Bio-Zentrum Halle GmbH

weinberg-campus.de

47

The Weinberg Campus - Technologiepark website represents a well-established technology and innovation hub located in Halle, Germany. The organization supports startups, researchers, and companies primarily in the fields of Digital Health and Smart Green Technology by providing infrastructure, advisory services, and networking opportunities. The website is professionally designed, content-rich, and targets a broad audience including entrepreneurs, investors, and the regional business community. Technically, the site is built on Drupal CMS, hosted by Alfahosting, and employs modern web technologies such as Matomo for analytics and CookiesJSR for cookie consent management. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, although some advanced security headers and explicit security policies are absent. Overall, the site is trustworthy, accessible, and compliant with GDPR requirements, making it a credible digital presence for the organization.

E

Erasmus Student Network

esn.org

60

Erasmus Student Network (ESN) is a well-established non-profit international student organization founded in 1997, dedicated to supporting and representing international students across Europe. The organization provides a broad range of services including cultural exchange opportunities, student representation, and various online platforms to facilitate student mobility and integration. ESN enjoys a strong market position supported by the Erasmus+ programme and European institutions, with a large network of local sections and corporate partners. The website reflects this maturity with comprehensive content, consistent branding, and a professional design tailored to its target audience of international students and volunteers. Technically, the website is built on the Drupal CMS platform, leveraging modern JavaScript libraries and Google Analytics for tracking. Hosting and DNS services are managed via Cloudflare, providing performance and security benefits. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and domain transfer protections in place, but could be improved by enabling DNSSEC and adding more security headers. Privacy compliance is adequate with a clear privacy policy, though cookie consent mechanisms are absent. Overall, the security posture is solid for a non-profit educational organization, with no critical vulnerabilities detected. The absence of explicit incident response or security policies and lack of direct contact emails or phone numbers for support are minor gaps. The website is safe for general audiences, with no adult or questionable content. Strategic recommendations include enhancing DNS security, implementing cookie consent, and publishing security policies to further strengthen trust and compliance.

B

Bixa TechnoConsulting

bixa.cc

49

Bixa TechnoConsulting is a small German technology consulting company specializing in IT services such as virtualization, server migration, Drupal hosting, and Microsoft Exchange Server consulting. The website serves as a technical blog and service portal targeting IT professionals and businesses seeking specialized IT consulting. The company positions itself as a niche provider with expertise in Linux, Drupal, and Microsoft technologies. Technically, the website is built on Drupal CMS with jQuery and integrates Google Analytics for visitor tracking. The site is accessible over HTTPS but lacks modern security headers and explicit privacy or cookie policies, indicating room for improvement in security and compliance. The content is primarily technical and professional, with no adult or questionable material detected. Overall, the website demonstrates moderate digital maturity with basic mobile optimization and accessibility features. Security posture is average due to missing headers and lack of explicit incident response or security policies. The domain uses privacy protection for WHOIS data, which is common for small consultancies but limits transparency. Strategic recommendations include implementing security headers, adding privacy and cookie policies, improving contact information visibility, and enhancing compliance with GDPR requirements.

T

TGZ Halle Technologie- und Gründerzentrum Halle GmbH & Bio-Zentrum Halle GmbH

technologiepark-weinberg-campus.de

10

Weinberg Campus is a regional technology park and innovation hub located in Halle (Saale), Germany, focused on fostering startups, research institutes, and companies in sectors such as digital health and smart green technology. The organization provides rental spaces, consulting, and community engagement to support innovation and entrepreneurship. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of startups, researchers, and entrepreneurs. Technically, the website is built on the Drupal CMS platform, utilizing modern libraries such as Matomo for analytics, FontAwesome for icons, and FlexSlider for interactive content. The hosting provider is identified as Alfahosting based on nameserver data. The site is mobile-optimized, accessible, and performs moderately well, with proper SEO meta tags and cookie consent mechanisms in place. From a security perspective, the website enforces HTTPS and implements cookie consent, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's business claims, indicating legitimacy and a trustworthy domain registration. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements could include adding security headers, publishing a security policy, and providing direct contact information for incident response to enhance trust and security posture.

E

Erasmus Student Network Italia

esn.it

45

Erasmus Student Network Italia (ESN Italia) is a well-established non-profit organization dedicated to supporting international student mobility in Italy. As the Italian branch of the European Erasmus Student Network, it operates through a large volunteer base and offers various projects, events, and resources to Erasmus and international students. The website reflects a mature digital presence with clear branding, comprehensive content, and active engagement through social media and partnerships. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates Google Analytics for user insights. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers and formal security policies could enhance protection. Overall, ESN Italia demonstrates strong business credibility and compliance with privacy regulations, making it a trustworthy resource for its target audience.

B

Bixa TechnoConsulting

bixa.eu

49

Bixa TechnoConsulting is a small German IT consulting company specializing in virtualization, server management, and Drupal hosting services. The website provides technical blog content and company information primarily targeting IT professionals and businesses needing specialized IT consulting. The site is built on Drupal CMS and integrates Google Analytics for visitor tracking. While the website is functional and content-rich, it lacks critical privacy and security disclosures such as privacy policies, cookie consent mechanisms, and security headers. The login form is present but lacks advanced security features like multi-factor authentication or CAPTCHA. No direct contact information or social media presence is visible, which may limit user engagement and trust. Overall, the website demonstrates moderate technical maturity but requires improvements in privacy compliance and security posture.

F

Flix SE

flixbus.lv

47

FlixBus Latvia (www.flixbus.lv) is a localized website of Flix SE, a major European transportation company specializing in affordable intercity bus travel across Europe. The site offers extensive route information, booking services, and customer support tailored for Latvian-speaking users. The business model centers on direct ticket sales and travel services, supported by a strong digital presence including mobile apps and social media channels. The company holds a significant market position with a broad network of destinations and daily connections. Technically, the website is built on Drupal CMS, leveraging modern JavaScript frameworks and CDNs for performance and scalability. It incorporates advanced analytics and consent management tools to ensure GDPR compliance and user privacy. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-optimized for user experience and accessibility.

F

Flix SE

flixbus.lt

47

Flix SE operates the www.flixbus.lt website, providing affordable bus travel services across Lithuania and Europe. The company offers a large network of routes, mobile app integration, and customer support, positioning itself as a leading transportation provider in the region. The website is professionally designed, multilingual, and optimized for mobile users, reflecting a mature digital presence. Technically, the site uses Drupal CMS, modern JavaScript frameworks, and integrates multiple analytics and advertising tools with a consent management platform, indicating compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. WHOIS data for the .lt domain is unavailable, likely due to registry restrictions, but the website's branding and infrastructure strongly support legitimacy. Overall, the site is trustworthy, user-friendly, and well-maintained, serving a broad audience of travelers.

F

Flix SE

flixbus.ee

48

Flix SE operates the www.flixbus.ee website, providing affordable bus travel services across Europe with a strong presence in Estonia and neighboring countries. The company offers extensive routes, a user-friendly booking platform, and value-added services such as onboard Wi-Fi and power outlets. The website is professionally designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the site leverages Drupal CMS, modern JavaScript frameworks, and integrates advanced analytics and consent management tools, ensuring a robust and scalable infrastructure. Security measures include HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, positioning Flix SE as a leading transportation service provider in the European market.

F

Flix SE

flixbus.be

10

FlixBus is a major European transportation company specializing in affordable intercity bus travel across more than 40 countries and 3,000 destinations. The website provides comprehensive information about their services, including online ticket booking, real-time bus tracking, and onboard amenities such as Wi-Fi and power outlets. The company positions itself as a leader in the European bus travel market with a strong brand presence and extensive network. Technically, the website is built on a modern Drupal CMS platform, leveraging multiple third-party services for analytics, marketing, and performance optimization, including Google Tag Manager, Datadog RUM, Snowplow Analytics, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times supported by CDN infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and uses a consent management platform to comply with privacy regulations. However, explicit security policies, incident response contacts, and vulnerability disclosure programs are not publicly available, representing areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, though WHOIS data is unavailable due to registry restrictions. The domain's privacy protection is justified given the business type. The site demonstrates a mature digital presence with extensive tracking and marketing tools, balanced by strong privacy controls.

F

Flix SE

flixbus.al

56

Flix SE operates the www.flixbus.al website, providing affordable and eco-friendly intercity bus travel services across Europe, targeting Albanian-speaking customers. The company is a major player in the European transportation sector, offering extensive routes and modern amenities. The website is professionally designed, multilingual, and optimized for mobile users, reflecting a mature digital infrastructure. Technically, the site uses Drupal CMS, integrates multiple analytics and marketing tools, and employs strong security practices including HTTPS and security headers. Privacy compliance is robust with clear policies and consent management. However, direct contact information and explicit security policies are not prominently available. Overall, the site demonstrates a strong security posture and business credibility with no critical vulnerabilities detected.

C

Consip

consip.it

68

Consip is the Italian national central purchasing body affiliated with the Ministry of Economy and Finance. It provides innovative tools and solutions for public procurement, serving over 14,000 public administrations and 350,000 enterprises. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive content focused on public procurement and digital transformation in Italy. Technically, the site is built on Drupal CMS with Bootstrap and Swiper.js, optimized for mobile and accessibility. Security posture is good with HTTPS and secure forms, though some security headers and explicit policies could be improved. Privacy compliance is strong with clear privacy and cookie policies. Overall, the site reflects a trustworthy and authoritative government entity with a strong market position in public procurement.

The Bundesamt für Naturschutz (BfN) is a German federal government authority responsible for nature conservation, providing scientific, administrative, and informational services. The website serves a broad audience including policymakers, researchers, and the general public interested in environmental protection. It offers comprehensive content in German with English support, focusing on biodiversity, habitat protection, and environmental data. Technically, the site is built on Drupal CMS with modern web technologies and is hosted within the German research network infrastructure, ensuring reliability and performance. The site demonstrates strong privacy compliance with explicit cookie consent mechanisms and respects user privacy via etracker analytics configured to honor Do Not Track settings. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be enhanced, and a formal security policy or incident response contact is not evident. Overall, the site is trustworthy, professionally maintained, and aligns well with its governmental role.

E

Etat de Fribourg

fr.ch

64

The website www.fr.ch is the official online portal for the Canton of Fribourg, Switzerland, providing comprehensive information and services related to the cantonal administration. It serves residents and citizens by offering access to government services, news, legislation, and administrative procedures. The site is well-branded, multilingual, and designed for accessibility and mobile responsiveness. Technically, the site is built on Drupal CMS, utilizing modern web technologies including Matomo for analytics and Google reCAPTCHA for security. The infrastructure demonstrates good digital maturity with privacy-respecting analytics and cookie consent mechanisms. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact information, which could enhance trust and preparedness. No vulnerabilities or suspicious activities were detected. Overall, the site presents a low-risk profile with strong legitimacy as a government entity. Strategic recommendations include publishing explicit security and incident response policies, adding a vulnerability disclosure mechanism, and enhancing transparency on data retention. These steps would further strengthen the site's security posture and user trust.

M

media city leipzig

media-city-leipzig.de

44

media city leipzig operates as the largest and most modern production complex for film, TV, radio, and stage in Central Germany, offering rental services for studios, event spaces, and conference rooms. The website reflects a professional media industry focus with clear navigation and relevant content for media professionals and creative businesses. Technically, the site is built on Drupal CMS with jQuery and Colorbox, providing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy and cookie policy present but no active cookie consent mechanism. Overall, the domain registration data aligns with the business claims, supporting legitimacy. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance trust and compliance.

D

Deutsche Telekom Stiftung

telekom-stiftung.de

69

Deutsche Telekom Stiftung is a large, well-established non-profit foundation founded in 2003, focused on improving STEM (MINT) education for children and youth in Germany. The foundation supports educational projects, develops free teaching materials, and fosters networks and educational steering. The website is professionally designed, mobile-optimized, and built on Drupal CMS with modern technologies such as Matomo analytics and Cookiebot for privacy compliance. Security posture is strong with HTTPS and privacy-respecting analytics, though some security headers and explicit security policies could be improved. Overall, the site is trustworthy, transparent, and compliant with GDPR, targeting educators, schools, and learners.

E

Etat de Genève

ge.ch

70

The website www.ge.ch is the official online portal for the République et canton de Genève, serving as the authoritative source for government information, public services, and administrative procedures for residents and businesses in the Canton of Geneva, Switzerland. It offers comprehensive access to official news, e-demarches (online administrative procedures), publications, and institutional information, positioning itself as a critical government communication and service platform. Technically, the site is built on the Drupal CMS platform, leveraging modern web technologies including responsive design, JavaScript, and Matomo analytics for user tracking with consent. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices. Hosting details are not explicitly stated but are likely managed by government infrastructure. From a security perspective, the site enforces HTTPS and uses a consent-based cookie banner compliant with GDPR. While explicit security headers are not visible in the HTML, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or vulnerability disclosure page is noted as an area for improvement. The WHOIS data confirms the domain is registered to the official government entity, reinforcing legitimacy. Overall, the site is highly trustworthy, professionally designed, and well-maintained, with strong privacy compliance and a clear focus on public service. No adult or questionable content is present, and the site is fully accessible without WAF or blocking mechanisms.

M

Ministerium fuer Inneres und Kommunales NRW

open.nrw

64

Open.NRW is the official Open Government and Open Data portal of the North Rhine-Westphalia state government in Germany. It provides a comprehensive platform for transparency, citizen participation, and access to open datasets from the public sector. The portal targets citizens, municipalities, government agencies, and service providers, offering data, project information, and participation opportunities. Technically, the site is built on Drupal CMS, uses Matomo for privacy-conscious analytics, and implements cookie consent mechanisms compliant with GDPR. Security posture is strong with HTTPS and privacy features, though DNSSEC is not enabled. The domain registration aligns with the official government entity, reinforcing trust and legitimacy. Overall, the site demonstrates high professionalism, good technical implementation, and strong privacy compliance.

C

con terra GmbH

conterra.de

64

con terra GmbH is a German-based technology company specializing in customized GIS and GeoIT solutions for both private sector and public administration clients. The company holds a strong market position as a platinum partner of leading GIS and data integration technology providers such as Esri and Safe Software. Their website reflects a professional and modern digital presence, showcasing their key services including GIS solutions, GeoIT integration, services, and training. The target audience is primarily businesses and government entities requiring advanced geoinformation systems and digital transformation support. Technically, the website is built on Drupal CMS with modern web technologies including Google Tag Manager and Cookiebot for consent management. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Performance is moderate with no critical technical issues detected. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. From a security and compliance perspective, the site demonstrates GDPR compliance with a comprehensive privacy policy and cookie consent mechanism. However, there is no visible incident response or vulnerability disclosure information. WHOIS data aligns with the website's legitimacy, showing consistent domain registration and no privacy protection, supporting trustworthiness. Overall, con terra GmbH presents a credible, professional, and secure online presence suitable for its business domain. Strategic improvements could focus on enhancing security headers, publishing security policies, and providing incident response contacts to further strengthen trust and compliance.

Z

Zeppelin Rental

zeppelin-rental.de

65

Zeppelin Rental is a large German company specializing in the rental of machinery, equipment, and temporary infrastructure solutions primarily for business customers in the construction and transportation sectors. The website presents a professional and well-structured digital presence, offering detailed product categories and rental assistance tools. The technical infrastructure is based on Drupal CMS with modern JavaScript libraries and includes compliance with GDPR through cookie consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy and well-positioned in its market segment.

M

Ministère de l'agriculture et de l'alimentation

laventureduvivant.fr

64

L'aventure du Vivant is an official French government educational website managed by the Ministry of Agriculture and Food. It provides comprehensive information about agricultural careers, training programs, and environmental awareness targeted primarily at students and young people interested in agriculture and nature-related professions in France. The site is well-branded with government logos and maintains a consistent professional image. Technically, the website is built on Drupal CMS with Bootstrap and jQuery, and uses modern analytics tools including Matomo, Google Tag Manager, and TikTok Pixel. It is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or suspicious content were detected. The domain registration is consistent with the official nature of the site, registered through a reputable registrar without privacy protection, appropriate for a government entity.

L

Landesregierung Nordrhein-Westfalen

land.nrw

67

The website www.land.nrw is the official online presence of the State Government of North Rhine-Westphalia, Germany. It serves as a comprehensive portal for government news, press releases, public service information, and event announcements targeted at residents, journalists, and government officials. The site demonstrates a high level of professionalism, consistent branding, and excellent content quality, reflecting its authoritative government status. Technically, the site is built on the Drupal CMS platform, utilizing modern web technologies including jQuery UI and a privacy-focused Matomo analytics implementation. The website is well-optimized for mobile devices and accessibility, with clear navigation and structured content. Privacy compliance is robust, featuring detailed privacy and cookie policies with user consent mechanisms aligned with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. While explicit security headers are not fully visible in the provided data, the overall security posture is strong with no detected vulnerabilities or exposed sensitive information. The WHOIS data is privacy-protected, which is justified given the governmental nature of the domain, and no suspicious patterns are detected. Overall, the website presents a low risk profile with strong trust indicators and a mature digital infrastructure. Strategic recommendations include enhancing explicit security header implementation and ongoing monitoring of third-party scripts to maintain security integrity.

V

Verein für Konsumenteninformation (VKI)

konsument.at

67

KONSUMENT is a reputable Austrian consumer information magazine operated by the non-profit Verein für Konsumenteninformation (VKI). The website offers comprehensive consumer protection content, product tests, reports, and premium subscription services. It targets Austrian consumers seeking reliable and independent information. Technically, the site is built on Drupal CMS with modern libraries such as Bootstrap and FontAwesome, and uses Matomo analytics for privacy-conscious tracking. The site is mobile optimized, accessible, and professionally designed with clear navigation and premium content offerings. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is unavailable due to quota limits, but the domain appears legitimate and privacy protection is justified. Overall, the site demonstrates high trustworthiness and professionalism.

La Voix du Nord is a prominent regional news media company in France, delivering news content and digital newspaper services primarily to the northern France audience. The website is professionally designed and leverages a mature technical infrastructure including Drupal CMS, advanced consent management via Didomi, and multiple advertising and analytics platforms. The security posture is strong with HTTPS enforced and consent-based advertising controls, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data is likely due to privacy protection and does not detract significantly from the site's legitimacy. Overall, the site represents a mature digital media presence with good business credibility and technical implementation.

B

Bpifrance Création

prediagentreprise.fr

64

Bpifrance Création is a French government-backed institution providing resources and tools to support entrepreneurs in creating or taking over businesses. The website offers informational content and a prediagnostic tool for business transmission and takeover, currently under redevelopment. The site targets French entrepreneurs and provides access to the Pass Créa platform for project construction. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes a chatbot for user assistance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant, though explicit security and incident response policies are not found. Overall, the website is professional, trustworthy, and well-structured, serving as a reliable resource for its audience.

I

InPost sp. z o.o.

inpost.pl

71

InPost sp. z o.o. operates a comprehensive parcel delivery and logistics platform primarily serving individual customers and businesses in Poland. The company is a market leader in parcel lockers (Paczkomat®) and courier services, offering a wide range of shipping options including international shipments and fulfillment services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses Drupal CMS, integrates Google Tag Manager and Didomi for consent management, and employs modern JavaScript frameworks. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data confirms domain legitimacy and long-term operation since 2006. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.

The U.S. Securities and Exchange Commission (SEC) operates the website www.sec.gov as the official federal government portal for securities regulation, investor protection, and market oversight. The site provides comprehensive resources including filings search, rulemaking activities, enforcement news, and educational materials targeted at investors, businesses, and market participants. The SEC is a large, enterprise-level government agency with a long-standing history dating back to 1934, reflected in the authoritative and professional content presented on the site. Technically, the website is built on the Drupal CMS platform, leveraging the U.S. Web Design System (USWDS) for accessibility and responsive design. It integrates modern analytics and tracking tools such as Google Tag Manager and YouTube APIs, ensuring a rich user experience with fast performance and excellent mobile optimization. The site is hosted likely on government infrastructure or via Akamai CDN, ensuring reliability and security. From a security perspective, the site enforces HTTPS and demonstrates good security practices including secure forms and no visible vulnerabilities. While explicit security headers were not fully confirmed in the provided content, the overall posture is strong, consistent with a government entity. Privacy and cookie policies were not explicitly found in the provided HTML snippet, which slightly impacts privacy compliance scoring. Overall, the SEC website is a highly credible, trustworthy, and professionally maintained government resource. It effectively serves its mission to protect investors and maintain market integrity. Strategic recommendations include publishing explicit privacy and cookie policies prominently, ensuring all security headers are set, and maintaining vigilance on third-party scripts to uphold security standards.

B

Bpifrance

bpifrance-creation.fr

62

Bpifrance Création is a French government-affiliated platform dedicated to supporting entrepreneurs in creating, managing, developing, and transmitting their businesses. The website offers comprehensive resources including financing tools, legal and fiscal guides, expert videos, and event information. It targets entrepreneurs and small business owners primarily in France, positioning itself as a key national resource in the entrepreneurship ecosystem. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and Vuetify, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS and secure authentication mechanisms, though some security headers and policies could be improved. Privacy compliance is partially addressed with cookie consent but lacks a clearly accessible privacy policy page. Overall, the site is professional, trustworthy, and content-rich, serving its audience effectively.

G

Groupe JVS

groupe-jvs.fr

48

Groupe JVS is a French software publishing group specializing in IT solutions for public sector organizations, particularly local and territorial collectivities. With over 40 years of experience, the group operates through five subsidiaries offering tailored software and digital services to facilitate the digital transformation of public services. Their market position is solid within the French public sector, supported by a network of 14 regional agencies and a portfolio of innovative solutions aimed at improving citizen engagement and administrative efficiency. Technically, the website is built on Drupal CMS and integrates modern analytics and marketing tools such as Matomo and HubSpot. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in accessibility and security headers could be made. The presence of cookie consent mechanisms and a comprehensive privacy policy indicates a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a notable concern, reducing the overall trust score despite the professional appearance and business legitimacy of the site. Overall, Groupe JVS presents a professional and credible digital presence with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing a security policy, and monitoring domain registration details to ensure ongoing trustworthiness.

A

Atout France

atout-france.fr

57

Atout France is the official French government agency dedicated to developing and promoting tourism both domestically and internationally. The website presents a comprehensive range of services including market analysis, sustainable tourism initiatives, innovation support, professional training, and event organization. It targets tourism professionals and stakeholders aiming to enhance France's tourism sector. Technically, the site is built on Drupal CMS, employs modern web technologies, and integrates privacy and analytics tools such as Google Tag Manager and Axeptio for cookie consent. The design is professional, mobile-optimized, and accessible, reflecting the French government's digital standards. Security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could be more visible. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to AFNIC policies, but the official branding and content strongly indicate legitimacy. Overall, the site is a trustworthy, well-maintained government resource for tourism stakeholders.

C

Citopia

citopia.fr

52

Citopia is a French company specializing in digital solutions tailored for local governments and municipalities, focusing on citizen relationship management and digital transformation. The company offers a suite of products including citizen request management, communication tools, portals, mobile applications, and appointment management, positioning itself as a niche provider within the government technology sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the website is built on Drupal CMS, uses Matomo for analytics, and integrates a cookie consent management platform (tarteaucitron.io). The site demonstrates good technical implementation with modern web standards, responsive design, and SEO optimization. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is privacy-protected, which is common and justified for this business type. Overall, the security posture is good but could be improved with additional headers and documented policies. The overall risk assessment is low, with a trustworthy and professional online presence. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

L

Laëtis

laetis.fr

44

Laëtis is a French digital agency specializing in creating interactive and user-friendly digital solutions tailored to sectors such as tourism, local development, agriculture, environment, and e-commerce. The company targets clients focused on efficiency and sustainable territorial development, offering custom web and online collaborative applications. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in French. Technically, the website is built on Drupal CMS with modern JavaScript libraries including jQuery, RequireJS, and Modernizr. It employs HTTPS with good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, no explicit security headers were detected, and no detailed security or incident response policies are published. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent but lacks visible advanced security headers and incident response information. The absence of WHOIS data limits domain trust assessment, though the site content and structure suggest a legitimate business. No vulnerabilities or exposed sensitive data were identified in the provided content. Overall, Laëtis presents a professional and trustworthy digital presence with room for improvement in security transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

A

Assistance publique - Hôpitaux de Paris (AP-HP)

aphp.fr

66

Assistance publique - Hôpitaux de Paris (AP-HP) is the largest public healthcare institution in Europe, operating 38 hospitals and serving millions of patients annually. The website provides comprehensive information on patient care, research, education, and innovation, targeting patients, healthcare professionals, researchers, and partners. The digital infrastructure is built on Drupal CMS with modern web technologies, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly available. WHOIS data is missing, which is unusual but likely due to AFNIC policies or privacy protection, not indicating malicious intent. Overall, the website is professional, trustworthy, and compliant with GDPR.

É

École nationale des ponts et chaussées

enpc.fr

55

École nationale des ponts et chaussées is a prestigious French grande école specializing in engineering education, research, and professional training with a strong focus on ecological and digital transitions. The institution offers a wide range of programs including engineering degrees, masters, doctoral studies, and continuing education, supported by multiple research laboratories and international partnerships. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and professionals. Technically, the site is built on Drupal CMS with modern JavaScript libraries and privacy-respecting analytics (Matomo). Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

A

Altice Europe

altice.net

64

Altice Europe was a major telecommunications company with a long-standing domain registration since 2003. The website currently serves as an archive following the company's delisting and cessation of operations. It primarily directs investors to Altice France and Altice International for ongoing information. The technical infrastructure is based on Drupal CMS with legacy JavaScript libraries, showing moderate digital maturity. Security posture is basic with HTTPS enforced but lacking DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is functional but minimal, with limited business and security disclosures.

V

Ville de Rungis

rungis.fr

60

The website rungis.fr is the official online presence of the Ville de Rungis, a municipal government entity in France. It provides comprehensive information about local government services, news, events, and administrative procedures targeted primarily at residents and visitors. The site is well-structured, professionally designed, and offers multilingual support with a focus on French. It integrates modern web technologies including Drupal CMS and Matomo analytics for visitor tracking. Privacy and cookie policies are clearly presented with GDPR compliance mechanisms in place. Technically, the site is built on a robust Drupal platform with responsive design and accessibility features, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforced and domain registration consistent with the official nature of the site. However, explicit security headers and incident response information are not prominently available, representing an area for improvement. Overall, rungis.fr demonstrates a mature digital infrastructure suitable for a government website, with strong business credibility and trust indicators. The site is safe for general audiences, free from adult or questionable content, and maintains transparency through social media and contact information. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and compliance.

A

ACOME

acome.com

62

ACOME is a French industrial group specializing in high-tech cables for automotive, telecommunications, smart buildings, smart cities, railways, and electricity transmission sectors. The company positions itself as a technological leader with a strong international presence and a commitment to innovation and responsible growth. Their website reflects a professional and comprehensive digital presence, leveraging Drupal CMS and modern web technologies, including analytics and cookie consent tools. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are not published. The absence of WHOIS registration data is a notable concern but does not detract significantly from the overall legitimacy given the professional content and business focus. Strategic recommendations include enhancing security transparency and verifying domain registration details.

D

Driving Urban Transitions (DUT) Partnership

dutpartnership.eu

69

The Driving Urban Transitions (DUT) Partnership website serves as a professional platform for a European partnership focused on funding and coordinating research and innovation projects aimed at sustainable urban transitions. The site targets European cities, policymakers, researchers, and stakeholders interested in climate-neutral and resilient urban futures. It provides comprehensive information on projects, funding opportunities, events, and community engagement. Technically, the site is built on Drupal CMS with modern frameworks like Bootstrap and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-branded, and compliant with GDPR, making it a credible resource in its sector.

L

L'Union sociale pour l'habitat

union-habitat.org

53

L'Union sociale pour l'habitat is a prominent French non-profit organization dedicated to supporting social housing entities (Hlm) and contributing to national housing policy development. The website serves as a comprehensive resource hub offering thematic content, publications, event information, and professional support to stakeholders in the social housing sector. The organization maintains a strong market position as a key actor in France's social housing ecosystem, with a large-scale presence and multiple affiliated entities. Technically, the website is built on Drupal CMS, employs modern web technologies such as lazy loading and Matomo analytics, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforcement and security headers, though explicit security and privacy policies are not prominently published. The absence of WHOIS data limits domain trust verification but does not detract significantly from the site's legitimacy given its professional presentation and content. Overall, the site is well-designed, content-rich, and trustworthy for its target audience.

E

ENGIE

engie.com

72

ENGIE is a major global energy company focused on accelerating the transition to a carbon-neutral economy. The company offers a broad range of services including renewable energy production, energy flexibility solutions, infrastructure management, and energy supply tailored to cities, industries, tertiary sectors, and individual consumers. The website content is professionally presented in French, reflecting ENGIE's strong market position in the energy sector, particularly in France and internationally. Technically, the site is built on Drupal CMS with modern web technologies such as Bootstrap, Google Tag Manager, and Matomo analytics, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers are not detected and no security.txt file is published. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's legitimacy given the strong branding and external references. Overall, ENGIE's website demonstrates a mature digital presence aligned with its business objectives and compliance requirements.

U

U7+ Alliance of world universities

u7alliance.org

68

The U7+ Alliance of world universities is a global coalition of university presidents committed to addressing pressing global challenges in coordination with G7 governments and beyond. The organization operates as a non-profit alliance focused on policy advocacy, collaborative summits, working groups, and student initiatives to foster global education and research collaboration. The website reflects a professional and consistent brand image targeting university leaders, academics, policymakers, and students worldwide. Technically, the website is built on Drupal CMS with modern libraries such as jQuery and Superfish for navigation, and uses Matomo Cloud for privacy-focused analytics. The site is mobile-optimized, accessible, and well-structured with clear navigation and SEO best practices. Cookie consent is managed via Tarteaucitron.js, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policy pages or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy-protected, which is justified for this type of non-profit organization. Overall, the site demonstrates a strong security posture with room for improvement in transparency and security documentation. The overall risk assessment is low, with the site presenting a trustworthy and professional front for the U7+ Alliance. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

C

Centre Hospitalier Universitaire de Nîmes

chu-nimes.fr

56

The Centre Hospitalier Universitaire de Nîmes (CHU de Nîmes) is a major public university hospital serving the Gard region and neighboring departments in France. It provides comprehensive healthcare services including emergency care, consultations, hospitalizations, medical research, and professional training. The institution is large, with nearly 7,400 staff including medical and non-medical personnel, and operates across multiple sites. The website reflects a mature digital presence with a professional design, clear navigation, and accessibility features, targeting patients, healthcare professionals, researchers, and students. Technically, the website is built on the Drupal CMS platform, hosted by OVH, and incorporates modern web technologies such as Bootstrap and Swiper.js. It includes a cookie consent mechanism compliant with GDPR and uses Google Analytics for audience measurement. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data confirms the domain's legitimacy with a long registration history and consistent registration details. Overall, the website demonstrates a strong security posture and compliance with privacy regulations, supporting the trustworthiness of the institution. Recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further improve security transparency.

I

Ifremer

ifremer.fr

60

Ifremer is the French national institute dedicated to oceanographic research, focusing on marine ecosystem protection, sustainable resource management, and marine data sharing. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with a government research entity. Technically, the site uses Drupal CMS with modern JavaScript libraries and SVG graphics, optimized for mobile and accessibility. Security posture is strong with HTTPS, security headers, and no evident vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional, serving a broad audience including scientists, policymakers, and the public.

Enedis is a French public service company responsible for operating, modernizing, and maintaining the electricity distribution network across France. The company provides 24/7 services including network operation, installation connections, and meter reading. It holds a leading position in the French energy sector as the national distribution network manager. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization, built on Drupal CMS with modern web technologies. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response information are not publicly detailed. Privacy compliance is well addressed with comprehensive privacy and cookie policies including consent mechanisms. Overall, the website and business presence indicate a trustworthy and legitimate entity with a focus on public service and energy distribution.

L

L214

politique-animaux.fr

59

The website 'Politique & animaux' is an advocacy and informational platform operated by the French non-profit organization L214, focusing on political actions related to animal welfare in France. It provides evaluations of political personalities, campaigns at municipal, national, and European levels, and public opinion polling data. The platform targets French citizens interested in animal rights and political accountability. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates Google Tag Manager for analytics. It is mobile-optimized and uses HTTPS for secure communications. Security posture is good with no evident vulnerabilities, though explicit security headers could be improved. Privacy compliance is moderate, with consent mechanisms present but no explicit privacy or cookie policy pages found. WHOIS data is unavailable, which slightly impacts trust but the association with L214 and the professional content support legitimacy. Overall, the site is well-designed, content-rich, and trustworthy for its audience.

D

Département de la Charente-Maritime

charente-maritime.fr

65

The website la.charente-maritime.fr serves as the official online presence for the Département de la Charente-Maritime, a governmental entity in France. It provides extensive information about departmental services, elected officials, public projects, social services, tourism, and cultural activities. The site targets residents, visitors, and stakeholders within the Charente-Maritime region, offering a broad range of public sector services and information. The business model is that of a public sector government service provider, with a large scope and audience. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies such as Google Fonts, Google Maps API, and Matomo Analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of cookie consent mechanisms indicates attention to privacy compliance, though an explicit privacy policy page was not detected in the provided content. From a security perspective, the site enforces HTTPS and uses modern JavaScript libraries, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, which is unusual but may be due to AFNIC registry policies or privacy protections. Overall, the site appears trustworthy and professional, consistent with an official government entity. The overall risk is low, but improvements are recommended in publishing comprehensive privacy and security policies, implementing security headers, and providing clear contact information for security incidents to enhance trust and compliance.

T

Tipiak

tipiak.fr

45

Tipiak is a French food brand specializing in products such as taboulé, quinoa, couscous, and boulgour, supported by a rich recipe platform with over 300 recipes. The website serves as both a product showcase and a culinary inspiration hub targeting general consumers interested in cooking. Technically, the site is built on Drupal CMS, uses Google Tag Manager for analytics, and implements EU cookie compliance mechanisms, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible with good SEO practices. Security posture is adequate with cookie consent and privacy policies in place, but lacks explicit security headers and published incident response information. The absence of WHOIS data for the domain reduces trustworthiness, though the website content and external links suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced security transparency and domain registration verification.

I

InVivo

invivo-group.com

66

InVivo is a major French agricultural cooperative group with a strong European presence, focused on driving the agricultural and food transition towards sustainability and resilience. The company operates across multiple sectors including agriculture, international commodity trading, agro-food production, and retail, serving farmers, cooperatives, and consumers. The website reflects a mature digital presence built on Drupal CMS, with good mobile optimization and SEO practices. Social media integration is robust, supporting brand engagement. Security posture is generally good with HTTPS and cookie consent implemented, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, though the professional website content and branding mitigate some risk. Overall, the site is trustworthy and professional but would benefit from enhanced transparency on privacy and security policies.