Security Directory

L

L’Heureux Cyclage

heureux-cyclage.org

52

L’Heureux Cyclage is a French non-profit network dedicated to promoting participatory and solidarity-based bicycle workshops. The organization focuses on encouraging cycling through the reuse of unused bicycles and mechanical education. Their website serves as a hub for news, events, training, and resources aimed at cycling enthusiasts, community members, and educators. The network holds a reputable position within the sustainable transportation sector in France, offering certifications, advocacy, and cooperative events to support its mission. Technically, the website is built on the SPIP CMS platform and utilizes modern JavaScript libraries such as Leaflet for interactive GIS mapping and Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, some improvements could be made in accessibility and performance optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It uses deferred and asynchronous loading for scripts, which is good practice. However, it lacks important security headers and does not provide a dedicated security policy or incident response contact information. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is present. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to missing security headers and incomplete privacy compliance mechanisms. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

C

Communauté Emmaüs de Paris

emmaus-paris.fr

38

Emmaüs Paris is a non-profit community organization focused on social solidarity through donation collection, volunteer engagement, and operation of eight solidarity shops in Paris. The website serves as a portal for donors, buyers, and volunteers, providing information on how to contribute and participate. The organization maintains active social media profiles and provides contact information including a physical address and email. Technically, the website is built on WordPress with common plugins for SEO, forms, and maps, and enforces HTTPS for secure communication. However, the Google Maps integration suffers from API key issues, and no advanced security headers are detected. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and social presence support legitimacy. Privacy compliance is addressed with a cookie consent banner and a privacy policy page. Overall, the site is functional, professional, and serves its community purpose effectively.

B

Broadcast Sport

broadcastsportevents.co.uk

63

Broadcast Sport is a specialized media company focused on the sports broadcasting industry, offering an online news portal, quarterly magazine, and hosting the Broadcast Sport Summit event. The website targets professionals in sports media including producers, broadcasters, athletes, and brands. The company positions itself as a niche leader in sports media innovation and networking. Technically, the website uses a modern tech stack with jQuery, Google Analytics, and a proprietary CMS (SHOWOFF by ASP.events). It is mobile optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policies are missing. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

A

ASP Events

asp.events

69

ASP Events is a specialized service provider focused on creating websites for conferences, shows, and exhibitions. Their market position is that of a niche event website specialist offering engaging, functional, and visually appealing online presences tailored for event organizers. The website demonstrates a good level of professionalism and targets event planners seeking dedicated web solutions. Technically, the site uses a modern technology stack including jQuery, Google Tag Manager, Cookiebot for consent management, and custom CMS technology named SHOWOFF by ASP.events. The site is mobile optimized and accessible, with good SEO practices evident from meta tags and structured data. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit security headers and policies are not visible. Privacy compliance is partially addressed via Cookiebot, but no explicit privacy policy or terms of service pages were found in the provided content. WHOIS data is unavailable due to query failure or privacy protection, which is common for small service providers and does not raise immediate concerns. Overall, the website is professional and trustworthy but could improve transparency by publishing privacy and security policies and providing clear contact information.

R

REFER

reemploi-idf.org

56

REFER is a non-profit regional network based in Île-de-France focused on promoting and coordinating the reuse of objects in a solidarity and ecological framework. The organization supports local actors through accompaniment, events, advocacy, and mapping of reuse resources. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation. It integrates privacy-conscious analytics via Matomo and maintains a consistent brand presence with partner logos and social media channels. However, explicit privacy and cookie policies are not found, representing a compliance gap. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the website demonstrates a good security posture with HTTPS and no visible vulnerabilities but could improve by adding security headers and incident response information.

F

Festival Emmaüs Solidarité

festivalemmaussolidarite.fr

50

Festival Emmaüs Solidarité is a cultural and solidarity-focused event scheduled for June 28, 2025, in Aubervilliers, France. The website provides detailed information about concerts, DJ sets, stand-up shows, workshops, and other activities, targeting a general audience interested in cultural events and social engagement. The business model centers on event organization and ticket sales, with tickets sold through an external platform. Technically, the website uses modern web technologies including React and Ionic Framework, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and no trackers requiring consent, though the absence of security headers and privacy policy pages are noted gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

L

La Venelle

lavenelle-montreuil.org

56

La Venelle is a non-profit community organization based in Montreuil, France, focused on promoting solidarity-based reuse and circular economy practices. It hosts nine associations that operate reuse shops, repair workshops, and social insertion employment programs. The organization also offers a café-cantine and hosts cultural events, positioning itself as a local hub for ecological and social initiatives. The website reflects this mission with clear content, community-oriented messaging, and accessible navigation. Technically, the site uses modern web technologies such as Ionic and React, with a moderate performance profile and good mobile optimization. However, it lacks explicit privacy and security policies, and no security headers or vulnerability disclosures are present. The site does not use tracking or analytics scripts, aligning with its privacy-conscious stance. Overall, the website is professional and trustworthy but could improve in privacy compliance and security posture.

E

Emmaüs Epargne Solidaire

emmaus-epargne-solidaire.org

56

Emmaüs Epargne Solidaire is a French social finance organization focused on providing solidarity savings products to fund acquisition, renovation, and construction of facilities for Emmaüs groups. These facilities support social activities such as second-hand sales and repair workshops. The website positions itself as a niche player in the social finance sector with a clear social mission and the Finansol certification as a trust indicator. Technically, the website uses modern JavaScript frameworks including React and Ionic, with good mobile optimization and SEO practices. However, some standard compliance elements such as privacy policy and terms of service pages are missing. Security posture is moderate with cookie consent implemented but lacking advanced security headers and explicit incident response policies. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

T

The Shift Project

territoiresaufutur.org

64

Territoires au Futur is a French non-profit platform operated by The Shift Project, focused on supporting local territorial resilience and ecological transition. It provides diagnostic tools, mobilization campaigns, and educational resources targeting local elected officials and citizens in France. The website is professionally designed with excellent content quality and clear navigation, optimized for mobile devices. Technically, it uses modern JavaScript frameworks (Vue.js), FontAwesome icons, and Matomo analytics, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response policies. Privacy compliance is adequate with a linked comprehensive privacy policy and cookie policy, but lacks an explicit cookie consent mechanism. Overall, the site is trustworthy, well-branded, and aligned with its parent organization, The Shift Project.

M

Media Business Insight (MBI) Ltd

broadcastsportawards.co.uk

59

The Broadcast Sport Awards website represents a well-established event brand under Media Business Insight (MBI) Ltd, a subsidiary of GlobalData. The site focuses on celebrating excellence in sports broadcasting and production, targeting industry professionals such as broadcasters, production companies, and rights holders. It offers event information, sponsorship opportunities, and showcases past winners and shortlists, positioning itself as a leading UK and Ireland sports television awards event. Technically, the website employs a modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Permutive for tracking, built on the SHOWOFF CMS platform by ASP.events. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and consistent branding. However, some improvements could be made in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner or explicit GDPR compliance indicators. Overall, the website is professional, trustworthy, and serves its business purpose effectively. Strategic enhancements in privacy and security policies would further strengthen its compliance and user trust.

B

Broadcast Jobs

broadcastjobs.com

57

Broadcast Jobs is a UK-focused online platform providing guidance and resources for job seekers in the TV, film, and media industries. It aggregates and directs users to job listings, professional recruiters, freelancing opportunities, and diversity initiatives. The site is positioned as a niche resource within the UK media job market, targeting professionals and freelancers seeking employment opportunities. Technically, the website is built on the Squarespace platform, leveraging its CMS and hosting infrastructure, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS with HSTS, indicating a strong SSL configuration, but lacks publicly available privacy, cookie, and security policies, which are areas for improvement. Overall, the website presents a professional and trustworthy front but would benefit from enhanced privacy compliance and explicit security disclosures.

C

Capgemini

capgemini.no

82

Capgemini is a global leader in consulting, technology services, and digital transformation, offering integrated services that combine technology expertise with deep sector knowledge. The company targets enterprise clients seeking to innovate and transform their business operations digitally. The website reflects a mature digital presence with a professional design, comprehensive content, and strong branding consistency. Technical infrastructure leverages WordPress CMS with modern JavaScript frameworks like React, supported by marketing and analytics tools such as Pardot and Google Tag Manager. Security posture is robust, with HTTPS enforced and multiple security headers implemented, alongside clear privacy and cookie policies indicating GDPR compliance. The absence of WHOIS data is notable but likely due to privacy protection or query limitations, not detracting from the overall legitimacy of the site. Strategic recommendations include maintaining up-to-date security practices and enhancing incident response visibility.

N

Personlige Navneskilt, Høydemålere & Strikketilbehør i Tre – Håndlaget i Norge

nostenett.no

61

Nøstenett.no is a Norwegian e-commerce website specializing in handcrafted wooden products such as personalized nameplates, height charts, and knitting accessories. The business targets a general audience interested in personalized gifts and craft supplies, positioning itself as a niche artisan retailer within Norway. The website demonstrates a moderate level of digital maturity, utilizing modern tracking and marketing technologies including Google Tag Manager, Facebook Pixel, and customer chat integration. Security measures include CSRF token implementation in forms, but lack explicit security headers and privacy policies, indicating room for improvement in compliance and security posture. Overall, the site appears legitimate and functional with a good user experience and mobile optimization, but would benefit from enhanced transparency and security practices.

V

Vinofil Vinkurs

vinforedrag.no

52

Vinofil Vinkurs is a Norwegian small business specializing in wine education through in-person and digital courses, targeting both corporate and private clients. The website presents a professional and consistent brand image with clear offerings such as wine courses at workplaces, private homes, and gift cards. The business is newly established in 2023, and the domain registration aligns with this timeline. The site leverages modern web technologies and analytics tools but lacks critical privacy and security disclosures, which impacts compliance and trustworthiness. No blocking or WAF mechanisms hinder content access, allowing full analysis.

D

Dagen

dagen.no

66

Dagen.no is a Norwegian Christian and politically independent daily newspaper offering news, reportages, opinion pieces, podcasts, and digital e-paper services. The website targets Norwegian-speaking audiences interested in religious and general news content. It operates on a subscription and advertising business model, with a paywall and user authentication mechanisms in place. The site is professionally designed with consistent branding and good content quality, positioning it as a reputable media outlet in Norway. Technically, the site uses modern web technologies including Google Fonts, Google Publisher Tags for advertising, and custom paywall and authentication scripts. It integrates multiple advertising networks and tracking services, maintaining good performance and mobile optimization. Security-wise, the site enforces HTTPS, uses paywall authentication, and avoids exposing sensitive data, but lacks some advanced security headers and explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. WHOIS data is unavailable due to Norid's privacy policy, but the domain appears legitimate and consistent with the business. Overall, the site demonstrates a mature digital presence with moderate to high security and privacy posture, suitable for its media business model.

G

Gutta på Haugen

gutta.no

59

Gutta på Haugen is a well-established Norwegian gourmet food retailer, operating both a physical delicatessen store in Oslo and an e-commerce platform serving customers across Norway. The website reflects a mature business with a focus on quality food products and a loyal customer base. Their digital infrastructure includes modern tracking and marketing tools, with a CMS platform customized for retail needs. Security posture is adequate with HTTPS and CSRF protections, though improvements in security headers and incident response transparency are recommended. Privacy policies and cookie consent mechanisms are present and localized in Norwegian, supporting GDPR compliance. Overall, the website is professional, user-friendly, and trustworthy, with moderate technical performance and good mobile optimization.

H

HiPay

hipay.com

69

HiPay is a well-established European payment solution provider founded in 2004, offering a comprehensive suite of services including payment management, fraud protection, and conversion optimization tailored for retailers and businesses. The website demonstrates a modern technical infrastructure utilizing React and Next.js frameworks, supported by Cloudflare DNS and analytics tools such as Matomo and Google Analytics. Security posture is strong with HTTPS and Content-Security-Policy headers, though there is room for improvement in privacy compliance and explicit security policies. Overall, the site is professional, trustworthy, and well-positioned in the finance and e-commerce sectors.

B

beIN MENA

bein.com

64

beIN MENA operates as a global sports and entertainment media group, offering 44 channels across multiple continents and languages, serving over 50 million subscribers. The company focuses on subscription-based broadcasting and online streaming services, targeting sports and entertainment consumers worldwide. The website reflects a large, established media entity with consistent branding and professional content. Technically, the site is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates multiple third-party analytics and advertising tools. Security posture is generally good with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency, though the site content and external references support legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

U

Uhelný mlýn

uhelnymlyn.cz

40

Uhelný mlýn is a Czech Republic-based small business operating a multifunctional event space, contemporary art gallery, and design loft. The website presents the business as a local cultural venue with a focus on events and art exhibitions. The digital infrastructure is built on WordPress with integration of popular marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and a Content-Security-Policy header, though additional security headers and policies could enhance protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the website is professional and functional, but could improve transparency and security documentation.

K

KD Mlejn, z. ú.

mlejn.cz

40

KD Mlejn is a well-established non-profit cultural organization based in Prague, Czech Republic, with a history dating back to 1988 through its predecessor Klub Mlejn. The organization offers a variety of cultural services including theater performances, concerts, courses, residencies, and community events, targeting a broad audience interested in arts and culture. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site runs on WordPress with standard plugins for analytics and cookie compliance, hosted on a Czech hosting provider. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. The domain is long-registered and consistent with the organization's history, indicating legitimacy. Overall, the site is trustworthy and serves its community well, though improvements in privacy and security documentation are recommended.

A

Alfred ve dvoře

alfredvedvore.cz

40

Alfred ve dvoře is a small cultural institution based in Prague, Czech Republic, specializing in experimental and contemporary theater, dance, film, music, and visual arts. The website serves as a platform to showcase upcoming performances and events, targeting a general audience interested in avant-garde performing arts. The domain has been registered since 2003, indicating a well-established presence in the cultural sector. Technically, the website uses a custom or Nette-based CMS with jQuery and Google reCAPTCHA integration, but relies on somewhat outdated JavaScript libraries and lacks modern security headers. Privacy and cookie policies are absent, which poses compliance risks under GDPR.

ParisHotelsfr.com operates as an online hospitality platform focusing on hotel listings and tourism information primarily for Paris and the Bourgogne region, including the Communauté d’agglomération de l’Auxerrois. The website provides rich cultural and economic insights about the Auxerrois area alongside extensive hotel listings with direct links, targeting tourists and business travelers. Technically, the site uses modern web technologies such as Leaflet.js for mapping and is served over HTTPS, ensuring secure connections. However, the absence of WHOIS data and security headers indicates areas for improvement in transparency and security hardening. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is functional and professional but would benefit from enhanced security and compliance features.

M

MASMOVIL

masmovil.com

67

MASMOVIL is a major Spanish telecommunications company offering mobile telephony, fiber optic internet, fixed telephony, and television services. The company targets general consumers and businesses in Spain with a business model focused on simple, flexible tariffs and competitive pricing. The website reflects a strong market position with clear branding and comprehensive service offerings. Technically, the site is built on modern frameworks such as Next.js and React, integrated with Contentful CMS and various marketing and payment platforms, ensuring a robust and scalable digital presence. Security posture is solid with HTTPS, security headers, and anti-bot measures like reCAPTCHA, though explicit security policies and incident response details are not publicly available. Overall, the site is professional, user-friendly, and trustworthy, with good privacy compliance and clear contact information. However, WHOIS data is inaccessible, limiting domain legitimacy verification.

D

Defi Mode

defimode.org

60

Defi Mode is an organization dedicated to supporting and accelerating the development and transformation of actors in the French fashion and apparel industry. The website presents a professional and consistent brand image, targeting industry stakeholders and professionals in France. The business model appears to be that of a non-profit or industry support entity, with a medium-sized presence established since at least 2016. Technically, the site is built on WordPress using modern plugins such as Yoast SEO, Divi Builder, and Cookie Law Info, indicating a mature digital infrastructure with good SEO and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

C

Conseil Régional de Guadeloupe

regionguadeloupe.fr

60

The website www.regionguadeloupe.fr is the official digital presence of the Regional Council of Guadeloupe, serving as a comprehensive portal for regional aids, services, news, and public transport information. It targets a broad audience including local residents, businesses, students, and public sector entities. The site leverages TYPO3 CMS and integrates common web technologies such as jQuery, Google Analytics, and social media SDKs to deliver content and track engagement. While the site is well-structured and professionally designed, it lacks a publicly accessible privacy policy and shows accessibility non-compliance, which are areas for improvement. Security posture is moderate with HTTPS enabled but missing some security headers. WHOIS data is unavailable, which slightly impacts trust but the official .fr domain and consistent content support legitimacy.

R

Réseau Entreprendre®

reseau-entreprendre.org

63

Réseau Entreprendre® is a well-established non-profit organization focused on supporting entrepreneurs and business leaders through personalized mentoring and community engagement. The organization operates internationally with a strong presence in France and partners with numerous reputable companies and institutions. The website reflects a professional and comprehensive digital presence, leveraging WordPress and modern web technologies to deliver content effectively. Privacy and cookie policies are in place, indicating GDPR compliance. Security posture is good with HTTPS and recaptcha protections, though some security headers and explicit incident response information are absent. The lack of WHOIS data limits domain registration trust assessment, but the website's content and partner ecosystem support legitimacy. Overall, the site is a credible resource for entrepreneurship support and community building.

F

Folie'Flore

folieflore.fr

46

Folie'Flore is a well-established cultural event organizer specializing in an annual floral show held in Mulhouse, France. The event is unique in Europe and has a 25-year history, attracting a large audience with its ephemeral gardens and light shows. The website effectively communicates the event details, history, and partnerships, targeting visitors and cultural enthusiasts. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel, ensuring good SEO and user experience with mobile optimization. Security posture is adequate with HTTPS and basic security practices, though improvements in security headers are recommended. Privacy compliance is addressed with a cookie consent banner and a privacy policy, but no explicit GDPR or data protection officer information is found. Overall, the site is professional, trustworthy, and serves its business purpose well.

J

Journées d'Octobre

journees-octobre.fr

46

Journées d'Octobre is a regional event organizer based in Mulhouse, France, specializing in hosting an annual artisan and creator fair alongside the Folie'Flore floral show. The event attracts a large audience and features numerous exhibitors, restaurants, and entertainment stages, positioning itself as a key cultural and commercial event in the Alsace region. The website effectively promotes the event with detailed information, imagery, and structured data for enhanced search engine visibility. Technically, the site uses modern JavaScript libraries like jQuery, integrates Google Analytics and Facebook Pixel for marketing, and employs HTTPS with a valid SSL certificate, ensuring secure user connections. However, the absence of explicit security headers and limited contact information slightly reduce the security posture. The WHOIS data is unavailable, which is common for .fr domains but reduces transparency. Overall, the site is professional, accessible, and trustworthy, with room for improvement in security policies and contact transparency.

M

Mulhouse Expo S.A.E.M.L

foiredemulhouse.fr

40

Foire de Mulhouse is a well-established regional event organizer in France, hosting an annual fair with cultural themes and exhibitions. The website presents the 79th edition scheduled for May 2026, highlighting Italy as the thematic focus. The business operates primarily in the hospitality and event sector, targeting general public visitors interested in fairs and cultural events. The company behind the event is Mulhouse Expo S.A.E.M.L, a medium-sized entity with a long history since 2011. The website content is professionally presented in French, with clear navigation and relevant event information. Social media integration and partner links enhance its market presence. Technically, the website uses a traditional tech stack including jQuery 1.11.2, Bootstrap, and Google Analytics. Hosting is provided by OCI CLOUD as per WHOIS data. The site is mobile-optimized with good design quality, though some technical improvements are possible, such as updating libraries and enhancing accessibility. SEO is basic but functional. From a security perspective, the site uses HTTPS (assumed from domain and modern standards), but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The contact form collects user data but lacks visible anti-spam protections. No incident response or security policy information is provided. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and security hardening to reduce risk and enhance user trust.

M

Ma planète BIO

maplanetebio.com

60

Ma planète BIO is a regional event organizer focused on organic agriculture, sustainable living, and related cultural activities in South Alsace, France. The website promotes an annual event held at Parc Expo Mulhouse, targeting enthusiasts and professionals interested in organic farming and eco-friendly lifestyles. The business is relatively new, founded in 2022, and operates primarily in French. The website provides event information, exhibitor details, conference schedules, and visitor guidance, positioning itself as a key regional player in the organic agriculture event space. Technically, the website uses a combination of jQuery, Bootstrap, Owl Carousel, and cookie management via tarteaucitron.js. It integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is hosted by OVH sas, a reputable hosting provider, and uses HTTPS with a valid SSL certificate. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses domain status protections to prevent unauthorized domain transfers or deletions. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating room for improvement. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligning with GDPR requirements. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Overall, the website presents a professional and trustworthy front for a niche event business with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and trustworthiness.

M

Mulhouse Expo S.A.E.M.L

exterieursetjardin.fr

35

The website exterieursetjardin.fr represents a French event organizer, Mulhouse Expo S.A.E.M.L, specializing in gardening, outdoor living, and organic agriculture exhibitions. The site promotes the 'Extérieurs & Jardin' salon and the 'Ma Planète Bio' event, targeting gardening enthusiasts and the general public interested in bio and wellness. The business operates primarily as an event organizer with a regional market presence and a small company size founded in 2016. Technically, the website uses a traditional tech stack including jQuery 1.11.2, Bootstrap 3.3.4, and Revolution Slider, hosted on OCI CLOUD infrastructure. The site is mobile responsive with good navigation and content quality but lacks modern CMS integration and advanced SEO or accessibility features. Performance is moderate with room for improvement. From a security perspective, the site uses HTTPS but lacks important security headers such as CSP and HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR. The contact information is clearly provided, but no incident response or vulnerability disclosure mechanisms are found. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is functional and professional but requires improvements in privacy compliance, security hardening, and modernization of technical components to enhance trust and security posture.

F

Salon FestiVitas (Mulhouse, 68) | FestiVitas, le salon de toutes vos passions

festivitas.fr

45

The website www.festivitas.fr represents a regional event organizer for the FestiVitas salon held in Mulhouse, France, focusing on gastronomy, wines, and travel. The site provides event information, thematic sections, and visual content targeting epicureans and travelers seeking new experiences. The business model centers on event management and exhibition services, positioning itself as a unique concept in the hospitality sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Google Tag Manager, and Facebook Pixel, ensuring good mobile optimization and SEO practices. However, the absence of a CMS indication and limited hosting details suggest a custom or static site approach. Security-wise, the site uses HTTPS and standard analytics tools but lacks critical security headers and published security policies, which could be improved to enhance trust and compliance. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and structure appear legitimate and professional. Overall, the site is functional and well-designed but would benefit from enhanced privacy, security, and transparency measures.

M

Musée du Désert

museedudesert.com

52

The Musée du Désert website presents a small cultural and historical museum focused on the Huguenot and Camisard heritage in France. The site offers information about the museum, its exhibitions, and related activities, targeting a general audience interested in history and culture. The business model appears to be non-profit and educational, with a boutique for visitors. Technically, the site is built on the SPIP CMS platform using jQuery and Colorbox for UI enhancements. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. Security posture is weak, with no visible security headers or privacy policies, and the WHOIS data is missing or indicates the domain may be unregistered, which raises concerns about domain legitimacy. Overall, the site is functional but requires improvements in security, privacy compliance, and domain registration transparency.

G

GARA

gara.fr

54

GARA is a French archaeological research group focused on regional archaeological activities, exhibitions, conferences, and publications. The website serves as a platform to disseminate information about their research, events, and museum activities, targeting archaeology enthusiasts and the local community. The organization appears to be a small, non-profit entity founded recently in 2023, with a clear focus on cultural heritage preservation and education. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Contact Form 7, and WP Statistics for analytics. Hosting is provided by OVH sas, a reputable French hosting provider. The site shows moderate performance and basic mobile optimization. SEO practices are good with proper meta tags and structured data, but accessibility features are basic. From a security perspective, the site uses HTTPS and has domain status protections but lacks DNSSEC and important security headers like CSP or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR. Contact information is available, including a company domain email and phone number, enhancing business credibility. No WAF or blocking mechanisms are detected, and the site content is safe and appropriate for general audiences. Overall, the website is professional and trustworthy but would benefit from improved security configurations and privacy compliance measures to enhance user trust and regulatory adherence.

S

Sencyb

sencyb.com

43

Sencyb is a small French web agency specializing in website creation, updating, SEO, and multimedia services primarily targeting clients in the Nièvre (58) and Cher (18) regions. The company offers a range of web solutions from static sites to e-commerce platforms, emphasizing tailored solutions to client needs and budgets. Their website is professionally designed using WordPress with Elementor and Astra theme, incorporating modern web technologies and analytics tools such as Google Analytics and Matomo. The presence of a client portal and blog subdomains indicates a structured service offering and client engagement strategy. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit privacy policies and security headers, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that impacts trustworthiness, though the overall digital presence suggests a legitimate business. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and improving transparency around data protection and incident response.

The website represents the Délégation Intergénérationnelle du Numérique, a small non-profit association within the École Normale Supérieure focused on intergenerational digital knowledge sharing and IT support for students. The site provides clear descriptive content about its mission and activities but lacks formal privacy, cookie, or terms of service policies. Technically, the site uses a simple modern CSS framework (Bulma) and is hosted by OVH, but lacks advanced security headers and visible analytics or tracking tools. The security posture is basic with no evident vulnerabilities but also no advanced protections. Overall, the domain registration is consistent with the organization's founding date and mission, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

V

Valabre

valabre.com

49

Valabre is a French public institution specializing in civil security training, research, new technologies, and prevention against major natural and technological risks. The organization serves as a central hub for professional training in civil security, conducting research programs, and developing innovative technologies to support risk management and emergency response. The website reflects a well-established entity with a clear focus on public safety and education, targeting professionals and public agencies involved in civil security and risk prevention. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and performance optimization tools. Security posture is strong with HTTPS and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is limited due to the absence of clear privacy and cookie policies. The WHOIS data is unavailable, which raises questions about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and social media presence. Overall, Valabre's digital presence is professional and trustworthy, with room for improvement in privacy disclosures and security transparency.

E

Eiffage

eiffage.ca

63

Eiffage Canada operates as a multiskilled construction group focused on sustainable infrastructure development and local economic contribution. The company is part of the larger Eiffage Group, a well-established European construction and engineering conglomerate. Their Canadian website emphasizes quality, health and safety, environmental responsibility, and strong corporate values. The site targets construction industry clients, local communities, and suppliers in Canada, offering services in maintenance, rehabilitation, and new construction works. Technically, the website is built on the Jahia CMS platform, utilizing modern JavaScript libraries such as jQuery and APIs from YouTube and Vimeo for media integration. It employs Google Analytics and TagCommander for analytics and marketing, alongside OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and displays a security alert warning users about impersonation attempts, reflecting a proactive security posture. However, the absence of WHOIS data for the domain www.eiffage.ca is a notable anomaly, though the website content and external links strongly associate it with the legitimate Eiffage Group. No critical vulnerabilities or exposed sensitive data were detected. Overall, Eiffage Canada's website presents a professional, secure, and compliant digital presence aligned with its business objectives. The main risk lies in the missing WHOIS data, which should be investigated further to ensure domain registration transparency and trustworthiness.

E

Eiffage Infra-Bau SE

eiffage-infra.de

47

Eiffage Infra-Bau SE is a large, well-established infrastructure construction company with over 150 years of experience, operating primarily in Germany and Europe. The company offers a broad range of construction and engineering services including infrastructure, rail, noise protection, and specialized construction sectors. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and comprehensive organizational information. The technical infrastructure is modern and includes GDPR-compliant cookie consent and analytics via Google Tag Manager. Security posture is good with HTTPS enforced and basic security best practices observed, though some HTTP security headers could be improved. Contact information and multiple company locations are clearly provided, enhancing business credibility. No adult or questionable content is present, making the site safe for general audiences.

E

Eiffage Sénégal

eiffage.sn

54

Eiffage Sénégal is a subsidiary of the multinational Eiffage Group, operating primarily in the construction, civil engineering, and energy sectors within Senegal. The company positions itself as a key player in infrastructure development, offering services such as road construction, building, and energy systems. The website reflects a professional corporate presence with clear branding and comprehensive information about its business activities and social commitments. Technically, the site is built on the Jahia CMS platform, uses modern web technologies including Typekit fonts and Google Analytics, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. The absence of explicit contact details and security policies on the homepage suggests areas for enhancement in transparency and user engagement. Overall, the website demonstrates a mature digital presence aligned with the company's market position in Senegal.

E

Eiffage

eiffage-aevia.com

56

Eiffage Ævia is a specialized subsidiary of the Eiffage Group focused on the conservation, maintenance, and improvement of civil engineering infrastructure and heritage. The company offers both services and products tailored to the construction and repair of civil engineering works, leveraging specialized equipment and in-house developed systems. The website reflects a professional B2B orientation targeting infrastructure professionals and stakeholders in the energy, transportation, and real estate sectors. Technically, the site uses modern JavaScript libraries, integrates Google reCAPTCHA for form security, and employs OneTrust for cookie consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and visible security alerts, though some security headers are missing and no explicit incident response contacts are published. The domain WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the strong branding and affiliation with the reputable Eiffage Group mitigate these concerns. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively.

N

Norsk Hydro ASA

r-100.no

58

The website www.r-100.no represents a project by Norsk Hydro ASA focused on promoting Hydro CIRCAL R100, an innovative aluminium product made entirely from recycled post-consumer scrap. The site highlights collaborations with prominent designers and showcases exhibitions, targeting design professionals and sustainability advocates. The business model centers on corporate branding and sustainable innovation promotion within the energy and manufacturing sectors. Technically, the site is built using modern frameworks such as Next.js and Sanity CMS, with integration of privacy-focused analytics via Plausible. The site demonstrates good mobile optimization and a professional design, though some SEO and accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced compliance and security transparency.

N

Notre aluminium

notrealuminium.ca

58

Notre aluminium is a Quebec-based industry platform promoting the region's aluminium sector, emphasizing its low-carbon footprint and critical role in North America's energy transition. The website positions Quebec as a global leader in aluminium production, highlighting historical milestones and industry achievements. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good SEO and mobile optimization. Security posture is solid with HTTPS and consent mechanisms, though it lacks explicit security policies and contact details. Overall, the site is professional and trustworthy but could improve privacy and security transparency.

R

Redback Solutions

rb.com.au

55

Redback Solutions is a well-established digital marketing and web design agency based in Newcastle, Australia, operating since 1999. The company offers a comprehensive range of services including web design and development, ecommerce solutions, SEO, digital marketing, and creative content production. Their market position is strong, supported by multiple industry partnerships and awards such as the 2025 Australian Web Awards. The website reflects a professional and trustworthy digital presence targeting businesses seeking digital growth and online results. Technically, the site is built on WordPress with modern integrations including Google Tag Manager, Facebook Pixel, and live chat services, demonstrating a mature digital infrastructure. Performance and mobile optimization are good, with SEO best practices well implemented. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is limited due to absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and credible with room for improvement in privacy and security transparency.

H

HOSTEUR SA

hosteur.com

70

HOSTEUR SA is a Swiss-based technology company specializing in web hosting, domain registration, cloud services, and IT management with over 20 years of experience. The company emphasizes European data sovereignty, operating datacenters exclusively in Europe, and holds multiple ISO certifications (27001, 9001, 14001) that attest to its commitment to security, quality, and environmental responsibility. The website is professionally designed, mobile-optimized, and provides comprehensive service information targeting businesses and individuals seeking secure hosting solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and Google Fonts, with a cookie consent mechanism implemented via Tarteaucitron. The site is served over HTTPS with no visible security vulnerabilities in the HTML content. However, no explicit HTTP security headers were detected, and no CMS or hosting provider details are disclosed. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, HOSTEUR demonstrates strong compliance with recognized standards through its ISO certifications and cookie consent implementation. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the website content and certifications support legitimacy. No incident response or vulnerability disclosure information is publicly available, indicating an area for improvement. Overall, HOSTEUR presents as a credible and professional hosting provider with a solid security posture and compliance focus. Strategic recommendations include enhancing transparency around incident response, publishing vulnerability disclosure policies, implementing additional security headers, and clarifying domain registration details to improve trust and compliance further.