Security Directory

P

PortlandLabs

concretecms.org

72

Concrete CMS is an established open source content management system developed and maintained by PortlandLabs since 2008. It targets web developers and content editors seeking an easy-to-use, flexible CMS platform with built-in features and a strong community backing. The website positions Concrete CMS as a trusted solution used by governments and Fortune 500 companies, emphasizing security, extensibility, and user-friendly editing experiences. The business model revolves around open source software distribution complemented by community engagement and commercial support services. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Vue.js, FontAwesome, and analytics tools such as Matomo and Google Analytics. The CMS itself is Concrete CMS, which is also the product being promoted. The site is mobile optimized, well-structured, and uses responsive design techniques. Performance is moderate with room for improvement in accessibility features. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and includes a dedicated security page. Cookie consent mechanisms and a comprehensive privacy policy demonstrate compliance with privacy regulations including GDPR. However, explicit security headers are not detected, and no public vulnerability disclosure or incident response contacts are published. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and well-maintained with a high level of content quality and business credibility. The lack of WHOIS data limits domain registration trust analysis, but the site’s branding and external trust signals strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, improving accessibility, and maintaining transparency in data protection practices.

A

Agreenium

agreenium.fr

63

Agreenium is a French non-profit alliance focused on education and research in agriculture, food, environment, and global health. The organization provides a comprehensive platform for educational resources, doctoral and international research training, and thematic research coordination. The website is built on Drupal 10 and uses modern frontend technologies including Alpine.js and Swiper.js, with Matomo analytics for privacy-conscious user tracking. The site is well-designed, mobile-optimized, and offers clear navigation and professional content targeted at students, researchers, and professionals in related fields. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies. WHOIS data is missing, which reduces domain trustworthiness, but the website content and social media presence support legitimacy. Overall, the site is a valuable resource in its sector but would benefit from enhanced transparency on privacy and security policies.

M

Mauges Communauté

maugescommunaute.fr

48

Mauges Communauté is a French local government community of agglomeration providing a broad range of public services and information to residents and stakeholders within the Mauges territory. The website serves as an official portal offering details on governance, environmental initiatives, economic development, cultural activities, and citizen participation. It targets local residents and public sector stakeholders, positioning itself as a key regional authority. Technically, the site is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and Matomo analytics for user tracking. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Security posture is solid with HTTPS enforced and use of security plugins, but lacks visible security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain appears legitimate despite missing WHOIS data, consistent with privacy protection norms for government domains. Strategic improvements in security headers, privacy mechanisms, and transparency would enhance trust and compliance.

K

KBOO

kboo.fm

51

KBOO is a well-established community radio station based in Portland, Oregon, providing alternative media content and community engagement since at least 2002, with roots dating back to 1968. The station operates as a non-profit entity, funded primarily through donations, memberships, underwriting, and volunteer support. Its website serves as a hub for live streaming, program schedules, community involvement, and donation facilitation, targeting local community members and alternative media audiences. Technically, the site runs on Drupal 7 with Bootstrap and jQuery, integrating analytics tools like Google Analytics and Matomo, and includes social media and donation platform integrations. While the site is functional and well-structured with good content quality and navigation, it uses an outdated CMS version, lacks a cookie consent mechanism, and does not enable DNSSEC, which are areas for improvement. Security posture is moderate with HTTPS enforced and some security best practices observed, but could be enhanced by upgrading the CMS, enabling DNSSEC, and implementing stronger security headers. Overall, the website is trustworthy and professional, with clear business legitimacy and community focus.

Le Mouvement Associatif operates a French-language website focused on promoting inclusivity within associations through an evaluation tool called Inclusiscore. The site targets associations and their stakeholders, providing educational resources and a questionnaire to assess inclusiveness in project scope, openness, and governance. The organization positions itself as a niche non-profit resource provider within the French associative sector. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript, with Matomo analytics integrated and configured to require cookie consent. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. No CMS or hosting provider details are evident. Performance is moderate with no major issues detected. From a security perspective, the site uses HTTPS (assumed from canonical URLs), but no explicit security headers were detected in the provided data. The cookie consent mechanism is implemented inline with GDPR principles, but no formal privacy policy or terms of service pages were found. WHOIS data is privacy protected or unavailable, which is common for non-profits but limits registrant transparency. No contact emails or phone numbers are provided, which could impact user trust and support. Overall, the website is professional, trustworthy, and safe with no adult or questionable content. The main risks relate to limited transparency in registrant data and absence of explicit privacy and security policies. Strategic improvements in these areas would enhance compliance and user trust.

G

Grenoble INP - UGA

grenoble-inp.fr

52

Grenoble INP - UGA is a prominent French public higher education and research institution specializing in engineering and management education. It comprises eight public engineering and management schools and is affiliated with Université Grenoble Alpes. The institution emphasizes scientific training aligned with societal challenges and supports its programs with research laboratories and technological platforms. With a significant annual graduation rate, it holds a leading position in the French public engineering education sector. Technically, the website is built on the K-Sup CMS platform, uses modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS, implements cookie consent, and avoids exposing sensitive data, though it could improve by adding more security headers and publishing explicit security policies. Overall, the domain WHOIS data is unavailable, which is common for .fr domains, but the website's official nature and comprehensive content indicate high legitimacy and trustworthiness.

2

20ecolesdechimie

20ecolesdechimie.com

41

20ecolesdechimie.com is the official website of the Fédération Gay-Lussac, a federation of 20 chemistry and process engineering schools in France. The site serves as an informational and promotional platform targeting prospective students, educators, and partners interested in chemistry engineering education. It provides detailed information on admissions, student life, international programs, and federation activities, positioning itself as a key resource in the French higher education sector for chemistry engineering. The federation is well-established, with a domain registered since 2015 and a consistent brand presence. Technically, the website is built on WordPress, utilizing common plugins such as Formidable Forms for contact and newsletter forms, Mailjet for email marketing, and Matomo for analytics. The site employs modern web technologies including lazy loading for images and SVG icons, ensuring good performance and mobile responsiveness. SEO and accessibility are adequately addressed, with proper meta tags, structured data, and language alternates. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, it lacks DNSSEC and some recommended security headers, which could be improved. The presence of a cookie consent mechanism and privacy policy indicates GDPR awareness, though no explicit security policy or incident response contact was found. Overall, the website is professional, trustworthy, and well-suited for its educational purpose. It demonstrates a solid digital maturity level with room for security enhancements. The risk profile is low, with no signs of malicious activity or content safety concerns.

Le Média is an independent French media outlet focused on providing socially and ecologically engaged news and analysis. It operates on a citizen-funded model, ensuring independence from state or billionaire ownership. The website offers a rich variety of content including articles, investigative reports, podcasts, and video programs, targeting French-speaking audiences interested in alternative media perspectives. Technically, the site uses modern web technologies such as React and privacy-conscious analytics like Matomo, with good mobile optimization and SEO practices. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. The absence of WHOIS data limits domain legitimacy verification, but the active and professional content suggests a legitimate operation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

L

L’Atelier Paysan

latelierpaysan.org

38

L’Atelier Paysan is a French cooperative organization dedicated to supporting farmers in designing and building agricultural machinery and infrastructure adapted to agroecology. The website serves as a platform for training, open-source tool plans, community engagement, and advocacy for technical autonomy in farming. The organization positions itself as a niche leader in agroecological technical solutions with a medium-sized presence and a strong community focus. Technically, the website is built on the SPIP CMS with a modern but moderate performance tech stack including jQuery, Google Analytics, and Matomo. The site is mobile-optimized and well-structured with good SEO practices. Security posture is adequate with HTTPS and domain protections but lacks DNSSEC and security headers. Privacy compliance is partial, with no cookie consent mechanism despite tracking scripts. No direct contact emails or phone numbers are published, which may impact user trust and compliance. Overall, the site is professional, content-rich, and trustworthy for its target audience.

P

Public Eye

publiceye.ch

61

Public Eye is a Swiss non-profit organization dedicated to fighting global injustices linked to Switzerland through research, advocacy, and campaigning. The website presents a professional and consistent brand focused on human rights and global justice issues, targeting a general audience interested in these topics. The organization offers publications, events, and investigative reports as key services. Technically, the website is built on TYPO3 CMS, hosted likely by RTP GmbH, and uses Matomo for analytics along with a cookie consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS and cookie consent, though explicit security policies and headers could be improved. WHOIS data aligns well with the organization's claims, indicating legitimacy. Overall, the site is trustworthy and professionally maintained.

C

Cerema

cerema.fr

48

Cerema is a French public entity specializing in climate adaptation and territorial planning, serving government bodies, local authorities, and enterprises. It holds a strong market position as a referent public organization providing tailored solutions for environmental and infrastructural challenges. The website reflects a mature digital presence with a modern Drupal 10 CMS, integrated analytics tools, and a professional design that supports user engagement and accessibility. Security posture is solid with HTTPS and privacy-conscious analytics configurations, though explicit security policies and vulnerability disclosures are absent. Overall, the site demonstrates high business credibility and technical maturity, aligned with its governmental role.

S

Sénat

senat.fr

62

The website www.senat.fr is the official portal of the French Senate, providing authoritative information on parliamentary work, senators, legislative texts, and public consultations. It serves a broad audience including citizens, government officials, researchers, and media professionals. The site offers extensive content in French with multilingual support and integrates various services such as video archives, petitions, and legislative databases. Technically, the site is built on TYPO3 CMS, uses Bootstrap for responsive design, and employs Matomo for analytics with a GDPR-compliant cookie consent mechanism. The website demonstrates a mature digital infrastructure with good performance and accessibility standards. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers and explicit incident response policies could be improved. The absence of WHOIS data is noted but likely due to registry privacy policies and does not detract from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained, reflecting its role as a key government information source.

A

Agence Bio

agencebio.org

60

Agence Bio is the official French agency dedicated to the development and promotion of organic agriculture. It serves as a governmental and non-profit entity focused on raising awareness, providing data, funding projects, and communicating the benefits of organic farming to various stakeholders including consumers, producers, distributors, and the general public in France. The agency maintains a strong market position as the authoritative source for organic agriculture information and support in France. Technically, the website is built on a modern WordPress CMS platform with Elementor page builder and enhanced SEO via Yoast. It integrates multiple marketing and analytics tools such as Google Tag Manager, Matomo, and Sendinblue, indicating a mature digital infrastructure. The site is well-optimized for mobile and accessibility, with good performance and clear navigation. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks visible advanced security headers and a published security.txt file. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS data limits domain trust verification, though the website content and official tone strongly suggest legitimacy. Overall, Agence Bio presents a professional, trustworthy, and content-rich platform supporting organic agriculture in France. Strategic improvements in security headers, privacy policy transparency, and incident response disclosures would enhance its security posture and compliance.

L

leslibraires.fr

leslibraires.fr

46

Leslibraires.fr is a French e-commerce platform dedicated to supporting independent bookstores by offering online book sales, literary advice, thematic selections, and event agendas. The website targets French-speaking readers interested in literature and independent bookshops, positioning itself as a specialized retail platform within the French book market. The platform leverages modern web technologies including Bootstrap, Font Awesome, htmx, and Matomo analytics, hosted likely on OVH infrastructure, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and secure payment indicators, though improvements are recommended in cookie consent and security headers. The absence of WHOIS data limits domain trust analysis, but the professional presentation and active social media presence support legitimacy. Overall, the site scores well on content quality, technical implementation, and business credibility, with moderate privacy compliance.

C

Conservatoire national des arts et métiers

cnam.fr

53

The Conservatoire national des arts et métiers (Cnam) is a well-established French public higher education institution dedicated to lifelong learning, scientific and technical culture dissemination, and research. The website reflects a mature digital presence with extensive content covering education, research, culture, and regional and international activities. The institution targets students, professionals, and researchers, offering a broad range of services including micro-certifications, MOOCs, and cultural exhibitions. Technically, the site uses modern JavaScript libraries and a custom CMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and privacy policies could be improved. The absence of WHOIS data limits domain registration trust analysis, but the website's branding, certifications, and content strongly support its legitimacy. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

G

Groupe INP

groupe-inp.fr

53

Groupe INP is a consortium of public engineering and management schools in France, offering high-quality education and research opportunities across multiple regions including Brittany, Bordeaux, Clermont-Ferrand, Grenoble, Nancy, and Toulouse. The group emphasizes professional training, scientific excellence, and strong ties with industry and international partners. The website reflects a well-structured educational institution with clear branding and a focus on student engagement and admissions. Technically, the site uses a custom CMS (K-Sup), modern web technologies, and Matomo analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced, though some security headers and explicit policies could be improved. WHOIS data is unavailable, which slightly impacts domain trust but the site content and branding strongly indicate legitimacy. Overall, the site is professional, accessible, and trustworthy for its target audience.

P

Près de chez nous

presdecheznous.fr

55

Près de chez nous is a French collaborative platform focused on ecological and solidarity initiatives, providing a map-based directory to connect users with local sustainable resources. The website is designed with a consistent and professional aesthetic, optimized for mobile devices, and includes SEO-friendly metadata. The technical infrastructure relies on standard web technologies including HTML5, CSS3, JavaScript, and jQuery, hosted by OVH, a reputable provider. User analytics are tracked via Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and user trust. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security practices.

A

Association Colibris

colibris-lafabrique.org

46

La Fabrique des colibris is a French non-profit platform affiliated with the Association Colibris, dedicated to supporting collective projects aligned with ecological and social values. The platform offers free services to project initiators including visibility, volunteer recruitment, and resource sharing, funded primarily through donations. The website is well-branded, consistent, and targets a community of socially conscious individuals and groups in France. Technically, the site runs on Drupal 7 with embedded multimedia and uses Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with privacy and terms pages present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained but could improve in security and privacy transparency.

M

Mouvement Colibris

colibris-universite.org

46

The Université des Colibris is a French non-profit educational platform operated by the Mouvement Colibris, focused on empowering individuals and organizations to engage in ecological and social transition. The website offers a variety of MOOCs and training programs targeting citizens and professionals interested in sustainable development, governance, and community projects. The organization is well-established with a domain registered since 2016 and holds the Qualiopi certification, reinforcing its credibility in the education sector. Technically, the website is built on Drupal 7, utilizing JavaScript and Matomo analytics for user tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data enhancing search visibility. Hosting is provided by Gandi SAS, a reputable registrar and hosting provider. However, some security enhancements such as enabling DNSSEC and adding security headers could improve the overall security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit security policies or incident response contacts. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism was detected. The site tracks users moderately via Matomo, a privacy-friendly analytics tool. No vulnerabilities or exposed sensitive data were identified. Overall, the website presents a trustworthy and professional front for the educational services it offers, with room for improvement in security and privacy compliance to align with best practices and regulatory requirements.

B

Banque des Territoires

banquedesterritoires.fr

65

Banque des Territoires is a major French public financial institution affiliated with Groupe Caisse des Dépôts, focused on supporting territorial actors in project development and financing. The website reflects a professional and comprehensive digital presence with clear navigation, modern technologies, and strong GDPR compliance. The technical infrastructure is based on Drupal CMS with integration of consent management and analytics tools, indicating a mature digital setup. Security posture is good with HTTPS, consent mechanisms, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. The absence of WHOIS data reduces trust slightly but the website's affiliation and content quality support legitimacy. Overall, the site is well-positioned to serve its public sector audience with relevant financial and territorial services.

M

moulin-de-la-bree

moulin-de-la-bree.fr

37

The Moulin de La Brée is a recently established cultural museum located on the Ile d'Oléron, France, dedicated to preserving and showcasing the island's cereal traditions and historic windmills. The museum offers interactive exhibits, guided visits, workshops, and an on-site restaurant, targeting families, school groups, and tourists including those with disabilities. The website reflects a professional and consistent brand presence, supported by certifications such as 'Tourisme et Handicap' and 'Famille Plus', and positive customer reviews. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by OVH, and incorporates privacy-respecting analytics and cookie consent mechanisms. Security posture is good with HTTPS and reCAPTCHA, though explicit security headers and a formal security policy are absent. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

M

maison-eco-paysanne

maison-eco-paysanne.fr

41

La Maison éco-paysanne is a cultural and educational establishment located on the Île d'Oléron, France, managed by the local community of communes. It focuses on traditional architecture, sustainable habitat, and eco-citizenship, offering guided visits, workshops, events, and eco-construction training to a broad audience including families, schools, and groups. The website reflects a well-maintained digital presence with clear branding and comprehensive content that supports its mission. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Privacy compliance is well addressed with visible policies and consent mechanisms. The absence of WHOIS data limits domain trust assessment but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular updates to plugins and CMS.

L

Le Port des Salines

port-des-salines.fr

40

Le Port des Salines is a regional tourism and cultural heritage site located on the Île d'Oléron in France. It offers visitors a rich experience centered around the traditional salt marshes, including an ecomuseum, guided tours, boat rides, educational workshops, and group activities. The website is well-structured and provides clear contact information, social media presence, and detailed descriptions of services, targeting tourists, families, and educational groups. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and user engagement, showing a moderate to good level of digital maturity. Security measures include HTTPS and Google reCAPTCHA, though some security headers are missing and no explicit incident response information is provided. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable source for visitors interested in the natural and cultural heritage of the region.

M

musee-ile-oleron

musee-ile-oleron.fr

38

The Musée de l’île d’Oléron is a regional cultural institution dedicated to preserving and showcasing the heritage and traditions of the Oléron island. The museum offers a rich collection of over 500 objects spanning from prehistory to modern times. Currently closed for renovations with a reopening planned in 2027, it maintains engagement through temporary exhibitions, educational programs, and a mobile app for virtual tours. The website reflects a well-maintained digital presence with clear visitor information and official certifications, positioning the museum as a trusted cultural destination in the region. Technically, the website is built on WordPress with modern plugins and frameworks such as Yoast SEO, Bootstrap, and Ultimate Addons for Gutenberg. It employs HTTPS, Google reCAPTCHA v3 for form security, and a cookie consent mechanism via Axeptio, indicating a mature approach to privacy and security. Analytics are handled by Matomo, supporting privacy-conscious tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS and form protections, but lacks explicit security headers and published security policies or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common and not suspicious for this type of institution. Overall, the site demonstrates good security hygiene and compliance with GDPR requirements. Strategically, the museum should consider publishing detailed security policies and incident response plans to enhance trust and transparency. Implementing security.txt and improving accessibility compliance would further strengthen its digital maturity. The website effectively supports the museum’s mission and audience engagement, with room for incremental security and technical improvements.

V

Vernalis

vernalis.fr

47

Vernalis Interactive is a French digital agency specializing in providing digital communication services to public sector entities such as municipalities, intercommunalities, and mixed syndicates. With over 20 years of experience, the company offers website creation, extranet development, and mobile application services tailored to the needs of public institutions. The website reflects a professional and consistent brand image targeting French public organizations. Technically, the site is built on WordPress, leveraging modern libraries like jQuery and Popper.js, and integrates Matomo for analytics, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and social media presence support its credibility. Overall, Vernalis Interactive presents as a trustworthy and specialized digital agency serving the French public sector.

L

L'Institut Agro

institut-agro.fr

56

L'Institut Agro is a prominent French national higher education institution specializing in agriculture, food, and environmental sciences. It operates multiple campuses and is supervised by French government ministries, positioning itself as a leader in agroecological and environmental education and research. The website reflects a professional and comprehensive digital presence, targeting students, researchers, and academic partners. The institution emphasizes innovation, sustainability, and international collaboration. Technically, the website is built on Drupal 9 with modern frameworks such as Bootstrap and Font Awesome, and integrates Matomo for analytics with privacy-conscious configurations. The site is mobile-optimized, accessible, and features a robust cookie consent mechanism compliant with GDPR. Performance is moderate with good SEO and accessibility practices. From a security perspective, HTTPS is enforced, and privacy controls are well implemented. However, the absence of visible security headers and lack of published security policies or incident response contacts indicate areas for improvement. The WHOIS data is unavailable, which limits domain trust verification, but the website's content and external affiliations strongly support its legitimacy. Overall, the website presents a secure, professional, and user-friendly platform for its educational mission, with recommendations to enhance security posture and transparency to further strengthen trust and compliance.

W

World Media Partners, s.r.o.

czecot.info

59

The website www.czecot.info represents the CZeCOT information and reservation system for tourism in the Czech Republic, operated by World Media Partners, s.r.o. It provides extensive tourism data, including tourist objects, routes, events, and accommodation services, supporting both domestic and inbound tourism. The system includes a reservation platform for accommodation and event tickets and collaborates closely with CzechTourism and related publishing entities. The business model focuses on providing tourism information and reservation services to both consumers and partner portals. Technically, the site is built on an outdated Joomla 1.5 CMS with additional JavaScript libraries like jQuery and MooTools, and uses multiple analytics tools including Google Analytics, Matomo, and Cloudflare Insights. While the site is functional and content-rich, it lacks modern security practices such as updated CMS, security headers, and visible privacy or cookie policies. The WHOIS data is unavailable, limiting domain trust verification. Overall, the site is moderately professional but requires technical and security modernization to improve trust and compliance.

A

association Autour du 1er mai

base-tessa.net

37

The website base-tessa.net represents a small non-profit project launched in 2021 by the association Autour du 1er mai, focused on cataloging and promoting films related to the social and solidarity economy (ESS) and ecological transition. The platform serves a niche audience interested in social innovation and sustainability through cinema. Technically, the site is built on the SPIP CMS, hosted by OVH sas, and uses Matomo for analytics. The site is accessible, with a good content structure and moderate performance, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing security headers and no DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the credibility of the project.

A

Atelier Anamorphose / Agence Anamorphose

anamorpho.se

10

Anamorphose is a French hybrid social enterprise combining an artistic association and a social mission agency focused on inclusion, upcycling, and artistic rehabilitation of objects and spaces. The company targets artists, enterprises, local authorities, and associations, positioning itself as a niche player in the Lyon metropolitan area. The website is built on WordPress with a modern tech stack including Alpine.js and Leaflet.js, hosted by OVH.net. It features GDPR-compliant cookie consent and uses Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS and cookie management, though DNSSEC is not enabled and some security headers are missing. No critical vulnerabilities or exposed sensitive data were found. The domain is newly registered but consistent with the business profile. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

G

Gab

gab.com

68

Gab is a social networking platform emphasizing free speech and individual liberty. It operates a subscription model with Gab PRO, which grants VPN and proxy access to its site. The website is moderately mature with a domain age dating back to 1998, hosted via Cloudflare, and uses modern web technologies including React and Matomo analytics. The VPN policy page clearly states restrictions on VPN/proxy usage to protect the community from malicious actors. Security posture is adequate with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is limited as no privacy or cookie policies are present on this page. Overall, the site is functional and professional but could improve transparency and security practices.

The website kopkatalogs.lv serves as a shared electronic catalog platform for nine national-level libraries in Latvia, leveraging the Ex Libris ALEPH integrated library system. It targets library users including students, researchers, and the general public seeking access to Latvian library resources. The platform is positioned as a key national service facilitating unified catalog access and user authentication. Technically, the site employs JavaScript, Matomo, and Google Analytics for tracking, and is hosted with DNS services on Microsoft Azure. The site uses HTTPS for secure login but lacks visible security headers and cookie consent mechanisms, indicating room for security and privacy improvements. The privacy policy is linked to an official government domain, supporting GDPR compliance, though cookie consent is absent. Overall, the site is functional with moderate technical maturity and basic content quality, suitable for its educational sector role.

F

Failiem.lv

failiem.lv

60

Failiem.lv is a Latvian-based technology company specializing in secure file hosting, cloud storage, and file sharing services. The platform offers a range of solutions including file synchronization, public content publishing, file selling with integrated payments, AI-powered content search, and server rental services. It targets both general internet users and businesses requiring reliable and fast file transfer and storage solutions. The website demonstrates a solid market position in the Baltic region with a medium-sized operational scale and consistent branding.

V

Ville de Paris

paris.fr

67

The website paris.fr is the official digital portal of the City of Paris, providing comprehensive access to municipal services, practical information, news, and events for residents and visitors. It serves as a central hub for public service delivery and environmental data dissemination, including water quality and air pollution monitoring. The site demonstrates a high level of digital maturity with modern technologies such as Matomo analytics for privacy-conscious tracking, Algolia for search, and Font Awesome for iconography. The design is professional, mobile-optimized, and accessible, reflecting the city's commitment to user experience. From a security perspective, the site enforces HTTPS and uses asynchronous script loading to enhance performance and security. However, explicit security headers and vulnerability disclosure mechanisms are not evident, suggesting room for improvement in security hardening and transparency. Privacy compliance is basic, with no clear privacy or cookie policies detected in the provided content, which is a critical area for enhancement given GDPR requirements. Overall, the site is trustworthy and authoritative, consistent with its role as a government portal. The absence of WHOIS data is likely due to registry policies or privacy protection common for government domains and does not detract from the site's legitimacy. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process to strengthen security posture and user trust.

Latvijas Universitāte is a prominent higher education institution in Latvia, offering a broad spectrum of academic programs and engaging in extensive research and international collaboration. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and academic partners. Technically, the site is built on TYPO3 CMS with integration of modern web technologies and analytics tools, ensuring good performance and accessibility. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism and trustworthiness, supporting the university's reputable market position.

YesWiki.net is a French open-source platform providing a no-code wiki and collaborative database solution aimed at users without technical skills. Founded in 2009, it offers tools for creating collaborative workspaces, form-based data entry, and various content visualization modules. The platform is community-driven with active documentation, forums, and a newsletter. Technically, the site uses PHP, Bootstrap, jQuery, Vue.js, and integrates third-party services like Matomo for analytics and MailerLite for marketing. The website is well-structured, mobile-optimized, and uses HTTPS with a stable domain registration. However, it lacks some modern security headers and cookie consent mechanisms, which are areas for improvement. Overall, the site is trustworthy, professional, and serves a niche market of collaborative content creators.

T

Théâtre National Populaire | Villeurbanne - Lyon

tnp-villeurbanne.com

53

The Théâtre National Populaire (TNP) in Villeurbanne, near Lyon, is a prominent cultural institution offering a wide range of theatrical performances and educational programs. It operates one of the largest European theatrical stages with multiple performance and rehearsal spaces. The website reflects a well-established organization with a clear focus on cultural dissemination and community engagement. The target audience is broad, including general public, families, educational groups, and social sectors. The business model centers on ticket sales, cultural programming, and resource sharing.

C

CCI Paris Ile-de-France

cci-paris-idf.fr

66

CCI Paris Ile-de-France is a major regional economic and educational institution supporting business creation, development, and training in the Ile-de-France region. The website offers comprehensive resources for entrepreneurs, students, companies, and local authorities, including business advice, educational programs, international development support, and event hosting. The site is built on a modern Drupal 10 CMS with integrated analytics and marketing tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit privacy policies and incident response contacts are lacking. The absence of WHOIS data reduces domain registration trust but the website content and branding strongly indicate legitimacy. Overall, the site is professional, well-structured, and trustworthy for its target audience.

O

Obchod Meduňka

obchodmedunka.cz

53

Obchod Meduňka is a Czech Republic-based e-commerce website specializing in natural health and wellness products, including supplements, natural cosmetics, books, and magazine subscriptions. The site targets consumers interested in natural and holistic health solutions, offering a niche product range with a focus on quality and natural ingredients. The business model is primarily online retail, serving the Czech and Slovak markets with localized currency options and regional targeting. Technically, the website uses a custom e-commerce platform likely powered by eshop-rychle.cz, with modern JavaScript libraries such as Swiper.js for UI components and Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. From a security perspective, the site enforces HTTPS and requires user consent for analytics tracking, which is a positive privacy practice. However, it lacks visible security headers and explicit privacy and cookie policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is not publicly available, suggesting privacy protection for the domain registration, which is common for small businesses. Overall, Obchod Meduňka presents a professional and trustworthy online retail presence with room for enhancement in privacy compliance and security best practices. Strategic improvements in these areas would strengthen customer trust and regulatory adherence.

L

La Quinzaine du commerce équitable

quinzaine-commerce-equitable.org

41

La Quinzaine du commerce équitable is a French non-profit campaign initiated in 2001 to promote fair trade and responsible consumption. The website serves as an awareness platform providing information, event organization, communication kits, and newsletters to engage the public and partners. It is coordinated by a collective linked to www.commercequitable.org, indicating a well-established presence in the fair trade sector in France. The site targets a general audience interested in ethical consumption and sustainability. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, integrating modern plugins such as Slider Revolution and Matomo for analytics. The site is mobile-optimized with good SEO practices and structured data for enhanced search visibility. Cookie consent management is robust, offering detailed user controls compliant with GDPR requirements. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate spam. However, no explicit security headers were detected, and there is no visible security policy or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations but slightly reduces transparency. Overall, the website presents a professional and trustworthy image with good content quality and privacy compliance. Strategic improvements include implementing security headers, publishing security policies, and enhancing accessibility features to further strengthen the security posture and user trust.

L

La Maison Écologique

lamaisonecologique.com

59

La Maison Écologique operates as an independent French magazine focused on ecological construction, eco-habitat, and sustainable living. Established in 2003, it serves a niche audience interested in eco-construction through rich editorial content including articles, podcasts, videos, and practical guides. The business model centers on subscriptions and magazine sales via an online boutique, supported by a loyal subscriber base and active social media presence. Technically, the website is hosted by OVH sas and employs Matomo analytics and Revive Adserver for advertising. The site is well designed, mobile optimized, and accessible, with good SEO practices. However, it lacks explicit privacy and cookie policies, and security headers are not detected, representing areas for improvement. The domain registration is consistent and trustworthy, with no blocking or WAF detected, indicating good accessibility. Overall, the site demonstrates a solid digital presence with room to enhance privacy compliance and security posture.

T

Transition Initiative by Transition Network

transitiongroups.org

41

The website maps.transitionnetwork.org serves as a global directory and mapping platform for Transition groups, hubs, and trainers focused on community-led sustainability and resilience initiatives. It is a niche, non-profit community platform that supports the Transition movement by enabling group registration, mapping, and providing resources. The platform targets members of the Transition movement, community organizers, and sustainability advocates worldwide. Technically, the website is built on WordPress with a modern tech stack including jQuery, Leaflet.js for mapping, and multilingual support via TranslatePress. It employs Google reCAPTCHA for form security and uses Matomo and GoatCounter for analytics. The site is well-structured with good SEO and accessibility features, and it is mobile-optimized. Performance is moderate, with room for improvement. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms. However, it lacks several important security headers such as Content-Security-Policy and X-Frame-Options, which could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found in the analyzed content. Overall, the website presents a professional and trustworthy platform for its community-focused mission. The lack of WHOIS data due to privacy protection is common for such non-profit entities and does not raise immediate concerns. Strategic recommendations include adding comprehensive privacy and terms of service pages, implementing additional security headers, and maintaining regular updates to WordPress and plugins to ensure ongoing security and compliance.

T

Transition Network international

transitionnetwork.org

49

Transition Network international is a well-established non-profit organization founded in 2007, focused on uniting communities globally to foster sustainability, reduce fossil fuel use, and strengthen local economies. The organization operates an international network active in 69 countries, providing training, resources, and community support to facilitate positive environmental and social change. Their website reflects a professional and consistent brand presence, targeting individuals and groups interested in community resilience and sustainable futures. Technically, the website is built on WordPress with modern plugins such as Elementor, Contact Form 7, and TranslatePress for multilingual support. It employs Matomo for analytics and hCaptcha for form security, hosted by Gandi SAS. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security measures include HTTPS enforcement and domain transfer protection, but DNSSEC is not enabled, and security headers are not explicitly observed. From a security perspective, the site shows a mature posture with no critical vulnerabilities detected. However, improvements could be made by enabling DNSSEC, adding security headers, implementing a cookie consent mechanism, and publishing a vulnerability disclosure policy. Contact information is clear, but no dedicated security or incident response contacts are provided. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles, though minor enhancements in security and privacy compliance would strengthen its posture. The domain registration data aligns well with the organization's claims, supporting legitimacy and long-term operation.

G

GoGoCarto - Créez des cartes à GoGo !

gogocarto.fr

59

GoGoCarto is a French technology platform specializing in participatory mapping, enabling users to create and share community-driven map projects. The platform hosts thousands of projects, indicating a vibrant user base and active community engagement. The website is well-branded, consistent, and provides open source code and documentation links, reflecting transparency and openness. Technically, the site uses modern web technologies including JavaScript, CSS, and Matomo analytics for privacy-conscious user tracking. The hosting is provided by Colibris outils libres, a known free software hosting provider, which aligns with the platform's open source ethos. Security posture is moderate with HTTPS enforced and sandboxed iframes, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Business credibility is supported by domain age, consistent WHOIS data, and active project hosting. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

R

ritimo

ritimo.org

54

Ritimo is a French non-profit network dedicated to providing information and documentation on international solidarity and sustainable development. The website serves as a hub for educational resources, campaigns, and community engagement, targeting a general audience interested in social and environmental issues. Ritimo maintains a consistent brand presence and offers multiple channels for user interaction, including social media and contact forms. Technically, the site is built on the SPIP CMS platform, employs Matomo analytics for privacy-conscious tracking, and demonstrates good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit cookie consent mechanism is present, indicating room for improvement in privacy compliance. WHOIS data is unavailable due to privacy protection, which is typical for non-profit organizations but slightly reduces trust scoring. Overall, Ritimo presents a professional, trustworthy, and content-rich platform with moderate technical sophistication and a strong focus on its mission.

R

ritimo

ritimo.info

54

Ritimo is a French non-profit network dedicated to providing information and documentation on international solidarity and sustainable development. The organization operates a network of 75 locations to inform and engage the public. Their services include information dissemination, documentation resources, advocacy campaigns, and educational training. The website is well-structured, professionally designed, and targets a general audience interested in social and environmental issues. Technically, the site uses the SPIP CMS platform and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS enabled, though some security headers are missing and no explicit cookie consent mechanism is present. WHOIS data is unavailable, which slightly reduces domain trust but does not detract significantly from the legitimacy of the organization given their clear contact information and social media presence. Overall, the site is trustworthy, safe, and professionally maintained.

Sportovně kulturní centrum v Ondřejově is a local community center in the Czech Republic providing a wide range of sports, cultural, educational, and recreational courses and events. Established since 2006, it serves a general audience including families and individuals interested in active leisure. The website offers detailed information about courses, events, rental services, and a café with a children's play area, reflecting a well-rounded community service model. Technically, the website uses a mix of older and modern web technologies including jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics, running on the IPO content management system. The site is mobile responsive with good navigation and content structure, though some libraries are outdated. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms, but lacks visible security headers and formal privacy or terms of service documents. The cookie consent mechanism is present and functional, indicating some GDPR awareness. WHOIS data is unavailable, limiting domain trust verification, but the site content and contact details appear legitimate and consistent with a community organization. Overall, the site is trustworthy and professionally presented but would benefit from enhanced security headers, updated libraries, published privacy policies, and improved WHOIS transparency to strengthen its security posture and compliance.

Z

Zoan - Agence de communication à Châteaubriant (44)

zoan.fr

53

Zoan is a French communication agency founded in 2007, specializing in graphic design, advertising, and web services. The agency serves a regional clientele including SMEs, industrial companies, associations, and local authorities primarily in the Loire-Atlantique and Ille-et-Vilaine regions. Their business model focuses on providing strategic communication consulting and creative production services such as branding, website creation, and video content. The company maintains a professional online presence with consistent branding and a clear market position as a local creative partner. Technically, the website is built on WordPress with Yoast SEO and Matomo analytics configured for privacy. The site is well-optimized for mobile and SEO, with fast loading times and modern web technologies including GSAP for animations. Hosting is provided by OVH, a reputable provider, and the domain is long-established, supporting credibility. From a security perspective, the site uses HTTPS and privacy-conscious analytics settings but lacks visible security headers and cookie consent mechanisms. There is no published security policy or incident response information, which represents an area for improvement. No vulnerabilities or suspicious indicators were detected in the content or WHOIS data. Overall, Zoan presents a trustworthy and professional digital footprint with strong business credibility and good technical implementation. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen their security posture and compliance.

L

Matmut Stadium : Le stade mythique au coeur de Lyon | Lyon events

louevents.fr

64

The website www.gl-lyonevents.com presents information about the Matmut Stadium, a historic and iconic stadium located in Lyon, France. The site appears to serve as an event and venue information platform, targeting visitors and event organizers interested in the stadium and related events. The business model is focused on event promotion and providing venue details, catering primarily to a general audience interested in sports and cultural events in Lyon. The website is built on Drupal 10, leveraging modern web technologies such as lazy loading for images, Matomo for analytics, and Google Tag Manager for marketing. The site is mobile optimized and includes accessibility features, contributing to a good user experience and SEO optimization. However, the absence of visible privacy policies, terms of service, and contact information limits the site's transparency and trustworthiness. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks visible security headers and detailed security policies. The WHOIS data for the domain is missing or indicates the domain may not be registered, which raises concerns about the legitimacy and ownership of the domain. Overall, the website is functional and professionally designed but would benefit from improved transparency and security practices to enhance trust and compliance.

C

Coredem

coredem.info

53

Coredem is a collective project aggregating documentary resources from over 30 organizations focused on democracy and social transformation. It offers a specialized search engine, Scrutari, and hosts thematic collections and debates in multiple languages. The website is built on the SPIP CMS platform with a modern responsive design and uses analytics tools such as Google Analytics and Matomo. However, it lacks visible privacy and cookie policies and does not expose contact information prominently. The WHOIS data is unavailable, which limits domain trust verification, but the website content and structure appear professional and legitimate for a non-profit collective. Security headers are not detected, and privacy compliance is minimal, indicating areas for improvement.

F

Fluxite

fluxite.fr

45

Fluxite is a French technology company founded in 2023 that provides a turnkey website solution aimed at small businesses or individuals seeking a quick, easy-to-manage website without subscription fees. Their offering includes rapid installation, extensive customization options, human support, and two years of maintenance. The website is built on WordPress, hosted by o2switch, and uses modern technologies including Matomo and Google Analytics for traffic analysis, along with a GDPR-compliant cookie consent mechanism. The site is professionally designed with consistent branding and good user experience, targeting French-speaking users. Security posture is solid with HTTPS and privacy-focused analytics, though some security headers and explicit policies could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, Fluxite presents a credible and trustworthy business with a clear market niche between no-code and fully custom websites.