Security Directory

V

Vaše rodinné pekařství v Šumperku

pekarstviuradnice.cz

39

Vaše rodinné pekařství v Šumperku is a small local bakery business based in Šumperk, Czech Republic, specializing in fresh bakery products baked twice daily with an option for customers to pre-order their favorite items. The website is built on WordPress and uses modern web technologies such as lazy loading for images and Google Fonts for typography. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. However, the content is basic and lacks detailed business or contact information. The absence of privacy and cookie policies indicates limited compliance with data protection regulations. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or security policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and reduces overall trust. No advertising or tracking technologies are detected, suggesting minimal user tracking. Overall, the website serves its purpose as a local bakery's online presence but requires improvements in compliance, security, and transparency to enhance trust and professionalism.

I

Ing. Hana Cindrová

hanacindrova.cz

41

Ing. Hana Cindrová operates a small external accounting office primarily serving clients in the Olomoucký region and across the Czech Republic. The business offers comprehensive accounting, tax processing, and financial reporting services with over 17 years of industry experience. The website is professionally designed using WordPress and the Divi theme, providing clear service descriptions and contact information. Technically, the site is well-structured and mobile-optimized but lacks advanced security headers and privacy compliance features. The absence of WHOIS data limits domain trust assessment, though the site content and contact details appear legitimate. Overall, the site demonstrates a solid business presence with room for improvement in security and compliance.

P

ProFitArt

profitart.cz

56

ProFitArt is a cultural organization dedicated to supporting independent artists specializing in dance, physical, and nonverbal theatre. The organization provides production facilities, workshops, and event hosting to foster artistic development and collaboration. Their market position is niche, focusing on the independent performing arts community primarily in the Czech Republic. The website reflects a small-sized entity with a professional and consistent brand presence, supported by partnerships with cultural institutions and funding bodies. Technically, the website is built on WordPress with modern plugins such as Autoptimize and Yoast SEO, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate, with lazy loading images and optimized CSS. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, indicating GDPR compliance. However, the absence of security headers and incident response information suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. The lack of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the presence of clear contact information and partner logos. Overall, ProFitArt's website is a trustworthy and professional platform for its target audience, with good privacy compliance and a secure environment. Strategic enhancements in security policies and domain transparency would further strengthen its risk profile.

E

EKLEKTIK design & shop

eklekticky.cz

55

EKLEKTIK design & shop is a small Czech Republic based business specializing in interior design services and retail of unique home decorations and vintage furniture. The company operates both a physical store in Šumperk and an online e-shop, targeting customers interested in personalized interior design and stylish home accessories. The website is professionally designed, consistent in branding, and provides clear contact information and customer testimonials, indicating a trustworthy local boutique business. Technically, the website is built on the Shoptet CMS platform, utilizing common JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Analytics and Facebook SDK for marketing and tracking purposes. The site is served over HTTPS with valid SSL, but lacks some security headers and up-to-date libraries, which could be improved to enhance security posture. Privacy and cookie policies are not explicitly present, representing a compliance gap with GDPR requirements. Overall, the website is accessible, functional, and presents a positive user experience with moderate technical maturity and a good security baseline.

Č

ČVIRO

cviro.sk

54

ČVIRO is a small Slovak vehicle rental company specializing in utility vehicles such as vans, pickups, buses, refrigerated trucks, and tractors. The website presents basic information about the business and its offerings, targeting individuals and businesses in need of utility vehicle rentals. The domain is well established since 2006, with consistent WHOIS data and DNSSEC enabled, indicating legitimacy and good domain security practices. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, it lacks modern web design features such as mobile responsiveness and accessibility enhancements. Security posture is weak with no visible security headers or HTTPS enforcement details, and privacy compliance is poor due to the absence of privacy and cookie policies. Contact information is limited to phone numbers and one email address, with no physical address or social media presence. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

E

EcoSmart Building

ecosmart-building.com

58

EcoSmart Building is a French company specializing in energy performance and indoor air quality solutions for buildings. The company offers innovative predictive supervision technologies to optimize energy consumption and maintain healthy indoor environments. Their services target building managers and businesses seeking sustainable and efficient building management solutions. The website is built on WordPress using modern plugins such as Elementor and Revolution Slider, hosted by OVH sas. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enabled and domain protection flags, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a professional image with clear contact information but would benefit from enhanced security and privacy disclosures.

A

ANCV Cheque-Vacances

cheque-vacances.com

57

ANCV Cheque-Vacances operates a well-established French government-backed program providing holiday vouchers to individuals and organizations, facilitating access to tourism, leisure, and cultural activities. The website reflects a mature digital presence with a strong brand, extensive partner network, and multiple user segments including public agents, enterprises, and tourism professionals. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for SEO and mobile use, though some accessibility and security header improvements are recommended. Security posture is solid with HTTPS and bot protection, but lacks some advanced DNS and header configurations. Privacy compliance is minimal on the homepage, with no visible privacy or cookie policies, which should be addressed to meet GDPR standards. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the business claims.

The website www.canalplus.com is currently inaccessible due to a security mechanism or Web Application Firewall (WAF) that blocks content delivery, presenting an 'Access Denied' message with minimal page content. This prevents a full analysis of the website's business, technical, and security posture. The WHOIS lookup for the domain failed to return any registration data, which is unusual for a well-known brand, raising concerns about domain registration legitimacy or privacy protection usage. No privacy, cookie, or terms of service policies were detected on the page, and no contact or business information is available. The technical footprint is minimal, with only inline JavaScript and CSS present, and no external analytics or advertising scripts detected.

G

GoDaddy Operating Company, LLC

vakita.com

73

The website is a professionally designed domain aftermarket sales landing page operated by GoDaddy Operating Company, LLC. It offers the domain vakita.com for sale with options to buy outright or lease to own, supported by secure payment methods and transaction assistance. The site leverages modern web technologies including React and Next.js, hosted on GoDaddy infrastructure, and demonstrates good digital maturity with responsive design and SEO optimization. Security posture is strong with HTTPS and secure payment integrations, though explicit security headers and terms of service pages are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy and well-positioned in the domain aftermarket e-commerce sector.

M

Mettler-Toledo International Inc.

mt.com

65

Mettler-Toledo International Inc. operates a professional and comprehensive website targeting B2B customers in laboratory, industrial, and process analytics sectors. The company provides precision instruments and services globally, with a strong market position as a leader in weighing, measuring, and analytical technologies. The website reflects a mature digital presence with multiple business units and detailed contact information. Technically, the site uses Adobe Experience Manager CMS, integrates modern marketing and analytics tools such as Google Tag Manager and Adobe DTM, and implements cookie consent via OneTrust. Security posture is solid with HTTPS and secure forms, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which is unusual but does not detract from the site's legitimacy given the professional content and branding. Overall, the site is well-structured, compliant with privacy regulations, and trustworthy for its target audience.

T

telecentro.com

telecentro.com

51

The website telecentro.com currently serves as a parked domain with no active business content or services. It displays a sales banner indicating the domain may be for sale and contains advertising blocks powered by Google Adsense and Bodis. The site lacks any meaningful business description, contact information, or user engagement features. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting is managed by Bodis, a domain parking service provider. Security posture is minimal with no DNSSEC enabled and no security headers detected. Privacy compliance is weak, with a privacy policy page present but no cookie consent mechanism or GDPR indicators. Overall, the site is low trust and low content quality, suitable only as a placeholder or domain sale page.

M

Město Vítkov

kulturavitkov.cz

55

Kulturavitkov.cz is a municipal cultural event portal for the town of Vítkov in the Czech Republic. It provides residents and visitors with information about local cinema screenings, concerts, theater performances, exhibitions, and other cultural activities. The platform integrates online ticket sales through a partner e-commerce site, facilitating easy access to event participation. The website is well-branded with official municipal logos and links to verified social media pages, reinforcing its local government affiliation. Technically, the site is built using modern web technologies including React and Next.js, with Material UI for styling. It is mobile optimized and provides a good user experience with clear navigation and event information. Performance is moderate, and the site uses HTTPS with appropriate security headers, indicating a solid security posture. However, the absence of a cookie consent mechanism and lack of visible privacy or incident response policies suggest areas for compliance improvement. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks explicit vulnerability disclosure or incident response information. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not contradict the site's municipal nature. Overall, the site is trustworthy and serves its purpose effectively, though it could enhance privacy compliance and transparency. The overall risk is low given the nature of the site and its content, but strategic improvements in privacy and security policy disclosures are recommended to strengthen user trust and regulatory compliance.

O

Oprodent s.r.o.

oprodent.sk

48

Oprodent s.r.o. is a Slovak-based company specializing in providing professional e-learning courses focused on radiation protection for dental practitioners. The company offers two main courses: a basic 16-hour training and an 8-hour update training, both compliant with Slovak radiation protection legislation. Their market position is niche, targeting dental professionals who require mandatory certification for ionizing radiation use. The website reflects a small but professional business with clear branding and transparent contact and business information. Technically, the website employs a modern but straightforward technology stack including jQuery, Google reCAPTCHA v3 for bot protection, and Matomo for analytics, hosted on Websupport infrastructure. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no critical technical debt observed. From a security perspective, the site uses HTTPS with DNSSEC enabled, integrates reCAPTCHA for form security, and implements cookie consent mechanisms aligned with GDPR. However, it lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or security incidents are evident, but improvements in security headers and incident response transparency are recommended. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. The risk profile is low, with recommendations focusing on enhancing security headers and formalizing incident response channels to further strengthen the security posture.

C

CM CONTROL, s.r.o.

apresort.sk

53

Harmony AP Resort is a small hospitality business offering apartment and cottage accommodation in the Liptov region of Slovakia, near the Malinô Brdo ski resort. The website presents a clear business description, contact details, and highlights key services such as family vacations, corporate events, and outdoor activities including e-bike rentals. The domain is well established since 2013 and DNSSEC is enabled, indicating a legitimate and trustworthy online presence. Technically, the site uses older JavaScript libraries like jQuery 1.8.3, which may pose security risks, and lacks modern security headers and privacy policies. The website is accessible without any WAF or blocking mechanisms, and no adult or explicit content is present, making it safe for general audiences.

C

CM Control, s.r.o.

cmcontrol.sk

50

CM Control, s.r.o. is a Slovakian company specializing in vehicle technical inspections, emission controls, and originality checks. Established in 2007, it serves both individual vehicle owners and large fleets, offering convenient services including an interactive booking system and customer amenities. The company holds ISO 37001 certification, demonstrating commitment to anti-corruption standards, which enhances its market credibility. Technically, the website employs common JavaScript libraries such as jQuery and jQuery UI, with a moderate performance profile and basic mobile optimization. The site lacks a CMS and advanced SEO or accessibility features but maintains a consistent and professional design. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the domain is well-registered with DNSSEC enabled and a long registration history, supporting legitimacy. However, the website lacks visible HTTPS enforcement and security headers, and no privacy policy or terms of service are published, representing compliance and security gaps. The cookie consent mechanism is implemented, but overall privacy compliance could be improved. Overall, the website is professional and trustworthy for its business purpose but would benefit from enhanced security measures, privacy documentation, and technical improvements to strengthen compliance and user trust.

G

GardenSpa s.r.o.

higold.hu

56

HIGOLD, operated by GardenSpa s.r.o., is a Slovak-based company specializing in the design, manufacture, and retail of luxury outdoor furniture. The company has a rich history dating back to 1989 and has expanded globally with a presence in over 150 countries. Their business model focuses on high-quality, modular outdoor furniture collections targeting discerning customers seeking premium products. The website supports multiple languages and offers an online showroom and catalog access, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google APIs, and the Nette framework, providing a responsive and user-friendly experience. Security measures include Google reCAPTCHA v3 integration on contact forms, but the absence of explicit security headers and privacy policy pages indicates room for improvement. The WHOIS data is unavailable due to EURid privacy policies, but the website content and contact information suggest a legitimate and professional business. Overall, the site scores well on content quality and business credibility but should enhance privacy compliance and security posture.

E

EUROSTYLE, spol. s r.o.

footwork.sk

61

FootWork, operated by EUROSTYLE, spol. s r.o., is a well-established Slovak retail footwear business founded in 1993. The company offers a broad range of footwear, leather goods, hosiery, and care products from both Slovak and international brands. It operates multiple physical stores in Bratislava and Pezinok and maintains an e-commerce platform to serve a wider audience. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. The business targets general consumers seeking quality footwear at competitive prices.

M

MARKETING MALÝCH FIREM | Ing. Andrea Frodlová

andreafrodlova.cz

42

MARKETING MALÝCH FIREM | Ing. Andrea Frodlová is a small Czech Republic based business specializing in creating simple WordPress websites and providing marketing consulting services tailored for small businesses and local entrepreneurs. The website presents a professional image with clear contact details and a focus on helping clients improve their online presence and marketing communications. The business appears to be active since at least 2019 and emphasizes personalized service and affordability. Technically, the website is built on WordPress with standard marketing and analytics tools such as Google Analytics and Facebook Pixel, and it includes a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and business registration details support legitimacy. Overall, the site is well-structured, mobile-optimized, and provides a good user experience with clear business focus.

J

JitroDesign

jitrodesign.com

50

JitroDesign is a small, specialized graphic design studio showcasing a portfolio of projects focused on cultural heritage, music albums, and art publications. The website is hosted on the Cargo Collective platform and uses modern web technologies including jQuery and Handlebars.js. The site is accessible without any WAF or security challenges and uses HTTPS, ensuring basic transport security. However, it lacks privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The domain is well-established since 2011, registered through a reputable registrar, and aligns with the business's maturity. Overall, the site presents professional content with good design quality and moderate SEO and accessibility features.

V

Voala

voala.cz

41

Voala is a Czech graphic design studio specializing in custom graphic projects, visual identities, and printing services tailored for architects, designers, and corporate clients. The company operates a professional website with an integrated e-commerce platform, showcasing a portfolio and offering bespoke paper products and printing solutions. The business positions itself as a reliable partner with a focus on quality and tradition, targeting a niche market in the Czech Republic. Technically, the website is built on WordPress with WooCommerce, using modern libraries such as Bootstrap and jQuery, and integrates multiple analytics tools including Google Analytics, Smartlook, and Behavee Analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but no visible cookie consent mechanism. WHOIS data is unavailable, which impacts domain trust assessment. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

K

Kanguroo-event

kanguroo-event.fr

46

Kanguroo-event.fr is a French event management platform specializing in complex event scenarios such as protocol invitations, conferences, and sports federations. The company offers a customizable SaaS solution with features including invitation management, access control via QR codes, seating arrangements, payment processing, and multi-language support. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and clear navigation. However, the absence of WHOIS data limits domain trust verification. Security posture is solid with HTTPS and some security headers, but could be improved with explicit policies and disclosures. Privacy compliance is basic with a cookie consent mechanism but no clear privacy policy page. Overall, the platform appears legitimate and professional, targeting organizers of specialized events.

L

Location iPad Toulosue

location-ipad-toulouse.com

46

The website www.location-ipad-toulouse.com operates as a local rental service agency in Toulouse, France, specializing in short and long-term rentals of electronic devices such as iPads, iPhones, Samsung devices, screens, and stands. The business targets both individuals and companies in need of such equipment, positioning itself as a responsive and proximity-based service provider. The website content is primarily in French and is optimized for search engines using Yoast SEO, with structured data implemented for enhanced visibility. Technically, the site is built on WordPress with modern plugins including Ninja Forms for contact forms and WP Rocket for performance optimization. The design is professional and mobile-friendly, providing a good user experience.

P

Pan Europe

low-impact-farming.info

47

The website www.low-impact-farming.info is an advocacy and informational platform operated by Pan Europe, a non-profit organization focused on promoting sustainable agriculture practices, specifically low impact farming and Integrated Pest Management (IPM) across Europe. The site provides educational resources, policy position papers, and multimedia content to support pesticide reduction and environmentally friendly farming methods. It targets farmers, policymakers, environmental advocates, and the general public interested in sustainable agriculture. The business model is centered on advocacy and education rather than commercial sales, positioning itself as a niche player in the European sustainable agriculture sector. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including Google Analytics and Google Tag Manager for user tracking and AddToAny for social sharing. The site is mobile optimized with good accessibility and SEO practices, though performance is moderate. The technical infrastructure appears maintained and up to date, but lacks some advanced security headers and formal privacy/cookie policies. From a security perspective, the site uses HTTPS and anonymizes IPs in analytics, but does not implement key security headers or publish security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR. WHOIS data is unavailable due to privacy protection, which is reasonable for this non-profit entity. Overall, the security posture is moderate but could be improved with better policy transparency and technical controls. The overall risk assessment is low to moderate. The site is legitimate and trustworthy for its advocacy purpose but should enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, implementing security headers, adding a security.txt file, and improving incident response visibility.

S

SELA Immo

sela-immo.fr

50

SELA Immo is a regional real estate company specializing in the sale and rental of land, houses, and apartments primarily in the Loire-Atlantique region of France. The website serves both individual consumers and professional clients, offering property listings, advice, and partnership opportunities with construction companies. The company positions itself as a trusted local real estate developer with a focus on sustainable and community-oriented projects. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Google Analytics, providing a modern and responsive user experience. However, some technical improvements are possible, including better security header implementation and full configuration of analytics tools. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and incident response information. The absence of WHOIS data for the domain reduces trustworthiness and warrants further investigation. Overall, the website is professional, content-rich, and compliant with GDPR privacy requirements, making it a credible platform for real estate services in its market niche.

L

Loire-Atlantique Développement

boxloireatlantique.com

54

LA Box Loire-Atlantique is a French regional e-commerce platform specializing in local and responsible tourism gift boxes, offering curated weekend stays and activities in the Loire-Atlantique region. The company, represented by Loire-Atlantique Développement, targets consumers interested in authentic local experiences and sustainable tourism. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supported by modern WordPress and WooCommerce technologies. SEO and structured data are well implemented, enhancing discoverability and user engagement. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit contact information or incident response details are visible. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, suggesting a need for further verification. Overall, the website presents a trustworthy and professional front for a niche hospitality business, with room for improvement in security and transparency.

The website sorties-scolaires-loireatlantique.com is operated by Loire-Atlantique Développement and serves as a regional platform for organizing school outings and pedagogical stays in the Loire-Atlantique area of France. It targets schools, teachers, and parents of primary and college students, offering educational trips and classes de découvertes. The site is positioned as a trusted regional educational tourism service provider with a medium-sized organizational footprint, founded in 2019. Technically, the website is built on WordPress with common plugins such as Yoast SEO, Google Analytics, and Complianz GDPR for cookie consent. The hosting registrar is Nuxit, and the site uses HTTPS with a good SSL configuration. Performance is moderate, with good mobile optimization and basic accessibility features. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site benefits from HTTPS and reCAPTCHA on forms but lacks some security headers and DNSSEC. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements include adding a comprehensive privacy policy, enabling DNSSEC, and enhancing security headers to strengthen the security posture and privacy compliance.

L

Les Enfoirés

enfoires.fr

60

Les Enfoirés is a prominent French non-profit organization focused on social aid and fundraising through charity concerts and merchandise sales. The website serves as the official platform to engage supporters, partners, and the general public with information about events, news, and donation opportunities. The organization leverages a modern WordPress-based infrastructure with integrations such as Google Tag Manager and OneTrust for cookie consent, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. The absence of WHOIS data limits domain trust verification but does not detract from the site's apparent legitimacy and professional presentation.

N

NetCURD

netcurd.fr

40

NetCURD is a small French marketing and communication agency founded in 2015, serving clients primarily in the Rennes and Nantes regions. The company offers a comprehensive suite of services including marketing strategy consulting, graphic design for web and print, web development with WordPress and e-commerce solutions, and digital marketing services such as SEO, SEA, social media management, and email campaigns. Their market position is that of a regional agency providing 360° accompaniment to business growth. The website is professionally designed, mobile optimized, and uses modern technologies such as Next.js and SVG graphics. Hosting is provided by Infomaniak Network SA, a reputable provider.

L

Le Tambour

assoletambour.com

52

Le Tambour is a French non-profit cultural association founded in 2001, dedicated to literary diffusion by connecting literature with other art forms. The organization offers writing workshops, public readings, theatrical performances, and text montages aimed at diverse audiences including schools and urban communities. The website reflects a professional and consistent brand presence with clear contact information and regional partnerships. Technically, the site is built on WordPress with common plugins and hosted by OVH sas, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.

T

TPF

tpf.eu

46

TPF is a well-established global multidisciplinary engineering consultancy headquartered in Belgium, with a strong presence in over 40 countries through multiple subsidiaries. The company offers a broad range of engineering services including consultancy, design, technical asset management, and project management. Their market position is reinforced by recognitions such as BREEAM Excellent certifications and rankings in ENR's Top 50 International Design Firms. The website reflects a professional and consistent brand image targeting engineering clients and infrastructure projects worldwide. Technically, the site is built on Drupal 10 with modern JavaScript libraries and is optimized for mobile and accessibility. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security headers and policies are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

R

Rtone

rtone.fr

61

Rtone is a French product development studio specializing in end-to-end product lifecycle services, from conception to development and management. The company targets businesses and product developers seeking specialized product development expertise. The website is built on WordPress and employs modern digital tools such as Cookiebot for consent management, Matomo and Hotjar for analytics, and Google Tag Manager for marketing integration. The domain is mature, registered since 2007 with OVH, indicating a stable business presence. Technically, the site uses a standard WordPress CMS with Yoast SEO for optimization and includes several third-party scripts for analytics and marketing. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and could be improved. From a security and compliance perspective, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is found on the homepage, which slightly reduces privacy compliance and business credibility scores. No WAF or blocking mechanisms are detected, and no suspicious WHOIS patterns are present, supporting the legitimacy of the domain and business. Overall, Rtone presents a professional and trustworthy online presence with room for improvement in transparency and security best practices. Strategic enhancements in published policies and security headers would strengthen compliance and trust.

H

Horizon Project Management

hpmgroupe.com

43

Horizon Project Management (HPM) is a Moroccan-based engineering and project management company specializing in construction project oversight, technical studies, and consultancy services. Established in 2010 and now part of the Ingérop group, HPM serves both private and public sector clients, focusing on real estate, hospitality, transportation, and industrial sectors. The company offers key services including project management assistance, delegated project management, and technical project execution. Their website reflects a professional presence with clear service offerings and client references, targeting construction developers and project owners primarily in Morocco and Africa. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and Google Maps API, hosted by OVH sas. While the site is mobile-optimized and well-structured, some technical issues like a Google Maps loading error and lack of advanced security headers are noted. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

P

Paris Saint-Germain

psg.fr

69

Paris Saint-Germain's official website serves as a comprehensive digital platform for fans and stakeholders to access the latest news, live match updates, and exclusive content related to the club's various sports activities including men's and women's football, handball, judo, and esports. The site is professionally designed with consistent branding and targets a global audience of sports enthusiasts and PSG supporters. Technically, the website leverages modern frameworks such as Next.js and React, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policies and incident response information. Overall, the website demonstrates a mature digital presence with room for improvement in transparency and security disclosures.

The website e-habitants.com currently presents no accessible content, with an empty HTML body and no metadata, scripts, or visible information. This suggests the site is either under construction, blocked by a web application firewall, or otherwise inaccessible. The domain is registered since 2014 with Amazon Registrar, Inc., but no business or contact information is available on the site to verify legitimacy or operational status. The lack of privacy policies, cookie consent mechanisms, or terms of service further indicates the site is not currently functional or compliant with common web standards. Technically, the site lacks any detectable technology stack or CMS, and no security headers or SSL configuration details are available, which raises concerns about security posture. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility.

A

Agence SBA

agence-sba.com

11

Agence SBA is a French digital agency based near Poitiers, specializing in custom website creation, digital strategy, web marketing, AI integration, and compliance services such as RGPD and accessibility. The company positions itself as a strategic partner for SMEs and public entities, leveraging over 25 years of experience to deliver innovative and tailored digital solutions. The website demonstrates a mature technical infrastructure built on WordPress with modern libraries and plugins, ensuring good SEO, accessibility, and user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some improvements like DNSSEC and security headers could enhance protection. Overall, the site is professional, trustworthy, and compliant with privacy regulations, reflecting a credible and established business.