Security Directory

I

Institut pro TCIM/CAM, z. ú.

mkz2025praha.cz

59

The website www.mkz2025praha.cz represents the 4th International Health Congress 2025 in Prague, organized by the Institut pro TCIM/CAM, a non-profit entity focused on traditional, complementary, and integrative medicine. The site serves as an information hub for the event, providing program details, registration, partner information, and historical context. It targets healthcare professionals, researchers, and the general public interested in integrative health approaches. The business model is event-driven with sponsorship and partnership support, positioning itself as a key player in the TCIM/CAM community in Central Europe. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, Google reCAPTCHA, and embedded YouTube content. It is mobile-optimized with responsive design and good SEO practices. However, some security best practices such as security headers are missing, and there is no visible cookie consent mechanism despite GDPR policy presence. The site uses HTTPS with a good SSL configuration, enhancing user trust and data security. From a security perspective, the site shows a moderate security posture with HTTPS and reCAPTCHA protecting forms. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts trustworthiness. No incident response or vulnerability disclosure policies are evident, suggesting room for improvement in security governance. Overall, the website is professional, content-rich, and trustworthy for its intended audience but would benefit from enhanced security policies, transparency in domain registration, and improved privacy compliance mechanisms to strengthen its risk posture and user confidence.

O

Obchod Meduňka

obchodmedunka.cz

53

Obchod Meduňka is a Czech Republic-based e-commerce website specializing in natural health and wellness products, including supplements, natural cosmetics, books, and magazine subscriptions. The site targets consumers interested in natural and holistic health solutions, offering a niche product range with a focus on quality and natural ingredients. The business model is primarily online retail, serving the Czech and Slovak markets with localized currency options and regional targeting. Technically, the website uses a custom e-commerce platform likely powered by eshop-rychle.cz, with modern JavaScript libraries such as Swiper.js for UI components and Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and product categorization. From a security perspective, the site enforces HTTPS and requires user consent for analytics tracking, which is a positive privacy practice. However, it lacks visible security headers and explicit privacy and cookie policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is not publicly available, suggesting privacy protection for the domain registration, which is common for small businesses. Overall, Obchod Meduňka presents a professional and trustworthy online retail presence with room for enhancement in privacy compliance and security best practices. Strategic improvements in these areas would strengthen customer trust and regulatory adherence.

E

Eventmaker

eventmaker.io

60

Eventmaker is a French SaaS company specializing in event management and automation solutions. Positioned as a leading all-in-one platform for event organizers and corporate clients, it offers services including event registration, audience engagement, and data analytics. The website is professionally designed, optimized for SEO, and targets French-speaking markets primarily. Technically, the site runs on WordPress with the Divi theme, integrates multiple marketing and analytics tools such as HubSpot and Google Analytics, and employs performance monitoring via New Relic. Security posture is solid with HTTPS and some script security measures, though additional headers and explicit security policies are absent. The WHOIS data is unavailable, which raises some concerns about domain registration legitimacy, but the website content and branding are consistent and trustworthy. Overall, the site demonstrates a mature digital presence with room for enhanced security transparency.

L

La Quinzaine du commerce équitable

quinzaine-commerce-equitable.org

41

La Quinzaine du commerce équitable is a French non-profit campaign initiated in 2001 to promote fair trade and responsible consumption. The website serves as an awareness platform providing information, event organization, communication kits, and newsletters to engage the public and partners. It is coordinated by a collective linked to www.commercequitable.org, indicating a well-established presence in the fair trade sector in France. The site targets a general audience interested in ethical consumption and sustainability. Technically, the website is built on WordPress using Elementor and Bootstrap frameworks, integrating modern plugins such as Slider Revolution and Matomo for analytics. The site is mobile-optimized with good SEO practices and structured data for enhanced search visibility. Cookie consent management is robust, offering detailed user controls compliant with GDPR requirements. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate spam. However, no explicit security headers were detected, and there is no visible security policy or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profit organizations but slightly reduces transparency. Overall, the website presents a professional and trustworthy image with good content quality and privacy compliance. Strategic improvements include implementing security headers, publishing security policies, and enhancing accessibility features to further strengthen the security posture and user trust.

P

Programme Équité

programme-equite.org

51

Programme Équité is a French non-profit initiative focused on accelerating ecological and social transition in West Africa through fair trade development. The program supports cooperatives and fair trade actors by fostering sustainable supply chains and capacity building. The website reflects a mature and consistent brand presence with clear messaging and trust indicators such as partner logos and testimonials. Technically, the site is built on WordPress with modern integrations including Mapbox, Google Tag Manager, and reCAPTCHA, providing a solid digital infrastructure. Security posture is adequate with HTTPS and form protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is basic but present, with cookie consent mechanisms and a privacy policy accessible via footer links. Overall, the domain registration and website content align well, indicating a legitimate and stable organization.

U

Urgenci

urgenci.net

46

Urgenci is an established international network dedicated to Community Supported Agriculture (CSA), promoting sustainable agroecology and food sovereignty worldwide. Founded in 2003, it operates as a non-profit organization providing resources, advocacy, events, and community engagement to consumers, producers, and activists interested in local and solidarity-based food systems. The website serves as a hub for news, educational materials, and networking opportunities within the CSA movement. Technically, the site is built on WordPress with Elementor and integrates modern JavaScript libraries such as Leaflet for interactive maps and YouTube embeds for multimedia content. Hosting is provided by Gandi SAS, a reputable registrar and hosting provider. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are not explicitly presented, indicating a compliance gap with GDPR and related regulations. Overall, the website is professional, content-rich, and trustworthy, but would benefit from improved privacy disclosures and security hardening.

T

Terreeveille

terreveille.be

56

Terreeveille is a French-language website hosted on the Wix platform, representing a business or brand named Terreeveille. The site is professionally designed with moderate content quality but lacks detailed business descriptions, contact information, and legal policies such as privacy or terms of service. Technically, it uses Wix's Thunderbolt framework and standard web technologies, with good mobile optimization and basic SEO. Security posture is moderate with HTTPS implied but no explicit security headers detected. The absence of WHOIS data due to registry restrictions limits trust verification. Overall, the site appears legitimate but would benefit from enhanced transparency and compliance documentation.

S

Savoir-faire & Découverte

lesavoirfaire.fr

55

Lesavoirfaire.fr is a French website dedicated to providing training within artisan workshops and environmentally conscious farms. The business operates in a niche market focused on artisan crafts and eco-friendly practices, targeting individuals interested in sustainable and traditional skills. The website is built on WordPress, leveraging common plugins such as Yoast SEO and Complianz for GDPR compliance, and integrates marketing tools like Google Tag Manager and Sendinblue Automation. The technical infrastructure is modern and moderately optimized for performance and mobile use. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit privacy policies and security headers, which are recommended for improvement. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and stable online presence.

The website roseaux-dansants.org is a small, community-focused platform dedicated to honoring Joanna Macy, a prominent figure in deep ecology. It primarily serves as a memorial and educational resource for individuals interested in ecological and spiritual teachings. The site content is minimalistic and static, with basic HTML and CSS, lacking modern web design and mobile optimization. There are no interactive elements, forms, or data collection mechanisms present. Technically, the site is hosted on servers associated with phpnet.org and uses no advanced frameworks or CMS. Security posture is weak, with no HTTPS enforcement, no security headers, and no DNSSEC enabled. Privacy compliance is absent, with no privacy or cookie policies found. The domain is legitimate, registered since 2008 with Tucows Domains Inc., and shows no suspicious registration patterns. Overall, the site is safe but lacks professional polish, security best practices, and privacy compliance.

Compagnonnage R.E.P.A.S. is a French non-profit association offering a six-month itinerant educational parcours focused on understanding and experimenting with self-managed structures. The website serves as an informational and resource hub for participants and supporters, providing downloadable documents and links to related partner sites. The association operates in a niche educational and social sector, targeting individuals interested in collective action and alternative societal models. Technically, the site is built using modern static site generation technology (Eleventy) and employs MapLibre GL JS for interactive map features, hosted likely via OVH sas. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of cookie consent mechanisms and explicit privacy policy details. Overall, the site is professional and trustworthy but could improve in privacy and security best practices.

N

notre-planete.info

notre-planete.info

50

notre-planete.info is an independent French media platform specializing in environment, ecology, nature, and earth sciences. Established since 2001, it provides a wide range of content including news articles, briefs, dossiers, real-time environmental data maps, forums, and photo submissions. The site targets a general audience interested in scientific and ecological topics, positioning itself as a reference media in its niche. The business model relies on memberships, donations, and advertising. Technically, the website uses standard web technologies with modern JavaScript features and integrates Google Identity Services for user authentication, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses consent management scripts but lacks explicit security headers and incident response disclosures. Overall, the site is accessible, content-rich, and trustworthy, with good privacy compliance but could improve in security transparency and technical optimizations.

R

Revue S!LENCE

revuesilence.net

58

Revue S!LENCE is an independent French monthly magazine focused on ecology, alternatives, and non-violence, published since 1982 and managed by an association. The website serves as a platform for subscription services, news, articles, and event information targeting French-speaking audiences interested in social and ecological issues. The business model is subscription-based with no advertising or subsidies, emphasizing independence and trustworthiness. Technically, the website is built on the SPIP CMS platform with common JavaScript libraries such as jQuery and bxSlider, and uses Bootstrap for responsive design. The site is moderately performant, mobile-optimized, and has good SEO practices. Security posture is solid with HTTPS enforced and secure forms, though some security headers and cookie consent mechanisms are missing. The WHOIS data for the domain is unavailable or indicates the domain is not registered, which is inconsistent with the active and professional website presence. This discrepancy suggests possible WHOIS server limitations or privacy protections but warrants caution. Overall, the site is safe, trustworthy, and well-maintained with clear contact information and privacy policies. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and clarifying domain registration details to improve trust and transparency.

The website sans-transition-magazine.info is currently inaccessible, returning only a minimal error message indicating the host name is not valid for the server. No meaningful content, metadata, or business information is available for analysis. The WHOIS data for this domain is unavailable due to unsupported TLD, with no registrar, creation, or registrant details provided. This severely limits the ability to verify the legitimacy or business operations of the domain. Technically, the site lacks HTTPS and security headers, indicating a poor security posture. Overall, the domain appears either misconfigured, inactive, or blocked, resulting in a very low trust and credibility score.

L

La Maison Écologique

lamaisonecologique.com

59

La Maison Écologique operates as an independent French magazine focused on ecological construction, eco-habitat, and sustainable living. Established in 2003, it serves a niche audience interested in eco-construction through rich editorial content including articles, podcasts, videos, and practical guides. The business model centers on subscriptions and magazine sales via an online boutique, supported by a loyal subscriber base and active social media presence. Technically, the website is hosted by OVH sas and employs Matomo analytics and Revive Adserver for advertising. The site is well designed, mobile optimized, and accessible, with good SEO practices. However, it lacks explicit privacy and cookie policies, and security headers are not detected, representing areas for improvement. The domain registration is consistent and trustworthy, with no blocking or WAF detected, indicating good accessibility. Overall, the site demonstrates a solid digital presence with room to enhance privacy compliance and security posture.

L

Les artisans de la transition

larevuedurable.com

62

Les artisans de la transition is a French non-profit organization dedicated to raising awareness and providing educational resources about ecological transition. Founded in 2016, it targets the general public interested in environmental issues and sustainable development. The website serves as an informational platform with content focused on ecological urgency and solutions. Technically, the site is built using Angular and Material Design components, indicating a modern frontend framework with good mobile optimization and moderate performance. However, the site lacks advanced SEO and accessibility features. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed), no security headers or DNSSEC are implemented, and no privacy or cookie policies are present, which are important for GDPR compliance. Overall, the domain registration is consistent with the organization's profile, registered with a reputable registrar since 2016. The site does not employ tracking or advertising technologies, enhancing user privacy but limiting marketing insights. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing incident response and vulnerability disclosure information to improve trust and compliance.

C

Carrefour Culturel Arnaud Bernard

arnaud-bernard.org

56

The Carrefour Culturel Arnaud Bernard is a small non-profit cultural association based in Toulouse, France, focused on promoting cultural and linguistic diversity through events such as the Forom des Langues du Monde, Repas de Quartier, and Conversations Socratiques. The website reflects a community-oriented organization with an international cultural ambition. Technically, the site is built on WordPress using Elementor and the OceanWP theme, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and branding are consistent and professional. Overall, the site is trustworthy for its cultural mission but would benefit from improved transparency and security practices.

U

Université Populaire de Permaculture

permaculture-upp.org

54

Université Populaire de Permaculture is a French non-profit educational network dedicated to permaculture training, events, and community building. It operates a WordPress-based website providing rich content including webinars, training schedules, and partnerships with other permaculture organizations. The website targets individuals interested in permaculture education and practice, offering courses and networking opportunities. Technically, the site uses common WordPress plugins and is hosted by OVH sas, with a moderate performance profile and basic SEO and accessibility features. Security posture is adequate with HTTPS and domain locking but lacks advanced security headers and published security policies. Privacy compliance is partial due to absence of cookie consent mechanisms. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

T

Terre Vivante

terrevivante.org

65

Terre Vivante is a French organization focused on promoting organic gardening, permaculture, ecological housing, and healthy cooking. It operates a content-rich website offering advice, books, and a magazine called Les 4 Saisons. The organization targets environmentally conscious individuals and gardeners interested in sustainable living. The website uses WordPress with WooCommerce for e-commerce and integrates multiple marketing and analytics tools to support its business model. Technically, the site is well-structured, mobile-optimized, and SEO-friendly, though performance is moderate due to numerous third-party scripts. Security posture is good with HTTPS and captcha protections, but could be improved by adding explicit security headers and publishing a security policy. Privacy compliance is strong with cookie consent and GDPR-aligned policies. The absence of WHOIS registration data reduces domain trust slightly, but overall the site appears legitimate and professional.

The website slowfood.fr is currently inaccessible, returning a 403 Forbidden error page with no accessible content. The domain is registered since 2004 with a legitimate French registrar, indicating a potentially established entity. However, the lack of accessible content prevents any meaningful analysis of the business, security posture, or compliance. The technical infrastructure appears to be hosted on SiteGround based on nameserver data. No privacy, cookie, or terms of service policies are found, nor any contact information or forms. The website lacks SEO and user experience elements due to the error page. Security headers and SSL configuration cannot be assessed. Overall, the site is currently non-functional for analysis purposes.

A

Association PROMMATA

assoprommata.org

47

Association PROMMATA is a French non-profit organization dedicated to promoting modern animal traction in agriculture. The association focuses on supporting and training farmers and users of animal traction through educational programs and the development of simple, versatile tools. The website reflects a niche market position within sustainable and traditional agriculture, targeting a specialized audience of agricultural practitioners interested in animal-powered farming methods. The association emphasizes collaboration with animals to foster a modern yet sustainable agricultural future. Technically, the website is built on WordPress, utilizing popular plugins such as Yoast SEO for search engine optimization and WP Rocket for performance enhancement. The site is mobile-optimized and presents a professional design with clear navigation. However, some technical improvements could be made, including the implementation of security headers and more comprehensive privacy and cookie policies. From a security perspective, the site uses HTTPS, ensuring encrypted communication. No major vulnerabilities or exposed sensitive data were detected. The absence of security headers and explicit privacy compliance documentation suggests room for improvement in security posture and regulatory adherence. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is not uncommon for non-profit entities. Overall, the website is professional, content-rich, and serves its target audience effectively. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing incident response and vulnerability disclosure policies to strengthen trust and security maturity.

P

Phacelia

phacelia.fr

32

Phacelia is a French educational organization dedicated to supporting agricultural renewal through training and educational services. The website presents a professional and consistent brand image with a focus on agricultural education. The technical infrastructure is based on WordPress with WooCommerce and Tutor LMS plugins, hosted on a provider consistent with the domain registrar. The site is mobile optimized and uses HTTPS, indicating a modern digital presence. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of visible contact information, limits its privacy compliance and user trust. Security posture is moderate with HTTPS and domain transfer protection but lacks security headers and vulnerability disclosure mechanisms. Overall, the website is functional and credible but would benefit from enhanced privacy and security transparency.

P

Permaculture Humaine

permaculture-humaine.fr

40

Permaculture Humaine is a small French organization focused on promoting human permaculture principles, collective intelligence, and cooperation through educational content, training sessions, and facilitation services. The website serves as an informational and engagement platform, offering resources, blog articles, and contact avenues for interested individuals and groups. The business operates in a niche educational and facilitation market with a clear mission to foster cooperation over competition. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and popular plugins like Yoast SEO and Contact Form 7. Hosting is provided via Scaleway and o2switch, with HTTPS enabled ensuring secure communications. The site demonstrates good SEO practices and mobile optimization but lacks some advanced accessibility features. From a security perspective, the site benefits from HTTPS and no visible sensitive data exposure. However, it lacks important security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, representing a gap in security transparency. Overall, the security posture is moderate but could be improved with additional best practices. The website is fully accessible without WAF or blocking mechanisms, and content safety analysis confirms it is suitable for general audiences with no adult or questionable content. The domain registration is consistent and appropriate for the business age and scope, supporting legitimacy. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and adding incident response contacts to enhance trust and compliance.

N

Nature et Progrès

natureetprogres.org

67

Nature et Progrès is a well-established French non-profit association founded in 1964, dedicated to promoting agroecology and organic production through a participatory guarantee system. The website serves as an informational and community platform for producers, consumers, and local groups involved in sustainable agriculture and related sectors. The organization holds a credible market position within the organic certification space in France, supported by a domain registered since 2002 with a reputable registrar, OVH sas. Technically, the website is built on the YesWiki CMS platform, leveraging Bootstrap, jQuery, and Vue.js for a responsive and modern user experience. Hosting is provided by OVH, a known hosting provider. The site demonstrates good mobile optimization and accessibility, though SEO and privacy compliance could be improved. No major performance issues were detected. From a security perspective, the site uses HTTPS and has domain-level protections such as clientDeleteProhibited and clientTransferProhibited statuses. However, it lacks DNSSEC and explicit security headers, and no published security or incident response policies were found. The absence of privacy and cookie policies indicates a gap in compliance with GDPR and related regulations. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance user trust and regulatory adherence.

I

Incroyables Comestibles France

lesincroyablescomestibles.fr

53

Incroyables Comestibles France is a French non-profit association dedicated to promoting urban shared gardens and participative agriculture to foster local, sustainable, and solidarity-based food systems. The organization acts as a national coordinator for local gardening groups, providing resources, organizing events, and encouraging community engagement. Their website reflects a strong community focus with testimonials, event announcements, and resource links. Technically, the site is built on modern frameworks such as Next.js and React, with WordPress used for blog content, and integrates Google Analytics for visitor insights. The site is well-optimized for mobile and SEO, with good accessibility features and fast performance. Security posture is strong with HTTPS enforced and modern security headers in place, though the absence of a cookie consent mechanism and lack of visible incident response or vulnerability disclosure policies are areas for improvement. The domain WHOIS data is missing, which reduces trustworthiness and suggests the need for verification of domain registration status. Overall, the website is professional, trustworthy, and serves its community well but could enhance privacy compliance and transparency.

C

Chival

chival.fr

48

Chival is a small non-profit association based in France focused on promoting yoga, permaculture, and animal welfare through retreats, workshops, and educational events. The website serves as an informational and community engagement platform targeting individuals interested in ecological sustainability, ethical veganism, and holistic well-being. The technical infrastructure is built on WordPress with common plugins for forms and social media integration, hosted by OVH, a reputable provider. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and consistent with its stated mission but would benefit from enhanced compliance and security practices.

B

Brin de paille

brindepaille.org

54

Brin de paille is a small French blog and community platform focused on ecology, permaculture, and sustainable living. The website provides articles, project sharing, and suggestions aimed at a general audience interested in sustainable practices. The site is built on WordPress and hosted by OVH sas, with a modern technical stack and good mobile optimization. However, it lacks formal privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Social media presence is established on Facebook, Instagram, and Twitter/X, enhancing community engagement. Overall, the site is professional and trustworthy for its niche but should improve privacy and security practices.

The website reseau-amap.org serves as a national directory and informational resource for AMAPs (Associations pour le maintien d'une agriculture paysanne) in France. It aims to promote sustainable and organic farming by connecting consumers directly with farmers. The site provides educational content, a directory of AMAPs, and guidance on creating new associations. The business model is non-profit and community-focused, targeting consumers and farmers interested in local agriculture. The website is modest in scale and has been operational since 2007, indicating a stable presence in its niche. Technically, the site uses basic web technologies including JavaScript and CSS, with Google Analytics for visitor tracking. Hosting is provided by Infomaniak, a known European hosting provider. The site lacks modern CMS indicators and shows basic mobile optimization and accessibility. SEO practices are minimal but functional. No advanced frameworks or platforms are detected. From a security perspective, the site uses HTTPS and has domain-level protections such as clientDeleteProhibited status, but lacks DNSSEC and security headers. There are no visible privacy or cookie policies, which is a compliance concern especially under GDPR. The use of Google Analytics without a consent mechanism further impacts privacy compliance. No incident response or security policies are published. Overall, the security posture is moderate but could be improved with standard best practices. The overall risk is low given the non-commercial, informational nature of the site and absence of sensitive data collection. However, compliance gaps and missing security headers should be addressed to enhance trust and legal adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and improving mobile and accessibility features.

A

Agroforesterie

agroforesterie.fr

46

The website www.agroforesterie.fr represents the French Association of Agroforestry, a non-profit organization dedicated to promoting agroforestry practices across France. The association offers a wide range of services including territorial animation, training, technical support, research and development, and communication to support sustainable agriculture. The site is well-positioned as a leading entity in the agroforestry sector in France, targeting farmers, technical organizations, supply chain actors, local authorities, companies, and citizens. The business model is focused on education, project facilitation, and advocacy within the agroecological transition framework. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and WP Rocket, ensuring good SEO, performance, and mobile optimization. The site uses cookie consent management via Tarteaucitron and employs security best practices including HTTPS and security headers. The content is rich, professionally designed, and highly relevant to its audience, with clear navigation and multilingual support. From a security perspective, the site demonstrates a strong posture with no detected vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published, which could be improved. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the domain is managed under AFNIC with privacy protection, which is common and justified for non-profit organizations. The website is trustworthy, professional, and serves as a comprehensive resource for agroforestry in France. Strategic recommendations include publishing security and incident response policies and adding vulnerability disclosure information to enhance transparency and trust.

The website permaculture.fr serves as the French network for permaculture, promoting ecological design principles and supporting permaculture projects and education in France. It acts as a hub connecting various French permaculture actors and organizations, including associations and educational institutions. The site provides information about permaculture, links to partner organizations, and contact via email. The domain is well-established since 2008 and hosted by Infomaniak Network SA, a reputable provider. Technically, the website uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking. The site lacks advanced frameworks or CMS and shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. No forms collecting sensitive data are present, reducing risk exposure. From a security perspective, the site uses HTTPS (implied by URL), but no security headers were detected in the provided data. There is no visible privacy or cookie policy, nor GDPR compliance indicators, which is a compliance gap. No incident response or vulnerability disclosure information is provided. The site does not appear to be behind a WAF or security challenge, and no suspicious WHOIS patterns were found, indicating a legitimate and stable domain. Overall, the site is safe and suitable for general audiences, with content focused on permaculture education and networking. Strategic improvements include adding privacy and cookie policies, enhancing security headers, improving mobile responsiveness, and publishing GDPR compliance information to strengthen trust and compliance posture.

P

Provence Energie Citoyenne

provence-energie-citoyenne.fr

43

Provence Energie Citoyenne is a small French citizen cooperative focused on renewable energy, particularly hydroelectric power generation at the Marie-Thérèse micro-plant. The organization emphasizes community involvement, ecological preservation, and sustainable energy production. The website serves as an information hub with news, events, and educational content targeted at local citizens and environmental advocates. Technically, the site is built on WordPress with modern plugins for SEO, social sharing, and event management, showing moderate to good performance and mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the professional presentation and active content. Overall, the site is trustworthy and well-positioned as a local energy cooperative.

C

Citoyen'R

citoyenr.org

49

Citoy’enR is a French cooperative (SCIC) focused on developing renewable energy production means, primarily photovoltaic solar panels, within the Toulouse urban area. The cooperative model emphasizes citizen participation, social economy values, and ecological responsibility. The business model involves collective citizen investment to finance installations, with electricity sold at guaranteed tariffs to fund new projects, educational initiatives, and member remuneration. The website presents a professional and consistent brand image, targeting local citizens and stakeholders interested in sustainable energy solutions.

E

EnergyTransition.org

energytransition.org

46

EnergyTransition.org is an informational and educational platform focused on global energy transitions, with a particular emphasis on Germany's Energiewende. It is affiliated with the Heinrich Böll Foundation, a reputable organization promoting democracy, human rights, and environmental sustainability. The website serves a broad audience including policy makers, researchers, and the general public interested in energy and climate issues. The platform offers articles, blogs, podcasts, and a wiki to support knowledge dissemination in the energy sector. Technically, the website is built on WordPress and employs modern web technologies such as jQuery, Podlove Podcasting, and Piwik PRO analytics. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The hosting and domain registration are consistent with the organization's profile, with no privacy protection used, enhancing transparency. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and explicit security or incident response policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. No contact emails or phone numbers are provided, which may limit direct user engagement. Overall, the website is professional, trustworthy, and content-rich but could improve its privacy compliance and security posture by implementing standard security headers, publishing privacy and cookie policies, and providing vulnerability disclosure information.

P

Post Carbon Institute

resilience.org

61

Resilience.org is a non-profit program under the Post Carbon Institute focused on supporting community resilience in response to ecological and social challenges. The website offers editorial content, podcasts, events, and subscription-based deep dives to educate and engage its audience. The organization positions itself as a thought leader in sustainability and resilience, targeting a general audience interested in these topics. Technically, the site is built on WordPress with modern plugins and tracking tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and no obvious vulnerabilities, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich, but would benefit from enhanced privacy transparency and WHOIS data availability for improved domain trust.

E

ECOLISE

ecolise.eu

53

ECOLISE is a European non-profit network dedicated to empowering community-led initiatives focused on climate change and sustainability. The organization provides participatory advocacy, funding through the Regenerative Communities Fund, project support, and a variety of resources including publications and activity reports. Their target audience includes communities and stakeholders engaged in environmental sustainability across Europe. The website positions ECOLISE as a key network in the European sustainability ecosystem, emphasizing collaboration and community empowerment. Technically, the website is built on WordPress using the Kadence theme and several plugins such as Yoast SEO, Events Calendar Pro, and Groundhogg for marketing automation. The site is well-structured with good SEO practices, mobile optimization, and accessibility features. Google Analytics is used with consent mode configured to deny personalization and storage in certain regions, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements consent mechanisms for cookies. However, no explicit security headers were detected, and there is a lack of published security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the analysis. The domain registration is consistent and trustworthy, with no privacy protection masking registrant details. Overall, ECOLISE's website demonstrates a solid digital presence with good business credibility and technical implementation. To enhance trust and compliance, it is recommended to publish clear privacy and terms of service policies, add security policy information, and consider a vulnerability disclosure mechanism. These steps will strengthen the site's privacy compliance and security posture, supporting its mission to empower communities for a sustainable future.

T

Transition Initiative by Transition Network

transitiongroups.org

41

The website maps.transitionnetwork.org serves as a global directory and mapping platform for Transition groups, hubs, and trainers focused on community-led sustainability and resilience initiatives. It is a niche, non-profit community platform that supports the Transition movement by enabling group registration, mapping, and providing resources. The platform targets members of the Transition movement, community organizers, and sustainability advocates worldwide. Technically, the website is built on WordPress with a modern tech stack including jQuery, Leaflet.js for mapping, and multilingual support via TranslatePress. It employs Google reCAPTCHA for form security and uses Matomo and GoatCounter for analytics. The site is well-structured with good SEO and accessibility features, and it is mobile-optimized. Performance is moderate, with room for improvement. From a security perspective, the site uses HTTPS and implements reCAPTCHA to protect forms. However, it lacks several important security headers such as Content-Security-Policy and X-Frame-Options, which could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found in the analyzed content. Overall, the website presents a professional and trustworthy platform for its community-focused mission. The lack of WHOIS data due to privacy protection is common for such non-profit entities and does not raise immediate concerns. Strategic recommendations include adding comprehensive privacy and terms of service pages, implementing additional security headers, and maintaining regular updates to WordPress and plugins to ensure ongoing security and compliance.

R

Rob Hopkins

robhopkins.net

59

Rob Hopkins' website serves as a professional platform for his work as an author and advocate for sustainability and collective imagination. The site offers rich content including blog posts, podcasts, videos, and information about his books and trainings, targeting individuals interested in environmental and community-driven change. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and CleanTalk for anti-spam, and integrates Google Analytics and Jetpack for analytics and performance monitoring. The site is well-structured, mobile-optimized, and accessible, providing a positive user experience. Security-wise, the site enforces HTTPS and uses anti-spam measures but lacks some security headers and formal policies such as privacy and cookie notices, which are important for compliance and trust. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and active content of the site.

T

Transition Network international

transitionnetwork.org

49

Transition Network international is a well-established non-profit organization founded in 2007, focused on uniting communities globally to foster sustainability, reduce fossil fuel use, and strengthen local economies. The organization operates an international network active in 69 countries, providing training, resources, and community support to facilitate positive environmental and social change. Their website reflects a professional and consistent brand presence, targeting individuals and groups interested in community resilience and sustainable futures. Technically, the website is built on WordPress with modern plugins such as Elementor, Contact Form 7, and TranslatePress for multilingual support. It employs Matomo for analytics and hCaptcha for form security, hosted by Gandi SAS. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security measures include HTTPS enforcement and domain transfer protection, but DNSSEC is not enabled, and security headers are not explicitly observed. From a security perspective, the site shows a mature posture with no critical vulnerabilities detected. However, improvements could be made by enabling DNSSEC, adding security headers, implementing a cookie consent mechanism, and publishing a vulnerability disclosure policy. Contact information is clear, but no dedicated security or incident response contacts are provided. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles, though minor enhancements in security and privacy compliance would strengthen its posture. The domain registration data aligns well with the organization's claims, supporting legitimacy and long-term operation.

The website andines.fr is currently under construction and provides minimal content, primarily a placeholder message in French indicating the site is being built. The domain is registered through Infomaniak Network SA, a reputable Swiss hosting provider, and the domain age is consistent with a new or small business. The technical infrastructure is basic, utilizing standard HTML5, CSS3, Google Fonts, and Font Awesome icons, with no detected CMS beyond a hosting page builder. There are no forms, contact details, or policies present, limiting user engagement and trust. Security posture is minimal with no visible security headers or privacy compliance mechanisms, and no HTTPS status was explicitly provided in the data. The site does not employ analytics, advertising, or tracking technologies, indicating minimal digital maturity at this stage. Overall, the site is safe with no adult or questionable content but lacks essential business and security features.

The website push-sdk.com currently presents an extremely minimal online presence, consisting solely of a page title and a timestamp. There is no substantive content describing the business, its services, or its market positioning. The domain is relatively new, registered in late 2022, and uses Cloudflare DNS services. The lack of metadata, structured data, or contact information suggests the site is either under development or abandoned. Technically, the site lacks HTTPS and security headers, which are critical for secure communications and user trust. No privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. Overall, the website's security posture is weak, with no visible best practices implemented. The minimal content and lack of business information limit the ability to assess the company's credibility or market position. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact and business information, and improving content quality to enhance trust and compliance.

O

Octopuce

octopuce.fr

55

Octopuce is a French technology company founded in 1999 specializing in custom server hosting and managed IT services since 2005. The company emphasizes high-quality service, security, and direct client engagement, managing Debian Linux infrastructures with a devops approach. Their service model includes contractual SLAs with 24/7 support and a commitment to free software and data protection values. Technically, the website is built on WordPress with the Divi theme and uses jQuery, reflecting a modern but standard web technology stack. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit policies. The absence of WHOIS data limits domain trust assessment, but the website content and business presentation are professional and consistent with a legitimate small technology service provider.

G

GoGoCarto - Créez des cartes à GoGo !

gogocarto.fr

59

GoGoCarto is a French technology platform specializing in participatory mapping, enabling users to create and share community-driven map projects. The platform hosts thousands of projects, indicating a vibrant user base and active community engagement. The website is well-branded, consistent, and provides open source code and documentation links, reflecting transparency and openness. Technically, the site uses modern web technologies including JavaScript, CSS, and Matomo analytics for privacy-conscious user tracking. The hosting is provided by Colibris outils libres, a known free software hosting provider, which aligns with the platform's open source ethos. Security posture is moderate with HTTPS enforced and sandboxed iframes, but lacks explicit security headers and documented security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Business credibility is supported by domain age, consistent WHOIS data, and active project hosting. Overall, the site is functional and trustworthy but would benefit from enhanced privacy and security disclosures.

C

Cairn.info

cairn.info

56

Cairn.info is a leading digital publishing platform specializing in humanities and social sciences publications, primarily serving French-speaking researchers, academics, and institutions. The platform offers access to a wide range of academic journals, books, magazines, and dossiers, positioning itself as a key resource in its sector. The website is professionally designed, mobile-optimized, and provides advanced search and thematic browsing capabilities, enhancing user experience and accessibility. Technically, the site employs modern web technologies including Alpine.js and Laravel Livewire, with bot protection via Datadome and progressive loading indicators. The infrastructure supports a responsive and accessible user interface with good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes standard security headers, and protects user input forms with CSRF tokens. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit security policies and incident response contacts are not published. Overall, Cairn.info demonstrates a mature digital presence with strong content quality and security posture. The lack of public WHOIS data is consistent with privacy regulations and does not detract from the platform's legitimacy. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

A

Association Française de Science Politique

afsp.info

60

The Association Française de Science Politique (AFSP) operates as a prominent non-profit academic association dedicated to political science in France. The website serves as a comprehensive portal offering information on congresses, research groups, professional activities, and resources for political science scholars and practitioners. The organization maintains a strong market position within the French academic community, providing key services such as event organization, publications, and professional networking. Technically, the website is built on WordPress with Bootstrap and jQuery frameworks, integrating modern web technologies including Google Tag Manager and social media embeds. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. Performance is moderate, with a professional design and clear navigation enhancing user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit privacy policy documentation. WHOIS data is unavailable, likely due to privacy protection, which is justifiable for this type of non-profit entity. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences. Overall, the AFSP website is a credible and professionally maintained platform with room for improvement in privacy transparency and security hardening to enhance trust and compliance.

B

Books & Ideas / La Vie des Idées

booksandideas.net

43

Books & Ideas is a well-established intellectual online journal serving as the English-language mirror of the French publication La Vie des Idées. Founded in 2007, it targets academics, researchers, and intellectually curious readers interested in social sciences and humanities. The website offers essays, reviews, interviews, and dossiers, maintaining a consistent and professional brand image. It operates on the SPIP CMS platform with a moderate modern technology stack including jQuery, Google Analytics, and cookie consent management via tarteaucitron.js. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and basic security headers, though improvements such as DNSSEC and security.txt are recommended. Privacy compliance is basic with a legal notice page and cookie consent but lacks explicit GDPR statements or terms of service. WHOIS data confirms domain legitimacy and long-term operation. Overall, the site is trustworthy, safe, and professionally maintained.

SeenThis.net is a niche social blogging platform in beta phase, offering short-blogging without text limits, content curation, forums, and automatic thematisation. The platform targets general internet users interested in social media and content sharing. Technically, it uses the SPIP CMS with JavaScript libraries such as jQuery and Photoswipe, hosted by Infomaniak Network SA. The website is moderately optimized for mobile and performance, with a good user experience and clear navigation. Security posture is basic with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate and stable with a domain age consistent with its business history.

Élabore is a French cooperative specializing in the integration and deployment of open-source ERP and CRM solutions, primarily based on Odoo, targeting associations, small and medium enterprises, and organizations within the social, ecological, and cultural sectors. Their business model emphasizes digital transition with open-source tools, offering a suite of software, training modules, and maintenance services. The company holds a Qualiopi certification for its training activities, reinforcing its credibility in the education sector. Technically, the website is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Security-wise, the site uses HTTPS with valid SSL certificates and includes CSRF tokens, but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. The security posture is adequate but could be improved by implementing DNSSEC, security headers, and publishing formal security policies. Privacy compliance is limited due to the absence of privacy and cookie policies and no visible consent mechanisms. Contact information is primarily via a contact form, with no direct emails or phone numbers publicly listed. Analytics are conducted via Plausible.io, a privacy-focused service, indicating moderate user tracking. Overall, Élabore presents a trustworthy and professional online presence consistent with its cooperative and open-source ethos. Strategic improvements in privacy compliance and security practices would enhance its risk profile and user trust.

A

American Legal Publishing

amlegal.com

61

American Legal Publishing is a well-established company specializing in codification services for municipalities and local governments, with over 90 years of experience. Their website reflects a professional and trustworthy business with a clear focus on legal publishing and related services. The company is positioned as a trusted partner in the government sector, supported by its affiliation with the International Code Council. Technically, the website is built on modern web technologies including Webflow CMS, GSAP animations, and integrates analytics tools such as Google Tag Manager and Metricool. The site is fast, mobile-optimized, and accessible, providing a positive user experience. Security posture is generally good with HTTPS enforced and domain registration consistent with a legitimate business; however, some improvements are needed such as enabling DNSSEC and fixing the disabled reCAPTCHA on the contact form. Privacy compliance is basic, lacking cookie consent mechanisms and explicit GDPR indicators. Overall, the website is professional and credible but could enhance its security and privacy transparency to better align with best practices.

D

Dorik, Inc.

dorik.io

70

Dorik, Inc. operates an AI-powered website building platform designed to enable users without design or coding experience to create websites quickly and affordably. The company positions itself as a flexible and user-friendly SaaS provider in the technology sector, targeting individuals and small to medium businesses. The website demonstrates a modern technical infrastructure with extensive use of JavaScript analytics and marketing tools, hosted and registered through reputable providers such as Cloudflare. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks published security policies and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security disclosures.

D

Dorik, Inc.

dorik.com

61

Dorik, Inc. operates an AI-powered website building platform designed to enable users without design or coding experience to create professional websites quickly and affordably. Positioned as a flexible and user-friendly SaaS solution, Dorik targets individuals and businesses seeking efficient website creation tools. The company was founded in 2020 and maintains a professional online presence with consistent branding and active social media channels. Technically, the website employs modern JavaScript libraries and integrates multiple analytics and marketing tools such as Mixpanel, Microsoft Clarity, Facebook Pixel, and ProfitWell, indicating a mature digital infrastructure. Hosting and domain management are handled via Cloudflare, ensuring reliable performance and security. Security posture is generally good with HTTPS enabled and domain transfer protections in place; however, the absence of DNSSEC and security headers suggests room for improvement. Privacy compliance is currently weak due to missing privacy and cookie policies, which poses a risk for GDPR and other regulations. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website cmsfly.com is currently inaccessible due to an SSL handshake failure between Cloudflare and the origin server, resulting in a Cloudflare error 525 page being displayed. This prevents any meaningful content or business information from being accessed or analyzed. The site lacks visible privacy policies, contact information, or any business-related content. Technically, the site is protected by Cloudflare but suffers from misconfigured SSL on the origin server, which critically impacts availability and trustworthiness. Security posture is weak due to this misconfiguration, and no compliance or incident response information is available. Overall, the site is not operational from a user perspective, and its digital maturity is very low.