Security Directory

S

Sunelis Services

sunelis-services.com

59

Sunelis Services is a French company specializing in the maintenance, repair, and monitoring of photovoltaic solar power installations. Established since 2008, the company offers a range of services including maintenance contracts, after-sales service, troubleshooting, remote monitoring, cleaning, and thermographic analysis. Their target audience includes professionals, private individuals, local authorities, and farmers. The company maintains a professional online presence with clear contact information and social media links, positioning itself as a trusted regional service provider in the renewable energy sector. Technically, the website is built on WordPress using Elementor and several plugins such as Yoast SEO and MonsterInsights for analytics. The site is hosted under the registrar IONOS SE with DNS services from ui-dns providers. The website is mobile-optimized and SEO-friendly, though some accessibility features are basic. Performance is moderate, with modern technologies employed but some room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protection enabled. However, no advanced security headers were detected, and there is no visible incident response or vulnerability disclosure information. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Analytics tracking is implemented via Google Analytics and MonsterInsights, with moderate user tracking. Overall, the website is professional, trustworthy, and serves its business purpose well. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and providing clear incident response contacts to improve compliance and security posture.

C

Copergreen

copergreen.fr

47

Copergreen is an independent pioneer group founded in 2008 specializing in the development and integration of photovoltaic energy projects. The company targets individuals and businesses interested in energy transition and solar power solutions, offering services such as project development, maintenance, optimization, and investment options. The website reflects a medium-sized energy sector business based in France, with consistent branding and professional content. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, hosted by OVH. It employs modern web technologies including Google Analytics for tracking and CookieYes for GDPR-compliant cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No security policy or incident response information is published, and no vulnerability disclosure mechanism is present. Cookie consent is well implemented with detailed categories and user controls, indicating good privacy compliance. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. However, it could enhance its security posture by adding security headers, publishing security policies, and improving accessibility. No critical vulnerabilities or suspicious activities were detected.

Edisun Power Europe AG is a Swiss-based publicly listed company specializing in the financing and operation of solar power plants across Europe. Established in 1997, it has grown to become a pioneer in medium to large-scale photovoltaic projects, contributing significantly to the renewable energy sector and the energy transition. The company targets investors and stakeholders interested in sustainable energy solutions, leveraging its broad European presence and expertise. Technically, the website is built on Concrete CMS with modern frontend technologies such as Vue.js and Bootstrap, providing a good user experience with mobile optimization and basic accessibility features. The site employs Google Tag Manager for analytics and includes a GDPR-compliant cookie consent mechanism. Security-wise, the website enforces HTTPS and uses cookie consent but lacks explicit security headers and detailed security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the business information and public listing support its credibility. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and clearer domain registration transparency.

V

valemo.fr

valemo.fr

54

VALEMO is a French company specializing in the exploitation, maintenance, and supervision of renewable energy assets including wind, solar, hydroelectric, and marine energies. Established in 2011, the company has grown to a medium-sized enterprise with over 145 employees distributed across 15 bases, including a dedicated offshore team. VALEMO positions itself as a leading multi-energy operator in France, recently ranked as the 5th largest wind energy operator nationally. The company offers a comprehensive suite of services from engineering to onshore and offshore operations, targeting clients who own and operate renewable energy installations. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by OVH, a reputable provider. The site integrates Matomo analytics for privacy-conscious user tracking and embeds YouTube videos for multimedia content. The website is mobile-optimized with good SEO practices but could improve accessibility and performance further. Security posture is solid with HTTPS enforced, though security headers and explicit security policies are absent. From a security and compliance perspective, the site implements a GDPR cookie consent mechanism but lacks visible privacy policies, terms of service, or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration is consistent with the business claims, showing a long-standing presence and no privacy protection, which supports legitimacy. Overall, VALEMO presents a professional and trustworthy online presence aligned with its business sector. However, improvements in privacy documentation, security headers, and contact transparency would enhance compliance and trustworthiness.

H

Helexia

helexia.green

46

Helexia is a French company specializing in providing personalized energy transition trajectories for businesses. Their services encompass energy audits, photovoltaic solar installations, energy efficiency solutions, and regulatory compliance support. The company positions itself as a medium-sized enterprise under the Helexia Group umbrella, targeting corporate clients seeking sustainable energy solutions. The website is professionally designed using WordPress with modern plugins and integrates HubSpot forms for lead generation. The technical infrastructure is solid with HTTPS and cookie consent mechanisms in place, although some security headers and explicit privacy policies are missing. The WHOIS data is unavailable or malformed, which slightly reduces trustworthiness but the overall digital presence is consistent and professional. The company leverages marketing and analytics tools such as HubSpot, Facebook Pixel, and LinkedIn Insight Tag to optimize user engagement and tracking.

U

Un Deux Toits Soleil

undeuxtoitssoleil.fr

43

Un Deux Toits Soleil is a citizen cooperative focused on renewable energy projects, specifically photovoltaic solar installations on public and private buildings in the Lyon metropolitan area. The cooperative aims to promote energy sobriety and renewable energy awareness among local residents. The website is professionally designed using WordPress with SEO optimization and provides real-time production data and partner information, indicating a mature digital presence. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the content and partnerships suggest a legitimate organization. Security posture is good with HTTPS enforced but could be improved with additional security headers and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned within its local energy cooperative market.

E

Enercitif

enercitif.org

38

Enercitif is a Paris-based citizen cooperative focused on developing and operating photovoltaic solar installations on public and private buildings. The cooperative empowers citizens to invest and participate in renewable energy production, promoting local energy transition and sustainability. The website reflects a community-driven business model with transparent fundraising and active engagement. Technically, the site is built on WordPress with the Divi theme, using common web technologies and caching for performance. Hosting is provided by Infomaniak, a reputable provider. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is professional, trustworthy, and well-aligned with its mission, though improvements in security and privacy disclosures are recommended.

V

Vendée Energie

vendee-energie.fr

44

Vendée Energie is a medium-sized Société d'Economie Mixte (SEM) operating in the renewable energy sector in France, specifically in the Vendée region. The company focuses on producing and distributing renewable energies such as wind, photovoltaic, methanisation, green hydrogen, and BioGNV, serving local communities, economic actors, and transport companies. The website reflects a professional and consistent brand presence with clear business information and contact details. Technically, the site uses a modern tech stack including jQuery, Google Tag Manager, and Google Analytics, hosted by OVH, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious or malicious content.

S

SIPPEREC

sipperec.fr

42

SIPPEREC is a French public syndicate specializing in energy and digital services for member municipalities, holding a leading market position in electricity concession, renewable energy production, and digital infrastructure in the Île-de-France region. The website is built on TYPO3 CMS and employs modern web technologies including Matomo for privacy-conscious analytics and Tarteaucitron.js for cookie consent management. The site is well-structured, mobile-optimized, and provides comprehensive content relevant to its target audience of local governments and residents. Security posture is solid with HTTPS enforced and no exposed sensitive data, though security headers are not visibly implemented. Privacy compliance is strong with clear policies and consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but is common for French domains under AFNIC. Overall, the site presents a professional and trustworthy digital presence for a public sector entity.

Groupe Sorégies is a French energy company focused on accelerating the energy transition through renewable energy production, distribution, supply, and clean mobility services. The company operates primarily in France with a strong regional presence and a diversified portfolio including subsidiaries specializing in electricity and gas distribution, renewable energy aggregation, and innovative mobility solutions. The website demonstrates a mature digital infrastructure built on WordPress with React components and SEO optimization, reflecting a professional and modern online presence. Security posture is adequate with HTTPS and no visible critical vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. Overall, the site is trustworthy and well-aligned with the company's business objectives, though privacy compliance could be enhanced.

The website for the Communauté de communes de l'île d'Oléron serves as the official digital presence for the local government community of Île d'Oléron in France. It provides comprehensive information on territorial management, community services, environmental initiatives, economic development, and cultural activities. The site targets residents and stakeholders of the island, offering resources and news relevant to their daily lives and local governance. The business model is that of a public service entity, focusing on community support and regional development. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Amazon Polly, ensuring good SEO and accessibility. The site is mobile-optimized and features a clear navigation structure. Security-wise, the site uses HTTPS and includes Google reCAPTCHA for form protection and a cookie consent mechanism, but lacks visible advanced security headers and published security policies. The WHOIS data is unavailable or hidden, which is unusual for a government domain and warrants further verification. Overall, the site is professional, trustworthy, and serves its community well, though improvements in privacy transparency and security documentation are recommended.

B

Bordeaux Métropole

bordeaux-metropole.fr

61

Bordeaux Métropole is the official metropolitan government entity serving 28 communes around Bordeaux, France, providing a wide range of public services including urban planning, transport, waste management, water, economic development, and environmental initiatives. The website serves residents, professionals, associations, and visitors with comprehensive information and digital services. Technically, the site is built on Drupal 10 with modern frontend technologies like Swiper.js, offering good mobile optimization, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is typical for some ccTLDs or privacy-protected domains and does not detract from the site's legitimacy given its government nature. Overall, the site is professional, trustworthy, and well-maintained, supporting the metropolitan community effectively.

H

Hespul

hespul.org

60

Hespul is a French non-profit association with over 30 years of experience specializing in renewable energy, particularly solar photovoltaic technology, and energy efficiency. The organization focuses on accelerating the energy transition through project development, education, and community engagement. Their website reflects a mature digital presence with a clear mission and professional content targeting professionals and communities interested in sustainable energy solutions. Technically, the site uses modern web technologies including Foundation framework, FontAwesome icons, and Matomo analytics, hosted on a reputable registrar's infrastructure. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and cookie consent mechanisms. The absence of direct contact emails or phone numbers is a minor limitation, with contact primarily via web forms. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

E

Emmaüs

label-emmaus.co

62

Label Emmaüs is an ethical and solidarity-driven e-commerce platform affiliated with the Emmaüs association in France. The website offers a variety of second-hand and vintage products including clothing, books, vinyls, reconditioned smartphones, and artisan goods, targeting consumers interested in responsible consumption and social causes. The platform positions itself as a militant e-shop, emphasizing sustainability and social impact. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, along with Tailwind CSS for styling, and integrates advanced monitoring and analytics tools like New Relic and Klaviyo. The website is well-optimized for mobile devices and includes comprehensive privacy and cookie policies with active consent management, reflecting good GDPR compliance. Security-wise, the site uses HTTPS with appropriate security headers and content security policies, though it lacks a publicly available security policy or incident response information. Overall, the domain registration data aligns with the website's claims, supporting its legitimacy and trustworthiness.

P

Piaille

piaille.fr

65

Piaille.fr operates as an independent public Mastodon server primarily serving the francophone community. It provides a federated social networking platform allowing users to participate in the fediverse without centralized control. The service is relatively new, established in late 2022, and positions itself as an accessible and open social media alternative. The website content and branding are consistent with its mission, targeting general users interested in decentralized social media. Technically, the site runs Mastodon version 4.4.7, leveraging modern JavaScript modules and React-based components. Hosting is provided by ScaleWay, a reputable cloud provider, ensuring reliable infrastructure. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, some SEO and accessibility features are basic and could be enhanced. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, no explicit security headers were detected, and there is no visible incident response or security policy information. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms and GDPR compliance indicators. No contact information or vulnerability disclosure policies are provided, which could be improved to enhance trust. Overall, Piaille.fr presents a trustworthy and functional platform with room for improvement in security and privacy compliance. Strategic enhancements in security headers, privacy notices, and contact transparency would strengthen its posture and user confidence.

A

Alternatiba and ANV-COP21

campclimat.eu

44

The website campclimat.eu represents a French non-profit climate activism initiative organized by Alternatiba and ANV-COP21. It focuses on organizing national climate camps, training, and mobilization events aimed at raising awareness and action on climate and social justice issues. The site targets French-speaking activists and citizens interested in climate change and social justice. Technically, the site is built on WordPress with modern plugins and libraries, hosted by a reputable provider, and optimized for mobile and SEO. Security posture is good with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and cookie consent mechanisms. Overall, the domain registration and WHOIS data are consistent with a legitimate non-profit organization. The site is trustworthy, professional, and content-rich, but could improve privacy compliance and security best practices.

E

eko & co

discre.to

57

Discre.to is a French-based small technology company offering 'discreto', an open source GDPR-compliant consent management tool focused on user privacy and anonymity. The website provides extensive documentation, configuration options, and integration with popular analytics and advertising services, emphasizing anonymized data collection and user control. The company, eko & co, sponsors the project and offers consulting and donation options. Technically, the site uses modern web technologies including JavaScript, Sass, and Webpack, and is hosted likely on OVH. Security practices include respecting Do Not Track headers and anonymizing IP addresses, though explicit security headers and policies are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with GDPR principles, though it lacks explicit privacy and terms of service pages.

Krmivo-pes.cz is a Czech Republic based e-commerce platform specializing in pet food and supplies for a wide range of animals including dogs, cats, horses, and exotic pets. The business operates under Servis.com, s.r.o., with a domain age consistent with its claimed operational history since 2010. The website offers a comprehensive product catalog, customer reviews, and multiple purchasing options including home delivery and in-store pickup. The site is well-branded and provides clear contact information, enhancing customer trust. Technically, the website employs common web technologies such as jQuery, Google Analytics, and Google Tag Manager, with DNS hosted via Cloudflare. The site is mobile-optimized and structured with SEO best practices including JSON-LD structured data. However, the CMS appears custom or proprietary, and no advanced frameworks are detected. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with terms and conditions present but no dedicated privacy or cookie policy or consent mechanism. Customer trust is supported by verified reviews and a certification from Ověřeno zákazníky. Overall, the security posture is adequate but could be enhanced with better privacy and security disclosures. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security headers, and incident response transparency would strengthen the site's security and regulatory posture, supporting continued business growth and customer confidence.

Technimax is a Czech-based e-commerce company specializing in the sale of refurbished IT hardware, primarily Dell and HP computers, notebooks, monitors, printers, and servers. The company targets small and medium-sized businesses seeking high-quality, cost-effective IT solutions with extended warranty options up to five years. Their website demonstrates a professional and well-structured online presence with detailed product categorization and clear contact information, supporting their market position as a specialist in refurbished IT equipment in the Czech Republic. Technimax emphasizes quality assurance with an A+ grading system for their products and offers professional servicing and rapid complaint handling.

L

LGC s.r.o.

lgshop.cz

65

LGshop.cz is an authorized e-commerce retailer specializing in LG electronics and home appliances, primarily serving the Czech Republic market. The website offers a broad catalog of LG products including TVs, audio systems, home appliances, and accessories, with a focus on express delivery and customer service. The company behind the site is LGC s.r.o., indicating a medium-sized retail operation with a clear brand alignment to LG. Technically, the website employs modern web technologies such as jQuery, Google Tag Manager, Microsoft Clarity, and CookieHub for analytics, marketing, and compliance. The site is well-structured with good SEO practices and mobile optimization, providing a positive user experience.

O

Online-textil.cz

online-textil.cz

60

Online-textil.cz is a well-established Czech e-commerce platform specializing in promotional textiles, including branded clothing such as t-shirts, polos, hoodies, and workwear. Founded in 2012, it serves both B2B and individual customers primarily in the Czech Republic and the broader EU market. The website offers a broad product catalog with detailed categories and supports bulk orders with custom printing and embroidery services. The company positions itself as one of the largest players in the Czech promotional textile market, emphasizing fast delivery and extensive stock availability. Technically, the website employs modern web technologies including jQuery, Owl Carousel, Google Tag Manager, and a cookie consent solution from cookie-script.com. It uses Cloudflare DNS services and enforces HTTPS, ensuring secure connections. The site is mobile-optimized with good navigation and SEO practices, though it appears to be custom-built without a common CMS. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site benefits from HTTPS and standard security practices but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, Online-textil.cz presents a professional and trustworthy e-commerce presence with a solid market position. To enhance trust and compliance, it should publish comprehensive privacy and terms of service documents and improve transparency around security policies and incident response.

A

Auto Hotárek s.r.o.

autohotarek.cz

59

Auto Hotárek s.r.o. operates a specialized e-commerce platform and physical retail stores in the Czech Republic, focusing on automotive accessories and parts. The company targets vehicle owners seeking tailored and universal car accessories, offering a broad product catalog and expert services. Their market position is that of a trusted specialist with a strong local presence, supported by recognized certifications such as the Heureka Shop of the Year awards. Technically, the website employs modern JavaScript frameworks and integrates multiple marketing and analytics tools, including Google Tag Manager, Facebook SDK, and Adform, hosted behind Cloudflare infrastructure. The site is mobile-optimized with good SEO and accessibility features. Security posture is solid with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy compliance is addressed with cookie consent and detailed privacy policies, supporting GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security policies, and monitoring domain registration status to ensure continued legitimacy.

G

Goldea.cz

goldea.cz

59

Goldea.cz is a Czech-based e-commerce retailer specializing in high-quality home textiles including bedding, curtains, towels, and table linens. The company emphasizes Czech craftsmanship, custom tailoring, and natural materials, positioning itself as a trusted brand with a strong customer satisfaction record. Founded in 2016 and operated by MIONET s. r. o., Goldea.cz serves primarily the Czech market with localized content and regional language support. The website is professionally designed with excellent content quality and user experience, supporting clear navigation and mobile responsiveness. Technically, the site employs modern JavaScript frameworks and integrates multiple analytics and marketing tools with a compliant cookie consent mechanism. Security posture is good with HTTPS and error monitoring, though some HTTP security headers and explicit security policies are absent. The WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective but does not detract from the professional presentation and business legitimacy evident on the site. Overall, Goldea.cz is a well-established retail platform with solid digital maturity and privacy compliance, though domain registration transparency should be improved.

I

ICC NTA, LLC

icc-nta.org

58

ICC NTA, LLC operates as a specialized third-party service provider focusing on building product safety, certification, plan review, and off-site construction services. As a subsidiary of the International Code Council, it holds a strong market position within the building and construction industry, offering accredited testing and inspection services to manufacturers and regulatory bodies. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and performance optimizations to serve its target audience effectively. Security posture is robust with HTTPS and security headers implemented, though privacy compliance could be enhanced by adding explicit cookie consent mechanisms and security policies. Overall, ICC NTA demonstrates a mature digital infrastructure aligned with its business objectives and industry standards.

Odoo.sh is the official cloud platform for hosting and developing Odoo ERP applications, offering a comprehensive PaaS and IaaS solution tightly integrated with GitHub. The platform targets developers and businesses seeking streamlined deployment, staging, and production environments with automated testing and backup capabilities. The website demonstrates a high level of professionalism with excellent design, clear navigation, and consistent branding aligned with the Odoo ecosystem. Technically, the site leverages modern web technologies including the Odoo framework, Bootstrap, and integrates Google Analytics and Tag Manager for user insights. Security posture is solid with HTTPS and CSRF protections, though it lacks explicit security headers and detailed privacy or cookie policies, which are areas for improvement. WHOIS data is unavailable due to privacy protection, which is typical for commercial SaaS platforms and does not detract from the site's legitimacy. Overall, the site is trustworthy, well-structured, and serves its target audience effectively.

A

Alternatiba

alternatiba.eu

58

Alternatiba is a well-established French non-profit movement focused on climate action and social justice, active since 2013. The organization operates a network of over 110 local groups and multiple mobilization bases, positioning itself as a key player in climate activism in France and Europe. Their website reflects a strong community engagement model, relying on donations, volunteer participation, and educational campaigns. Technically, the site is built on WordPress with a modern plugin ecosystem, including security and performance enhancements such as reCAPTCHA and lazy loading. Hosting is provided by Infomaniak, a reputable provider. Security posture is solid with HTTPS enforced and anti-spam measures, though explicit security headers could be improved. Privacy compliance is basic but present, with a privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-optimized for its audience.

A

Autonomie Paris Saint Jacques

apsj.paris

56

Autonomie Paris Saint Jacques (APSJ) is a non-profit association operating as a resource center focused on issues related to aging and autonomy in the central arrondissements of Paris (1st to 6th). The organization supports elderly individuals, their caregivers, and healthcare professionals by providing evaluation services, orientation, training, and innovative local projects to combat isolation and improve care. APSJ is well-positioned locally with partnerships including regional health agencies and retirement insurance bodies. The website reflects a mature digital presence built on WordPress with modern plugins and accessibility features, offering clear navigation and comprehensive content relevant to its audience. Security posture is solid with HTTPS, domain transfer protections, and reCAPTCHA usage, though DNSSEC is not enabled and security headers are absent. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Contact information is transparent and includes multiple channels. Overall, APSJ demonstrates a professional and trustworthy online presence aligned with its mission and audience.

É

Épices Énergie

epices-energie.fr

55

Épices Énergie is a French company specializing in software solutions for the supervision and management of renewable energy installations, including photovoltaic, wind, and hydroelectric power plants. The company targets energy producers and operators seeking efficient tools to monitor and optimize their renewable energy assets. Their market position is that of a niche provider offering a comprehensive web and mobile platform tailored to the renewable energy sector. Key services include data centralization, real-time production monitoring, performance evaluation, maintenance management, and personalized customer support. Technically, the website employs modern web technologies such as Bootstrap 5, jQuery, FontAwesome 6 Pro, and Matomo analytics, indicating a mature digital infrastructure with responsive design and moderate performance. However, there is no explicit CMS detected, and hosting details are not disclosed. The site is well-structured with good navigation and content relevance, supporting a positive user experience. From a security standpoint, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is provided. The absence of WHOIS data limits domain trust assessment, though the presence of client logos and a LinkedIn profile adds credibility. Overall, Épices Énergie presents a professional and trustworthy online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen their risk posture and user confidence.

I

Inddigo

inddigo.com

56

Inddigo is a well-established French consulting and engineering firm specializing in ecological and energy transition services for public and private sectors. Founded in 1986, it employs over 400 professionals across 16 locations in France and the Caribbean. The company offers a broad range of services including consulting, engineering, training, and innovation to support sustainable development and complex territorial projects. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress with modern plugins such as Yoast SEO and WP Rocket for performance. Security posture is good with HTTPS and some security headers, but lacks explicit privacy, cookie, and incident response policies visible on the site. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and business information appear credible and trustworthy. Overall, the site demonstrates a mature digital presence but would benefit from enhanced transparency in privacy and security policies.

T

Transition Citoyenne

transitioncitoyenne.org

58

Transition Citoyenne operates a French-language website focused on providing comprehensive comparisons and guides for offshore sports betting sites accessible to French players in 2025. The site positions itself as a specialist resource offering detailed information on bonuses, payment methods including cryptocurrencies, and legal considerations for betting outside the French ANJ regulatory framework. Technically, the site is built on WordPress with common SEO and geotargeting plugins, hosted behind Cloudflare DNS, and uses modern web technologies such as jQuery and FontAwesome. The website is mobile-optimized and presents content in a clear, structured manner with good SEO metadata and JSON-LD structured data. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and formal policies such as privacy or cookie consent. No direct company contact information or incident response channels are provided, which limits transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security disclosures.

F

FAIR

finance-fair.org

64

FAIR is a French non-profit collective dedicated to promoting social impact finance through education, certification (Finansol label), and community engagement. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility. It integrates multiple analytics tools including Matomo, Google Tag Manager, and Microsoft Clarity, alongside a robust cookie consent mechanism. Security posture is good with HTTPS enforced, though some security headers and policies could be improved. WHOIS data is unavailable, but the website's content and social presence strongly indicate legitimacy. Overall, FAIR presents a trustworthy and authoritative resource in the social finance sector.

R

REScoop.eu

rescoop.eu

42

REScoop.eu is a well-established European federation representing over 2,500 energy communities and 2 million citizens engaged in the energy transition. The organization operates primarily in the energy sector, focusing on cooperative principles and community-driven renewable energy projects. Their services include project support, networking, training, advocacy, financing, and coaching, positioning them as a key player in the European community energy landscape. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their audience. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Mailchimp for newsletter management and Google Tag Manager for analytics. The site demonstrates good performance and accessibility standards, though explicit CMS or hosting details are not disclosed. Privacy compliance is robust with clear privacy and cookie policies and an active consent mechanism. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable due to privacy protection, which is common and justified for a non-profit federation in Europe. Overall, the site presents a low risk profile with a strong trustworthiness rating. Strategically, REScoop.eu should consider enhancing their security posture by publishing security policies, implementing security headers, and providing vulnerability disclosure information to further build trust and compliance. Continued focus on privacy and transparent data practices will support their community-oriented mission and regulatory adherence.

F

Fondation la France s’engage

fondationlafrancesengage.org

63

Fondation la France s’engage is a French non-profit foundation dedicated to identifying and promoting bold social and environmental innovations. It supports impactful projects in education, health, inclusion, equality, ecology, and digital sectors through a national contest and ongoing accompaniment. The foundation has established a strong market position in France with over 200 supported structures and significant investment. Technically, the website is built on WordPress with modern plugins and tools, hosted by OVH, and demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS and privacy-conscious analytics, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear business credibility and active social media presence.

L

Leader France

leaderfrance.fr

52

Leader France is a national federation dedicated to supporting rural territories engaged in the LEADER approach for rural development in France and Europe. The organization acts as a coordinating body for local action groups, organizes events such as congresses, and publishes reports and project collections to promote rural development initiatives. The website reflects a professional and consistent brand presence targeting stakeholders in rural development, including public and private partners. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics for tracking. Hosting is provided by OVH, a reputable provider, and the domain is well-established since 2007. Security posture is good with HTTPS enforced and security headers present, though there is room for improvement in privacy compliance and incident response transparency. Overall, the website is trustworthy and serves its audience effectively.

The Fondation Charles Léopold Mayer pour le Progrès humain (FPH) is a Swiss non-profit foundation established in 1982, dedicated to supporting civil society organizations advocating for social and ecological transition. Funded by the estate of Charles Léopold Mayer, the foundation operates with a long-term vision to promote participatory, fair, and sustainable societal development. The website presents clear information about the foundation's history, aims, and governance, targeting philanthropic partners and civil society actors. Technically, the website is built using the SPIP CMS with custom CSS and JavaScript, including Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no explicit security headers or incident response policies are visible, and cookie consent mechanisms are absent, which could be improved for better GDPR compliance. Overall, the security posture is moderate with room for enhancement. The domain WHOIS data aligns well with the website content, showing a consistent and legitimate registration for a Swiss foundation. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

C

Collectif pour une Transition Citoyenne

transition-citoyenne.org

48

Collectif pour une Transition Citoyenne is a French non-profit coalition established in 2016, uniting 34 organizations to promote ecological, social justice, and democratic transitions at local and national levels. The website serves as an information hub and campaign platform, featuring initiatives such as 'Mairie-Me', 'Fête des Possibles', and 'Transiscope'. It targets citizens, volunteers, members, and partners interested in social and ecological activism. The organization positions itself as a significant player in the French non-profit sector focused on citizen engagement and advocacy. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Complianz GDPR for SEO and privacy compliance. Hosting is provided by Scaleway SAS, and the site uses Matomo analytics configured to respect user privacy. The site demonstrates good mobile optimization, clear navigation, and professional design, though accessibility features are basic. Performance is moderate, with room for improvement. From a security perspective, the site uses HTTPS and a cookie consent mechanism, but lacks DNSSEC and visible HTTP security headers in the provided data. There is no published security policy or incident response information. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. No contact emails or phone numbers are explicitly listed, which could be improved for transparency. Overall, the website is trustworthy and professionally managed, with a solid business and technical foundation. Strategic improvements in security headers, DNSSEC, and published security policies would enhance its security posture and trustworthiness further.

E

Energie Solidaire

mobilisation-energie-solidaire.org

57

Energie Solidaire is a French non-profit organization dedicated to combating energy poverty through solidarity campaigns. Their website serves primarily as a donation landing page, encouraging visitors to contribute financially to support their cause. The organization appears to be small-sized and founded in 2017, with a focused mission in the energy sector. The website uses Joomla CMS with the Quix framework and common web technologies such as jQuery, Bootstrap, and Font Awesome. Hosting is provided by OVH with DNS managed via Cloudflare. The site is accessible, mobile-optimized, and uses HTTPS, but lacks comprehensive privacy and cookie policies, as well as explicit contact information on the landing page.

S

SNS Security

sns-security.fr

76

SNS Security is a French cybersecurity service company established in 2002, specializing in providing technical and technological security solutions. The company targets businesses and organizations seeking cybersecurity expertise and positions itself as a recognized service provider with solid technical know-how. The website is professionally designed, primarily in French, and offers clear information about the company's services and privacy practices. Technically, the site runs on WordPress with integrations such as Google Tag Manager, Cookiebot for cookie consent management, and HubSpot for marketing and analytics, indicating a mature digital infrastructure. Security-wise, the website enforces HTTPS, uses secure cookies, and implements a comprehensive cookie consent mechanism, although it lacks explicit security policy and incident response contact information. Overall, the site demonstrates good security hygiene and privacy compliance but could improve transparency by publishing terms of service and security policies. The domain's WHOIS data confirms a long-standing registration consistent with the company's business claims, enhancing trustworthiness.

U

Urbense

urbense.fr

51

Urbense is a Paris-based company specializing in urban planning, architecture, real estate development, and engineering consulting. The company operates through multiple subsidiaries, each focusing on specific aspects such as urban development, architecture, and engineering. The website presents a professional image with clear descriptions of services and a focus on quality and expertise. The target audience includes urban planners, real estate developers, public sector entities, and architects. The business model is service-oriented, providing consulting and project management across various sectors including offices, hospitality, housing, commerce, schools, and public facilities. Technically, the website is built on WordPress and uses modern web technologies including Modernizr and Google Analytics. The site is mobile optimized with good design quality and navigation clarity. Performance is moderate, and SEO is basic but adequate. Security posture is good with HTTPS enforced and no visible vulnerabilities, although security headers are missing and no explicit security policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. The WHOIS data is missing, which raises concerns about domain registration legitimacy. However, the professional presentation, multiple related company sites, and social media presence support the business credibility. No adult or questionable content is present, making the site safe for general audiences. Overall, the website scores well on business credibility and security but should improve privacy compliance and domain registration transparency.

T

Tomáš Korec

selenagrill-odtoma.cz

57

The website represents a small family-run catering business based in Jihlava, Czech Republic, specializing in grilled meats and whole pig roasting services for events such as weddings, parties, and corporate gatherings. The company emphasizes quality and tradition, offering a full-service catering experience including delivery, grilling, serving, and cleanup. The business targets local and regional customers primarily within the Vysočina region and Prague. The website content is well-structured, visually consistent, and provides clear contact information and social media links, supporting customer engagement and trust. Technically, the website is built on the Webnode CMS platform, leveraging AWS Cloudfront CDN for content delivery and YouTube for embedded video content. The site is mobile-optimized with good performance and basic accessibility features. SEO is basic but sufficient for a small business. Security is adequate with HTTPS enforced and a cookie consent banner implemented; however, the absence of security headers and privacy policy pages indicates room for improvement in compliance and security posture. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The site lacks formal security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data is unavailable, which reduces domain legitimacy confidence but does not necessarily indicate malicious intent given the business nature. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved privacy and security documentation. Strategically, the business should focus on publishing privacy and terms of service policies, implementing security headers, and establishing a vulnerability disclosure process to enhance compliance and customer trust. These steps will also improve the website's security posture and regulatory alignment, particularly with GDPR requirements.

D

Delalande Pêche

delalande-peche.fr

50

Delalande Pêche is a well-established French manufacturer and retailer specializing in soft fishing lures and accessories for both freshwater and saltwater fishing. Founded in 1979, the company has built a strong market presence with a distribution network of approximately 900 stores domestically and internationally. The website serves as both an e-commerce platform and an educational resource, featuring a comprehensive blog and product catalog. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for SEO and GDPR compliance. Hosting is provided by o2switch, a reputable French hosting provider, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant, but incident response and vulnerability disclosure information are absent. Overall, the website is professional, trustworthy, and well-aligned with the business's offline reputation.

K

KPMG Česká republika, s.r.o.

kpmg-eventy.cz

60

KPMG Česká republika, s.r.o. operates a professional website dedicated to conferences, seminars, and training events primarily in finance, tax, law, and HR sectors. The site serves as an event portal for KPMG's Czech branch, a subsidiary of the global KPMG International Limited. The business model focuses on professional services and educational offerings targeting corporate clients and professionals in the Czech Republic. The website content is well-structured, professionally branded, and provides clear event information and links to related KPMG resources. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and LinkedIn Insight Tag, alongside a cookie consent management system ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details are explicitly detectable. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is due to CZ domain registry privacy policies and does not detract from the site's legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen the security posture and user trust.

V

Vorwerk

recipecommunity.co.uk

64

Cookidoo® is the official Thermomix® recipe platform operated under the Vorwerk brand, offering a comprehensive digital service for Thermomix® users in the UK. The platform provides thousands of recipes, meal planning tools, shopping list management, and cooking tutorials, positioning itself as a leading culinary resource for its target audience. The business model is subscription-based, focusing on delivering value through curated and user-friendly content. Technically, the website employs modern web technologies including custom web components, Algolia search, and a cookie consent mechanism via OneTrust, ensuring a good user experience across devices with solid SEO and accessibility features. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security headers and policies are not prominently published. Privacy compliance is partially addressed through cookie consent but lacks visible privacy and terms of service documentation on the analyzed page. The domain registration is consistent and legitimate, supporting the platform's credibility. Overall, the website is professional, trustworthy, and well-positioned in its market segment.

V

Vorwerk Italia s.a.s. di Vorwerk Management s.r.l.

ricettario-bimby.it

50

Ricettario-bimby.it is the official Italian community platform for Bimby® users, operated by Vorwerk Italia s.a.s. di Vorwerk Management s.r.l. It offers a rich repository of over 27,000 recipes, user forums, and integration with the Cookidoo® platform for seamless recipe import to Bimby® TM7 devices. The website targets Italian-speaking cooking enthusiasts and Bimby® customers, positioning itself as a trusted community hub within the Vorwerk ecosystem. Technically, the site employs modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a responsive design optimized for mobile devices. Security is well implemented with HTTPS, security headers, and secure login mechanisms, although there is room for improvement in publishing explicit security policies and vulnerability disclosures. Privacy compliance is strong, featuring cookie consent banners and a comprehensive privacy policy. Overall, the site demonstrates a high level of professionalism, trustworthiness, and user engagement.

P

Przepisownia

przepisownia.pl

53

Przepisownia.pl is a Polish community-driven recipe portal officially associated with Thermomix, offering a large collection of user-submitted recipes and a forum for Thermomix enthusiasts. The platform integrates with Cookidoo®, allowing users to import recipes directly to their Thermomix devices. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript libraries, responsive design, and asynchronous loading techniques to enhance user experience. Security posture is solid with HTTPS enforced and secure login forms, though some security headers are missing and privacy policy visibility is limited. Overall, the site is trustworthy and professionally maintained but could improve transparency and compliance documentation. Strategic recommendations include publishing clear privacy and terms policies, enhancing security headers, and adding vulnerability disclosure mechanisms.

V

Vorwerk España

recetario.es

52

Recetario.es is a Spanish-language community recipe platform closely associated with Vorwerk España and the Thermomix® brand. It offers a large collection of user-submitted and official recipes, enabling users to search, rate, and comment on recipes. The platform integrates with the official Cookidoo® service, allowing users to import recipes directly to their Thermomix® devices. The website targets cooking enthusiasts and Thermomix® users primarily in Spain. Technically, the site uses modern web technologies including jQuery, Bootstrap, and lazy loading for images, with Google Tag Manager and Facebook SDK for analytics and social integration. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy or cookie policies. WHOIS data is unavailable due to Red.es restrictions, limiting domain legitimacy verification. Overall, the site is professional, trustworthy, and safe for general audiences.

V

Vorwerk

espace-recettes.fr

44

The website espace-recettes.fr serves as the official French platform for Thermomix recipes, offering a large database of over 29,000 recipes and fostering a community of Thermomix users. It is closely integrated with the Thermomix ecosystem, including the Cookidoo® platform, and is branded under Vorwerk, the parent company. The site targets French-speaking cooking enthusiasts and Thermomix owners, providing recipe search, user forums, and product information. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and lazy loading, with integration of Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is used, but explicit security headers are not visible in the provided data. Privacy and cookie policies are present and appear GDPR compliant, with consent mechanisms implemented. No WHOIS data was found, which slightly reduces trust but the official branding and domain context support legitimacy. Overall, the site is a well-maintained community platform with moderate to good security posture and compliance.

V

Vorwerk

rezeptwelt.de

50

Rezeptwelt.de is the official community platform for Thermomix users operated by Vorwerk, offering a rich collection of over 65,000 recipes, user forums, and interactive features. The platform targets German-speaking Thermomix owners and cooking enthusiasts, providing recipe search, sharing, and community engagement tightly integrated with the Thermomix ecosystem and Cookidoo service. Technically, the site leverages modern JavaScript libraries, AWS hosting, and cookie consent management via OneTrust, reflecting a mature digital infrastructure. Security posture is moderate with HTTPS usage and consent mechanisms but lacks explicit security headers and published security policies. Privacy compliance is basic, with cookie consent present but no visible privacy policy or terms of service in the provided content. Overall, the site is professional, trustworthy, and well-branded, serving a large user base with consistent content quality and good user experience.

S

Smart Tribune

smart-tribune.com

64

Smart Tribune is a French technology company specializing in AI-powered knowledge management and customer support solutions for large enterprises. Their platform offers a suite of services including dynamic FAQs, intelligent chatbots, knowledge bases for advisors, AI copilots, and analytics dashboards. The website is professionally designed, multilingual, and targets enterprise clients with a focus on transforming corporate knowledge into instant responses. The company demonstrates a strong market position with notable clients and positive user ratings. Technically, the website is built on Webflow with integrations for analytics and cookie consent management, showing a moderate to good level of digital maturity. Security posture is generally good with HTTPS and consent mechanisms in place, but lacks explicit security headers and published privacy or terms policies. Overall, the website is trustworthy and professional, though improvements in transparency and security best practices are recommended.

S

Somfy

somfypro.nl

67

Somfypro.nl is a professional B2B website serving the Dutch market with automation products such as motors, controls, sensors, and accessories focused on energy-efficient and smart home solutions. The site targets professionals and offers product catalogs, training, and support services. The technical infrastructure is modern, leveraging React and Front-Commerce frameworks, with integrations like Algolia for search and Google Maps API. The website is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS and no exposed sensitive data, though explicit security headers and incident response policies are absent. WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website presents a trustworthy and professional digital presence for Somfy's B2B operations in the Netherlands.