Security Directory

A

ABF, a.s.

veletrhkosmetiky.cz

50

The website veletrhkosmetiky.cz represents a professional event organizer, ABF, a.s., specializing in biannual beauty trade fairs in the Czech Republic. The site targets beauty professionals, exhibitors, and visitors interested in cosmetics, hairdressing, nail design, and foot care. It offers comprehensive event information, exhibitor catalogs, and professional competition details, positioning itself as a leading organizer in the beauty industry within the region. Technically, the site is built on WordPress with modern libraries and plugins, including Google Tag Manager and Yoast SEO, ensuring good SEO and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with room for improvement in security best practices and accessibility.

M

Michal Strouhal

licker.cz

40

Licker.cz is a small Czech graphic design studio operated by Michal Strouhal, offering a range of creative services including graphic design, web design, printing materials, and domain registration with hosting. The company emphasizes personalized and detail-oriented design work, targeting clients primarily in the Hradec Králové region. The website is professionally designed with a clear structure and good content quality, supporting the business's local presence and service offerings. Technically, the website uses standard web technologies such as Bootstrap, jQuery, and Google Fonts, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS or analytics tools, and performance is moderate. Accessibility is basic but functional, and SEO practices appear adequate based on meta tags and content structure. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and no privacy or cookie policies are present, indicating compliance gaps with GDPR and modern privacy standards. The WHOIS data is unavailable, which reduces domain trustworthiness and complicates legitimacy verification. No forms or tracking scripts were detected, minimizing data collection risks but also limiting user engagement features. Overall, the website presents a legitimate small business with good content and design quality but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trust and regulatory adherence.

I

Ing. Jakub Míšek

jakubmisek.cz

63

Jakub Míšek is a seasoned PHP developer specializing in custom e-commerce solutions using the Nette framework, with over 15 years of experience. The website presents a professional portfolio targeting businesses seeking scalable and tailored e-shop development, emphasizing reliability, advanced functionality, and long-term support. The business operates as a sole proprietorship based in the Czech Republic, with clear contact and billing information provided. Technically, the site uses modern PHP technologies and frameworks, though hosting details are not disclosed. The website is well-designed, mobile-optimized, and provides clear navigation and client references, enhancing trust and credibility. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and privacy compliance documentation. No forms or tracking scripts are present, indicating minimal data collection and user tracking. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but the professional presentation and detailed business info mitigate concerns. Overall, the site is a strong representation of a small, specialized software development business with room for improvement in privacy and security policy transparency.

The website www.petrmalec.cz represents an SEO consulting service currently under maintenance, as indicated by the placeholder page stating a relaunch date of September 10, 2025. The business appears to be a small-scale SEO consultancy targeting a general audience in the Czech Republic. The site uses WordPress CMS with jQuery and Open Sans font, reflecting a basic but modern technical infrastructure. However, the site content is minimal, lacking detailed business information, contact details, or policies. Security posture is moderate with HTTPS enabled but missing critical security headers and privacy compliance elements. The absence of WHOIS data significantly impacts trust and legitimacy assessment. Overall, the site requires improvements in transparency, security, and content richness to enhance credibility and user trust.

N

Napovime.cz

napovime.cz

50

Napovime.cz is a Czech technology-focused informational portal specializing in artificial intelligence, automation, and robotics. Founded in 2019, it provides educational articles, practical how-to guides, and analyses of the latest trends in digital technologies. The site targets a general audience interested in technology and practical knowledge, positioning itself as a niche content provider in the Czech market. The business model centers on content publishing supported by advertising and affiliate marketing. Technically, the site is built on WordPress, leveraging multiple plugins for content management, social sharing, and analytics. It uses Google Fonts, Google Analytics, and Google Adsense, hosted on a WEDOS infrastructure. The website demonstrates good SEO practices, mobile optimization, and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR consent dialogs. Contact information and company registration details are clearly presented, enhancing business credibility. Overall, the site is professional, trustworthy, and well-maintained.

G

General Code

generalcode.com

59

General Code is a company specializing in municipal code solutions that enable integration of ordinances, zoning codes, and building codes with various systems. The website positions the company as a forward-thinking provider targeting municipalities and government entities. The technical infrastructure is based on WordPress CMS with modern SEO and analytics tools such as Yoast SEO, Google Analytics, Microsoft Clarity, and Google Tag Manager. The website is well-optimized for mobile and has good design and navigation quality. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is missing, which raises concerns about domain registration transparency. Overall, the website is professional and functional but would benefit from improved privacy disclosures and security best practices.

I

International Code Council

iccsafe.org

60

The International Code Council (ICC) is a prominent non-profit organization dedicated to building safety solutions, codes and standards development, professional development, accreditation, and consulting services. The website reflects ICC's leadership position in the building safety sector, targeting professionals, members, and industry stakeholders. The business model is membership-based, offering a broad range of services including training, certification, and innovation initiatives. ICC maintains a strong market presence with multiple subsidiaries and partner organizations supporting its mission. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, Facebook SDK, and New Relic monitoring. The site demonstrates good performance, mobile optimization, and accessibility features. SEO is well implemented with Yoast SEO plugin and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS, uses CSRF tokens and math challenge CAPTCHAs on forms, and integrates security monitoring tools. However, explicit security headers like CSP and X-Frame-Options are not clearly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, supporting ICC's authoritative role. The lack of WHOIS data limits domain registration trust analysis but the site content and branding strongly support legitimacy. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving incident response visibility.

J

Jiří Káš

handpanista.cz

55

The website handpanista.cz is a professionally designed personal business site dedicated to the handpan musical instrument activities of Jiří Káš. It focuses on the production of NEO handpans, handpan courses, workshops, and performances. The site targets handpan enthusiasts and musicians interested in learning and purchasing handpans. The business operates in a niche artisanal musical instrument sector within the Czech Republic and is relatively small in scale, founded in 2019. Technically, the site is built on WordPress 6.8.3 with a custom theme and hosted on cesky-hosting.eu. The site shows good mobile optimization and SEO practices but lacks some advanced accessibility features. Performance is moderate, and the site uses modern web technologies including JavaScript and SVG icons. From a security perspective, HTTPS is enabled ensuring encrypted communication. However, the site lacks important security headers such as Content-Security-Policy and X-Frame-Options, which could improve its security posture. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the site is safe with no adult or questionable content detected. The domain registration data is consistent with the website content and business claims, supporting legitimacy. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clear contact information to enhance compliance and trust.

The website jirikas.com serves as a personal CV and business showcase for Jiří Káš, highlighting his professional engagements in advertising, photography, and handpan music and manufacturing. The site presents a niche personal brand with diversified activities including managing an advertising company (Webintrek s.r.o.), collaborations with various media outlets as a photographer, and handpan performances, workshops, and manufacturing under the NEO handpan brand. The target audience includes general visitors interested in these fields. Technically, the site is built on WordPress 6.8.3 with common libraries such as jQuery and Font Awesome, hosted likely on Czech hosting providers. The site is moderately performant, mobile-optimized, and has basic SEO and accessibility features.

J

Jiří Káš

handpan-kurz.cz

55

The website handpan-kurz.cz is a small-scale educational platform focused on teaching handpan music, primarily through in-person courses and workshops led by Jiří Káš, a recognized handpan player in the Czech Republic. The site offers rich content including detailed explanations, images, and links to related handpan resources and artists, targeting individuals interested in learning and mastering the handpan instrument. Technically, the site is built on WordPress using the Donovan theme, hosted by a Czech hosting provider, and employs modern web technologies such as JavaScript and SVG icons. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks security headers and formal privacy or cookie policies, which limits its compliance posture. No contact emails or phone numbers are explicitly provided, which may affect user trust and business credibility. Overall, the site is legitimate and consistent with its domain registration data, but improvements in privacy compliance and security best practices are recommended.

B

Bici.cz

bici.cz

55

Bici.cz is a Czech Republic based e-commerce and retail business specializing in drums, percussion instruments, and related musical accessories. Established since 1996, it serves professional, amateur, and beginner musicians with a broad product catalog and a physical store located in Prague. The website demonstrates a mature digital presence with modern web technologies and integration of popular analytics and marketing tools such as Google Analytics and Facebook Pixel. However, the absence of WHOIS data and privacy/cookie policies indicates areas for improvement in transparency and compliance. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit security policies. Overall, the business appears legitimate and well-positioned in its niche, but should enhance privacy compliance and security disclosures to strengthen trust and regulatory adherence.

H

Handpan s.r.o.

handpan.cz

55

Handpan s.r.o., operating the website handpan.cz, is a Czech Republic based small business specializing in the manufacturing, sale, and education of handpan musical instruments. The company offers handpan production under the NEO handpan brand, organizes workshops and courses primarily for beginners and enthusiasts, and provides rich content about handpan history and playing techniques. The website reflects a niche market position with a focus on quality and community engagement. Technically, the site is built on WordPress with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. Contact information is limited but includes a phone number and physical address in Říčany near Prague. Social media presence on Facebook and YouTube supports brand trust and outreach. Overall, the website is professional, content-rich, and trustworthy, though it would benefit from enhanced privacy compliance and security practices.

R

Real-Time Innovations, Inc.

rti.com

70

Real-Time Innovations, Inc. (RTI) is a leading software framework company specializing in distributed physical AI systems, serving industries such as aerospace & defense, medical technology, automotive, and robotics. Their flagship product, Connext DDS, is widely adopted in over 2,000 designs, positioning RTI as a market leader in middleware solutions for real-time data distribution. The website reflects a mature digital presence with professional design, clear business focus, and comprehensive content tailored to technical audiences. Technically, the site leverages HubSpot CMS and integrates multiple analytics and marketing tools, demonstrating digital maturity and marketing sophistication. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of a vulnerability disclosure page and WHOIS data transparency are noted gaps. Overall, RTI presents a trustworthy and professional online presence aligned with its business stature.

K

Konica Minolta Business Solutions Finland Oy

konicaminolta.com

61

Konica Minolta Business Solutions Finland Oy operates as a key regional branch of the global Konica Minolta group, providing advanced office printing, professional printing, and digital work automation solutions. The company targets business and organizational customers seeking modern, secure, and efficient technology solutions in printing, data analytics, and healthcare imaging. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with a large enterprise. Technically, the site leverages modern frameworks such as Next.js and React, integrates Google Maps and Usercentrics for consent management, and is hosted on a reliable CDN, ensuring good performance and mobile optimization. Security posture is robust with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business presence.

P

Pausch.com domain name may be for sale

pausch.com

55

The website www.pausch.com is a parked domain landing page indicating the domain is for sale. It provides a contact form for inquiries with data collection consent and Google reCAPTCHA protection. The site uses modern frontend technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics for tracking. However, the WHOIS data is unavailable, suggesting the domain may be unregistered or recently expired, which reduces trust and legitimacy. There is no business identity, contact emails, phone numbers, or physical addresses provided, limiting business credibility. The privacy policy is present but basic, and no cookie policy or terms of service pages are found. Security posture is moderate with HTTPS implied and reCAPTCHA in place, but lacks security headers and incident response information.

G

Grassrootz

grassrootz.com

49

Grassrootz is a small Australian-based company providing a SaaS platform focused on event fundraising and community engagement for non-profit organizations and event organizers. Their website is professionally designed using Squarespace, featuring clear navigation, social media integration, and modern web technologies such as Google Tag Manager and reCAPTCHA. The platform offers services including event ticketing, registrations, and integrations to support fundraising efforts. Technically, the site is well-implemented with HTTPS and HSTS enabled, indicating a strong security posture. However, the absence of WHOIS data and lack of explicit privacy and terms of service policies represent gaps in transparency and compliance. No direct contact information or security incident response details are provided, which could impact trust and user confidence.

A

American Society of Transplantation

myast.org

30

The American Society of Transplantation (AST) operates a professional membership website dedicated to advancing transplantation science, education, and patient care. The site serves a global audience of transplant professionals, including physicians, pharmacists, researchers, and patients. AST offers a comprehensive range of services including educational events, communities of practice, research grants, advocacy, and patient resources. The organization is well-established with a domain age of over 11 years and a consistent brand presence across multiple digital channels. Technically, the website is built on a modern stack with Craft CMS, uses Foundation CSS framework, and integrates multiple third-party services such as Google Tag Manager, Facebook Pixel, and Adzerk for advertising. The site is mobile optimized, accessible, and SEO friendly, providing a professional user experience. However, there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data. The lack of DNSSEC and security headers are notable gaps. No explicit security policies or incident response information is publicly available, which could be enhanced to improve trust and compliance. Privacy compliance is adequate with a clear privacy policy, but cookie consent is missing despite tracking technologies. Overall, the website is trustworthy, professional, and well-maintained with a strong focus on its healthcare and non-profit mission. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and enabling DNSSEC to strengthen the security posture and privacy compliance.

S

Somfy

somfyprojects.me

65

Somfy Projects is a specialized division of the Cross - Groupe Micropole, focusing on the manufacturing and automation of solar shading solutions for buildings. Their offerings include motors, building controls, and local control systems designed to improve energy efficiency and occupant comfort. The company targets building professionals and owners seeking dynamic solar shading solutions, positioning itself as a market leader in this niche. The website reflects a mature digital presence with multilingual support and regional sites, indicating a global footprint primarily focused in the Middle East and Europe. Technically, the website is built on a ColdFusion backend with modern JavaScript libraries and performance monitoring tools such as Boomerang and TagCommander. The site is hosted likely behind Akamai CDN, ensuring good performance and availability. The site is mobile optimized and SEO friendly, with structured data implemented for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses captcha on its contact forms to prevent spam. However, it lacks explicit security headers and a visible cookie consent mechanism, which are areas for improvement. The WHOIS data is unavailable due to privacy protection or query failure, but the website content and external references indicate a legitimate and professional business. Overall, Somfy Projects presents a solid business and technical profile with room for enhancement in privacy compliance and security best practices to further strengthen trust and regulatory adherence.

S

Somfy

somfypro.com.au

67

Somfy Pro Australia operates a professional B2B website offering smart shading and automation solutions, targeting installers, commercial partners, and professionals in the Australian market. The site provides comprehensive product information, technical resources, and partner programs, positioning Somfy as a key player in smart shading technology. The technical infrastructure is built on the Liferay CMS platform, integrating modern web technologies such as Google reCAPTCHA v3 for form security and Google Tag Manager for analytics. The website demonstrates good digital maturity with responsive design and structured navigation. Security posture is solid with HTTPS enforced and spam protection on forms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a legitimate and trustworthy business presence with a strong focus on professional services and customer support.

S

Somfy

somfypro.be

52

SomfyPro.be is a professional B2B website for Somfy, a company specializing in automation and smart home solutions primarily in the energy sector. The website targets professionals in Belgium and offers products such as motors, controls, sensors, and accessories, along with smart home and solar energy solutions. The site is well-structured, multilingual, and professionally designed, reflecting a mature digital presence. Technically, it leverages modern frameworks like React and Front-Commerce, integrates with services such as Algolia and Google Maps, and uses analytics tools like New Relic. Security posture is solid with HTTPS enforced, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. WHOIS data is restricted due to registry policy, but the website's professionalism and consistency support its legitimacy. Overall, the site presents a trustworthy and business-focused platform with room for minor security enhancements.

F

Figest B.V.

elektriskegardiner.dk

10

Elektriskegardiner.dk is a Danish e-commerce retailer specializing in electric curtains and smart home automation products. The company offers a range of motorized curtains with app control, free color samples, and free delivery, targeting consumers interested in smart home convenience and DIY installation. The website is built on Magento 2, leveraging modern web technologies and integrations such as Google Analytics, Facebook Pixel, and Trusted Shops for marketing and trust. The site demonstrates good content quality, clear navigation, and GDPR-compliant privacy and cookie policies with active consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA, though some security headers could be enhanced. WHOIS data is unavailable, likely due to privacy protection, which is common for small e-commerce businesses. Overall, the website is professional, trustworthy, and safe for general audiences.

S

Somfy

somfynordic.dk

10

Somfypro.dk is a professional B2B website serving the Danish market with a comprehensive catalog of smart home and automation products under the Somfy brand. The site targets professional installers and businesses, offering product information, ordering capabilities, and customer support. The technical infrastructure is modern, leveraging JavaScript frameworks such as React and Front-Commerce, with integrations including Algolia search and Google Maps API. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy and cookie policies are present and GDPR compliant, supporting trust and compliance. Overall, the website presents a professional and trustworthy digital presence aligned with Somfy's global brand.

Somfypro.fr is a professional B2B website operated by Somfy, a recognized leader in the home automation and energy efficiency sector, specializing in openings and closures for homes. The site offers a comprehensive product catalog, professional services, training, and support tailored to business customers. It targets professionals in France and related European markets, providing a robust ecosystem of services to support business growth and operational efficiency. Technically, the website employs modern web technologies including React and Front-Commerce, integrates advanced analytics and personalization tools such as Dynamic Yield and New Relic, and maintains good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. The absence of WHOIS data limits domain trust analysis but does not detract from the overall professional presentation and legitimacy of the site. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

The website www.emag.hu is currently inaccessible due to an AWS WAF Captcha challenge page that blocks normal content access. This prevents extraction of business, contact, privacy, or security policy information. The page only contains technical elements related to the Captcha challenge, including scripts and styles from AWS WAF and Akamai CDN. Due to this blocking, the website's technical infrastructure appears to use advanced security measures such as AWS WAF and Akamai CDN for content delivery and protection. However, the security posture cannot be fully assessed beyond the presence of the WAF challenge. No business or compliance information is visible, and no user interaction forms or metadata are present. Overall, the site is currently inaccessible for detailed analysis, resulting in a low AI score and limited insights.

(

(주)솜피

somfymall.com

60

Somfy Shop KR operates as a specialized e-commerce platform focused on motorized blinds, curtains, and smart home window covering solutions in South Korea. The company offers a broad product range including IoT-enabled blinds and remote controls, targeting tech-savvy consumers seeking home automation. The website is built on the Magento platform, leveraging modern JavaScript libraries and integrations such as Google Tag Manager and Naver Analytics, indicating a mature digital infrastructure. The site is well-structured, mobile-optimized, and provides comprehensive customer support information, including consulting services and multiple contact channels. Security posture is solid with HTTPS enforced and secure cookies, though some security headers could be improved. Privacy and cookie policies are present, supporting basic GDPR compliance, though no explicit advanced compliance frameworks are evident. The absence of WHOIS data for the domain is a notable anomaly that slightly detracts from overall trust but does not undermine the professional presentation and operational maturity of the site. Strategic partnerships with platforms like Naver Smartstore and Samsung SmartThings enhance market reach and product integration. Overall, the site presents a trustworthy and professional front for a medium-sized retail business in the smart home sector.

S

SIDO LYON

sido-lyon.com

63

SIDO LYON operates as a leading European event and showroom specializing in IoT, Artificial Intelligence, Robotics, and Extended Reality technologies. The website presents a professional and well-structured platform targeting industry professionals and companies interested in these advanced technology sectors. The business model centers around organizing and showcasing innovative technology solutions, positioning itself as a key player in the European technology event market. Technically, the website is built on WordPress CMS, leveraging popular plugins such as Contact Form 7 and Yoast SEO, alongside marketing and analytics tools including Google Tag Manager, Google Ads, and LiveChat. The site demonstrates good mobile optimization and SEO practices, with GDPR compliance implemented via the Didomi consent management platform. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS with strong SSL configuration and integrates GDPR consent mechanisms. However, the absence of explicit security headers and lack of published security policies or incident response contacts indicate areas for enhancement. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, although the active and professional website presence suggests a legitimate business operation. Overall, SIDO LYON presents a credible and professional digital presence with solid business positioning in the technology event sector. Strategic improvements in security transparency, domain registration verification, and contact information disclosure would further strengthen trust and compliance.

C

Cosa

cosavostra.com

30

Cosa is a French consulting agency specializing in strategy, communication, e-commerce, and digital marketing. The company positions itself as a creative and strategic partner helping businesses reveal their uniqueness through effective digital and e-commerce strategies. The website demonstrates a professional and modern digital presence with multimedia content, client showcases, and multiple contact channels including forms, email, phone, and social media. Technically, the site is built on WordPress with Gravity Forms and integrates Google services such as reCAPTCHA and Tag Manager, indicating a mature digital infrastructure. Security measures like HTTPS and CAPTCHA are implemented, but the absence of security headers and privacy/cookie policies highlight areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance and reputable client logos. Overall, the site is well-designed and functional but should address compliance and transparency gaps to enhance trust and security.

C

CS GROUP

c-ssystems.de

70

CS GROUP is a medium-sized European technology company specializing in the design, integration, and operation of critical information and communication systems tailored to clients' operational needs. The company operates primarily in strategic sectors such as defense, aerospace, space, transport, energy, industry 4.0, and finance & services. It is positioned as an agile and innovative player with a strong focus on delivering operational solutions and technological innovation. The website reflects a professional and consistent brand image, supported by active content updates and social media presence. The parent company is Sopra Steria, a major European tech player, which adds to its credibility. Technically, the website is built on WordPress with modern plugins and technologies including Yoast SEO, Slider Revolution, and Google Analytics. The site is mobile-optimized, uses HTTPS, and implements cookie consent mechanisms compliant with GDPR. Performance is moderate with good SEO and accessibility basics in place. However, some improvements can be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit published security policies, incident response contacts, and vulnerability disclosure information. No direct contact emails or phone numbers are found on the homepage, which may impact user trust. The WHOIS data is missing or unavailable, which raises concerns about domain transparency and trustworthiness despite the professional website content. Overall, CS GROUP presents a strong business and technical profile with room for improvement in transparency and security communication. The risk level is moderate with recommendations to enhance security policies, contact availability, and domain registration clarity.

A

ACIAH

aciah.xyz

58

ACIAH is a French non-profit organization dedicated to digital inclusion and accessibility, primarily targeting seniors, people with disabilities, and those less familiar with digital technology. They offer a simplified Linux system (ACIAH-Linux), workshops, personalized support, and educational resources to foster autonomy and digital literacy. The website is professionally designed, mobile-optimized, and uses a mature technology stack including SPIP CMS and Bootstrap. The hosting is provided by OVH, a reputable registrar, with domain registration consistent with the organization's founding date and mission. Security posture is moderate with HTTPS enabled but lacking advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy, content-rich, and focused on social good but could improve in privacy and security transparency.

T

Tice-education

tice-education.fr

62

Tice-Éducation is a French digital education portal providing free and independent resources on topics such as coding, AI, EdTech, and digital transformation in schools. The site targets educators, students, and parents interested in educational technology. Technically, it is built on Joomla CMS with modern frontend libraries and includes advertising managed by Revive Adserver. The website is well-structured, mobile-optimized, and includes a cookie consent mechanism, indicating a moderate level of privacy compliance. Security posture is good with HTTPS enabled, but lacks explicit security headers and published security policies. WHOIS data is not publicly available, suggesting privacy protection, which is reasonable for this type of site. Overall, the site is professional, trustworthy, and safe for general audiences.

I

INRAE

inrae.fr

64

INRAE is a prominent French public research institute specializing in agriculture, food, and environmental sciences. The website reflects a mature digital presence with comprehensive content targeting researchers, students, policymakers, and the general public. It offers extensive resources including research dossiers, events, and collaboration opportunities. The site is multilingual and well-branded with official government logos and certifications, reinforcing its authoritative position. Technically, the website is built on Drupal 10, leveraging modern web standards and responsive design to ensure accessibility and usability across devices. The presence of cookie consent mechanisms and privacy policies indicates attention to regulatory compliance, particularly GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers could be improved. The WHOIS data is unavailable due to AFNIC policies, but the domain is active and updated, consistent with a legitimate public institution. No suspicious or malicious indicators were found. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a government research entity.

T

Toulouse INP

inp-toulouse.fr

52

Toulouse INP is a reputable French higher education and research institution specializing in engineering education and scientific research. The website presents a comprehensive offering of academic programs, research initiatives, and innovation partnerships, targeting students, researchers, and industry collaborators. The institution maintains a strong regional presence with multiple partner schools and international collaborations. Technically, the website is built on the Ametys CMS platform, leveraging modern JavaScript libraries for an interactive user experience. It is mobile-optimized and includes privacy and cookie consent mechanisms aligned with GDPR requirements. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and WHOIS data transparency are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, supporting the institution's mission effectively.

A

Association CERESA

ceresa.fr

39

Association CERESA is a French non-profit organization established in 2005, specializing in autism support and education in the Occitanie region. It operates multiple specialized services including home education and care (SESSAD), educational units (UE), and professional training through its Pôle Formation. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation targeting parents, professionals, and stakeholders concerned with autism. The organization maintains a social media presence on Facebook and LinkedIn, enhancing its outreach and credibility. Technically, the site uses modern web technologies and includes Matomo analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit privacy policies. WHOIS data is missing from the AFNIC database, which slightly reduces trust but does not negate the legitimacy given the consistent business information and social presence. Overall, the site is safe, professional, and well-positioned within its niche.

I

IRIT (Institut de Recherche en Informatique de Toulouse)

irit.fr

52

IRIT (Institut de Recherche en Informatique de Toulouse) is a prominent academic research institute specializing in computer science and information technology, affiliated with Toulouse universities in France. The website serves as an informational and academic portal targeting researchers, students, and industry partners. It offers insights into research activities, educational programs, and collaborations. The site is well-structured, professionally designed using modern web technologies such as Bootstrap, and supports multilingual content in French and English. The technical infrastructure reflects a mature digital presence with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, though explicit security headers and policies are not clearly documented. Privacy compliance is lacking due to absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the domain registration and WHOIS data align well with the institution's academic nature, indicating high legitimacy and trustworthiness.

T

Outlook

toulouse-tech-transfer.com

50

The website at toulouse-tech-transfer.com/owa/auth/logon.aspx is a Microsoft Outlook Web Access (OWA) login portal hosted on a custom domain registered with OVH sas since 2011. The site primarily serves as an authentication gateway for email access and does not provide business descriptive content, privacy policies, or contact information on the login page. The domain registration is consistent and legitimate, hosted by a reputable provider, but the website content is minimal and focused solely on login functionality. Technically, the site uses standard Microsoft OWA web technologies including JavaScript, HTML5, and CSS, with some legacy ActiveX references for S/MIME controls. The hosting provider is OVH sas, and the domain is not DNSSEC enabled. The site lacks modern security headers and privacy compliance disclosures, which limits its security posture and GDPR compliance. Mobile optimization and SEO are basic, and no analytics or advertising scripts are detected. From a security perspective, the site uses HTTPS (implied by URL), employs POST method for login form submission with autocomplete disabled, and includes client-side scripts for password visibility toggling. However, the absence of security headers and privacy policies reduces the overall security maturity. No vulnerabilities or malware indicators are detected in the provided data. Overall, the website functions as a secure login portal but lacks comprehensive privacy, security, and business transparency features. Strategic improvements in security headers, privacy compliance, and user experience would enhance trust and compliance.

Polymny Studio is a small cooperative society based in Toulouse, France, specializing in digital learning platforms, DevOps, and Artificial Intelligence solutions tailored for educational institutions and learners. Their key offerings include the proprietary Polymny Studio application for educational video creation, e-learning platform design and deployment, and AI-powered learning tools. The company emphasizes ethical, sustainable, and sovereign digital solutions, leveraging open source technologies such as Moodle, Big Blue Button, and Nextcloud. Technically, the website uses modern technologies including Rust, Python, and JavaScript frameworks, hosted by Infomaniak Network SA, with a responsive design and good user experience. Security posture is moderate with HTTPS enabled but lacking DNSSEC and explicit security headers. Privacy compliance is partial, with privacy and terms located on a related domain but no cookie consent mechanism on the main site. Overall, the business credibility is strong due to academic partnerships and cooperative structure, though improvements in security and privacy policies are recommended.

Tetaneutral.net is a French non-profit association providing internet access and hosting services primarily in the Toulouse region. It operates a radio network to serve local and rural communities, especially in underserved 'zones blanches'. The organization emphasizes network neutrality, free software advocacy, and community education. It also supports IoT projects and contributes to open source software. The website reflects a community-driven, transparent, and educational mission with a modest but consistent technical infrastructure hosted by Scaleway SAS. The site uses lightweight technologies such as PureCSS and minimal JavaScript, focusing on content clarity and accessibility. Security posture is moderate but lacks advanced protections such as DNSSEC and security headers, and no explicit HTTPS information was found. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is strong given the domain age, transparency, and community trust signals. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices.

T

Theoma

theoma.fr

58

Theoma is a French financial services firm specializing in comprehensive back-office support for SMEs and business leaders, including accounting, financial management, HR, legal, digitalization, and CSR services. Founded in 2019, it positions itself as a trusted partner offering a 360° financial expertise to help clients manage their businesses with confidence. The website is professionally designed, mobile-optimized, and rich in content, showcasing client testimonials and detailed service descriptions that reinforce its market credibility. Technically, the site is built on Webflow with modern libraries such as jQuery and Finsweet CMS Slider, hosted on Webflow's platform, ensuring good performance and accessibility. Security posture is solid with HTTPS enabled and secure forms, though explicit security headers and privacy/cookie policies are missing, which are recommended for compliance and trust. WHOIS data is unavailable, which slightly reduces domain trust but does not detract from the professional presentation and business legitimacy. Overall, Theoma's digital presence reflects a mature, client-focused financial services provider with room for improvement in privacy compliance and security transparency.

S

Swile

swile.co

63

Swile is a French technology company specializing in employee engagement solutions through a smart card and app that consolidates various employee benefits such as meal vouchers, gift vouchers, mobility, and cultural checks. Positioned as an innovative leader in the French market, Swile targets both employees and employers with a B2B SaaS and payment services model. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, it leverages modern frameworks like React and Next.js, ensuring fast performance and good accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response information are absent. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website is trustworthy and well-aligned with the company's business claims.

T

Tourny Meyer

tournymeyer.fr

62

Tourny Meyer is a well-established French real estate consultancy specializing in commercial properties such as offices, warehouses, retail spaces, and investments. The company positions itself as a trusted advisor for professionals seeking to buy, rent, or invest in business real estate across multiple French regions. Their website reflects a mature digital presence with comprehensive service descriptions, multiple agency locations, and a professional design consistent with their market position. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and Google APIs for enhanced user experience and property search functionality. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie management. The absence of WHOIS data reduces transparency but is typical for commercial entities using privacy protection. Overall, the site is credible, professional, and well-suited for its target audience.

D

Digital Korner

digitalkorner.fr

58

Digital Korner is a specialized web agency based in Nantes, France, focusing on WordPress and No Code digital project development. The company combines the strengths of a traditional agency with the flexibility of independent experts, offering tailored services including website creation, redesign, web design, maintenance, SEO, and automation. Their active involvement in the WordPress community and plugin development positions them as a reputable player in the local digital services market. Technically, the website is built with modern frameworks such as Next.js and integrates scheduling tools like Cal.com, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS usage, but lacks explicit security headers and documented policies. The absence of WHOIS data reduces transparency but does not detract significantly from the professional presentation and trust signals on the site. Overall, the website is well-designed, mobile-optimized, and user-friendly, targeting businesses seeking expert digital solutions in the Nantes region.

P

padam - Relations media et Influence

padampadampadam.fr

55

padam is a French national and independent communication agency specializing in strategic communication, press relations, media relations, and influence strategies primarily serving clients in Nantes, Paris, and the Grand Ouest region. With 16 years of experience, the agency emphasizes pragmatic, clear, and measurable communication strategies to enhance visibility and reputation for businesses and organizations. The website is professionally designed, mobile-optimized, and SEO-friendly, reflecting a mature digital presence. Technically, the site uses WordPress with Elementor and integrates Google Analytics and Tag Manager for tracking, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data is missing, which slightly impacts trust but the overall professional presentation and active social media presence support legitimacy. Strategic recommendations include enhancing security headers and verifying domain registration details to strengthen trust.

M

M45T

m45t.com

45

M45T is a French event agency specializing in creative project management and technical services for cultural and event projects. The company offers personalized logistical support and equipment rental for sound, lighting, and video, targeting event organizers and cultural project managers. The website is built on WordPress using the Divi theme and hosted by Infomaniak Network SA, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

L

L’Atelier Transmédia

lateliertransmedia.com

46

L’Atelier Transmédia is a small audiovisual production company based in Nantes, France, specializing in media content creation and transmedia storytelling. The website reflects a professional service provider targeting businesses and individuals seeking audiovisual production services. The technical infrastructure is built on WordPress with Elementor and optimized using WP Rocket, indicating a moderate level of digital maturity. The site loads moderately fast and is mobile optimized, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but could improve in compliance and security transparency.

E

EPSA Innovation

sogedev.com

59

EPSA Innovation, formerly known as Sogedev, is a French consulting firm specializing in public funding advisory services for companies, particularly in innovation and research financing such as Crédit Impôt Recherche (CIR) and Crédit Impôt Innovation (CII). The company holds a strong market position as one of the top referenced experts by the Médiation des entreprises and operates multiple offices across France and internationally in Brazil. Their business model focuses on assisting companies in securing public financial aids and optimizing innovation-related tax credits. The website is professionally designed, content-rich, and targets French SMEs and larger enterprises seeking funding solutions. Technically, the website uses a modern but somewhat dated JavaScript stack including jQuery 1.9.1, Google Tag Manager, and Pardot for marketing automation. The site is mobile optimized with good SEO practices but lacks some advanced accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks explicit security headers and incident response documentation. Privacy compliance is basic with a privacy and cookie policy present, including consent mechanisms. The WHOIS data for the domain www.sogedev.com is missing, which raises some concerns about domain transparency and registration legitimacy. However, the website branding and content clearly indicate affiliation with EPSA, a known entity, mitigating some risk. No adult or questionable content is present, making the site safe for general audiences. Overall, EPSA Innovation presents a credible and professional online presence with moderate technical maturity and a good security baseline. The main risk area is the lack of WHOIS transparency and some missing security best practices. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving privacy compliance documentation.

uZine is a French independent web magazine focusing on topics such as independent web culture, cyber-economy, internet journalism, and social issues. The site provides articles, briefs, and forums aimed at a French-speaking audience interested in alternative media and social commentary. The business model appears to be content publishing with community participation and private member areas, positioning itself as a niche independent media outlet. Technically, the site is built on the SPIP CMS platform and uses older JavaScript libraries such as jQuery 1.x, with no evidence of modern performance or mobile optimization. Security posture is weak, with no HTTPS enforcement visible, outdated libraries, and no security headers detected. Privacy and cookie policies are absent, and no contact information is provided, which impacts trust and compliance. The WHOIS data is missing or indicates the domain is unregistered, which is a significant concern for legitimacy. Overall, the site is functional but lacks modern security, privacy, and technical standards, and the domain registration inconsistency poses a risk.