Security Directory

S

studierendenWERK BERLIN

studierendenbefragung.berlin

54

The website applicants.nqap.de hosts a student survey platform for studierendenWERK BERLIN, a public service organization focused on student welfare in Berlin. The platform collects anonymous feedback from students to improve services and offerings. The site is built with modern Angular technology and hosted on sysEleven infrastructure, indicating a mature technical setup. The content is well-structured, professional, and targeted specifically at students in Berlin, with clear instructions and contact points for data protection and press inquiries. Security posture is adequate with HTTPS implied, but lacks visible security headers and explicit incident response policies. Privacy compliance is supported by a clear privacy policy and data protection officer contact, though cookie consent mechanisms are absent. Overall, the site is trustworthy and professionally maintained, serving its educational and survey purpose effectively.

NETQUES . daten & diagnostik GmbH operates the NQAP platform, a GDPR-compliant online application management system designed primarily for public sector and educational institutions in Germany. The platform digitizes and automates application processes, reducing paperwork and accelerating decision-making. The company positions itself as a niche technology provider with a focus on secure, efficient, and user-friendly application workflows. The website is professionally designed, consistent in branding, and targets organizations requiring compliant digital application solutions. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and various UI enhancement libraries. Security is well considered with HTTPS, Content Security Policies, and secure form handling including CSRF tokens and honeypot anti-spam measures. However, some security headers could be improved, and no cookie consent mechanism was detected despite GDPR emphasis. The WHOIS data is unavailable due to registry restrictions common for .es domains, but the website content and business information indicate a legitimate and professional operation. Overall, the security posture is strong with good data protection practices and ISO-certified hosting claims. The absence of vulnerability disclosure and incident response contacts are areas for improvement. The website is safe for general audiences, with no adult or questionable content. The business credibility is high, supported by clear contact information and trust signals such as LinkedIn presence and ISO certifications. Strategically, NETQUES should enhance transparency by adding cookie consent, incident response information, and vulnerability disclosure policies. Improving accessibility and adding additional security headers would further strengthen their security posture and compliance. These steps will enhance trust and align with their GDPR-focused business model.

B

Trending - berlin.social

berlin.social

64

berlin.social is an independent Mastodon social networking instance focused on the Berlin community, providing a platform for local discussions and trending posts. It operates on the open-source Mastodon platform version 4.4.7, leveraging modern web technologies including React and ES modules. The site is accessible without WAF or security challenges and presents a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and cookie consent mechanisms. Privacy policy is present and GDPR compliance appears basic but adequate for the platform type. WHOIS data is unavailable due to TLD restrictions, but the site shows legitimacy through visible admin accounts and active user statistics.

The website my-mensa.de is currently non-functional, displaying only a minimal error message indicating a missing critical Magento application file (app/Mage.php). This suggests the site is either under maintenance, incomplete, or abandoned. No business information, metadata, or structured data is present to provide insight into the company's operations or services. The domain uses generic GoDaddy nameservers with minimal WHOIS data, lacking registrant details to verify legitimacy or business claims. Technically, the site lacks any detectable CMS functionality, security headers, or performance optimizations. Security posture is weak due to missing files and lack of HTTPS information. No privacy or cookie policies are found, indicating non-compliance with GDPR and related regulations. Overall, the site presents a poor professional image and low trustworthiness.

The website represents a small German software provider specializing in solutions for Studentenwerke, offering products such as inventory management, dormitory management, accounting, and cash register systems. The business positions itself as the leading provider in its niche within Germany. The technical infrastructure is basic, relying on legacy HTML standards and a CMS named 'web to date 8.0'. There is no evidence of modern SEO, accessibility, or mobile optimization. Security posture is weak due to lack of HTTPS and security headers, and no visible privacy or cookie consent mechanisms. Contact information and incident response details are absent, limiting trust and compliance. Overall, the site is functional but outdated and lacking in security and privacy best practices.

The website metz.fr serves as the official digital portal for the Ville de Metz, providing residents and visitors with comprehensive information about city services, events, public policies, and cultural activities. It holds a strong market position as the authoritative source for municipal information in Metz, France. The site targets a broad audience including local citizens, tourists, and stakeholders interested in city governance and community engagement. Key services include news updates, event calendars, administrative procedures, and social support information. Technically, the website employs modern JavaScript libraries such as Swiper.js for UI components, Matomo for privacy-conscious analytics, and Google Custom Search for site search functionality. The cookie consent mechanism is implemented using tarteaucitron.js with high privacy settings, reflecting good compliance with GDPR. The site is mobile-optimized and presents a professional design with clear navigation, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics without setting cookies by default. However, no explicit security headers were detected in the HTML content, and there is no published security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is good but could be improved by adding security headers and formalizing security policies. The overall risk assessment is low, with the site demonstrating strong legitimacy, consistent branding, and compliance with privacy regulations. Strategic recommendations include enhancing security transparency, improving accessibility, and publishing incident response and vulnerability disclosure information to further strengthen trust and security culture.

S

Application stopped - Scalingo

schlouk-map.com

48

The website www.schlouk-map.com is currently non-functional and displays a generic 'Application has been stopped' message hosted on the Scalingo platform. There is no accessible business content, metadata, or contact information available. The domain WHOIS query returned no registration data, indicating the domain is either unregistered or expired. Consequently, the website lacks any visible business presence or digital maturity. The technical infrastructure is minimal, with no scripts, analytics, or security headers detected. The security posture is poor due to the absence of HTTPS and security best practices. Overall, the site presents a high risk of being inactive or abandoned, with no compliance or trust indicators.

U

Université de Lorraine

univ-lorraine.fr

57

Université de Lorraine is a major French public university offering a wide range of scientific and academic disciplines. It serves students, researchers, and academic staff with comprehensive education and research services, emphasizing innovation and societal evolution. The university maintains a strong regional and international presence, supported by partnerships and a robust digital platform. Technically, the website is built on WordPress with modern plugins and themes, optimized for SEO, accessibility, and mobile responsiveness. Security posture is solid with HTTPS, security headers, and privacy compliance mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a professional and trustworthy institution with room for enhanced transparency in security governance.

N

Nouvelle Cuisine

nouvellecuisine.co

59

Nouvelle Cuisine is a French creative agency specializing in comprehensive communication services including branding, video production, web development, and interactive experiences. Positioned as a versatile and professional studio, it targets businesses seeking creative communication solutions. The website is built on WordPress, leveraging modern plugins such as Yoast SEO and Contact Form 7, and integrates Google Tag Manager and Axeptio for analytics and cookie consent respectively. Hosting appears to utilize a CDN service for performance optimization. Security posture is solid with HTTPS enforced and spam protection implemented, though explicit security headers and formal security policies are absent. Privacy compliance is partial, with cookie consent present but no visible privacy or terms of service pages. Overall, the site is professional, well-branded, and trustworthy, with room for improvement in privacy and security policy transparency.

The website at opentech-ux.org currently serves only a GitHub Pages 404 error page indicating that no active content is published. The domain is newly registered in January 2023 via Gandi SAS and uses GitHub Pages as its hosting platform. There is no business or contact information, no privacy or cookie policies, and no visible security or compliance documentation. Technically, the site has minimal security headers and lacks DNSSEC, but no WAF or blocking mechanisms are detected. Overall, the site is not operational and provides no meaningful content or services.

M

Moloco, Inc.

moloco.cloud

72

Moloco, Inc. is a technology company specializing in AI-powered advertising solutions designed to help businesses grow, scale, and monetize through machine learning. Their platform targets app marketers, retailers, streaming providers, and agencies with products such as Moloco Ads, Commerce Media, and Streaming Monetization. The company positions itself as a leader in AI-native advertising with a global reach and enterprise clientele. The website demonstrates a high level of digital maturity, leveraging modern web technologies including Webflow CMS, Google Tag Manager, Datadog RUM, and cookie consent management tools. The site is well-optimized for performance, mobile responsiveness, and SEO, providing a professional user experience with clear navigation and comprehensive content. Security posture is strong with HTTPS enforcement, security headers, and no exposed sensitive data, although explicit incident response contacts and vulnerability disclosure mechanisms are absent. Overall, the site reflects a trustworthy and professional business presence, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing transparency on incident response and vulnerability disclosures, and maintaining up-to-date security certifications.

D

DK

d-k.io

62

DK is a French company specializing in carbon measurement and management solutions tailored for the communication, media, and advertising sectors. Their platform offers harmonized and standardized carbon footprint measurement tools, including an API for automated calculations, targeting advertisers, agencies, publishers, and media companies. The company positions itself as a market reference in France with notable media clients and a strong emphasis on sustainability and environmental impact reduction. Technically, the website is well-built with modern technologies such as Matomo analytics and Google Tag Manager, hosted by OVH SAS. It demonstrates excellent mobile optimization, accessibility, and SEO practices. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, reflecting a credible business with a clear mission. The domain registration data aligns well with the business claims, enhancing legitimacy. Privacy compliance and security transparency could be strengthened to improve user trust and regulatory adherence.

S

Spyne

spyne.ai

65

Spyne is a technology company specializing in AI-powered photography and editing software tailored for automotive dealerships. Their platform offers end-to-end solutions including virtual studios, 360-degree vehicle spins, video tours, and conversational AI to enhance dealership merchandising and customer engagement. The company is positioned as a trusted provider with a global footprint, serving over 3200 dealerships across 40+ countries and processing over 10 million cars. Technically, the website is built on modern frameworks like Next.js and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and published policies are recommended. Overall, Spyne presents a professional and credible business with strong market presence and technological sophistication.

R

RTL Group

rtl.com

67

RTL Group is a leading European entertainment company operating a broad portfolio of TV channels, streaming services, radio stations, and content production entities. The company holds a strong market position with a diversified media business model and extensive reach across multiple countries. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive corporate information. Technically, the site uses modern frameworks and integrates privacy management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and well-maintained, supporting RTL Group's corporate branding and business objectives.

G

Groupe M6

groupem6.fr

67

Groupe M6 is a prominent French media group operating multiple TV channels, radio stations, and a streaming platform. The corporate website reflects a mature media business with a broad audience reach and diversified content offerings including news, sports, films, and original series. The site is professionally designed, well-branded, and provides comprehensive investor and governance information, indicating a transparent and established organization. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Matomo, demonstrating a commitment to digital maturity and privacy-conscious analytics. The site is mobile-optimized and accessible, with a cookie consent mechanism compliant with GDPR, reflecting good privacy practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, the website presents a low-risk profile with strong business credibility and compliance. The lack of WHOIS data is likely due to privacy protection norms in France and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security culture.

B

Bonial

bonial.com

68

Bonial is a leading digital advertising platform specializing in retail and brand marketing in Germany and France. The company offers innovative solutions such as digital flyer alternatives and location-based marketing to over 1,500 retailers and brands, reaching 14.4 million unique users monthly. Their business model focuses on efficient, relevant, and sustainable advertising to drive retail sales. Technically, the website is built on HubSpot CMS with modern marketing tools and tracking integrations, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and consent management, though improvements in security headers and library updates are recommended. The absence of WHOIS data for the domain introduces some trust concerns, but the professional content and branding mitigate this risk. Overall, Bonial presents a credible and mature digital advertising business with room for technical and security enhancements.

B

BoursoBank (ex-Boursorama Banque)

boursobank.com

70

BoursoBank, formerly known as Boursorama Banque, is a French online bank positioned as the least expensive bank for 17 years, offering a range of financial services including free bank cards, mortgage loans, life insurance, stock market services, and savings products. The website is professionally designed, mobile-optimized, and compliant with GDPR regulations, featuring a comprehensive cookie consent mechanism. Technically, the site uses modern JavaScript frameworks and fonts, ensuring a good user experience and accessibility. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status, which should be further investigated. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response information. Overall, the site presents a trustworthy and professional banking service with room for improvement in transparency and security disclosures.

C

Churchill

agence-churchill.fr

44

Churchill is a premium French web agency specializing in custom website creation, redesign, SEO, and digital marketing services primarily targeting market leaders and businesses in France. The company emphasizes bespoke solutions using WordPress and WooCommerce, integrating advanced SEO and marketing strategies to maximize client ROI. Their market position is supported by over 10 years of experience and more than 120 completed projects, with strong trust signals including high Google review ratings and notable client logos. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance optimizations such as WP Rocket and lazy loading. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. WHOIS data is unavailable, which slightly reduces domain trust but is mitigated by strong business and branding indicators. Overall, the website presents a professional, trustworthy, and technically sound digital presence.

Salesloft operates a professional B2B technology platform focused on conversational AI and sales engagement, targeting marketing, sales, and service teams to improve buyer interactions and pipeline growth. The website content is well-structured, with clear messaging about their AI-powered chat agents and integration capabilities, positioning Salesloft as an established player in the sales technology market. The technical infrastructure leverages modern frameworks such as React and Next.js, with integrations to marketing and analytics tools like Marketo, Google Tag Manager, and Hotjar, indicating a mature digital presence. Security posture is moderate; HTTPS is used, but no explicit security headers or policies were detected in the provided data. The absence of WHOIS data and privacy policies limits full trust assessment, though the professional presentation and technology usage suggest legitimacy. Overall, the site is accessible, well-designed, and business-focused, but would benefit from enhanced transparency in privacy and security disclosures.

A

Aquitem & Aliénor.net

alienor.net

50

Aquitem & Aliénor.net is a French technology and retail-focused group with over 35 years of expertise in data management, marketing, and digital solutions. They provide a broad range of services including data hosting in France, data visualization tools, AI-driven marketing solutions, and retail management software. The company positions itself as a trusted partner for large retail brands and independent merchants, supported by its affiliation with Groupe FIDUCIAL. Technically, the website is built on WordPress with modern SEO and analytics tools, showing good digital maturity. Security posture is adequate with HTTPS and CAPTCHA protections, but lacks some security headers and formal security policies. Privacy compliance is partially implemented with cookie consent but no clear privacy policy page found. Overall, the site is professional and trustworthy, though WHOIS data absence raises some concerns about domain registration transparency.

Y

YOURLS Contributors

yourls.org

67

YOURLS is an established open-source project providing a self-hosted URL shortening solution. It targets developers and organizations seeking full control over their URL shortening services. The website reflects a mature project with a consistent brand and strong community support, including sponsorship transparency. Technically, the site is built using modern static site generation technology (Docusaurus) and leverages Cloudflare for DNS and analytics, ensuring good performance and mobile optimization. Security posture is generally good with HTTPS enforced and domain transfer protections, but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. Overall, the site is trustworthy and professional, though it would benefit from enhanced privacy compliance and clearer contact information.

The website newsgang.com currently serves as a placeholder 'Site en construction' page hosted by OVH. It lacks substantive business content, contact information, or any privacy and security policies. The site primarily provides links to OVH hosting support and resources, indicating it is not yet operational or publicly launched. The domain is registered since 2000 with OVH sas as the registrar, which aligns with the hosting provider references on the site, but the lack of content suggests the business or service is not active at this time. From a technical perspective, the site uses basic HTML and CSS with no detected modern frameworks or CMS. There is no evidence of HTTPS or security headers, and no forms or scripts are present. The site is not optimized for mobile or accessibility and has poor SEO characteristics due to minimal content and metadata. The hosting provider is OVH, a reputable provider, but the site itself is minimal and under construction. Security posture is weak due to the absence of HTTPS, security headers, and privacy policies. No incident response or vulnerability disclosure information is available. The site does not collect user data or track visitors, which reduces privacy risks but also indicates a lack of business maturity. No contact emails, phone numbers, or social media links are provided, limiting user trust and engagement. Overall, the website is low risk but also low value in its current state. It is recommended to implement HTTPS, add privacy and cookie policies, provide clear contact information, and develop substantive content to improve trust, compliance, and user experience.

Kinder Finland is a regional website representing the Kinder brand, a well-known confectionery brand owned by Ferrero. The site targets parents and families with children, offering product information, brand storytelling, sustainability initiatives, and interactive applications such as Applaydu. The website is professionally designed with consistent branding and good content quality, supporting the brand's market position in the retail confectionery sector. Technically, the site is built on Drupal CMS with modern JavaScript libraries and is mobile optimized, though some accessibility and security header improvements are recommended. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but explicit security headers and privacy policy pages are lacking. The WHOIS data for the domain is missing, which reduces trust slightly, but the website content and linked Ferrero domains strongly indicate legitimacy. Overall, the site is a credible and professional digital presence for Kinder in Finland.

I

Instagram

tictac.com

80

Instagram is a globally recognized social media platform owned by Meta Platforms, Inc., providing photo and video sharing services to a broad audience. The website analyzed is the official login page, designed with modern web technologies and optimized for performance and mobile use. The platform maintains a strong security posture with HTTPS enforcement and comprehensive security headers, ensuring user data protection during login. While privacy and cookie policies are not directly visible on the login page, the overall compliance posture is good given Instagram's global presence and regulatory adherence. The domain's WHOIS data is privacy protected, which is typical for large enterprises, and does not detract from the site's legitimacy. Overall, Instagram's website demonstrates high professionalism, security, and trustworthiness.

N

Nutella®

nutella.com

66

Nutella® is a globally recognized brand specializing in hazelnut spread products. The website serves as the official international portal for Nutella®, providing product information, recipe inspiration, sustainability commitments, and brand storytelling. The site targets a general audience interested in Nutella® products and related content. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as Swiper.js for sliders and integrates Google Tag Manager for analytics. The site is mobile-optimized and offers a professional user experience with clear navigation and rich multimedia content. Security-wise, the site uses HTTPS and does not expose sensitive data, but lacks explicit security headers and detailed privacy or cookie policies. WHOIS data is unavailable or privacy protected, but the domain is active and consistent with a legitimate brand presence. Overall, the website demonstrates a mature digital presence with room for improvement in privacy compliance and security transparency.

Fondazione Piera, Pietro e Giovanni Ferrero is a well-established non-profit foundation linked to the Ferrero Group, focusing on social welfare, cultural activities, and healthy aging initiatives. The website reflects a mature digital presence with rich content, including events, exhibitions, and educational programs targeting a broad audience, especially elderly and former employees. The foundation leverages structured data and modern analytics tools to enhance user engagement and compliance. Technically, the site uses a mix of legacy and modern technologies, with room for updating some libraries to improve security. Security posture is generally good with HTTPS and secure cookies, but lacks some advanced headers and a vulnerability disclosure policy. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the foundation's mission and business context.

F

Ferrero Group

ferrero.com

71

Ferrero Group is a globally recognized Italian family-owned confectionery company founded in 1946, with a strong presence in over 170 countries and a portfolio of more than 35 iconic brands including Nutella®, Kinder®, Tic Tac®, and Ferrero Rocher®. The company emphasizes quality, tradition, and sustainability, supported by a workforce of approximately 47,000 employees. The website reflects a mature digital presence with comprehensive content, multimedia integration, and multi-language support, targeting a broad consumer and business audience. Technically, the site is built on Drupal CMS, employs modern web technologies such as Google Tag Manager and lazy loading, and demonstrates good mobile optimization and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts are not evident. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. The absence of WHOIS data is notable but likely due to privacy protection or query limitations, not detracting from the site's legitimacy. Overall, the site is professional, trustworthy, and well-maintained.

C

C & K člen skupiny AUTO UH a.s.

ckauto.cz

43

C & K člen skupiny AUTO UH a.s. operates as an authorized automotive dealership and service provider specializing in Toyota, Lexus, Subaru, and CFMOTO brands. The company serves customers primarily in the Czech Republic with physical locations in Brno and Uherské Hradiště. Their business model focuses on new and used vehicle sales, vehicle servicing, and financing solutions, positioning them as a reputable regional player within the automotive retail sector. The website reflects a professional and consistent brand image aligned with their market presence. Technically, the website employs modern tracking and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Seznam Analytics, indicating a mature digital marketing infrastructure. The site is mobile-optimized with good navigation and content quality, though some accessibility features could be enhanced. Performance is moderate, and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, demonstrating compliance with privacy regulations such as GDPR. However, the absence of explicit security headers and incident response information suggests room for improvement in security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. The main limitation is the lack of WHOIS data, which restricts domain legitimacy verification. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen trust and compliance.

F

Ferrero Foodservice

ferrerofoodservice.com

66

Ferrero Foodservice is a professional B2B website representing the Ferrero Group's foodservice brands such as Nutella®, Kinder®, Tic Tac®, and Ferrero Rocher. The site targets restaurant owners, distributors, and other professional sectors, offering product information, recipes, and tools to support business operations. The website demonstrates a high level of digital maturity with a modern Drupal CMS infrastructure, responsive design, and integration of analytics and marketing tools. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts are absent. Privacy and cookie policies are well implemented with consent mechanisms, reflecting good GDPR compliance. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, which contrasts with the professional and trustworthy website content. Overall, the site is professional, secure, and user-friendly but would benefit from improved transparency in domain registration and security disclosures.

F

Ferrero

ferrerocareers.com

73

Ferrero Careers website presents a professional and comprehensive platform for job seekers interested in joining the global Ferrero family of companies. The site highlights Ferrero's strong global presence, diverse teams, and extensive brand portfolio, positioning itself as a leading confectionery manufacturer with a focus on employee development and inclusion. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and is hosted likely on AWS infrastructure, delivering a mobile-optimized and accessible user experience. Security posture is adequate with HTTPS and consent mechanisms in place, but lacks explicit security headers and published security policies, which could be improved. The absence of WHOIS registration data raises questions about domain registration legitimacy, though the website content and branding are consistent with Ferrero's corporate identity. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in privacy and security disclosures.

L

Lemuscle.fr - AFM-Téléthon

lemuscle.fr

52

Lemuscle.fr is a French non-profit health awareness website dedicated to educating the public about the importance of muscle health. It is affiliated with AFM-Téléthon and organizes the annual 'Semaine du Muscle' event to promote muscle health knowledge and prevention. The website offers educational content, quizzes, videos, and pedagogical tools targeting a broad audience including the general public and educators. Technically, the site is built on WordPress with modern libraries such as Bootstrap, jQuery, and OwlCarousel, and implements GDPR-compliant cookie consent via tarteaucitron.js. Security posture is good with HTTPS and no evident vulnerabilities, though additional HTTP security headers could enhance protection. Overall, the site is professional, trustworthy, and well-positioned as a national health awareness platform.

G

GenoSafe

genosafe.com

59

GenoSafe is a specialized Contract Research Organization (CRO) based in France, with over 20 years of experience providing analytical services for innovative therapeutics including gene and cell therapies, vaccines, and DNA/RNA-based products. The company supports clients across all stages of development from preclinical to clinical phases, focusing on quality control and regulatory compliance. Their market position is that of a trusted mid-sized healthcare CRO with a professional digital presence and clear service offerings. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Matomo. It employs hCaptcha for bot protection and provides a GDPR-compliant cookie consent mechanism. The site is mobile-optimized, accessible, and well-structured, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration but lacks some advanced security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. However, incident response and vulnerability disclosure information are absent. Overall, GenoSafe presents a low-risk profile with a professional and trustworthy online presence. Strategic improvements in security policy transparency and enhanced security headers would further strengthen their posture.

B

YOURLS — Your Own URL Shortener | https://b33.fr/

b33.fr

51

The website https://b33.fr/admin/ is an administrative login portal for a YOURLS (Your Own URL Shortener) instance, a self-hosted URL shortening service. The domain is registered with OVH in France since 2015, indicating a stable and legitimate presence. The site targets users who require URL shortening capabilities, likely webmasters or developers managing their own short URLs. The business model is niche and technology-focused, providing URL management services without public-facing commercial content on this page. Technically, the site uses YOURLS version 1.9.2 and jQuery 3.5.1, hosted on OVH infrastructure with HTTPS enabled and a valid SSL certificate. The site is basic in design and functionality, optimized for desktop login with minimal mobile optimization and accessibility features. No advanced SEO or analytics tools are detected, and no advertising or tracking scripts are present. From a security perspective, the site benefits from HTTPS and password-protected access but lacks important security headers and may expose the YOURLS version number, which could be a vulnerability if not updated. There is no evidence of privacy, cookie, or terms of service policies, which limits compliance with GDPR and other regulations. No contact or incident response information is provided, reducing transparency and trust. Overall, the site is functional for its purpose but lacks comprehensive security and privacy measures. The risk is moderate due to missing security headers and potential version exposure. Strategic improvements in security hardening, privacy compliance, and user trust signals are recommended.

J

Jardin Botanique de Bordeaux

jardin-botanique-bordeaux.fr

49

Jardin Botanique de Bordeaux is a public botanical garden institution located in Bordeaux, France, providing cultural, educational, and scientific services related to plant biodiversity and conservation. The website serves as an informational portal for visitors, researchers, and the general public, offering details on garden locations, events, exhibitions, and practical information. The institution is positioned as a local government-supported entity with a focus on public outreach and education. Technically, the website is built on Drupal 7 CMS with standard web technologies including jQuery and a cookie consent manager (Tarteaucitron). The site uses HTTPS and integrates AT Internet analytics for visitor tracking. While the site is functional and moderately optimized, there is room for improvement in mobile responsiveness, accessibility, and modern security headers. From a security perspective, the site enforces HTTPS and provides cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies and incident response contacts suggests an opportunity to enhance transparency and preparedness. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, CMS updates, and accessibility would further strengthen its posture and user experience.

C

Clipr

clipr.co

62

Clipr is a technology company specializing in delivering immersive social experiences for brands and publishers. Their platform integrates social stories, carousels, and posts directly into websites to enhance user engagement and revenue. The company targets top-tier brands and publishers globally, positioning itself as a B2B SaaS provider in the social media technology space. The website reflects a professional and consistent brand image with clear messaging and trusted client logos. Technically, the site is built on Webflow with modern analytics and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and secure forms, though lacking advanced security headers and explicit policies. Privacy compliance is partially addressed with a privacy policy and terms of service but lacks cookie consent mechanisms. Overall, the site is credible and trustworthy with room for improvement in security and privacy transparency.

C

Cityz Media

cityzmedia.fr

55

Cityz Media is a French media company specializing in outdoor communication and advertising solutions. The company positions itself as a key player in the outdoor media sector, offering innovative communication services to businesses and public entities. Their website reflects a professional and modern digital presence, built on WordPress with SEO optimization and cookie consent mechanisms in place. The technical infrastructure includes popular libraries such as jQuery and Plyr, and analytics are managed via Matomo, indicating a moderate level of user tracking with some privacy considerations. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and explicit security policies. The absence of visible contact information and privacy policy pages suggests areas for improvement in transparency and compliance. Overall, the website is trustworthy and well-structured, suitable for its business purpose.

C

Cdiscount Advertising

cdiscountadvertising.com

58

Cdiscount Advertising is a French digital marketing solutions provider focused on enhancing visibility and sales for suppliers, sellers, and brands on the Cdiscount e-commerce platform. The company offers a range of advertising services including display, search, video, personalized discount coupons, live shopping, and social retail targeting millions of shoppers monthly. The website is professionally designed, mobile-optimized, and compliant with GDPR and cookie regulations, featuring a detailed contact form with CAPTCHA to prevent abuse. However, the domain WHOIS data is unavailable, raising questions about domain registration status despite the professional and comprehensive website content. Technically, the site uses WordPress with popular plugins like LayerSlider and Gravity Forms, and integrates Cookiebot for consent management. Security posture is good with HTTPS and secure forms, but lacks some security headers and published incident response policies. Overall, the site is trustworthy and well-maintained but would benefit from clarifying domain registration and enhancing security transparency.

The website www.canalplusbrandsolutions.fr is currently inaccessible due to a security or WAF challenge, presenting an 'Access Denied' message with minimal content. This prevents a full assessment of the business, compliance, and security posture. The visible content is limited to a branded logo and a message indicating request processing, with no privacy, cookie, or contact information available. The technical footprint is minimal, with only a single external domain serving static assets. No analytics, advertising, or tracking scripts are detected, and no forms or user input mechanisms are present. The site appears to be mobile responsive at a basic level but lacks SEO and accessibility features. The domain is privacy protected in WHOIS, consistent with a media brand's typical privacy practices, but detailed registrant information is unavailable. Overall, the site scores low on content quality, security posture, and privacy compliance due to the blocking mechanism.

B

Budgetbox

budget-box.com

75

Budgetbox is a French technology company specializing in omnichannel retail media platforms designed to engage consumers across all shopping journeys, both online and in-store. Established around 2021, it serves over 200 brands and partners with major retailers such as Carrefour, E.Leclerc, and Intermarché. The company offers tailored solutions for brands and distributors to activate retail media campaigns effectively. The website reflects a professional and consistent brand image with comprehensive business and privacy information, targeting retail and media sectors primarily in France. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Matomo Analytics for privacy-conscious visitor tracking. It employs GDPR-compliant cookie management and integrates marketing tools such as Drift chat and Plezi. The site is mobile-optimized with good SEO practices, though some security headers could be enhanced. Performance is moderate, with a clean and user-friendly design. From a security perspective, the site enforces HTTPS and has implemented cookie consent mechanisms, but lacks explicit security headers like CSP or X-Frame-Options. No vulnerabilities or sensitive data exposures were detected in the content. The absence of WHOIS registration data is a concern but does not outweigh the professional presentation and detailed compliance documentation. Overall, Budgetbox presents a credible and trustworthy online presence with strong privacy compliance and a solid technical foundation. Strategic improvements in security headers and ongoing domain registration monitoring are recommended to maintain and enhance trust and security posture.

B

Broadsign

broadsign.com

64

Broadsign is a well-established company founded in 2001 that provides an end-to-end SaaS platform for media owners and buyers to plan, manage, and deliver out-of-home media. The website reflects a professional and consistent brand presence targeting media industry professionals. Technically, the site is built using modern technologies such as Gatsby and React, hosted on AWS infrastructure, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not publish security or incident response policies. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security transparency.

B

Boursorama

boursorama.com

69

Boursorama is a prominent French online bank and financial information provider, offering a wide range of services including online banking, stock market data, and financial news. The website presents a professional and well-structured interface targeting investors and banking customers primarily in France. Technically, the site uses modern web standards with good mobile optimization and SEO practices, although explicit CMS or hosting details are not evident. Security posture is moderate due to lack of visible security headers and missing WHOIS data, which raises some concerns about domain registration transparency. Privacy compliance appears weak as no privacy or cookie policies were detected in the provided content. Overall, the site is functional and trustworthy from a business perspective but would benefit from enhanced transparency and security measures.

B

Bonial

bonial.fr

64

Bonial is a prominent French retail promotions platform that aggregates catalogues and offers from major retailers such as Carrefour, Lidl, and Auchan. The website serves consumers looking to prepare shopping lists and find the best deals locally. It is backed by Bonial International GmbH, indicating a strong corporate structure. Technically, the site leverages modern web technologies including Next.js, New Relic monitoring, and Usercentrics for cookie consent, ensuring a performant and compliant user experience. Security posture is solid with HTTPS and monitoring tools, though explicit privacy and terms pages are missing, which should be addressed to enhance compliance and trust. Overall, the site is professional, well-branded, and trustworthy, with no signs of malicious or adult content.

B

BedrockStreaming

bedrockstreaming.com

70

BedrockStreaming is a European streaming technology company specializing in creating and operating full-scope streaming services for leading media companies. Their platform supports AVOD, SVOD, and hybrid business models, delivering on-demand video, linear channels, and live sports to over 50 million users. The company is positioned as a premier streaming-tech provider in Europe, founded in 2020 and headquartered in France. Technically, the website is built on modern frameworks such as Next.js and integrates JW Player for media playback and Matomo for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements like DNSSEC and security.txt are recommended. Privacy compliance is adequate with clear privacy and cookie policies, but lacks explicit consent mechanisms. Overall, the site is professional, trustworthy, and well-branded, serving a B2B audience in the media sector.

B

Bcovery

bcovery.com

53

Bcovery is a French-based AdTech company specializing in sustainable and responsible media buying solutions for brands and agencies. Founded in 2019, it offers a unique technological suite including Ghost Recycling, Direct Green Path, Audience Sources, and Carbon Optimizer to improve campaign performance and reduce carbon footprint. The company is recognized with multiple industry awards and partners with major media publishers. Technically, the website is built on WordPress with Elementor and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS and domain locking, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and content-rich but should improve privacy and security disclosures.

A

AdsWizz

adswizz.com

71

AdsWizz operates as a technology platform specializing in digital audio advertising, offering a comprehensive stack including dynamic ad insertion, campaign management, yield optimization, and programmatic selling. The company targets publishers and participants in the digital audio advertising ecosystem, positioning itself as an established player with enterprise-level scale. Technically, the website is built on WordPress and integrates modern marketing and analytics tools such as HubSpot, Google Analytics, and Google Tag Manager, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and privacy policy pages suggests room for improvement. The lack of WHOIS registration data raises questions about domain registration transparency but does not detract from the professional presentation and branding of the site. Overall, the site is well-designed, user-friendly, and trustworthy, with moderate tracking and advertising transparency.

A

Adrenalead

adrenalead.com

51

Adrenalead operates a marketing performance platform focused on off-site audience engagement, targeting advertisers, agencies, and publishers. The company positions itself as a pioneer in marketing performance platforms, emphasizing audience loyalty and conversion. Founded in 2018 and hosted by OVH sas, the website reflects a medium-sized technology business with a consistent brand presence and active social media channels. Technically, the site is built on WordPress with modern marketing and analytics integrations such as HubSpot, Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled and domain status protections, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. Privacy compliance is weak due to missing privacy and cookie policies, and no direct contact information is found, which may impact user trust. Overall, the website is professional and functional but would benefit from enhanced privacy disclosures and security hardening.

V

Veepee|ad

veepee-ad.com

58

Veepee|ad is a newly established retail media advertising company launched in 2023 as part of the Veepee group, a pioneer in event sales on the internet in Europe. The company offers a comprehensive suite of retail media solutions including display, search, CRM, social retail, programmatic advertising via Veepee|ad Connect, and couponing services. Their platform targets a large member base of 28 million active users, positioning them as a leading retail media actor in Europe. The website is professionally designed using HubSpot CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are present and GDPR compliant, supporting trust and compliance. Contact information is primarily via contact forms and a physical address, with no direct emails or phone numbers publicly listed. Overall, the site demonstrates a mature digital presence suitable for a large enterprise in the retail media sector.