Security Directory

C

This website is for ADULTS ONLY

cruel-mistresses.com

45

The website cruel-mistresses.com is an adult content portal requiring users to affirm they are at least 18 years old before entering. It hosts sexually explicit material with fetish and bondage themes, targeting an adult-only audience. The site references Mood-Universe.com as the copyright holder but provides minimal business or contact information. Technically, the site uses basic HTML and CSS with no detected CMS or advanced frameworks. Mobile responsiveness is present but basic. Security posture is weak, with no HTTPS enforcement or security headers detected in the provided data. The domain is aged since 2011 and registered with a reputable registrar, Rebel Ltd, but lacks detailed registrant information. Overall, the site lacks privacy, cookie, and terms of service policies, which impacts compliance and trustworthiness.

Queens of Kink is a niche adult entertainment website specializing in dominant femdom and fetish videos featuring crossdressers, transvestites, and shemales. The site operates on a subscription and membership model, offering exclusive fetish content to an adult audience. It maintains a consistent brand presence with a professional design and clear navigation, targeting mature users interested in specialized adult content. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Font Awesome, hosted by MojoHost. While the site is mobile optimized and performs moderately well, it lacks advanced SEO and accessibility features. Security posture is basic, with no visible security headers or DNSSEC enabled, and no explicit HTTPS information was found in the provided data. Privacy compliance is minimal, with basic privacy and terms policies but no clear GDPR compliance or cookie consent mechanisms. The WHOIS data is consistent and supports the legitimacy of the domain, which has been active since 2013. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices.

SubmissiveCuckolds.com is an adult entertainment website specializing in cuckolding fetish videos with a femdom touch. The site operates on a subscription-based model offering exclusive adult video content targeted at mature audiences interested in niche fetish genres. The website has been active since 2009, indicating a stable presence in its niche market. The content is explicit and designed for adults only, with no visible age verification mechanisms on the main page. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and video.js for media playback. Google Analytics and Google Tag Manager are employed for user tracking, but there is no visible cookie consent mechanism, which may raise privacy compliance concerns. Security posture is basic with no advanced security headers detected and DNSSEC not enabled on the domain. The WHOIS data shows consistent domain registration with a long history and no privacy protection, supporting legitimacy. However, the absence of contact information and security policies reduces business credibility. Overall, the site functions adequately for its purpose but lacks several modern security and privacy best practices.

Orgasmabuse.com is an adult entertainment website specializing in forced orgasm content, offering exclusive videos and daily free content to adult enthusiasts. The site targets a niche adult audience and operates on a subscription or content access business model. The domain is mature, registered since 2013, and hosted by Hosting Concepts B.V., indicating a stable operational history. Technically, the site uses standard web technologies such as JavaScript, CSS, and HTML5, with cookie consent managed by Cookiebot and analytics via Google Tag Manager. However, the site lacks advanced SEO optimization and accessibility features, and the design quality is basic. From a security perspective, the website uses HTTPS but lacks DNSSEC and important security headers, which reduces its security posture. No privacy policy, terms of service, or contact information are published, limiting transparency and compliance with privacy regulations such as GDPR. The site employs external ad networks and tracking services, which may impact user privacy. Overall, the security score is moderate but could be improved significantly by implementing standard security headers and publishing comprehensive policies. The content is explicitly adult and NSFW, with clear age verification and warnings, making it suitable only for adults. There is no evidence of WAF or blocking mechanisms, allowing full content access for analysis. The domain registration data is consistent with the business type, though registrant details are minimal. Strategic recommendations include enhancing security headers, publishing privacy and security policies, improving SEO and accessibility, and adding clear contact and incident response information to build trust and compliance.

HumiliationPOV.com is a niche adult entertainment website specializing in fetish content such as small penis humiliation, femdom POV, financial domination, and related adult themes. The site operates primarily on a subscription and affiliate marketing business model, targeting an adults-only audience interested in specific fetish content. The website content is accessible without any WAF or security challenges, but it uses outdated technologies such as Flash and lacks modern security practices like HTTPS and security headers. Privacy compliance is minimal, with no visible cookie consent mechanisms despite handling user subscriptions. WHOIS data is unavailable, indicating possible privacy protection or recent domain registration, which reduces transparency and trustworthiness. Overall, the site serves a specialized adult market but has significant technical and security shortcomings.

Subby Hubby is an adult entertainment website specializing in niche fetish content including cuckold, sissy maids, and fem dom themes. The site offers over 1200 videos and photo sets through a subscription-based model, targeting an adults-only audience. The business appears to be operated by Clubdom.com, with a domain registered since 2011, indicating an established presence in the adult media market. The website features multimedia content with integrated video players and photo galleries, supported by a custom CMS and various JavaScript libraries for enhanced user experience. Technically, the site uses modern web technologies such as jQuery, OneSignal for push notifications, and media players, but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with HTTPS implied but no DNSSEC or explicit security policies detected. Privacy compliance is basic with a privacy policy present but no cookie policy or GDPR compliance indicators. Contact information is limited to a contact form with no direct emails or phone numbers. Overall, the site is functional and professionally designed but could improve in security and privacy compliance.

American Mean Girls operates as an adult entertainment website offering adult video clips with an option for users to purchase individual clips using Bitcoin. The site targets an adult-only audience and includes explicit age warnings to restrict underage access. The business model revolves around content sales and an affiliate program facilitated through a third-party payment processor, Verotel. The website's market position is niche within the adult entertainment sector, with a small scale operation dating back to 2013 as per site content. Technically, the website employs basic web technologies including Google Analytics and Google Tag Manager for tracking and analytics. The site lacks modern CMS identification and shows basic design and mobile optimization. There is no evidence of HTTPS or advanced security headers, which raises concerns about secure data transmission and user privacy. The absence of privacy and cookie policies further indicates low compliance with data protection standards. From a security perspective, the site does not demonstrate adherence to best practices such as HTTPS enforcement, security headers, or incident response contact points. The missing WHOIS registration data is a critical red flag, undermining domain legitimacy and trustworthiness. The site’s reliance on Bitcoin payments and lack of transparent business contact information further complicate trust assessments. Overall, the website presents significant risks related to security, privacy compliance, and legitimacy. Strategic improvements in security infrastructure, transparent policies, and domain registration clarity are essential to enhance trust and reduce operational risks.

The website 'YOUNG-FEMDOM- Brutal German Girls' operates as a niche adult content store hosted on the Clips4sale platform, specializing in female domination fetish video clips. It targets an adult audience with explicit content and enforces age verification before access. The business model revolves around e-commerce sales of digital adult media, with user engagement features such as following, tipping, and chat. The site maintains consistent branding and a professional design within its niche but lacks explicit company or contact information. Technically, the site uses modern frontend technologies including Tailwind CSS and Google Tag Manager, and is served over HTTPS ensuring secure transport. However, it lacks explicit security headers and cookie consent mechanisms, which are important for compliance and security hardening. The site is mobile optimized and SEO friendly but could improve accessibility features. From a security perspective, the site enforces age verification and Terms of Service acceptance but does not provide detailed privacy or security policies. The absence of WHOIS data for the domain reduces trust and raises questions about domain legitimacy. No WAF or blocking mechanisms were detected, and no immediate vulnerabilities were found in the content or scripts. Overall, the site presents moderate risk primarily due to missing registrant transparency and limited privacy compliance. Strategic improvements in security headers, privacy disclosures, and contact transparency would enhance trust and compliance.

S

SADO-LADIES.com

sado-ladies.com

9

SADO-LADIES.com is a specialized adult entertainment website focusing on classic femdom movie content. Established in 2007, it offers a subscription-based model with over 200 hours of downloadable clips and photo galleries, targeting an adult audience interested in BDSM and fetish themes. The site maintains a consistent brand presence and updates content regularly, positioning itself as a niche leader in its market segment. Technically, the site runs on Joomla CMS with a moderate performance profile and integrates multiple analytics platforms including Google Analytics, Matomo, and Microsoft Clarity. While HTTPS is enforced and the domain is well maintained, there are gaps in security best practices such as missing security headers and lack of DNSSEC. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. No incident response or security policy information is published, which could be improved to enhance trust. Overall, the site is functional and professional but could benefit from enhanced security and privacy measures.

Club Stiletto is an adult entertainment website specializing in fetish and BDSM-themed video content, photo galleries, and stories. It operates primarily on a subscription and pay-per-clip business model, targeting an adult audience interested in niche fetish content. The site uses Drupal 7 CMS and integrates various JavaScript libraries and Google Analytics for tracking, with Bitcoin payment options indicating flexibility in payment methods. The website is professionally branded with consistent design and regularly updated content, positioning it as a niche player in the adult media sector. However, the absence of visible privacy and cookie policies and the lack of WHOIS registrant data reduce transparency and compliance posture. Security practices include HTTPS and anonymized IP tracking, but missing security headers and outdated libraries suggest areas for improvement. Overall, the site is functional and content-rich but would benefit from enhanced privacy compliance and security hardening.

T

The English Mansion

theenglishmansion.com

7

The English Mansion operates as a niche adult content membership website specializing in femdom BDSM videos and related fetish content. It targets an adults-only audience with explicit content and enforces age verification for UK subscribers. The site claims over 20 years of operation and positions itself as a leader in its niche, offering daily updated HD videos and VR content. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. However, there is no evidence of a modern CMS or advanced frameworks. Security posture is weak, lacking HTTPS enforcement and security headers, and no privacy or cookie policies are present. The absence of WHOIS registration data and contact information reduces business credibility and trust. Overall, the site is functional but requires significant improvements in security, privacy compliance, and transparency to enhance trust and user safety.

B

Bizarre Design

kinkymistresses.com

7

Kinky Mistresses is an adult entertainment website specializing in BDSM and Femdom video content. The site offers membership-based access to explicit adult videos featuring various fetish and domination themes. The business operates in a niche market segment targeting adults interested in BDSM and Femdom genres. The website content is explicit and includes an age verification warning to restrict access to adults only. Technically, the site uses standard web technologies including JavaScript and CSS, with Google Analytics and Google Tag Manager for visitor tracking. The site lacks advanced CMS or frameworks and shows basic mobile optimization and accessibility features. Security posture is moderate but limited by the absence of visible security headers and lack of published privacy or cookie policies. WHOIS data is unavailable, which reduces transparency and trustworthiness. Overall, the site functions as a small-scale adult content membership platform with basic technical and security implementations.

F

Femme Fatale Films | HD Femdom BDSM Domination Videos

femmefatalefilms.com

7

Femme Fatale Films operates as a niche adult entertainment website specializing in HD femdom BDSM domination videos. The site targets an adults-only audience with explicit content warnings and age verification prompts. The business model likely revolves around subscription or pay-per-view access to adult video content. The domain is well-established since 2010, indicating a mature presence in its market niche. Technically, the site uses legacy JavaScript libraries such as jQuery 1.8.0 and integrates video playback via Video.js. Hosting is provided by MojoHost, a known adult content hosting provider. The site includes affiliate marketing links for VPN services and displays a DMCA protection badge, signaling some copyright enforcement efforts. However, the site lacks visible privacy, cookie, or terms of service policies, which is a compliance gap.

C

ClubDom.com

clubdom.com

45

ClubDom.com is a niche adult entertainment platform specializing in FemDom, BDSM, and fetish video and photo content. Established in 1997, it offers a subscription-based business model with exclusive content including thousands of videos and photo sets. The website targets an adult audience with explicit content and includes legal disclaimers and age verification mechanisms. Technically, the site uses a custom CMS with common JavaScript libraries such as jQuery, OneSignal for push notifications, and Jssor Slider for media display. Hosting is provided by mojohost.com, and the domain registration is consistent and longstanding, indicating legitimacy. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is minimal, with a basic privacy policy but no cookie consent or GDPR mechanisms. Contact information is limited to forms without explicit emails or phone numbers. Overall, the site is functional and professionally presented but could improve security and privacy compliance.

F

Femdom Empire

femdomempire.com

9

Femdom Empire is a niche adult entertainment website specializing in femdom fetish videos. Established in 2011, it operates a subscription-based business model offering weekly updates and access to exclusive video content. The site targets an adult audience interested in hardcore dominatrix and fetish video content. Technically, the website uses a custom CMS with a variety of JavaScript libraries including jQuery, Fancybox, and Flexslider to provide a multimedia-rich user experience. Hosting is provided by MojoHost, and the domain is registered with GoDaddy, reflecting a stable and consistent digital infrastructure. Security posture is moderate with HTTPS usage and age verification mechanisms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no explicit cookie policy. Overall, the site is professionally designed with good navigation and content relevance but could improve in security and privacy transparency. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, and improving privacy and cookie consent mechanisms.

The website jasmin.com is an adult-oriented social and dating platform, as indicated by its title and content cues. It targets an adult audience seeking to connect with others. The domain is well-established, having been registered since 1998, which supports the legitimacy of the business. However, the website lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Technically, the site uses modern marketing and analytics tools such as Google Tag Manager and Emarsys, and relies on multiple CDN domains for content delivery, indicating a moderate level of digital maturity. Security posture is basic, with HTTPS enabled but no DNSSEC or security headers detected, suggesting room for improvement in protecting user data and preventing attacks. Overall, the site is functional but requires enhancements in privacy compliance and security best practices to improve trustworthiness and regulatory adherence.

L

LiveJasmin

tpdwm.com

10

LiveJasmin is a leading adult entertainment platform specializing in live sex cams and adult chat services. The website offers a large selection of models with various filtering options, targeting an adults-only audience globally. It operates as an enterprise-level media business with a focus on live webcam shows, private chats, and video calls. The platform is well-branded and maintains consistent trust indicators such as age verification and industry certifications. Technically, the site employs modern JavaScript frameworks, tracking tools like Google Tag Manager and Hotjar, and uses hCaptcha for bot protection. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is strong with HTTPS enforcement and security headers, but lacks explicit published security policies or incident response contacts. Privacy compliance is good with clear cookie and privacy policies and consent mechanisms. WHOIS data is unavailable, likely due to privacy protection, which is common for adult sites. Overall, the site is professional and trustworthy within its industry niche.

The Office franco-allemand pour la transition énergétique (OFATE) is a bilateral platform established in 2006 by the French and German governments to facilitate information exchange and cooperation in the energy transition sector. The website serves as a comprehensive resource hub offering news, publications, event calendars, and membership information targeted at professionals and stakeholders involved in Franco-German energy initiatives. The site is well-structured, bilingual, and professionally branded, reflecting its governmental and non-profit nature. Technically, the website is built on the Contao Open Source CMS and employs a mix of legacy and modern web technologies including jQuery 1.11.3, Google reCAPTCHA v3, and cookie consent management via tarteaucitron.js. Hosting is provided by domainfactory GmbH, a reputable registrar and hosting provider. The site is HTTPS secured and implements GDPR-compliant cookie consent mechanisms, although some scripts use outdated libraries which could pose security risks. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers and published incident response policies. The use of an outdated jQuery version is a notable vulnerability. No signs of WAF or blocking mechanisms were detected, and the site is fully accessible. Privacy policies and cookie policies are present and comprehensive, supporting GDPR compliance. Overall, the website presents a low-risk profile with good business credibility and technical maturity for its sector. Strategic improvements include updating legacy scripts, enhancing security headers, and publishing explicit security and incident response policies to further strengthen trust and compliance.

S

Syndicat des énergies renouvelables

syndicat-energies-renouvelables.fr

10

The Syndicat des énergies renouvelables is a professional trade association focused on the renewable energy sector in France. It serves as a key industry actor providing information, organizing events, publishing reports, and offering professional training to its members, which number over 530 companies including many SMEs and ETIs. The website reflects a well-established organization with a clear market position as a leading voice in the energy transition. The target audience includes energy professionals, companies, and stakeholders interested in renewable energy developments. Technically, the website is built on WordPress with a modern tech stack including Bootstrap 4, jQuery, and various plugins for SEO, sliders, and cookie consent management. The site is mobile-optimized and demonstrates good SEO practices with proper metadata and structured data. Performance is moderate, and accessibility is basic but adequate for the audience. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. The login form for members uses secure POST methods with nonce tokens. However, additional security headers are not detected, and no explicit security or incident response policies are published. No critical vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of WHOIS data reduces some trust but is mitigated by the site's content quality and transparency. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to improve security posture and trust further.

G

GE-Data

ge-data.com

55

GE-Data is a specialized consulting firm focusing on geospatial technologies applied to agriculture, forestry, and water management. With offices in the United States and France, the company leverages over 30 years of expertise in remote sensing, GIS, and data science to deliver tailored, cost-effective solutions. Their services include land-use mapping, crop monitoring, production estimation, and disease detection, targeting both public and private sector clients. The website reflects a professional and consistent brand image with clear business messaging and client engagement features. Technically, the website is built using One.com Web Editor, incorporating modern JavaScript libraries such as Swiper.js for image sliders and Termly for cookie consent management. The site is hosted by One.com A/S and uses HTTPS with a good SSL configuration. However, there is room for improvement in security headers and mobile optimization. Analytics are implemented via SiteWit, with moderate user tracking and basic privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms but lacks explicit security policies, incident response information, and vulnerability disclosure details. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, GE-Data presents a trustworthy and professional online presence with a solid foundation in technical and business aspects. Strategic enhancements in security policies, contact transparency, and mobile accessibility would further strengthen their digital maturity and compliance posture.

O

Oasis21

oasis21.org

48

Oasis21 is a small community-oriented social economy shared space located in Paris, France, founded around 2018. The website serves primarily as an informational and reservation portal for the space, targeting local community members and organizations interested in social and solidarity economy initiatives. The business model revolves around providing a physical venue for events and activities aligned with social economy values. Technically, the website is simple, built with basic HTML and CSS, hosted by OVH sas, and includes minimal external dependencies. There is no evidence of advanced CMS or frameworks, and performance and mobile optimization are basic. Security posture is limited, with no visible security headers or privacy policies, and DNSSEC is not enabled. The domain registration is consistent with the business timeline and shows standard protections against unauthorized transfers or deletions. Overall, the site is functional but lacks advanced security and privacy features, which could be improved to enhance trust and compliance.

N

NOVELCAST

novelcast.com

54

NOVELCAST is a French audio production company specializing in the executive production of audiobooks, audio series, and transmedia projects. Established in 2005, the company operates a professionally designed WordPress-based website showcasing its audio productions and services. The website targets French-speaking audiences interested in audio fiction and literary content. NOVELCAST maintains an active social media presence across Instagram, LinkedIn, YouTube, and Facebook, enhancing its market visibility. The business model focuses on content creation and production services within the media sector.

I

Interventions Numériques

interventions-numeriques.fr

46

Interventions Numériques is a French-based small educational and mediation service focused on digital autonomy, offering a variety of training courses and mediation services to individuals and organizations. The business operates under the cooperative Oxalis, which is Qualiopi certified, indicating recognized quality in training services. The website is professionally designed using WordPress with a modern tech stack and SEO optimizations, providing good user experience and mobile responsiveness. Security posture is solid with HTTPS and no evident vulnerabilities, though some improvements in privacy compliance and security policy transparency are recommended. Overall, the domain registration and website content are consistent and trustworthy, supporting a positive legitimacy assessment.

The website artisanlogiciel.net/yunohost/sso/login appears to be a login portal for a Single Sign-On (SSO) system, likely related to Yunohost services. The content is minimal, primarily consisting of technical assets and scripts with no visible business or contact information. The domain is registered with Gandi SAS since 2009, indicating a mature and legitimate registration. The technical infrastructure uses modern JavaScript frameworks such as Nuxt.js, but lacks visible security headers and privacy compliance documentation. The site does not present any advertising or analytics scripts, suggesting a focus on internal or limited user access rather than public marketing. Overall, the website's security posture is basic, with room for improvement in security headers and privacy policies. The lack of business information and policies limits trust and compliance assessment.

C

Clic & Cetera

clicetcetera.fr

51

Clic & Cetera is a small local business based in France providing IT assistance and mediation services primarily in the Lorient region. The company targets both professionals and private individuals, offering on-site and business IT support. The website is built on WordPress and demonstrates a good level of technical maturity with modern CMS usage and responsive design. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS enabled but lacks important security headers and formal privacy or cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy for its business scope but would benefit from improved compliance and security practices.

E

E2L - Ecole du Logiciel Libre

e2li.org

59

E2L - Ecole du Logiciel Libre is a French non-profit association dedicated to educating the public about free software through courses, conferences, and community events. Founded in 2015, it operates primarily in Ivry-sur-Seine and offers a range of educational activities including install parties, publications, and online resources. The organization targets individuals interested in free software, from beginners to IT professionals, emphasizing community involvement and open knowledge sharing. Technically, the website uses a standard modern stack including Bootstrap, jQuery, and Leaflet for maps, hosted via Gandi SAS. While the site is content-rich and professionally presented, it lacks formal privacy and cookie policies and does not show advanced security headers or DNSSEC, indicating room for improvement in security and compliance. Contact information is clearly provided, enhancing trust and credibility.

N

Numericatous

numericatous.fr

52

Numericatous is a French small business founded in 2019, specializing in education and training on Linux and free software with a strong ethical and sovereign digital focus. The website offers a comprehensive range of resources including tutorials, ebooks, and online courses aimed at individuals and professionals seeking autonomy in digital usage. The business positions itself as a niche player promoting digital sovereignty and ethical computing, supported by partnerships with local and ethical technology providers. Technically, the website is built on WordPress with WooCommerce for e-commerce, hosted by a French provider LRob, and uses Matomo for privacy-respecting analytics. The site is well-optimized for performance, mobile, and accessibility, with clear navigation and professional design. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, Numericatous presents a trustworthy, professional, and ethically aligned digital presence with a clear business model and solid technical foundation.

F

Friends Of OpenPGP

foopgp.org

49

Friends Of OpenPGP is a small non-profit association founded in 2020 focused on promoting OpenPGP technologies among businesses and citizens. The organization facilitates adoption through events, training, workshops, and community support. Their website reflects a niche market position with a clear mission to educate and support OpenPGP users and developers. Technically, the site is built with modern static site generator Hugo and uses popular frontend libraries such as Bootstrap and jQuery, hosted by OVH sas. The website is mobile responsive and well-structured, though it lacks some advanced accessibility features and security headers. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but DNSSEC is not enabled and security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in compliance and security transparency.

A

Association Electrocycle

electrocycle.co

55

Association Electrocycle is a French non-profit organization dedicated to promoting the reuse of electronic devices, particularly smartphones, through workshops and advocacy for free software. The website serves as a platform to share news, events, and educational content related to digital empowerment and ecological technology practices. The organization targets individuals and groups interested in sustainable technology and digital rights. Technically, the website is built on WordPress 6.8.3, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though it lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained, reflecting a small but active community-focused entity.

W

Wikilibriste

wikilibriste.fr

61

Wikilibriste is a French-language educational website focused on digital freedom, privacy, and security. Founded in 2022, it offers tutorials and guides aimed at helping users improve their digital hygiene and regain control over their online lives. The site targets both beginners and experienced users interested in ethical and open-source digital tools. The business model appears to be content publishing with community engagement, without evident monetization through ads or affiliate marketing. Technically, the website is built on Ghost CMS 6.0, hosted by Infomaniak Network SA, and employs modern web technologies with good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and modern font loading strategies but lacks visible security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

C

Collabora Ltd

collabora.com.br

10

Collabora Ltd is an established technology consulting company specializing in Open Source software development, particularly in Linux kernel, web engines, graphics, and multimedia. The company offers a comprehensive range of services including consulting, development, training, integration, optimization, and support. Their market position is strong, supported by over a decade of experience and active contributions to major Open Source projects such as Linux, GStreamer, Wayland, WebKit, and LibreOffice. The website targets businesses seeking expert Open Source solutions and emphasizes delivering tailored, efficient software stacks and complete solutions. Technically, the website employs a moderate technology stack including jQuery and Matomo analytics, hosted on AWS infrastructure. The site is accessible, professionally designed, and provides clear navigation and contact information via email. However, mobile optimization and accessibility are basic, and no CMS or advanced frameworks are detected. SEO is basic but sufficient for the content presented. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies or incident response information. There is no vulnerability disclosure or security.txt file. Privacy compliance is basic with privacy and cookie policies present but no consent mechanism. The use of Matomo analytics suggests some privacy awareness. Overall, the security posture is moderate but could be improved with additional headers, policies, and consent mechanisms. The overall risk assessment is low with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include enhancing security headers, implementing cookie consent, adding security and incident response policies, and improving mobile and accessibility features to strengthen trust and compliance.

C

Collabora Ltd

collabora.co.kr

9

Collabora Ltd operates a Korean language website focused on open source consulting services, specializing in Linux, multimedia, graphics, and web engines. The company positions itself as a leader in open source projects such as Linux, GStreamer, Wayland, and LibreOffice, offering a range of services including training, integration, optimization, and turnkey solutions. The website is professionally designed with clear navigation and relevant content targeting businesses and developers seeking open source expertise. Technically, the site uses legacy jQuery, Matomo analytics, and standard web technologies, with moderate performance and basic mobile optimization. Security posture is moderate with no visible security headers and no HTTPS status provided in the data, but no critical vulnerabilities detected. Privacy and cookie policies are present, though no explicit cookie consent mechanism is implemented. WHOIS data for the domain collabora.co.kr is missing or indicates the domain is unregistered in the Korean registry, which is inconsistent with the active website presence and reduces trustworthiness. Overall, the website is credible and professional but would benefit from updated security practices and clarification of domain registration status.

F

FFmpeg Project

ffmpeg.org

10

FFmpeg is a well-established open-source multimedia software project founded in 2002, providing a comprehensive cross-platform solution for recording, converting, and streaming audio and video. It holds a leading position in the multimedia technology sector, supported by a strong developer community and regular major releases. The website reflects a mature project with detailed documentation, changelogs, and community engagement channels, targeting developers, multimedia professionals, and system integrators worldwide. The business model is donation and sponsorship-based, with no commercial advertising evident on the site. Technically, the website is built on a modern, lightweight stack using Bootstrap, Font Awesome, and jQuery, hosted by a reputable data center (Telepoint). The site is fast, mobile-optimized, and accessible, though accessibility features are basic. SEO practices are good, with proper meta tags and structured navigation. No CMS is detected, indicating a custom or static site approach. From a security perspective, the domain is long-standing and registered with a reputable registrar, with domain status flags enhancing security. However, DNSSEC is not enabled, and no explicit security headers or security.txt file are detected, representing areas for improvement. The project maintains a dedicated security page and issues regular security updates, demonstrating a proactive security posture. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR-specific compliance indicators. Overall, FFmpeg.org is a trustworthy, professional, and content-rich website representing a critical open-source multimedia project. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security.txt file, and adding cookie consent mechanisms to enhance privacy compliance and security posture.

C

Collabora Limited

apertis.org

56

Apertis is an open source GNU/Linux distribution and infrastructure platform primarily targeting automotive and embedded device markets. It is developed and maintained by Collabora Limited, a reputable company in the open source ecosystem. Apertis emphasizes security, modularity, and production readiness, offering extensive software management, testing frameworks, and resilient upgrade capabilities. The platform also provides tools and cloud services to optimize development and reliability. The website reflects a mature and professional project with frequent releases and commercial support options. Technically, the website is built using modern web technologies including Hugo static site generator, Bootstrap, jQuery, and FontAwesome. It is well-structured, mobile-optimized, and SEO-friendly. The site uses HTTPS exclusively, indicating good baseline security. However, some security best practices such as explicit security headers and cookie consent mechanisms are not evident. The WHOIS data is unavailable due to privacy protection, but the domain appears legitimate and consistent with the business identity. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or vulnerability disclosure page is a minor gap. Contact information is limited to an email address, with no phone numbers or incident response contacts. Privacy compliance is good with a comprehensive privacy policy and terms of use clearly linked. No advertising or tracking beyond minimal service monitoring is present, supporting user privacy. Overall, Apertis presents a trustworthy and professional open source platform with strong technical foundations and a clear focus on security and modularity. Strategic improvements in security headers, cookie consent, and incident response transparency would further enhance trust and compliance.

The PAN Foundation website serves as a secure portal hosted on Salesforce Experience Cloud, providing patient assistance services primarily for healthcare patients, caregivers, providers, and pharmacies. The organization operates as a non-profit focused on medication financial assistance. The technical infrastructure leverages modern Salesforce Lightning Web Components, integrated payment platforms such as Stripe, PayPal, and Adyen, and security features including HTTPS and Content Security Policy. The website demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. Security posture is strong with encrypted connections and bot protection, though improvements in privacy compliance such as cookie consent and incident response disclosures are recommended. Overall, the site is trustworthy and professionally maintained, with no indications of malicious activity or content safety concerns.

L

LikeBtn

likebtn.com

62

LikeBtn is a technology company specializing in providing embeddable like button widgets for websites, enabling user interaction through likes and dislikes with real-time statistics and insights. The company has been operating since 2013 and supports a wide range of CMS platforms through dedicated plugins, positioning itself as a versatile solution for website owners seeking to enhance user engagement. Technically, the website employs modern web technologies including asynchronous JavaScript loading, REST APIs, and Cloudflare for DNS and CDN services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain registration protections in place, though there is room for improvement in DNSSEC adoption and explicit security policies. Privacy compliance is addressed with a comprehensive privacy policy and GDPR readiness, but lacks a cookie consent mechanism. Overall, LikeBtn presents a professional and trustworthy online presence with a mature product offering.