Security Directory

L

Louvre-Lens

louvrelens.fr

60

Louvre-Lens is an official French museum branch presenting cultural exhibitions, events, and visitor services. The website serves as a comprehensive portal for museum information, programming, and ticketing, targeting a broad public audience including families, tourists, and cultural enthusiasts. The site is built on WordPress with modern plugins and analytics tools, demonstrating a mature digital infrastructure. Security posture is good with HTTPS, cookie consent, and anonymized analytics, though explicit security headers and incident response contacts are not published. The absence of WHOIS data reduces domain registration trust but the website content and branding strongly indicate legitimacy. Overall, the site is professional, user-friendly, and compliant with GDPR requirements.

The website jemegare.fr serves as a regional landing page for EFFIA, a significant French company specializing in paid on-street parking management and mobility services. The site highlights EFFIA's extensive presence across multiple French cities, emphasizing its role in parking space management and regulation. The business targets both city authorities and motorists, positioning itself as a key player in the transportation sector in France. The website content is straightforward, focusing on service offerings and city-specific parking solutions, with links to multiple city subdomains.

L

Lens Lievin Tourisme

groupes-lenslievin.fr

57

Lens Lievin Tourisme operates the website groupes-lenstourisme.fr as a local tourism office focused on organizing group visits and school outings in the Lens-Liévin area of France. The website provides information and resources to facilitate group tourism activities, positioning itself as a key local hospitality service provider. The business is relatively new, with domain registration in 2024, and targets groups such as schools and friends planning visits. Technically, the website is built on WordPress and uses common tools like Google Analytics and Rank Math SEO, indicating a moderate level of digital maturity. The site is hosted by OVH, a reputable provider, and employs HTTPS for secure communications. However, there is room for improvement in security posture, including the implementation of security headers and visible privacy and cookie policies. No forms or direct contact information were found in the analyzed content, which may impact user engagement and trust. Overall, the website is professional and relevant to its audience but would benefit from enhanced privacy compliance and security best practices.

ATMO BFC is a regional environmental health organization focused on air quality, climate, energy, and mobility in Bourgogne-Franche-Comté, France. The website serves as an authoritative source for environmental data, publications, and public information. The organization appears well-established with a domain registered since 2017 and no privacy protection, indicating transparency. The site uses Drupal 10 CMS with modern JavaScript libraries and includes analytics via Matomo and cookie consent via CookieYes. Security posture is adequate with HTTPS and domain protections but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial due to the absence of a visible privacy policy page. Overall, the website is professional, content-rich, and trustworthy for its target audience.

Via Transportation operates a sophisticated digital platform that transforms public transit and shared mobility through software and operational services. The company targets a broad audience including cities, transit authorities, operators, educational institutions, corporations, and healthcare providers. Their market position is strong, supported by strategic partnerships with industry leaders such as Waymo and Citymapper. The website reflects a mature enterprise with comprehensive service offerings including microtransit, paratransit, planning and scheduling, and consulting services. Technically, the site is built on HubSpot CMS with modern marketing and analytics integrations, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforcement, reCAPTCHA Enterprise usage, and domain locking, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

R

RATP Dev

ratpdev.com

66

RATP Dev is a global operator specializing in the operation and maintenance of urban and interurban transportation networks across five continents. The company offers a wide range of services including metro, tramway, bus, train, sightseeing, demand-responsive transport, and specialized services for persons with reduced mobility. The website reflects a mature enterprise with a strong international presence and multiple subsidiaries. Technically, the site is built on Drupal 10, uses modern analytics and mapping technologies, and implements cookie consent mechanisms, indicating a reasonable level of digital maturity. Security posture is good with HTTPS and some privacy measures, but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and branding align with the known RATP Group. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in privacy and security disclosures.

S

Swiss National Bank

snb.ch

75

The Swiss National Bank (SNB) operates as Switzerland's central bank, providing essential services including monetary policy implementation, issuance of banknotes and coins, payment transaction facilitation, asset investment, and financial stability oversight. The website serves a broad audience including the general public, financial market participants, media, researchers, and government entities. It positions itself as a key national financial institution with a strong market presence and government backing. Technically, the website employs modern web technologies such as JavaScript, SVG icons, and CSS, likely managed via a custom CMS. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. The site uses HTTPS with strong SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site enforces HTTPS, avoids exposing sensitive data, and implements secure forms. However, explicit security policies and incident response contacts are not published, and no vulnerability disclosure or security.txt files are found. Analytics are conducted via a custom SNB service with moderate user tracking and a two-year data retention policy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a high legitimacy score based on WHOIS data consistency. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure mechanisms to enhance transparency and security posture.

B

BLR

the-blr.com

67

BLR is a Slovak-based digital agency specializing in modern web design, development, and digital marketing services including SEO, PPC, audits, and consulting. The company targets businesses seeking to enhance their online presence with tailored digital solutions. The website demonstrates a professional and modern design, leveraging Webflow CMS and advanced front-end libraries such as GSAP and jQuery. The technical infrastructure is robust, with fast performance, mobile optimization, and accessibility considerations. Security posture is solid with HTTPS enforced and CAPTCHA protection on contact forms, though explicit security headers and incident response policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Overall, BLR presents a credible digital service provider with room for improvement in security transparency and business contact information.

Sky Gym Říčany is a recently established fitness center located in Říčany, Czech Republic, offering a modern gym experience with professional trainers, circuit training, solarium services, and personal locker rentals. The website positions itself as the largest and most modern fitness facility in the region, targeting a broad audience including students, professionals, and seniors. The business model revolves around membership access, personal training, and additional wellness services. Technically, the website is built on WordPress using Elementor and the Kadence theme, hosted by a Czech hosting provider, and demonstrates moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Contact information is clearly presented, though no email or contact forms are found on the homepage. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

The website navyrovne.jecool.net serves as a community portal for the residents and unit owners of a residential building, providing updates, committee information, document archives, and a communication platform. It is built on WordPress with standard plugins and a dated theme, indicating a small-scale, community-focused operation. The technical infrastructure is basic but functional, with moderate performance and limited mobile optimization. Security posture is minimal, lacking key security headers and formal privacy or cookie policies. No contact or business registration information is provided, reducing business credibility. The domain is a subdomain of jecool.net, with no WHOIS data available for the subdomain itself, which is typical but limits domain registration trust signals. Overall, the site is safe and appropriate for general audiences but requires improvements in security and compliance to enhance trust and protection.

Solirispro.com is a professionally designed pharmaceutical website dedicated to providing healthcare professionals in the United States with comprehensive information about Soliris (eculizumab), a complement inhibitor drug approved by the FDA for multiple rare diseases. The site emphasizes safety information, prescribing details, and REMS program enrollment, reflecting a strong focus on regulatory compliance and patient safety. The business is positioned as a leader in its niche with extensive clinical trial data and long-term market presence. Technically, the site uses modern web technologies including jQuery, Google Analytics, and Google Tag Manager, hosted likely on AWS infrastructure. While the site is mobile-optimized and well-structured, it lacks some advanced SEO and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site projects high business credibility and trustworthiness with minor areas for technical and compliance enhancement.

A

Alexion Pharmaceuticals, Inc.

ultsolrems.com

70

The website ultsolrems.com serves as the official portal for the ULTOMIRIS and SOLIRIS Risk Evaluation and Mitigation Strategy (REMS) program managed by Alexion Pharmaceuticals, Inc. It provides critical information and resources aimed at healthcare providers, pharmacies, and healthcare settings to ensure safe prescribing and dispensing of these medications. The site emphasizes patient safety through vaccination and awareness of meningococcal infection risks, aligning with FDA REMS requirements. The business model is focused on regulatory compliance and education within the pharmaceutical healthcare sector, targeting US-based healthcare professionals and institutions.

A

Alexion Pharmaceuticals, Inc.

alexiononesource.com

69

Alexion Pharmaceuticals, Inc. operates the OneSource platform to provide personalized support and education for patients undergoing treatment with Alexion therapies. The website serves as a resource hub offering treatment information, prescribing details, and access to patient education managers. It targets patients and healthcare professionals within the United States, reflecting a specialized healthcare service model. The platform is well-branded and consistent with the parent company's identity, emphasizing trust and professionalism. Technically, the website leverages a modern technology stack including Sitecore CMS, AWS hosting, Google Analytics, Facebook Pixel, and Salesforce marketing tools. It employs HTTPS with strong domain control and uses cookies responsibly with a clear consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, anti-CSRF tokens, and domain status protections. However, it lacks explicit security policies, vulnerability disclosure information, and some recommended security headers like Content-Security-Policy. No vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the business profile, supporting legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements include enabling DNSSEC, enhancing security headers, and publishing security and incident response policies to further strengthen trust and compliance.

S

Sdružení vlastníků obecních, soukromých a církevních lesů v ČR

svol.cz

48

Sdružení vlastníků obecních, soukromých a církevních lesů v ČR (SVOL) is a well-established Czech non-profit association founded in 2002, representing municipal, private, and church forest owners. The organization focuses on advocacy, education, and support services for forest owners, holding a significant market position covering 46% of non-state forest area in the Czech Republic. Their website provides comprehensive information, news updates, and resources tailored to their target audience of forest owners and forestry professionals. Technically, the site is built on Joomla CMS with modern JavaScript libraries and integrates Google Analytics and Tag Manager for user tracking, complemented by a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and audience.

The website www.oborahukvaldy.cz serves as the official online presence for Obora Hukvaldy, affiliated with Biskupství ostravsko-opavské, a regional ecclesiastical entity managing forestry and related services. The site provides information about hunting, fishing, and other services related to the management of the Obora Hukvaldy area. The business model is informational and service-oriented, targeting local visitors and stakeholders interested in forestry and land management activities. The market position is local and specialized, with a small organizational size and limited digital footprint. Technically, the website is built on WordPress 6.8.3, utilizing Bootstrap and jQuery 1.11.2, indicating a moderately modern but somewhat dated technology stack. The site is functional with basic mobile optimization and accessibility features but lacks advanced SEO and performance optimizations. The absence of updated libraries and security headers suggests room for technical improvements. From a security perspective, the site uses HTTPS but lacks critical security headers such as Content-Security-Policy and HSTS. No evidence of security policies, incident response contacts, or vulnerability disclosures were found. The WHOIS data is unavailable, which raises concerns about domain registration transparency and trustworthiness. No signs of malware or phishing were detected, but the security posture is moderate and could benefit from enhancements. Overall, the website is safe and suitable for general audiences, with no adult or questionable content. However, the lack of privacy and cookie policies, combined with missing WHOIS data and security headers, lowers its compliance and trust scores. Strategic improvements in security practices, privacy compliance, and technical modernization are recommended to enhance the site's credibility and resilience.

D

Diecéze ostravsko-opavská

doo.cz

57

Diecéze ostravsko-opavská operates as the official diocesan organization for the Ostravsko-Opavská region in the Czech Republic, providing religious, pastoral, educational, and community services. The website serves as a comprehensive information portal for parishioners, clergy, and the general public interested in diocesan activities, events, and organizational structure. It maintains a consistent brand presence and offers multiple communication channels including social media and direct contact information. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery Page Builder, and several plugins enhancing user experience and content management. Hosting is provided by cesky-hosting.eu, and the site is optimized for mobile devices with good SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses nonce tokens for AJAX requests, indicating a baseline security posture. However, it lacks explicit security headers and a public security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, professional, and well-maintained, suitable for its non-profit religious mission. Strategic improvements in privacy compliance and security hardening would enhance its risk posture and user trust.

I

ispmanager

ispmanager.com

69

ispmanager operates as a Linux-based hosting control panel provider, targeting web developers, system administrators, website managers, and hosting providers. The company offers software solutions for managing web servers, mail servers, SSL certificates, and security features, supported by a partner program and a global user base. The website reflects a mature business with 20 years of market presence and millions of websites supported worldwide. Technically, the site uses modern web technologies including JavaScript modules, CSS, and integrates analytics and consent management tools, providing a fast, mobile-optimized, and accessible user experience. Security posture is generally good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and a published security policy. The absence of WHOIS data for the domain is a notable risk factor, potentially indicating domain registration issues or privacy blocking, which detracts from overall trustworthiness. Strategic recommendations include enhancing security transparency, publishing incident response contacts, and verifying domain registration legitimacy to improve business credibility and security posture.

F

Futura DDB

futuraddb.com

56

Futura DDB is a well-established integrated advertising agency based in Slovenia, offering a comprehensive suite of marketing services that blend digital and traditional approaches. Their market position is strong, supported by a notable client portfolio including major brands such as McDonald's Slovenija and Merkur, and multiple industry awards like the Agency of the Year title awarded 14 times. Their key services include branding, digital product development, communications, gaming and e-sport marketing, and media planning. The website reflects a professional and modern digital presence with excellent design quality and user experience, optimized for mobile devices and enriched with multimedia content.

F

Futura DDB

futura.si

55

Futura DDB is a professional integrated advertising agency based in Slovenia, offering a comprehensive range of marketing services including branding, digital product development, communications, gaming and e-sport marketing, and media planning. The company positions itself as a market leader with multiple industry awards, targeting businesses seeking integrated digital and traditional marketing solutions. The website reflects a mature digital presence with modern technologies such as Alpine.js, Livewire, and Google Analytics integrated for performance and user tracking. The site is well-optimized for mobile and desktop users, providing a seamless user experience with clear navigation and professional design. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place; however, the absence of security headers and WHOIS registration data introduces some risk factors. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in domain registration and security policies.

P

Proceedings of the National Academy of Sciences (PNAS)

pnas.org

65

The Proceedings of the National Academy of Sciences (PNAS) website serves as a comprehensive platform for one of the world's most-cited multidisciplinary scientific journals. It offers access to high-impact research across biological, physical, and social sciences, targeting researchers and academics globally. The site supports author submissions, provides current and past issues, and maintains a professional and consistent brand image aligned with the National Academy of Sciences. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Cloudflare Insights for analytics and performance monitoring. It is hosted securely with HTTPS and includes responsive design for mobile optimization. Security posture is strong with secure login forms, nonce usage in scripts, and cookie consent mechanisms, although explicit security policies and vulnerability disclosures are not publicly available. The absence of WHOIS data is likely due to registry restrictions rather than suspicious activity, and the website's affiliation and content quality strongly support its legitimacy. Overall, the site demonstrates a mature digital infrastructure with good privacy compliance and a high level of trustworthiness.

O

ohai.is

ohai.is

53

ohai.is is a small Iceland-based technology service provider offering a suite of decentralized and privacy-focused public internet services including Mastodon social media, Matrix messaging, collaborative markdown editing, encrypted pastebin, polls, recipe management, ad removal, and a game server community. The website is professionally designed with clear navigation and consistent branding, targeting general internet users interested in privacy and decentralized platforms. Technically, the site uses standard HTML5 and CSS with hosting provided by fnoco.eu, showing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no cookie consent mechanism is implemented. The domain registration is consistent with the business age and shows no suspicious patterns, supporting legitimacy. Overall, the site is trustworthy and functional but could improve in security and privacy compliance areas.

A

APA POLSKA sp. z o. o. sp. komandytowa

apartiteq.pl

39

APA POLSKA operates the website apartiteq.pl, specializing in flexible and innovative systems for hanging pictures, wall decorations, and exhibition displays. The company targets a diverse audience including schools, businesses, residential customers, galleries, museums, and public spaces. Their product portfolio includes hanging systems, exhibition systems, signage, and sales support materials. The website is professionally designed with clear navigation and comprehensive product categorization, reflecting a solid market position in Poland.

M

Mastodon Share

mastodonshare.com

48

MastodonShare is a small, niche technology project launched in late 2022 that provides a free and privacy-focused tool enabling users to share content easily on any Mastodon instance. The service simplifies sharing by remembering the user's Mastodon instance via cookies and does not require browser extensions or API access. The website is well designed with clear instructions and a straightforward user experience, targeting Mastodon users and website owners who want to facilitate sharing to Mastodon. Technically, the site uses Bootstrap and Font Awesome for styling and icons, hosted on Hover's DNS infrastructure. The site is mobile optimized and SEO friendly but lacks advanced security headers and DNSSEC, which are recommended for improved security. No analytics or tracking scripts were detected, aligning with the stated privacy-first approach. From a security perspective, the site uses HTTPS and has domain registration protections but lacks a privacy policy, cookie consent mechanism, and formal security or incident response policies. No vulnerabilities or malicious content were detected, but improvements in security headers and compliance documentation are advised. Overall, MastodonShare presents a trustworthy, privacy-conscious utility with moderate technical maturity and good business credibility for a small project. Strategic improvements in privacy compliance and security posture would enhance trust and resilience.

quimica.es is a well-established Spanish-language online portal serving the chemical industry, providing comprehensive news, product catalogs, company directories, whitepapers, and market overviews. Operated by LUMITOS AG, the platform targets professionals in chemical manufacturing, laboratory research, and process engineering. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Bootstrap, Matomo, and Google Tag Manager, alongside a GDPR-compliant consent management platform. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The absence of WHOIS data is due to registry restrictions common for .es domains, but the domain appears legitimate and consistent with the business identity. Overall, the site offers a professional user experience with good content quality and privacy compliance.

chemeurope.com is a well-established international information portal serving the chemical industry, providing news, product catalogs, white papers, market overviews, and educational resources. The platform targets professionals in industry, research, and science, offering a comprehensive suite of services to facilitate knowledge sharing and procurement processes. The website is operated by LUMITOS AG, a German company, which is reflected in the branding and linked legal documents. Technically, the website employs modern web technologies including jQuery, Bootstrap, Google Tag Manager, and Matomo for analytics, alongside a consent management platform to ensure GDPR compliance. The site is mobile-optimized with good navigation and SEO practices, delivering a positive user experience. However, some improvements in accessibility and security headers could enhance the technical posture. From a security perspective, the site uses HTTPS and secure form submissions, with no visible vulnerabilities or exposed sensitive data. The presence of a consent management platform and clear privacy policies indicates a strong commitment to privacy compliance. The lack of WHOIS registration data is a concern, potentially indicating privacy protection or domain registration issues, which slightly lowers the trust score. Overall, chemeurope.com presents a professional, trustworthy, and content-rich platform with moderate technical and security maturity. Strategic recommendations include enhancing security headers, verifying domain registration details, and improving accessibility features to further strengthen the platform's credibility and compliance.

L

LUMITOS AG

lumitos.com

46

LUMITOS AG operates as a leading B2B online media and marketing service provider focused on sectors including chemistry, life sciences, laboratory, pharmaceuticals, analytics, and food & beverage. The company offers a suite of six market-leading portals and newsletters that inform over 17 million users globally, enabling informed decision-making and business success. Their services encompass online marketing strategies, campaign development, lead generation, SEO/SEA, content marketing, and digital presence creation. The website reflects a mature digital infrastructure built on WordPress with modern analytics and consent management tools, indicating a solid digital maturity level. Security posture is good with HTTPS, CAPTCHA protections, and GDPR compliance, though additional security headers could enhance defenses. The absence of WHOIS data reduces transparency but does not negate the professional and trustworthy appearance of the business. Overall, the site is well-designed, content-rich, and compliant with privacy regulations, supporting a strong market position in the B2B marketing domain.

H

Customer Support Outsourcing Company | HelpSquad BPO

helpsquad.com

59

HelpSquad is a customer support outsourcing company specializing in BPO services. The website presents a business-oriented service offering targeting companies seeking outsourced customer support solutions. The market position and detailed business size or country are not explicitly stated in the accessible content. The technical infrastructure is based on WordPress CMS, enhanced with common marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, Zoho CRM, and reCAPTCHA for form security. DNS is managed via Cloudflare, and the domain is registered with GoDaddy.com, LLC, with a long history dating back to 1999, indicating an established presence. Security posture shows basic best practices like HTTPS and reCAPTCHA but lacks visible security headers and published security policies. Privacy and cookie policies are not found, indicating potential compliance gaps. Overall, the website is functional with moderate technical maturity but requires improvements in privacy compliance and security transparency.

W

Weland Solutions AB

welandsolutions.com

65

Weland Solutions AB is a Swedish company specializing in warehouse automation solutions, including compact lift automats and associated software products such as Compact Store and Compact Talk. The company targets manufacturing, logistics, and e-commerce sectors, offering hardware, software, and support services. Their market position is that of an established medium-sized business with over 25 years of experience, providing tailored solutions to optimize warehouse operations. Technically, the website employs modern JavaScript frameworks like Alpine.js, integrates Google Tag Manager and Cookiebot for analytics and privacy compliance, and uses Umbraco CMS. The site is well-designed, mobile-optimized, and accessible, with clear navigation and professional content. Security posture is moderate; HTTPS is implied but no explicit security headers or policies are published. Privacy compliance is good with a comprehensive privacy policy and cookie consent mechanism. However, WHOIS data is missing, which reduces domain registration transparency and slightly impacts trustworthiness. Overall, the website is professional and trustworthy but could improve in security transparency and domain registration clarity.

F

Framasoft

framaprout.org

56

Framaprout.org is a niche, playful web project operated by the French non-profit organization Framasoft, known for promoting free software and digital commons. The site offers an interactive 'Prout-o-mètre' application with humorous content and browser extensions to engage users in a lighthearted manner. The project targets a general audience interested in digital culture and community-driven initiatives. Technically, the site uses modern frontend technologies including Vue.js and Bootstrap, hosted by OVH sas, with good mobile optimization and privacy-respecting analytics. Security posture is adequate with HTTPS enforced and domain protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is partial, with privacy and terms policies available on the parent site but no cookie consent mechanism on this site. Overall, the site is trustworthy, professionally presented, and aligned with Framasoft's mission.

F

Framasoft

framacolibri.org

62

Framacolibri is a community-driven forum platform operated by Framasoft, a French non-profit organization dedicated to promoting free and open-source software. The website serves as a hub for discussions, support, and collaboration around various Framasoft projects such as PeerTube, Mobilizon, and Yakforms. It targets users and contributors interested in decentralized and libre software solutions. The platform is built on the Discourse forum software, indicating a modern and scalable technical infrastructure. The website demonstrates good digital maturity with responsive design and clear navigation, although some accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses a reputable domain registrar, Gandi SAS. However, it lacks DNSSEC and some recommended security headers, and does not publicly disclose a security policy or incident response contacts. Privacy compliance is limited, with no visible privacy or cookie policies, which could be improved to align with GDPR requirements. No advertising or tracking services were detected, indicating a privacy-respecting approach. Overall, Framacolibri presents a trustworthy and professional community platform with a solid technical foundation. The main risks relate to privacy policy transparency and security policy disclosures, which are recommended for enhancement to improve user trust and compliance. The domain registration details support the legitimacy and consistency of the website's non-profit mission.

K

Kadence WP

kadencewp.com

60

Kadence WP is a technology company specializing in the development and distribution of professional WordPress themes and plugins. Their offerings include both free and premium products designed to help creators and businesses build effective and visually appealing websites. The company maintains a strong market position within the WordPress ecosystem, supported by a professional website, active social media presence, and comprehensive SEO strategies. Technically, the website is built on WordPress using the Kadence Theme and Kadence Blocks, enhanced by performance optimization plugins such as Flying Press and SEO tools like Rank Math. The site demonstrates excellent mobile optimization, fast loading times, and good accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks a publicly visible security policy or incident response information, which could be improved to enhance trust and compliance. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, although the website content and branding are consistent and professional. Overall, Kadence WP presents a trustworthy and well-maintained online presence with minor areas for improvement in transparency and security documentation. Strategic enhancements in these areas would further solidify their credibility and security posture.

F

Framasoft

framalang.org

59

Framasoft is a reputable French non-profit organization dedicated to promoting free software, digital commons, and collaborative translation efforts through its Framalang project. The website serves as a portal for community members to participate in translating digital culture content, primarily from English to French, supporting the broader mission of open knowledge dissemination. The organization maintains a strong presence in the francophone free software ecosystem with multiple linked community platforms and projects. Technically, the site is built using modern static site generation tools (HonKit), ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. The WHOIS data is privacy protected, which is typical and justified for a non-profit entity, and does not detract from the domain's legitimacy. Overall, the site is trustworthy, well-maintained, and aligned with its community-driven mission.

F

Framasoft

framatube.org

56

Framatube is a PeerTube instance operated by the non-profit association Framasoft, dedicated to hosting and sharing videos related to their community and open source projects. The platform leverages decentralized video hosting technology to provide an alternative to mainstream video platforms, emphasizing privacy and open standards. The website is well-branded, consistent, and targets a general audience interested in free and open source software and community content. Technically, the site is built on the PeerTube platform using modern web technologies including Angular and TypeScript, with privacy-respecting Matomo analytics integrated. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

R

Restaurace NOR Jednička

restauracetrutnov.cz

51

Restaurace NOR Jednička is a small hospitality business located in Trutnov, Czech Republic, offering a blend of international and traditional Czech cuisine. The restaurant emphasizes a vintage style ambiance and hosts various events including weddings, celebrations, and corporate gatherings. Their business model focuses on local dining services and event hosting, supported by daily updated menus and drink offerings. The website reflects a consistent brand image with clear contact information and social media presence, targeting local customers and visitors. Technically, the website is built on an older but functional tech stack including jQuery and Bootstrap 3.4, with additional libraries for image galleries and layout management. The site is mobile optimized and provides a cookie consent mechanism, though it lacks modern security headers and visible SSL configuration details. Performance is moderate, and SEO practices are adequate with proper meta tags and Open Graph data. From a security perspective, the site shows basic best practices such as cookie consent but lacks critical security headers and privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact details appear legitimate. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the security posture is moderate but could be improved with enhanced policies and technical controls. The overall risk assessment suggests a generally trustworthy local business website with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, publishing privacy and security policies, verifying domain registration details, and updating technical components to modern standards.

J

Josef Šenk

pojizdnydrevnik.cz

51

The website www.pojizdnydrevnik.cz represents a small Czech manufacturing business specializing in mobile wood storage racks designed for transporting firewood to heating appliances. The company, identified as Josef Šenk, offers modular components with customizable axle types and color finishes, targeting homeowners and users of wood heating systems. The site is professionally designed with clear navigation and multimedia content, including images and video demonstrations, enhancing user engagement. Technically, the site employs a modern tech stack including jQuery, Bootstrap 3.4, and various gallery and carousel libraries, built on the inPage CMS platform. Mobile optimization and SEO practices are good, though accessibility could be improved. Security posture is moderate with cookie consent implemented but lacking explicit privacy and terms of service pages and security headers. WHOIS data is unavailable, which impacts domain trustworthiness. Overall, the site is functional and credible but would benefit from enhanced transparency and security measures.

K

KRAKONOŠ spol. s r.o.

hotel-krakonos.cz

53

Hotel Krakonoš is a small hospitality business located in the center of Trutnov, Czech Republic, offering accommodation, restaurant services, and associated brewery products. The website provides detailed information about the hotel’s facilities, historical background, and local attractions, targeting tourists and visitors to the Krkonoše region. The business is well-positioned locally with a clear focus on hospitality and regional heritage. Technically, the website uses a moderate technology stack including jQuery and Bootstrap 3.4, with a CMS named inPage. The site is mobile-optimized and includes a cookie consent mechanism, but lacks explicit privacy and terms of service pages. Security posture is moderate with no detected WAF or blocking, but missing security headers and unknown SSL configuration reduce the security score. WHOIS data is missing, which impacts domain trustworthiness, but the website content and business information appear legitimate and consistent with a small hospitality company. Overall, the site is professional and trustworthy with room for improvement in security and compliance documentation.

N

NOR a.s.

grillnor.cz

50

Grill NOR is a small hospitality business based in the Czech Republic specializing in meal delivery services for individuals and companies in the Trutnov region. Their business model focuses on long-term cooperation with customers, offering diverse menus and regular meal plans similar to school canteen accounts. The website presents clear business information, contact details, and social media presence, supporting a moderate level of trust and professionalism. Technically, the website uses a legacy but stable technology stack including jQuery and Bootstrap 3.4, with additional libraries for image galleries and grid layouts. The site is mobile optimized and performs moderately well, though accessibility features are basic. SEO is adequately addressed through meta tags and Open Graph data. Cookie consent is implemented with a detailed user interface, reflecting awareness of privacy compliance requirements. Security posture is adequate with HTTPS enforced and some best practices like disabling right-click on images. However, the absence of security headers and a visible privacy policy or terms of service page limits the overall security maturity. No WHOIS data is available, which reduces domain trustworthiness, but the website content and business details appear consistent and legitimate. Overall, the site is functional and professional for its business scope but would benefit from enhanced security headers, explicit privacy and terms policies, and improved WHOIS transparency to strengthen trust and compliance.

S

Svatopluk Vízdal

vizdal.cz

46

Svatopluk Vízdal is a small Czech Republic-based company specializing in the sale and professional installation of shading technologies including horizontal and vertical blinds, roller blinds, awnings, and insect screens. The company has been operating since 1994, serving both residential and commercial customers primarily in the Královéhradecký region. Their website reflects a focused business model centered on customized solutions and expert installation services. The company maintains a modest online presence with clear contact details and social media engagement via Facebook. Technically, the website is built on a legacy but stable technology stack including jQuery, Bootstrap 3.4, and FontAwesome. It uses the inPage CMS platform and incorporates several JavaScript libraries for UI enhancements. The site is mobile responsive and well-structured with good SEO practices, though accessibility features are basic. Security-wise, HTTPS is implied but security headers are not evident, and no explicit privacy or cookie policies are present, indicating room for compliance improvements. The security posture is moderate with no visible vulnerabilities or exposed sensitive data, but the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and trustworthiness. The website lacks formal security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for enhancing trust and compliance. Overall, the site is functional and professional but would benefit from improved security and privacy transparency. Strategically, the company should prioritize implementing comprehensive privacy and cookie policies, enhance security headers, and verify domain registration details to strengthen trust. Adding vulnerability disclosure and incident response information would further improve security culture and customer confidence.

R

Richard Reichl

reichl.cz

50

Reichl.cz is a small family-owned Czech business specializing in the handcrafted production and sale of decorative candles, ceramic trays, and blacksmith products. The company emphasizes quality materials, such as health-safe paraffin, and traditional craftsmanship with a focus on long-lasting candles and appealing designs. Their market position is that of a niche local manufacturer with a direct-to-consumer e-commerce model. Technically, the website uses a moderate modern tech stack including jQuery, Bootstrap, and various gallery and carousel libraries, with a CMS named inPage. The site is mobile-optimized and includes standard SEO and accessibility features, though some improvements are possible. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced HTTP security headers and published security policies. WHOIS data is unavailable, which limits domain trust assessment, but the website content and business information are consistent and professional. Overall, the site is safe, compliant with GDPR, and suitable for general audiences.

L

LYNX.cz

lynx.cz

58

LYNX.cz is a prominent Czech brand specializing in the retail and manufacturing of gaming and office computers, along with related accessories. The company targets gamers and general technology consumers within the Czech Republic, offering a broad product lineup including gaming PCs, home and office computers, and peripherals. Their market position is strong locally, supported by a professional website and multiple customer support channels. Technically, the website employs modern JavaScript frameworks and analytics tools such as Google Tag Manager, Hotjar, and Microsoft Clarity, with a responsive design optimized for mobile devices. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy of the business. Strategic recommendations include enhancing security policies, publishing incident response contacts, and improving security header implementation.

F

Framasoft

framalab.org

58

Framasoft operates Framalab as an experimental platform offering privacy-respecting, open-source alternatives to popular proprietary web services. The organization is a French non-profit established in 2011, focusing on community-driven digital tools such as forms, petitions, shared expense management, diagramming, and PDF handling. The website is well-structured, multilingual, and targets users seeking ethical and privacy-conscious digital services. Technically, the site uses modern frontend technologies like Vue.js and FontAwesome, hosted by OVH sas, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers, and no cookie consent mechanism is present. Privacy compliance is supported by comprehensive privacy and terms pages on the parent site, though explicit cookie policies are missing. Overall, the site is trustworthy and professional, with minimal tracking and strong community engagement via social media and forums.

The website at wip.framasoft.org currently serves as a placeholder maintenance page indicating that the service is not yet available. There is minimal content, limited to a message in French stating the service does not exist yet, and a credit link to an artist for the background image. The site lacks any business or contact information, privacy or cookie policies, and does not provide any interactive elements or forms. The WHOIS query for the domain failed to return any registrar, registrant, or creation data, which raises concerns about the domain's legitimacy and maturity. Technically, the site is built with basic HTML and CSS, with no detected CMS, frameworks, or advanced technologies. No security headers or HTTPS information was found, indicating a weak security posture. Overall, the site is not yet operational and provides no business or security assurances.

F

Framasoft

mobilizon.fr

60

Mobilizon.fr is a community-driven event and group management platform operated by Framasoft, a French non-profit organization promoting free software and digital freedom. The website serves as an instance of the Mobilizon platform, enabling users to organize, mobilize, and manage events and groups. The platform targets general audiences interested in community engagement and activism. Technically, the site uses modern JavaScript frameworks such as Vue.js and UI libraries like Oruga, with good mobile optimization and accessibility features. The domain is registered with GANDI since 2019, consistent with the platform's operational timeline. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks some security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional, trustworthy, and professionally presented but would benefit from enhanced privacy and security documentation.

F

Framasoft

sepiasearch.org

57

Sepia Search is a specialized search engine focused on indexing videos, channels, and playlists from the decentralized PeerTube network. Developed and maintained by Framasoft, a recognized non-profit organization in the free software community, the website serves a niche audience interested in decentralized video content. The platform leverages modern web technologies including Vue.js and modular JavaScript to deliver a responsive and user-friendly search experience. Hosting is provided by OVH, a reputable provider, and the domain registration is consistent with the business timeline, enhancing trustworthiness. From a security perspective, the website uses HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and there is a lack of explicit security policies or incident response contacts published. Privacy compliance is partially addressed through a linked legal notice page, but no cookie consent mechanism is present despite the use of a tracking script. No direct contact information such as emails or phone numbers are provided on the main site, which may limit user support options. Overall, the website demonstrates good technical implementation and business credibility within its niche. The content is safe for general audiences, with no adult or explicit material detected. Recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and implementing a cookie consent mechanism to improve privacy compliance and security posture.

F

Framasoft

framagames.org

54

Framagames is a small, community-driven platform operated by the non-profit organization Framasoft, offering free and open source games playable online or offline. The website targets a general audience interested in free software and gaming, positioning itself as a niche player within the open source gaming community. The platform provides downloadable games and online play options, supported by community engagement and guides hosted on the parent Framasoft domain. Technically, the site is built using modern web technologies including Vue.js and Font Awesome, hosted by Gandi SAS. The website is mobile optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and performance. The domain is well maintained with HTTPS and clientTransferProhibited status, but lacks DNSSEC and security headers which could enhance security posture. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security policies, incident response information, and cookie consent mechanisms. Tracking is minimal and privacy policies are hosted on the parent domain, indicating reasonable privacy compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, Framagames presents a trustworthy, well-maintained platform with a strong community focus. Strategic improvements in security headers, cookie consent, and public security policies would enhance its security posture and compliance. The site is safe for general audiences and aligns well with its non-profit, open source mission.

F

Framasoft

framagroupes.org

63

Framasoft is a French non-profit association founded in 2004, dedicated to popular education on digital challenges and the cultural commons. The Framagroupes service provides a free, ethical platform for creating and managing email discussion groups, emphasizing user privacy, data autonomy, and community moderation. The organization is funded primarily by donations and operates with transparency and a strong ethical stance against surveillance capitalism. Technically, the website uses modern web technologies including Vue.js and the Sympa mailing list software, hosted by Gandi SAS. The site is well-designed, mobile-optimized, and accessible, with clear navigation and professional content. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is strong with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy, safe, and aligned with its mission of digital emancipation.

F

Framasoft

framacarte.org

53

Framasoft is a French non-profit association dedicated to promoting digital autonomy and popular education through ethical, free/libre software services. Framacarte is one of its flagship projects, offering a free online map customization tool based on OpenStreetMap and the uMap software. The organization is funded primarily by donations and emphasizes privacy, minimal data collection, and transparency. The website is professionally designed, mobile-optimized, and rich in content, targeting a broad audience interested in digital emancipation and open-source tools. Technically, the site uses modern web technologies including Vue.js and Bootstrap, hosted by OVH sas. It employs HTTPS with good SSL configuration but lacks DNSSEC and some security headers, which are recommended for enhanced security. Analytics are handled via Matomo with minimal tracking, aligning with the organization's privacy ethos. Security posture is solid for a non-profit, with domain registration protections and no evident vulnerabilities, though improvements are suggested in DNS security and explicit security policies. Privacy compliance is good, with clear terms and privacy policies, though no cookie consent mechanism was detected. Overall, Framasoft and Framacarte present a trustworthy, well-managed digital service with strong community and ethical foundations. Strategic improvements in security and privacy transparency would further enhance trust and resilience.

F

Framasoft

framadate.org

59

Framadate is a free, open-source polling and scheduling tool operated by the French non-profit association Framasoft. The website offers collaborative event scheduling and opinion polling services with a strong emphasis on user privacy, data autonomy, and digital emancipation. The platform is donation-funded and positions itself as an ethical alternative to commercial services, targeting individuals and organizations seeking privacy-respecting tools. Technically, the site uses modern web technologies such as Vue.js and Bootstrap 4, is hosted by a reputable registrar (Gandi SAS), and is well-optimized for performance and mobile devices. Security posture is solid with HTTPS enforced and minimal data collection, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is good with a comprehensive privacy policy and terms of use, but lacks a cookie consent mechanism. Overall, the site is trustworthy, professional, and aligns well with its stated mission and business model.

F

Framasoft

framalistes.org

63

Framasoft is a French non-profit organization providing ethical digital services, including Framalistes, a free mailing list platform focused on privacy and user autonomy. The organization is well-established with a domain age consistent with its founding and operates transparently with donation-based funding. The website is professionally designed, mobile-optimized, and accessible, reflecting a mature digital presence. Technically, it uses modern frameworks like Vue.js and the Sympa mailing list software, hosted by a reputable registrar, Gandi SAS. Security posture is good with HTTPS and domain transfer protections, though DNSSEC and explicit security policies could be improved. Privacy compliance is strong with minimal tracking and clear terms of use. Overall, the site is trustworthy and serves a niche audience seeking ethical alternatives to commercial mailing list services.

F

Framasoft

framatalk.org

60

Framasoft is a French non-profit association dedicated to promoting digital autonomy and popular education through ethical and privacy-respecting online services. Their Framatalk platform offers free, ad-free videoconferencing based on the open-source Jitsi Meet software, targeting individuals and groups seeking secure and easy-to-use communication tools. The organization is funded primarily by donations and emphasizes transparency and community involvement. Technically, the website leverages modern web technologies including Vue.js and Bootstrap 4, hosted by OVH sas, a reputable provider. The site is well-optimized for performance and mobile devices, with good SEO and accessibility features. The use of open-source software and self-hosted analytics reflects a strong commitment to privacy and user control. Security-wise, the site enforces HTTPS and uses domain status protections to prevent unauthorized changes. However, DNSSEC is not enabled and no explicit security policy or vulnerability disclosure mechanism is published. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by clear terms and policies, though no cookie consent mechanism was found. Overall, Framatalk presents a trustworthy, professional, and privacy-conscious service with a strong ethical foundation. Strategic recommendations include enabling DNSSEC, publishing a security policy and vulnerability disclosure, and adding cookie consent mechanisms to enhance compliance and user trust.