Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

0
Websites
0
Industries
0
Countries
0
Avg Score
Page 53 of 90|Showing 2601-2650 of 4454
onf.fr favicon

Office national des forêts

onf.fr

0
GovernmentFrancelargeMEDIUM

The Office national des forêts (ONF) is a major French government-related organization focused on sustainable forest management, environmental protection, and public engagement. The website reflects a well-established entity with a domain registered since 1996, consistent with its long-standing public service role. The site offers a variety of services including forest management, risk management, and services for local authorities and businesses. It targets a broad audience including public officials, enterprises, forest professionals, and the general public. Technically, the website employs modern JavaScript frameworks such as Vue.js, uses analytics tools like Matomo and Facebook Pixel, and integrates Google Tag Manager for marketing and tracking purposes. The site is mobile-optimized with good navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Privacy policies and terms of service are clearly presented, supporting GDPR compliance. Overall, the website is trustworthy, professional, and aligns well with the organization's mission and public service nature.

35
28
17
75
77
65
100
forestryenvironmentgovernmentpublicserviceforestmanagement+1 more
jQuery 2.2.4Vue.jsGSAPGoogle Tag Manager+3

Partner Domains:

paiement.onf.fr
service
ventesdebois.onf.fr
service

+3 more partners

2025-10-19T00:04:30.699Z
havasmedianetwork.com favicon

Havas Media Network

havasmedianetwork.com

0
MediaFranceenterpriseMEDIUM

Havas Media Network is a global media experience network focused on connecting brands and consumers through meaningful media, leveraging data, content, and technology. Founded in 2023, it operates as part of the larger Havas Group, with a presence in over 140 countries and a workforce exceeding 10,000 people. The company offers a range of services including media buying and planning, e-commerce solutions, data technology, and entertainment activation, serving a diverse portfolio of high-profile clients worldwide. Technically, the website is built on WordPress and employs modern web technologies such as Google Tag Manager and Swiper.js for enhanced user experience and analytics. The site is well-optimized for mobile devices, features fast loading times, and includes comprehensive SEO and accessibility features. Hosting and DNS are managed by Gandi SAS, a reputable provider, with HTTPS enforced ensuring secure communications. From a security perspective, the site demonstrates good practices including HTTPS, clientTransferProhibited domain status, and no detected vulnerabilities or exposed sensitive data. However, there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies or incident response information. Privacy compliance is strong with clear privacy and cookie policies, GDPR adherence, and consent mechanisms in place. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with its business objectives. Strategic recommendations include enhancing DNS security, formalizing security policies, and continuous monitoring to maintain high security and compliance standards.

75
68
2
70
77
85
100
mediaadvertisingmarketingglobalnetworkdata+1 more
Google Tag ManagerSwiper.jsWordPressGandi SAS DNS+2

Partner Domains:

havas.com
parent
2025-10-19T00:03:03.922Z
C

capline.org

capline.org

0
TransportationFrancesmallMEDIUM

The website capline.org is a French digital platform dedicated to the registration of nautical races. It centralizes race registrations and allows participants to upload and reuse necessary documents for their participation. The platform targets participants and organizers of nautical races, positioning itself as a niche service within the transportation sector. The domain was registered in April 2023, consistent with the business's recent establishment. Technically, the website uses modern web technologies including JavaScript and Bootstrap for responsive design. It is hosted by Gandi SAS and served over HTTPS, ensuring basic security. However, the site lacks advanced security headers and DNSSEC, which could be improved to enhance security posture. The website is moderately optimized for mobile devices and performance is average. From a security perspective, the site has a basic security posture with HTTPS enabled but missing important security headers and no DNSSEC. There are no privacy or cookie policies present, which is a compliance gap especially under GDPR. No contact information or incident response details are provided, limiting transparency and user trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is functional and serves its business purpose but requires improvements in privacy compliance, security best practices, and contact transparency to increase trustworthiness and regulatory compliance. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and providing clear contact and incident response information.

30
50
2
60
75
70
100
nauticalregistrationsportsdigitalplatformfrance
JavaScriptCSSHTML
2025-10-18T20:47:02.465Z
L

Les Echos Le Parisien Événements

forumdesassociations.com

0
Non-profitFrancemediumHIGH

The Forum National des Associations & Fondations website represents a well-established French event focused on the associative and social economy sectors. Organized by Les Echos Le Parisien Événements, the site promotes the 19th edition scheduled for November 2025 in Paris. The platform provides detailed event information, partner listings, speaker highlights, and replay content, targeting professionals and stakeholders in the non-profit sector. The website demonstrates consistent branding and a professional presentation aligned with its market position as a leading national event. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and uses Google Tag Manager for analytics and Didomi for GDPR-compliant consent management. The site is mobile-optimized with good SEO practices and moderate performance. No CMS or hosting provider is explicitly identified, but the infrastructure appears stable and professionally maintained. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and published security policies or incident response information. The domain WHOIS data shows a long-standing registration since 2005 with appropriate domain status protections, indicating legitimacy and stability. No WAF or blocking mechanisms are detected, and no vulnerabilities or exposed sensitive data are apparent. Overall, the website is safe, professional, and compliant with privacy regulations, serving its audience effectively. Recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to enhance trust and security posture.

15
35
2
70
-
90
20
associationsfoundationsnon-profiteventsocialeconomy+4 more
JavaScriptHTML5CSS3Google Tag Manager+2

Partner Domains:

event.forumdesassociations.com
partner
www.ebra-events.com
partner

+3 more partners

2025-10-18T20:42:26.261Z
cercletissier.com favicon

Cercle Tissier

cercletissier.com

0
OtherFrancemediumCRITICAL

Cercle Tissier is a private European center specializing in martial arts, dance, and wellness activities. It offers a wide range of classes including Aïkido, Judo, Karate, Jiu Jitsu Brésilien, dance styles, and wellness practices such as Pilates, Yoga, and Thai massage. The center targets martial arts practitioners and wellness enthusiasts of all ages, providing both group and private lessons. The website positions itself as a leading private martial arts institution with worldwide recognized sections, supported by active social media presence and clear contact information. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, Google Analytics, Facebook Pixel, and WPBakery Page Builder. It demonstrates good SEO practices and mobile optimization, though performance is moderate. The site lacks some advanced security headers and visible cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data for the domain is a concern for domain legitimacy but does not negate the business presence evidenced by the website content and contact details. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure. However, the lack of security headers and explicit privacy and cookie policies reduces compliance maturity. No incident response or vulnerability disclosure information is provided. Overall, the site is safe for general audiences and professionally presented. Strategically, the business should focus on enhancing privacy compliance, publishing clear policies, implementing security headers, and verifying domain registration details to improve trust and security posture.

-
-
-
-
-
-
-
martialartsdancewellnessfitnessaikido+10 more
WordPressYoast SEOGoogle AnalyticsGoogle Tag Manager+8
2025-10-18T19:37:53.407Z
esso.fr favicon

Esso S.A.F.

esso.fr

0
EnergyFrancelargeMEDIUM

Esso S.A.F., a subsidiary of ExxonMobil, operates as a major energy company in France with a history dating back to 1902. The company specializes in purchasing crude oil on the international market, refining it in its French facilities, and marketing a broad range of petroleum products. The website serves as a corporate portal providing information about the company's business model, strategic priorities, governance, and sustainability efforts. The site is well-branded and consistent with ExxonMobil's global presence, targeting both general public and business stakeholders interested in energy products and corporate affairs. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, hosted via Akamai CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a public security policy are absent. The lack of WHOIS data is a notable anomaly, reducing trust in domain registration transparency, but the website content and branding strongly indicate legitimacy. Overall, the site is professional, secure, and compliant with basic privacy standards, though improvements in transparency and security documentation are recommended.

75
40
17
40
52
65
100
energycorporateessoexxonmobilpetroleum+3 more
JavaScriptGoogle Tag ManagerOneTrust Cookie ConsentAkamai (AKSB)+3

Partner Domains:

corporate.exxonmobil.com
parent
jobs.exxonmobil.com
related

+1 more partners

2025-10-18T19:35:08.030Z
reussiravecleweb.fr favicon

Réussir avec le web

reussiravecleweb.fr

0
TechnologyFrancesmallMEDIUM

Réussir avec le web is a French digital service focused on providing an online self-assessment tool to evaluate digital maturity and online presence. The website offers a questionnaire designed to deliver a personalized report to businesses and professionals seeking to improve their digital communication, cybersecurity, and commercial development. The business operates primarily in the technology sector with a niche focus on digital transformation support. The domain is well-established since 2016 and hosted by OVH, a reputable provider. Technically, the website is built on WordPress with a custom theme and uses standard web technologies such as JavaScript and CSS. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, SEO is limited due to the 'noindex, nofollow' robots meta tag, and accessibility features are basic. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and visible privacy consent mechanisms. No explicit contact emails or phone numbers are provided on the main domain, with contact facilitated through a related partner domain. There are no visible vulnerabilities or exposed sensitive data, but improvements are needed in privacy compliance and security best practices. Overall, the website presents a moderate risk profile with good legitimacy and business credibility but requires enhancements in privacy compliance, security headers, and contact transparency to improve trust and regulatory adherence.

55
40
2
70
72
60
100
digitalmaturityautodiagnosticwebpresencequestionnairefrench
WordPressJavaScriptCSS

Partner Domains:

réussir-en.fr
partner
2025-10-18T17:09:39.110Z
T

Ticketmaster

ticketmaster.fr

0
E-commerceFranceenterpriseHIGH

The website www.ticketmaster.fr represents the French domain of Ticketmaster, a globally recognized e-commerce platform specializing in ticket sales for live events such as concerts, sports, and theater. The site is part of a large enterprise business model under the parent company Live Nation Entertainment. However, the provided HTML content indicates that the site is currently inaccessible due to an anti-bot security mechanism that requires identity verification, effectively blocking content access and limiting analysis. From a technical perspective, the site employs advanced bot mitigation technologies including Google reCAPTCHA Enterprise and Google Tag Manager for tracking and analytics. Despite these modern tools, the lack of visible metadata, structured data, and security headers in the provided content suggests limited SEO optimization and potential gaps in security best practices. The absence of privacy, cookie, and terms of service policies in the accessible content further highlights compliance concerns. Security posture is moderate given the use of bot protection but is negatively impacted by the lack of accessible security headers and the blocking of legitimate content. The WHOIS data is unavailable, likely due to privacy protection, which is common for large enterprises but limits transparency. Overall, the site is legitimate and enterprise-grade but currently hindered by security mechanisms that reduce accessibility and transparency. Strategic recommendations include improving the accessibility of privacy and cookie policies, enhancing security header implementation, and ensuring that legitimate users can access content without excessive blocking. These steps will improve user experience, compliance, and trustworthiness.

15
10
2
80
82
70
100
e-commerceticketingsecuritybot-protectionidentity-verification
JavaScriptGoogle reCAPTCHA EnterpriseGoogle Tag ManagerCustom JavaScript modules
2025-10-18T12:22:17.068Z
weezevent.com favicon

Weezevent

weezevent.com

0
TechnologyFrancemediumMEDIUM

Weezevent is a well-established technology company founded in 2008, specializing in providing comprehensive event management solutions including ticketing, access control, cashless payment, staff management, and marketing CRM tools. The company serves a broad audience of event organizers ranging from small to large scale events, positioning itself as a trusted platform with over 500,000 organizers and 1 million events using its services. The website reflects a mature digital presence with professional design, consistent branding, and clear messaging tailored to its target market. Technically, the site is built on WordPress, hosted on AWS infrastructure, and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Facebook Pixel, indicating a good level of digital maturity and marketing sophistication. Security-wise, the site enforces HTTPS, uses domain transfer protection, and secures forms with nonce tokens, but lacks DNSSEC and explicit security headers, and does not publish a security policy or incident response contacts, suggesting room for improvement in security transparency and hardening. Overall, the website is safe, professional, and trustworthy, with moderate user tracking and good compliance with cookie consent requirements, though it lacks visible privacy and terms of service documentation in the provided content. Strategic recommendations include enabling DNSSEC, publishing security and privacy policies, and enhancing security headers to strengthen trust and compliance.

15
68
2
70
67
85
100
eventmanagementticketingaccesscontrolcashlesspaymentstaffmanagement+3 more
jQueryHubSpot analytics and formsTrustpilot widgetGoogle Tag Manager+2
2025-10-18T12:22:06.903Z
ccifi-connect.com favicon

CCI France International

ccifi-connect.com

0
OtherFrancelargeMEDIUM

CCIFI Connect is a mobile application and web platform designed exclusively for members of the French Chambers of Commerce and Industry International (CCI Françaises à l'International). It facilitates global business networking, event agenda access, and exclusive offers across multiple countries. The platform is supported by CCI France International and partners such as BlueSoft, positioning itself as the premier private network of French companies worldwide with over 35,000 member enterprises. The business model centers on membership and providing value-added networking and business development services to its users. Technically, the website employs modern web technologies including React and JavaScript ES modules, with hosting and DNS managed by reputable providers. The site is mobile-optimized and promotes its iOS and Android applications prominently. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. The cookie consent mechanism is comprehensive, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, DNSSEC is not enabled, and common security headers are not explicitly detected, suggesting room for improvement. No explicit security or incident response policies are published, and no vulnerability disclosure program is evident. The domain registration data is consistent and trustworthy, with no privacy protection masking ownership. Overall, CCIFI Connect presents a professional and trustworthy business networking platform with solid technical foundations and good privacy practices. Strategic enhancements in security headers, incident response transparency, and DNS security would further strengthen its posture.

15
50
17
60
52
70
100
businessnetworkingfrenchinternationalcci+3 more
ReactJavaScript ES ModulesCSSGoogle Tag Manager

Partner Domains:

ccifrance-international.org
partner
bluesoft-group.com
partner

+1 more partners

2025-10-18T12:21:21.372Z
devjourney.info favicon

Tim Bourguignon

devjourney.info

0
TechnologyFrancesmallMEDIUM

The website devjourney.info hosts the Software Developers Journey podcast, a niche inspirational podcast focused on sharing the career journeys and life stories of software developers worldwide. The host, Tim Bourguignon, is an experienced software engineer and engineering leader. The podcast targets software developers and aspiring developers seeking motivation and insights into the profession. The business model relies on content creation and listener donations via Patreon. The site is small-scale and personal in nature, with a consistent brand and high-quality content. Technically, the site is built using Jekyll, a static site generator, with modern web technologies including HTML5, CSS, JavaScript, Google Fonts, and Font Awesome. It integrates a third-party podcast player from Buzzsprout and links to major podcast platforms. The site is moderately performant and mobile-optimized, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site does not expose sensitive data or collect personal information via forms, which reduces risk. However, no security headers or privacy/cookie policies are present, indicating gaps in compliance and security best practices. The WHOIS data is privacy protected and incomplete, but consistent with a legitimate personal podcast site. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the site is a well-maintained personal podcast platform with good content quality and technical implementation but would benefit from improved privacy compliance and security hardening to enhance trust and regulatory adherence.

15
35
2
40
75
75
100
podcastsoftwaredevelopmenttechnologycareerinspiration+1 more
HTML5CSSJavaScriptJekyll v3.9.5+3
2025-10-18T11:11:01.366Z