Security Directory

Jönköping University is a large, well-established educational institution in Sweden with a strong international profile, offering higher education programs, research activities, and collaboration opportunities. The website reflects a professional and consistent brand with good content quality and user experience, targeting students, researchers, and academic partners. Technically, the site uses SiteVision CMS with React frameworks and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and Adform. However, the website suffers from a critical security issue due to the absence of a valid SSL certificate, resulting in a basic SSL configuration and lack of HTTPS enforcement. This significantly impacts the security posture and overall trustworthiness of the site. Privacy compliance is strong, with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Contact information and social media presence further enhance business credibility.

L

LUT-yliopisto

lut.fi

0

LUT-yliopisto is a Finnish university focused on solving global challenges through expertise in technology, economics, and social sciences. It holds a strong market position, ranked among the top 300 universities worldwide and recognized for climate action. The university offers comprehensive education programs, research projects, and collaboration opportunities with industry and startups. The website is well-designed, content-rich, and professionally presented, targeting students, researchers, and business partners. Technically, the site is built on Drupal 10 and uses modern web technologies, but lacks SSL/TLS encryption, which is a critical security flaw. Privacy policies and cookie consent mechanisms are implemented, reflecting good GDPR compliance. However, the absence of HTTPS significantly undermines the security posture, exposing users to risks. Strategic recommendations include immediate SSL implementation, enhanced security headers, and improved incident response visibility to strengthen trust and compliance.

Ε

ΕΘΝΙΚΟ ΜΕΤΣΟΒΙΟ ΠΟΛΥΤΕΧΝΕΙΟ

ntua.gr

0

The National Technical University of Athens (NTUA) is a leading public educational institution in Greece, specializing in engineering and technical education. The website serves as the official digital presence of NTUA, providing comprehensive information about its mission, history, academic schools, study programs, research activities, news, events, and services for students and staff. It targets students, researchers, academic personnel, and the general public interested in the university's offerings and updates. The business model is that of a public university focused on education and research services, with a strong market position as a top technical university in Greece.

T

Three Creeks Media

threecreeksmedia.com

0

Three Creeks Media is a small media company specializing in consumer education about mortgages, real estate, personal finance, and veteran benefits. They operate notable brands such as The Military Wallet and Veteran.com and maintain partnerships with established publishers like Military.com and Mortgage Research Center. The website is built on WordPress with modern themes and plugins, optimized for SEO and mobile responsiveness. However, the absence of a valid SSL certificate and HTTPS implementation is a critical security gap, exposing users to potential risks. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site presents professional content and branding but requires urgent security improvements to protect user data and enhance trust.

A

AFTES - Association Française des Tunnels et de l'Espace Souterrain

aftes.fr

0

AFTES is a French non-profit association specializing in the field of tunnels and underground spaces, representing all trades involved in the design and construction of such infrastructures. The organization provides a range of services including training, publications, events, and working groups to advance knowledge and techniques in underground construction. The website is professionally designed, targeting industry professionals and organizations in transportation and energy sectors. Technically, the site is built on WordPress with Elementor and WooCommerce, hosted on OVH, and uses various modern web technologies and analytics tools. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. Cookie consent and privacy policies are well implemented, reflecting good GDPR compliance. Overall, the site is content-rich and trustworthy but requires urgent improvements in its security posture.

A

Association Française du génie Parasismique

afps-seisme.org

0

The Association Française du génie Parasismique (AFPS) is a French non-profit organization dedicated to seismic engineering, risk prevention, and post-earthquake response. The website serves as a comprehensive resource for professionals and members involved in seismic risk management, offering detailed information on missions, training, publications, and events. The association maintains partnerships with governmental bodies and other organizations, reinforcing its position as a key player in seismic risk mitigation in France. Technically, the website is built on Drupal 7 with a range of JavaScript libraries for UI and interactivity, hosted on OVH infrastructure. However, the site lacks a valid SSL certificate and does not support modern TLS protocols, exposing it to security risks. Security headers are minimal but present, and a cookie consent mechanism compliant with GDPR is implemented. Overall, the site provides good content quality and professional presentation but requires urgent security improvements to protect user data and enhance trust.

I

IMT Mines Alès Alumni

mines-ales.org

0

IMT Mines Alès Alumni operates as a non-profit alumni association dedicated to serving graduates, students, and recruiters associated with IMT Mines Alès. The website provides comprehensive services including networking, career support, event management, and community engagement. It maintains a strong presence on social media and integrates multiple partner organizations, reflecting a well-established position within the French educational sector. The content is professionally presented in French, targeting alumni and related stakeholders. Technically, the website is built on a custom CMS platform with a technology stack including Apache, PHP, jQuery, Bootstrap, and various JavaScript libraries. While the site is mobile-optimized and SEO-friendly, performance metrics indicate slow loading times. The hosting appears to be with OVH, and the site uses several third-party services for analytics, cookie consent, and anti-bot measures. From a security perspective, the site implements several important HTTP security headers and a content security policy. However, the absence of a valid SSL certificate and lack of TLS protocol support significantly weaken its security posture. Cookies are set with secure and HttpOnly flags, and forms include anti-bot protection via hCaptcha. Privacy compliance is strong, with clear cookie and privacy policies and GDPR adherence. Overall, the site is functional and professional but requires urgent improvements in SSL/TLS configuration to enhance security and user trust. Addressing these issues will improve the security score and overall risk profile, ensuring better protection for users and data integrity.

I

IMT Nord Europe Alumni

imt-lille-douai.org

0

IMT Nord Europe Alumni is a French non-profit alumni association serving graduates and students of IMT Nord Europe. The website provides a comprehensive platform for alumni networking, career services, events, and publications. It targets alumni, students, recruiters, and partners, positioning itself as a key community hub for the institution's graduates. The site is professionally designed with consistent branding and good content relevance, supporting a medium-sized organization in the education sector. Technically, the website uses a traditional LAMP stack with Apache and PHP, enhanced by modern JavaScript libraries such as jQuery, Bootstrap, and TinyMCE. The site is mobile-optimized and includes accessibility and SEO best practices, although performance is moderate. Hosting appears to be on a standard provider with no advanced CDN or cloud infrastructure detected. From a security perspective, the site implements several important HTTP security headers and a comprehensive Content Security Policy. However, it lacks a valid SSL certificate and proper TLS configuration, which is a critical vulnerability impacting user trust and data security. Cookie consent and privacy policies are implemented, indicating good privacy compliance, but no explicit security policy or incident response information is available. Overall, the site is functional and professional but requires urgent improvements in SSL/TLS deployment and security posture to protect user data and maintain trust. Strategic enhancements in incident response and vulnerability disclosure policies would further strengthen its security maturity.

Security assessment completed with an overall score of 50/100 (unknown risk). Total of 7 security findings identified across all modules.

E

Ekstend Group

ekstend.io

0

Ekstend Group is an independent marketing and communication agency based in France, specializing in a comprehensive range of services including digital strategy, branding, media, social media, web development, innovation, and event marketing. With over 20 years of experience and a medium-sized team, they serve a broad client base including prestigious brands such as Rolex and WWF. The website is professionally designed, content-rich, and well-structured, targeting brands seeking to enhance their market presence through tailored marketing solutions. Technically, the site runs on WordPress with PHP and nginx, leveraging modern JavaScript libraries and SEO tools. However, the security posture is weak due to the absence of a valid SSL certificate and lack of TLS support, exposing the site to risks and undermining user trust. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates strong business credibility and marketing maturity but requires urgent security improvements to protect data and enhance trust.

U

UKG

ukg.com

0

UKG is a leading enterprise technology company specializing in human capital management (HCM), payroll, and workforce management solutions. The company serves a broad range of industries including retail, healthcare, manufacturing, and public sector, positioning itself as a market leader with recognized industry awards such as Gartner Magic Quadrant and Nucleus Research Leader. UKG's business model focuses on providing AI-powered, culture-driven HR technology to enterprises and growing businesses worldwide. The website reflects a mature digital presence with comprehensive content, multi-regional support, and strong branding consistency. Technically, the site is built on Drupal 10 and leverages Cloudflare for hosting and CDN services, with modern JavaScript modules and consent management tools integrated. However, the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, representing a critical security vulnerability. Security headers are present but insufficient to compensate for the lack of proper SSL/TLS configuration. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms in place. Overall, UKG's website demonstrates strong business credibility and user experience but requires urgent remediation of SSL and TLS issues to ensure secure communications and maintain trust.

V

Veterans United Home Loans

veteransunited.com

0

Veterans United Home Loans is a leading mortgage lender specializing in VA home loans, serving veterans and military families across the United States. The company holds a strong market position as the top VA purchase lender by volume for multiple consecutive years, offering a comprehensive suite of services including VA loans, refinancing, realty, insurance, and credit building. Their website reflects a professional and user-friendly digital presence with extensive educational content, customer reviews, and interactive tools such as mortgage calculators and eligibility forms. Technically, the site leverages a modern JavaScript stack with jQuery, Google Tag Manager, and custom form frameworks, hosted on AWS infrastructure. However, the security posture is currently weak due to the absence of a valid SSL certificate and disabled TLS protocols, which poses a significant risk to user data confidentiality and trust. Privacy policies and cookie consent mechanisms are well implemented, supporting compliance with general privacy standards. Overall, the site demonstrates strong business credibility and digital maturity but requires urgent remediation of its SSL/TLS configuration to ensure secure user interactions.

C

CCBX

ccbx.com

0

CCBX operates as a fintech banking partner focused on embedded finance solutions, offering customizable lending, card, account, and payment products tailored to fintech companies and businesses. The company emphasizes compliance, risk management, and technology innovation to support its partners in the digital financial landscape. The website reflects a medium-sized fintech entity with a professional design and consistent branding, supported by partner logos from notable fintech firms. Technically, the site is built on WordPress and hosted with Microsoft Azure DNS, but suffers from a lack of HTTPS and slow performance, which impacts user trust and security posture. Security configurations are minimal, with no valid SSL certificate, no modern TLS protocols, and absence of security headers, representing critical vulnerabilities. Privacy compliance is partial, with a comprehensive privacy policy hosted on a related domain but no cookie consent mechanism on the main site. Overall, the site is functional and informative but requires urgent security improvements to meet industry standards and enhance trust.

S

Statview

statview.app

0

Statview is a technology-focused SaaS platform offering a centralized dashboard solution for developers and project managers using Laravel and Filament PHP frameworks. The platform aims to consolidate project statistics and management features into a single interface, currently in beta trial phase. The website content is professionally designed and clearly communicates the product's value proposition and key features, targeting a niche developer audience. Technically, the site uses Laravel and Filament frameworks and integrates Matomo analytics for user tracking. However, the website suffers from significant security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which critically undermines user trust and data security. Additionally, the lack of privacy and cookie policies and absence of contact information further reduce compliance and credibility. Overall, the site is functional but requires urgent improvements in security and privacy compliance to meet industry standards and user expectations.

S

Spectate

spectate.net

0

Spectate is a technology company offering a comprehensive SaaS platform for full-stack monitoring and incident management. Their solution targets agencies, startups, SaaS providers, and indiehackers, providing uptime, performance, server, and domain monitoring combined with AI-powered status pages and incident management. The company positions itself as an all-in-one observability and incident management platform with a focus on fast issue resolution and customer communication. Technically, the website is built on a modern React and Next.js stack, hosted behind Cloudflare, and uses Prismic CMS for content management. While the site is rich in content and well-branded, performance is slow and the SSL certificate is invalid, which is a critical security concern. Security posture is weak due to missing security headers and lack of HSTS. Privacy compliance is good with clear policies and GDPR indicators. Overall, the site is professional and trustworthy but requires urgent security improvements.

G

German-French Academy for the Industry of the Future

future-industry.org

0

The German-French Academy for the Industry of the Future operates as a collaborative research and education platform focusing on Industry 4.0 technologies, including cybersecurity, artificial intelligence, advanced manufacturing, and networked cooperation. It serves academic and industrial stakeholders primarily in Germany and France, offering workshops, PhD schools, events, and innovation support. The website is built on WordPress with a modern theme and includes integrations such as Google Analytics and YouTube video embeds. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. Cookie consent mechanisms are implemented, but no explicit privacy policy or terms of service pages were found in the provided content. Overall, the site demonstrates good content quality and professional design but requires urgent security improvements to protect user data and enhance trust.

L

Le réseau des Carnot

lereseaudescarnot.fr

0

Le réseau des Carnot is a French research network dedicated to fostering innovation and R&D partnerships between research institutes and enterprises. The website serves as a portal for news, events, and information about the 39 Carnot institutes across France, targeting businesses and research stakeholders. The platform is built on Drupal 10 and includes features such as a cookie consent mechanism and social media integration. However, the site lacks a valid SSL certificate, which severely impacts its security posture and user trust. The absence of explicit privacy and security policies further limits compliance with GDPR and other regulations. Technically, the site shows moderate performance and basic mobile optimization but requires improvements in security configurations and modern web standards. Overall, the site is functional and informative but needs urgent security upgrades and enhanced privacy compliance to improve trust and protect user data.

E

EULiST

eulist.university

0

EULiST is a European university alliance focused on linking society and technology through interdisciplinary research, education, and innovation. It serves students, researchers, and academic staff across multiple European partner universities, promoting values such as equality, inclusion, and open science. The website is built on WordPress and uses common web technologies and analytics tools. However, it suffers from critical security shortcomings including the absence of a valid SSL certificate and HTTPS support, lack of security headers, and missing privacy and cookie policies. These issues expose the site to risks and compliance gaps, particularly under GDPR. The site content and design are professional and well-structured, but performance is slow due to a large number of resources. Overall, the site demonstrates moderate business credibility but requires urgent security and privacy improvements to enhance trust and compliance.

T

Three Creeks Media, LLC

veteran.com

0

Veteran.com is a specialized media website operated by Three Creeks Media, LLC, providing comprehensive information and tools related to military pay, veteran benefits, and related financial resources. The site targets US military veterans, active duty members, reservists, and their families, offering calculators, discount listings, and educational content to assist users in navigating complex military and VA benefits. The business model relies heavily on content marketing, affiliate partnerships, and advertising revenue, positioning itself as a trusted resource within the veteran community. Technically, the website is built on WordPress and leverages common web technologies such as jQuery, Chart.js, and Font Awesome, with Cloudflare providing hosting and CDN services. SEO is enhanced through Yoast SEO, and Google Tag Manager is used for analytics and marketing tracking. However, performance data is missing, and the site exhibits slow loading characteristics. Mobile optimization is good, but accessibility features are basic. From a security perspective, the site has several critical issues: it lacks a valid SSL certificate and does not support modern TLS protocols, severely impacting secure communications. While some security headers are implemented, the ineffective HSTS configuration and malformed CAA DNS records further weaken the security posture. No cookie consent mechanism is present despite the use of tracking and advertising scripts, raising privacy compliance concerns. Overall, Veteran.com is a content-rich and professionally presented site with moderate trustworthiness and business credibility. However, its security and privacy compliance shortcomings present risks that should be addressed to protect user data and enhance user trust. Strategic improvements in SSL/TLS deployment, cookie consent implementation, and DNS record hygiene are recommended to elevate the site's security and compliance standing.

The website themilitarywallet.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page that blocks content delivery until JavaScript and cookies are enabled. As a result, no actual business content, metadata, or contact information is available for analysis. The site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical security issue. Security headers are present but cannot compensate for the lack of proper SSL configuration. Due to the WAF blocking, performance and technical details are minimal and incomplete. Overall, the site cannot be properly assessed for privacy compliance, business credibility, or content quality under these conditions.

I

ICB Solutions, a division of Neighbors Bank

fhaloans.com

0

FHALoans.com is a specialized educational and lead generation website focused on FHA home loans in the United States. Operated by ICB Solutions, a division of Neighbors Bank, and partnered with Mortgage Research Center, LLC, the site provides comprehensive guides, tools, and a multi-step form to connect prospective homebuyers with mortgage lenders. The business model centers on marketing services and lead referrals to a network of mortgage companies. Technically, the site employs a variety of modern marketing and analytics technologies including Google Tag Manager, Marketo, FullStory, and Twilio for phone verification, hosted on AWS infrastructure. However, the site lacks a valid SSL certificate, serving content over HTTP only, which is a critical security deficiency. Security headers are absent, and while privacy and cookie policies are present and comprehensive, GDPR compliance is not clearly indicated. Overall, the website offers good content quality and user experience but suffers from slow performance and significant security shortcomings.

I

ICB Solutions

valoans.com

0

VALoans.com is a specialized VA home loan education and lender comparison website operated by ICB Solutions, a division of Neighbors Bank. The platform targets veterans and active military personnel seeking VA home loans by providing educational content, tools, and a network of partnered mortgage lenders. The business model centers on lead generation and marketing services rather than direct loan offerings. Technically, the website uses a PHP-based backend with Apache server hosting on AWS infrastructure, integrating multiple third-party marketing and analytics tools such as Google Tag Manager, Marketo, and LeadID. While the site offers good content quality and user experience with mobile optimization and clear navigation, its security posture is weakened by an invalid SSL certificate and incomplete HTTPS enforcement. Security headers are present but could be enhanced with proper HSTS configuration and DNS security measures. Privacy compliance is basic, with a cookie consent banner and privacy policy but lacking explicit GDPR compliance indicators. Overall, the site is functional and professional but requires urgent improvements in SSL and DNS security to protect user data and trust.

L

Le Club des Clubs Immobiliers

leclubdesclubsimmobiliers.org

0

Le Club des Clubs Immobiliers is a French non-profit association that unites over 10,000 real estate professionals from 27 alumni clubs of prestigious French schools and universities. The association organizes annual study trips, conferences, roundtables, and networking events to foster knowledge sharing and professional connections in the real estate sector. The website serves as an informational and event platform for its members and partners. Technically, the site is built on the AssoConnect platform, utilizing common JavaScript libraries and external CDNs. However, the site suffers from a lack of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts its security posture. Cookie consent is properly implemented via Axeptio, and analytics are managed through Google Analytics and RudderStack with user consent. Overall, the site provides good content and user experience but requires urgent security improvements to protect user data and enhance trust.

I

Intermines

inter-mines.org

0

Intermines is a French alumni network platform serving graduates from Mines Paris, Mines Saint-Etienne, and Mines Nancy engineering schools. It provides career services, networking opportunities, publications, and group activities to its members. The website is primarily in French and targets alumni and recruiters associated with these institutions. The platform is built on the AlumnForce CMS and uses various JavaScript libraries and APIs including Backbone.js, YUI, Google Maps, and Google Charts. While the site offers rich content and a consistent brand experience, it suffers from technical issues such as an invalid SSL certificate and slow page load times, which impact its security posture and user experience. Privacy and cookie policies are present with consent mechanisms, but no explicit security or incident response policies are found. Social media presence is strong, enhancing community engagement.

I

IMT Mines Albi-Carmaux Alumni

mines-albi.org

0

IMT Mines Albi-Carmaux Alumni operates as a non-profit alumni association serving graduates, students, and recruiters connected to the IMT Mines Albi-Carmaux engineering school in France. The website provides comprehensive services including news updates, event management, career resources, and an extensive alumni directory with nearly 40,000 registered members. The platform targets alumni and community members seeking networking and professional development opportunities. Technically, the website employs a traditional tech stack with jQuery, Bootstrap, slick carousel, and integrates hCaptcha for form security and tarteaucitron.js for cookie consent management. However, the site suffers from a critical lack of valid SSL/TLS certificates, resulting in no HTTPS support and no modern TLS protocols enabled, which significantly undermines its security posture. Despite this, the site maintains GDPR compliance through cookie consent and privacy policies, and offers a good user experience with clear navigation and responsive design. The overall risk is moderate due to security gaps, particularly the absence of HTTPS and security headers, which should be prioritized for remediation.

I

Interstices

interstices.info

0

Interstices.info is a French-language educational platform dedicated to explaining and disseminating research in computer science and applied mathematics. It is operated under the auspices of Inria, a major French national research institution, positioning it as a reputable source in the digital sciences education sector. The website offers a variety of content types including articles, podcasts, videos, dossiers, quizzes, and newsletters, targeting researchers, students, and professionals interested in digital sciences. The platform is well-branded and maintains consistent, high-quality content with a clear focus on education and research communication. Technically, the site is built on WordPress and leverages several modern web technologies and plugins such as FacetWP for filtering, Relevanssi for search, MailOptin for newsletter subscriptions, and Matomo for privacy-conscious analytics. However, the site suffers from a critical security shortfall: it lacks a valid SSL certificate and does not enforce HTTPS, exposing users to potential risks. Performance is suboptimal with slow load times and a large page size, though mobile optimization and SEO practices are good. Accessibility is basic but present. From a security perspective, the absence of HTTPS and security headers significantly lowers the site's security posture. There are no detected vulnerabilities or subdomain takeover risks, but the lack of modern TLS protocols and HSTS is a concern. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Contact information is limited to a contact form, with no direct emails or phone numbers provided. Overall, while Interstices.info excels in content quality and educational value, it requires urgent improvements in security infrastructure to protect its users and enhance trust. Strategic recommendations include implementing a valid SSL certificate, enabling HTTPS with HSTS, adding security headers, and optimizing performance. These steps will strengthen the site's security posture and align it with best practices for privacy and user protection.

F

Fondation Inria

fondation-inria.fr

0

Fondation Inria is a French non-profit foundation dedicated to supporting research and innovation projects that leverage digital technologies to address major societal challenges such as health, environment, education, and trust in society. The foundation acts as a bridge between academia, industry, and civil society, facilitating partnerships and fundraising to drive impactful digital transformation. The website reflects a professional and consistent brand presence with clear messaging targeting donors, partners, and the academic community. Technically, the site is built on WordPress with React and jQuery, optimized for SEO with Yoast, but suffers from slow load times and lacks a valid SSL certificate, which impacts security posture. Privacy and cookie policies are present and GDPR compliant, but no explicit security or incident response policies are publicly available. Social media presence is active on LinkedIn, Twitter, and YouTube, supporting engagement and transparency.

Inria Alumni operates as a professional network dedicated to current and former members of Inria, a French national research institution. The platform facilitates community engagement, career development, and information sharing through features such as a member directory, job board, events calendar, and news articles. The website targets researchers, alumni, and partners within the technology and education sectors in France. The business model centers on membership with free registration and partner accounts, positioning itself as a niche network within the research community. The site branding is consistent and leverages official Inria identity elements, enhancing trust and recognition.

R

Rassemblement Annuel Philanthropique

raphilanthropique.ca

0

Rassemblement Annuel Philanthropique is a small non-profit organization focused on organizing an annual philanthropic event in Quebec, Canada. The event targets professionals and stakeholders in the philanthropic sector, offering workshops, conferences, and networking opportunities. The website is built on WordPress using Elementor and Bootstrap frameworks, with SEO optimized via Yoast plugin. However, the site suffers from critical security issues including lack of HTTPS and security headers, which significantly impacts its security posture. Performance is slow, and while the site is mobile optimized and content-rich, it lacks privacy compliance mechanisms such as cookie consent banners. Overall, the business presents a professional image but must urgently address security and privacy compliance gaps.

E

ESCP Business School

escp.eu

0

ESCP Business School is a prestigious, top-ranked European business school established in 1819, operating a unique multi-campus model across six European cities. It offers a broad portfolio of degree programs including Bachelor, Master in Management, MBA, Executive MBA, specialized Masters, doctoral programs, and executive education. The school targets students, professionals, and corporate clients seeking high-quality business education and leadership development. Technically, the website is built on Drupal 10, hosted on Amazon AWS infrastructure, and integrates numerous modern web technologies and marketing analytics tools. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. The site employs extensive tracking and advertising scripts, managed via a consent platform, indicating a mature marketing approach but raising privacy considerations. Overall, the website is professionally designed with excellent content quality and user experience but requires urgent security improvements to enable HTTPS and implement security headers to protect user data and enhance trust.

F

Fondation des Ponts

fondationdesponts.fr

0

Fondation des Ponts is a French non-profit foundation dedicated to supporting the École des Ponts ParisTech by promoting diversity, providing scholarships and loans, and encouraging entrepreneurship among students. The foundation operates primarily through donations and partnerships, targeting donors, students, and educational stakeholders. The website is built on WordPress with a standard technology stack including WPBakery, jQuery, and Sendinblue for marketing automation. While the site is content-rich and professionally designed with good navigation and mobile optimization, it suffers from a critical security issue: the absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the security posture and user trust. Additionally, no explicit privacy policy or terms of service pages were found, though a cookie consent banner is present. Social media presence is strong, enhancing business credibility. Overall, the site scores moderately on content and business credibility but poorly on security due to missing HTTPS and security headers.

Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 9 security findings identified across all modules.

E

ESCP Business School

escpeurope.eu

0

ESCP Business School is a prestigious, top-ranked European business school established in 1819, offering a wide range of degree programs including bachelor, master, MBA, executive education, and doctoral programs across six European campuses. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting students and professionals seeking business education. Technically, the site is built on Drupal 10 with modern JavaScript libraries and integrates marketing and analytics tools such as Google Tag Manager and Consent Manager. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which significantly impacts the overall security score. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but requires urgent improvements in SSL/TLS implementation to secure user data and improve trust.

Maison des Ponts is a small non-profit alumni association based in Paris, France, providing a prestigious venue for its members and hosting professional and private events. The website presents clear business information, contact details, and partner organizations, targeting alumni and event clients. Technically, the site uses common web technologies such as Apache, jQuery, and hCaptcha but lacks modern security configurations, notably missing HTTPS and security headers, which critically impacts its security posture. The absence of privacy and cookie policies further reduces compliance confidence. Overall, the website is functional with good content quality and navigation but requires urgent security improvements to protect user data and enhance trust.

A

Amicale des Ingénieurs Généraux des Ponts, des Eaux et des Forêts

aigpef.org

0

The website aigpef.org represents the Amicale des Ingénieurs Généraux des Ponts, des Eaux et des Forêts, a French professional association focused on engineers from the IPEF corps. It provides member services including a directory, events, publications, and a private member area. The site targets members and alumni of this engineering corps and operates as a small non-profit entity within the government/association sector. Technically, the site uses a traditional LAMP stack with Apache, PHP, jQuery, and Bootstrap, and is likely hosted by OVH. While the site has a professional design and good content quality, it suffers from a critical security issue: the SSL certificate is invalid or missing, resulting in no HTTPS support. This severely impacts the security posture and trustworthiness of the site. Security headers and cookie consent mechanisms are well implemented, and analytics tools like Google Analytics and Hotjar are used with privacy compliance in mind. Overall, the site is functional and professional but requires urgent SSL remediation to improve security and user trust.

U

Union des Ingénieurs des Ponts, des Eaux et des Forêts

unipef.org

0

UnIPEF is a French professional association serving engineers specialized in civil engineering, water management, and forestry sectors. It offers membership services including networking, career support, events, and publications. The website is well-structured, content-rich, and targets primarily French-speaking engineering professionals. The association maintains partnerships with several related organizations and provides multiple channels for member engagement.

H

HEC Stories

hecstories.fr

0

HEC Stories is an online media platform dedicated to the alumni and students of HEC Paris, offering inspiring stories, interviews, and insights on business, sustainable development, and entrepreneurship. The website serves a niche audience connected to the HEC ecosystem and provides content in multiple formats including articles, podcasts, videos, and newsletters. The business model appears to be based on content publishing with subscription and advertising revenue streams. Technically, the site is built on WordPress with WooCommerce and uses popular plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance. Hosting is provided by OVH, a reputable French hosting provider. However, a critical security weakness is the lack of a valid SSL certificate and proper HTTPS support, which undermines user trust and data security. The site implements cookie consent mechanisms and integrates Google Analytics for user tracking, indicating moderate privacy compliance. Social media presence is strong, enhancing community engagement and trust. Overall, the site is professionally designed with good content quality but requires urgent security improvements to meet modern standards.

S

Sciences Po Alumni

emilemagazine.fr

0

Émile Magazine is a French non-profit media publication operated by Sciences Po Alumni, targeting the alumni community and readers interested in political and social analysis. The website serves as an online extension of the quarterly print magazine, offering articles, interviews, and portfolios contributed by journalists, researchers, and alumni. The business model focuses on community engagement and content dissemination without evident commercial sales or e-commerce. Technically, the website is built on the Squarespace platform, leveraging its CMS and hosting services. The site uses Google Analytics and Tag Manager for visitor tracking and Typekit for fonts. However, the site suffers from slow performance due to a large page size and many resources. Mobile optimization is good, but accessibility features are basic. From a security perspective, the site lacks a valid SSL certificate and does not serve content securely over HTTPS. No security headers or email authentication DNS records (DMARC, SPF) are configured, exposing the site to potential risks. Privacy and cookie policies are absent, indicating poor compliance with GDPR and related regulations. Overall, the site is content-rich and professionally designed but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

A

AlumnForce

alumnforce.com

0

AlumnForce is a French-based company providing a comprehensive SaaS platform for managing alumni networks, career centers, mentoring programs, and corporate alumni solutions. The company is well-positioned in the education sector with over 350 client networks and a strong market presence supported by partnerships and client testimonials. Technically, the website is built on WordPress with Elementor and integrates multiple marketing and analytics tools such as HubSpot, Matomo, and Google Tag Manager. However, the security posture is weak due to the absence of a valid SSL certificate and HTTPS support, which poses a significant risk. Privacy compliance is partial with cookie consent mechanisms but no explicit privacy policy found. Overall, the website demonstrates good business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

S

Sweet Punk

sweetpunk.com

0

Sweet Punk is a medium-sized creative agency based in France with offices in Paris and Montpellier. It operates as part of the Ekstend Group and offers a comprehensive suite of branding, digital marketing, advertising, and content production services. The agency has a strong market position supported by multiple industry awards and a diverse client portfolio. Technically, the website is built on WordPress with modern marketing and analytics tools integrated, but suffers from critical security shortcomings due to the lack of a valid SSL certificate and absence of HTTPS, which significantly impacts its security posture. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Business credibility is high, supported by clear contact information, professional content, and trust signals such as awards and client logos.

B

Blue Cross and Blue Shield of Illinois

bcbsil.com

0

Blue Cross and Blue Shield of Illinois (BCBSIL) is a major health insurance provider serving the entire state of Illinois with a broad range of health plans including individual, family, Medicare, Medicaid, and employer plans. The company is a large, customer-owned insurer with a significant market presence, serving over 8.9 million members. The website reflects a mature digital presence with comprehensive content, clear navigation, and integration of multiple health insurance products and member resources. Technically, the site is built on Adobe Experience Manager and leverages various Adobe marketing and analytics tools, but suffers from a critical security issue due to the absence of a valid SSL certificate and lack of HTTPS support, which significantly impacts its security posture. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

W

WebBuilds B.V.

filapanel.com

0

Filapanel is a specialized SaaS platform designed to accelerate Laravel and Filament project development by automating code generation and admin panel creation. The company, WebBuilds B.V., operates primarily in the technology sector with a focus on developer tools and SaaS solutions. The website presents a professional and well-branded interface targeting Laravel developers and SaaS builders, supported by partner endorsements and testimonials. Technically, the platform leverages modern frontend technologies such as Alpine.js and Tailwind CSS, and is hosted behind Cloudflare DNS services. However, the absence of a valid SSL certificate critically undermines the security posture, despite the presence of strong HSTS policies and DMARC email protections. Privacy compliance is partial, with terms of service present but no explicit cookie policy or consent mechanism. Overall, the site demonstrates good business credibility and content quality but requires urgent security improvements to ensure trust and compliance.

V

Veterans United Foundation

enhancelives.com

0

Veterans United Foundation is a non-profit organization dedicated to enhancing the lives of veterans, military families, and local communities across the United States. Supported by its parent company, Veterans United Home Loans, the foundation focuses on scholarships, partnerships, and community support programs. The website reflects a clear mission and strong branding aligned with its target audience. Technically, the site uses modern JavaScript libraries and Google marketing tools, hosted on Amazon AWS infrastructure, but suffers from slow load times and lacks advanced security headers and DNS protections. The SSL certificate is valid and properly issued, ensuring encrypted communications. Security posture is basic with room for improvement in headers and DNS security. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is professional and trustworthy but should enhance privacy and security practices to meet higher compliance standards.

P

Paddio

paddio.com

0

Paddio is a modern mortgage lender focused on providing intuitive technology and personalized service to homebuyers in the United States. As a DBA of Mortgage Research Center, LLC, Paddio positions itself as a tech-forward lender offering fast, simple, and secure home loan solutions. The website showcases customer testimonials, detailed loan application forms, and comprehensive legal and privacy policies, reflecting a commitment to transparency and customer trust. Technically, the site employs a range of modern web technologies and marketing tools but lacks a valid SSL certificate, resulting in an insecure user experience. The absence of HTTPS and security headers represents a significant security gap. Despite this, the site maintains good privacy compliance with clear cookie consent mechanisms and detailed policies. Overall, Paddio demonstrates a strong business credibility and user experience but requires urgent improvements in security infrastructure to protect user data and enhance trust.

M

Mortgage Research Center, LLC

mortgageresearchcenter.org

0

Mortgage Research Center, LLC is a medium-sized finance and technology company specializing in mortgage lead generation and routing services. The company operates across all 50 states with licensed lead sales and offers marketing services to mortgage professionals. Their market position is supported by exclusive lead models and a compliance-focused approach. Technically, the website uses legacy JavaScript libraries and integrates with Google Analytics and Tag Manager, but suffers from slow performance and lacks modern CMS or frameworks. Security posture is weak due to the absence of a valid SSL certificate, no HTTPS support, and missing security headers, exposing the site to potential risks. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

M

Mortgage Research Center, LLC

mortgageresearchcenter.com

0

Mortgage Research Center, LLC operates as an independent lead technology provider specializing in mortgage lead generation, routing, and sales. The company targets mortgage lenders and lead buyers/sellers, offering services licensed in all 50 states and supported by a team of compliance professionals. Their market position is that of an experienced and trusted provider with a focus on exclusive lead models and marketing services. Technically, the website employs legacy technologies such as jQuery 1.11.0 and integrates Google Analytics and Tag Manager for tracking, hosted on Akamai infrastructure. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate, resulting in no HTTPS support and lack of security headers, which significantly impacts its security posture. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is functional with good business information and moderate trust indicators but requires urgent security improvements.

N

Neighbors Bank

neighborsbank.com

0

Neighbors Bank is a medium-sized financial institution specializing in home loans and savings products, targeting underserved borrowers across the United States. With over 80 years of experience and a strong regional presence, the bank offers USDA, FHA, Conventional, and VA loans alongside competitive savings accounts. The website reflects a professional and trustworthy brand with clear navigation, comprehensive content, and strong trust indicators such as FDIC insurance and NMLS registration. Technically, the site employs a modern tech stack including jQuery, Google Analytics, Marketo, and Akamai service workers, hosted primarily on AWS infrastructure. However, the security posture is weakened by the absence of a valid SSL certificate, lack of security headers, and missing HSTS, which are critical issues that must be addressed to protect user data and maintain trust. Privacy compliance is well-handled with clear policies and consent mechanisms, though GDPR compliance is not explicitly indicated. Overall, the site is functional and professional but requires urgent security improvements to meet industry standards.

C

Coastal Community Bank

coastalbank.com

0

Coastal Community Bank is a regional community bank serving Northwest Washington with a comprehensive suite of business and personal banking services including checking, savings, loans, treasury management, and credit card processing. The website is professionally designed on WordPress, featuring rich content, clear navigation, and mobile optimization. The bank maintains a strong online presence with social media integration and detailed contact information. However, the site lacks a valid SSL certificate and modern security headers, which are critical vulnerabilities that reduce the overall security posture. Privacy and cookie policies are present with consent mechanisms, but GDPR compliance is limited. The site uses multiple third-party analytics and marketing tools, indicating extensive user tracking. Overall, the website is functional and credible but requires urgent security improvements to protect user data and enhance trust.

B

Banque Commune d'Épreuves (BCE)

concours-bce.com

0

The Banque Commune d'Épreuves (BCE) website serves as the official portal for organizing and managing entrance exams to 18 major French business schools and 3 associated schools. Operated by the Direction des Admissions et Concours of the CCI Paris-Ile-de-France, it targets prospective students seeking access to prestigious management programs. The site provides comprehensive information on exam schedules, registration, and candidate resources, positioning itself as a key educational service provider in France. Technically, the website is built on Drupal 10 with Bootstrap and FontAwesome, featuring modern UI components and a cookie consent mechanism compliant with GDPR. However, the absence of HTTPS and security headers significantly undermines its security posture, exposing users to potential risks. Performance is notably poor with a high load time and large page size, which could impact user experience. Privacy compliance is well addressed through explicit policies and consent management, and analytics are handled via privacy-focused Matomo Cloud. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

Concours Passerelle operates as an educational admissions platform facilitating entry into prestigious French business schools for candidates holding bac+2 or higher. The website provides detailed information about admissions pathways, exam modalities, and school options, targeting prospective students seeking higher education in commerce and management. The platform leverages modern web technologies and integrates marketing and analytics tools such as Google Tag Manager. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and HTTPS support, which undermines user trust and data security. Security headers are well configured but cannot compensate for the lack of proper encryption. Privacy compliance is minimal, with no cookie consent mechanism or explicit GDPR adherence visible. Overall, the site is functional and professionally designed but requires urgent security and privacy improvements to meet modern standards.