cnll.fr

CNLL Home

Le CNLL, l’Union des entreprises du logiciel libre et du numérique ouvert, est l’organisation représentative en France des entreprises de la filière open source. Le CNLL regroupe les principales associations et grappes d'entreprises de l'Open Source en France

Built with

No platform, CMS or framework detected. Detection is passive: it only sees what a site exposes in its HTML, headers and cookies, so custom or well-hidden stacks show up as nothing rather than as a guess.

Also detected

Libraries

Bootstrap · jQuery

Infrastructure

Nginx

Third-party services

Matomo

Overview

Status

alive

Registered

2009-12-11 (17 years ago)

First seen here

2026-09-22

Security grade

D (65/100, from headers & TLS)

Privacy score

62/100 (4 third-party script hosts, 1 tracking/marketing services)

Hosting

Hetzner Online GmbH · AS24940 · Finland

Server header

nginx

Response time

218 ms to first byte, measured from our crawler

TLS certificate

Let's Encrypt · TLSv1.3 · expires 2026-12-05

Mobile-ready

yes (viewport meta tag)

RSS / Atom feed

yes

Linked to from

2 other sites seen so far

Loads scripts from

Third-party domains this page pulls JavaScript or iframes from. Each one can see who visits.

What to fix

1. Add Strict-Transport-Security
   Header: Strict-Transport-Security: max-age=31536000; includeSubDomains
2. Add a Content-Security-Policy
   Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.

Security & email signals

• ✓ HTTPS
• ✗ HSTS
• ✗ Content-Security-Policy
• ✓ X-Content-Type-Options
• ✓ X-Frame-Options
• ✓ Referrer-Policy
• ✗ Permissions-Policy
• ✓ SPF record
• ✓ DMARC record
• ✗ DKIM record
• ✓ Cookies set securely
• ✓ Has real content (not an empty shell)
• ✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/cnll.fr"><img src="https://webtelemetry.dev/badge/cnll.fr.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.