Search
Enter at least two characters without personal information.

    LibraryArticles & FAQ Your projectRequest a quote
    LanguageEN
    Web resources

    Essential Web and technology resources in 2026.

    A focused selection of major platforms, widely used tools and official references for building, developing and running websites.

    It is designed for business owners, project managers, designers, developers and curious users. Search by name or topic, narrow the list with filters, and open each resource on its official website.

    Editorial method

    A directory made to be useful, not merely long.

    Selection prioritises recognition within the field, professional use and reference status. Highly specialised documentation entries are consolidated under their main resource.

    01

    Official foundations

    Standards bodies, official documentation and public authorities are used as primary reference points.

    02

    Professional tools

    Established services are grouped by actual use: building, hosting, measuring, securing, publishing or promoting a website.

    03

    Independent reading

    Inclusion is editorial and unpaid. A listing does not imply a partnership or guarantee.

    Search and filter

    Explore the directory.

    Combine the search field and filters. All filtering is immediate and does not send your query to a third party.

    147 resources displayed

    The date applies to the linked document, not to a review of every service feature.

    Web standards and governance

    W3C

    Open Web standards including HTML, CSS, accessibility and related technologies. Find specifications and their maturity levels. Distinguish published recommendations, explanatory notes and drafts before citing a requirement.

    W3C · Source consulted

    Use it for : A starting point for finding the original recommendation and the group maintaining it.

    InternationalInstitution / standard
    w3.orgVisit official website
    Web standards and governance

    W3C WAI

    Entry point for accessibility standards, tutorials and evaluation methods. Use it to connect keyboard, form or reading difficulties to explained requirements. Choose material suited to the team’s role and distinguish the checking method from the outcome on your site.

    W3C WAI · Source consulted

    Use it for : Connect guidance with components and team responsibilities; add human trials to automated checks.

    Documented characteristics
    Specification
    WCAG 2.2
    Number of principles
    4
    Number of guidelines
    13
    Conformance levels
    A · AA · AAA

    Official documentation ·

    InternationalInstitution / standard
    w3.orgVisit official website
    Web standards and governance

    WHATWG

    Living standards for the Web platform, including HTML, DOM, URL and Fetch. Consult them when browser behaviour or a document rule needs an exact reference. Specifications describe the intended model; check usage and compatibility in your target browsers separately.

    WHATWG · Source consulted

    Use it for : Consult the living standard to confirm expected behaviour of an HTML element.

    Documented characteristics
    Specification
    HTML Living Standard
    Syntax
    HTML / XML
    Source
    github.com/whatwg/html

    Verification path

    1. Find the normative rule
    2. Associate the label and field
    3. Check the rendered example

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Learning example: a field uses id="demo-email" and its label uses for="demo-email". Find the association rule in the HTML Living Standard and check that the identifier is unique within the relevant tree.
    Useful check
    The email type checks an address format, not whether the mailbox exists or the person controls it. A hint inside the field does not, by itself, replace a correctly associated label.
    Interpretation and next step
    Keep the cited section and consultation date. A valid snippet does not establish accessibility of the whole page. Check the accessible name, focus and error feedback in the rendered example.

    Official documentation ·

    Official documentation · HTML · label

    Official documentation · HTML · email

    InternationalInstitution / standard
    whatwg.orgVisit official website
    Web standards and governance

    IETF

    Organisation and process for Internet protocol specifications. Useful for finding an RFC, its status and documents updating or replacing it. Do not treat all RFCs or drafts as equivalent standards: context and publication status are part of the reference.

    IETF · Source consulted

    Use it for : Find the RFC defining a protocol before interpreting a third-party summary.

    Documented characteristics
    Format
    RFC
    Status
    Proposed Standard · Internet Standard · Best Current Practice · Informational · Experimental · Historic · Draft Standard (legacy level) · Unknown
    Check
    Updates · Obsoletes · verified errata
    Source
    RFC Editor

    Verification path

    1. Identify status and subseries
    2. Read relationships and errata
    3. Interpret the requirements

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Learning example: prepare an HTTP note using RFC 9110. Its record states Internet Standard and STD 97. An RFC number does not establish the status of other publications in the series.
    Useful check
    Before citing a passage, examine Updates, Obsoletes relationships and verified errata. The original text remains archived; a revision or replacement is published under a new RFC number. Read the scope of a change in the document rather than inferring it from its date.
    Interpretation and next step
    When a document adopts BCP 14, uppercase MUST expresses an absolute requirement of the specification. SHOULD permits justified exceptions after considering their implications; MAY marks an option. Text can also be normative without these keywords.

    Official documentation ·

    Official documentation · RFC 9110 · HTTP Semantics

    Official documentation · BCP 14 · RFC 2119

    Official documentation · BCP 14 · RFC 8174

    InternationalInstitution / standard
    ietf.orgVisit official website
    Web standards and governance

    ICANN

    Resources on domain-name coordination and relationships with accredited registrars. Useful for distinguishing domain actors and finding applicable documents. During website handover, also identify the holder, actual supplier and renewal mechanism in your own accounts.

    ICANN · Source consulted

    Use it for : Separate rules for relevant domains from the terms of your own registrar.

    Documented characteristics
    Format
    RDAP
    Access
    lookup.icann.org
    Scope
    Generic domain registration data

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: during a handover, a generic domain’s RDAP response does not display all holder contact details. That absence is not enough to establish that the name is available.
    Useful check
    Consult ICANN Lookup, then identify the registrar and published statuses. Compare these with the records and access details supplied by the holder.
    Interpretation and next step
    Record the lookup date. Public data provides neither account access nor transfer authority; confirm access rights and renewal responsibility separately.

    Official documentation ·

    Official documentation · ICANN Lookup

    InternationalInstitution / standard
    icann.orgVisit official website
    Web standards and governance

    Afnic

    French information about domain names: purpose, selection, registration and management. Useful for choosing a name suited to the activity and understanding the participants. Before registration or transfer, clarify the holder, authorised access and renewal responsibility; the name alone covers none of these duties.

    Afnic · Source consulted

    Use it for : Check the rules and procedures applicable to a .fr domain name.

    Documented characteristics
    Scope
    .fr · .re · .yt · .pm · .wf · .tf
    Access
    Whois
    Checks
    Registrar, dates and nameservers

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: Whois for a .fr domain lists nameservers while its website no longer responds. Domain registration and service availability require separate checks.
    Useful check
    Record the displayed registrar, dates and nameservers. Compare them with the management account and expected DNS delegation, without changing records during this initial observation.
    Interpretation and next step
    A Whois record tests neither the web server nor email. Continue with DNS diagnosis and then the affected service; confirm renewal in the registrar account.

    Official documentation ·

    Official documentation · Afnic — Whois (EN)

    FranceInstitution / standard
    afnic.frVisit official website
    Web standards and governance

    Schema.org

    Vocabulary of types and properties describing entities and their relationships. Use it to match visible page content and keep identifiers consistent. A type existing in Schema.org does not mean a search engine offers an enhanced display for it.

    Schema.org · Source consulted

    Use it for : Choose types and properties describing visible content; vocabulary validity and rich-result eligibility differ.

    Documented characteristics
    Specification
    Schema.org
    Syntax
    JSON-LD · Microdata · RDFa
    Checker
    validator.schema.org

    Official documentation ·

    Official documentation · Schema Markup Validator

    InternationalInstitution / standard
    schema.orgVisit official website
    Web standards and governance

    MDN Web Docs

    Documentation and learning material for HTML, CSS, JavaScript and Web APIs. Useful for syntax, examples, specification links and compatibility information. Apply examples to your context and test errors; a reference page does not validate a complete integration.

    MDN Web Docs · Source consulted

    Use it for : Compare examples, compatibility and specification before adopting a Web API.

    Documented characteristics
    Resources
    @mdn/browser-compat-data
    Format
    JSON
    Dataset licence
    CC0-1.0
    Validation
    partial_implementation · notes
    Status
    experimental · deprecated

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Before choosing a browser feature for a form, find its precise MDN compatibility entry under __compat.support. Check the target browser and relevant version. Information about a general API does not automatically describe every method or option within it.
    Useful check
    For a fictional entry marked partial_implementation: true, read the notes property before concluding that support is complete. A function name may exist while the expected behaviour is missing. Relate version, removal and conditional-enablement information to the feature actually being used.
    Interpretation and next step
    Record the @mdn/browser-compat-data package version or consulted revision alongside your test result. Distinguish the experimental and deprecated markers from support data. Then check the journey in your audience’s browsers: documentation prepares the test rather than replacing its outcome.

    Official documentation ·

    Official documentation · MDN Browser Compatibility Data — Data guidelines

    InternationalCommunity / learning
    developer.mozilla.orgVisit official website
    Web standards and governance

    RGAA

    French public accessibility framework providing criteria, tests and a technical evaluation method. Use it to define checking scope and assess findings. Record the applied edition and relevant criteria; passing an automated tool does not establish whole-site conformance.

    RGAA · Source consulted

    Use it for : Useful for connecting an accessibility finding to the French assessment framework.

    Documented characteristics
    Specification
    RGAA 4.1.2
    Items
    106 criteria
    Scope
    13 topics

    Official documentation ·

    Official documentation · RGAA · critères et tests

    FranceInstitution / standard
    accessibilite.numerique.gouv.frVisit official website
    SEO, search and analytics

    Google Search Central

    Official Google documentation on discovery, crawling, indexing, search presentation and monitoring. Consult it to check an SEO recommendation’s conditions and scope. Use the document addressing your specific issue; a general best practice does not establish the cause of a traffic change.

    Google Search Central · Source consulted

    Use it for : Use it to check Google’s published crawling, indexing and presentation requirements.

    InternationalInstitution / standard
    developers.google.comVisit official website
    SEO, search and analytics

    Google Search Console

    Google tool for monitoring a site’s search presence through reports and URL inspection. Useful for examining a page or comparing defined periods and populations. Distinguish impressions, clicks and indexing; these observations alone do not measure received business enquiries.

    Google Search Console · Source consulted

    Use it for : Distinguish missing indexing from low visibility; compare known inspection state and the live test before changing content.

    Documented characteristics
    API
    Search Analytics
    Metrics
    clicks · impressions · ctr · position
    Endpoint
    POST /sites/{siteUrl}/searchAnalytics/query
    Pagination
    rowLimit: 1…25000
    Configuration
    dimensions · startRow

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To examine searches leading to a page, prepare a fictional response with dimensions: ["query", "page"]. Values in the keys array follow that order: the first identifies the query, the second the page. Swapping export columns can produce an analysis that reads clearly but is wrong.
    Useful check
    The rowLimit parameter accepts 1 to 25,000 rows per response; startRow specifies the offset, starting at zero. Pagination lets you traverse available results without guaranteeing an exhaustive export: the API states that it returns top rows within Search Console’s internal limits.
    Interpretation and next step
    In a teaching example, ctr: 0.25 means 25%, not 0.25%. Request dates use Pacific Time and include both boundaries. Retain the period, dimensions and filters when comparing extracts; average position does not describe an identical ranking for every searcher.

    Official documentation ·

    InternationalTool / software
    search.google.comVisit official website
    SEO, search and analytics

    Google Tag Manager

    Centralized management of analytics and marketing tags. Organise tags, triggers and variables in an identified container. Check the actual outgoing event and journey before publication; installing a container does not validate measurement.

    Google Tag Manager · Source consulted

    Use it for : Define each tag’s purpose, trigger, applicable consent and rollback procedure.

    InternationalTool / software
    tagmanager.google.comVisit official website
    SEO, search and analytics

    Google Business Profile

    Management of a local business presence across Google and Maps.

    Google Business Profile · Source consulted

    Use it for : Maintain an eligible business’s actual details and opening hours; a service area does not create a physical office.

    Documented characteristics
    Access
    In-person contact generally required; exceptions apply
    Scope
    Online-only businesses are ineligible
    Check
    Owner or authorised representative

    Verification path

    1. Check actual eligibility
    2. Confirm management authority
    3. Validate published information

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: an online-only business without customer meetings considers a profile. Adding a postal address does not make it eligible. Read category criteria and documented exceptions before making promises.
    Useful check
    Only owners or authorised representatives may verify and manage profiles under the service rules. Building a company website does not automatically confer that mandate. Distinguish real customer-facing hours from online response availability.
    Interpretation and next step
    Have the responsible person confirm name, activity, address or service area and hours. An existing visible profile is not permanent validation of every detail. Keep the source and revisit information when the activity changes.

    Official documentation ·

    InternationalService / platform
    google.comVisit official website
    SEO, search and analytics

    Bing Webmaster Tools

    Microsoft tools for monitoring and diagnosing a site in Bing, including URL inspection. Useful for examining crawling, indexing and reported issues in that environment. Keep property, period and metric definitions explicit; do not assume counts match those of another engine.

    Bing Webmaster Tools · Source consulted

    Use it for : Review Bing crawling and indexing without extrapolating from Google figures.

    InternationalTool / software
    bing.comVisit official website
    SEO, search and analytics

    Screaming Frog

    Desktop crawler for auditing website structure and technical signals.

    Screaming Frog · Source consulted

    Use it for : Crawl a sample of templates, then fix errors at their source.

    Documented characteristics
    Installation
    Windows · macOS · Linux
    Quota
    Free edition: 500 URLs per crawl

    Official documentation ·

    Official documentation · SEO Spider · FAQ

    EuropeTool / software
    screamingfrog.co.ukVisit official website
    SEO, search and analytics

    Matomo

    Audience and journey analytics platform available through different operating models. Useful for building indicators tied to team needs. Clarify configuration, collection scope and responsibilities; choosing a tool does not remove the need to check event quality and rules applicable to your use.

    Matomo · Source consulted

    Use it for : Compare deployment and data settings; self-hosting or the product name alone does not establish a consent exemption.

    Documented characteristics
    Application covered
    Matomo On-Premise
    Configuration
    [General]
    Format
    config/config.ini.php

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    If a low-traffic URL disappears from a Matomo report, look for the “Others” row before concluding there were no visits. Archiving limits can combine rows; the number of visible rows is not the total number of tracked pages.
    Useful check
    Identify the version, report and archiving mode. Matomo On-Premise and Matomo Cloud do not offer identical settings; changing a display or API limit does not recreate a row already aggregated during archiving.
    Interpretation and next step
    In a test copy, compare the same period and segment. Increasing archiving limits can increase processing time, storage and memory. Previously processed periods may require reprocessing; retain a reference result before changing the setting.

    Official documentation ·

    EuropeTool / software
    matomo.orgVisit official website
    Hosting, cloud and domains

    Cloudflare

    Network, DNS, content delivery and website protection services. Their role depends on enabled products and the request path to the origin server.

    Cloudflare — Fundamentals · Source consulted

    Use it for : Map DNS, proxy and origin before making changes. Check a public page, a private page and publication of a correction; prepare recovery that preserves the correct destination and distinguishes cache, application and DNS resolution.

    Documented characteristics
    Proxy record types
    A · AAAA · CNAME
    DNS only
    MX · TXT
    Modes
    Proxied / DNS only

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: after moving DNS to Cloudflare, a direct query works but a validating resolver fails. The new website address alone does not explain that difference.
    Useful check
    Compare the parent’s published DS with the authoritative provider’s DNSSEC settings. Record answers and time; never copy private keys into the handover notes.
    Interpretation and next step
    A stale DS can break the trust chain. Have the domain owner correct coordination and confirm validated resolution; disabling validation locally does not close the incident.

    Official documentation ·

    Official documentation · Cloudflare — DNSSEC troubleshooting

    InternationalService / platform
    cloudflare.comVisit official website
    Hosting, cloud and domains

    Let’s Encrypt

    Certificate authority supporting automated HTTPS certificate issuance and renewal through compatible clients. Useful for planning validation and operation. Check the certificate actually served for each critical name too: successful issuance does not prove installation on every endpoint.

    Let’s Encrypt · Source consulted

    Use it for : Test automatic renewal and monitor certificate expiry.

    Documented characteristics
    Validation
    HTTP-01 · DNS-01 · TLS-ALPN-01
    Port
    HTTP-01 → TCP 80
    Wildcard certificate
    DNS-01

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: a website also needs a wildcard name, but renewal only provides an HTTP token. This Let’s Encrypt method cannot meet the wildcard requirement.
    Useful check
    Assess DNS-01, access to the validation TXT and minimum automation permissions. Having a DNS API does not prove the ACME client and delegation are configured correctly.
    Interpretation and next step
    After validation, check the certificate actually presented for the expected names. A CAA policy authorising issuance replaces neither this check nor private-key protection.

    Official documentation ·

    Official documentation · Let’s Encrypt — Challenge types

    Official documentation · Let’s Encrypt — CAA

    InternationalInstitution / standard
    letsencrypt.orgVisit official website
    CMS, e-commerce and no-code

    WordPress

    Open source CMS for pages, posts and media, with user roles, themes and plugins. An installation’s capabilities also depend on its selected components.

    WordPress — Features · Source consulted

    Use it for : Have the actual publisher create and correct a page using their normal role. Then check public rendering, updates and restoration; one demonstration does not describe every theme and plugin.

    Documented characteristics
    API
    REST · JSON
    Pagination
    per_page=1…100
    Headers
    X-WP-Total · X-WP-TotalPages

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    On an authorised copy, select a page with an image, a categorised post and a custom content item. Check their presence in a WXR export with the selected filters.
    Useful check
    Import into a test installation and check text, taxonomies and media. The content XML alone does not contain the theme, plugins and every website file.
    Interpretation and next step
    Record what transfers, what still needs retrieving and what needs configuration. WordPress.com exports reference media through links; arrange their transfer before withdrawing the original source.

    Official documentation ·

    Official documentation · WordPress · WXR

    Official documentation · WordPress.com · Content and media

    InternationalService / platform
    wordpress.orgVisit official website
    CMS, e-commerce and no-code

    WooCommerce

    E-commerce solution for WordPress covering products, orders and store settings. Payments, shipping and additional functions depend on configuration and installed extensions.

    WooCommerce — Documentation · Source consulted

    Use it for : Test an order with a variant, charges, notification and staff processing. Separate core settings, external services and paid extensions in the scope; also check declined payments and refunds in an appropriate environment.

    InternationalService / platform
    woocommerce.comVisit official website
    CMS, e-commerce and no-code

    PrestaShop

    Open source e-commerce platform project for building a store. The software project is distinct from hosting offers, services and modules that may accompany it.

    PrestaShop Project · Source consulted

    Use it for : Prepare a product with variants and a complete order, then have staff process it. Assign hosting, modules, updates and support separately to compare proposals covering the same actual work.

    FranceService / platform
    prestashop-project.orgVisit official website
    CMS, e-commerce and no-code

    Shopify

    Hosted platform for creating and managing an online store.

    Shopify · Source consulted

    Use it for : Compare apps, costs, exports and customisation for the actual need, then test an order and its post-payment handling.

    Documented characteristics
    API
    GraphQL Admin API
    Endpoint
    /admin/api/{version}/graphql.json
    Format
    JSON

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Choose a product with variants and several images in an authorised test store. Preserve the original CSV before editing and identify image URLs.
    Useful check
    Compare product, variants and media after import. Sorting rows in isolation can break their associations; photos are not contained in the CSV and must remain accessible during transfer.
    Interpretation and next step
    Examine inventory by location separately. A product catalogue and inventory cover different information; close the original store only after validating the data required.

    Official documentation ·

    Official documentation · Shopify · Products and images

    InternationalService / platform
    shopify.comVisit official website
    Development and code

    PHP

    Language used on servers to generate pages and handle requests, and also available on the command line. The manual covers functions, configuration and security.

    PHP — Introduction · Source consulted

    Use it for : Find a function in the manual for the installed version and read its return values and error cases. Test missing and invalid input; a working example with one value is insufficient to define reliable handling.

    Documented characteristics
    Command
    php -v
    Check
    php -l page.php
    Configuration
    php --ini

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    A PHP page fails after an edit. In a test copy, php -l page.php checks the named file’s syntax without executing its code. The result concerns that file, not the whole website journey.
    Useful check
    Also record php -v and php --ini to identify the command-line interpreter and configuration. The web server may use another version or configuration file.
    Interpretation and next step
    Valid syntax checks neither functions called at runtime, the database nor form delivery. After fixing the file, reproduce the affected action in the test environment.

    Official documentation ·

    InternationalInstitution / standard
    php.netVisit official website
    Development and code

    Composer

    PHP dependency manager that resolves and installs libraries declared for a project, accounting for version constraints and the dependencies of those libraries.

    Composer — Introduction · Source consulted

    Use it for : Check that an installation reproduces expected versions from project files. Change dependencies in a controlled step, then rerun important journeys; successful installation does not establish functional compatibility.

    Documented characteristics
    Installation
    composer install
    Command
    composer update
    Check
    composer check-platform-reqs

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    When taking over a PHP application, distinguish installing dependencies from changing them. With a composer.lock present, composer install uses the locked versions; composer update resolves dependencies and updates the lock.
    Useful check
    In a project copy, keep composer.json and composer.lock together, then use composer check-platform-reqs to check prerequisites. It examines the real PHP and extension versions required by installed packages, even when config.platform simulates another platform.
    Interpretation and next step
    Meeting prerequisites does not establish that the application works. Record the environment and test a representative task; a dependency update requires a separate check from a straightforward installation.

    Official documentation ·

    InternationalTool / software
    getcomposer.orgVisit official website
    Development and code

    Symfony

    PHP framework and reusable components that can be used together or separately. Supports evaluating a complete architecture or a specific part of an existing application.

    Symfony — What is Symfony? · Source consulted

    Use it for : Identify the required function before adopting the entire framework. On a pilot journey, check compatible versions, configuration, tests and update ownership; reusing a component does not remove these responsibilities.

    FranceService / platform
    symfony.comVisit official website
    Development and code

    Laravel

    PHP framework for web applications, covering routing, data access, queues and testing. Adoption requires a team able to operate the application and its dependencies.

    Laravel — Documentation · Source consulted

    Use it for : Prototype a journey that reads data, validates a request and triggers a queued task. Test task failure and recovery before choosing the architecture; the demonstration should include operations as well as the form.

    InternationalService / platform
    laravel.comVisit official website
    Development and code

    Node.js

    Server-side JavaScript runtime and development tooling platform. Use API references and guides matching the deployed version. Code runs outside the browser, so interfaces and deployment constraints need separate checks.

    Node.js · Source consulted

    Use it for : Check supported releases and dependencies before adopting a tool.

    Documented characteristics
    Command
    node --version
    Check
    node --check app.cjs
    Format
    .mjs / .cjs

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Before comparing two server-side JavaScript errors, record node --version. The same file can depend on module format and environment even when its name is identical on both machines.
    Useful check
    In a minimal example, .mjs identifies an ECMAScript module and .cjs a CommonJS module. node --check app.cjs checks the named file’s syntax without running the program.
    Interpretation and next step
    No syntax error does not validate network calls, loaded dependencies or configuration variables. Record the module format and follow up with a test of the action you actually expect.

    Official documentation ·

    Official documentation · .mjs / .cjs

    InternationalService / platform
    nodejs.orgVisit official website
    Development and code

    npm

    Ecosystem combining a package registry, a discovery website and a command line tool. Used to manage dependencies and scripts in JavaScript projects.

    npm — About npm · Source consulted

    Use it for : Distinguish the selected package, the command being run and project-defined scripts. Review version, provenance and dependencies before installation, then test the built journey; package count does not measure usefulness.

    Documented characteristics
    Installation
    npm ci
    Configuration
    package-lock.json
    Check
    npm ci --ignore-scripts

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To reinstall a JavaScript project from its lock, npm ci requires an existing package-lock.json or npm-shrinkwrap.json. If the lock and package.json disagree, it fails instead of rewriting the lock.
    Useful check
    Use a test copy: npm ci replaces the existing node_modules directory. Its --ignore-scripts option prevents scripts in package.json files from running during this installation; that choice may also skip preparation a package needs.
    Interpretation and next step
    A lock alone does not describe the entire machine. Record Node.js and npm versions, relevant install options and build results; a successful installation does not replace an application test.

    Official documentation ·

    InternationalCommunity / learning
    npmjs.comVisit official website
    Development and code

    TypeScript

    Typed language built on JavaScript for more robust applications.

    TypeScript Docs · Source consulted

    Use it for : Define type boundaries and check generated JavaScript at interfaces.

    Documented characteristics
    Check
    tsc --noEmit
    Syntax
    unknown / as
    Configuration
    tsconfig.json

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    A JSON response may contain {"price":"12"} when the program expects a number. A type assertion using as neither converts that string nor checks the response at runtime.
    Useful check
    In a configured project, tsc --noEmit checks types without producing compiler output files. For external data, start with unknown and check its shape and values before using it.
    Interpretation and next step
    Keep two forms of evidence separate: static code consistency and validation of received data. A successful TypeScript check establishes neither the validity of a future response nor the availability of a remote service.

    Official documentation ·

    Official documentation · noEmit

    InternationalService / platform
    typescriptlang.orgVisit official website
    Development and code

    React

    JavaScript library for building user interfaces.

    React · Source consulted

    Use it for : Test component structure and final rendering on a real journey.

    Documented characteristics
    Module
    useState
    Configuration
    key
    Check
    <Editor key={customerId} />

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    In a demonstration form, switching customers may preserve previous input when the same component stays at the same tree position. React associates state with that position and the component’s identity.
    Useful check
    The example <Editor key={customerId} /> gives each customer a distinct identity. When this key changes, React recreates the subtree and resets its local state; check the behaviour using two test identifiers.
    Interpretation and next step
    This choice may discard unsaved input. First decide whether drafts should be retained per customer or reset; a key saves nothing on the server and does not replace a persistence strategy.

    Official documentation ·

    InternationalService / platform
    react.devVisit official website
    Development and code

    Vue.js

    JavaScript framework for building interfaces from components and reactive state. Can be adopted progressively; routing and rendering needs depend on the project.

    Vue.js — Introduction · Source consulted

    Use it for : Try a component with input, validation and updated results, then check keyboard use and status messages. Specify navigation, initial content and deployment needs before deciding between local integration and an application architecture.

    InternationalService / platform
    vuejs.orgVisit official website
    Development and code

    Python

    Official Python language site, used for Web, data and AI. The tutorial introduces the language and standard library for readers with programming foundations. Check version, dependencies and formats before reusing an example.

    Python · Source consulted

    Use it for : Choose a maintained version and isolate project dependencies.

    Documented characteristics
    Module
    venv
    Command
    python -m venv .venv
    Check
    sys.prefix != sys.base_prefix
    Configuration
    pyvenv.cfg
    Resources
    bin/ · Scripts/

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To prepare a content-processing script, create a demonstration environment with python -m venv .venv. Its packages are isolated from the base Python packages by default. Keep the script and its data outside .venv, which contains the recreatable environment rather than the project sources.
    Useful check
    Check which interpreter actually runs the script: sys.prefix != sys.base_prefix indicates a virtual environment. Activation makes selecting the interpreter in the terminal easier, but is optional; its executable can be called directly. The name displayed in the terminal is therefore insufficient evidence.
    Interpretation and next step
    A virtual environment directory is generally not portable simply by copying it. To hand over the work, document the Python version and dependencies, then recreate the environment at the destination. Check processing with a small known file before resuming the entire content batch.

    Official documentation ·

    InternationalInstitution / standard
    python.orgVisit official website
    Development and code

    Django

    Python framework combining data models, routing, views and administration. Its admin interface manages content; the public experience still needs design and testing.

    Django — Overview · Source consulted

    Use it for : Try a record with its relationships, then a model change and migration on copied data. Check an editor account’s permissions and public pages separately: access to the admin does not by itself define business permissions.

    InternationalService / platform
    djangoproject.comVisit official website
    Development and code

    Git

    Version control for tracking changes, comparing states and collaborating on source files. Useful for understanding a modification and finding an identified version. Plan separate backups of data, media and configuration: a code repository is not necessarily a complete website backup.

    Git · Source consulted

    Use it for : Document the branches and rollback procedure the team actually uses.

    Documented characteristics
    Command
    git status --short
    Check
    git diff
    Validation
    git diff --cached

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    A file can contain changes already staged for the next commit and further edits made afterwards. For a tracked file outside merge conflicts, the two columns of git status --short distinguish the index from the working tree.
    Useful check
    Compare git diff, which shows working-tree changes relative to the index, with git diff --cached, which shows staged changes relative to HEAD. The two views can therefore differ for the same file.
    Interpretation and next step
    Read the view matching what you intend to deliver. These commands describe differences; they do not validate program behaviour. Keep functional checks associated with the revision actually tested.

    Official documentation ·

    Official documentation · git diff

    Git logo by Jason Long, licensed under CC BY 3.0.
    InternationalTool / software
    git-scm.comVisit official website
    Development and code

    GitHub

    Code hosting, collaboration, automation and project management.

    GitHub Docs · Source consulted

    Use it for : Organise repository reviews, permissions and automation without publishing secrets; retain recovery and deployment responsibilities.

    Documented characteristics
    API
    REST
    Unauthenticated: general limit
    60 / h
    Authenticated: general limit
    5 000 / h

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Inventory the repository, any wiki and Git LFS files before preparing an authorised backup. Also identify application data stored outside Git.
    Useful check
    Check a mirror clone and explicitly fetch LFS objects when present. The wiki is a separate repository: having project files does not prove its documentation was copied.
    Interpretation and next step
    Try recovery in an isolated environment and compare history, files and required dependencies. A code copy guarantees neither database recovery nor access to external accounts and services.

    Official documentation ·

    Official documentation · GitHub · Repository backup

    InternationalService / platform
    github.comVisit official website
    Development and code

    Docker

    Containers and tools for reproducible environments.

    Docker Docs · Source consulted

    Use it for : Verify that images are reproducible, maintained and documented.

    Documented characteristics
    Resources
    volumes
    Configuration
    --mount type=volume
    Check
    docker volume inspect demo-data

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    In a demonstration application, data written to a container’s writable layer disappears with that container. A Docker volume has a separate lifecycle and can retain data beyond this replacement.
    Useful check
    For a test volume named demo-data, docker volume inspect demo-data describes properties including its driver and mount point. Connect that information to the mount actually used by the application rather than just the container name.
    Interpretation and next step
    A volume’s presence does not establish a usable backup. Prepare an application-consistent copy and verify restoration separately; for a database, mount metadata alone cannot validate data consistency.

    Official documentation ·

    InternationalTool / software
    docker.comVisit official website
    Artificial intelligence

    Mistral AI

    French company developing generative AI models and services.

    Mistral Docs · Source consulted

    Use it for : Compare deployment choices with data and maintenance requirements.

    Documented characteristics
    Endpoint
    POST /v1/chat/completions
    Format
    application/json
    Authentication
    Bearer

    Verification path

    1. Define source and fields
    2. Separate format from accuracy
    3. Validate every value to publish

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: turn an event note into a structured record. Define expected fields and keep null for a date absent from the source instead of inventing one. Use a demonstration document without private data.
    Useful check
    The documentation distinguishes JSON output and schema-constrained output. A valid structure checks form, not the truth of names, dates or quotations. Compare every value with the source passage and handle missing information explicitly.
    Interpretation and next step
    Record model, parameters and document version during the trial. A plausible or reproducible response is not evidence. Have the content owner validate publication elements, particularly after model or instruction changes.

    Official documentation ·

    Official documentation · Mistral · Structured outputs

    FranceInstitution / standard
    mistral.aiVisit official website
    Artificial intelligence

    Hugging Face

    Community platform for AI models, datasets and demos.

    Hugging Face · Source consulted

    Use it for : Explore models and datasets while checking their licences and limitations.

    Documented characteristics
    API
    Hub OpenAPI
    Catalogues
    Models · Datasets · Spaces
    Documentation
    Model cards · Dataset cards
    Format
    Markdown · YAML
    Configuration
    README.md

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To compare two models intended for the same task, start with their README.md model cards. These combine Markdown text with YAML metadata. Record the pipeline_tag task, described uses and stated limitations; a text-generation model does not automatically meet every requirement of an assistant.
    Useful check
    Check the license field and the licence text it references. Also identify the listed datasets and the conditions applying to the resources used. An incomplete card leaves questions open: do not turn missing information into permission or a favourable evaluation result.
    Interpretation and next step
    Keep the repository identifier and revision with the test files and settings. A main branch can change, so two tests using the same model name are not necessarily comparable. Evaluate responses on representative cases and distinguish the publisher’s results from those you actually reproduced.

    Official documentation ·

    Official documentation · Hugging Face — Model cards

    Official documentation · Hugging Face Hub — Download files at a specific revision

    InternationalCommunity / learning
    huggingface.coVisit official website
    Performance, accessibility and quality

    web.dev

    Learning paths covering Web development fundamentals, performance and accessibility. Useful for studying a topic through explained examples. Select a module for the task to improve, then compare the exercise with your own site’s content, constraints and users.

    web.dev · Source consulted

    Use it for : Connect performance or accessibility guidance to a measurement on your pages.

    InternationalMedia / news
    web.devVisit official website
    Performance, accessibility and quality

    PageSpeed Insights

    URL analysis combining Lighthouse diagnostics with field data where available. Useful for distinguishing a simulated trial from historical observations at page or origin level. Record the displayed scope and test conditions before comparing results.

    PageSpeed Insights · Source consulted

    Use it for : Separate field and lab data, then check the relevant URL and device before prioritising fixes.

    Documented characteristics
    Application covered
    CrUX · Lighthouse
    Metrics
    LCP · INP · CLS

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    If PageSpeed shows origin data rather than URL data, the result covers a set of pages on the site. It does not prove that the examined page performs the same way. Record the displayed scope before choosing a correction.
    Useful check
    The CrUX panel describes experiences observed over the previous 28 days; Lighthouse runs a simulated test at a particular moment. Keep the URL, device type, scope and report date separate. A recent fix may change the test before older experiences leave the field window.
    Interpretation and next step
    Missing field data means the available sample cannot support that report. It is neither a zero score nor a pass. Use lab diagnostics to investigate a cause, then follow field data when it becomes available.

    Official documentation ·

    InternationalTool / software
    pagespeed.web.devVisit official website
    Performance, accessibility and quality

    Lighthouse

    Automated page checks for performance, accessibility, best practices and SEO. Useful for identifying reproducible issues and tracking fixes under defined conditions. Scores replace neither journey testing nor a full accessibility evaluation and can vary between runs.

    Lighthouse · Source consulted

    Use it for : Use diagnostics to find reproducible causes and compare tests under similar conditions.

    Documented characteristics
    Modes
    Chrome DevTools · CLI · Node
    Checks
    Performance · Accessibility · SEO
    Command
    lighthouse <URL>

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: a Lighthouse Performance score rises from 72 to 84. The team wants to announce a website that is “12% faster”.
    Useful check
    The difference is 12 score points, not a 12% reduction in loading time. Examine underlying measurements, settings and several comparable runs before stating an outcome.
    Interpretation and next step
    Metrics contribute to the Performance score through weighting; the number of recommendations or diagnostics is not deducted directly. Also check the actual journey after the change.

    Official documentation ·

    Official documentation · Chrome — Lighthouse performance scoring

    InternationalTool / software
    developer.chrome.comVisit official website
    Performance, accessibility and quality

    WebPageTest

    Detailed page-load testing from multiple devices and locations.

    WebPageTest — GitHub · Source consulted

    Use it for : Inspect loading and network waterfall for a defined scenario and location.

    Documented characteristics
    Modes
    First View / Repeat View
    Configuration
    Location, browser, connection and runs
    Checks
    Compare matching views and settings

    Verification path

    1. Fix the conditions
    2. Separate first and repeat views
    3. Compare the traces

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    The table gives three fictional runs with LCP in seconds. Location, browser, connection and content are assumed constant. First and repeat visits represent distinct cache conditions.
    Useful check
    The separate medians here are 3.3 and 1.9 seconds. Compare the same measure with matching settings; selecting the best first view against a median repeat view would distort the comparison. These values do not measure a real website.
    Interpretation and next step
    Relate the difference to the request waterfall and reused resources. Repeat the same conditions after a targeted change. A faster repeat visit does not show that every visitor gets that result.
    Fictional runs · LCP in seconds
    RunFirst visitRepeat visit
    13.21.8
    23.42.0
    33.31.9

    Official documentation ·

    InternationalTool / software
    webpagetest.orgVisit official website
    Performance, accessibility and quality

    W3C HTML Validator

    Checks document markup syntax and explains detected errors. A valid result is neither a quality seal nor a complete accessibility assessment.

    W3C — Markup Validator Help · Source consulted

    Use it for : Start with the first errors, which may produce cascading messages. Check that the tested document matches the served page, then revisit keyboard use, forms and reading: these journeys require checks beyond syntax.

    Documented characteristics
    Checker
    Nu Html Checker
    Format
    HTML · JSON
    Certification
    This check does not issue certification
    Headers
    Content-Type: text/html; charset=utf-8
    Syntax
    out=json

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To check a demonstration page with Nu Html Checker, a POST request body can contain the HTML directly, with Content-Type: text/html; charset=utf-8. The out=json parameter requests a structured report. Distinguish the submitted document from the returned report and retain the examined page version.
    Useful check
    In a fictional report, inspect the messages array and the type field. An error entry identifies a detected problem; non-document-error means checking could not complete. The latter must not be presented as an error-free page: the result remains indeterminate.
    Interpretation and next step
    Messages and their positions help locate the source to fix. Run the check again after editing, then verify keyboard use, content and useful functions. No validator errors is neither accessibility certification nor a guarantee of functionality or search-engine rankings.

    Official documentation ·

    Official documentation · Nu Html Checker — POST body

    Official documentation · Nu Html Checker — JSON output

    InternationalTool / software
    validator.w3.orgVisit official website
    Performance, accessibility and quality

    Can I Use

    Browser- and version-specific support tables for Web technologies. Useful before choosing an API or CSS feature and for reading compatibility qualifications. Usage shares depend on the selected population; then test the feature and fallback in required environments.

    Can I Use · Source consulted

    Use it for : Check feature support for the browsers used by the intended audience.

    Documented characteristics
    Scope
    Feature, browser and version
    Status
    Primary support; read the notes
    Source
    tests.caniuse.com

    Verification path

    1. Choose the feature and versions
    2. Read notes and plan a fallback
    3. Test the actual component

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional case: a card grid uses subgrid. Record the exact feature and target browsers and versions before reading the table. A global percentage alone does not describe the project’s audience.
    Useful check
    Read the notes attached to the cells. Support means the main purpose is largely usable; it does not guarantee every edge case. Prepare a fallback layout that keeps the cards readable.
    Interpretation and next step
    Then try long content, zoom and component navigation in the selected environments. The support table prepares this verification; it does not run it on your interface.

    Official documentation ·

    InternationalCommunity / learning
    caniuse.comVisit official website
    Performance, accessibility and quality

    axe

    Deque tools for automating accessibility checks in different development and testing contexts. Useful for finding known issues in the states examined. Identify the product, scope and remaining manual checks instead of inferring general conformance from no alerts.

    axe · Source consulted

    Use it for : Pair automated findings with human review of the journey.

    Documented characteristics
    Application covered
    axe-core
    Status
    violations / incomplete / passes / inapplicable
    Scope
    Rendered content in the tested state
    Checks
    Manual review of undetermined results

    Verification path

    1. Display the state to test
    2. Classify the results
    3. Check the task manually

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    A fictional axe-core report contains violations: [] and an incomplete result. The latter needs further checking; it does not become a pass because the violations array is empty.
    Useful check
    Keep the engine version, scope and interface state. Open the relevant menu or dialog before rerunning analysis: a panel that remains hidden is not checked as its displayed state.
    Interpretation and next step
    Inspect the target and rule of the undetermined result, then record your manual check. inapplicable means no content matching that rule was found. Complement automation with keyboard journeys and relevant human checks.

    Official documentation ·

    InternationalTool / software
    deque.comVisit official website
    Performance, accessibility and quality

    WAVE

    Visual page evaluation highlighting accessibility findings and information needing manual review. Useful for locating elements, structure and alternative-text meaning. No automated tool checks every criterion; supplement it with reading, keyboard use and actual tasks.

    WAVE · Source consulted

    Use it for : Review alerts in context, then add keyboard, screen-reader and journey-comprehension checks.

    Documented characteristics
    Application covered
    WAVE
    Validation
    This check does not issue certification

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    An image has alternative text, so WAVE does not report it as missing. That result does not say whether the text conveys the right information. Compare the image, its purpose on the page and the text read without the image.
    Useful check
    Read the documentation for each icon: an alert requires judgement, while an identified accessibility feature may still be misused. Add a keyboard journey and tests of form error states.
    Interpretation and next step
    For local, dynamic or protected pages, WAVE extensions can examine the page in the browser. Reproduce relevant states before checking. No detected errors does not constitute a conformance certification.

    Official documentation ·

    InternationalTool / software
    wave.webaim.orgVisit official website
    Security, privacy and compliance

    CERT-FR

    French alerts, advisories and bulletins on vulnerabilities and incidents.

    CERT-FR · ANSSI · Source consulted

    Use it for : Cross-check a security notice against versions actually deployed.

    Documented characteristics
    Resources
    Alerts, security advisories and threat reports
    Source
    CERT-FR · ANSSI
    Scope
    Published information; no diagnosis of your installation

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: an advisory mentions a vulnerability in a component used by the site. The product name alone does not establish that your version and configuration are affected.
    Useful check
    Distinguish an alert about immediate danger, an advisory describing a vulnerability and remedies, and a threat report. Compare affected versions, prerequisites and vendor measures with your actual inventory.
    Interpretation and next step
    Record the document reference and revision date. An advisory is not proof of compromise: take the appropriate action, then verify the version and operation after remediation.

    Official documentation ·

    FranceInstitution / standard
    cert.cyber.gouv.frVisit official website
    Security, privacy and compliance

    OWASP

    Open references and projects for Web application security. Choose the appropriate project: testing methodology, prevention guidance or risk list. Retain version and test scenario; a risk list is not an audit of your application.

    OWASP · Source consulted

    Use it for : Use security resources as a testing basis, not proof of compliance.

    Documented characteristics
    Catalogues
    OWASP Top 10
    Specification
    ASVS
    Documentation
    WSTG

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: a team wants to check that a customer cannot view another customer’s order. Citing only the Top 10 describes neither the requirement nor the test performed.
    Useful check
    Use the Top 10 to frame the risk, ASVS to define requirements and WSTG to prepare tests. Record each document version and adapt the scenario to your test accounts and data.
    Interpretation and next step
    Retain the expected result, observed result and evidence of the fix. Reading a reference or passing a single test does not certify the security of the entire site.

    Official documentation ·

    Official documentation · OWASP ASVS

    Official documentation · OWASP WSTG

    InternationalCommunity / learning
    owasp.orgVisit official website
    Security, privacy and compliance

    Have I Been Pwned

    Check whether addresses and domains appear in known data breaches.

    Have I Been Pwned · Source consulted

    Use it for : Use the service within internal breach-response procedures.

    Documented characteristics
    API
    Pwned Passwords · k-anonymity
    Prefix
    SHA-1 → 5
    Endpoint
    GET https://api.pwnedpasswords.com/range/{prefix}
    Headers
    Add-Padding: true
    Syntax
    SUFFIX:COUNT

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To understand Pwned Passwords, use a public demonstration string, never a real password. Compute its SHA-1 hash locally and send only the first 5 hexadecimal characters to the service. Then compare the remaining 35 characters with the returned suffixes, without sending the string or its full hash.
    Useful check
    The Add-Padding: true header adds padding rows; ignore rows whose count is zero. Compare the exact suffix. An HTTP 200 status confirms a response to the prefix lookup; it does not mean that the password being checked was found.
    Interpretation and next step
    Wait until input is complete instead of querying on every keystroke. No match does not guarantee password security. Using SHA-1 in this protocol is not a recommendation for password storage; looking up breaches by email address is a separate service.

    Official documentation ·

    Official documentation · Have I Been Pwned — Pwned Passwords API

    InternationalService / platform
    haveibeenpwned.comVisit official website
    Security, privacy and compliance

    NIST Cybersecurity Framework

    Cybersecurity risk-management framework for organisations. Use profiles to compare current and target states for the organisation’s activities. Tie outcomes to responsibilities and evidence without presenting the framework as a certification.

    NIST Cybersecurity Framework · Source consulted

    Use it for : Map framework functions to the organisation’s responsibilities.

    InternationalInstitution / standard
    nist.govVisit official website
    Security, privacy and compliance

    VirusTotal

    Analysis of files, URLs, domains and security indicators.

    VirusTotal · Source consulted

    Use it for : Interpret results cautiously and protect confidentiality of submitted files.

    Documented characteristics
    Quota
    Public API → 4 / min · 500 / day
    Commercial use
    Public API: commercial products and services prohibited
    Business workflows
    Public API: business workflows without new files prohibited

    Verification path

    1. Identify file and report
    2. Interpret each analysis state
    3. Check the offering conditions

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: review a file analysis report. Match the exact file hash, date and per-engine results. An identical filename does not establish that the analysed bytes are the ones you are examining.
    Useful check
    No detection is not proof of harmlessness. undetected means the engine has no opinion; failure or a timeout is not a favourable result. Review states and context rather than a single counter.
    Interpretation and next step
    Public API quotas and use restrictions are separate. Contributing new files does not remove the ban on commercial products or services. Check the permitted offering before any integration; this example runs no analysis.

    Official documentation ·

    Official documentation · VirusTotal · Analysis states

    InternationalTool / software
    virustotal.comVisit official website
    Security, privacy and compliance

    SSL Labs

    Qualys SSL Server Test examines TLS configuration on an Internet-accessible server. The report concerns that connection, not the entire application or its access controls.

    Qualys SSL Labs — SSL Server Test · Source consulted

    Use it for : Check the actual hostname and read certificate and protocol details. After changes, repeat the test and visitor journey; a good TLS grade does not check account authentication or form processing.

    Documented characteristics
    Scope
    TLS configuration of a public web server
    Checks
    Certificate, protocols and cipher suites
    Measure
    TLS grade; does not measure all application security

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: a site earns a good TLS grade, but an account can still access someone else’s data. The grade does not assess that application permission.
    Useful check
    On a server you are authorised to test, record the hostname, date, certificate and supported protocols. If several endpoints appear, examine their results separately.
    Interpretation and next step
    After fixing TLS configuration, retest the affected endpoint. Keep separate checks for accounts, permissions and business workflows; a TLS grade validates none of these.

    Official documentation ·

    InternationalTool / software
    ssllabs.comVisit official website
    Design, content and media

    Figma

    Collaborative interface design, prototyping and design systems.

    Figma · Source consulted

    Use it for : Test components with real content and error states.

    Documented characteristics
    API
    REST
    Authentication
    Access tokens · OAuth 2
    Resources
    Files · Nodes · Projects · Comments
    Format
    jpg · png · svg · pdf
    Endpoint
    GET /v1/images/:key

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To prepare a website visual from an authorised Figma design, record the file key, frame identifiers and reference version. Reading the document with GET /v1/files/:key returns its structure; rendering frames uses GET /v1/images/:key, with a chosen format such as png or svg.
    Useful check
    In a demonstration response, check every requested identifier in the images property. A null value means rendering failed; it must not count as a delivered image. Then check dimensions, readability and cropping in the page that will display the visual.
    Interpretation and next step
    Rendered image links expire after 30 days according to Figma documentation. Arrange delivery of the useful files, with reuse rights and a text alternative suited to the context. A successful export guarantees neither accessible text within the page nor correct display on a phone.

    Official documentation ·

    Official documentation · Figma REST API — File endpoints

    InternationalTool / software
    figma.comVisit official website
    Design, content and media

    Unsplash

    Photography library subject to its own usage terms.

    Unsplash · Source consulted

    Use it for : Retain the photograph’s source page, author and licence, check use context and identify illustrative photography.

    Documented characteristics
    Licence
    Unsplash License
    Commercial use
    Allowed under the standard licence
    Resale
    Significant modification required before resale
    Endpoint
    GET /photos/:id/download
    Message body
    url

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    For a gallery connected to the Unsplash API, display images using the addresses returned in photo.urls.*. This API requires credit to the photographer and Unsplash. Keep the source information with the visual rather than separating the photograph from its attribution.
    Useful check
    Using a demonstration response, distinguish displaying a preview from a download-equivalent action, such as selecting a photo to insert into content. For the latter, the API requires a call to links.download_location. This tracking request returns JSON containing url; it is not an address to use directly as an image source.
    Interpretation and next step
    Check that the preview, selected photo and credits identify the same resource. Do not trigger download tracking for every ordinary image display. These integration requirements apply to the Unsplash API and should be distinguished from the standard licence described in the profile.

    Official documentation ·

    Official documentation · Unsplash API — Documentation and guidelines

    InternationalService / platform
    unsplash.comVisit official website
    Design, content and media

    Pexels

    Photo and video library offered under the Pexels License. Review the license and each image’s context before selecting it for a commercial or editorial page.

    Pexels — License · Source consulted

    Use it for : Retain the photo page, author and consulted terms. Check people, brands and intended context before publishing; an illustrative image should not present someone as your employee, customer or the author of a real testimonial.

    InternationalService / platform
    pexels.comVisit official website
    Design, content and media

    Pixabay

    Library of images, video and audio under the Pixabay Content License. Permitted uses have restrictions; additional rights may concern people, brands or other depicted elements.

    Pixabay — Content License Summary · Source consulted

    Use it for : Link the selected media to its original page and consulted license, then review the intended use. Check recognizable elements and avoid misleading presentation; retain selection evidence even when the license does not require a credit.

    InternationalService / platform
    pixabay.comVisit official website
    Design, content and media

    Google Fonts

    Font catalogue and API for requesting families, styles and weights for web pages. Typography choices also need to cover the characters and languages actually published.

    Google Fonts — Get Started · Source consulted

    Use it for : Try the site’s names, accents, numbers and scripts using the selected weights. Check fallback fonts and network requests; finding a family in the catalogue does not by itself ensure readable typography in every language.

    InternationalService / platform
    fonts.google.comVisit official website
    Design, content and media

    Font Awesome

    Icon library with several web integration methods. Its documentation distinguishes decorative icons from those conveying information or representing an action.

    Font Awesome — Accessibility · Source consulted

    Use it for : Check that a button keeps an understandable name when its icon is ignored or fails to load. Separate decoration from essential information, then review loaded resource size and the chosen icon set’s terms.

    InternationalService / platform
    fontawesome.comVisit official website
    Social media and marketing

    Mailchimp

    Email campaigns, marketing automation and audience management.

    Mailchimp · Source consulted

    Use it for : Check consent, segmentation and list export options.

    Documented characteristics
    API
    Marketing API · REST
    Format
    JSON · OpenAPI
    Endpoint
    https://api.mailchimp.com/3.0/
    Syntax
    subscriber_hash = MD5(lowercase(email))
    Status
    status_if_new · status

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To understand subscriber_hash, work offline with the fictional address Reader@example.org. Lowercase it, then calculate its MD5 hash. This rule locates the same resource despite differences in address case; the hash identifies a contact rather than authenticating the API call.
    Useful check
    In a simulated PUT synchronisation, distinguish status_if_new from status. The former sets status on creation; the latter changes an existing contact’s status. Updating a name or preference should not automatically resubscribe a previously unsubscribed contact.
    Interpretation and next step
    For an audience configured with double opt-in, Mailchimp’s guide recommends pending for a new contact: subscribed would bypass the confirmation email. Separate creating the record from confirming the subscription, then check the returned status before interpreting newsletter subscriber counts.

    Official documentation ·

    Official documentation · Mailchimp — Add or update list member

    Official documentation · Mailchimp — Import and export contacts

    InternationalService / platform
    mailchimp.comVisit official website
    Social media and marketing

    Brevo

    French platform for email, CRM and marketing automation.

    Brevo · Source consulted

    Use it for : Test delivery and unsubscribe flow on a pilot campaign.

    Documented characteristics
    Endpoint
    POST /v3/smtp/email
    Authentication
    api-key / OAuth 2.0
    Message body
    htmlContent / textContent / templateId
    Configuration
    headers → X-Sib-Sandbox: drop
    Resources
    messageId · message-id

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To prepare a fictional order confirmation, associate a templateId with variables in params. Check the sender, recipient, subject and final template rendering. A variable’s presence in the request does not prove that the message text or links use it correctly.
    Useful check
    The official sandbox example places X-Sib-Sandbox with the value drop in the JSON headers object. Brevo states that no email is sent and no sending log is created. A 201 response with messageId then confirms request validation rather than delivery.
    Interpretation and next step
    For operational tracking, match the response’s messageId to the message-id field in webhook events. Distinguish an accepted request, a delivered event and any bounce. These stages help explain a status to a customer without treating technical acceptance as proof that the email was read.

    Official documentation ·

    Official documentation · Brevo — Using sandbox mode

    FranceService / platform
    brevo.comVisit official website
    Digital news and monitoring

    Ars Technica

    In-depth technical analysis of software, the Web and technology.

    Ars Technica · Source consulted

    Use it for : Read the full technical context before drawing a general rule.

    Documented characteristics
    Format
    RSS · XML
    Access
    RSS feeds
    Source
    arstechnica.com/rss-feeds/

    Verification path

    1. Choose coverage
    2. Check dates and sources
    3. Summarize and cite

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: you monitor technology news. Distinguish publication, update and event dates. Open the original article before drawing a conclusion.
    Useful check
    A feed headline or summary does not replace the evidence cited in the article. Find the primary source; repeated coverage of one announcement is not independent confirmation.
    Interpretation and next step
    Choose a general, topic or subscriber feed as appropriate. Their coverage differs. Write your own summary and link the original; RSS availability is not blanket republication permission.

    Official documentation ·

    InternationalMedia / news
    arstechnica.comVisit official website
    Digital news and monitoring

    Hacker News

    Community news aggregator focused on programming and technology companies.

    Hacker News · Source consulted

    Use it for : Use discussions to find objections, then verify facts.

    Documented characteristics
    Format
    JSON
    Endpoint
    /v0/topstories.json · /v0/newstories.json
    Items
    /v0/item/{id}.json
    Scope
    topstories · newstories → ≤ 500
    Resources
    type · kids · descendants

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To prepare a technology watch, start with a saved response from topstories.json: it contains identifiers rather than complete articles. Each identifier leads to an item resource. Check its type, because the top-items list can include job posts as well as article links.
    Useful check
    In a fictional example with kids: [101, 102] and descendants: 7, the first field supplies two direct-comment identifiers; the second represents the story’s total comment count. Counting entries in kids therefore does not reconstruct all contributions in nested threads.
    Interpretation and next step
    The title and text fields can contain HTML: use escaped display or appropriate sanitisation rather than raw insertion. Handle deleted and dead markers and missing external links too. A discussion score helps identify a topic but does not verify its source’s claims.

    Official documentation ·

    InternationalCommunity / learning
    news.ycombinator.comVisit official website
    Communities and learning

    freeCodeCamp

    Free courses, exercises and publications on Web development.

    freeCodeCamp — FAQ · Source consulted

    Use it for : Choose a path and complete an exercise rather than only reading lessons.

    Documented characteristics
    Source
    github.com/freeCodeCamp/freeCodeCamp
    Curriculum
    github.com/freeCodeCamp/freeCodeCamp/tree/main/curriculum

    Verification path

    1. Choose a specific lab
    2. Explain and change your solution
    3. Check certification and integrity

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: build a filterable JavaScript list, then inspect the associated lab tests. Distinguish guided instructions from decisions you can explain and reproduce without a supplied solution.
    Useful check
    Change one requirement, such as behaviour when no item matches. Keep your version, tests and an explanation of the fix. Passing known tests does not guarantee every possible use of the interface.
    Interpretation and next step
    Check the current pathway requirements before claiming certification: the cited JavaScript pathway distinguishes projects and an exam. Follow the academic honesty policy too, including rules on AI-generated solutions; do not present outside assistance as your own work.

    Official documentation ·

    Official documentation · freeCodeCamp · JavaScript certification

    Official documentation · freeCodeCamp · Academic Honesty Policy

    InternationalCommunity / learning
    freecodecamp.orgVisit official website
    Communities and learning

    MDN Learn Web Development

    Structured path for learning Web development fundamentals. Follow modules according to your prerequisites and complete exercises before progressing. Teaching examples need adaptation to the real project’s constraints and content.

    MDN Learn Web Development · Source consulted

    Use it for : Follow a learning path and apply each concept to a small real page.

    Documented characteristics
    Curriculum
    MDN Curriculum
    Subjects
    HTML · CSS · JavaScript · Accessibility
    Documentation
    Core modules · Extensions

    Verification path

    1. Define a small task
    2. Choose the module and exercise
    3. Repeat with different content

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: learn to build a reading page with headings, links and a responsive layout. Choose the matching Curriculum module, then make a small personal variation instead of only rereading the solution.
    Useful check
    MDN distinguishes single-skill exercises from challenges combining several concepts. A CSS selector exercise and a complete page therefore test different scopes. Record what you completed independently and which aids you used.
    Interpretation and next step
    Keep the file, expected result and an explanation of your choices. Revisit the problem with different content to examine transfer. The pathway builds foundations; one completed page does not establish complete professional proficiency.

    Official documentation ·

    Official documentation · MDN · Learn web development

    InternationalMedia / news
    developer.mozilla.orgVisit official website
    Organization, collaboration and automation

    n8n

    Workflow automation tool connecting applications and APIs, available in cloud or self-hosted deployments. Review its fair-code license and terms for the intended use.

    n8n — Documentation · Source consulted

    Use it for : Test a fictional event through to its result, then replay a duplicate and a destination-service failure. Assign execution monitoring and error recovery; self-hosted deployments also need updates, backups and access protection.

    Documented characteristics
    Installation
    Docker · Docker Compose · npm
    Editions
    Community · Business · Enterprise
    Hosting
    Self-hosting

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    Fictional example: a form sends an event to n8n and receives a positive response, but no customer record appears. The acknowledgement does not establish that the write succeeded.
    Useful check
    Check the URL, workflow publication and matching run in Executions. Then compare the write node’s result with the state actually stored in the destination service.
    Interpretation and next step
    If the response was immediate, treat it as evidence of startup. Do not replay blindly: use the event identifier and deduplication rules before any recovery.

    Official documentation ·

    Official documentation · n8n — Webhook node

    EuropeTool / software
    n8n.ioVisit official website
    Organization, collaboration and automation

    GitHub Actions

    Automation of tests, checks and deployments from GitHub repository events. Define trigger event, jobs and execution environment in the workflow. Inspect permissions and logs; one successful job does not prove that every expected check ran.

    GitHub Actions · Source consulted

    Use it for : Define test and release steps while limiting automation permissions.

    Documented characteristics
    Format
    YAML
    Configuration
    .github/workflows/*.yml
    Triggers
    push · pull_request · workflow_dispatch
    Metrics
    status · conclusion
    Resources
    id · head_sha · run_attempt

    Learning example: adapt files, identifiers and conditions to a test copy before interpreting the result.

    Practical example
    To read a GitHub Actions result, compare two fictional responses: status: completed with conclusion: failure, then status: queued with conclusion: null. The first run has finished unsuccessfully; the second is still waiting to start. A completed status alone therefore does not prove that checks passed.
    Useful check
    Associate the result with its id, the expected head_sha commit and the run_attempt number. An older successful run on the same branch does not automatically validate the latest code. When a run is attempted again, keep the connection between the commit and the result being reviewed.
    Interpretation and next step
    A success conclusion describes the checks actually executed by the workflow. Review the intended jobs and their logs before concluding that the site works for visitors. Keep the identifiers needed for traceability without copying a token or secret into an acceptance record.

    Official documentation ·

    Official documentation · GitHub REST API — Workflow runs

    InternationalService / platform
    github.comVisit official website
    Artificial intelligence

    Cursor

    AI-assisted code editor and programming agent.

    Cursor · Source consulted

    Use it for : Evaluate a representative task, review proposed changes and check transmitted data before authorizing an agent on a sensitive repository.

    Cursor — Cursor brand guidelines
    InternationalTool / software
    cursor.comVisit official website
    Choose a starting point

    What each category helps you decide.

    These examples illustrate uses, not rankings or endorsements. Verify each provider’s current documentation and terms before a decision.

    Web standards and governance

    Standards bodies and reference frameworks help separate a technical rule from a product preference. Start with the exact problem before reading a full specification.

    Questions to check
    • Identify whether the document is a standard, a recommendation or an explanation.
    • Record its version and the context in which it applies.
    • Distinguish normative requirements from explanatory material and check the criterion’s exceptions.

    A practical use : To decide whether a form is accessible, first describe the observed barrier: missing label, unannounced error or broken keyboard route. Find the relevant criterion, then compare it with page behaviour.

    What this cannot prove : A practical explainer and a standard serve different purposes; keep a link to the normative text and the version checked.

    Examples : W3C · RGAA

    Related guide : Publish accessible website content every day

    Explore troubleshooting situations

    SEO, search and analytics

    Search and measurement tools reveal what visitors seek, find and complete. Search figures, visits and enquiries describe different stages of a journey.

    Questions to check
    • Separate pre-click data from actions completed on the website.
    • Choose a few important pages and decisions before adding dashboards.
    • Check whether a measurement covers a page, property or URL group before comparing figures.

    A practical use : Take one service page: compare queries that surface it, its indexing state and the enquiries it produces. High query volume with poor fit may call for clearer copy rather than more traffic.

    What this cannot prove : Third-party estimates are not visits measured on your own site. Record the period and definition of every metric.

    Examples : Google Search Central · Matomo

    Related guide : Validate structured data on a website

    Explore troubleshooting situations

    Hosting, cloud and domains

    Compare hosting against the site’s real needs: availability, data, backups, support, location and responsibilities. Domain, email and application may belong to different providers.

    Questions to check
    • List what the offer includes and what remains your responsibility.
    • Check how data can be exported and a backup restored.
    • Establish what can be restored, by whom, how quickly and from how old a copy.

    A practical use : Map one real website across domain, DNS, email, files, database and backups. Ask each supplier what it operates and rehearse data recovery before committing.

    What this cannot prove : Location, support and restoration depend on the precise plan. Advertised prices may exclude renewal or necessary features.

    Examples : OVHcloud · Cloudflare

    Related guide : Take over or hand over a website with confidence

    Explore troubleshooting situations

    CMS, e-commerce and no-code

    A CMS should suit the people who will publish and maintain content, not just a product demonstration. Compare roles, page models, updates and data exit paths.

    Questions to check
    • Have the future team edit a real page and correct a mistake.
    • Assess add-ons, recurring costs and export options.
    • Have the future contributor correct, approve and retire content using their actual permissions.

    A practical use : Give shortlisted platforms the same task: publish a service page with an image, translation, next action and later correction. Ask the person who will actually publish to run the trial.

    What this cannot prove : A polished demo does not establish maintainability; include add-ons, hosting, training and export in the comparison.

    Examples : WordPress · PrestaShop

    Related guide : Choose a CMS around your team’s real work

    Explore troubleshooting situations

    Development and code

    Languages, frameworks and code tools solve different constraints. A team benefits from choosing what it can test, update and hand over instead of accumulating technology.

    Questions to check
    • State the need each dependency solves.
    • Check documentation, compatibility and update procedure.
    • Check maintained versions and migration requirements before adopting a dependency.

    A practical use : Pick one function and prototype its normal path, failure state and update process. Check that a second person can explain the code, dependencies and deployment.

    What this cannot prove : Stars or popularity cannot replace fit with the team and the actual requirement.

    Examples : PHP · Node.js

    Related guide : A practical website prelaunch checklist

    Explore troubleshooting situations

    Artificial intelligence

    AI resources mix model documentation, services and communities. For professional use, separate demonstrated capability from data handling, output verification and operating cost.

    Questions to check
    • Test representative tasks and inspect failures.
    • Review data-handling terms before sending sensitive material.
    • Check an answer against its source and test a case with missing required information.

    A practical use : Prepare a small set of real tasks with expected answers, allowed sources and failure cases. Compare outputs, observed cost and data handling before integrating a model.

    What this cannot prove : One demo or fluent answer does not establish reliability on difficult cases. Public facts repeated by an assistant still need checking.

    Examples : OpenAI Developers · Hugging Face

    Related guide : Verify sources and evidence in web content

    Explore troubleshooting situations

    Performance, accessibility and quality

    Quality tools reveal speed, accessibility and stability issues, but no score replaces a real person completing a task. Compare lab and field data when the latter is available.

    Questions to check
    • Measure different page families and devices.
    • Connect each finding to a cause and an affected journey.
    • Distinguish field measurements, laboratory runs and manual review rather than combining them into one score.

    A practical use : Measure one page on a phone, then complete a task by keyboard and with larger text. Link findings to a specific component or piece of content before fixing them.

    What this cannot prove : A lab score varies with its environment and cannot describe all visitors. Automated checks do not cover every accessibility barrier.

    Examples : web.dev · PageSpeed Insights

    Related guide : Test website accessibility through real tasks

    Explore troubleshooting situations

    Security, privacy and compliance

    Authorities, guidance and security tools help prioritise risks and verify safeguards. A general alert does not prove a particular site is vulnerable; its version and configuration matter.

    Questions to check
    • Separate preventive guidance from an active vulnerability notice.
    • Assign who applies, tests and documents a correction.
    • Check who receives alerts, what data is exposed and how access is revoked.

    A practical use : Inventory software, versions and sensitive journeys. For each relevant advisory, check whether the installed version and configuration are affected, then assign the fix and its verification.

    What this cannot prove : A scanner or alert list proves neither safety nor compromise. Personal-data questions require an assessment tailored to the incident.

    Examples : ANSSI · OWASP

    Related guide : Test website restoration before an incident

    Explore troubleshooting situations

    Design, content and media

    Design and media tools help prepare an interface, but value comes from readable content, consistent components and assets with clear usage rights. Test a prototype with real copy.

    Questions to check
    • Test mobile, keyboard, error and long-content states.
    • Verify image rights and handover of source files.
    • Test long content, errors and keyboard use before judging a mockup by its showcase image.

    A practical use : Design a card, a long page and a form with real copy and licensed media. Test translation expansion, errors and phone sizes before extending the system.

    What this cannot prove : A design file alone cannot settle image rights, alternative text or final browser behaviour.

    Examples : Figma · Adobe

    Related guide : How to choose and prepare website images

    Explore troubleshooting situations

    Social media and marketing

    Distribution platforms can complement a website when the promise, landing page and measurement agree. Separate organic reach, advertising and community relationships.

    Questions to check
    • Define the useful outcome before launching a campaign.
    • Check the landing page, consent choices and enquiry quality.
    • Link a campaign to a confirmed action, then verify the conversion definition and reporting period.

    A practical use : Define a campaign through its audience, promise, landing page and useful action. Follow the journey to a received enquiry, then compare its quality with the starting goal.

    What this cannot prove : Platform engagement and on-site outcomes measure different things. Check terms and consent choices before adding tools.

    Examples : Meta Business · LinkedIn Marketing Solutions

    Related guide : Plan an honest and useful local web presence

    Explore troubleshooting situations

    Digital news and monitoring

    Industry news helps spot changes and compare perspectives. For technical or regulatory decisions, follow the story back to primary documentation or the original announcement.

    Questions to check
    • Compare publication date with the event date.
    • Separate confirmed facts, analysis and vendor announcements.
    • Find the original publication and distinguish announcement, actual availability and rollout scope.

    A practical use : For an important announcement, record its date, original publisher, primary document and possible effect on your pages or tools. Only then decide whether action is needed.

    What this cannot prove : Commentary published later may help, but its date is not the date of the change. Separate an announcement, effective availability and interpretation.

    Examples : Blog du Modérateur · Numerama

    Related guide : Verify sources and evidence in web content

    Explore troubleshooting situations

    Communities and learning

    A course or community is more useful when it leads to a verifiable exercise rather than an accumulation of tutorials. Choose a level, a skill and an application project.

    Questions to check
    • Check prerequisites and update date.
    • Produce a small result and ask for critical review.
    • Choose material with exercises, prerequisites and explained feedback rather than an unsupported employment promise.

    A practical use : Choose one skill and a small deliverable: an accessible page, tested form or documented audit. Compare courses by prerequisites, practice, feedback and full cost.

    What this cannot prove : Hours or video counts do not show independent ability. Check certification claims with the relevant register when they matter to the decision.

    Examples : freeCodeCamp · OpenClassrooms

    Related guide : Verify sources and evidence in web content

    Explore troubleshooting situations

    Organization, collaboration and automation

    Workflow tools should first make decisions, owners, dates and versions visible. Simplify a process before automating it, and plan what happens when an automation fails.

    Questions to check
    • Define the source of truth for documents and approvals.
    • Test access roles, exports and useful notifications.
    • Test handover, a collaborator leaving and recovery of work before adoption.

    A practical use : Take a real content approval: author, reviewer, decision, published version and correction. Test who receives a notice and how to find the decision three months later.

    What this cannot prove : Automating an unclear step can spread an error faster. Check access roles and data export before moving the team.

    Examples : Notion · Trello

    Related guide : Take over or hand over a website with confidence

    Explore troubleshooting situations

    Transparency

    Editorial scope and third-party websites

    This non-exhaustive directory had its data consistency and links checked on 2 October 2026. Some websites restrict automated checks. It contains external links to independent websites. Their availability, content, prices, cookies and terms may change. Française du Numérique does not control them and receives no commission for their inclusion.

    Directory questions

    Selection, independence and updates.

    Entries describe resources from their publishers’ pages and provide a source, category, purpose and checking date. The selection covers different Web tasks rather than ranking every available provider. Open the cited source to check current scope, availability and conditions before relying on a service.

    No. Inclusion identifies a resource to examine; it does not certify every feature, price, policy or result. Compare the resource with your actual task, country, language and technical requirements. Confirm current conditions with its publisher before committing time, data or money.

    Yes. Search the displayed catalogue, combine the available filters and clear them to return to the full list. Every entered word must match the indexed text. The visible result count describes this selection, not the entire Web. Individual category pages and direct links remain available without JavaScript.

    Compare using observable evidence

    Before choosing a resource, run a limited trial using the same data and task. Keep the outcome and its limitations rather than a ranking based on familiarity.

    • Web standards and governance: Choose a page with headings, navigation and a form. Compare the standard, a documented example and keyboard behaviour. Record the framework version; success on one example does not establish compliance across the entire site.
    • SEO, search and analytics: Inspect the same URL and period in each tool. Record property, filters, metric definitions and collection date. Search clicks, visits and business enquiries measure different events; do not add them as a single outcome.
    • Hosting, cloud and domains: Prepare a demonstration backup with files, database and attachments. Verify restoration in an isolated environment and record missing elements. Then compare recurring cost, support and exit options; a backup button does not prove successful recovery.
    • CMS, e-commerce and no-code: Build an example with a page, image, translation and form. Test editing, publication permissions and export. Compare recoverable content when leaving, as well as ease of creation; some relationships or functions require separate migration.
    • Development and code: Reproduce a minimal case with identified versions and dependencies. Compare expected result, error and verified fix. A command working on one computer does not establish reproducible installation; document prerequisites and the result in the target environment.
    • Artificial intelligence: Use a small set of representative questions with verifiable answers. Record model, date, instructions, errors and unanswered cases. Compare accuracy and usefulness on that set; fluent wording or an isolated result does not demonstrate general reliability.
    • Performance, accessibility and quality: Run the same task on mobile, with a keyboard and using the chosen inspection tools. Keep page, device, conditions and observed obstacle. An automated score does not replace a journey check; connect each issue to a tested correction.
    • Security, privacy and compliance: Assess controls in an authorised environment using test data. Check access removal, recovery and log visibility. Connect each observation to an owner and correction; a favourable scan does not guarantee absence of vulnerabilities.
    • Design, content and media: Test the same page with long text, a missing image and a narrow screen. Check understanding, contrast and the intended action. For media, record author, source and usage rights; downloadable files are not automatically reusable.
    • Social media and marketing: Define the same useful action, period and attribution rule before comparing. Reconcile results with actual enquiry tracking using proportionate data. Two platforms can attribute the same conversion; adding them may count one outcome twice.
    • Digital news and monitoring: Find the primary announcement and record publication date, effective date, versions and affected accounts. Compare these with your environment. A general headline does not establish availability to every user.
    • Communities and learning: Choose a short exercise with a variation on the supplied example. Check whether you can explain the result, fix an error and document limitations. Compare prerequisites and assessed work; attending training does not automatically demonstrate competence.
    • Organization, collaboration and automation: Test a complete task with attachment, approval and export. Replay an event in a copy to detect duplicates. Compare approved version, owner and recoverable data; exporting a list does not establish recovery of the full process.