Le%20service%20public%20Transition%20%C3%89cologique%20des%20Entreprises%20est%20un%20guichet%20d%27accueil%2C%20d%27aide%20et%20d%27accompagnement%20dans%20la%20transition%20%C3%A9cologique%20des%20entreprises.%0A%0A%23%23%20Probl%C3%A8mes%0A%0A%23%23%23%20La%20France%20ne%20respecte%20pas%20ses%20objectifs%20climat-%C3%A9nergie%0A%0AEn%20France%2C%20nous%20r%C3%A9duisons%20lentement%20nos%20%C3%A9missions%20de%20gaz%20%C3%A0%20effet%20de%20serres%20et%20nos%20consommations%20d%27%C3%A9nergie.%20C%27est%20bien%2C%20mais%20insuffisant.%20Le%20%5BHaut%20Conseil%20pour%20le%20Climat%5D%28https%3A%2F%2Fwww.hautconseilclimat.fr%2F%29%20et%20l%27%5BObservatoire%20Climat-%C3%89nergie%5D%28https%3A%2F%2Fwww.observatoire-climat-energie.fr%2F%29%20sont%20l%C3%A0%20pour%20nous%20le%20rappeler.%20Nos%20objectifs%20de%20la%20Strat%C3%A9gie%20National%20Bas%20Carbone%20%28SNBC%29%2C%20et%20des%20Programmations%20pluriannuelles%20de%20l%27%C3%A9nergie%20%28PPE%29%20n%27ont%20pas%20%C3%A9t%C3%A9%20atteint%20en%202021.%0A%0ALa%20mise%20en%20%C5%93uvre%20de%20cette%20strat%C3%A9gie%20n%C3%A9cessitera%20des%20investissements%20massifs%20et%20de%20nouvelles%20expertises.%20Les%20m%C3%A9tiers%20et%20les%20mod%C3%A8les%20%C3%A9conomiques%20vont%20devoir%20se%20transformer.%20Les%20financements%20publics%20et%20priv%C3%A9s%20devront%20donc%20augmenter%20de%20plusieurs%20milliards%20d%E2%80%99euros%20par%20an%20ces%20prochaines%20ann%C3%A9es%2C%20pour%20accompagner%20ces%20mutations%20%C3%A9conomiques.%20Comme%20le%20dit%20le%20rapport%20du%20%5BGIEC%5D%28https%3A%2F%2Fwww.ipcc.ch%2Flanguages-2%2Ffrancais%2F%29%20%3A%20%C2%AB%20Chaque%20dixi%C3%A8me%20de%20degr%C3%A9%20gagn%C3%A9%20compte%20%C2%BB%0A%0A%23%23%23%20M%C3%A9connaissance%20des%20enjeux%20et%20illisibilit%C3%A9%20des%20dispositifs%20d%27aide%20aux%20entreprises%0A%0AA%20d%C3%A9faut%20d%E2%80%99une%20vision%20claire%20des%20opportunit%C3%A9s%20et%20des%20risques%2C%20les%20entreprises%20ignorent%2C%20majoritairement%2C%20les%20actions%20%C3%A0%20engager.%20L%27un%20des%20freins%20%C3%A0%20l%E2%80%99action%20est%20le%20manque%20d%E2%80%99informations%20et%20de%20temps%20%C3%A0%20y%20consacrer.%20Contrairement%20aux%20grandes%20entreprises%2C%20les%20TPE%2C%20PME%20et%20ETI%20n%E2%80%99ont%20pas%20encore%20d%E2%80%99obligations%20l%C3%A9gales%20et%20de%20personnes%20d%C3%A9di%C3%A9es%20%C3%A0%20ces%20sujets.%20La%20transition%20%C3%A9cologique%20et%20%C3%A9nerg%C3%A9tique%20%28TEE%29%20est%20parfois%20per%C3%A7ue%20par%20certains%20dirigeants%20comme%20n%C3%A9cessaire%20%C3%A0%20long-terme%20mais%20co%C3%BBteuse%20et%20ainsi%20non%20prioritaire%20%C3%A0%20court-terme.%0A%0AD%27autres%20entreprises%20ne%20parviennent%20pas%20%C3%A0%20mettre%20en%20%C5%93uvre%20leurs%20projets.%20Pour%20ces%20seconds%2C%20minoritaires%2C%20la%20difficult%C3%A9%20n%E2%80%99est%20pas%20d%E2%80%99identifier%20des%20actions%20et%20des%20projets%20mais%20d%27%C3%AAtre%20accompagn%C3%A9%20afin%20de%20les%20mettre%20en%20%C5%93uvre%2C%20et%20de%20les%20financer.%0A%0ADepuis%20peu%2C%20nous%20observons%20une%20multiplication%20des%20dispositifs%20d%27aides%20par%20les%20op%C3%A9rateurs%20publics%20%28ADEME%2C%20BPI%2C%20ASP...%29%20et%20par%20les%20collectivit%C3%A9s%20%28r%C3%A9gionales%20principalement%29.%20Les%20entreprises%20ne%20comprennent%20pas%20toujours%20par%20quelle%20porte%20d%27entr%C3%A9e%20et%20dans%20quelles%20conditions%20elles%20peuvent%20b%C3%A9n%C3%A9ficier%20de%20ces%20aides%20aupr%C3%A8s%20des%20acteurs%20publics.%0A%0ASurtout%20que%20les%20dispositifs%20d%E2%80%99aide%20%C3%A0%20la%20transition%20%C3%A9cologique%20des%20entreprises%20sont%20nombreux%20et%20de%20nature%20diverse.%20Ils%20r%C3%A9pondent%20%C3%A0%20des%20besoins%20vari%C3%A9s%2C%20allant%20de%20cr%C3%A9dits%20d%E2%80%99imp%C3%B4ts%20jusqu%E2%80%99%C3%A0%20des%20programmes%20d%E2%80%99accompagnement%20individualis%C3%A9s.%0A%0ACette%20situation%20rend%20illisible%20pour%20le%20chef%20d%E2%80%99entreprise%2C%20a%20fortiori%20de%20TPE%2FPME%2C%20le%20parcours%20%C3%A0%20effectuer%20pour%20r%C3%A9aliser%20une%20d%C3%A9marche%20de%20transition%20%C3%A9cologique%20de%20son%20entreprise.%20Or%2C%20rien%20que%20pour%20la%20d%C3%A9carbonation%2C%20les%20analyses%20sectorielles%2C%20men%C3%A9es%20sur%20l%E2%80%99industrie%20et%20l%E2%80%99%C3%A9conomie%20de%20proximit%C3%A9%2C%20montrent%20que%20pr%C3%A8s%20de%202%20millions%20d%E2%80%99entreprises%20devront%20verdir%20leur%20activit%C3%A9%20%C3%A0%20un%20degr%C3%A9%20plus%20ou%20moins%20pouss%C3%A9%20pour%20atteindre%20les%20objectifs%20de%20la%20SNBC%20-%20Strat%C3%A9gie%20Nationale%20Bas%20Carbone.%0A%0AEnfin%2C%20m%C3%AAme%20par%20bonne%20volont%C3%A9%2C%20l%27entreprise%20ne%20peut%20pas%20toujours%20agir%20seule.%20Les%20transformatoins%20doivent%20se%20situer%20%C3%A0%20un%20niveau%20sup%C3%A9rieur%2C%20%C3%A0%20une%20%C3%A9chelle%20locale%2C%20sectoriele%20ou%20r%C3%A9glementaire%2C%20dont%20les%20dirigeants%20ont%20une%20influence%20partielle.%0A%0A%23%23%20Solution%20%3A%20Un%20espace%20d%27accueil%20num%C3%A9rique%20et%20un%20parcours%20raccourci%20pour%20aider%20les%20entreprises%20dans%20leurs%20actions%0A%0ALa%20startup%20d%27%C3%89tat%20permettra%20au%20plus%20grand%20nombre%20d%E2%80%99entreprises%2C%20via%20un%20outil%20d%E2%80%99auto-diagnostic%20en%20ligne%2C%20d%E2%80%99%C3%A9valuer%20leur%20situation%20et%20de%20r%C3%A9aliser%20une%20premi%C3%A8re%20orientation%20%C2%AB%20automatique%20%C2%BB%20vers%20des%20dispositifs%20d%27aides%20associ%C3%A9es%20%C3%A0%20leur%20situation%20et%20contexte%20%28sectoriel%2C%20%C3%A9conomique...%29%20ou%2C%20pour%20les%20situations%20les%20plus%20complexes%2C%20vers%20des%20interlocuteurs%20et%2Fou%20programmes%20mis%20en%20%C5%93uvre%20par%20les%20op%C3%A9rateurs%20publics.%0A%0ANous%20repartirons%20de%20la%20plateforme%20%5BMission%20Transition%5D%28https%3A%2F%2Fmission-transition.beta.gouv.fr%2F%29%20de%20l%27EcoLab%20du%20CGDD%20afin%20de%20b%C3%A9n%C3%A9ficier%20des%20travaux%20port%C3%A9%20et%20initi%C3%A9%20par%20l%27%5B%C3%A9quipe%20d%27entrepreneurs%20d%27intr%C3%A9t%20g%C3%A9n%C3%A9ral%5D%28https%3A%2F%2Feig.etalab.gouv.fr%2Fdefis%2Ffrance-transition%2F%29.%0A%0ALa%20Startup%20d%27Etat%20est%20port%C3%A9e%20par%20l%27ADEME%20%C3%A0%20travers%20son%20%5Bincubateur%5D%28https%3A%2F%2Fbeta.gouv.fr%2Fstartups%2F%3Fincubateur%3Dademe%29%20et%20co-pilot%C3%A9%20par%20la%20DGE%2C%20le%20CGDD%20et%20suit%20la%20%5Bpolitique%20prioritaire%20du%20gouvernement%5D%28https%3A%2F%2Fwww.legifrance.gouv.fr%2Fdownload%2Fpdf%2Fcirc%3Fid%3D45366%29%20de%20%22R%C3%A9ussir%20la%20transition%20%C3%A9cologique%20et%20aller%20vers%20la%20neutralit%C3%A9%20carbone%22.%0A%0A%23%23%23%20Notre%20ambition%20%C3%A0%20moyen%20terme%0A%0A-%20Recenser%2C%20structurer%20et%20rendre%20plus%20accessible%20les%20offres%2C%20les%20actions%2C%20les%20dispositifs%20d%27aides%20et%20les%20programmes%20propos%C3%A9s%20par%20les%20op%C3%A9rateurs%20publics%0A-%20Remettre%20sur%20pied%20une%20%C3%A9quipe%20afin%20de%20d%C3%A9velopper%20un%20module%20d%27auto-diagnostic%20permettant%20de%20faciliter%20la%20recherche%20de%20dispositif%20d%27aide%20adapt%C3%A9%20%C3%A0%20l%27entreprise%0A-%20Collaborer%20avec%20les%20entit%C3%A9s%20locales%20%28directions%20r%C3%A9gionales%20de%20l%27ADEME%2C%20conseil%20r%C3%A9gional%2C%20CCI%2C%20CMA%29%20afin%20de%20d%C3%A9ployer%20le%20service%20au%20plus%20grand%20nombre%20%C3%A0%20une%20%C3%A9chelle%20locale%20%28r%C3%A9gion%20par%20r%C3%A9gion%29%20et%2Fou%20sectorielle%20et%2C%20orienter%20potentiellement%20les%20entreprises%20vers%20un%20interlocuteur%20%C3%A0%20travers%20le%20service%20%5Bconseillers-entreprises%5D%28https%3A%2F%2Fconseillers-entreprises.service-public.fr%29.%0A-%20Apporter%20un%20service%20aux%20op%C3%A9rateurs%20%28ADEME%2C%20BPI%2C%20CDC...%29%2C%20%C3%A0%20commencer%20par%20des%20statistiques%2C%20ayant%20des%20offres%20aux%20entreprises%20afin%20de%20mieux%20les%20cibler%20et%20d%27avoir%20%C3%A9galement%20une%20vision%20d%27ensemble%20sur%20les%20dispositifs%20existants.%0A%0A%2A%2AMesure%20d%27actionnabilit%C3%A9%2A%2A%20%3A%20Entreprise%20qui%20a%20%C3%A9t%C3%A9%20r%C3%A9orient%C3%A9%2C%20a%20candidat%C3%A9%20et%20a%20b%C3%A9n%C3%A9fici%C3%A9%20d%27une%20aide%20d%27un%20op%C3%A9rateur%20public%20%C3%A0%20travers%20la%20plateforme%0A%0A%2A%2AMesure%20d%27impact%2A%2A%20%3A%20Augmenter%20le%20nombre%20d%E2%80%99entreprises%20qui%20bascule%20dans%20la%20transition%20%C3%A9cologique%20%C3%A0%20travers%20les%20aides%20publiques%0A

product_launch

committee

Transition Écologique des Entreprises

investigation

construction

acceleration

Diagnostics

Metrics

http

https

Look for keys/tokens/passwords in HTTP responses, exposed keys/tokens/secrets requires manual verification for impact evaluation.

Credentials Disclosure Check

DNS SaaS Service Detection

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

Wappalyzer Technology Detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

robots.txt endpoint prober

robots.txt file

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

base-uri 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' data:; object-src 'self'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://baserow.io https://tee-metabase.osc-fr1.scalingo.io; script-src 'self' 'strict-dynamic' 'unsafe-eval' 'sha256-rQMeFdZDHQiWcICoahyBB4JinIrDHZlWcBBJwnMmLhs=' 'sha384-55nTXez9WhJWvW5sQpBx8UsK2pdzw4mn5MqxU3fzDbZBjsOOBlsssyvwEHdeg62D' 'sha384-BtCDQ+WEf5f9qW3lrShiaJMKLLCdT2pVbREWJQoeJwg6uI5U91wHn7MteMnK4t2u' 'sha384-PkZTxUXc4Bs2Q2H06FdiPJakDC4Nh7BBCTW1Es5rliZRelVbcw5Ml55uzl1pRTy7' 'sha384-jQ/5g5RD7pqnlkhzd4N2QDOY+w9qUUpJAFZhDlNONFs5ei7FXy/ycywmqRs9azF6' 'sha384-LD0dLwqI3VBLIUHykql/eKHYSKOoJU+8D2yGHLtsjnA2guP6eS1oab4vycjDptXR' 'sha384-IRX2plGvyDz0wf6zBe0wRfiSb2Uj2A1Dz/3vKq7XJh/jOYZCUA8Fhj/fCEg2KSSF' 'sha384-A/X/gJuBE+dkEZ3u3BA6NBxstN5BzsiJXqFEseIQwdRIz3OfpnGXE/gc78CK2tVi' 'sha384-xQ9CLS2uxamVyh8jdfgq0EA4WIdd2wOY8pmlc2S3DwQKGUT+UTF8nS5wYkctBbWu' 'sha384-IK2T82tcXia1oCepX8c9NH2vMqnZA5fb1RUEvefYK0Qwni7Xk6tWsm+UhTNJ+rsP' 'sha384-NEWT3yvprfdNXKy6/E22l7w+jbiTJD1mUHLwHjSiXwqTd+2wzXr1GoPQkFWjTlsb' 'sha384-4cDuVjssc3OzzEaJHse+GajvCKE1zDub7qByBy7HBPBpj+gMrtbwK/2/Ik/zsfc8' 'sha384-1ZrwvClcU8jLFBSfjLke6m8wug6US8utNBUZYcqFdpi2oyirvfPOXKc28DeVMdik' 'sha384-zwxavfVtiZb1oESuBlDQZ6c1Tw0EaB+s2szyH4+jyBGMA5SegPCCFOju7ZYmJzEs' 'sha384-c6OWP3XK5xjPLHwMFoUFR13bEGGV6mXn4OzgM5/yd2dWj4repSNCeKdaDf8zIwdi' 'sha384-XcTl9Ia7Xc+cLu8jcFbxCkIXobzkKSJ9zveJbejB5kOs+Vnos6QT1glFL+//Q+gs' 'sha384-jZUGJ+W4TZ3Az1U/1TTOFTbtkTkq+hgfP7umtfjKx3fm+zR79AjpIVErARyEfMUH' 'sha384-CfiaNtq2Q7Su8oELv5Bb3qL9xODZDFG/ibwHOu0zeIL6a+0y9anYTk7lOgdQ+u5G' 'sha384-z3vqHF4S+Z1HVPbWpUsc6pp+qKeXuXiMLh5tNkFojoXoh3dECL/y5C5J3+ow/V/e' 'sha384-N3xms0/yWjXrnbsdRVUTbmeQpKacRH7gLXQEs8bbmlvqj0COhDmhXXIKxrWLRnQA' 'sha384-Aod5uxN1EwmdhZOZSOJqFy60OwxHlgKSNJGofbAwwwoWBE6PQL4KGaMyvXetel/0' 'sha384-UPcU7ad/bQZy4DjvzuEXB0QIQ9bK91Q68LGWQQnsfM2ACFGxS2teQ+/Plc11NNW5' 'sha384-k4d8aKcbNuwnL2LWDPagiiy5vcy79aD9xbl66bpwICdy9rsN2+WbG5E8qc8yIK8+' 'sha384-UK0fguz8tiyal1svmfkSAJgWlmDvIveNfFHLmTvlCXA4DmC8Nz6XIDZw53Z5AcnY' 'sha384-+vLJZFSlWxy8rz1BGGD5B71uYuy45k9Hnljs+SFUOa/DIUeU3SChKS1qWSs5rF55' 'sha384-gY7bSQTqHAbbL3QzwWZjxZLRU6Dl+h2MI9XmFl7CYr3B87/FFovlXDHHP/xegfYf' 'sha384-1CV4w4mGx2iYnN3RjYrwIn6rR3nXwGRKlPnIpIBUbX3VmUcABKftZX9yKGrnJyLJ' 'sha384-xhuxs6CWNK5Hdgdzx2ebSk61F7fST97U0NFjAsvySmf0GGBXhGfMToEnApd7j1Xa' 'sha384-Gy8/fHSfP6G+D52G0UPKWaQmtVjfFYSrVFbJoFQlWhGoz1rRZxkx6Mrt0UHfjJ2i' 'sha384-Cjolb420tUi6ZNYaYJnfwWPjh0IZQuHtYbZVZoEMYP73EyQODxaZHjlLDsszuD2t' 'sha384-IuEYBnRPTbea/7tS0p6QFUlSn5xRKN9gmA7yH1Jd1gf/hQxE0M7k1zAUPYu/dm1E' 'sha384-5mSbCMo5Jl8mYCrv+8f/5du6gnNqysjtUp8UXZA2ivvnLWbxWSmcIe0c4aiw2SSz' 'sha384-iYdLFDeVfEJJC2CC+2UeB8nOdnk/deXdJMbqc3q3hbzwOANj/KzoGSJkQPy6EvI1' 'sha384-AJjw7ARBpxl4TRuQ1/5fN9NuIb3VQAdK/uObewvRn1a3RkVmvxq62uy/DQTeEtlF' 'sha384-BPi3RnRCD1HbBbqmsKm19/BFiYBE+vt5qAioIINcF42RT1+O0IYlHagD4FMVQpBf'; upgrade-insecure-requests; script-src-elem 'self' 'unsafe-inline' https://stats.beta.gouv.fr https://eu.i.posthog.com https://eu-assets.i.posthog.com https://baserow.io https://tee-metabase.osc-fr1.scalingo.io; worker-src 'self' blob:; connect-src 'self' https://stats.beta.gouv.fr https://baserow.io https://tee-metabase.osc-fr1.scalingo.io https://eu.i.posthog.com https://eu-assets.i.posthog.com https://sentry.incubateur.net; frame-src 'self' https://baserow.io https://tee-metabase.osc-fr1.scalingo.io; manifest-src 'self'; default-src 'none';

Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.

Sentry

Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.

Node.js

Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.

Vue.js

Nuxt is a Vue framework for developing modern web applications.

Nuxt.js

Priority Hints exposes a mechanism for developers to signal a relative priority for browsers to consider when fetching resources.

Priority Hints

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Progressive Web Apps (PWAs) are web apps built and enhanced with modern APIs to deliver enhanced capabilities, reliability, and installability while reaching anyone, anywhere, on any device, all with a single codebase.

Open Graph is a protocol that is used to integrate any web page into the social graph.

severity	service	vulnerability
info	http (port:80)
info	https (port:443)

risk	name
Medium (High)	CSP: script-src unsafe-eval
Medium (High)	CSP: script-src unsafe-inline
Medium (High)	CSP: style-src unsafe-inline
Medium (Medium)	Cross-Domain Misconfiguration
Low (Medium)	Insufficient Site Isolation Against Spectre Vulnerability
Low (Medium)	Permissions Policy Header Not Set
Low (Medium)	Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)
Informational (High)	CSP: Header & Meta
Informational (High)	Sec-Fetch-Dest Header is Missing
Informational (High)	Sec-Fetch-Mode Header is Missing
Informational (High)	Sec-Fetch-Site Header is Missing
Informational (High)	Sec-Fetch-User Header is Missing
Informational (Medium)	Base64 Disclosure
Informational (Medium)	Modern Web Application
Informational (Medium)	Storable and Cacheable Content
Informational (Low)	Information Disclosure - Suspicious Comments
Informational (Low)	Re-examine Cache-control Directives

https://preprod.mission-transition-ecologique.incubateur.net

Nmap

SSL

Expiration : 11/08/2025

Scan OWASPenviron 2 heures

Nuclei3 mois

Séverité	Name	Matcher
unknown	Credentials Disclosure Check	credentials-disclosure
info	DNS SaaS Service Detection	dns-saas-service-detection
info	CAA Record	caa-fingerprint
info	Wappalyzer Technology Detection	nuxt.js
info	Wappalyzer Technology Detection	vue.js
info	HTTP Missing Security Headers	clear-site-data
info	HTTP Missing Security Headers	cross-origin-embedder-policy
info	robots.txt endpoint prober	robots-txt-endpoint
info	robots.txt file	robots-txt
info	Detect SSL Certificate Issuer	ssl-issuer
info	SSL DNS Names	ssl-dns-names
info	TLS Version - Detect	tls-version
info	TLS Version - Detect	tls-version