Non-profit security reports

N

Nachhaltiges Handeln der Hoffnungstaler Stiftung Lobetal

lobetal-nachhaltig.de

54

The Hoffnungstaler Stiftung Lobetal operates as a diaconal non-profit organization focused on sustainability and environmental stewardship. Their website highlights various sustainability activities including climate action, mobility, nature and environment, energy, education, products, and everyday sustainable living. The organization targets individuals and groups interested in sustainable development and social welfare. Technically, the website is built on WordPress using the Astra theme and Beaver Builder, with good SEO and mobile optimization but lacks advanced security headers and privacy policies. Security posture is moderate with HTTPS enabled but missing explicit security policies and headers. Overall, the site is professional and trustworthy but could improve privacy compliance and security transparency.

H

Hoffnungstaler Stiftung Lobetal

mut-lobetal.de

61

The Hoffnungstaler Stiftung Lobetal operates the 'Mobiler unterstützender Teilhabedienst' (Mobile Supportive Participation Service) primarily serving individuals and families in Brandenburg and Berlin. The organization focuses on promoting independence and self-responsibility through personalized and group assistance. As a non-profit entity affiliated with the v. Bodelschwinghsche Stiftungen Bethel, it holds a solid regional presence with a clear mission to support community integration and social participation. The website reflects this mission with comprehensive service descriptions and regional offerings.

H

Hoffnungstaler Stiftung Lobetal

leichte-sprache-bernau.de

61

The website 'Büro für leichte Sprache' is a project of the Hoffnungstaler Stiftung Lobetal focused on providing accessible communication services, primarily through Leichte Sprache (Easy Language). It operates as a non-profit initiative with offices in Bernau and Berlin, supported by project funding such as from Aktion Mensch. The site offers services including translation, workshops, and consultation to promote inclusion and understanding for people with reading and comprehension difficulties. The target audience includes individuals with disabilities and organizations seeking barrier-free communication solutions. Technically, the website is built on WordPress with modern plugins and themes, optimized for accessibility and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

St. Petersburg Chamber of Commerce

stpete.com

62

The St. Petersburg Chamber of Commerce website serves as a professional platform for business advocacy and community engagement in the St. Petersburg area. The organization focuses on building a sustainable business climate through member leadership and advocacy at various levels. The website content is well-structured, targeting local businesses and community members, with clear descriptions of its mission and services. Technically, the site is built on WordPress with modern frameworks and libraries, ensuring a responsive and moderately performant user experience. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though security headers and privacy policies are lacking. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website itself appears professional and trustworthy. Overall, the site is suitable for its business purpose but would benefit from enhanced privacy compliance and clearer domain registration transparency.

F

Frauenselbsthilfe Krebs Bundesverband e. V.

frauenselbsthilfe.de

55

Frauenselbsthilfe Krebs Bundesverband e. V. is a German non-profit organization dedicated to supporting cancer patients and their families through self-help groups, counseling, and educational resources. The website serves as a comprehensive platform offering information, networking opportunities, and qualification programs tailored to cancer-affected individuals. It holds recognized certifications and partnerships with reputable health organizations, reinforcing its credibility and trustworthiness. Technically, the website is built on the Neos CMS platform using PHP and the Flow framework, with frontend technologies including Bootstrap 3 and jQuery. It employs Matomo for privacy-conscious analytics and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized with good SEO practices, though some frontend libraries are somewhat outdated. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows standard domain registration with no privacy protection, consistent with the organization's public profile. Overall, the website presents a professional, trustworthy, and user-friendly experience for its target audience, with room for improvement in security headers and explicit security documentation to enhance its security posture.

T

Tech-Accès Canada

portaildescats.ca

55

Tech-Accès Canada operates a French-language portal dedicated to CATs (Centres d'Adaptation Technologique) across Canada, providing information about member centers, equipment, specializations, and engagement opportunities. The organization appears to be a small non-profit entity founded in 2017, targeting French-speaking Canadian users interested in technology access and support. The website is professionally designed with clear navigation and consistent branding, supporting its niche market position. Technically, the site employs modern frontend technologies including jQuery, Bootstrap 4, Kendo UI, and Font Awesome, ensuring good mobile optimization and moderate performance. However, no CMS or advanced analytics tools are detected, indicating a relatively simple but effective technical infrastructure. The site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced security. From a security perspective, the website has a basic security posture with HTTPS enabled and domain transfer protection. However, it lacks privacy and cookie policies, security headers, and incident response information, which are important for compliance and user trust. No vulnerabilities or malware indicators were found, but improvements are needed to meet GDPR and general security best practices. Overall, the website is safe, professional, and functional but would benefit from enhanced privacy compliance, security hardening, and more transparent contact information to improve trust and regulatory adherence.

N

Nadácia KSK

nadaciaksk.sk

43

Nadácia KSK is a Slovak non-profit foundation dedicated to supporting children and families in the Košice region, focusing on vulnerable groups such as low-income and single-parent families. Their services include educational support, sports funding, arts and cultural activities, and leisure programs like camps. The website is professionally designed using WordPress with modern technologies including Bootstrap and Google reCAPTCHA for form security. Privacy and cookie policies are present and GDPR compliant, reflecting good privacy practices. However, no explicit security policy or incident response contact information is provided. The site is accessible without WAF or security challenges, uses HTTPS, and shows consistent WHOIS data matching the organization's identity, indicating legitimacy and trustworthiness.

A

Allianz ELIANT

eliant.eu

47

Allianz ELIANT is a European non-profit alliance focused on promoting and preserving anthroposophical cultural initiatives across the EU. Founded in 2006 and active as an NGO in Brussels since 2012, it advocates for cultural diversity, education, and integrative medicine. The website is built on WordPress with modern plugins and multilingual support, providing rich content and event information. Security posture is good with HTTPS and cookie consent, but lacks published privacy and security policies. Social media presence is strong, supporting community engagement.

M

MUSIKFONDS E.V.

musikfonds.de

50

Musikfonds e.V. is a German non-profit organization dedicated to supporting contemporary music projects through funding programs, events, and networking. The website reflects a well-established cultural institution with governmental backing, targeting musicians, composers, and cultural organizations within Germany. The business model focuses on grant-making and fostering the contemporary music scene. Technically, the site is built on Drupal 10, leveraging modern libraries such as jQuery and UIkit, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, with clear contact information and social media presence. No adult or questionable content is present, making it safe for general audiences.

N

Norges Birøkterlag

norbi.no

50

Norges Birøkterlag is a well-established Norwegian non-profit organization dedicated to supporting beekeepers and promoting beekeeping activities. The website serves as a comprehensive resource hub offering membership services, educational courses, advocacy, and community engagement for hobbyist and professional beekeepers alike. The organization has a strong national presence with a domain registered since 2001, reflecting its longstanding role in the sector. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Yoast SEO, Google Tag Manager, and Google Analytics. The site demonstrates good mobile optimization, SEO practices, and a professional design that facilitates user navigation and content discovery. However, some technical improvements could be made in accessibility and performance tuning. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. Nonetheless, it lacks visible security headers and does not provide explicit security policies or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable compliance gap. Overall, the website is trustworthy and professional, serving its target audience effectively. Strategic improvements in privacy compliance and security transparency would enhance its risk posture and user trust.

S

Surfrider Foundation

surfrider.org

67

The Surfrider Foundation is a well-established non-profit organization dedicated to the protection and enjoyment of the world's oceans, waves, and beaches. It operates through a large network of volunteers and chapters across the United States, focusing on environmental campaigns such as plastic reduction, ocean protection, beach access, and climate action. The organization engages its audience through advocacy, volunteer programs, and fundraising via donations and merchandise sales. The website reflects a strong market position within the environmental non-profit sector, with clear messaging and calls to action. Technically, the website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools including Google Tag Manager and Facebook Pixel. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS enforced and appropriate security headers present, although explicit security policies and incident response information are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR, featuring cookie consent mechanisms and a comprehensive privacy policy. The lack of publicly available WHOIS data is consistent with privacy protection practices common among non-profits. No critical vulnerabilities or suspicious indicators were found, supporting a high legitimacy score. Strategic recommendations include publishing explicit security and incident response policies, adding a vulnerability disclosure or security.txt file, and providing direct security contact information to enhance transparency and trust.

S

Surfers Against Sewage

sas.org.uk

64

Surfers Against Sewage is a UK-based grassroots environmental charity dedicated to protecting oceans, rivers, and beaches from pollution, particularly sewage and plastic pollution. The organization operates through community engagement, campaigning, data collection, and education, positioning itself as a leading voice in ocean activism within the UK. Their website reflects a mature digital presence with comprehensive content, active campaigns, and multiple avenues for public involvement including membership, fundraising, and volunteering. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Popup Maker, integrating analytics tools like Google Analytics and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism compliant with GDPR. Security measures include HTTPS enforcement and CAPTCHA on forms, though explicit security headers could be improved. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. However, WHOIS data for the domain is unavailable due to a domain naming rules error, which does not impact the legitimacy given the charity registration and consistent branding. Overall, the website demonstrates a strong commitment to transparency, user engagement, and compliance, making it a trustworthy platform for its audience and stakeholders.

Hoffnungstaler Stiftung Lobetal is a German non-profit foundation providing a broad range of social, medical, and educational services primarily in Berlin and Brandenburg. The website presents a professional and accessible digital presence built on Joomla CMS, incorporating modern technologies such as Usercentrics for cookie consent and Matomo for privacy-respecting analytics. The organization targets individuals seeking social support, healthcare, and education, emphasizing inclusion and community engagement. While the site is well-structured and content-rich, explicit privacy policies and terms of service are not found, which could be improved for compliance and transparency. Security posture is solid with HTTPS and consent management, but lacks explicit incident response contacts or vulnerability disclosure mechanisms.

N

New Voices Foundation

newvoicesfoundation.org

49

New Voices Foundation is a non-profit organization dedicated to fostering a more inclusive entrepreneurial ecosystem by providing capital, leadership development, skill-building, and networking opportunities primarily to entrepreneurs of color, especially African-American and Latina women. The organization leverages its PACE model and hosts events such as pitch competitions at high-profile venues like EssenceFest and CES. The website reflects a mature digital presence built on WordPress with modern plugins and integrations, including LayerSlider and WPBakery Page Builder. While the site is well-designed and content-rich, it lacks some privacy compliance features such as cookie consent mechanisms and security headers, which could be improved to enhance user trust and regulatory adherence. The domain registration is consistent with the organization's history and shows no suspicious indicators, supporting the legitimacy of the business.

O

Občianske združenie COOLTAJNER

cooltajner.sk

40

CoolTajneR is a Slovak non-profit cultural and community organization based in Považská Bystrica, founded in 2015. It operates as a cultural and educational center offering a variety of community events, educational programs, and cultural activities. The organization is funded primarily through private donations, grants, and public funds from the Fond na podporu umenia, which is a key partner. The website reflects a well-established local presence with a focus on community engagement and cultural enrichment. Technically, the website is built on WordPress using common libraries such as jQuery and Bootstrap, with SEO optimization via Yoast plugin. The site is mobile responsive and provides a good user experience with clear navigation and relevant content.

K

KONSEPSI

konsepsi.org

50

KONSEPSI is a non-profit consortium established in 2001 in Mataram, Nusa Tenggara Barat, Indonesia, focusing on social transformation, disaster risk reduction, and climate change adaptation. The organization targets vulnerable rural and urban households to build resilience through community-based programs. The website serves as a platform to disseminate information, publications, and program details to stakeholders and the public. Technically, the site is built on WordPress with Elementor and uses modern SEO and analytics tools, hosted by HOSTINGER and utilizing Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

B

Be The Change Stiftung

baeume-fuer-den-wandel.de

47

Be The Change Stiftung is a German non-profit organization dedicated to environmental sustainability, particularly through tree planting projects in Kenya. Their website showcases detailed project information, funding status, and transparency reports, positioning them as a trustworthy entity in the environmental non-profit sector. The organization targets environmentally conscious donors and partners, leveraging digital tools to engage and inform stakeholders. Technically, the website is built on WordPress with modern plugins such as WooCommerce, Yoast SEO, and Borlabs Cookie for compliance and user experience. Hosting is provided by Manitu, a reputable German hosting provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear GDPR-aligned policies and consent mechanisms. Overall, the website is professional, well-branded, and trustworthy, with good SEO and mobile optimization.

P

Politische Kindermedizin

besserbehandelt.at

59

The website besserbehandelt.at is a professionally designed non-profit advocacy platform dedicated to improving healthcare for children and adolescents in Austria. It consolidates expertise, experiences, and voices from affected individuals to influence political decision-making. The platform operates with a clear mission and has established partnerships with reputable organizations, enhancing its credibility. Technically, the site uses Joomla CMS with modern UIkit framework and integrates Matomo for privacy-conscious analytics. It employs a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is limited to an email address, and no explicit terms of service or security policies are published. Overall, the site is trustworthy, well-branded, and accessible, serving its advocacy purpose effectively.

D

Diagnose-Funk e.V.

diagnose-funk.org

47

Diagnose-Funk e.V. is a well-established German non-profit environmental and consumer protection organization focused on educating the public about the risks of electromagnetic fields, including mobile communications and WLAN radiation. The organization provides comprehensive information, advocacy, and publications aimed at promoting health-conscious telecommunications technologies. Their target audience includes affected individuals, environmental advocates, municipalities, and scientific communities. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses a variety of JavaScript libraries and privacy-respecting Matomo analytics, hosted on Hostpoint AG servers. Security posture is solid with HTTPS enabled, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. WHOIS data confirms the domain's legitimacy and long-term establishment. Overall, the site is trustworthy and serves as a valuable resource in its niche.

B

Bixby Knolls Business Improvement Association

bixbyknollsinfo.com

41

Bixby Knolls Business Improvement Association is a small, community-focused non-profit organization established in 2002, dedicated to supporting local businesses and residents in the Bixby Knolls area of Long Beach, California. The website serves as a hub for community events, business directories, donation campaigns, and programs aimed at fostering neighborhood engagement and economic growth. The organization recently transitioned to a 501(c)(3) nonprofit status to facilitate tax-deductible donations, reflecting its commitment to sustainable community support. The target audience includes local business owners, residents, and community members interested in neighborhood development and events. Technically, the website is built on WordPress using the Divi theme, supplemented by popular plugins such as LayerSlider, DataTables, Contact Form 7, and Bloom for newsletter management. Hosting is provided by Bluehost, with domain registration dating back to 2002, indicating a mature digital presence. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Analytics integration via MonsterInsights is present but not configured, suggesting room for improvement in data-driven insights. From a security perspective, the website enforces HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no advanced security headers are detected, which could expose the site to certain DNS and web-based attacks. Privacy compliance is lacking, with no visible privacy or cookie policies, and no consent mechanisms for data collection, despite the presence of multiple forms collecting personal information. There is no public incident response or vulnerability disclosure information, which could be a concern for transparency and trust. Overall, the website is trustworthy and professional in its presentation and business credibility but requires enhancements in privacy compliance and security best practices to align with modern standards. Strategic improvements in these areas will strengthen user trust and regulatory adherence.

R

Rancho Los Cerritos

rancholoscerritos.org

61

Rancho Los Cerritos is a non-profit historic site dedicated to preserving and sharing California's rich cultural history through tours, events, and educational experiences. The website reflects a well-established local attraction with a clear focus on community engagement and cultural education. Technically, the site is built on WordPress using the Bricks Builder framework, hosted with BunnyCDN for performance optimization, and demonstrates excellent mobile responsiveness and SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of visible privacy and cookie policies and incomplete WHOIS data present areas for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

Rancho Los Alamitos is a non-profit historic site and gardens located in Long Beach, California, dedicated to educating and engaging the public about California's rich history. The organization offers free public access to its historic ranch house and gardens, along with educational programs, events, and volunteer opportunities. The website reflects a community-focused mission with clear calls to action for visits, donations, memberships, and volunteering. Technically, the site is built on the EditMySite platform (a Weebly reseller), leveraging common web technologies such as jQuery, Google Analytics, and Microsoft Clarity for analytics, and EqualWeb for accessibility compliance. The site is mobile-optimized and provides a good user experience with consistent branding and clear navigation. Security posture is solid with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is typical for non-profit organizations. Overall, the website is trustworthy, professional, and serves its community-oriented purpose effectively.

I

Impact Factory

impact-factory.de

65

Impact Factory is Germany's largest incubator and accelerator focused on startups addressing social and ecological challenges. The organization provides structured programs tailored to different startup development phases, fostering a community and network to support impact-driven entrepreneurs. The website reflects a professional and consistent brand presence, targeting impact startups and stakeholders in the social entrepreneurship ecosystem. Technically, the website is built on Webflow, leveraging modern web technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized with good SEO practices and moderate performance. Security is well-handled with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance the posture. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive cookie consent banner and detailed cookie categorization. However, the absence of visible contact information and terms of service pages limits full business transparency. Overall, the website presents a low-risk profile with good digital maturity and compliance. Strategic improvements in security headers, incident response information, and contact transparency would further strengthen trust and resilience.

C

Creative Industry Košice n.o.

cike.sk

42

Creative Industry Košice n.o. is a non-profit organization dedicated to fostering cultural and creative industry development in Košice and the broader Eastern Slovakia region. The organization engages in international projects, educational workshops, research, and community challenges to promote innovation and cultural growth. Their website reflects a well-established regional presence with a focus on collaboration among artists, innovators, and policymakers. Technically, the website is built on WordPress with modern tools such as Google Analytics and Tag Manager, and it demonstrates good SEO and mobile optimization. Security posture is solid with HTTPS enforced, though improvements are needed in security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and serves its target audience effectively.

T

Tech-Access Canada

meetthetacs.ca

55

Tech-Access Canada operates as a Canadian non-profit organization providing access to assistive technology through a network of Technology Access Centres (TACs). The website serves as a member portal offering information about TACs, equipment, specialization, and engagement opportunities. The organization targets individuals and entities seeking assistive technology services across Canada, positioning itself as a national resource in this niche. The business model is centered on facilitating access and information rather than direct commercial sales. Technically, the website employs a modern but basic technology stack including jQuery, Bootstrap 4, Kendo UI, and Font Awesome. The site is mobile optimized with good navigation and professional design, though accessibility and SEO features are basic. Hosting and CMS details are not explicitly identified. Performance is moderate with no critical errors detected. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is provided. The WHOIS data shows privacy protection but is consistent with a legitimate small non-profit domain registration. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information. The risk level is moderate with no critical vulnerabilities detected but some compliance and security best practices gaps.

C

Creo

creokultur.no

64

Creo is Norway's largest union and interest organization for professionals in the arts and culture sector, boasting over 11,000 members. The organization focuses on securing better wages and working conditions for its members, who include both employees and self-employed individuals in artistic professions. Key services include legal advice, contract assistance, insurance offerings, and political advocacy. The website reflects a professional and well-structured digital presence, supporting its mission and member engagement effectively. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and integrates third-party services like Google Analytics, Visual Website Optimiser, and CookieFirst for consent management. It uses Cloudflare for CDN and security, ensuring good performance and protection against common web threats. The site is mobile-optimized and includes accessibility features, though some improvements could be made. From a security perspective, the site enforces HTTPS, uses security headers likely managed by Cloudflare, and implements a comprehensive cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Overall, Creo's website demonstrates a strong digital maturity level with good security posture and privacy compliance. Strategic recommendations include publishing dedicated security and incident response policies, implementing a security.txt file for vulnerability disclosures, and enhancing accessibility compliance to further strengthen the organization's online trustworthiness and user experience.

D

Delta

delta.no

72

Delta is a Norwegian trade union organization affiliated with YS, providing membership benefits, labor rights advocacy, and professional development services to workers in Norway. The website is professionally designed, content-rich, and targets Norwegian workers seeking union support. Technically, the site uses AngularJS, Bootstrap, and integrates multiple third-party analytics and social media scripts, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit privacy policy and security headers, which are areas for improvement. Overall, the site is trustworthy and serves its audience well, though enhancing privacy compliance and security practices would strengthen its position.

F

Fellesforbundet

fellesforbundet.no

69

Fellesforbundet is Norway's largest trade union in the private sector, representing approximately 170,000 members and engaging with over 6,000 companies through collective bargaining agreements. The organization focuses on improving working conditions and wages for its members, offering services such as membership benefits, training courses, and advocacy. The website is professionally designed, targeting Norwegian private sector workers and union members, and is presented primarily in Norwegian with multiple language alternatives available. Technically, the site uses modern JavaScript frameworks (Vue.js), integrates multiple analytics platforms including Google Analytics, Plausible, and Microsoft Application Insights, and employs a cookie consent management system to comply with privacy regulations. The site is mobile-optimized and accessible, with good SEO practices.

F

Fagforbundet

fagforbundet.no

74

Fagforbundet is a prominent Norwegian labor union dedicated to supporting workers in Norway by advocating for their wages and rights. The website presents a professional and consistent brand image, targeting Norwegian union members and workers. The business model revolves around membership services and collective bargaining support, positioning Fagforbundet as a key player in the Norwegian labor sector. Technically, the website employs modern web technologies including JavaScript, CSS, and analytics tools such as Piwik PRO and Google Tag Manager, with a cookie consent mechanism indicating GDPR compliance efforts. Security posture is solid with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is accessible, well-structured, and trustworthy, with no signs of blocking or WAF interference.

W

WeHero

wehero.co

65

WeHero is a specialized provider of corporate volunteering and employee engagement solutions, offering customized volunteer experiences, virtual events, and annual programs to help companies achieve social impact goals. The company is positioned as a premium solution trusted by hundreds of leading companies, including Adobe, Citrix, and Visa. Their business model focuses on B2B services that integrate social mission fulfillment with employee engagement. Technically, the website is built on Webflow CMS and leverages a modern technology stack including Google Tag Manager, HubSpot, and Visual Website Optimizer, reflecting a mature digital infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforcement and secure form handling, though explicit security policies and vulnerability disclosures are not publicly available. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, though improvements in transparency around security policies and incident response are recommended.

P

Perry Talents

perrytalents.com

59

Perry Talents is a non-profit accelerator focused on providing continuous growth programs for startups. The website presents a clear business model targeting startup founders and entrepreneurs, positioning itself as a supportive accelerator in the startup ecosystem. The company appears to be relatively young, founded around 2019, with a small organizational size and a consistent brand presence. Technically, the website is built using the Framer platform with embedded scripts from Pagecloud, hosted on Slovakian servers. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Contact information and incident response details are absent, which may impact user trust and compliance. Overall, the website is professional and safe but would benefit from enhanced security and privacy measures to improve trust and compliance.

G

Greenpeace Österreich

greenpeace.at

10

Greenpeace Österreich is the Austrian branch of the internationally recognized environmental NGO Greenpeace. The organization focuses on environmental advocacy, public awareness campaigns, and activism to promote sustainability and ecological protection. Their website targets the general public interested in environmental issues and provides information on current priorities and campaigns. Technically, the website employs modern JavaScript libraries, Cookiebot for GDPR-compliant cookie management, and integrates third-party services such as Stripe for payments and Typeform for forms. The site is hosted by EDIS GmbH, a reputable Austrian hosting provider, and uses HTTPS with strong security headers, indicating a good security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, explicit contact information and terms of service pages are not clearly found in the provided content. Overall, the website is professionally designed, well-branded, and trustworthy, with moderate to good performance and mobile optimization.

A

Anthroposophische Gesellschaft in Deutschland e.V.

anthroposophische-gesellschaft.de

45

The Anthroposophische Gesellschaft in Deutschland e.V. is a well-established non-profit organization dedicated to promoting the spiritual and cultural movement of Anthroposophy founded by Rudolf Steiner. The organization operates primarily in Germany and serves a broad audience interested in spiritual science, cultural reform, and social initiatives. Their business model revolves around memberships, events, publications, and fostering community engagement. The website reflects a mature digital presence with a comprehensive content offering, including news, events, and educational resources. Technically, the site is built on TYPO3 CMS, hosted by Infomaniak, and employs modern web technologies to ensure a good user experience across devices.

A

Arkivet

arkivet.no

62

Arkivet is a Norwegian non-profit peace and human rights center located in Kristiansand, serving as both a memorial and a forward-looking research and dissemination center. The website is professionally designed using WordPress with multilingual support and integrates modern SEO and analytics tools. It employs a comprehensive GDPR-compliant cookie consent mechanism powered by Cookie Information and uses Cloudflare for CDN and security. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The site lacks explicit contact emails or phone numbers in the provided content and does not display terms of service or security policies. Overall, the website is trustworthy, well-maintained, and suitable for its educational and cultural mission.

The Shadowserver Foundation is a well-established nonprofit organization dedicated to improving Internet security globally by providing free, actionable cyber threat intelligence and remediation reports. Their services target network providers, national governments, law enforcement, and industry sectors, positioning them as a key player in the cybersecurity nonprofit space. The website reflects a professional and consistent brand image with comprehensive content and strong trust indicators such as media coverage and partnerships. Technically, the website is built on WordPress 6.8.3 with modern web technologies including Google reCAPTCHA for form security and Google Fonts for typography. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security best practices are observed with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security headers and a dedicated security policy page are absent. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a security.txt file and incident response contact details suggests room for improvement in vulnerability disclosure and incident management transparency. WHOIS data is unavailable due to privacy protection, which is justified for this nonprofit entity. Overall, the website is trustworthy, secure, and professionally maintained. Strategic recommendations include enhancing security headers, publishing a formal security policy and incident response contacts, and implementing a security.txt file to facilitate vulnerability reporting. These steps will further strengthen the organization's security posture and stakeholder trust.

M

Major og advokat Eivind Eckbo Legat STI

eckbos-legat.no

60

Eckbos Legat is a well-established Norwegian private charitable foundation with a history dating back to 1923. The foundation consolidates multiple legacies to provide annual support to individuals and projects aligned with its mission. The website reflects a professional and consistent brand image, targeting individuals and organizations seeking grants and support in Norway. The technical infrastructure leverages modern web technologies such as jQuery and the Foundation CSS framework, with a focus on accessibility and user experience. Privacy compliance is strong, evidenced by a comprehensive privacy policy and an active cookie consent mechanism, while Google Analytics is deliberately disabled to enhance user privacy. Security posture is moderate; HTTPS is enforced and forms include client-side validation, but the absence of explicit security headers and incident response information suggests room for improvement. Overall, the website is trustworthy, functional, and aligned with the foundation's non-profit mission.

L

Landesarbeitsgemeinschaft Puppenspiel e.V. Thüringen

puppe-thueringen.de

47

Landesarbeitsgemeinschaft Puppenspiel e.V. Thüringen is a small non-profit cultural association dedicated to puppetry arts in the Thüringen region of Germany. The organization provides puppetry events, educational projects, and supports a community of puppetry artists and enthusiasts. Their website serves as an informational portal with event details, member information, and contact resources. Technically, the site is built on Joomla CMS using Yootheme templates and UIkit framework, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and incident response information. Overall, the site is trustworthy and professionally presented, targeting cultural audiences and puppetry communities.

N

Nepada Wildlife e.V.

nepadawild.life

51

Nepada Wildlife e.V. is a small non-profit organization dedicated to wildlife conservation and biodiversity preservation, with a strong focus on environmental education. The organization operates primarily in Germany and engages its audience through educational programs, conservation projects, and public outreach. Their website reflects a professional and consistent brand image, supported by active social media channels on Facebook, Instagram, and YouTube. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS and no exposed sensitive data, though security headers could be improved. Privacy compliance is limited due to the absence of explicit privacy and cookie policies on the main site. WHOIS data is unavailable, which slightly reduces domain trust but does not negate the legitimacy of the organization given the quality of content and social presence. Overall, the website is trustworthy and well-positioned for its niche audience.

S

Stiftung Chancen für Kinder

stiftung-chancenfuerkinder.de

60

Stiftung Chancen für Kinder is a German non-profit foundation established in 2004, dedicated to improving the lives of children worldwide through projects in education, culture, and medical care. The foundation has a solid market position supported by reputable partners and a clear mission to provide children in poverty with better opportunities. The website is professionally designed using WordPress, featuring modern plugins for marketing and cookie management, and offers content in German with an English version available. Technically, the site is well-structured, mobile-optimized, and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a trustworthy and credible organization with transparent domain registration and consistent business information.

I

INTERSOS

intersos.org

10

INTERSOS is a well-established humanitarian non-profit organization focused on providing frontline aid during emergencies worldwide. The website presents a professional and comprehensive digital presence, targeting donors, humanitarian workers, and partners. It offers detailed information about its activities, news updates, and donation options, supporting its mission effectively. Technically, the site is built on WordPress with modern plugins for SEO, donations, and cookie consent, ensuring a good user experience and compliance with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Overall, the domain appears legitimate despite the lack of WHOIS registrant data, likely due to privacy protection common in NGOs. The site is safe, trustworthy, and well-optimized for its audience.

D

Društvo Ujedinjenih Građanskih Akcija

dugabih.ba

10

Društvo Ujedinjenih Građanskih Akcija (Duga BiH) is a non-profit organization based in Bosnia and Herzegovina dedicated to supporting children, youth, parents, and professionals through educational and psychosocial programs. The organization positions itself as a leading entity in social inclusion and community support, offering training, counseling, and project-based services. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress using modern frameworks and plugins, ensuring good performance and mobile optimization. Security measures such as HTTPS and security headers are properly implemented, although explicit privacy and cookie policies are missing, representing a compliance gap. Overall, the domain registration data aligns well with the organization's claims, supporting the legitimacy of the site.

A

Allgemeine Anthroposophische Gesellschaft

sektion-landwirtschaft.org

47

The Sektion für Landwirtschaft is a non-profit organization affiliated with the Allgemeine Anthroposophische Gesellschaft and based at the Goetheanum in Switzerland. It focuses on promoting biodynamic agriculture through education, research, publications, and events. The website is professionally designed using TYPO3 CMS and integrates modern technologies such as Matomo for analytics and Tiny Slider for UI components. Contact information and social media presence are clearly provided, enhancing trust and accessibility. Privacy and cookie policies are implemented with GDPR compliance, although explicit terms of service and security policies are absent. The WHOIS data is unavailable due to query failure, but the website content and affiliations strongly indicate legitimacy and a mature organizational presence.

J

Jazzclub Sondershausen e.V.

jazzclub-sondershausen.de

55

Jazzclub Sondershausen e.V. is a small non-profit cultural organization based in Germany dedicated to promoting jazz music through live events and concerts. The website serves as a platform to announce upcoming events, showcase photo galleries from past concerts, and provide contact avenues primarily via a contact form. The organization leverages reputable external ticketing platforms to facilitate event ticket sales, enhancing trust and convenience for attendees. The site targets jazz enthusiasts and the local community, positioning itself as a key cultural player in the Sondershausen region. Technically, the website is built on WordPress 6.8.3 with Bootstrap 5 and jQuery, ensuring a modern and responsive design. The site demonstrates good SEO practices with comprehensive meta tags and Open Graph data, supporting social media sharing and discoverability. Mobile optimization is good, and the site loads with moderate performance. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. There are no detected vulnerabilities or malicious scripts. However, the absence of security headers and a vulnerability disclosure policy indicates potential areas for enhancement. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is implemented, which may be a compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic recommendations include implementing cookie consent, adding security headers, publishing a vulnerability disclosure or security.txt file, and providing clearer direct contact information to improve user trust and compliance posture.

Sonneberger Jazzfreunde e.V. is a non-profit cultural organization dedicated to promoting jazz music and small arts in the Thüringisch-Fränkischer region of Germany. The website serves as the official portal for the International Sonneberger Jazztage, a well-established jazz festival entering its 39th year. The organization relies on ticket sales, sponsorships, and partnerships with local businesses and cultural institutions to operate. The website provides detailed event information, partner acknowledgments, and ticket purchasing links, targeting jazz enthusiasts and regional visitors. Technically, the website is built on the Contao CMS platform and employs modern web technologies such as jQuery, Tiny Slider, and Usercentrics for consent management. The site is mobile-optimized and presents a professional design with clear navigation. Hosting is provided by a German hosting provider, consistent with the regional focus of the organization. Performance is moderate with room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS and implements GDPR-compliant consent management. However, no explicit security headers or incident response policies are published, and no vulnerability disclosures or security certifications are evident. The absence of a terms of service page and limited security documentation suggests areas for enhancement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and SEO could further strengthen its posture and user trust.

O

Organisation du Sport Africain Travailliste et Amateur (OSTA)

osta-officiel.org

57

The Organisation du Sport Africain Travailliste et Amateur (OSTA) is a non-profit international sports organization founded in 2001, focused on promoting and coordinating amateur and workers' sports activities across Africa. It holds official recognition from the African Union and other continental sports bodies, positioning itself as a key player in African amateur sports governance. The organization operates from its headquarters in Yaoundé, Cameroon, and engages with multiple national sports organizations through regional liaison offices. The website serves as an informational platform detailing its history, structure, and activities, primarily targeting African sports organizations and amateur athletes. Technically, the website is built on the WordPress platform hosted by Automattic Inc. (WordPress.com), utilizing standard WordPress technologies including Jetpack, jQuery, and Swiper.js. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks advanced security headers such as Content-Security-Policy and X-Frame-Options. No privacy or cookie policies are published, indicating gaps in compliance with data protection regulations. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer contact information. These improvements would strengthen its security posture and regulatory adherence, thereby increasing stakeholder confidence.

W

World Snowboard Federation

worldsnowboardfederation.org

62

The World Snowboard Federation (WSF) is a specialized international non-profit organization dedicated to the development and promotion of snowboarding at all levels, with a strong focus on youth competitive programs, event organization, and education. The website reflects a well-structured digital presence with clear navigation, comprehensive content, and active social media engagement, positioning WSF as a key player in the snowboarding community. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates essential tools such as Google Analytics and Tag Manager for performance and marketing insights. Privacy and cookie compliance are well implemented, including a consent management system, reflecting good adherence to GDPR requirements. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be enhanced. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for non-profits. Overall, the site is professional, trustworthy, and serves its target audience effectively.

I

ICSBF - International Catch’n Serve Ball Sports Federation

catchandserve-ball.com

46

The International Catch’n Serve Ball Sports Federation (ICSBF) operates as a niche non-profit organization dedicated to promoting the sport of Catch'n Serve Ball globally. The website provides comprehensive information about the federation's activities, including event calendars, membership details, and news updates, positioning ICSBF as a specialized sports federation with a clear focus on community engagement and international sports development. The target audience includes sports enthusiasts, athletes, and sports clubs interested in this emerging sport. Technically, the website employs modern web standards with HTML5, CSS, and JavaScript, and integrates Matomo analytics for user tracking, reflecting a moderate level of digital maturity. The site is mobile-optimized and offers good navigation and content relevance. However, some technical improvements are recommended, such as implementing security headers and enhancing accessibility features. From a security perspective, the site benefits from HTTPS encryption and does not expose sensitive data. Nonetheless, the absence of security headers and lack of published security or incident response policies indicate room for improvement. The missing WHOIS data raises concerns about domain legitimacy, although the professional presentation and valid contact information mitigate some trust issues. Overall, the website is functional, professional, and safe for general audiences, but strategic enhancements in security posture, privacy compliance, and domain registration transparency are advised to strengthen trust and compliance.

C

Connect4Climate

connect4climate.org

65

Connect4Climate is a globally recognized partnership platform dedicated to fostering climate action through youth engagement, innovative campaigns, and community storytelling. The website serves as a hub for connecting organizations and individuals to co-create sustainable solutions and amplify climate awareness. The platform targets a diverse audience including youth, creatives, business leaders, and climate advocates worldwide. Technically, the site is built on Drupal 10 with Bootstrap 5, leveraging modern web technologies and analytics tools such as Google Analytics and Adobe DTM, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS and IP anonymization in analytics, though it lacks explicit security headers and formal privacy/cookie policies. The absence of WHOIS data due to privacy protection is common for non-profit entities and does not detract significantly from the site's legitimacy. Overall, Connect4Climate presents a professional, trustworthy, and content-rich platform with room for improvement in privacy compliance and security best practices.

T

The Foundation for Global Sports Development

globalsportsdevelopment.org

61

The Foundation for Global Sports Development is a non-profit organization dedicated to empowering youth worldwide through sports, education, and initiatives promoting fair play and abuse-free environments. The organization operates a professional website built on WordPress with Elementor and various Jet plugins, showcasing programs, films, and press releases. The site demonstrates a mature digital presence with structured data and active social media channels, targeting youth, educators, and sports communities. Technically, the website is well-constructed with modern tools, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms. Contact information is not explicitly provided in the analyzed content, which may impact user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy, security, and contact transparency.

A

AARP

aarp.org

80

AARP is a large, well-established nonprofit organization dedicated to empowering Americans aged 50 and older through membership benefits, advocacy, and information services. The website reflects a mature digital presence with a focus on user engagement, membership acquisition, and resource dissemination. The technical infrastructure leverages modern web technologies including Adobe Experience Manager, Adobe Launch, and multiple analytics and advertising platforms, ensuring a robust and scalable environment. Security posture is strong with HTTPS enforcement, security headers, and consent management via OneTrust, although explicit security policies and incident response details are not publicly available. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.