Non-profit security reports

T

The Marshall Project

themarshallproject.org

64

The Marshall Project is a nonprofit news organization specializing in investigative journalism and reporting on the U.S. criminal justice system. It operates multiple newsletters and local network projects, positioning itself as a trusted source for criminal justice news and analysis. The website demonstrates a mature digital presence with a modern tech stack including JavaScript ES modules, Ruby on Rails backend indications, and CDN hosting via Amazon Cloudfront. Analytics tools like Google Analytics and Parsely are used for user engagement tracking. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security headers and cookie consent mechanisms could be improved. WHOIS data is unavailable due to query failure, but the website's professionalism and nonprofit status support its legitimacy. Overall, the site is well-designed, content-rich, and trustworthy for its audience.

R

ROBIN WOOD e.V.

robinwood.de

47

ROBIN WOOD e.V. is a German non-profit environmental organization dedicated to nature and climate protection through activism, campaigns, and public engagement. The website serves as a platform to inform supporters, promote campaigns, and solicit donations and memberships. It maintains a strong presence on multiple social media platforms and regularly publishes press releases and reports. The organization targets environmentally conscious individuals and activists. Technically, the website is built on Drupal 10 CMS, utilizing modern front-end libraries such as Bootstrap and Swiper.js for responsive design and interactive elements. Hosting is provided by Hostsharing, inferred from the nameservers. The site implements HTTPS with a good SSL configuration and includes a cookie consent banner with an opt-in mechanism, reflecting good privacy compliance practices. Matomo analytics is used for tracking with minimal user tracking. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks published security policies, incident response contacts, and a security.txt file, which are recommended for improved transparency and security readiness. Overall, the website is professional, trustworthy, and well-maintained, with good content quality and user experience.

The BundesBürgerInitiative WaldSchutz (BBIWS) is a German non-profit grassroots organization founded in 2017, dedicated to forest protection and environmental activism. The website serves as an information hub for citizen initiatives and individuals engaged in forest conservation across Germany, providing newsletters, petitions, and advocacy resources. The organization operates on a volunteer basis without membership fees, emphasizing community-driven environmental protection efforts. Technically, the website is built on the Jimdo Creator CMS platform, hosted by Jimdo, and employs standard web technologies including JavaScript and jQuery. It is mobile-optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Contact information is primarily via email, with no phone numbers or physical addresses disclosed. Overall, the website is functional and trustworthy for its non-profit purpose but could improve in security and compliance documentation.

LEAF is a Slovak non-profit organization dedicated to enhancing the quality of life in Slovakia through sustainability, energy efficiency, and social initiatives. The website reflects a professional and consistent brand presence targeting Slovak citizens, policymakers, and stakeholders interested in environmental and social development. The digital infrastructure is built on WordPress with modern technologies and integrates multiple analytics and marketing tools, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforcement and security headers, though the absence of explicit privacy and terms policies and incident response contacts suggests room for improvement in compliance and transparency. Overall, the website is trustworthy and well-positioned within its sector, with recommendations to enhance privacy compliance and incident response readiness.

K

Kadettsamfundet

kadettsamfundet.no

52

Kadettsamfundet is a non-profit community organization dedicated to fostering a positive environment among cadets at the Norwegian Military Academy (Krigsskolen). The organization achieves this by organizing social events, academic activities, excursions, sports, and publishing a school newspaper. The website is professionally designed using WordPress and related plugins, providing clear navigation and relevant content targeted at cadets. Technically, the site uses modern web technologies and is mobile-optimized, though some improvements in accessibility and SEO could be made. Security-wise, the site uses HTTPS but lacks important security headers and privacy compliance documentation, which are areas for improvement. Overall, the domain registration data is unavailable, likely due to privacy protection, but the website content and structure indicate a legitimate and trustworthy organization.

2

2025 Steiner Festjahr

2025-steiner-stuttgart.de

49

2025 Steiner Festjahr is a non-profit cultural event organizer focused on celebrating the legacy of Rudolf Steiner and Anthroposophy through a three-day festival in Stuttgart. The website serves as an informational and promotional platform for the event, targeting individuals interested in sustainable agriculture, holistic education, and cultural heritage. Technically, the site is built on WordPress with modern plugins for SEO, privacy compliance, and analytics, hosted by a reputable provider. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and well-aligned with its mission.

E

Erfurter Herbstlese e.V.

herbstlese.de

56

Erfurter Herbstlese e.V. is a well-established non-profit cultural organization based in Erfurt, Germany, specializing in literary festivals, cultural events, and venue rental at the historic Kultur: Haus Dacheröden. The organization targets literature enthusiasts, families, and the local community with a diverse program of readings, concerts, exhibitions, and educational activities. The website reflects a mature digital presence with comprehensive event information, ticketing integration, and active community engagement through newsletters and social media. Technically, the site employs modern frontend technologies such as Alpine.js and Swiper.js, is mobile-optimized, and uses Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. The domain registration data is consistent and supports the legitimacy of the organization. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Thüringer Literaturrat e.V. is a non-profit association dedicated to the promotion and mediation of literature in the German state of Thüringen. The organization serves a regional audience including authors, literary societies, cultural institutions, and the general public interested in literature. Their key services include maintaining a literary event calendar, an author lexicon, an audio library, and organizing literary projects and exhibitions. The website reflects a well-maintained digital presence with clear navigation and relevant content tailored to their audience. Technically, the website is built on WordPress 6.8.2, utilizing popular plugins such as WPBakery Page Builder, Events Manager, and Contact Form 7. The site is hosted on infrastructure associated with domaincontrol.com, likely GoDaddy, and employs HTTPS with a valid SSL certificate ensuring secure communications. The site is mobile optimized and shows good performance and SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS and a cookie consent mechanism, indicating awareness of privacy regulations such as GDPR. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. No security headers were detected in the HTML content, suggesting room for improvement in hardening the site against common web threats. Overall, the website is trustworthy and professional, with no signs of malicious content or blocking by security services. The organization demonstrates good privacy compliance and provides clear contact information. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure policy to improve transparency and security posture.

E

Ehrenamt der Evangelischen Kirche in Mitteldeutschland (EKM)

ehrenamt-ekm.de

46

The Ehrenamt der Evangelischen Kirche in Mitteldeutschland (EKM) website serves as a comprehensive platform to support and engage volunteers within the Evangelical Church in Central Germany. It provides practical resources, news, and contact information to facilitate volunteer activities across various church-related fields. The site targets church members and community volunteers, positioning itself as a trusted regional non-profit resource with a significant volunteer base. Technically, the website employs a modern and common technology stack including jQuery, Bootstrap, and Slick Carousel, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and some security headers present, though improvements are recommended to enhance protection. Privacy compliance is good with a GDPR-compliant privacy policy, but lacks a cookie consent mechanism despite using analytics tracking. Overall, the site is professional, trustworthy, and well-aligned with its mission, with minor technical and compliance enhancements suggested.

E

Evangelischer Kirchenkreis Bad Salzungen Dermbach

dein-tauftag.de

44

Dein-Tauftag.de is a small, non-profit web platform operated under the Evangelischer Kirchenkreis Bad Salzungen Dermbach, affiliated with the Evangelische Kirche in Mitteldeutschland (EKM). The website provides a service to remind users of their baptism day and offers informational content and community engagement tools targeted at parents, godparents, and baptized individuals. It holds a niche position within the religious community in Germany, focusing on spiritual and family-oriented content. Technically, the website employs a modern and common technology stack including Bootstrap, jQuery, and Piwik/Matomo for analytics. It is hosted on Eastlink servers, uses HTTPS with good SSL configuration, and is mobile-optimized with a clear navigation structure. However, some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. There is no evidence of security policy publication or incident response contacts, and no cookie consent mechanism was detected, which could be improved for GDPR compliance. The WHOIS data is consistent with the website's organizational claims, supporting legitimacy. Overall, Dein-Tauftag.de is a trustworthy, well-maintained religious community website with good content quality and technical implementation. Strategic improvements in privacy compliance and security transparency would enhance its posture and user trust.

A

Anthropoi Bundesverband und Anthropoi Selbsthilfe

anthropoi.de

38

Anthropoi is a German non-profit organization focused on advocacy and support for people with assistance needs, helping them exercise their rights and participate actively in society. The website content is primarily in German and targets individuals requiring assistance and their supporters. The organization operates in a niche non-profit sector with a focus on disability rights and self-help initiatives. The website uses modern JavaScript technologies such as Web Components and SystemJS, and includes analytics tracking via eTracker. However, the site lacks visible privacy, cookie, and terms of service policies, and no contact information or forms are present in the provided HTML content. Security headers and SSL/TLS configuration details are not evident from the data provided, indicating room for improvement in security posture. Overall, the website is accessible without WAF or blocking mechanisms, but the technical and compliance maturity is basic.

I

International Fair Play Committee

fairplayinternational.org

47

The International Fair Play Committee is a recognized non-profit organization dedicated to promoting fair play, sportsmanship, and ethical behavior in sports globally. Their website serves as a platform to showcase their awards, events, and educational initiatives targeting sports organizations, athletes, and youth. The organization maintains a credible market position supported by partnerships with reputable entities such as the IOC and UNESCO. Technically, the website is built on Joomla CMS and utilizes legacy JavaScript libraries including jQuery 1.7.2, which introduces security risks. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. Analytics are implemented via Google Analytics and Facebook SDK, indicating moderate user tracking. From a security perspective, HTTPS is enabled but lacks advanced security headers and uses outdated libraries, which could expose the site to vulnerabilities. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism. WHOIS data is unavailable, reducing domain registration transparency but the website content and social presence support legitimacy. Overall, the site is professional and trustworthy but would benefit from technical and security updates to enhance protection and compliance.

I

International Workers and Amateurs in Sports Confederation

csit.sport

49

The International Workers and Amateurs in Sports Confederation (CSIT) is a well-established non-profit organization founded in 1913, dedicated to promoting amateur and workers' sports globally. The website reflects a mature digital presence with comprehensive content about their events, social missions, and partnerships with recognized international bodies such as the IOC and SportAccord. Their business model focuses on organizing multi-sport events and fostering social values like sustainability, human rights, and fair play. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, including a robust cookie consent mechanism powered by Clickskeks. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. While no CMS or hosting provider is explicitly identified, the performance is moderate with good responsiveness. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. The cookie consent banner and privacy policy indicate good privacy compliance, although formal security policies and vulnerability disclosure mechanisms are absent. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic recommendations include publishing a dedicated security policy, adding a security.txt file, and enhancing HTTP security headers to further strengthen security posture.

S

Special Olympics

specialolympics.org

63

Special Olympics is a globally recognized non-profit organization dedicated to providing year-round sports training and athletic competitions for children and adults with intellectual disabilities. The organization focuses on inclusion, empowerment, and community engagement through Olympic-type sports. Their website reflects a professional and consistent brand image, targeting athletes, supporters, donors, and volunteers worldwide. The business model is centered on charitable donations, community programs, and advocacy efforts to promote inclusion and awareness.

Č

Česká unie kolektivních a individuálních sportů z.s.

cukis.cz

42

ČUKIS (Česká unie kolektivních a individuálních sportů z.s.) is a Czech non-profit sports union established in 2016, supporting a variety of collective and individual sports with over 40,000 athletes across 16 member organizations. The website serves as an informational portal providing news, member lists, and contact details, targeting sports organizations and athletes within the Czech Republic. Technically, the site is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery and YouTube embeds. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and functional but could improve in compliance and security transparency.

G

Greenpeace Schweiz

greenpeace.ch

67

Greenpeace Schweiz is a well-established non-profit environmental organization dedicated to climate change mitigation and sustainable consumption advocacy. The website serves as a platform for activism, education, and fundraising, targeting a broad audience interested in environmental issues. It features multiple campaigns, petitions, and volunteer opportunities, reflecting a mature and professional digital presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and monitoring tools such as Google Tag Manager, Hotjar, and Sentry, indicating a commitment to performance and user experience. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance, particularly regarding cookie consent and explicit security policies. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high trustworthiness and legitimacy.

Save Polesia is a focused environmental advocacy campaign dedicated to protecting Europe's largest wetland wilderness from the ecological and social threats posed by the proposed E40 waterway construction. The campaign leverages petitions, expert testimonials, and detailed informational content to raise awareness and influence policy. Technically, the website is built on WordPress using modern themes and plugins, with good SEO and mobile optimization, though some security enhancements like DNSSEC and security headers could be improved. The security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced headers and DNS security. Privacy compliance is strong with clear cookie consent and a privacy policy. Overall, the website is trustworthy, professional, and serves its non-profit advocacy purpose effectively.

W

Waldreport

waldreport.de

57

Waldreport is a German non-profit environmental initiative dedicated to protecting forests by raising awareness of forest threats, networking nature enthusiasts, and collecting data on forest damage. The website is well-structured, professionally designed, and targets environmentally conscious individuals and organizations in Germany. It leverages partnerships with reputable environmental groups such as Greenpeace and Robin Wood to enhance its credibility and outreach. Technically, the site is built on Drupal 10 with Bootstrap 5.2 and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and accessible, with a cookie consent mechanism compliant with GDPR. Security posture is moderate with room for improvement in security headers and incident response transparency. No critical vulnerabilities or suspicious content were detected, and the domain registration data aligns with the website's purpose, indicating legitimacy.

The website zionministry.org currently displays a Cloudflare 525 SSL handshake failed error page, indicating that the origin server's SSL configuration is incompatible or misconfigured, preventing secure connections. Due to this, the website content is inaccessible, and no business or contact information is available for analysis. The domain is registered since 2015 via GoDaddy and uses Cloudflare DNS services, suggesting a stable registration history. However, the lack of DNSSEC and SSL issues reduce the overall security posture. No privacy, cookie, or terms of service policies are present, and no contact details or forms are found on the page. The site appears to represent a small non-profit organization based on the domain name and WHOIS data, but this cannot be confirmed due to the lack of accessible content.

Č

Česká asociace cheerleaders

cach.cz

49

Česká asociace cheerleaders (ČACH) is a Czech non-profit organization dedicated to the promotion and development of cheerleading in the Czech Republic. The association organizes competitions, training camps, workshops, and certifies coaches and judges. It also manages national team representation and membership services. The website reflects a well-structured organization with a clear focus on cheerleading sports and community engagement. The association maintains partnerships with various sports and commercial entities and has an active presence on multiple social media platforms. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with a CMS likely based on Perch. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

A

Anthroposophische Gesellschaft in Deutschland

anthroposophie.de

53

The website www.anthroposophie.de represents the Anthroposophische Gesellschaft in Deutschland, a non-profit organization dedicated to promoting and educating about Anthroposophy, a spiritual and philosophical movement. The site serves as a central hub for information, events, and community engagement related to Anthroposophy in Germany. It targets a broad audience including interested individuals, critics, and practitioners. The business model is educational and community-focused, with a medium-sized organizational footprint in the non-profit sector.

L

Lese-Zeichen e.V.

lesezeichen-ev.de

40

Lese-Zeichen e.V. is a small non-profit cultural association based in Germany, dedicated to promoting literature and organizing literary events, readings, and podcasts. The website serves as a hub for event information, news, and cultural content targeting literature enthusiasts primarily in the Thuringia region. The organization maintains an active presence with detailed event calendars and multimedia content, including podcasts and videos. Technically, the website uses a modern Bootstrap framework with common JavaScript libraries and custom scripts, providing a responsive and user-friendly experience. However, some technical aspects such as mixed content loading and lack of security headers indicate room for improvement in security practices. The security posture is moderate, with client-side password hashing implemented but lacking comprehensive protections like CSRF tokens and secure script delivery. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a significant gap given GDPR requirements. Overall, the website is functional and professional but would benefit from enhanced security and privacy measures to improve trust and compliance.

The Landesarbeitsgemeinschaft Jazz in Thüringen e. V. is a regional non-profit organization dedicated to promoting jazz music within the Thuringia region of Germany. The website serves as a cultural hub, providing information and networking opportunities for jazz enthusiasts and local jazz clubs. It maintains partnerships with several regional jazz clubs, as evidenced by multiple external links. The site is built on the Contao CMS platform and utilizes common JavaScript libraries such as jQuery and Colorbox, indicating a moderate level of technical maturity. The website is accessible, mobile-optimized, and presents a consistent branding aligned with its cultural mission. However, it lacks advanced privacy and security features such as cookie consent mechanisms and security headers, which are important for compliance and protection.

G

Gemeindedienst der EKM

gemeindedienst-ekm.de

46

The Gemeindedienst der EKM is a non-profit church service organization affiliated with the Evangelische Kirche in Mitteldeutschland (EKM). It provides a broad range of services including consulting, education, event organization, fundraising, and material provision primarily targeted at church communities and church districts. The website reflects a well-structured and professional presence with clear contact channels and relevant content for its audience. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and slick carousel, hosted on Eastlink infrastructure, and is mobile optimized with moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some security headers and explicit incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and aligns well with its church affiliation.

N

Nadace Pro půdu

nadacepropudu.cz

42

Nadace Pro půdu is a Czech non-profit foundation established in 2016, dedicated to ecological and sustainable agriculture by securing land for eco-farmers who practice environmentally friendly farming. The foundation operates by acquiring land and leasing it to small ecological farmers under long-term agreements, promoting soil health and local community benefits. The website is professionally designed using WordPress and the Divi theme, featuring rich content in Czech and clear navigation. It integrates common web technologies including jQuery, MediaElement.js, Google Analytics, and Facebook Pixel for tracking. Security posture is moderate with HTTPS enabled but lacks explicit security headers and privacy/cookie policies, indicating room for compliance improvement. Contact information is clearly provided, enhancing business credibility. The domain registration data aligns well with the organization's profile, supporting legitimacy. Overall, the website is a good representation of a small non-profit with a clear mission and professional online presence.

A

Anthroposophische Gesellschaft in Deutschland e.V.

anthroposophische-gesellschaft.org

45

The Anthroposophische Gesellschaft in Deutschland e.V. is a well-established non-profit organization dedicated to promoting the spiritual and cultural movement of Anthroposophy founded by Rudolf Steiner. The website serves as a comprehensive platform for members and interested parties, offering news, events, publications, and educational resources. It holds a strong market position within the spiritual and cultural sector in Germany, targeting individuals and institutions interested in Anthroposophy and related reform movements. The organization operates with a medium-sized footprint and a clear mission to foster cultural and spiritual development.

C

CHARLOTTE | Stiftung

charlotte-stiftung.org

49

CHARLOTTE | Stiftung is a small non-profit foundation based in Berlin, Germany, established in 2019 by the Charlottenburger Baugenossenschaft. The foundation focuses on providing financial support to residents in need, particularly for health-related home modifications and support for disabled youth and elderly care. The website is built on TYPO3 CMS and uses modern web technologies including jQuery and Google Maps API. It offers donation options via bank transfer and PayPal, with clear contact information and legal disclosures. The site is well-structured, mobile-optimized, and provides relevant content for its target audience. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is good with a privacy policy present, though no cookie consent mechanism is detected. Overall, the website demonstrates a trustworthy and professional online presence for a local charitable foundation.

G

Greenpeace e. V.

greenpeace.de

70

Greenpeace e. V. is a well-established non-profit environmental organization based in Germany, focused on climate protection, biodiversity, and peace advocacy. The website serves as a comprehensive platform for public education, activism, and fundraising, targeting environmentally conscious individuals and supporters. It maintains a strong market position as a leading environmental NGO with a large audience and consistent branding. Technically, the website is built on Drupal 10, leveraging modern web technologies and third-party tools such as Usercentrics for consent management and Google Tag Manager for analytics. Hosting is provided by Colt Technology Services, indicating a professional infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is partial due to the absence of a clearly linked privacy policy and terms of service. Overall, Greenpeace.de presents a trustworthy, professional, and content-rich website with minor gaps in privacy and security transparency. Strategic improvements in these areas would enhance compliance and user trust.

B

Bergwaldprojekt e.V.

bergwaldprojekt.de

57

Bergwaldprojekt e.V. is a well-established German non-profit organization dedicated to environmental conservation, specifically focusing on forest, moor, and open land ecosystem protection and restoration. With over 35 years of experience, it mobilizes thousands of volunteers annually for ecological projects and environmental education. The organization also engages corporate partners and donors to support its mission. The website reflects a mature digital presence built on Drupal 11, featuring privacy-conscious analytics and comprehensive cookie consent mechanisms. Contact information and social media channels are clearly presented, enhancing trust and engagement. Security posture is solid with HTTPS and cookie management, though some security headers could be improved. Overall, the site is professional, accessible, and well-optimized for mobile and SEO.

Č

Česká rada dětí a mládeže

darujemekrouzky.cz

41

Darujemekrouzky.cz is a Czech non-profit project organized by the Česká rada dětí a mládeže that provides financial support to families in difficult financial situations to pay for children's extracurricular activities. The project operates a voucher system targeting children aged 3 to 18 years, including support for Ukrainian refugee families residing in the Czech Republic. Supported by multiple foundations and institutions, the project enjoys strong trust signals including the patronage of the Czech president's wife. Technically, the website is built on WordPress with the Avada theme, uses modern web technologies, and integrates Google Tag Manager for analytics. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The domain WHOIS data is unavailable, limiting domain trust verification, but the website content and partner references strongly indicate legitimacy.

I

ifa – Institut für Auslandsbeziehungen

ifa.de

56

ifa – Institut für Auslandsbeziehungen is a German non-profit cultural institution dedicated to promoting international cultural exchange, arts, research, and civil society engagement. The organization offers programs such as the CrossCulture fellowships, art exhibitions, research publications, and digital cultural projects, positioning itself as a key player in international cultural relations. The website reflects a professional and consistent brand image, targeting professionals and stakeholders in the cultural and research sectors.

W

Wald Allianz

wald-allianz.de

60

Wald Allianz is a small non-profit environmental initiative based in Germany, focused on promoting sustainable forest management and conservation. The website provides educational resources, information about forest ecosystem services, and encourages engagement from forest owners, professionals, and consumers. The initiative appears to be relatively new, founded around 2020, with a clear mission to foster a future for forests through collaboration and awareness. Technically, the website is built on WordPress using the Astra theme and several plugins including Yoast SEO and Borlabs Cookie for privacy compliance. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some compliance pages such as privacy policy and terms of service. Security posture is generally good with HTTPS and cookie consent, but could be improved by adding security headers and publishing security policies. Overall, the website is professional and trustworthy, though it would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

B

Behinderten- und Rehabilitations-Sportverband Berlin

bsberlin.de

47

The Behinderten- und Rehabilitations-Sportverband Berlin (BS Berlin) is a non-profit sports association dedicated to promoting inclusive sports and rehabilitation sports in Berlin. The website serves as a platform to inform about events, campaigns, and educational offerings related to inclusive sports, targeting people with disabilities, sports clubs, and partners in politics and associations. The organization holds a strong regional position with established programs and partnerships. Technically, the website is built on TYPO3 CMS with Bootstrap 4, uses Matomo for analytics, and implements accessibility and privacy best practices including cookie consent mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve transparency by adding terms of service and security-related policies.

B

Berliner Stadtmission

berliner-stadtmission.de

58

Berliner Stadtmission is a well-established non-profit organization founded in 1877, providing extensive social services and community support across Berlin with over 90 facilities. Their website is professionally designed using TYPO3 CMS, featuring modern technologies such as Leaflet.js for maps and Matomo for analytics, reflecting a mature digital infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and incident response details are absent. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

A

Arved Fuchs Expeditionen

arved-fuchs.de

56

Arved Fuchs Expeditionen is a German-based non-profit organization focused on environmental and climate expeditions, primarily using the sailing ship Dagmar Aaen since 1988. The organization engages in scientific expeditions, youth education, lectures, and publishes related content such as podcasts and books. Their market position is niche but well-established in the environmental expedition and education sector. The website is built on Joomla CMS with modern frontend frameworks, providing a good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and obfuscated emails, though some security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Contact information is transparent and professional, enhancing business credibility. Overall, the website is trustworthy and professionally maintained.

D

Deutsche Lutherweg-Gesellschaft e. V.

lutherweg.de

10

The Deutsche Lutherweg-Gesellschaft e. V. operates the Lutherweg website, a non-profit cultural and spiritual tourism project focused on the Reformation and Martin Luther's legacy in Germany. The site provides detailed route information, pilgrimage materials, and community engagement through newsletters. Technically, the website is built on WordPress with modern plugins and themes, hosted professionally with webgo.de nameservers. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS, cookie consent, and form protections, though lacking explicit security policies or incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained, serving a niche audience interested in religious and cultural heritage tourism.

N

Netzwerk Kleinkunst der Evangelischen Kirche in Mitteldeutschland

kleinkunst-ekm.de

45

The website www.kleinkunst-ekm.de serves as a cultural networking platform for the Evangelische Kirche in Mitteldeutschland, connecting artists and church communities across the region. It offers a curated portal for artists and venues, supporting cultural events such as Kirchenkino and providing resources like documents and workshops. The site is positioned as a small, non-profit entity with a clear regional focus and strong church affiliation. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and popular carousel and slider libraries. Hosting is provided by Eastlink, a German hosting provider, with HTTPS enabled ensuring secure communication. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Analytics are handled via Matomo, indicating some privacy consideration. From a security perspective, the site uses HTTPS but lacks visible security headers and published security or incident response policies. No cookie consent mechanism is present, which is a GDPR compliance gap. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with a small non-profit organization, with no suspicious patterns. Overall, the website is professional, trustworthy, and serves its community well, but could improve privacy compliance and security posture by adding cookie consent, security headers, and formal policies.

E

ezra. Opferberatung Thüringen

opferhilfe-thueringen.de

57

ezra. Opferberatung Thüringen is a specialized non-profit organization providing counseling and support services to victims of right-wing, racist, and antisemitic violence in the German state of Thüringen. The organization targets affected individuals, their relatives, and witnesses, offering victim assistance, incident documentation, and a victim aid fund. The website is professionally designed, multilingual, and well-structured, reflecting a clear mission and strong regional presence. It is supported by official funding bodies and partners, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress, hosted by Raidboxes, and uses common plugins and libraries such as Contact Form 7 and Font Awesome. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the site is trustworthy and serves an essential social function with a strong regional focus.

E

Evangelische Kirche in Mitteldeutschland (EKM)

kirchenlandkarte.de

10

The website www.kirchenlandkarte.de is an official online project of the Evangelische Kirche in Mitteldeutschland (EKM), providing a comprehensive interactive map and detailed information about over 4000 churches, monasteries, and chapels in Central Germany. It serves as a cultural and religious tourism portal targeting visitors interested in church architecture, history, and spiritual sites. The platform offers detailed descriptions, opening hours, and contact information, enhancing visitor engagement and community outreach. Technically, the site employs a modern tech stack including Bootstrap, jQuery, Leaflet for mapping, and Matomo for analytics, hosted on Eastlink servers. The site is mobile-optimized with good SEO practices and a professional design, ensuring a positive user experience. The content is rich, well-structured, and consistent with the church's branding. From a security perspective, the site uses HTTPS and implements secure form handling with CSRF tokens. However, it lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is strong, with a comprehensive privacy policy aligned with GDPR and DSG-EKD standards, though no explicit cookie consent mechanism is present. Overall, the website is trustworthy, professionally maintained, and fulfills its mission effectively. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and user trust.

F

Förderverein Moritzkirche Naumburg (Saale) e.V.

moritzkirche-naumburg.de

49

The website represents the Förderverein Moritzkirche Naumburg (Saale) e.V., a non-profit organization dedicated to preserving and promoting the cultural and religious heritage of the St. Moritz church in Naumburg, Germany. It offers information about church services, exhibitions, concerts, and historical lectures, targeting local visitors and cultural enthusiasts. The site is well-branded and provides clear contact and donation information, reflecting a trustworthy community institution. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and slick carousel, delivering a good user experience with mobile optimization and clear navigation. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is used, but no security headers or vulnerability disclosures are present, indicating room for improvement in security posture. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy and security measures.

The website www.evangelischejugend.de represents the official online presence of the Kinder- und Jugendpfarramt der Evangelischen Kirche in Mitteldeutschland (EKM), focusing on youth work within the church community. It provides information, resources, and event announcements targeted at children, youth, and church workers engaged in evangelical youth activities. The organization operates as a non-profit entity with a regional focus in Germany. The site is well-branded, consistent, and maintains a professional tone suitable for its audience. Technically, the website employs modern front-end technologies including Bootstrap 5 and FontAwesome, with additional JavaScript libraries for layout and media handling. Hosting is provided by Eastlink, as indicated by the nameservers. The site is mobile-optimized and performs moderately well, though some improvements in accessibility and SEO could be made. Analytics are handled via Piwik, reflecting moderate user tracking with some privacy considerations. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data aligns with the organizational identity, supporting legitimacy. Overall, the website is a credible, safe, and functional platform for its intended audience, with room for improvement in privacy compliance and security best practices.

D

DJK Landesverband NRW e.V.

djk-vernetzt.de

46

DJK Landesverband NRW e.V. is a non-profit sports association based in Germany, focused on promoting values in sports through seminars, community projects, and educational initiatives. The organization targets sports clubs, childcare facilities, and sports enthusiasts primarily in the North Rhine-Westphalia region. Their offerings include projects like #WERTEkeeper, KiTa aktiv, and vollWERTsport, emphasizing respect, fair play, and human dignity in sports. The website reflects a consistent and professional brand image with clear navigation and relevant content for its audience. Technically, the website is built on TYPO3 CMS with a Bootstrap package, incorporating modern frontend technologies such as Slick Slider for interactive content. The site is mobile-optimized, accessible, and performs moderately well. It employs HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, no advanced security headers or incident response information are published. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent but lacks explicit security policies and vulnerability disclosure mechanisms. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, supporting the legitimacy of the organization. Overall, the website presents a low-risk profile with a solid business credibility and privacy compliance posture. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen trust and compliance.

G

Gemeinde St. Hedwig Buckow-Müncheberg

katholisch-muencheberg.de

46

The website www.katholisch-muencheberg.de represents the Catholic parish community of St. Hedwig Buckow-Müncheberg, part of the Archdiocese of Berlin. It serves as an informational and community hub for local parishioners, offering details about religious services, community events, and social support activities. The site is clearly targeted at local residents and visitors interested in Catholic community life, operating as a non-profit religious organization. The content is well-structured, relevant, and professionally presented with consistent branding and trust signals such as official contact details and GDPR-compliant cookie consent mechanisms. Technically, the website is built on TYPO3 CMS, utilizing legacy jQuery libraries and modern privacy-respecting analytics via Matomo. The site is mobile-optimized with basic accessibility features and moderate performance. While HTTPS is enforced, the site lacks some advanced security headers and explicit security policies, which could be improved. The cookie consent banner is comprehensive and allows granular user control, reflecting good privacy compliance. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. However, updating legacy JavaScript libraries and implementing security headers would enhance protection. The WHOIS data confirms domain legitimacy and consistency with the website's organizational claims. No signs of malicious activity or suspicious registrations were found. Overall, the website is a trustworthy, well-maintained community portal with good privacy and security practices, suitable for its non-profit religious mission. Strategic improvements in security headers and modernization of technical components would further strengthen its posture.

E

Evangelische Kirche von Kurhessen-Waldeck

ekkw.de

56

The Evangelische Kirche von Kurhessen-Waldeck (EKKW) is a large, established religious organization in Germany, serving as one of the 20 member churches of the Evangelische Kirche in Deutschland. The website provides comprehensive information about the church's structure, activities, and community services, targeting a general audience interested in religious and community matters. The site is built on the TYPO3 CMS platform, indicating a mature and professional digital infrastructure. Social media integration with Facebook, Instagram, YouTube, and an RSS feed enhances outreach and engagement. From a technical perspective, the website demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is moderate with HTTPS likely enabled but lacking explicit security headers and formal security policies. Privacy compliance is minimal, with no explicit privacy or cookie policies detected in the provided content. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

L

Lebensfarben | Hilfen für Kinder und Jugendliche e.V.

lebensfarben-oberberg.de

45

Lebensfarben | Hilfen für Kinder und Jugendliche e.V. is a German non-profit organization dedicated to supporting children and youth whose parents suffer from psychological or addiction-related illnesses. The organization provides free counseling, accompaniment, and support services, including individual advice, parent assistance, and volunteer mentorship programs. Their market position is regional within the Oberbergischer Kreis area, focusing on vulnerable youth and families. The website reflects a professional and consistent brand with clear navigation and relevant content. Technically, the site uses standard web technologies such as jQuery and fancyBox, hosted under domaincontrol.com DNS services. While the site is functional and moderately optimized, it lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. Security posture is moderate with no visible vulnerabilities but could be improved with better HTTPS enforcement and security policies. Overall, the site is trustworthy and serves its non-profit mission effectively.

E

Evangelische Kirchengemeinde Ingersheim

kirchengemeinde-ingersheim.de

56

Evangelische Kirchengemeinde Ingersheim operates as a small non-profit Protestant church community in Germany, affiliated with the Evangelische Landeskirche in Württemberg. The website serves as an informational and community engagement platform, offering details on church services, events, youth and adult education, and pastoral care. It targets local community members and churchgoers, providing a trusted source for religious and community activities. Technically, the site is built on TYPO3 CMS, employs Matomo analytics configured for privacy, and includes accessibility features enhancing user experience. The site is mobile-optimized and well-structured, reflecting good digital maturity for a small non-profit entity. Security posture is solid with HTTPS enforced and privacy compliance evident through consent management, though improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the church's mission effectively.

Kongregation der Hedwigschwestern e. V. is a small non-profit religious organization based in Berlin, Germany, providing community and spiritual services. The website is built on WordPress using the Twenty Fourteen theme and incorporates modern cookie consent mechanisms to comply with GDPR. The technical infrastructure is standard for small organizations, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, although no explicit security policy or incident response information is published. The website maintains good privacy compliance with a comprehensive privacy policy and cookie consent banner. Overall, the site is trustworthy and professional, targeting a general audience interested in religious and community services.

P

§25/11: Der neue Paragraph gegen häusliche Gewalt

paragraph2511.de

9

The website paragraph2511.de is a German-language advocacy platform focused on promoting a new legal paragraph (§25/11) aimed at combating domestic violence within shared housing communities. The site targets German-speaking residents and stakeholders interested in housing safety and social respect. It leverages WordPress CMS with Elementor and Yoast SEO plugins, indicating a moderate level of digital maturity and SEO awareness. The presence of partner logos from established housing companies like Vonovia and Charlottenburger Baugenossenschaft suggests credible partnerships and community engagement. Technically, the site is hosted on Schlundtech servers, a reputable German hosting provider, and employs HTTPS with Google reCAPTCHA v3 for form security. However, the absence of explicit privacy and cookie policies and missing security headers indicate areas for compliance and security improvement. Overall, the site presents a professional and focused advocacy platform with moderate technical and security posture.

K

Katholische Studierendengemeinde Greifswald

ksg-greifswald.de

55

Katholische Studierendengemeinde Greifswald (KSG Greifswald) is a small non-profit religious community serving students in Greifswald, Germany. The organization offers weekly religious services, communal meals, and events focused on spiritual, social, and academic topics. The website is built on WordPress using the Enfold theme and integrates event management via The Events Calendar plugin. The technical infrastructure is modern and adequate for the organization's needs, hosted on RZone servers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit incident response or security policies are published. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-targeted to its audience.

K

Katholische Studierendengemeinde Edith Stein

ksg-berlin.de

44

KSG Edith Stein Berlin is a Catholic student community organization based in Berlin, Germany, focused on providing spiritual guidance, social events, and advisory services to students. The website serves as a hub for community engagement, event announcements, and contact information, targeting students and university communities in Berlin. The organization operates as a non-profit entity with a clear mission to support student life through faith-based and social activities. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as jQuery and Google Fonts. It is hosted on NSHost2 name servers and employs HTTPS for secure communication. The site demonstrates good digital maturity with mobile optimization, clear navigation, and integration of social media channels. Security posture is solid with HTTPS and secure form handling, though it lacks advanced security headers and explicit security policies. Privacy compliance is evident with a privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, serving its community effectively.