Non-profit security reports

S

Stiftung Freie Gemeinschaftsbank

stiftungfgb.ch

53

Stiftung Freie Gemeinschaftsbank is a Swiss non-profit foundation dedicated to supporting innovative projects in society, environment, and culture. With over 20 years of experience, it operates both as a Förderstiftung providing financial support and as a Dachstiftung managing numerous sub-foundations and project funds. The foundation is financed primarily through donations and offers transparent contact and donation information on its website. Technically, the website employs modern JavaScript technologies, privacy-respecting analytics (Matomo), and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks explicit security policies and headers. Overall, the site is professional, trustworthy, and well-optimized for mobile users.

S

Software AG – Stiftung

sagst.de

49

The Software AG – Stiftung is a large, well-established non-profit foundation based in Germany, focused on funding social, educational, and ecological projects primarily in Germany and Europe. The website is professionally designed using TYPO3 CMS, with a clear structure, multilingual support, and strong privacy compliance including GDPR-aligned cookie consent via Klaro and Matomo analytics. The foundation's significant capital and project portfolio position it as a key player in the German non-profit sector. Technically, the site uses mature technologies and demonstrates good mobile optimization and accessibility, though security headers and explicit security policies are not publicly visible. No blocking or WAF mechanisms interfere with content access, and no suspicious or malicious content is detected.

N

Netzwerk Biodynamische Bildung gGmbH

netzwerk-biodynamische-bildung.de

41

Netzwerk Biodynamische Bildung gGmbH is a German non-profit organization that unites Demeter training initiatives to promote biodynamic agricultural education. The website serves as an information hub and fundraising platform, operating the Demeter Ausbildungsfonds to support new organic farmers. The organization targets aspiring biolandwirte, educational institutions, and supporters of sustainable agriculture. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Borlabs Cookie, hosted on kasserver.com. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and aligned with its non-profit mission.

A

Asociace místních potravinových iniciativ, o.p.s.

asociaceampi.cz

44

Asociace místních potravinových iniciativ, o.p.s. is a Czech non-profit organization dedicated to fostering a close relationship between people and the land that sustains them. The organization focuses on educational programs for schools and communities about food, agriculture, and sustainable land use. It also supports community-supported agriculture and local food systems, positioning itself as a niche leader in ecological and community food initiatives within the Czech Republic. The website is professionally designed, content-rich, and targets educators, schools, and local communities. Technically, the site is built on WordPress with common plugins and tracking tools such as Google Analytics and Facebook Pixel, showing moderate digital maturity. Security posture is good with HTTPS enforced, but lacks some security headers and visible privacy compliance documentation. Overall, the site is safe, trustworthy, and well-maintained, though improvements in privacy policy visibility and security headers are recommended.

N

Naděje

kurzy-nadeje.cz

43

Naděje is a Czech non-profit organization specializing in accredited educational courses for social service providers, social workers, and caregivers. Established in 1996, the organization offers a range of training programs accredited by the Ministry of Labour and Social Affairs (MPSV). Their website presents a professional and well-structured platform showcasing their courses, testimonials, and newsletter subscription, targeting professionals in the social services sector. Technically, the site uses a custom CMS built on the Yii PHP framework, enhanced with jQuery and modern web fonts, delivering a moderate performance and good mobile responsiveness. Security-wise, the site uses HTTPS and secure form submissions but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business profile, supporting the site's legitimacy.

Ekumenická rada církví is a non-profit religious organization representing a community of Christian churches in the Czech Republic. The website serves as an informational portal providing news, event announcements, and resources related to ecumenical activities. It targets a general audience interested in religious and community matters within the Czech Republic. The organization appears well-established with a domain age dating back to 2000, reflecting a stable presence in its sector. Technically, the website is built on the Yii PHP framework with jQuery and Nivo Slider for interactive elements. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. The absence of advanced analytics or tracking tools indicates a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure mechanisms are evident. The newsletter form collects emails but does not show explicit consent mechanisms. Overall, the security posture is moderate but requires enhancements to meet modern standards. The overall risk is low given the non-commercial nature and content safety of the site. Strategic recommendations include implementing privacy and cookie policies, adding security headers, improving mobile and accessibility features, and establishing clear incident response contacts to enhance trust and compliance.

Č

Česká evangelikální aliance

ea.cz

52

Česká evangelikální aliance is a Czech non-profit evangelical alliance established in 2000, focused on fostering cooperation, prayer, and mission-oriented activities among evangelical churches and organizations in the Czech Republic. The organization provides networking, support for church planting and revitalization, and represents evangelical perspectives in public discourse. Their website is professionally designed using WordPress with modern plugins and themes, offering clear navigation and multilingual support. Contact information and GDPR compliance documentation are provided, though cookie consent mechanisms are absent. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks some security headers and vulnerability disclosure mechanisms. Overall, the website is trustworthy and serves its community effectively.

E

EAPN ČR, z. s.

eapncr.org

43

EAPN ČR, z.s. is a Czech non-profit organization dedicated to advocating for the rights of people dependent on social services and combating poverty and social exclusion. It is part of the European Anti Poverty Network, positioning itself as a national member focused on social advocacy and public awareness. The website provides information about their activities, news, projects, and partner organizations, targeting stakeholders involved in social issues in the Czech Republic and Europe. Technically, the website is built on Drupal 7 with legacy jQuery and TinyMCE, indicating a somewhat dated but functional infrastructure. The site is accessible, with basic mobile optimization and SEO features, but lacks modern performance and accessibility enhancements. Security posture is moderate; HTTPS is used but no security headers were detected, and outdated libraries pose potential risks. Privacy and cookie policies are absent, which is a compliance gap. Contact information is clearly provided, enhancing business credibility. WHOIS data is incomplete, limiting domain trust assessment, but the website content and external links suggest legitimacy. Overall, the site is functional and serves its advocacy purpose but would benefit from technical and compliance improvements.

S

Síť aktérů pro domov, z.s.

sad-cr.cz

48

Síť aktérů pro domov, z.s. is a small non-profit organization based in the Czech Republic focused on homelessness and housing issues. The website serves as a platform for expert discussions and advocacy in this social domain. The organization appears to be a recognized thematic leader in its field, founded in 2017, with a clear mission to address homelessness through professional discourse. Technically, the website is built on WordPress using the Divi theme, incorporating Google Analytics and Tag Manager for visitor tracking. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is minimal with no detected security headers or explicit security policies, and privacy compliance is poor due to the absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

K

koalice Za snadné dárcovství

snadnedarcovstvi.cz

42

The website 'koalice Za snadné dárcovství' represents a Czech non-profit coalition focused on advancing individual fundraising through relationship-based donor engagement. It serves as a platform for non-profit organizations to collaborate, educate, and overcome obstacles in the donation process. The site positions itself as a key player in the Czech fundraising ecosystem, targeting non-profit organizations and fundraising professionals. Technically, the website is built on WordPress using Elementor and several common plugins, delivering a modern and responsive user experience with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance documentation, which are areas for improvement. Overall, the site appears legitimate and trustworthy, though the absence of WHOIS data limits domain registration transparency.

N

Netherlands-Czech Chamber of Commerce

nlchamber.cz

64

The Netherlands-Czech Chamber of Commerce (NCCC) operates as a bilateral non-profit organization fostering sustainable business relations between the Netherlands and the Czech Republic. Their core activities include organizing events, active matchmaking, and providing a community platform to connect businesses and individuals focused on sustainability, innovation, and prosperity. The chamber has a well-established presence since 1999, supported by a professional website with comprehensive content and clear membership offerings. Technically, the website is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate and credible organization.

Nadace JABLOTRON is a Czech non-profit foundation established in 2015 by JABLOTRON GROUP a.s. The foundation focuses on supporting public-benefit activities including environmental protection, regional development, education, and aid for people in need. It has a strong regional presence and is backed by a reputable technology group, positioning it as a trusted charitable organization in the Czech Republic. The website provides clear organizational information, contact details, and foundational documents, supporting transparency and trust. Technically, the website uses a traditional tech stack including jQuery 1.9.1, Bootstrap 3, and fancybox, with Google Analytics for visitor tracking. While the site is functional and moderately optimized for mobile, it lacks modern security headers and uses an outdated jQuery version, which could pose security risks. No CMS or hosting provider details are evident, and SEO and accessibility are basic. From a security perspective, the site uses HTTPS and does not expose sensitive data or forms, but it lacks explicit privacy and cookie policies and does not implement a cookie consent mechanism, which are compliance gaps under GDPR. No incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the foundation's claims, supporting legitimacy. Overall, the site is trustworthy and professional but would benefit from improved privacy compliance, updated security practices, and modernized technical components to enhance security posture and user trust.

E

Evangelisches Medienhaus GmbH

kirchenwahl.de

58

The website www.kirchenwahl.de serves as the official informational platform for the 2025 church elections within the Evangelical Church in Württemberg. It provides comprehensive election details, candidate databases, campaign materials, and voter guidance targeted primarily at church members aged 14 and above. The platform is managed by the Evangelisches Medienhaus GmbH, a non-profit entity, and positions itself as an authoritative source for election-related content within the church community. Technically, the site is built on TYPO3 CMS, a robust and mature content management system, and integrates privacy-conscious analytics via Matomo with cookies disabled. The site demonstrates good mobile optimization, accessibility features, and SEO practices. Embedded content such as YouTube videos uses privacy-enhanced modes, reflecting a commitment to user privacy. From a security perspective, the site enforces HTTPS and implements a consent management system compliant with GDPR and local data protection laws. However, explicit security headers are not evident in the HTML content, and no published security or incident response policies are found. No vulnerabilities or suspicious patterns were detected, and the WHOIS data aligns well with the website's purpose and legitimacy. Overall, the website presents a professional, trustworthy, and privacy-conscious platform for its target audience. It effectively balances content quality, technical implementation, and privacy compliance, with minor recommendations to enhance security headers and incident response transparency.

Y

YOUPAX

youpax.de

62

YOUPAX is a German-language youth faith portal affiliated with the Archdiocese of Paderborn, providing religious content, community resources, and event information targeted at young people interested in Christian faith. The website offers a variety of thematic content including articles, journals, and social media engagement, positioning itself as a niche non-profit media platform within the Catholic Church in Germany. Technically, the site is built on the Weblication CMS, employs modern JavaScript libraries, and integrates analytics tools such as eTracker and Matomo, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some advanced security headers and formal security policies, indicating room for improvement in security posture. Overall, the site is trustworthy, professionally designed, and compliant with GDPR, though it would benefit from enhanced transparency around security and incident response. The domain WHOIS data is minimal but does not raise immediate concerns, supporting the legitimacy of the site as a non-profit religious portal.

C

Caritasverband für den Kreis Lippe und die Stadt Bad Pyrmont e.V.

caritas-detmold.de

50

The Caritasverband für den Kreis Lippe und die Stadt Bad Pyrmont e.V. is a regional non-profit organization providing a broad range of social services including general social counseling, debt counseling, refugee support, and legal advice. The website serves as an information and contact portal for individuals seeking assistance in the Lippe district and Bad Pyrmont city in Germany. The organization positions itself as a trusted local social service provider with a clear focus on community support and volunteer engagement. Technically, the website is built on WordPress 6.8.3 with common plugins such as Yoast SEO for search optimization and Borlabs Cookie for GDPR-compliant cookie management. The site uses HTTPS with a strong SSL configuration and is hosted on servers associated with rzone.de. The technical infrastructure is modern and supports good mobile responsiveness and accessibility, although some improvements in security headers could be made. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies or incident response information suggests room for improvement in transparency and preparedness. The use of Google Analytics is compliant with user consent, reflecting moderate user tracking. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on privacy compliance and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and considering a vulnerability disclosure mechanism to further strengthen the security posture and trustworthiness.

I

Institut St. Bonifatius

institut-st-bonifatius.de

44

Institut St. Bonifatius is a small, non-profit religious institute founded in 1949, operating internationally with a focus on spiritual formation, mission projects, and community service primarily in Europe, Africa, and Latin America. The website reflects a well-structured and content-rich platform targeting religious individuals and those interested in mission work and spiritual life. Technically, the site uses common JavaScript libraries such as jQuery and Slick Carousel, hosted on a domain managed via GoDaddy nameservers. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. Security posture is moderate with HTTPS assumed but lacking explicit security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility.

P

Pastoralverbund Lippe | Detmold

pv-lippe-detmold.de

54

Pastoralverbund Lippe | Detmold is a small non-profit religious organization serving the local community in Detmold, Germany. The website provides information about religious services, community groups, spiritual guidance, and social support initiatives. It targets parishioners and local residents interested in Catholic church activities. The organization maintains a consistent and professional online presence with a clear focus on community engagement and spiritual services. Technically, the website is built on TYPO3 CMS with modern frontend libraries and integrates a GDPR-compliant cookie consent mechanism via Cookiebot. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and cookie consent properly managed, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and compliant with privacy regulations, reflecting a mature digital infrastructure for a small non-profit entity.

E

Evangelischer Kirchenkreis an Lahn und Dill

evangelisch-an-lahn-und-dill.de

49

The Evangelischer Kirchenkreis an Lahn und Dill is a regional church district within the Evangelical Church in the Rhineland, serving the communities of Wetzlar and Braunfels in Germany. The website provides comprehensive information about religious services, community support, counseling, events, and educational resources. It targets church members, affiliates, and the general public interested in the church's activities. The organization operates as a non-profit entity focused on spiritual and social services. Technically, the website is built on WordPress using the Avada theme and several plugins including Yoast SEO and Mailin for newsletter management. It is hosted on rzone.de servers and employs HTTPS for secure communication. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implementation enhancing discoverability. From a security perspective, the site uses HTTPS and some security best practices but lacks advanced security headers and a public security or privacy policy. Cookie consent is implemented, indicating some GDPR awareness. No critical vulnerabilities or suspicious content were detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its community well. Recommendations include adding a privacy policy, enhancing security headers, and publishing a vulnerability disclosure policy to improve compliance and security posture further.

E

Evangelisches Dekanat an der Dill

ev-dill.de

67

Evangelisches Dekanat an der Dill operates as a regional church deanery within the Evangelical Church in Hessen and Nassau, providing religious services, community support, and cultural events to its local population in Germany. The website serves as an information hub for events, news, and church-related activities, targeting a general audience including church members and the local community. The organization maintains a clear digital presence with contact information, social media links, and a newsletter subscription service. Technically, the website is built on TYPO3 CMS, leveraging PHP and JavaScript, and integrates Matomo analytics with a GDPR-compliant cookie consent mechanism. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and session management in place, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent and appropriate for the organization's profile. Privacy compliance is well addressed through detailed cookie policies and consent management. Overall, the site is professional, trustworthy, and suitable for its non-profit religious mission.

E

Evangelischer Kirchenbezirk Geislingen-Göppingen

kirchenbezirk-geislingen-goeppingen.de

57

The Evangelischer Kirchenbezirk Geislingen-Göppingen website serves as an informational and community portal for one of the largest church districts within the Evangelische Landeskirche in Württemberg, Germany. It provides comprehensive details on worship services, events, pastoral care, church governance, and volunteer opportunities, targeting church members and the local community. The site is well-branded and consistent with official church identity, reflecting a medium-sized non-profit religious organization. Technically, the site is built on TYPO3 CMS with integrations such as Matomo analytics, Google Maps, and YouTube, indicating a modern and functional digital infrastructure. The website demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, HTTPS is enforced, cookie consent is managed properly, and no critical vulnerabilities are evident, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. Overall, the site is trustworthy, professional, and safe for general audiences.

G

Gemeinschaft Immanuel

immanuel-online.de

48

Gemeinschaft Immanuel is a small German Catholic charismatic lay community focused on promoting Christian unity, evangelization, and renewal of church and society. Their website serves as a hub for community information, events, and outreach to various age groups including families, youth, and seniors. The organization operates as a non-profit with a clear mission and active event calendar. Technically, the site is built on WordPress with common plugins such as Events Manager and Slider Revolution, hosted likely by Your-Server.de. The site is mobile optimized and well structured, though some improvements in accessibility and SEO could be made. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional for its community purpose.

S

Stiftung Creative Kirche

creative-kirche.de

10

Stiftung Creative Kirche is a German non-profit foundation focused on faith-based community engagement through cultural events such as choral musicals, festivals, and digital church services. The organization targets a broad audience interested in religious and cultural activities primarily in the Ruhrgebiet region but also digitally beyond. The website is built on TYPO3 CMS and integrates modern analytics and consent management tools, reflecting a moderate to advanced digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting the foundation's mission effectively.

The Pax-BKC-Spendenportal is a German-language online donation platform operated by Pax-Bank für Kirche und Caritas eG, focused on connecting donors with charitable projects and organizations. The platform offers institutions the ability to collect donations online and showcases various projects aligned with sustainability goals. The website is professionally designed with clear navigation and good content relevance, targeting donors and non-profit organizations primarily in Germany. Technically, the site is built on the Contao CMS with modern JavaScript libraries enhancing user experience. Hosting is provided by venne-hosting.de, and the site uses HTTPS with a cookie consent mechanism ensuring GDPR compliance. However, no explicit security policy or incident response information is published, which could be improved to enhance trust and transparency. Overall, the platform demonstrates a solid security posture with no detected vulnerabilities or blocking mechanisms, making it a trustworthy resource for charitable giving.

E

Erzbistum Berlin

erzbistum-berlin.de

54

Erzbistum Berlin operates as the official Catholic Archdiocese for the Berlin, Brandenburg, and Vorpommern regions in Germany. The website serves as a comprehensive information and communication platform offering news, event calendars, religious education, pastoral services, and community support. It targets the Catholic community and related stakeholders, positioning itself as a key regional religious authority with a broad range of services including media, education, and social outreach. The business model is non-profit, focusing on community engagement and spiritual guidance. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and JavaScript libraries for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. The presence of a detailed cookie consent mechanism and integration with analytics tools like etracker reflects a mature digital infrastructure with attention to privacy compliance. From a security perspective, the site enforces HTTPS and employs a granular cookie consent system, minimizing unnecessary data exposure. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and preparedness. No critical vulnerabilities or suspicious activities were detected. Overall, Erzbistum Berlin's website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR. It effectively supports its mission as a religious and community institution while maintaining a secure and user-friendly online presence.

N

Nadácia Zastavme korupciu

zastavmekorupciu.sk

58

Nadácia Zastavme korupciu is a Slovak non-profit organization dedicated to combating corruption through investigative journalism, legal support for whistleblowers, and youth community engagement. Established around 2013-2014, it has built a recognized presence in Slovakia with a small but focused team. The website reflects a professional and consistent brand image, targeting a general audience interested in transparency and governance. Technically, the site is built on WordPress with modern plugins and CDN support, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though explicit privacy and security policies are not found. Contact information is limited on the site, which could be enhanced for better user engagement and trust.

K

KASPIAN

kaspian.sk

51

KASPIAN is a Slovak civic association with a website built on WordPress, featuring minimal content and limited business information. The organization appears to be small and non-profit, with a domain registered since 2005, consistent with its claimed history. The website includes social media links but lacks detailed descriptions of services or business operations. Technically, the site uses common WordPress plugins and themes, hosted on Slovakian infrastructure, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the site is functional but could benefit from enhanced content, security, and compliance documentation.

A

Armáda spásy

armadaspasy.cz

55

Armáda spásy is a well-established non-profit organization operating in the Czech Republic, focused on providing social, health, and spiritual services to vulnerable populations including the homeless, at-risk families, and seniors. The organization maintains a professional and content-rich website that effectively communicates its mission, services, and partnership ecosystem. The site is built on a modern CMS platform (Vizus CMS) and incorporates contemporary web technologies such as Google Tag Manager and Swiper.js for enhanced user experience. Privacy and cookie compliance are well implemented, reflecting a strong commitment to GDPR standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers could improve defenses. Overall, the website reflects a mature digital presence suitable for a large non-profit entity.

N

NADĚJE

nadeje.cz

49

NADĚJE is a well-established Czech non-profit organization focused on providing social services to vulnerable populations including seniors, homeless people, handicapped individuals, families, children, and youth. Founded in 1990, the organization operates multiple branches across the Czech Republic and offers a variety of services including education, spiritual care, and debt counseling. The website serves as an information hub and donation platform, integrating a donation widget and linking to an e-commerce shop and educational sites. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

Č

Česká federace potravinových bank, z.s.

sbirkapotravin.cz

47

Sbírka potravin is a well-established non-profit initiative in the Czech Republic focused on organizing an annual food collection event to support vulnerable populations such as single mothers and elderly individuals. The campaign is supported by major retail chains, social organizations, and government ministries, indicating strong market positioning and trust. The website provides comprehensive information about the event, volunteer opportunities, and partner organizations, targeting the general public and volunteers. Technically, the website employs modern tracking and marketing technologies with appropriate user consent mechanisms, ensuring compliance with privacy regulations. Security posture is good with HTTPS and consent management but lacks some advanced security headers and explicit security policies. The absence of WHOIS data limits domain trust analysis but the website content and partnerships strongly support legitimacy. Overall, the site is professional, trustworthy, and serves an important social cause.

N

Naturwald Akademie gGmbH

naturwald-akademie.org

63

Naturwald Akademie gGmbH is a German non-profit organization dedicated to ecological forest research, education, and consulting. Founded in 2016, it provides scientific projects, educational programs, and practical advice to forest owners and public entities to promote sustainable and resilient forest ecosystems. The website reflects a professional and well-structured digital presence with comprehensive content tailored to its target audience of forest stakeholders and environmental professionals. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the domain registration and WHOIS data align well with the organization's history and legitimacy, supporting a high trust level.

S

SMART-EarthRanger Conservation Alliance

serca.org

52

The SMART-EarthRanger Conservation Alliance (SERCA) website represents a professional and well-branded non-profit collaboration focused on uniting leading protected and conserved area management systems globally. The alliance aims to accelerate adoption, strengthen capacity, and safeguard biodiversity through integrated technology, standards, training, and support. The website targets conservation professionals including field teams, researchers, planners, governments, and technologists. It positions itself as a unique global collaboration combining SMART and EarthRanger systems to transform conservation management at scale. Technically, the website is built on modern web technologies including Webflow CMS, Google Fonts, Google Analytics, and HubSpot embedded forms. It is hosted on Webflow's CDN, optimized for mobile, and demonstrates fast performance and good SEO practices. The site uses HTTPS and secure embedded forms but lacks explicit security headers and privacy/cookie policies, which are areas for improvement. From a security perspective, the site shows a good baseline with HTTPS and no exposed sensitive data. However, the absence of security headers, privacy policies, and direct contact information for security or abuse reporting reduces its security posture. No vulnerabilities or suspicious content were detected. The WHOIS data is unavailable due to privacy protection or query failure, but the website content and backing organizations support legitimacy. Overall, the website is trustworthy, professional, and safe for general audiences. Strategic recommendations include publishing privacy and cookie policies, adding security headers, providing direct contact info for incident response, and maintaining regular security audits to enhance compliance and trust.

K

Karpatská nadácia

uprezeny.sk

55

UPre ženy is a Slovak non-profit program run by Karpatská nadácia focused on empowering Roma women from marginalized communities by enhancing their employability, skills, and self-confidence. The program is supported by notable financial and program partners including Norway Grants, Starbucks Foundation, and others, positioning it as a credible regional social inclusion initiative. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a trustworthy and well-managed social program with clear contact information and partner endorsements.

F

Förderverein Finower Wasserturm und sein Umfeld e.V.

wasserturm-finow.de

58

The Förderverein Finower Wasserturm und sein Umfeld e.V. operates a cultural museum dedicated to preserving the industrial heritage of the Messingwerksiedlung and the Finower Wasserturm in Germany. The website offers detailed historical content, virtual 360° tours, and visitor information, targeting cultural enthusiasts and regional tourists. The organization is a small non-profit founded in 2003, relying on donations and volunteer support. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and specialized 360° tour software (krpano) integrated with the VR-Easy CMS. Hosting is provided via rzone.de nameservers. Security posture is adequate with HTTPS and client-side validation but lacks advanced security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility.

E

Evangelische Kirche der Pfalz

pfalz-evangelisch.de

57

The Evangelische Kirche der Pfalz is a large non-profit religious organization serving as one of the 20 regional churches within the Evangelical Church in Germany (EKD). Their website provides comprehensive information about church activities, events, community engagement, job opportunities, and press releases. The target audience includes church members and the general public interested in religious and community topics. The organization maintains a strong market position within the German religious sector, supported by consistent branding and a professional online presence. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript modules, Swiper.js for interactive elements, and Usercentrics for GDPR-compliant cookie management. The site is hosted on German VPS servers, optimized for mobile devices, and includes strong accessibility features such as an accessibility dashboard and keyboard navigation aids. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response information, and a vulnerability disclosure mechanism. The WHOIS data aligns well with the website content, indicating legitimacy and consistency. Overall, the site demonstrates a mature security posture with room for improvement in formal security documentation. The overall risk is low, with strong compliance to privacy regulations and good technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and adding a security.txt file to improve transparency and incident handling readiness.

E

Evangelische Kirche der Pfalz

raeume-fuer-morgen.de

10

The website 'Räume für morgen' is a project initiative by the Evangelische Kirche der Pfalz focused on the sustainable and future-oriented use of church buildings. It aims to reduce CO2 emissions and optimize building usage through community engagement and innovative concepts. The site targets church communities and stakeholders interested in ecological and social aspects of church infrastructure. Technically, the site is built on TYPO3 CMS with modern frontend technologies like Bootstrap 5 and jQuery, providing a responsive and user-friendly experience. The cookie consent mechanism is well implemented, supporting GDPR compliance. Security posture is solid with HTTPS and cookie management, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and serves its niche audience effectively.

UniCredit Foundation is a reputable non-profit organization dedicated to empowering Europe's next generation through education funding, research support, and social impact initiatives. The foundation operates under the UniCredit Group umbrella, focusing on reducing educational inequalities and fostering talent development. The website reflects a professional and consistent brand image, targeting students, researchers, non-profit organizations, and UniCredit employees. Technically, the site uses modern frameworks such as Next.js and Storyblok CMS, delivering a well-structured, mobile-optimized, and accessible user experience. Security posture is good with HTTPS enforced and asynchronous script loading, though explicit security headers and privacy policies are missing. The absence of WHOIS data limits domain trust verification, but the overall digital presence and content quality indicate legitimacy. Tracking scripts are present without visible consent mechanisms, suggesting room for privacy compliance improvements.

P

Provida foundation

provida.sk

52

Provida is a Slovak non-profit foundation established in 2013 that combines philanthropy and investment to address complex social challenges. Their focus is on supporting disadvantaged children, youth, social entrepreneurs, and community development through cultural and educational projects. The website presents a clear and professional image with detailed descriptions of their projects and investments, targeting socially engaged individuals and donors. Technically, the website uses a moderately modern stack including Bootstrap 3.3.5, jQuery 1.11.3, Font Awesome, and Google Fonts. Hosting is likely provided by Websupport, a Slovak hosting provider. The site is mobile responsive and has basic SEO and accessibility features, though some technical debt is evident due to outdated JavaScript libraries. Security posture is moderate with HTTPS and DNSSEC enabled, but lacks visible security headers and uses an outdated jQuery version with known vulnerabilities. No privacy or cookie policies are published, indicating compliance gaps with GDPR. Contact information is clearly provided, but no incident response or security policies are visible. Overall, the website is trustworthy and professional but would benefit from improved security practices, updated libraries, and formalized privacy and cookie policies to enhance compliance and user trust.

K

Karpatská nadácia

karpatskanadacia.sk

47

Karpatská nadácia is a well-established non-profit organization founded in 2007, focused on fostering prosperity and social development in Eastern Slovakia. The foundation offers grant funding, community development programs, and humanitarian aid, with a strong emphasis on supporting excluded Roma communities and aiding Ukraine. Their market position is solid within the regional non-profit sector, supported by partnerships with UNICEF and other organizations. The website reflects a professional and consistent brand image, targeting individuals and organizations committed to regional development. Technically, the website is built on a modern WordPress CMS platform using Elementor and Astra theme, hosted by Websupport. It employs contemporary web technologies including jQuery, Google Tag Manager, and CookieYes for cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS with DNSSEC enabled, employs cookie consent with granular user controls, and integrates tracking tools like Google Analytics, Microsoft Clarity, and Facebook Pixel responsibly. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a published security policy and incident response contact information, which are recommended for improved transparency and readiness. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility compliance to further strengthen the security posture and user trust.

Ľ

ĽudiaĽuďom.sk

ludialudom.sk

70

ĽudiaĽuďom.sk operates as Slovakia's first fully open and universal online donation platform, facilitating direct financial aid from donors to beneficiaries with a focus on transparency and public benefit. The platform's unique self-organizing model empowers donors to decide which causes to support without operator interference. Technically, the website employs common web technologies including jQuery, Google Tag Manager, Hotjar, and Cookiebot for analytics and cookie consent management. The site is accessible, mobile-optimized, and uses HTTPS, but lacks explicit privacy and terms of service pages and security headers, which are areas for improvement. Security posture is moderate with no critical vulnerabilities detected, but enhancements in security headers and incident response policies are recommended. Overall, the domain is well-established and consistent with the business purpose, indicating a trustworthy and legitimate operation.

C

Centrum pre filantropiu

cpf.sk

40

Centrum pre filantropiu is a well-established Slovak non-profit organization dedicated to fostering philanthropy and charitable giving in Slovakia for over 23 years. The organization connects donors with those in need and manages philanthropic strategies and grant programs. Their website reflects a mature digital presence with clear messaging, professional design, and comprehensive content focused on their mission and projects. Technically, the site is built on WordPress using modern plugins and tracking tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility as a non-profit entity.

Z

Zartbitter e.V. Köln

sinaundtim.de

57

Zartbitter e.V. Köln operates the 'Sina und Tim' project, a well-established non-profit initiative focused on preventing sexual abuse of children through educational materials such as picture books, theater plays, audio plays, and expert lectures. The organization has a strong market position in Germany as a pioneer in this sensitive field, supported by donations and sponsorships. The website reflects this mission with clear, child-appropriate content and a professional presentation. Technically, the website is built on WordPress with modern plugins and themes, including a robust cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Overall, the site demonstrates a responsible approach to privacy and security, with transparent contact information and no signs of malicious activity or adult content. The domain registration is consistent with the organization's profile, though registrant details are minimal. Strategic recommendations include enhancing security headers, adding terms of service, and publishing a security policy to further strengthen trust and compliance.

Z

Zartbitter e.V. Köln

washilft.org

61

WAS HILFT is a German non-profit project operated by Zartbitter e.V. Köln, dedicated to combating sexual violence through education, support, and awareness. The website offers multimedia content, legal information, and prevention theater aimed primarily at youth and their social circles. The project is funded by governmental and city institutions, reinforcing its legitimacy and trustworthiness. Technically, the website is built on WordPress with common plugins and demonstrates good mobile optimization and user experience. Security posture is adequate with HTTPS and cookie consent implemented, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is strong, with a comprehensive privacy policy and cookie management in place. Overall, the website is professional, trustworthy, and safe for general audiences.

Zartbitter e.V. operates an online webshop focused on educational and preventive materials related to child protection, sexual abuse prevention, and child rights. The website offers a variety of products including books, brochures, posters, and multimedia targeted primarily at parents, educators, and professionals working with children and youth. The business model is a niche non-profit e-commerce platform serving the German-speaking market (Germany, Austria, Switzerland). Technically, the website is built on WordPress with WooCommerce and uses several plugins for product display, discount rules, and GDPR compliance. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers. Performance is moderate with a good user experience and clear navigation. From a security perspective, the site enforces HTTPS and has a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, security headers like Content-Security-Policy and HSTS are not evident and should be implemented. There is no published security policy or incident response contact information. Overall, the website is safe, professional, and trustworthy for its target audience. The lack of direct contact information and detailed WHOIS data slightly limits business credibility assessment. Strategic improvements in security headers and transparency around security policies would enhance trust and compliance.

Ø

Økologisk Norge

okologisknorge.no

55

Økologisk Norge is a Norwegian non-profit organization dedicated to promoting organic agriculture, biodiversity, and sustainable food practices. The website serves as an educational and community platform offering resources for organic farmers, schools, and consumers interested in organic products. It has an established presence since 2010 and targets a Norwegian audience with content primarily in Norwegian. The organization encourages membership and supports various organic initiatives including school gardens and events like ØKOUKA. Technically, the website employs modern tracking and marketing tools such as Google Tag Manager, Facebook SDK, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although no explicit CMS or hosting provider information is detected. Cookie consent is implemented via a third-party service, but explicit privacy and terms of service pages are missing. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the organization's identity and domain age is appropriate, supporting legitimacy. Overall, the website is professional and trustworthy with good content quality and business credibility. However, it would benefit from enhanced privacy compliance, explicit security policies, and improved security headers to strengthen its security posture and regulatory adherence.

G

GRID-Arendal

grida.no

64

GRID-Arendal is a well-established non-profit environmental organization founded in 1989 with a strong mandate from UNEP and Norwegian governance. The organization focuses on supporting global environmental action through scientific research, creative communication, and project implementation. Their website reflects a professional and consistent brand image, targeting environmental professionals, NGOs, policy makers, journalists, and the general public interested in sustainability and environmental issues. The site offers rich content including news, activities, publications, and staff information, supported by modern web technologies and analytics tools. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. However, WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization.

Z

Zartbitter e.V.

zartbitter.de

64

Zartbitter e.V. is a German non-profit organization focused on counseling and prevention of sexual violence against children and youth. The organization provides direct counseling services, educational workshops, and training for parents and professionals. It is recognized nationally for its engaging materials and theater productions addressing sensitive topics such as digital violence and children's rights. The website reflects a mature, well-structured digital presence with clear branding and comprehensive content tailored to its target audience. Technically, the website is built on WordPress using Elementor and several specialized plugins for events, SEO, and cookie management. Hosting is provided by SchlundTech, a reputable German hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR. Security posture is solid with HTTPS enforced and no obvious vulnerabilities or exposed sensitive data. However, some recommended security headers are not explicitly detected, and no formal security policy or incident response contact is published. The site does not appear to use extensive tracking or advertising, focusing instead on user privacy and minimal data collection. Overall, Zartbitter e.V. presents a trustworthy, professional online presence appropriate for a sensitive non-profit mission. Strategic improvements could include publishing a security policy, adding vulnerability disclosure information, and enhancing security headers to further strengthen trust and compliance.

D

DJK Landesverband NRW e.V.

vollwertsport.de

46

The website www.vollwertsport.de represents the DJK Landesverband NRW e.V., a small non-profit organization focused on promoting values in sports through seminars, events, and educational products. The site serves a niche audience interested in sports education and community engagement within the NRW region of Germany. The business model revolves around non-profit activities supplemented by an e-commerce shop offering value-based sports products. Technically, the site is built on a modern WordPress platform using WooCommerce and Avada theme, with SEO and cookie consent mechanisms properly implemented. Security posture is good with HTTPS and cookie consent, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and legal pages. No critical security or content safety issues were detected.

D

DJK Sportjugend

djk-sportjugend.de

61

DJK Sportjugend is a German non-profit youth sports organization affiliated with the Catholic DJK-Sportverband. It focuses on inclusive youth work, social and cultural diversity, and prevention initiatives such as anti-racism and sexualized violence prevention. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of young people and sports communities. Technically, the site uses modern web technologies and a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a strong legitimacy score.

S

Sportvereinigung Deutsche Jugendkraft Spandau (DJK Spandau)

djk-spandau.de

47

Sportvereinigung Deutsche Jugendkraft Spandau (DJK Spandau) is a German non-profit sports club offering a variety of sports activities such as badminton, boule, gymnastics, Nordic walking, skate biathlon, sports shooting, table tennis, volleyball, and archery. The club targets local community members including children, adults, and people interested in inclusive sports programs. The website reflects a well-structured and accessible platform with clear navigation and content relevant to its audience. It maintains partnerships with reputable sports organizations, enhancing its community presence and trustworthiness. Technically, the website is built on Joomla CMS with modern web technologies including Bootstrap and jQuery. It is hosted on servers associated with kasserver.com and employs HTTPS with a cookie consent mechanism compliant with GDPR. Accessibility features such as screen reader support and contrast modes are implemented, indicating a commitment to inclusive design. Performance is moderate with good mobile optimization. From a security perspective, the site uses HTTPS and cookie consent banners but lacks visible security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate hosting setup. Overall, the security posture is adequate but could be improved with additional headers and documented policies. The overall risk assessment is low with recommendations to enhance security headers, add incident response contact information, and maintain regular updates to Joomla and plugins. The website is professional, trustworthy, and compliant with privacy regulations, serving its community effectively.

C

Centrum pre filantropiu n.o.

darujme.sk

63

DARUJME.sk is a well-established Slovak online fundraising platform operated by Centrum pre filantropiu n.o., founded in 2011. It serves as a donation gateway and fundraising tool provider primarily targeting non-profit organizations and individual donors within Slovakia. The platform offers a comprehensive suite of services including secure payment processing, donor communication, administrative tools, and training resources. It holds a strong market position with over 1,000 registered organizations and nearly 40 million euros donated through its system. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content relevant to its audience.