Non-profit security reports

K

Katholische Studierende Jugend

ksjberlin.de

45

KSJ Berlin is a non-profit youth organization focused on engaging students and young people in Berlin through volunteer activities, school participation, and societal involvement. The organization operates as part of the Catholic youth umbrella (BDKJ) but is inclusive of all beliefs. Their website provides information about membership, events, and community platforms such as a Discord server. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Fonts, and is hosted with domain control services. It is mobile optimized and includes SEO best practices. Security-wise, the site enforces HTTPS, uses Google Analytics with IP anonymization, and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of youth in Berlin.

okaJ is a small non-profit youth organization based in Berlin, Germany, focused on providing an open, catholic, and active community for young people. The organization supports youth groups within the church, offers networking opportunities, spiritual programs, and volunteer engagement. The website reflects a professional and consistent brand image targeting youth and youth groups in the Berlin area. Technically, the site is built on WordPress with common plugins and uses Google reCAPTCHA for form security. While the site is well designed and user-friendly, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain and website appear legitimate and trustworthy for their stated purpose.

K

KjG Berlin

kjg-berlin.de

56

KjG Berlin is a small non-profit Catholic youth organization based in Germany, focused on engaging young people in community activities, education, and events within the Catholic framework. The website serves as an informational and organizational platform for members and interested parties, providing updates, event information, and contact details primarily via email. The organization maintains a presence on social media platforms such as Instagram and Facebook to reach its target audience. Technically, the website is built on WordPress, utilizing standard web technologies such as PHP, JavaScript, and CSS. The site is served over HTTPS with a valid SSL certificate, ensuring secure communication. While the site demonstrates good mobile optimization and basic SEO practices, it lacks advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance and enhanced security. From a security perspective, the site shows a moderate security posture with HTTPS enabled but missing several security headers and no visible incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a privacy policy present, but the absence of a cookie consent banner is a gap. Overall, KjG Berlin presents a trustworthy and professional online presence for a small non-profit organization. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance compliance and security posture, supporting the organization's credibility and user trust.

J

Jugendverbände der Gemeinschaft Christlichen Lebens - Diözesanverband Berlin

j-gcl.berlin

42

J-GCL Berlin is a small non-profit youth organization focused on Christian community activities within the Berlin region. The website serves primarily as an informational portal presenting the organization's identity, social media presence, and contact email. The business model centers on community engagement and youth involvement in Christian life, positioning itself as a local entity without commercial operations. Technically, the website is built on a simple HTML5 and CSS stack with some JavaScript for UI enhancements, using the HTML5 UP design template and Font Awesome icons. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. Security posture is basic; while the domain is registered with a reputable German registrar and protected against unauthorized transfers, the site lacks DNSSEC, security headers, and visible HTTPS enforcement details. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Overall, the site is safe, with no adult or questionable content, but would benefit from enhanced security and compliance measures.

D

DJK Landesgemeinschaft Berlin e.V.

djk-berlin.de

58

DJK Landesgemeinschaft Berlin e.V. is a regional Catholic sports association in Berlin, Germany, serving approximately 500,000 members across more than 1,000 clubs nationally. The organization focuses on promoting sports activities, events, and community engagement within the Catholic sports community. Their website provides comprehensive information about the association, news, events, and member clubs, targeting members and interested parties in the sports and religious community. Technically, the website is built on AmphiCMS with standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, featuring responsive design and moderate performance. Security posture is solid with HTTPS enforced, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, serving its non-profit mission effectively.

O

oikos-Institut

oikos-institut.de

43

The oikos-Institut is a small non-profit organization dedicated to supporting mission and ecumenical work within the Westphalian church region in Germany. The website provides information about their services, events, and educational materials aimed at church communities and related stakeholders. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities and uses Matomo for analytics, reflecting a moderate level of digital maturity. The site is well-designed, mobile-optimized, and offers a good user experience with clear navigation. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and published privacy or security policies. Overall, the domain registration is consistent with the organization's regional and non-profit nature, indicating legitimacy. Strategic improvements include publishing comprehensive privacy and security policies and enhancing security headers to strengthen compliance and trust.

E

Evangelische Landeskirche in Württemberg

kirchensteuer-wirkt.de

57

The website kirchensteuer-wirkt.de is an official platform representing multiple regional evangelical churches in Germany, primarily focused on educating and informing about the Kirchensteuer (church tax) and its impact. It provides detailed information on church financing, usage of funds, and offers tools such as a Kirchensteuer calculator. The site targets church members and interested individuals, emphasizing transparency and community engagement. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and incorporates accessibility features, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and consent management, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

Kulturkirche St. Stephani

kulturkirche-bremen.de

49

Kulturkirche St. Stephani is a small non-profit cultural organization based in Bremen, Germany, focused on providing a diverse program of cultural events including art exhibitions, concerts, and community activities. The website reflects a well-structured and professionally designed platform that serves its target audience effectively. The organization is affiliated with the Evangelische Studierenden Gemeindschaft and Kirche Bremen, enhancing its credibility and community reach. Technically, the website is built on TYPO3 CMS and utilizes modern JavaScript libraries such as jQuery, Slick Slider, and Masonry for interactive and responsive user experience. The site includes a cookie consent mechanism and integrates Matomo analytics for user behavior tracking, demonstrating a commitment to privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing legitimate domain registration without privacy protection, appropriate for a public cultural entity. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security policies and accessibility. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance to strengthen trust and resilience.

U

United4Rescue – Gemeinsam Retten e.V.

united4rescue.org

58

United4Rescue is a German non-profit alliance dedicated to supporting civilian sea rescue operations in the Mediterranean. The organization connects various societal groups and NGOs to raise awareness and funds to prevent loss of life at sea. Their business model relies on donations, memberships, and fundraising campaigns, supported by an online shop selling branded merchandise. The website is professionally designed, multilingual, and provides clear navigation and relevant content for its humanitarian mission. Technically, the site uses modern tracking and consent tools, hosted by a German provider, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent, though some security headers and DNSSEC could be improved. No direct contact emails or phone numbers are publicly listed, but contact forms and social media channels are available. WHOIS data aligns well with the organization's profile, indicating legitimacy and consistency. Overall, the website is trustworthy, compliant with GDPR, and effectively supports the organization's mission.

D

Deutscher Evangelischer Kirchentag

kirchentag.de

51

The Deutscher Evangelischer Kirchentag website represents a well-established non-profit organization dedicated to organizing large-scale biennial religious and cultural events in Germany. The site provides comprehensive information about upcoming events, community engagement, and volunteer opportunities, targeting a broad audience interested in faith, culture, and social dialogue. The organization maintains a strong market position as a leading event organizer within the German evangelical community. Technically, the website is built on TYPO3 CMS, employs modern web standards, and integrates Matomo analytics for privacy-conscious visitor tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and provides cookie consent mechanisms, though it lacks visible advanced security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements, making it a reliable digital presence for the organization.

M

Markgrafenkirchen e.V.

markgrafenkirchen-bayern.de

44

Markgrafenkirchen e.V. is a small non-profit organization dedicated to promoting and preserving the cultural heritage of the Markgrafenkirchen churches in Bavaria, Germany. The website serves as an informational and community engagement platform, offering details about the churches, events, tours, and membership opportunities. It targets cultural tourists, local communities, and history enthusiasts interested in regional heritage. The organization is positioned as a regional cultural promoter with a focus on community involvement and heritage tourism.

The Bruno H. Schubert-Stiftung is a German non-profit environmental foundation dedicated to promoting biodiversity and nature conservation. It is known for awarding the Frankfurt Conservation Award, one of Germany's most prestigious private environmental prizes. The website is professionally designed, content-rich, and targets individuals and organizations interested in environmental protection. The foundation has a strong reputation supported by testimonials from notable figures in academia and conservation. Technically, the website runs on WordPress with a modern theme and uses standard technologies such as jQuery and lazy loading for images. It is mobile-optimized and performs moderately well. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. However, explicit security policies and incident response information are not present. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The site lacks advanced security headers and a vulnerability disclosure policy, which are recommended for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a trustworthy and credible digital presence for the foundation, with minor technical and security enhancements recommended to further strengthen its posture.

W

Wildnis in Deutschland

wildnisindeutschland.de

58

Wildnis in Deutschland is a well-established non-profit initiative dedicated to creating and protecting wilderness areas in Germany. The website serves as an educational and advocacy platform, providing comprehensive information about wilderness, conservation efforts, and related funding programs. It targets environmentalists, policymakers, researchers, and the general public interested in nature preservation. The initiative is supported by a coalition of 22 conservation organizations, positioning it as a key player in the German environmental sector. Technically, the website is built on WordPress using the Enfold theme, enhanced with SEO and security plugins such as Yoast SEO and Contact Form 7 with reCAPTCHA. The hosting is managed via INWX, a reputable German registrar. The site demonstrates good mobile optimization, accessibility, and SEO practices, with structured data implemented for enhanced search engine understanding. From a security perspective, the site uses HTTPS with a strong SSL configuration and employs reCAPTCHA to protect forms from spam. While explicit security headers are not fully visible in the HTML, the overall posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms, aligning with GDPR requirements. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. It effectively communicates its mission and engages its audience professionally. Strategic recommendations include enhancing security headers, publishing incident response contacts, and considering a security.txt file to improve vulnerability disclosure transparency.

E

Evangelisches Medienhaus GmbH

gemeindebaukasten.de

59

The website www.gemeindebaukasten.de is a professionally designed platform offering a modular website builder service tailored for churches, diaconal organizations, youth groups, and related non-profit entities primarily in Germany. Operated by Evangelisches Medienhaus GmbH, it provides personalized support, privacy-compliant tools, and hosting within Germany, positioning itself as a niche provider in the religious and community sector. The site leverages TYPO3 CMS and integrates Matomo analytics with a strong focus on GDPR compliance and accessibility. Security posture is solid with HTTPS and consent management, though explicit security policies and headers could be enhanced. Overall, the site is trustworthy, well-structured, and serves its target audience effectively.

S

Stiftung Creative Kirche

chormusicals.de

57

The website www.chormusicals.de represents the Stiftung Creative Kirche, a well-established non-profit organization focused on producing and promoting choir musicals across Germany. With over 30 years of experience, the organization offers cultural musical events, choir participation opportunities, and ticket sales. The site is professionally designed, content-rich, and targets choir enthusiasts and audiences interested in musical theater. Technically, the site is built on TYPO3 CMS and integrates modern JavaScript libraries and privacy-respecting analytics tools such as Matomo. The presence of a cookie consent mechanism via Klaro demonstrates a commitment to privacy compliance. Security posture is solid with HTTPS enforced, though some HTTP security headers are not visibly implemented. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

C

Chor der Sankt Hedwigs-Kathedrale Berlin

hedwigschor-berlin.de

49

The website represents the Chor der Sankt Hedwigs-Kathedrale Berlin, the main choir of the Roman Catholic cathedral in Berlin. It serves as a cultural and religious platform promoting choir performances, organ music, and youth choir activities. The site is well-structured, with clear navigation and relevant content targeting music enthusiasts and churchgoers. Technically, it is built on TYPO3 CMS with standard JavaScript libraries and includes a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy and professionally maintained, reflecting its non-profit cultural mission.

N

NaZemi

pracebudoucnosti.cz

42

The website 'Práce (bez) budoucnosti' is a Czech non-profit educational platform operated by the organization NaZemi. It focuses on the societal challenges and transformations related to the future of work, particularly in the context of automation, digitalization, and robotization. The site offers educational content, exhibitions, and workshops aimed at raising awareness about labor market changes and technological impacts. The target audience is the general public interested in these topics, with a clear focus on Czech society. Technically, the website is built on WordPress using the Divi theme and standard plugins such as Contact Form 7. It integrates Google Tag Manager and Matomo for analytics and tracking. The site is hosted under a Czech registrar and uses HTTPS with a good SSL configuration. Mobile optimization and SEO practices are good, though accessibility is basic. No advanced security headers were detected, and privacy and cookie policies are not present, which is a compliance gap. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks explicit security headers like CSP or HSTS. There is no visible vulnerability disclosure or incident response information. The domain registration data is consistent with the website's claims and organization, indicating legitimacy. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is professionally presented with good content quality and business credibility. However, it should improve privacy compliance by adding privacy and cookie policies and enhance security posture by implementing security headers and formal vulnerability disclosure mechanisms.

Partners for Democratic Change Slovakia (PDCS) organizes an international conference titled 'Civic Actors in War and Peace' focusing on strategies to address hate, polarization, and extremism in communities during times of conflict and peace. The conference attracts international experts, civic actors, and policymakers, positioning PDCS as a recognized non-profit entity in the civic engagement and conflict prevention sector. The website provides comprehensive event details, speaker profiles, and multimedia content, reflecting a well-established event with a history dating back to at least 2014. Technically, the site uses modern web technologies including Bootstrap, Font Awesome, Flickity, and integrates privacy-conscious analytics via Plausible. Hosting is managed by Websupport with DNSSEC enabled, and HTTPS is enforced, indicating a secure infrastructure. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and compliant with GDPR through a linked privacy policy, though improvements in privacy and security disclosures are recommended.

The Pax-BKC Spendenportal is a German-language online donation platform operated by Pax-Bank für Kirche und Caritas eG, focused on connecting donors with charitable projects and organizations primarily related to church and Caritas sectors. The platform offers project listings, organization registrations, and facilitates online donations, targeting donors and non-profit institutions in Germany. The website is professionally designed with clear navigation and mobile optimization, built on the Contao CMS with modern JavaScript libraries enhancing user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. No suspicious or malicious content is detected, and privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policy. Overall, the site presents a trustworthy and professional presence in the non-profit donation space.

T

The Berlin Center for Intellectual Diaspora

intellectualdiaspora.org

50

The Berlin Center for Intellectual Diaspora operates as a small non-profit public forum based in Germany, focusing on Jewish-Catholic inspired discussions around contemporary politics, religion, society, and culture. The website serves as a platform for debates and encounters, targeting a general audience interested in intellectual and cultural discourse. The business model is centered on providing a niche cultural and religious discussion space without commercial intent. Technically, the website is built on WordPress using the Kadence theme and several plugins including Rank Math SEO and TranslatePress for multilingual support. The infrastructure is modern and moderately optimized for performance and mobile responsiveness. Hosting is associated with IONOS SE, a reputable registrar and hosting provider. SEO practices are good, but accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled, and no security headers were detected in the provided content. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are gaps in compliance and security posture. No vulnerabilities or suspicious patterns were identified. Overall, the website presents a moderate risk profile with good technical foundations but lacks important privacy and security compliance elements. Strategic improvements in policy publication, security headers, and DNS security would enhance trust and compliance.

Anstand digital is a German non-profit educational project focused on promoting respectful and ethical behavior on the internet, particularly addressing issues like hatespeech and digital civility. It is a collaboration between the Katholische Akademie in Berlin and the Evangelische Kirche Deutschlands, funded by the German Federal Government's cultural office. The project provides educational materials, podcasts, and public discussions aimed primarily at youth and educators. Technically, the website is built on Akira CMS with modern frontend technologies including jQuery, Bootstrap, and Fancybox, delivering a responsive and accessible user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The site is free of advertising and tracking, reflecting a privacy-conscious approach. Overall, the domain and WHOIS data align with the project's legitimacy and non-profit nature.

A

Arbeitsgemeinschaft Katholischer Büchereien Erzbistum Berlin

katholische-buechereien.de

45

The website www.katholische-buechereien.de represents the Arbeitsgemeinschaft Katholischer Büchereien Erzbistum Berlin, a small non-profit organization coordinating volunteer-run Catholic public libraries in the Berlin archdiocese. It provides free lending services of books and media, supported by approximately 80 volunteers across 12 libraries. The site is well-branded with consistent use of the Erzbistum Berlin identity and targets the general public interested in Catholic community services. Technically, the site is built on TYPO3 CMS with legacy jQuery libraries and uses Matomo for analytics, indicating moderate digital maturity. The site is mobile-optimized and includes a GDPR-compliant cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the site is trustworthy, safe, and professionally maintained, serving a niche community audience effectively.

S

Sozialdienst katholischer Frauen e.V. Berlin

skf-berlin.de

54

Sozialdienst katholischer Frauen e.V. Berlin is a well-established non-profit organization dedicated to supporting women, youth, and families in challenging life situations within Berlin. The organization offers a broad range of social services including youth assistance, family support, workshops for people with disabilities, and open social work initiatives. Their market position is that of a trusted regional social service provider with a medium organizational size and a clear focus on community welfare. The website reflects a professional and consistent brand image with comprehensive service descriptions and clear contact information. Technically, the website is built on a modern WordPress platform utilizing popular plugins such as WPBakery Page Builder, Slider Revolution, and CleanTalk Anti-Spam. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security measures include HTTPS enforcement, anti-spam tools, and cookie consent management, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid for a non-profit, with room for enhancement in formal security policies and incident response disclosures. Privacy compliance is adequate, with GDPR-aligned cookie and privacy policies present. The domain registration is consistent with the organization's location and business history, supporting legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance.

S

SANCTA MARIA - Institut der hl. Hedwig gGmbH

sancta-maria-berlin.de

44

SANCTA MARIA - Institut der hl. Hedwig gGmbH is a non-profit organization based in Berlin, Germany, providing specialized child and youth welfare services including therapeutic support and special education. The organization operates two main locations and offers a range of social and educational services aimed at supporting children and young people in need. Their market position is regional and focused on social care within the Berlin area. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the site is built on WordPress with modern SEO and performance optimizations, including lazy loading and image compression. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and explicit policies are lacking. WHOIS data is minimal but consistent with a small non-profit entity. Overall, the site is trustworthy, safe, and well-suited for its target audience.

D

Dormitio Abtei

dormitio.net

52

Dormitio Abtei is a German-speaking Benedictine Abbey located in Israel, serving religious, cultural, and academic communities. The website reflects a well-established non-profit religious institution with a focus on pilgrimage, worship services, cultural engagement, and theological studies. The domain has been active since 2005, supporting the institution's long-standing presence. Technically, the website uses modern web technologies including UIkit framework and Matomo analytics, ensuring good performance and mobile optimization. However, the site lacks visible privacy and cookie policies, which is a compliance gap under GDPR. Security posture is moderate with HTTPS enabled and domain registrar protections in place, but missing DNSSEC and security headers reduce the overall security score. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is professional, trustworthy, and safe for general audiences.

B

Bund der Deutschen Katholischen Jugend Diözesanverband Berlin

bdkj-berlin.de

54

Bund der Deutschen Katholischen Jugend Diözesanverband Berlin (BDKJ Berlin) is a non-profit umbrella organization within the Catholic Church focused on creating spaces for children and youth to develop autonomously and self-organized. The organization coordinates multiple youth associations, offers educational and political programs, and emphasizes prevention and processing of sexualized violence. Their market position is regional, serving the Berlin area with a medium-sized organizational structure. Technically, the website employs modern JavaScript libraries and Bootstrap framework, with a cookie consent mechanism and responsive design, though some advanced SEO and accessibility features could be improved. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, serving its target audience effectively.

D

Diözesane Arbeitsgemeinschaft der Mitarbeitervertretungen im Erzbistum Berlin

diag-mav-berlin.de

55

DiAG-MAV Berlin is a small non-profit organization serving employee representatives within the Archdiocese of Berlin. The website provides informational resources, legal documents, seminar announcements, and contact details tailored to its niche audience. The organization positions itself as a trusted source for employee representation in church-related contexts. Technically, the website is built on WordPress with common plugins and libraries such as jQuery, Bootstrap, and Revolution Slider, indicating a standard but functional digital infrastructure. The site is mobile-optimized and includes interactive maps for location display. Security-wise, the site uses HTTPS and basic form validation but lacks advanced security headers and visible incident response policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page in German. Overall, the site is professional and trustworthy but could improve in security best practices and transparency regarding terms of service and incident response.

K

Katholische Akademie in Berlin e.V.

katholische-akademie-berlin.de

10

Katholische Akademie in Berlin e.V. is a well-established non-profit Catholic educational and cultural institution based in Berlin, Germany. It offers a wide range of events, lectures, podcasts, and cultural programs focusing on theology, politics, society, philosophy, and religion. The organization targets a general audience interested in religious and cultural discourse and maintains a strong regional presence with institutional support from recognized partners such as Bonifatiuswerk. The website reflects a professional and consistent brand image with clear navigation and relevant content.

K

Katholisches Netzwerk Kinderschutz im Erzbistum Berlin

katholisches-netzwerk-kinderschutz.de

10

The Katholisches Netzwerk Kinderschutz im Erzbistum Berlin is a non-profit network established in 2011, focused on protecting children and youth from sexual violence, abuse, and neglect within Catholic institutions in Berlin. It operates under the Archdiocese of Berlin, collaborating with various Catholic organizations, schools, and social services. The website serves as an information and networking platform, providing resources, event recaps, and contact points for prevention and intervention. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS and consent-based third-party content loading, though formal security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-aligned with its mission and audience.

Y

YouthWatch

youthwatch.sk

42

YouthWatch is a Slovak non-profit organization dedicated to enhancing the quality of youth work and youth policy through trend monitoring, innovation, and development programs. Their services include educational workshops, lectures, and consulting aimed at youth workers, educators, and policymakers. The website is professionally designed using WordPress and Elementor, with a focus on accessibility and mobile optimization. The technical infrastructure is modern and hosted on Websupport with DNSSEC and HTTPS enabled, ensuring a secure browsing experience. However, the site lacks explicit privacy and cookie policies, incident response contacts, and security headers, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, reflecting a stable and trustworthy organization.

K

Klidem - institut pro ekoterapii, z.ú.

klidem.com

49

Klidem - institut pro ekoterapii, z.ú. is a Czech non-profit organization focused on promoting mental health through ecotherapy. They provide therapy, coaching, educational courses, workshops, and custom services to individuals, groups, and professionals. The organization actively collaborates with other ecotherapy-related entities in the Czech Republic and internationally. Their website presents a professional image with consistent branding and clear descriptions of their services and team. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and absence of explicit contact information. Overall, the site is trustworthy and serves its niche well but would benefit from enhanced compliance and security practices.

I

IPčko.sk

ipcko.sk

42

IPčko.sk is a well-established Slovak non-profit organization providing anonymous, free, and 24/7 crisis psychological support through multiple channels including phone, chat, email, and personal visits. The website reflects a mature digital presence with a clear focus on accessibility and user support. The organization has a strong market position in Slovakia as a trusted crisis helpline service. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on a reputable provider with DNSSEC and HTTPS enabled, ensuring good security and performance. Security posture is strong with best practices observed, though some improvements in privacy compliance and explicit security policies are recommended. Overall, the site is professional, trustworthy, and user-friendly, serving a critical social function.

P

PDCS, o.z.

pdcs.sk

41

PDCS is a Slovak non-governmental organization specializing in conflict resolution, civic participation, and social dialogue. The organization offers educational courses, facilitation, consulting, and project support primarily targeting individuals, groups, and organizations interested in societal development and democratic processes. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site uses modern web technologies including Vue.js and Bootstrap, and integrates privacy-respecting analytics via Plausible. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the absence of a cookie consent mechanism and a dedicated privacy policy page. Overall, PDCS demonstrates a credible and trustworthy online presence aligned with its non-profit mission.

M

Medienhaus der Evangelischen Kirche in Hessen und Nassau GmbH

ev-medienhaus.de

69

The Medienhaus der Evangelischen Kirche in Hessen und Nassau GmbH is a non-profit organization serving as the central media and publishing hub for the Evangelische Kirche in Hessen und Nassau. It offers a broad range of services including media production, publishing, seminars, and agency services tailored to church and diaconal staff and institutions. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience. Technically, the website is built on TYPO3 CMS, employs Matomo for privacy-conscious analytics, and uses standard web technologies such as JavaScript and CSS. The site is moderately optimized for performance and mobile devices, with a cookie consent mechanism ensuring GDPR compliance. Hosting is via DomainControl, a reputable registrar service. From a security perspective, the site enforces HTTPS and uses session cookies appropriately. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website demonstrates a solid security posture and good privacy compliance, supporting its role as a trusted media provider for a religious non-profit entity. Strategic improvements in security headers and incident response transparency would further enhance its security maturity.

B

Bremische Evangelische Kirche

kirche-bremen.de

55

The Bremische Evangelische Kirche website serves as the official online presence of the regional evangelical church in Bremen, Germany. It offers comprehensive information about its communities, faith, events, and social support services. The site targets a general audience interested in religious and community activities, positioning itself as a trusted non-profit organization within the Bremen region. The business model focuses on community engagement, religious services, and social assistance, supported by educational and cultural programs.

S

Schönstattbewegung Frauen und Mütter

zeitschrift-begegnung.de

41

The website represents a niche religious magazine 'begegnung' targeted at women associated with the Schönstatt movement, a Catholic community focused on family and faith. The business model revolves around subscription services including gift and single issue orders. The site is well-branded and consistent, serving a small, specialized audience primarily in Germany. Technically, the site uses the concrete5 CMS (version 5.6.4.0), jQuery, Bootstrap grid, and Typekit fonts, hosted likely on servers indicated by the nameservers. The site is mobile optimized with good navigation and content relevance but lacks modern security headers and cookie consent mechanisms. Security posture is moderate with HTTPS enabled but missing advanced headers and incident response information. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy with room for improvement in security and privacy compliance.

E

Evangelische Medienarbeit

evangelische-medienarbeit.de

59

Evangelische Medienarbeit (EMA) is a non-profit organization affiliated with the Landeskirche Hannovers, providing communication solutions, training, and media support primarily for church-related entities and professionals. The website serves as an information hub for their services including newsletters, events, and contact points. Technically, the site uses modern web technologies with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and CSRF protections, though some improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is trustworthy, professionally presented, and aligned with its organizational mission.

E

Evangelische Agentur der Evangelisch-lutherischen Landeskirche Hannovers

kirchliche-dienste.de

59

The Evangelische Agentur der Evangelisch-lutherischen Landeskirche Hannovers is a regional non-profit service agency supporting church communities and organizations in Niedersachsen, Germany. The website provides comprehensive information about their services including community support, fundraising, spiritual guidance, and public responsibility initiatives. The agency operates under the umbrella of the Evangelisch-lutherische Landeskirche Hannovers, indicating a strong institutional backing and trustworthiness. Technically, the website employs modern web technologies such as Font Awesome 7, Turbo (Hotwire), and Matomo analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS with CSRF protection, but lacks some advanced security headers and cookie consent mechanisms, which are recommended for enhanced security and GDPR compliance. From a security perspective, the site shows good practices with encrypted connections and privacy-conscious analytics but could improve by publishing explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in privacy compliance and security transparency would further strengthen its posture.

P

Pastoral am Puls. e.V.

pastoral-am-puls.de

56

Pastoral am Puls. e.V. is a small non-profit organization based in Germany focused on pastoral care, spiritual guidance, and church development. The website serves as an informational and community platform offering educational content, newsletters, and resources for religious communities and pastoral workers. The organization positions itself as a niche player within the religious non-profit sector, emphasizing spiritual process leadership and cultural change within church contexts. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and security, hosted via DomainControl.com. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies with user consent mechanisms. Security posture is solid with HTTPS enforced and captcha protection on contact forms, though it lacks explicit security policy documentation and security headers. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Bistum Mainz

bistummainz.de

62

Bistum Mainz is a large non-profit Catholic diocese based in Germany, providing a wide range of religious, social, educational, and community services. The website serves as a comprehensive portal for parishioners and the general public, offering news, event information, pastoral resources, and social initiatives. It targets members of the Catholic community and residents within the diocese's region. Technically, the site is built on the Alkacon Mercury CMS platform, with a modern tech stack including responsive design, accessibility features, and privacy-conscious analytics via Matomo. The site is well-structured, professionally designed, and optimized for mobile and accessibility standards. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are not visibly present. WHOIS data and domain registration details align well with the organization's identity, supporting legitimacy and trustworthiness. Overall, the site demonstrates a mature digital presence suitable for a large religious non-profit organization.

S

Schoenstatt

schoenstatt.com

60

Schoenstatt.com is the official website of the International Schoenstatt Movement, a Catholic non-profit organization founded in 1914 and active internationally across five continents. The website serves as a central platform for community engagement, spiritual education, and dissemination of news and resources related to the movement. It targets members and followers of the movement, providing multilingual content and multimedia resources to support its mission. Technically, the website is built on WordPress with Elementor and Yoast SEO Premium, hosted by IONOS SE. It uses modern web technologies including HTTPS, Google Tag Manager, and reCAPTCHA for security and analytics. The site demonstrates good mobile optimization and SEO practices, although performance is moderate and accessibility is basic. From a security perspective, the site enforces HTTPS and uses domain locking to prevent unauthorized changes. However, DNSSEC is not enabled, and some recommended security headers are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies and consent mechanisms. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the website is professional, trustworthy, and content-rich, supporting the organization's mission effectively. Strategic improvements in privacy compliance, DNS security, and security headers would enhance its security posture and regulatory adherence.

M

Martinushaus Aschaffenburg

martinushaus.de

52

Martinushaus Aschaffenburg is a non-profit community and educational center located in the heart of Aschaffenburg, Germany. It operates under the Diocese of Würzburg and offers a variety of services including community meeting spaces, educational programs, and event venue rentals. The website reflects a well-established regional institution with a clear mission to provide open doors and hearts to visitors. The business model focuses on community engagement and educational offerings supported by the church diocese. Technically, the website is built on Joomla CMS with a Yootheme template and leverages modern frameworks such as UIkit and jQuery. It integrates Matomo analytics for user tracking and Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be via GoDaddy, indicated by the domain's nameservers. From a security perspective, the site enforces HTTPS and includes CSRF tokens in scripts, indicating good security hygiene. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

J

Jugendhaus St. Kilian

jugendhaus-st-kilian.de

49

Jugendhaus St. Kilian is a non-profit youth and educational center located in Miltenberg, Germany, affiliated with the Diocese of Würzburg. The organization provides accommodation, conference facilities, catering, and educational programs primarily targeting school classes, families, and youth groups. The website is professionally designed using Joomla CMS with modern frameworks such as Bootstrap and UIkit, and integrates privacy-compliant tools like Usercentrics for consent management and Matomo for analytics. Contact information and legal disclosures are clearly presented, enhancing trust and transparency. The domain registration and DNS setup are consistent with the organization's regional and operational profile, indicating legitimacy and stability. Technically, the website employs a modern tech stack and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. No incident response or security policy pages were found, suggesting an area for improvement. Overall, the website presents a trustworthy and professional digital presence for a regional non-profit organization focused on youth services and education. The risk profile is low, with no indications of malicious activity or content safety concerns.

D

DGNB GmbH

dgnb.de

57

DGNB GmbH is a well-established non-profit organization founded in 2007, recognized as Europe's largest network for sustainable building and the second largest worldwide. The organization offers a comprehensive certification system (DGNB Zertifizierung), educational programs through the DGNB Akademie, and a digital networking platform (myDGNB). Their market position is strong within the sustainability and construction sectors, supported by over 2,800 member organizations and more than 11,000 certified projects globally. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.

H

Hoffnungsvoll leben

hoffnungsvoll-leben.de

45

Hoffnungsvoll leben is a small non-profit Christian website dedicated to personal development, psychological well-being, and spiritual growth. It provides a broad range of articles, meditations, and materials authored by professionals and active members of the Schönstatt Movement. The website targets individuals seeking faith-based guidance and psychological support. Technically, the site is built on the SilverStripe CMS platform, uses common JavaScript libraries such as jQuery and Revolution Slider, and is hosted behind Cloudflare for DNS and security. The site is mobile-optimized with a moderate performance profile. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are provided, only a contact form. The WHOIS data is consistent with the website's origin and business type, showing no suspicious patterns. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

S

Spurensuche

spurensuche.info

64

Spurensuche.info is a German-based non-profit platform dedicated to Christian spirituality, offering a wide range of content including articles, prayers, meditations, and educational materials. The site targets individuals and groups interested in faith reflection and religious education, with multilingual support to reach a broader audience. The business model is primarily informational with some commercial activity through an affiliated shop. The website maintains a consistent brand identity and demonstrates good content quality and user experience.

The website schoenstatt-zentren.net serves as an informational platform for Schönstatthäuser, spiritual retreat centers in the German-speaking region. It targets individuals and event organizers seeking places for reflection, spiritual community, and events. The site is operated by a non-profit association, Arbeitsgemeinschaft Schönstätter Trägervereine und Institutionen, established around 2006. The content is primarily in German and focuses on providing detailed information about various Schönstatt houses, their locations, and contact details. The business model is informational and community-oriented, without direct commercial transactions on the site. Technically, the website is built on the Contao Open Source CMS platform, utilizing older but functional technologies such as jQuery 1.9.1 and Liquid Slider for UI elements. Hosting is provided by World4You Internet Services GmbH. The site shows moderate performance and basic mobile optimization. Accessibility and SEO features are present but could be improved. No advanced analytics or tracking services are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by base href https://), but lacks DNSSEC and security headers, which are recommended for enhanced protection. The use of an older jQuery version may pose some security risks. No forms are present on the main page, reducing attack surface. Privacy compliance is partial; a privacy policy page exists but no cookie consent mechanism is implemented. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and serves its niche well but would benefit from technical and security improvements to enhance user trust and compliance with modern standards.

P

Pater Kentenich Sekretariat

pater-kentenich.org

41

The Pater Kentenich Sekretariat website serves as an informational and spiritual resource dedicated to Father Joseph Kentenich, founder of the International Schoenstatt Movement. It supports the beatification process by providing prayer inspirations, written materials, and testimonies in multiple languages, targeting a global religious audience. The website is positioned as a niche non-profit entity focused on religious education and spiritual guidance. Technically, the site is built on the concrete5 CMS platform (version 5.6.4.0) and employs common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and offers a multilingual experience, although some technical aspects like security headers are missing. Security posture is moderate with HTTPS enforced but lacking advanced headers and incident response information. The absence of WHOIS data limits domain registration trust verification, but the website content and structure indicate legitimacy. Overall, the site is professionally presented with good content quality and user experience but could improve in privacy compliance and security best practices.

A

AWO Stadtverband Hanau e.V.

awo-hanau.de

64

AWO Stadtverband Hanau e.V. is a well-established non-profit organization based in Hanau, Germany, focused on family education, social projects, and community services. The organization offers a broad range of courses and support services for families, children, and adults, positioning itself as a key regional social service provider with a history dating back to 1962. The website serves as an information hub for their offerings and community engagement initiatives. Technically, the website is built on the Jimdo CMS platform, leveraging standard web technologies including jQuery and third-party widgets from POWr.io. It is hosted by Jimdo GmbH, with a moderate performance profile and good mobile optimization. The site includes cookie consent mechanisms and integrates social media channels for outreach. SEO and accessibility are basic but adequate for the target audience. From a security perspective, the site enforces HTTPS and includes cookie consent, but lacks advanced security headers and anti-CSRF protections in forms. No WAF or blocking mechanisms were detected, and no critical vulnerabilities were found in the visible content. Privacy compliance is good with a clear privacy policy and cookie policy aligned with GDPR requirements. Overall, the website presents a trustworthy and professional digital presence for a regional non-profit. Strategic improvements in security headers and form protections would enhance its security posture. The site is safe for general audiences and effectively supports the organization's mission and community engagement.

S

Sozialverband Deutschland e.V.

diebessererente.de

54

Sozialverband Deutschland e.V. (SoVD) is a well-established German non-profit organization dedicated to social justice and strengthening the statutory pension system. The website focuses on educating the public about the benefits of the statutory pension, advocating for policy improvements, and providing social counseling services. It targets German residents, pensioners, and socially vulnerable groups. The organization positions itself as a trusted voice in social policy with a strong digital presence and comprehensive content offerings. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries like jQuery, and integrates privacy-respecting tools such as Klaro for cookie consent and Matomo for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses privacy-friendly embedded content, and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy are not detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong privacy compliance and professional content. Strategic improvements in security headers and explicit incident response policies could further enhance trust and resilience.