Non-profit security reports

P

Projekt Pilgerheiligtum

pilgerheiligtum.de

50

Projekt Pilgerheiligtum is a well-established non-profit religious initiative based in Germany, focused on promoting the pilgrimage of the Mater Ter Admirabilis image within Christian communities. With over 25 years of history and a network of thousands of pilgrimage images, it serves as a spiritual and community-building platform. The website offers rich content, multilingual support, and various services including newsletters, online prayer sessions, and a shop for religious materials. Technically, the site is built on WordPress using Elementor and WooCommerce, with moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is strong, reflecting GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned within its niche.

S

SMJ-Bamberg

smj-bamberg.de

60

SMJ-Bamberg is a small non-profit youth organization based in Scheßlitz, Germany, focused on organizing children and youth activities such as camps, weekend retreats, and day trips. The organization operates on a volunteer basis and is part of the international Schönstatt Movement. The website serves as an official information portal for the community and interested participants. Technically, the website is built on the Wix platform, leveraging Wix's hosting and content management capabilities. The site is moderately optimized for mobile devices and has a good design quality with clear navigation. Security-wise, the site uses HTTPS and includes some security hardening scripts, but lacks comprehensive security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security documentation.

S

Schönstattbewegung Frauen und Mütter

s-fm.de

42

The Schönstattbewegung Frauen und Mütter website represents a small non-profit religious community focused on women and mothers within the Catholic Church in Germany. The organization provides spiritual support, events, publications, and community engagement. The website is well-structured, content-rich, and clearly targeted to its niche audience. The technical infrastructure is based on the concrete5 CMS platform, with standard web technologies such as jQuery and Bootstrap grid. The site is mobile-optimized and performs moderately well, though some modernization could improve performance and security. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and an outdated CMS version present potential risks. Privacy compliance is partially met with a privacy policy present but lacking cookie consent mechanisms. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features.

The Schönstatt Familienbewegung Deutschland is a German non-profit organization focused on supporting families and couples through community events, spiritual engagement, and educational materials. Their website reflects a well-structured platform offering event information, media resources, and networking opportunities tailored to their target audience of families and young couples. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and a compliant cookie consent mechanism, hosted by a reputable German provider. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and active consent management. Overall, the website presents a trustworthy and professional image consistent with its mission and audience.

S

Schönstatt-Bewegung Deutschland, PressOffice Schoenstatt

schoenstatt.de

53

The Schönstatt-Bewegung Deutschland operates a German-language website providing news, events, and spiritual resources related to the Schönstatt religious movement. The organization targets members and interested parties within the Christian community, offering livestreams, newsletters, and educational materials. The website reflects a medium-sized non-profit entity with a consistent brand presence and a focus on community engagement. Technically, the site uses a custom CMS with legacy JavaScript libraries such as jQuery 1.7.2 and jQuery UI 1.8.21. The site is served over HTTPS, but lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. Security posture is moderate; the site uses HTTPS and does not expose sensitive data, but the absence of security headers and use of outdated libraries present potential risks. No incident response or vulnerability disclosure policies are publicly available. WHOIS data is consistent and supports the legitimacy of the domain. Overall, the website is trustworthy and safe for general audiences, but could benefit from enhanced security practices and privacy compliance measures to improve user trust and regulatory adherence.

S

Sign Research Foundation

signresearch.org

56

The Sign Research Foundation is a small non-profit organization founded in 2015, dedicated to advancing research and education on signage to build safer, accessible, and thriving communities. It serves a diverse audience including sign manufacturers, designers, planners, and city officials. The foundation collaborates with industry associations and planners to improve sign codes and urban wayfinding. Technically, the website is built on WordPress using Elementor and Yoast SEO, with Google Analytics for tracking. The site is well-structured, mobile-optimized, and accessible, though performance is moderate. Security posture is good with HTTPS and anonymized analytics, but lacks DNSSEC and security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is high with clear contact information, social media presence, and trust signals such as testimonials and donation calls. Overall, the site is professional and trustworthy, with room for improvement in security headers and privacy compliance.

I

IPY 2007-2008

ipy.org

57

The website www.ipy.org represents the International Polar Year initiative, a collaborative international scientific effort focused on polar region research. The site provides educational resources, news, event information, and project data related to polar science. The target audience includes educators, researchers, participants, and the general public interested in polar studies. The website uses Joomla CMS with K2 components and includes legacy technologies such as Flash and older JavaScript libraries, indicating a need for modernization. Analytics tools like Google Analytics and Piwik are employed, but privacy compliance is minimal, with no visible privacy or cookie policies. Security posture is weak due to lack of HTTPS enforcement, absence of security headers, and use of deprecated technologies. WHOIS data is unavailable, limiting domain trust verification. Overall, the site is functional and content-rich but requires significant improvements in security, privacy, and technical modernization to enhance trust and compliance.

N

Norsk entomologisk forening

entomologiskforening.no

52

Norsk entomologisk forening is a Norwegian non-profit organization dedicated to promoting interest and study of entomology. The website serves as an information hub for members and enthusiasts, offering event announcements, educational content, and membership information. The organization targets hobbyists, researchers, and the general public interested in insects in Norway. Technically, the site is built on WordPress using Elementor and related plugins, providing a modern and responsive user experience with moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security best practices.

B

BirdLife Norge

fuglevennen.no

61

Fuglevennen.no is a Norwegian non-profit website dedicated to birdwatching, nature education, and conservation. It is a collaborative effort primarily published by BirdLife Norge and supported by academic institutions such as the Naturmuseum og botanisk hage ved UiA and Skolelaboratoriet i realfag ved UiB. The site offers bird species information, community activities, a biannual magazine, and educational resources targeting nature enthusiasts and the general public interested in ornithology. The website is well-branded, content-rich, and maintains a consistent professional appearance aligned with its mission. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Font Awesome, and Matomo analytics configured to disable cookies, reflecting a moderate level of digital maturity and privacy awareness. The site is mobile-optimized, accessible, and provides a good user experience with clear navigation and relevant content. However, there is no detected CMS or hosting provider information, and performance is moderate. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies beyond a basic cookie policy. No forms appear to collect sensitive personal data except for login and question submission forms. The absence of WHOIS data for the domain is a notable concern, reducing the trustworthiness score, although the strong organizational affiliations mitigate this somewhat. There are no signs of vulnerabilities or malicious content. Overall, Fuglevennen.no presents a trustworthy and professional platform for birdwatching and nature education in Norway, but it would benefit from enhanced security headers, clearer privacy compliance measures, and verification of domain registration details to improve trust and compliance.

U

Unitätsarchiv der Evangelischen Brüder-Unität Herrnhut

unitaetsarchiv.de

55

The Unitätsarchiv der Evangelischen Brüder-Unität Herrnhut is a specialized archival institution based in Germany, serving as the central archive for the worldwide Brüder-Unität and the European Continental Province. The website provides access to archival resources, restoration project information, public lectures, and publications. It targets researchers, historians, and community members interested in the Brüder-Unität heritage. The institution operates as a non-profit entity with a small organizational size and a focused niche in historical archival services. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies such as jQuery and FontAwesome. The site is mobile-optimized with good navigation and SEO practices, though hosting details and SSL configuration specifics are not provided. Cookie consent mechanisms are implemented, reflecting GDPR compliance. From a security perspective, the website shows basic best practices such as cookie consent and no visible sensitive data exposure. However, it lacks explicit security headers and incident response policies. No analytics or advertising scripts were detected, indicating minimal user tracking and a privacy-conscious approach. Overall, the website is professional, trustworthy, and well-suited for its archival mission. Recommendations include enhancing security headers, publishing a security policy, and clarifying SSL configurations to improve security posture and user trust.

E

Evangelische Mission in Solidarität (EMS)

ems-online.org

55

The Evangelische Mission in Solidarität (EMS) is a well-established non-profit organization based in Germany, focused on fostering global cooperation among churches and mission societies across Asia, Africa, Europe, and the Middle East. Their website reflects a mature digital presence with clear communication of their mission, partnership model, and key services including volunteer programs, educational initiatives, and fundraising. The organization maintains a medium-sized footprint with a network of 25 churches and 5 mission societies, emphasizing solidarity and sustainable development. Technically, the website is built on TYPO3 CMS, hosted by a reputable provider, and incorporates modern consent management and analytics tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and consent mechanisms, though some security headers and policies could be enhanced. Overall, the site is professional, trustworthy, and accessible, supporting the organization's credibility and outreach efforts.

E

Evangelische Brüder-Unität Herrnhuter Brüdergemeine

herrnhuter-spenden.de

57

The website www.herrnhuter-spenden.de serves as a donation portal for the Evangelische Brüder-Unität Herrnhuter Brüdergemeine, a religious non-profit organization based in Germany. It facilitates philanthropic support for various charitable projects including educational, health, environmental, and social initiatives. The site prominently features affiliated institutions such as Herrnhuter Missionshilfe and the Graf-Zinzendorf-Stiftung, positioning itself as a trusted platform for donors interested in religious and social causes. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap and FontAwesome for responsive and accessible design. The site demonstrates good mobile optimization and clear navigation, with a cookie consent mechanism indicating GDPR compliance. However, no explicit security headers or incident response policies are published, suggesting room for improvement in security transparency. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. No WAF or blocking mechanisms are detected, and no vulnerabilities or tracking scripts are evident. The WHOIS data aligns well with the website's business claims, enhancing trustworthiness. Overall, the security posture is solid but could benefit from enhanced header configurations and published policies. The overall risk assessment is low, with the site presenting a professional, trustworthy, and compliant presence suitable for its non-profit mission. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and enhancing accessibility features to further strengthen the platform's security and compliance posture.

E

Evangelische Kirche in Deutschland (EKD)

fundus-medien.de

58

Fundus Medien is a cooperative image and media database operated by the Evangelische Kirche in Deutschland (EKD) and 15 regional churches. It provides free access to a large collection of images, graphics, and drawings for church and diaconal media and public relations work. The website targets church media professionals and volunteers, offering a user-friendly platform with registration and upload capabilities. Technically, the site is built on TYPO3 CMS, uses Cookiebot for GDPR-compliant cookie consent, and Matomo for privacy-respecting analytics. The site is well-structured, mobile-optimized, and professionally designed. Security practices include HTTPS enforcement and cookie consent blocking mechanisms, though some security headers could be improved. Overall, the site demonstrates a strong commitment to privacy and compliance, with clear contact information and trust signals from official church domains.

The website 'Ehrenamt Evangelisch Engagiert' serves as an informational and community platform supporting voluntary engagement within the Evangelical Lutheran Church in Bavaria. It provides news, resources, and coordination services for volunteers and church members, positioning itself as a niche non-profit entity focused on church-related volunteerism. The site is professionally designed with consistent branding and clear navigation, targeting German-speaking church volunteers and coordinators. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as Leaflet for maps and Matomo for privacy-conscious analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security posture is solid with HTTPS enforced and minimal cookies used, although security headers are not explicitly detected. Privacy compliance is good, with a clear cookie banner and privacy policy in German. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data aligns with the website's organizational claims, showing consistent domain registration and DNS management. Contact information is transparent and professional, including official church email and phone numbers. Social media presence is limited to Facebook. Overall, the website demonstrates a mature digital presence for a small non-profit church entity, with good security and privacy practices but room for improvement in security headers and incident response disclosures.

P

Panthera

panthera.org

64

Panthera is a well-established non-profit organization dedicated to the conservation of wild cat species globally. Founded in 1998, it operates across more than 35 countries with partnerships and scientific research to protect 40 wild cat species. The website reflects a mature digital presence with strong branding, comprehensive content, and multiple trust indicators including charity ratings and social media engagement. The organization primarily targets conservation supporters, donors, researchers, and the general public interested in wildlife preservation. Technically, the website is built on Drupal 10 and integrates modern web technologies including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Fundraise Up for donations. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and reCAPTCHA implemented, but could be improved by enabling DNSSEC and adding security headers. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and a vulnerability disclosure mechanism. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism despite tracking scripts. Overall, Panthera's website is professional, trustworthy, and well-suited for its mission. Strategic improvements in privacy compliance and security policies would enhance its risk posture and user trust.

N

North Carolina Zoo

nczoo.org

71

The North Carolina Zoo is a well-established non-profit organization dedicated to wildlife conservation, education, and public engagement. The website reflects a mature digital presence with comprehensive content about zoo visits, educational programs, conservation efforts, and community involvement. It targets families, educators, and conservation supporters, positioning itself as a leading natural habitat zoo with over 50 years of history and AZA accreditation. Technically, the site is built on Drupal CMS and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and various tracking and marketing tools. The site is mobile-optimized, accessible, and performs moderately well, with good SEO and user experience design. Security posture is strong with HTTPS enforced, security headers present, and secure form handling. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy and professional, with no critical vulnerabilities detected. The domain WHOIS data is privacy protected, which is justified for this type of organization. Strategic recommendations include publishing security policies, vulnerability disclosure information, and enhancing transparency around data protection contacts.

F

Frankfurt Zoological Society

fzs.org

69

Frankfurt Zoological Society is a well-established non-profit organization dedicated to wildlife and ecosystem conservation, focusing on protected areas and wilderness preservation. Founded in 1858, it operates internationally with projects in 18 countries and maintains a strong presence through partnerships and subsidiaries such as the Frankfurt Zoological Society – U.S. and Zoo Frankfurt. The organization relies on donations, sponsorships, and memberships to fund its conservation efforts and engages a broad audience including conservationists, donors, and the general public. Technically, the website is built on WordPress using modern plugins like Contact Form 7 and Relevanssi Live Search, with a moderate performance profile and good mobile optimization. The site employs HTTPS and domain management best practices but lacks DNSSEC and explicit security headers, which could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and incident response information suggests room for enhancement. The domain registration is consistent with the organization's history, registered since 1997 with a reputable registrar, supporting high legitimacy. Overall, the website is professional, trustworthy, and content-rich, serving its audience effectively. Strategic improvements in security headers, cookie consent, and explicit security policies would further strengthen its security and compliance posture.

W

Wildlife Protection Solutions

wildlifeprotectionsolutions.org

65

Wildlife Protection Solutions (WPS) is a small international non-profit organization dedicated to leveraging technology for the conservation of endangered species and ecosystems. Their core activities include deploying advanced AI and sensor technologies for real-time monitoring of protected areas, as well as creating innovative educational and outreach programs to raise awareness and funding. The organization collaborates with technology partners such as EarthRanger and Smart Conservation Tools to enhance their conservation efforts. The website is built on Squarespace, featuring a professional design with good mobile optimization and clear navigation, supporting their mission and outreach effectively. From a technical perspective, the website uses modern web technologies including Google Fonts, Google Tag Manager, and MarketingCloudFX for marketing and analytics. The site is hosted on Squarespace, ensuring reliable infrastructure and HTTPS with HSTS enabled, contributing to a strong security posture. However, the absence of explicit security headers beyond HSTS and lack of privacy and cookie policies indicate areas for improvement in compliance and security transparency. Security-wise, the site enforces HTTPS and HSTS, with no visible vulnerabilities or exposed sensitive data. Yet, the lack of incident response contacts, vulnerability disclosure policies, and privacy compliance documentation presents gaps that could affect user trust and regulatory adherence. The WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness, though the website content and partnerships support legitimacy. Overall, WPS demonstrates a solid digital presence aligned with its conservation mission but should prioritize adding privacy and cookie policies, security disclosures, and incident response information to enhance compliance and trust. Addressing these gaps will strengthen their security posture and user confidence, supporting their important environmental work.

W

World Wildlife Fund

worldwildlife.org

70

World Wildlife Fund (WWF) is a globally recognized non-profit organization dedicated to wildlife conservation and endangered species protection. The website serves as a comprehensive platform to educate the public, engage supporters, and facilitate donations and advocacy efforts. It positions itself as a leader in environmental sustainability and conservation efforts worldwide. The site targets a broad audience including environmental advocates, donors, educators, and the general public interested in nature preservation. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Tag Manager for analytics and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not publicly disclosed. Security-wise, the site enforces HTTPS, uses a consent management platform to comply with privacy regulations, and avoids exposing sensitive data. However, the absence of a vulnerability disclosure policy or security.txt file and lack of visible Data Protection Officer contact details represent areas for improvement. The WHOIS data is malformed and unavailable, which limits domain trust verification but the website's professional presentation and branding mitigate concerns. Overall, WWF's website is a well-maintained, secure, and privacy-conscious platform that effectively supports its mission. Strategic recommendations include publishing detailed security policies, providing vulnerability disclosure channels, and enhancing transparency around data protection roles to further strengthen trust and compliance.

A

Akademie des Versicherers im Raum der Kirchen

autobahnkirche.de

60

The website autobahnkirche.de represents a non-profit organization focused on providing spiritual rest stops along German highways, known as Autobahnkirchen. The site is managed by the Akademie des Versicherers im Raum der Kirchen, supported by entities such as HUK-Coburg and Deutsche Telekom. The business model centers on offering travelers places for reflection, rest, and spiritual comfort, with information about locations and events. The website content is well-structured, professionally presented, and targets travelers and visitors interested in spiritual respite. Technically, the site is built using Adobe Experience Manager CMS, with standard web technologies including JavaScript and CSS. Hosting appears to be managed by Deutsche Telekom, inferred from nameservers. Performance is moderate with basic mobile optimization and accessibility features. The site uses Dynatrace for monitoring user experience and performance. SEO and meta tags are basic but sufficient for the site's scope. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating awareness of privacy compliance. However, no explicit security headers were detected in the provided data, and no incident response or security policy pages are present. No forms or contact emails are visible on the main page, limiting direct user data collection. The WHOIS data aligns with the website's organizational claims, showing a consistent and legitimate registration. Overall, the website presents a low-risk profile with a good level of professionalism and compliance for a non-profit entity. Recommendations include enhancing security headers, improving mobile and accessibility features, and adding explicit security and incident response policies to strengthen trust and compliance.

M

Markgrafenkirchen e.V.

markgrafenkirchen.de

59

Markgrafenkirchen e.V. is a non-profit organization dedicated to the cultural, spiritual, and touristic promotion of the Markgrafenkirchen churches in Upper Franconia, Germany. The website serves as a comprehensive resource offering detailed information about nearly 60 churches, including photos, events, tours, and educational materials. The organization is positioned as a niche cultural heritage promoter with a strong regional focus and supported by European Union funding. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and SEO optimization. Security posture is solid with HTTPS and some security plugins, though improvements can be made in cookie consent and explicit security policies. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

A

ANA Allgemeiner Norddeutscher Arbeitgeberverband e. V.

anaev.de

54

ANA Allgemeiner Norddeutscher Arbeitgeberverband e. V. is a regional non-profit employer association in Northern Germany providing labor law advisory services, legal representation, and political interest representation for its member companies. The website is professionally designed using TYPO3 CMS and modern web technologies, offering clear navigation and relevant content targeted at member companies and stakeholders. The technical infrastructure is moderate in performance with good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS implied but could be improved by adding explicit security policies and incident response contacts. Overall, the website is trustworthy and credible with strong partner networks and clear contact information.

E

Evangelisch-Lutherische Kirche in Bayern (ELKB)

uebernachtungshaeuser-elkb.de

44

The website www.uebernachtungshaeuser-elkb.de serves as an informational portal for the Evangelisch-Lutherische Kirche in Bayern's network of group accommodations. It targets church groups, youth groups, families, and seminar attendees seeking lodging in scenic Bavarian locations. The site offers detailed descriptions of various types of houses, including self-catering and fully serviced options, and promotes community and spiritual experiences. Technically, the site is built on Drupal 10, uses Bootstrap for responsive design, and integrates Matomo analytics with privacy-conscious settings. The Klaro consent manager ensures GDPR-compliant cookie handling. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and policies are absent. No contact emails or phone numbers are directly published, relying on a contact form instead. Overall, the site is professional, trustworthy, and well-suited for its non-profit church audience.

S

Soli deo gloria - Gott allein sei Ehre

solideo.de

10

Soli deo gloria is a non-profit initiative focused on Evangelical church music in Bavaria, Germany. The website provides information about church music professions, events, instruments, and associations, targeting church musicians and members of the Evangelical Lutheran Church. The platform is niche and regionally focused, serving as a cultural and religious resource. Technically, the site is built on Drupal 10 with Bootstrap components, hosted on German servers, and optimized for mobile devices with good navigation and content quality. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professionally presented, and safe for general audiences.

E

Evangelische Kirche in Bayern (ELKB) implied

offene-kirchen-bayern.de

10

The website offene-kirchen-bayern.de serves as an informational portal for open evangelical churches in Bavaria, Germany. It is affiliated with the Evangelische Kirche in Bayern (ELKB) and provides visitors with details about churches open on weekdays, special church types, and related tourism information. The site targets the general public interested in religious and cultural visits. Technically, it is built on Drupal 10 with modern libraries such as Leaflet.js for interactive maps and Bootstrap for responsive design. The site demonstrates good content quality, clear navigation, and consistent branding aligned with ELKB. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security headers are recommended.

E

Evangelisch-Lutherische Kirche in Bayern (ELKB) implied

berggottesdienste.de

10

Berggottesdienste.de is a niche non-profit website affiliated with the Evangelical Lutheran Church in Bavaria, providing information and promotion of outdoor mountain church services across various Bavarian regions. The site targets churchgoers and visitors interested in religious events in nature, offering a searchable database and links to related church tourism resources. Technically, the website is built on Drupal 10 with Bootstrap, hosted via kunde24.de, and demonstrates good mobile optimization and navigation clarity. Security posture is solid with HTTPS enforced, though lacking advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, safe, and professionally presented, serving its community-focused mission effectively.

V

Verein Szene Kloten

szenekloten.ch

46

Verein Szene Kloten is a local non-profit cultural association based in Kloten, Switzerland, organizing concerts, theater, art exhibitions, readings, multimedia shows, and managing the local museum. Supported by the city of Kloten, the Canton of Zurich's cultural office, sponsors, and members, it serves a community-oriented audience interested in cultural events. The website reflects a well-structured, content-rich platform with clear navigation and consistent branding, targeting local residents and culture enthusiasts. Technically, the site runs on Joomla CMS with modern libraries like jQuery and Google Tag Manager for analytics, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections, but lacks explicit cookie consent and published security policies. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security transparency are recommended.

The International Arctic Social Sciences Association (IASSA) is a small, established non-profit organization focused on Arctic social sciences research and collaboration. Founded in 2010, it operates through elected councils and a general assembly, providing services such as organizing international congresses, publishing newsletters, and facilitating mentorship and awards programs. The website reflects a professional and consistent brand targeting researchers and academics interested in Arctic social sciences. Technically, the site uses Joomla CMS with Bootstrap and jQuery, hosted behind Cloudflare DNS, and includes Google Analytics for visitor tracking. While the site is mobile-optimized and well-structured, it lacks key privacy and cookie policies and does not implement DNSSEC or security headers, which are important for enhancing security and compliance. The security posture is moderate with room for improvement, especially in transparency and user data protection. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

B

Bayerischer Musikrat

bayerischer-musikrat.de

45

The Bayerischer Musikrat is a prominent non-profit cultural organization dedicated to promoting music culture in Bavaria. It operates various projects, competitions, and funding programs targeting musicians, music associations, and cultural stakeholders. The website reflects a well-established entity with a clear focus on community engagement and cultural enrichment. Technically, the site employs a modern tech stack including Bootstrap and jQuery, with a cookie consent mechanism via Usercentrics, indicating GDPR compliance awareness. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Overall, the site is professional, trustworthy, and serves its target audience effectively.

B

BDKJ Würzburg

bdkj-wuerzburg.de

51

BDKJ Würzburg is a regional non-profit umbrella organization representing 11 Catholic youth associations within the Diocese of Würzburg, Germany. The organization focuses on youth engagement in church and society, providing services such as youth political participation, social projects, and world volunteer services. The website reflects a well-structured, professional presence with clear branding and comprehensive content tailored to its target audience of children and youth involved in church activities. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap, jQuery, and FontAwesome. It incorporates privacy-conscious analytics via Matomo and employs Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected. The domain WHOIS data is consistent and legitimate, supporting the trustworthiness of the site. Overall, the website presents a low-risk profile with strong privacy compliance and good technical implementation. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

Stiftungsarchive in Deutschland operates as a specialized informational portal dedicated to providing access and research capabilities for foundation archives across Germany. The website aggregates archival data covering a broad thematic spectrum including politics, culture, science, economy, social affairs, and sports. It serves researchers, historians, archivists, and the general public interested in foundation archives. The portal is supported by reputable organizations such as the Bundesverband Deutscher Stiftungen and Humboldt-Universität zu Berlin, enhancing its credibility and trustworthiness. Technically, the website appears to be built on a Ruby on Rails framework, utilizing libraries such as jCarousel and Turbolinks for user interface enhancements. The site demonstrates moderate performance and basic mobile optimization. Security measures include CSRF token implementation in forms, but lack visible HTTP security headers and cookie consent mechanisms. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site is accessible without WAF or blocking mechanisms, but could improve by implementing standard security headers, enforcing HTTPS, and publishing security policies. Privacy compliance is partially met with a privacy policy page but lacks cookie consent and detailed GDPR indicators. Overall, the site maintains a good level of professionalism and trustworthiness with no detected vulnerabilities or suspicious content. Strategically, the portal should focus on enhancing security posture and privacy compliance to better protect user data and meet regulatory requirements. Improving technical infrastructure and mobile responsiveness would also benefit user experience and accessibility.

Landjugend Rheinland-Nassau is a well-established non-profit youth association representing the interests of young people in rural areas of northern Rhineland-Palatinate, Germany. The organization has a strong regional presence with a 50-year history, offering events, seminars, and projects to engage and support its target audience. The website reflects this mission with relevant content, event calendars, and active social media channels. Technically, the site is built on WordPress using popular plugins for SEO, events management, and accessibility, indicating a moderate to good level of digital maturity. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, demonstrating attention to privacy and legal compliance. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though improvements could be made by adding security headers and a vulnerability disclosure policy. Overall, the website is professional, trustworthy, and serves its community effectively.

B

Bund der Deutschen Landjugend e.V. (BDL)

junglandwirte.de

56

The website junglandwirte.de represents the 'Projekt Junglandwirt:innen', a cooperative initiative by the Bund der Deutschen Landjugend (BDL) and the Deutschen Bauernverband, aimed at supporting young farmers and winemakers in Germany. It provides a comprehensive platform for networking, education, and career development, with a strong emphasis on sustainable agriculture, succession planning, and empowerment of women in the agricultural sector. The site is well-positioned as a central hub for young agrarians, backed by reputable organizations and funding bodies.

A

AgrarBündnis

kritischer-agrarbericht.de

55

The Kritischer-Agrarbericht.de website serves as the official online presence for the Kritischer Agrarbericht, a long-standing non-profit publication by the AgrarBündnis focused on critical agricultural policy analysis in Germany. The site provides access to annual reports and special editions, targeting an audience interested in agricultural policy, sustainability, and socio-economic aspects of farming. Technically, the site is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and FontAwesome, hosted on a professional Swiss hosting provider (cyon.ch). The website demonstrates good content quality, clear navigation, and basic mobile optimization. Privacy compliance is well addressed with a cookie consent mechanism and a dedicated privacy policy page in German. However, explicit contact information, terms of service, and security policies are not publicly available, which could be improved for transparency. Security posture is moderate with no visible security headers or advanced protections, but no critical vulnerabilities were detected. Overall, the site is trustworthy and professionally maintained, suitable for its non-profit informational purpose.

The Bundesverband der Regionalbewegung e.V. (BRB) is a German non-profit umbrella organization and competence network dedicated to promoting regionality and strengthening regional economic cycles. With approximately 360 member organizations, it serves as a key voice and network for regional initiatives, small and medium enterprises, municipal initiatives, and agricultural and food sectors. The website reflects a well-established organization celebrating over 20 years of activity, providing information, networking, and advocacy services. Technically, the site is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome, and integrates Google Analytics for visitor insights. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security posture is moderate; while HTTPS and CSRF tokens are present, explicit security headers and incident response policies are not published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though GDPR-specific details are basic. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

D

Diakoniewerk Martinsberg e.V.

dw-martinsberg.de

47

Diakoniewerk Martinsberg e.V. is a German non-profit organization focused on providing social and diaconal services to the community. The website serves as an informational platform targeting a general audience interested in social support and community assistance. The organization maintains a moderate market position within the regional non-profit sector, emphasizing human-centric services. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a standard but modern CMS infrastructure with good SEO practices. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is weak due to absence of security headers and incident response information, exposing potential risks. Overall, the site is accessible without WAF or blocking mechanisms, but improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

L

Lebenshilfe Hof

lebenshilfe-hof.de

54

Lebenshilfe Hof is a regional non-profit organization based in Germany, providing a range of social support services including early intervention, educational programs, therapeutic centers, workshops, and housing assistance. The website serves as an official information portal for their services and community engagement. The organization targets individuals and families seeking support in the Hof region, emphasizing inclusivity and social welfare. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Google Tag Manager for analytics and Usercentrics for GDPR-compliant consent management. The site demonstrates good mobile optimization and accessibility features, including integration with ReadSpeaker for text-to-speech functionality. Hosting is managed via agenturserver, a professional hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service documents. No vulnerability disclosure or incident response information is available, which could be improved to enhance trust and compliance. No suspicious or malicious activity was detected, and the content is safe for general audiences. Overall, Lebenshilfe Hof's website is professional and functional, supporting its mission as a non-profit social service provider. Strategic improvements in privacy documentation, security headers, and contact transparency would strengthen its security posture and compliance standing.

K

Kinder-Herzen-Glücklich machen e.V.

kinderherzen-gluecklich-machen.de

45

Kinder-Herzen-Glücklich machen e.V. is a German non-profit organization dedicated to supporting the healthy and happy development of children, particularly in kindergartens within the Hof and Wunsiedel regions. The organization focuses on aiding children from socially disadvantaged backgrounds, migrants, and those affected by crises such as the Ukraine war and the COVID-19 pandemic. Their efforts include supporting educators, running social and emotional development projects, and fostering community engagement through donations and volunteerism. The website reflects a well-established regional presence with clear communication and donation mechanisms. Technically, the website is built on WordPress with common plugins such as LayerSlider and Contact Form 7. It employs HTTPS and a cookie consent banner, indicating basic privacy compliance. The site is moderately optimized for performance and mobile use, though some security headers are missing. No advanced analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response information. The absence of security headers and vulnerability disclosures indicates room for improvement. The WHOIS data aligns with the website's legitimacy, showing consistent registration and no privacy protection, appropriate for a non-profit. Overall, the website is professional, trustworthy, and focused on its charitable mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to strengthen compliance and trust.

Pfarrgemeinde St. Franziskus is a small non-profit religious organization serving the local community in Schwarzenbach an der Saale, Germany. The website provides information about church services, community groups, and events, targeting local parishioners and visitors. The site is built on WordPress and uses common plugins to manage content and photo galleries. The technical infrastructure is standard for a small community website, with HTTPS enabled and moderate performance. However, the site lacks visible privacy and cookie policies, contact emails, and phone numbers, which limits user trust and privacy compliance. Security posture is adequate but could be improved by adding security headers and incident response information.

C

Caritas gGmbH St. Heinrich und Kunigunde

wohnen-fuer-erwachsene.de

59

Wohnen für Erwachsene is a German non-profit social care organization providing residential and supportive living services for adults with disabilities. The website is professionally designed, well-structured, and targets adults with disabilities and their families in the Lichtenfels region. It is affiliated with Caritas gGmbH, a recognized social service provider, enhancing its credibility and trustworthiness. The site offers detailed information about its facilities, services, and career opportunities, supported by social media presence on Facebook and Instagram. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies including service workers for progressive web app capabilities and Usercentrics for GDPR-compliant cookie consent management. The site is hosted on internet1.de nameservers and uses HTTPS, ensuring secure communication. Performance and mobile optimization are moderate to good, with basic accessibility features. From a security perspective, the website enforces HTTPS and uses a consent management platform, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website content and business, indicating legitimacy. Overall, the site demonstrates a solid security posture for a non-profit organization but could improve by adding explicit security headers and incident response information. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and continuous monitoring of third-party scripts to maintain compliance and security.

N

National Biodiversity Network UK Atlas

nbnatlas.org

55

The National Biodiversity Network UK Atlas operates the NBN Atlas website, which is the UK's largest repository of publicly available biodiversity data. The platform serves researchers, conservationists, and environmental stakeholders by providing access to over 300 million species occurrence records and enabling data sharing and analysis. The organization is positioned as a key non-profit entity in the biodiversity data sector within the UK, supported by a broad network of over 180 partners. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Google analytics tools, hosted on AWS infrastructure. The site demonstrates good digital maturity with responsive design and SEO optimization, though some accessibility and security header improvements are possible. Security posture is solid with HTTPS enforced, but lacks DNSSEC and some security headers. Privacy compliance is moderate with a cookie consent mechanism but no explicit privacy or terms pages detected in the provided content. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or adult content.

N

National Biodiversity Network

nbn.org.uk

55

The National Biodiversity Network (NBN) is a UK-based non-profit organization dedicated to the collection, sharing, and dissemination of biodiversity data. It operates a large partnership network with over 200 members including conservation organizations, government bodies, and voluntary groups. The NBN Atlas serves as a comprehensive data portal with over 300 million species occurrence records. The website reflects a mature digital presence with a WordPress CMS, modern SEO practices, and integration of social media channels to engage its target audience of environmental professionals and citizen scientists. Technically, the site uses common frameworks and libraries such as Bootstrap, jQuery, and WooCommerce for e-commerce capabilities, with Google Analytics and Tag Manager for analytics and tracking. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers and policies could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. Overall, the site is professional, trustworthy, and well-positioned within its niche, though it would benefit from enhanced transparency around privacy and security policies.

E

Eckstein - das Haus der Evang.-Luth. Kirche in Nürnberg

eckstein-evangelisch.de

43

Eckstein is a medium-sized non-profit institution serving as the heart of the Evangelical Lutheran Church in Nuremberg. It offers a broad range of educational, counseling, and community services, hosting events and providing meeting spaces in the city center. The website reflects a well-structured, professionally designed platform that effectively communicates its mission and services to a general audience interested in evangelical church activities. Technically, the site is built on TYPO3 CMS with Bootstrap and incorporates modern web technologies ensuring good performance, mobile optimization, and accessibility. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism. Security posture is solid with HTTPS and privacy-conscious analytics, though additional security headers and incident response information could enhance trust. Overall, the site is trustworthy, safe, and professionally maintained, supporting the institution's community-focused mission.

E

Evangelische Brüder-Unität

herrnhut-entdecken.de

53

The website www.herrnhut-entdecken.de represents the Evangelische Brüder-Unität, a non-profit religious and cultural organization based in Herrnhut, Germany. It provides visitors with information about Herrnhut, exhibitions, guided tours, and related cultural heritage. The site targets a general audience interested in religious history and cultural exploration. The business model is informational and community outreach focused, with a niche market position within religious and cultural tourism. Technically, the website is built on TYPO3 CMS, utilizing standard web technologies such as Bootstrap and FontAwesome. The site is moderately performant, mobile-optimized, and has good SEO practices. Accessibility is basic but present. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected in the HTML content. Cookie consent is implemented, and privacy policy is available, indicating GDPR compliance. However, there is no visible incident response or security policy documentation. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is consistent and indicates a legitimate domain registration. Overall, the website is professional, trustworthy, and suitable for its intended audience. Strategic improvements could focus on enhancing security headers, adding terms of service and incident response policies, and improving accessibility features to strengthen compliance and user trust.

G

Graf-Zinzendorf-Stiftung

zinzendorf.de

55

The Graf-Zinzendorf-Stiftung is a small non-profit foundation based in Germany focused on promoting the legacy of Nikolaus Ludwig Graf von Zinzendorf, particularly in relation to church, mission, and society. The foundation supports projects primarily connected to the Evangelische Brüder-Unität – Herrnhuter Brüdergemeine and engages donors and supporters through its website. The site is well-structured, professionally designed, and provides clear contact information and privacy compliance features, including a cookie consent mechanism. Technically, the website is built on TYPO3 CMS with modern web technologies and demonstrates good mobile optimization and user experience. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit security policies or incident response information. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. The domain WHOIS data is limited but consistent with the foundation's profile, showing no suspicious patterns. Overall, the website is trustworthy, safe, and serves its target audience effectively.

H

Herrnhuter Missionshilfe e.V.

herrnhuter-missionshilfe.de

55

Herrnhuter Missionshilfe e.V. is a German non-profit mission organization affiliated with the Evangelische Brüder-Unität. It supports over 60 projects across 9 countries, working closely with local church provinces and partners. The website serves as an information hub for their mission work, fundraising, and community engagement, targeting a general audience interested in religious mission and charitable activities. Technically, the site is built on TYPO3 CMS with responsive design and modern web standards, providing a good user experience and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

Norsk Zoologisk Forening is a well-established Norwegian non-profit organization dedicated to zoology and wildlife interests. Founded in 2001, it serves a community of zoology enthusiasts and researchers by providing publications such as the Fauna journal, organizing events, and promoting species mapping and conservation efforts. The website reflects a professional and consistent brand presence with clear calls to action for membership and engagement. Technically, the site is built on WordPress using a modern stack of plugins including Yoast SEO, Google Tag Manager, and GDPR compliance tools. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Performance is moderate, with room for improvement in security headers and explicit incident response policies. Security posture is solid with HTTPS enforced and privacy compliance well addressed through cookie consent mechanisms and a comprehensive privacy policy. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a vulnerability disclosure policy and incident response information suggests areas for enhancement. Overall, the site presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to sustain trust and compliance.

N

Norges sopp- og nyttevekstforbund

soppognyttevekster.no

54

Norges sopp- og nyttevekstforbund is a Norwegian non-profit organization dedicated to promoting the use and knowledge of mushrooms and useful plants. Established in 2004, it operates nationally with local member associations, offering educational courses, organizing events, and publishing related content. The website serves as a hub for members and the public, providing resources, event calendars, and an online store. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including Bootstrap and FontAwesome. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS and secure login mechanisms, but could benefit from improved security headers and updated libraries. Privacy compliance is evident with a comprehensive privacy policy, though cookie consent mechanisms are lacking. Overall, the site is trustworthy, professional, and well-aligned with its non-profit mission.

N

Norsk Botanisk Forening

botaniskforening.no

43

Norsk Botanisk Forening is a well-established Norwegian non-profit organization dedicated to promoting knowledge and conservation of native flora. The website serves as an educational platform offering resources, activities, and projects aimed at nature enthusiasts and the general public. The organization has a strong community focus with volunteer-driven initiatives and a clear mission to protect plant biodiversity. Technically, the site is built on WordPress with modern plugins and integrations such as LearnDash for educational content and Google Maps for location services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, but lacks some advanced security headers and published policies, which are recommended for compliance and trust. Overall, the site is trustworthy and professional, though it would benefit from adding privacy and cookie policies to enhance GDPR compliance and user transparency.

B

BirdLife Norge

birdlife.no

63

BirdLife Norge is a well-established Norwegian non-profit organization focused on bird conservation and environmental protection. The website reflects a mature digital presence with a clear focus on education, community engagement, and conservation projects. The organization leverages modern web technologies such as Bootstrap and jQuery to deliver a responsive and accessible user experience. Social media integration is evident, enhancing outreach and community interaction. However, the website lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security posture is moderate with no visible security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website is professional, trustworthy, and serves its target audience effectively.