Non-profit security reports

S

Sabima

sabima.no

51

Sabima is a Norwegian non-profit environmental organization dedicated to halting biodiversity loss and conserving natural habitats such as forests, wetlands, and cultural landscapes. The website serves as a platform for advocacy, public education, and fundraising, featuring campaigns, news, events, and membership information. Sabima holds a strong position in the Norwegian environmental NGO sector, collaborating with multiple member associations and maintaining active social media engagement. Technically, the website is built on WordPress with WooCommerce integration for e-commerce functionality. It employs modern web technologies including Google Analytics for tracking, Google Maps API for geospatial features, and Yoast SEO for search engine optimization. The site is mobile-optimized and demonstrates good performance and accessibility standards, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS with a strong SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response plan. Privacy compliance is generally good, with a comprehensive privacy policy and terms of service, but it lacks a visible cookie consent mechanism. The WHOIS data is unavailable due to Norid's privacy policy for .no domains, which is typical and not suspicious. Overall, Sabima's website is professional, trustworthy, and well-maintained, with minor improvements recommended in security headers and cookie consent to enhance compliance and user trust.

D

Deutsches Liturgisches Institut

liturgie.de

44

The Deutsches Liturgisches Institut is a specialized non-profit organization dedicated to liturgical research, education, and resource provision primarily for German-speaking clergy, church musicians, and laypersons interested in liturgy. The website serves as a portal for accessing publications, courses, events, and practical liturgical materials. The institute maintains a consistent and professional online presence with clear contact information and institutional references. Technically, the site is built on WordPress with common plugins like jQuery and RoyalSlider, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The absence of public WHOIS data is consistent with privacy protection practices common for non-profits. Overall, the site is trustworthy, safe, and well-aligned with its mission.

D

Die evangelische Kirche

kirche-entdecken.de

44

Kirche-entdecken.de is a German non-profit educational website operated by the Evangelische Kirche, targeting children to explore and learn about the Christian faith through interactive content, games, quizzes, videos, and crafts. The platform is well-established and sponsored by major regional church organizations, positioning it as a trusted resource for religious education for children in Germany. Technically, the site is built on the TYPO3 CMS platform, uses modern web technologies, and is hosted on German infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and privacy-respecting analytics via Matomo, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit terms of service or security policy pages are found. Overall, the site is safe, professional, and trustworthy with no adult or questionable content.

K

Kirche im Grünen

kircheimgruenen.de

44

Kirche im Grünen is a small non-profit religious organization based in Germany that offers outdoor church services and events across various scenic regions including the Fichtelgebirge, Bayerischer Wald, and the Alpine area. The website serves as an informational portal inviting visitors to participate in these spiritual gatherings in nature. The organization positions itself as a niche provider of religious services emphasizing connection with nature. Technically, the website is built on Drupal 10 CMS with Bootstrap framework, leveraging jQuery and other standard web technologies. It is hosted on a German hosting provider (kunde24.de) and demonstrates moderate performance with good mobile optimization. The site is accessible, well-structured, and provides a good user experience with clear navigation. From a security perspective, the site uses HTTPS and secure form submissions but lacks advanced security headers and published security policies. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is present. No incident response or vulnerability disclosure information is available. Overall, the security posture is adequate but could be improved with additional best practices. The website is free from adult or questionable content and maintains a high trustworthiness level. External links are relevant and point to partner church tourism sites. No advertising or tracking scripts are detected, indicating a privacy-conscious approach. The WHOIS data is minimal but consistent with a legitimate small non-profit entity. The overall risk is low, with recommendations focusing on enhancing security headers, cookie consent, and incident response transparency.

B

Bundesverband Kulturloge e.V.

kulturloge.de

63

The Bundesverband Kulturloge e.V. is a German non-profit organization dedicated to promoting cultural access for people with low income by mediating free tickets to cultural events such as theater, cinema, sports, and concerts. The organization supports the founding of regional Kulturlogen and provides a specialized ticket database and print templates free of charge. Their volunteer-based approach emphasizes dignity and respect for the beneficiaries, known as 'Kulturgäste'. The website reflects a well-established national association with clear communication and partnership with LOTTO Hessen. Technically, the website is built on WordPress 6.8.3 using the Avada theme and child theme, incorporating modern web technologies including jQuery and Matomo analytics configured for privacy compliance. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no explicit security policy or incident response contacts are published. From a security perspective, the site uses HTTPS with a good SSL configuration and privacy-conscious analytics. Security headers are not explicitly detected, and there is no public vulnerability disclosure or security.txt file. The absence of incident response contacts and security policy pages represents an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its non-profit mission effectively. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and considering a vulnerability disclosure mechanism to further strengthen trust and security posture.

H

Haus für Demokratie und Vielfalt

hdv-hanau.de

59

Haus für Demokratie und Vielfalt is a civic initiative based in Hanau, Germany, focused on promoting democracy and diversity. The organization operates from a building acquired by the city of Hanau in 2021, located at a historically significant site. The website serves as an informational and community engagement platform, targeting the general public interested in democratic values and social inclusion. The business model is non-profit and educational, with a local market position and active social media presence.

E

E.C.C.O.

ecco-eu.org

53

E.C.C.O. is a European non-profit confederation dedicated to the professional organization, development, and promotion of conservator-restorers. The organization focuses on setting standards, regulating practice at the European level, and enhancing communication and mobility among professionals in the cultural heritage sector. Their website reflects a mature and professional presence with clear mission and vision statements, supported by active social media channels. Technically, the site is built on WordPress using the Astra theme and several plugins, including BuddyPress and Borlabs Cookie, indicating a modern and community-oriented platform. Security posture is adequate with HTTPS enforced and some security plugins in use, but lacks visible security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service documents found. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy transparency and security hardening are recommended.

Ocean Decade is a globally recognized non-profit initiative launched in 2018, focused on generating and disseminating critical ocean knowledge to promote sustainable ocean management. The website serves as an information hub for scientists, policymakers, and stakeholders interested in ocean sustainability. It is positioned as an important international framework under the United Nations, leveraging digital tools to communicate its mission effectively. Technically, the website is built on WordPress with modern SEO and translation plugins, hosted by a reputable registrar, and secured with HTTPS. However, it lacks visible privacy and cookie policies, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and security headers. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve privacy compliance and security transparency.

S

Schönstatt-Zentrum Marienberg

schoenstatt-bamberg.de

63

Schönstatt-Zentrum Marienberg is a small, non-profit religious community center in Germany focused on the Schönstatt movement. It offers guest and youth house accommodations, spiritual events, and community programs targeting religious community members, families, and youth groups. The website is professionally designed with good content quality, clear navigation, and strong accessibility features. Technically, it uses the Alkacon Mercury CMS platform, integrates Matomo analytics for privacy-conscious tracking, and hosts content on servers associated with keymachine.de. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and privacy policies.

E

Evangelische Brüder-Unität Herrnhuter Brüdergemeine

ebu.de

57

The Evangelische Brüder-Unität (Herrnhuter Brüdergemeine) is a Protestant, ecumenically open church community with a presence in several European countries. The website serves as an informational and community portal, providing details about their faith, history, global relations, and current activities. It targets members and interested individuals seeking to learn about or participate in the church's mission, education, and social services. The organization operates as a non-profit entity with a medium-sized footprint in Germany.

B

BUND Landesverband Nordrhein-Westfalen e.V.

bund-nrw.de

58

BUND Landesverband Nordrhein-Westfalen e.V. is a well-established non-profit environmental organization focused on nature and environmental protection in the German state of Nordrhein-Westfalen. The website serves as a comprehensive platform for advocacy, education, membership engagement, and public awareness campaigns. It maintains a strong regional presence with active social media channels and regularly updated content including news, publications, and event information. Technically, the site is built on the TYPO3 CMS platform, employs privacy-conscious analytics via Matomo, and uses tarteaucitron.js for cookie consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response policies are absent. Privacy compliance is robust, with clear privacy and cookie policies in German, aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-suited to its audience of environmentally conscious citizens and activists in NRW.

S

Sozialverband Deutschland e.V.

sovd-rentenlabyrinth.de

51

The Sozialverband Deutschland e.V. (SoVD) is a well-established non-profit organization focused on social welfare and pension advisory services in North Rhine-Westphalia, Germany. The website serves as an informational and service platform, providing guidance on pensions, social law, and related social services. It targets German residents seeking support navigating social security and pension systems. The organization maintains a strong regional presence with multiple advisory centers and active social media engagement. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and integrates analytics and chatbot tools for enhanced user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a professional, trustworthy, and user-friendly platform for social welfare services.

S

Sozialverband Deutschland Landesverband Schleswig-Holstein e.V.

sovd-sh.de

55

The Sozialverband Deutschland Landesverband Schleswig-Holstein e.V. (SoVD SH) is a regional non-profit social association dedicated to supporting individuals in difficult life situations, focusing on social justice, inclusion, and advocacy in Schleswig-Holstein, Germany. The website serves as an information and engagement platform offering social counseling, political representation, and volunteer opportunities. It targets seniors, socially disadvantaged groups, and people with disabilities. The organization maintains a solid regional presence with a medium-sized operational scale and a consistent brand image. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Klaro for cookie consent management. It employs Matomo analytics, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Hosting details are not explicit but the domain uses multiple UI-DNS name servers indicating professional hosting. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The absence of security headers and vulnerability disclosure mechanisms suggests room for improvement in security posture. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. It effectively supports the organization's mission but could enhance transparency around security policies and incident handling to further strengthen user trust and compliance.

S

Sozialverband Deutschland e.V.

sovd-rps.de

55

The SoVD Rheinland-Pfalz / Saarland website represents a well-established non-profit social advocacy organization in Germany, providing social law advice and support primarily to residents of Rheinland-Pfalz and Saarland. The organization leverages over 100 years of experience and offers services such as social counseling, legal pattern lawsuits, and member engagement. The website is professionally designed, content-rich, and targets individuals seeking social welfare assistance. Technically, the site is built on TYPO3 CMS, uses jQuery and Bootstrap frameworks, and integrates privacy-focused Matomo analytics alongside a clear cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, accessible, and compliant with GDPR requirements.

S

Sozialverband Deutschland e.V.

sovd-mitteldeutschland.de

56

The Sozialverband Deutschland Landesverband Mitteldeutschland is a regional branch of a well-established non-profit social advocacy organization in Germany. The website serves as an information hub for social law, social policy, and member services, offering resources such as social counseling, legal advice, online tools, and publications. It targets members and individuals interested in social welfare topics within the Mitteldeutschland region. The organization maintains a strong market position as a trusted social association with consistent branding and clear communication channels. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Bootstrap for responsive design. It implements a cookie consent mechanism via Klaro and uses Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. From a security perspective, the site enforces HTTPS and employs cookie consent, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the organization's identity, supporting legitimacy and trustworthiness. Overall, the website demonstrates a mature digital presence with good privacy compliance and solid business credibility. Strategic improvements in security transparency and incident response readiness would enhance trust and resilience.

S

Sozialverband Deutschland e.V.

sovd-mv.de

55

The Sozialverband Deutschland e.V., Landesverband Mecklenburg-Vorpommern, is a regional non-profit organization focused on social advocacy, legal advice, and member services related to social law and social policy. The website serves as an information hub for members and interested parties, offering resources such as social law consultation, online tools like care level and pension calculators, and updates on social policy developments. The organization holds a strong regional market position as a trusted social advocacy entity. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery and Bootstrap for responsive design. Cookie consent is managed via Klaro, and analytics are handled through Matomo, indicating a commitment to privacy-conscious tracking. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the website's legitimacy, though more detailed registrant information would improve trust. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security posture and user trust.

S

Sozialverband Deutschland e.V. Landesverband Hessen

sovd-he.de

56

The Sozialverband Deutschland e.V. Landesverband Hessen is a regional branch of a large non-profit social association in Germany focused on social advocacy, member services, and social policy information. The website provides comprehensive information about their services including social counseling, legal model lawsuits, care level calculators, and recreational facilities. It targets members and socially engaged individuals in Hessen, Germany. The organization maintains a strong digital presence with regular news updates and social media engagement. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries like jQuery, and integrates privacy-respecting analytics via Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Cookie consent is managed via Klaro, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The domain registration is consistent with the organization's identity, though the name servers are generic. Overall, the security posture is good but could be improved with additional security headers and transparency. The overall risk assessment is low with strong trust indicators and professional presentation. Strategic recommendations include publishing a security policy, incident response information, and enhancing security headers to further strengthen the security posture and user trust.

S

Sozialverband Deutschland Landesverband Bremen e.V.

sovd-hb.de

56

Sozialverband Deutschland Landesverband Bremen e.V. is a well-established non-profit social advocacy organization with a century of experience, focusing on social justice, legal advice, and member services in the Bremen region of Germany. The website serves as an information hub for social policy developments, member benefits, and community engagement. It targets individuals facing social insecurity and those seeking social legal support. The organization maintains a strong market position as Germany's longest-standing social association, offering services such as free social law consultation, online tools, and a members' magazine.

S

Sozialverband Deutschland e.V.

sovd-bbg.de

54

The Sozialverband Deutschland e.V., Landesverband Berlin-Brandenburg, is a well-established non-profit social association focused on social advocacy, counseling, and political engagement for socially disadvantaged individuals and people with disabilities in the Berlin and Brandenburg region. The website serves as an information hub for members and the public, offering services such as social counseling, political representation, volunteer opportunities, and community events. The organization leverages a professional TYPO3 CMS platform with modern web technologies and privacy-conscious analytics (Matomo). The site is well-structured, mobile-optimized, and provides clear navigation and content relevant to its target audience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website reflects a credible and trustworthy organization with a strong regional presence.

S

Sozialverband Deutschland e.V.

sovd-bayern.de

55

The Sozialverband Deutschland e.V., Landesverband Bayern, is a well-established non-profit social association focused on providing social counseling, legal advice, and advocacy services to members and the public in Bavaria, Germany. The website serves as an information hub for social policy updates, membership services, and community engagement. It maintains a strong presence through social media and offers digital tools such as an online Pflegegradrechner and access to their members' newspaper as an e-paper. Technically, the site is built on TYPO3 CMS, uses modern frontend technologies, and implements privacy-conscious analytics with Matomo. The cookie consent mechanism Klaro is in place, ensuring GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and serves its target audience effectively.

S

Sozialverband Deutschland e.V.

sovd-bawue.de

56

The Sozialverband Deutschland e.V., Landesverband Baden-Württemberg, is a well-established non-profit organization focused on social welfare, legal advice, and advocacy within the Baden-Württemberg region of Germany. The website serves as a comprehensive portal offering information on social policies, legal counseling, membership services, and community engagement. It targets individuals seeking social support and legal guidance, emphasizing inclusivity and accessibility. The organization leverages a modern TYPO3 CMS platform, enhanced with privacy-conscious analytics (Matomo) and a robust cookie consent mechanism (Klaro), reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and professionally designed, supporting a positive user experience.

B

Bundesverband Rind und Schwein e.V. (BRS)

erzeugerring.info

46

The website erzeugerring.info is operated by the Bundesverband Rind und Schwein e.V. (BRS), a German non-profit association focused on agricultural producer rings. It provides an interactive online database and news updates relevant to agricultural stakeholders in Germany. The site targets agricultural producers and organizations, offering informational services and fostering community engagement. The business model is non-profit and niche-focused, with a stable market position within the German agricultural sector. The website content is professional, consistent, and well-structured, supporting its credibility and trustworthiness. Technically, the site uses a proprietary CMS (Intersolute CMS) with standard web technologies such as HTML5, CSS3, and JavaScript. The site is moderately optimized for performance and mobile use, with basic accessibility features. SEO practices are good, with proper meta tags and Open Graph data. However, security headers are not explicitly detected, and there is room for improvement in security best practices and mobile optimization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy compliance. No critical vulnerabilities or exposed sensitive data were found in the analyzed content. The WHOIS data is privacy protected or unavailable, which is typical for many domains and justified for this non-profit entity. The domain appears legitimate and consistent with the business claims. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic recommendations include enhancing security headers, improving mobile and accessibility features, and adding explicit security and incident response policies to strengthen trust and compliance further.

K

KULTURLOGE Hanau e.V.

kulturloge-hanau.de

57

KULTURLOGE Hanau e.V. is a small non-profit organization based in Hanau, Germany, dedicated to providing free access to cultural events for people with low income. The organization emphasizes social inclusion and community engagement through culture, supported by local government and partner institutions. Their website is built on Joomla CMS with Bootstrap and Font Awesome, offering a good user experience and clear navigation. The site includes a login form for members and a cookie consent mechanism, reflecting GDPR compliance awareness. However, the site lacks visible advanced security headers and incident response information, which could be improved to enhance security posture. Overall, the website is trustworthy and professionally presented, serving its target audience effectively.

V

Verband der Restauratoren VDR

restauratoren.de

55

The Verband der Restauratoren VDR is a professional and specialist association representing approximately 3,000 conservators and restorers in Germany. The organization focuses on protecting and preserving cultural heritage, providing professional representation, consulting, events, publications, and career resources to its members. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its non-profit status. Technically, the site is built on WordPress with modern JavaScript libraries for enhanced user experience, including carousels and interactive elements. It employs GDPR-compliant cookie consent mechanisms and integrates Google Tag Manager for analytics. The hosting appears stable with UI-DNS nameservers and HTTPS enforced with strong security headers. From a security perspective, the website demonstrates good practices such as HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy or incident response contact information, which could be improved. Privacy compliance is strong with clear privacy and cookie policies. Overall, the site is trustworthy, professional, and well-maintained, with no signs of malicious activity or content safety concerns. Strategic recommendations include adding a security policy page, incident response contacts, and vulnerability disclosure mechanisms to enhance security posture and trust further.

D

Diözesan-Caritasverband Würzburg

caritas-wuerzburg.de

53

The website www.caritas-wuerzburg.de represents the Diözesan-Caritasverband Würzburg, a large non-profit organization focused on social services, charitable activities, and community support within the Unterfranken region of Germany. The site offers extensive information about their services including help and counseling, volunteering, donations, projects, and social services for various vulnerable groups such as children, families, seniors, and people with disabilities. The organization positions itself as a regional leader in social welfare and charity, targeting a broad audience including those in need and potential volunteers or donors. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome for UI components. It integrates privacy-conscious analytics via Matomo and employs Usercentrics for GDPR-compliant cookie consent management. The site demonstrates good mobile optimization and accessibility features, with a well-structured navigation system that supports user experience and SEO. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious external domains were detected. The WHOIS data is consistent with the website's professional presentation, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving as a reliable digital presence for a reputable non-profit organization. Strategic improvements could focus on enhancing security headers, publishing a security policy, and providing explicit contact information for incident response to further strengthen trust and security posture.

D

DA-ZWISCHEN

netzgemeinde-dazwischen.de

47

DA-ZWISCHEN is a German-language digital Christian community platform focused on fostering faith-based engagement and inspiration. The website offers community chat, monthly impulses via mail and messenger, and digital worship services, currently paused for reorientation. The platform positions itself as a niche non-profit community with a small but engaged audience. Technically, the site is built on WordPress with modern plugins for SEO and GDPR compliance, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. WHOIS data is unavailable due to malformed query responses, which slightly impacts trust but the website content and policies indicate legitimate operation. Overall, the site is professional, privacy-conscious, and safe for general audiences.

Kirchliche Jugendarbeit Diözese Würzburg is a non-profit organization affiliated with the Bistum Würzburg, focusing on youth work, education, and faith formation within the diocese. The website serves as a portal for information on events, services, and contact details aimed at young people and church communities. The organization holds a stable regional position with clear branding and a consistent message aligned with its religious and educational mission. Technically, the website is built on TYPO3 CMS with modern frontend technologies and includes privacy-conscious analytics and consent management tools. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving its audience effectively.

P

Pfarrei Evangelisch unter der Veste

evangelisch-gemeinsam.de

44

The website evangelisch-gemeinsam.de represents a regional non-profit religious community, specifically a parish composed of four evangelical-lutheran congregations in the Coburg area of Germany. It serves as an information portal for church services, events, groups, and community engagement, targeting local members and interested visitors. The site is built on Drupal 10, leveraging modern web technologies and includes a consent management system for GDPR compliance. The technical infrastructure is solid, hosted on a provider indicated by the nameservers kunde24.de, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved and no explicit security policy or incident response information is published. The website does not employ advertising or extensive tracking, enhancing privacy compliance. Overall, the site is trustworthy, professional, and well-aligned with its community-focused mission.

M

Makkabi Deutschland e.V.

makkabi.de

62

Makkabi Deutschland e.V. is a prominent Jewish sports federation in Germany, focusing on organizing sports events, youth engagement, and social responsibility initiatives such as anti-antisemitism programs. The organization targets the Jewish community and sports enthusiasts, providing a platform for cultural and athletic activities. The website reflects a medium-sized non-profit entity with a consistent brand presence and active social media engagement. Technically, the site is built on WordPress using Elementor and several plugins to manage events and content, with moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and uses some security best practices but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR, though it could benefit from enhanced security headers and incident response information.

F

FIMCAP - International Federation of Catholic Parochial Youth Movements

fimcap.org

46

FIMCAP is an international non-profit federation uniting Catholic and Christian youth organizations across 28 countries with 31 member organizations. Founded in 1962 and officially recognized by the Holy See, it provides networking, advocacy, and organizes intercontinental and continental youth activities. The website is built on WordPress using modern plugins such as Elementor and Yoast SEO, hosted by GoDaddy. It features good design quality, clear navigation, and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages. Overall, the site is trustworthy and professional, serving a general audience interested in youth and community development.

K

Kolping International

kolping.net

51

Kolping International is a well-established Catholic social non-profit organization with a global presence, serving 400,000 members across 60 countries. The organization focuses on social projects including education, microcredits, rural development, and water access initiatives. The website is professionally designed using WordPress with multilingual support and SEO optimization, reflecting a mature digital presence. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not detract from the overall legitimacy suggested by the website content. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and clarifying domain registration details.

S

Stiftung Pfadfinderinnen

stiftung-pfadfinderinnen.de

48

Stiftung Pfadfinderinnen is a German non-profit foundation dedicated to supporting innovative and traditional scouting projects within the Pfadfinderinnenschaft St. Georg community. The website serves as an informational and donation platform, providing project news, funding opportunities, and ways to support the foundation. The organization maintains a niche position in the non-profit sector focused on youth and scouting activities in Germany. Technically, the website is built on the Contao Open Source CMS and uses legacy JavaScript libraries such as jQuery 1.9.1 and the older Google Analytics ga.js script, indicating some modernization opportunities. Hosting is provided by Alfahosting, a German hosting provider, and the site uses HTTPS with a cookie consent mechanism, reflecting basic GDPR compliance. Security posture is moderate but could be improved by updating libraries and implementing security headers. Overall, the site is professional, trustworthy, and well-structured, with clear navigation and relevant content for its target audience.

B

Bundesverband Deutscher Stiftungen

stiftungssuche.de

49

Stiftungssuche.de is a comprehensive online platform operated by the Bundesverband Deutscher Stiftungen, providing an extensive database and search capabilities for foundations in Germany. It offers both free and subscription-based services with detailed foundation profiles, targeting foundations, applicants, and service providers within the German non-profit sector. The website is well-positioned as a leading resource in its niche, supported by a reputable parent organization. Technically, the site is built on WordPress with WooCommerce and uses modern tools such as Matomo for analytics and Borlabs Cookie for GDPR-compliant cookie management. The site demonstrates good digital maturity with responsive design and structured data for SEO. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though it lacks explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, making it a reliable resource for its audience.

B

Bundesverband Deutscher Stiftungen

stiftungswelt.de

48

The website 'Stiftungswelt' serves as the official online magazine for the Bundesverband Deutscher Stiftungen, providing news, insights, and resources related to foundations and the nonprofit sector in Germany. It targets foundation professionals, donors, and stakeholders interested in foundation management, law, finance, and societal impact. The platform is well-positioned as a leading information source within its niche, offering high-quality, relevant content with a professional presentation. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Parsley for form validation. It integrates multiple analytics platforms including Google Analytics and Matomo, and employs Google Tag Manager for marketing tag management. The site is hosted on UI-DNS nameservers, uses HTTPS with a Content Security Policy, and implements a comprehensive cookie consent mechanism compliant with GDPR. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent management. However, the Content Security Policy is permissive with 'unsafe-inline' and 'unsafe-eval', which could be hardened to reduce XSS risks. There is no visible security policy or incident response information, nor a vulnerability disclosure mechanism like security.txt. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy resource for its audience. Strategic improvements in security headers and transparency around security policies could further enhance its posture.

P

Polskie Stowarzyszenie Osób z Celiakią i na Diecie Bezglutenowej

przekreslonyklos.pl

31

The website www.przekreslonyklos.pl represents the Polish Association of People with Celiac Disease and on a Gluten-Free Diet, a non-profit organization dedicated to certifying gluten-free products and supporting the gluten-free community in Poland. The site serves as the official platform for licensing the Przekreślony Kłos trademark, a recognized symbol for safe gluten-free food. It also provides educational resources, events, and partnerships with European organizations. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and reCAPTCHA for security and analytics. The site is well-structured, mobile-optimized, and SEO-friendly, though it lacks a dedicated privacy policy page and some security headers. Security posture is strong with HTTPS and no visible vulnerabilities. WHOIS data is unavailable, which reduces transparency but the site's content and external references support its legitimacy. Overall, the site is a credible, professional resource for gluten-free certification and community support in Poland.

P

Polskie Stowarzyszenie Osób z Celiakią i na Diecie Bezglutenowej

celiakia.pl

37

Polskie Stowarzyszenie Osób z Celiakią i na Diecie Bezglutenowej is a well-established Polish non-profit organization dedicated to supporting individuals with celiac disease and promoting gluten-free diets. The organization operates certification programs such as Przekreślony Kłos for gluten-free products and MENU BEZ GLUTENU for gluten-free friendly dining establishments. Their website serves as an educational and community hub, offering resources, events, and collaboration opportunities for patients, healthcare professionals, and businesses. The site is professionally designed, well-structured, and optimized for SEO and mobile use, reflecting a mature digital presence. Technically, it is built on WordPress with modern libraries and integrates Google Analytics for user insights. Security posture is good with HTTPS enabled, though additional security headers and DNSSEC could enhance protection. Privacy compliance is adequate with visible privacy and cookie policies, though no explicit consent mechanism is detected. Overall, the website is trustworthy, content-rich, and serves its community effectively.

B

Bundesverband Deutscher Stiftungen

stiftungen.org

51

The Bundesverband Deutscher Stiftungen is Germany's largest association for foundations, providing news, consulting, and networking services to the foundation sector. The website serves as an information hub for foundations, offering resources on foundation law, establishment, and sector news. It targets foundations, non-profit organizations, and individuals interested in foundation activities in Germany. Technically, the site is built on TYPO3 CMS, integrates Google Tag Manager, Google Analytics, and Matomo for analytics, and employs a GDPR-compliant cookie consent mechanism. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security-wise, the site uses HTTPS and has implemented cookie consent and CSRF protections in analytics scripts, but could improve by adding explicit security headers and publishing vulnerability disclosure or incident response policies. The WHOIS data is unavailable, which slightly reduces trust but the overall professionalism and compliance indicators suggest a legitimate and trustworthy organization. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around data protection officers and incident response.

B

BAG Familienerholung

bag-familienerholung.de

65

BAG Familienerholung is a German non-profit organization dedicated to providing affordable and family-friendly vacation opportunities in certified holiday homes across Germany. Their services focus on supporting families with low to medium income, families with multiple children, and individuals with disabilities or care needs. The organization collaborates with major welfare providers such as Diakonie, Caritas, AWO, and the German Red Cross to ensure social accessibility and quality. The website reflects a solid market position as a trusted umbrella organization in the family recreation sector. Technically, the website is built on WordPress using the Divi theme and incorporates modern plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is hosted on kasserver.com and uses HTTPS with a valid SSL certificate, ensuring secure communications. The site is mobile-optimized and accessible, with a clear navigation structure and good content quality. From a security perspective, the site employs HTTPS and cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no visible privacy policy or terms of service pages, which could be improved to enhance user trust and regulatory adherence. Overall, BAG Familienerholung presents a trustworthy and professional online presence with good technical implementation and business credibility. Strategic improvements in privacy documentation and security headers would further strengthen their security posture and compliance standing.

M

Müttergenesungswerk

muettergenesungswerk.de

45

Müttergenesungswerk is a well-established German non-profit organization focused on providing high-quality health and rehabilitation services primarily for mothers, but also for fathers and caregiving relatives. The website reflects a mature digital presence with a clear focus on supporting its target audience through information, consulting, and access to clinics. The organization leverages donations and partnerships to sustain its operations and has a strong brand presence supported by endorsements and media coverage. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates consent management and analytics tools responsibly. Security posture is solid with HTTPS and reCAPTCHA integration, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

Mehrgenerationenhaus Ingelheim

mgh-ingelheim.de

50

Mehrgenerationenhaus Ingelheim is a local non-profit community center in Ingelheim am Rhein, Germany, providing a wide range of social, cultural, educational, and health-related services to residents of all ages. The organization focuses on fostering community engagement, volunteering, and multi-generational interaction. Their website reflects a well-structured and community-oriented approach with clear contact information and social media presence on Facebook and Instagram. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and uses several JavaScript libraries including jQuery 1.11.3, FontAwesome, and Slick Slider. The site is mobile responsive and includes a cookie consent mechanism compliant with GDPR. However, some technical improvements could be made, such as updating jQuery to a more secure version and implementing security headers. From a security perspective, the site uses HTTPS and has a cookie consent banner, but lacks explicit security policies, incident response information, and security headers. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the website's community focus and shows no privacy protection, indicating transparency. Overall, the website is trustworthy, safe, and professionally maintained, with minor technical and security enhancements recommended to improve its posture and compliance further.

S

Stiftung der Metallindustrie im Nord-Westen (SMNW)

stiftung-nordwest.de

44

The Stiftung der Metallindustrie im Nord-Westen (SMNW) is a well-established non-profit foundation founded in 2007, focused on promoting education, science, culture, and social initiatives in the northwestern region of Germany. With a significant capital base, it plays an important role in supporting regional development and the metallurgical and electrical industries indirectly through its funding and projects. The website reflects a professional and consistent brand presence, targeting regional institutions and stakeholders with clear, relevant content and regular updates. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Autoptimize, with jQuery and jQuery UI libraries. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Hosting is managed via domaincontrol.com DNS, a common provider. The site uses HTTPS with strong SSL configuration but lacks some advanced security headers and cookie consent mechanisms. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms are detected, and no suspicious or malicious content is present. Privacy compliance is basic with a privacy policy present but no cookie consent banner. Overall, the site is trustworthy and professional with a solid business credibility score. Recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing a security.txt file, and enhancing incident response transparency to improve security posture and compliance.

K

Kulturstiftung RLP

echtjetzt.info

62

Echt jetzt! is a cultural non-profit initiative managed by Kulturstiftung RLP that promotes theater performances for children and youth across Rheinland-Pfalz. The website serves as an informational and application portal for theater guest performance funding, providing resources such as theater tips, current news, and contact options. The site is professionally designed using WordPress with modern plugins for SEO and cookie consent, reflecting a mature digital presence suitable for its target audience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data is privacy protected, which is typical for non-profit cultural projects, and no suspicious indicators were found. Overall, the website is trustworthy, well-maintained, and compliant with GDPR regulations.

D

Deutsche Lutherweg-Gesellschaft e. V.

lutherweg-bayern.de

63

The Deutsche Lutherweg-Gesellschaft e. V. operates the Lutherweg Bayern website, promoting a cultural and religious pilgrimage route network centered on Martin Luther's historical sites. The organization targets pilgrims, hikers, and visitors interested in the Reformation and cultural heritage, positioning itself as a regional non-profit entity focused on tourism and education. The website provides route information, pilgrimage offers, maps, and a newsletter subscription to engage its audience. Technically, the website is built on WordPress 6.8.3 using the GeneratePress theme and several plugins including Complianz GDPR for cookie consent and WPForms for user interaction. It is hosted on webgo.de servers with HTTPS enforced, indicating a modern and secure infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. Security posture is solid with HTTPS, GDPR compliance, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies or incident response information, which could be improved to enhance trust and readiness. Privacy compliance is well handled with clear cookie consent and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and well-maintained, serving its niche audience effectively. Strategic improvements in security headers and incident response transparency would further strengthen its security posture and user trust.

D

Diakonisches Werk Coburg e.V.

diakonie-coburg.de

45

Diakonisches Werk Coburg e.V. is a regional non-profit social service organization affiliated with the evangelical church, providing counseling and support services for vulnerable populations including the elderly, disabled, families, and individuals with mental health challenges in Coburg, Germany. The website presents a clear and professional digital presence with good content quality and consistent branding. The technical infrastructure is based on WordPress with modern plugins and themes, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and serves its community-focused mission effectively.

K

Kultursommer Rheinland-Pfalz

kultursommer.de

63

Kultursommer Rheinland-Pfalz is a well-established non-profit cultural foundation affiliated with the Stiftung Rheinland-Pfalz für Kultur. Since 1992, it has been facilitating and promoting cultural projects across various art forms within the Rheinland-Pfalz region, targeting cultural practitioners, event organizers, and the general public interested in arts and culture. The website reflects a strong regional cultural focus with comprehensive information on events, funding, and community engagement. Technically, the site is built on WordPress with modern plugins and libraries, offering good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, serving as a reliable resource for cultural stakeholders in the region.

S

Stiftung Rheinland-Pfalz für Kultur

kulturstiftung-rlp.de

58

The Stiftung Rheinland-Pfalz für Kultur is a regional cultural foundation in Germany focused on supporting and promoting cultural activities within Rheinland-Pfalz. The website highlights key cultural projects such as the Kultursommer Rheinland-Pfalz and the Künstlerhaus Edenkoben, positioning itself as a non-profit organization dedicated to cultural enrichment. The site is built on TYPO3 CMS with Bootstrap framework, indicating a modern but straightforward technical infrastructure. The website is mobile optimized and provides a good user experience with clear navigation and relevant content for its target audience. However, it lacks visible contact information, privacy policy, and terms of service pages, which are important for transparency and compliance. Security posture is moderate with cookie consent implemented but missing security headers and no visible incident response or security policies. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

V

Verband der Unternehmerinnen in Deutschland e.V. (VdU)

vdu.de

56

Verband der Unternehmerinnen in Deutschland e.V. (VdU) is a well-established non-profit association founded in 1954, dedicated to representing and supporting women entrepreneurs across Germany. The organization advocates for increased female entrepreneurship, leadership roles for women, and improved economic conditions for women in business. Their services include advocacy, networking, mentoring, events such as the she succeeds award, and publications. The website reflects a mature digital presence built on TYPO3 CMS, with modern cookie consent management and a clear structure optimized for user experience and accessibility. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. The domain registration is consistent with the organization's profile, enhancing trustworthiness. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

P

Paritätischer Wohlfahrtsverband Niedersachsen e.V.

paritaetischer.de

62

Paritätischer Wohlfahrtsverband Niedersachsen e.V. is a prominent non-profit welfare association in Lower Saxony, Germany, representing over 880 member organizations. The website serves as an informational and service portal for members and the public, offering insights into the organization's structure, services, and regional presence. The business model focuses on social welfare advocacy, support, and coordination of member organizations across various social sectors. The organization holds a strong market position as a leading welfare umbrella in the region.

A

Amnesty International

amnesty.org

71

Amnesty International is a globally recognized non-profit organization dedicated to human rights advocacy, with a presence in over 150 countries and a membership exceeding 10 million people. The website reflects this mission with comprehensive content on campaigns, education, and activism, supported by a professional and consistent brand presentation. The organization leverages modern web technologies including WordPress and WooCommerce to facilitate engagement and donations. Social media integration is robust, enhancing outreach and community building. Technically, the website is well-constructed with modern frameworks and libraries such as React and WooCommerce, ensuring a responsive and accessible user experience. Privacy and cookie policies are clearly presented with active consent mechanisms, demonstrating compliance with GDPR and related regulations. Performance is moderate, with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and includes standard security headers, though explicit security policies and incident response contacts are not publicly available. No vulnerabilities or suspicious elements were detected in the content or scripts. WHOIS data is unavailable due to privacy protection, which is justified for a large non-profit entity. Overall, the site exhibits a strong security posture and trustworthy digital presence. Strategically, the organization should consider publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust. Regular audits of third-party scripts and continued adherence to privacy regulations will further strengthen their security and compliance stance.