Non-profit security reports

The website 'Ehrenamt Evangelisch Engagiert' serves as an informational and community platform supporting voluntary engagement within the Evangelical Lutheran Church in Bavaria. It provides news, resources, and coordination services for volunteers and church members, positioning itself as a niche non-profit entity focused on church-related volunteerism. The site is professionally designed with consistent branding and clear navigation, targeting German-speaking church volunteers and coordinators. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries such as Leaflet for maps and Matomo for privacy-conscious analytics. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security posture is solid with HTTPS enforced and minimal cookies used, although security headers are not explicitly detected. Privacy compliance is good, with a clear cookie banner and privacy policy in German. No critical vulnerabilities or blocking mechanisms were detected. The WHOIS data aligns with the website's organizational claims, showing consistent domain registration and DNS management. Contact information is transparent and professional, including official church email and phone numbers. Social media presence is limited to Facebook. Overall, the website demonstrates a mature digital presence for a small non-profit church entity, with good security and privacy practices but room for improvement in security headers and incident response disclosures.

P

Panthera

panthera.org

64

Panthera is a well-established non-profit organization dedicated to the conservation of wild cat species globally. Founded in 1998, it operates across more than 35 countries with partnerships and scientific research to protect 40 wild cat species. The website reflects a mature digital presence with strong branding, comprehensive content, and multiple trust indicators including charity ratings and social media engagement. The organization primarily targets conservation supporters, donors, researchers, and the general public interested in wildlife preservation. Technically, the website is built on Drupal 10 and integrates modern web technologies including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Fundraise Up for donations. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and reCAPTCHA implemented, but could be improved by enabling DNSSEC and adding security headers. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and a vulnerability disclosure mechanism. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism despite tracking scripts. Overall, Panthera's website is professional, trustworthy, and well-suited for its mission. Strategic improvements in privacy compliance and security policies would enhance its risk posture and user trust.

N

North Carolina Zoo

nczoo.org

71

The North Carolina Zoo is a well-established non-profit organization dedicated to wildlife conservation, education, and public engagement. The website reflects a mature digital presence with comprehensive content about zoo visits, educational programs, conservation efforts, and community involvement. It targets families, educators, and conservation supporters, positioning itself as a leading natural habitat zoo with over 50 years of history and AZA accreditation. Technically, the site is built on Drupal CMS and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and various tracking and marketing tools. The site is mobile-optimized, accessible, and performs moderately well, with good SEO and user experience design. Security posture is strong with HTTPS enforced, security headers present, and secure form handling. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy and professional, with no critical vulnerabilities detected. The domain WHOIS data is privacy protected, which is justified for this type of organization. Strategic recommendations include publishing security policies, vulnerability disclosure information, and enhancing transparency around data protection contacts.

F

Frankfurt Zoological Society

fzs.org

69

Frankfurt Zoological Society is a well-established non-profit organization dedicated to wildlife and ecosystem conservation, focusing on protected areas and wilderness preservation. Founded in 1858, it operates internationally with projects in 18 countries and maintains a strong presence through partnerships and subsidiaries such as the Frankfurt Zoological Society – U.S. and Zoo Frankfurt. The organization relies on donations, sponsorships, and memberships to fund its conservation efforts and engages a broad audience including conservationists, donors, and the general public. Technically, the website is built on WordPress using modern plugins like Contact Form 7 and Relevanssi Live Search, with a moderate performance profile and good mobile optimization. The site employs HTTPS and domain management best practices but lacks DNSSEC and explicit security headers, which could be improved. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of security headers and incident response information suggests room for enhancement. The domain registration is consistent with the organization's history, registered since 1997 with a reputable registrar, supporting high legitimacy. Overall, the website is professional, trustworthy, and content-rich, serving its audience effectively. Strategic improvements in security headers, cookie consent, and explicit security policies would further strengthen its security and compliance posture.

W

Wildlife Protection Solutions

wildlifeprotectionsolutions.org

65

Wildlife Protection Solutions (WPS) is a small international non-profit organization dedicated to leveraging technology for the conservation of endangered species and ecosystems. Their core activities include deploying advanced AI and sensor technologies for real-time monitoring of protected areas, as well as creating innovative educational and outreach programs to raise awareness and funding. The organization collaborates with technology partners such as EarthRanger and Smart Conservation Tools to enhance their conservation efforts. The website is built on Squarespace, featuring a professional design with good mobile optimization and clear navigation, supporting their mission and outreach effectively. From a technical perspective, the website uses modern web technologies including Google Fonts, Google Tag Manager, and MarketingCloudFX for marketing and analytics. The site is hosted on Squarespace, ensuring reliable infrastructure and HTTPS with HSTS enabled, contributing to a strong security posture. However, the absence of explicit security headers beyond HSTS and lack of privacy and cookie policies indicate areas for improvement in compliance and security transparency. Security-wise, the site enforces HTTPS and HSTS, with no visible vulnerabilities or exposed sensitive data. Yet, the lack of incident response contacts, vulnerability disclosure policies, and privacy compliance documentation presents gaps that could affect user trust and regulatory adherence. The WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness, though the website content and partnerships support legitimacy. Overall, WPS demonstrates a solid digital presence aligned with its conservation mission but should prioritize adding privacy and cookie policies, security disclosures, and incident response information to enhance compliance and trust. Addressing these gaps will strengthen their security posture and user confidence, supporting their important environmental work.

W

World Wildlife Fund

worldwildlife.org

70

World Wildlife Fund (WWF) is a globally recognized non-profit organization dedicated to wildlife conservation and endangered species protection. The website serves as a comprehensive platform to educate the public, engage supporters, and facilitate donations and advocacy efforts. It positions itself as a leader in environmental sustainability and conservation efforts worldwide. The site targets a broad audience including environmental advocates, donors, educators, and the general public interested in nature preservation. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integration of Google Tag Manager for analytics and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. The use of HTTPS and security headers indicates a strong security posture, although explicit security policies and incident response information are not publicly disclosed. Security-wise, the site enforces HTTPS, uses a consent management platform to comply with privacy regulations, and avoids exposing sensitive data. However, the absence of a vulnerability disclosure policy or security.txt file and lack of visible Data Protection Officer contact details represent areas for improvement. The WHOIS data is malformed and unavailable, which limits domain trust verification but the website's professional presentation and branding mitigate concerns. Overall, WWF's website is a well-maintained, secure, and privacy-conscious platform that effectively supports its mission. Strategic recommendations include publishing detailed security policies, providing vulnerability disclosure channels, and enhancing transparency around data protection roles to further strengthen trust and compliance.

A

Akademie des Versicherers im Raum der Kirchen

autobahnkirche.de

60

The website autobahnkirche.de represents a non-profit organization focused on providing spiritual rest stops along German highways, known as Autobahnkirchen. The site is managed by the Akademie des Versicherers im Raum der Kirchen, supported by entities such as HUK-Coburg and Deutsche Telekom. The business model centers on offering travelers places for reflection, rest, and spiritual comfort, with information about locations and events. The website content is well-structured, professionally presented, and targets travelers and visitors interested in spiritual respite. Technically, the site is built using Adobe Experience Manager CMS, with standard web technologies including JavaScript and CSS. Hosting appears to be managed by Deutsche Telekom, inferred from nameservers. Performance is moderate with basic mobile optimization and accessibility features. The site uses Dynatrace for monitoring user experience and performance. SEO and meta tags are basic but sufficient for the site's scope. From a security perspective, the site uses HTTPS and implements a cookie consent banner, indicating awareness of privacy compliance. However, no explicit security headers were detected in the provided data, and no incident response or security policy pages are present. No forms or contact emails are visible on the main page, limiting direct user data collection. The WHOIS data aligns with the website's organizational claims, showing a consistent and legitimate registration. Overall, the website presents a low-risk profile with a good level of professionalism and compliance for a non-profit entity. Recommendations include enhancing security headers, improving mobile and accessibility features, and adding explicit security and incident response policies to strengthen trust and compliance.

M

Markgrafenkirchen e.V.

markgrafenkirchen.de

59

Markgrafenkirchen e.V. is a non-profit organization dedicated to the cultural, spiritual, and touristic promotion of the Markgrafenkirchen churches in Upper Franconia, Germany. The website serves as a comprehensive resource offering detailed information about nearly 60 churches, including photos, events, tours, and educational materials. The organization is positioned as a niche cultural heritage promoter with a strong regional focus and supported by European Union funding. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and SEO optimization. Security posture is solid with HTTPS and some security plugins, though improvements can be made in cookie consent and explicit security policies. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

A

ANA Allgemeiner Norddeutscher Arbeitgeberverband e. V.

anaev.de

54

ANA Allgemeiner Norddeutscher Arbeitgeberverband e. V. is a regional non-profit employer association in Northern Germany providing labor law advisory services, legal representation, and political interest representation for its member companies. The website is professionally designed using TYPO3 CMS and modern web technologies, offering clear navigation and relevant content targeted at member companies and stakeholders. The technical infrastructure is moderate in performance with good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS implied but could be improved by adding explicit security policies and incident response contacts. Overall, the website is trustworthy and credible with strong partner networks and clear contact information.

E

Evangelisch-Lutherische Kirche in Bayern (ELKB)

uebernachtungshaeuser-elkb.de

44

The website www.uebernachtungshaeuser-elkb.de serves as an informational portal for the Evangelisch-Lutherische Kirche in Bayern's network of group accommodations. It targets church groups, youth groups, families, and seminar attendees seeking lodging in scenic Bavarian locations. The site offers detailed descriptions of various types of houses, including self-catering and fully serviced options, and promotes community and spiritual experiences. Technically, the site is built on Drupal 10, uses Bootstrap for responsive design, and integrates Matomo analytics with privacy-conscious settings. The Klaro consent manager ensures GDPR-compliant cookie handling. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and policies are absent. No contact emails or phone numbers are directly published, relying on a contact form instead. Overall, the site is professional, trustworthy, and well-suited for its non-profit church audience.

S

Soli deo gloria - Gott allein sei Ehre

solideo.de

10

Soli deo gloria is a non-profit initiative focused on Evangelical church music in Bavaria, Germany. The website provides information about church music professions, events, instruments, and associations, targeting church musicians and members of the Evangelical Lutheran Church. The platform is niche and regionally focused, serving as a cultural and religious resource. Technically, the site is built on Drupal 10 with Bootstrap components, hosted on German servers, and optimized for mobile devices with good navigation and content quality. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professionally presented, and safe for general audiences.

E

Evangelische Kirche in Bayern (ELKB) implied

offene-kirchen-bayern.de

10

The website offene-kirchen-bayern.de serves as an informational portal for open evangelical churches in Bavaria, Germany. It is affiliated with the Evangelische Kirche in Bayern (ELKB) and provides visitors with details about churches open on weekdays, special church types, and related tourism information. The site targets the general public interested in religious and cultural visits. Technically, it is built on Drupal 10 with modern libraries such as Leaflet.js for interactive maps and Bootstrap for responsive design. The site demonstrates good content quality, clear navigation, and consistent branding aligned with ELKB. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security headers are recommended.

E

Evangelisch-Lutherische Kirche in Bayern (ELKB) implied

berggottesdienste.de

10

Berggottesdienste.de is a niche non-profit website affiliated with the Evangelical Lutheran Church in Bavaria, providing information and promotion of outdoor mountain church services across various Bavarian regions. The site targets churchgoers and visitors interested in religious events in nature, offering a searchable database and links to related church tourism resources. Technically, the website is built on Drupal 10 with Bootstrap, hosted via kunde24.de, and demonstrates good mobile optimization and navigation clarity. Security posture is solid with HTTPS enforced, though lacking advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, safe, and professionally presented, serving its community-focused mission effectively.

V

Verein Szene Kloten

szenekloten.ch

46

Verein Szene Kloten is a local non-profit cultural association based in Kloten, Switzerland, organizing concerts, theater, art exhibitions, readings, multimedia shows, and managing the local museum. Supported by the city of Kloten, the Canton of Zurich's cultural office, sponsors, and members, it serves a community-oriented audience interested in cultural events. The website reflects a well-structured, content-rich platform with clear navigation and consistent branding, targeting local residents and culture enthusiasts. Technically, the site runs on Joomla CMS with modern libraries like jQuery and Google Tag Manager for analytics, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF protections, but lacks explicit cookie consent and published security policies. Overall, the site is trustworthy and professionally maintained, though improvements in privacy compliance and security transparency are recommended.

The International Arctic Social Sciences Association (IASSA) is a small, established non-profit organization focused on Arctic social sciences research and collaboration. Founded in 2010, it operates through elected councils and a general assembly, providing services such as organizing international congresses, publishing newsletters, and facilitating mentorship and awards programs. The website reflects a professional and consistent brand targeting researchers and academics interested in Arctic social sciences. Technically, the site uses Joomla CMS with Bootstrap and jQuery, hosted behind Cloudflare DNS, and includes Google Analytics for visitor tracking. While the site is mobile-optimized and well-structured, it lacks key privacy and cookie policies and does not implement DNSSEC or security headers, which are important for enhancing security and compliance. The security posture is moderate with room for improvement, especially in transparency and user data protection. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

B

Bayerischer Musikrat

bayerischer-musikrat.de

45

The Bayerischer Musikrat is a prominent non-profit cultural organization dedicated to promoting music culture in Bavaria. It operates various projects, competitions, and funding programs targeting musicians, music associations, and cultural stakeholders. The website reflects a well-established entity with a clear focus on community engagement and cultural enrichment. Technically, the site employs a modern tech stack including Bootstrap and jQuery, with a cookie consent mechanism via Usercentrics, indicating GDPR compliance awareness. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Overall, the site is professional, trustworthy, and serves its target audience effectively.

B

BDKJ Würzburg

bdkj-wuerzburg.de

51

BDKJ Würzburg is a regional non-profit umbrella organization representing 11 Catholic youth associations within the Diocese of Würzburg, Germany. The organization focuses on youth engagement in church and society, providing services such as youth political participation, social projects, and world volunteer services. The website reflects a well-structured, professional presence with clear branding and comprehensive content tailored to its target audience of children and youth involved in church activities. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap, jQuery, and FontAwesome. It incorporates privacy-conscious analytics via Matomo and employs Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected. The domain WHOIS data is consistent and legitimate, supporting the trustworthiness of the site. Overall, the website presents a low-risk profile with strong privacy compliance and good technical implementation. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to further strengthen trust and security posture.

Stiftungsarchive in Deutschland operates as a specialized informational portal dedicated to providing access and research capabilities for foundation archives across Germany. The website aggregates archival data covering a broad thematic spectrum including politics, culture, science, economy, social affairs, and sports. It serves researchers, historians, archivists, and the general public interested in foundation archives. The portal is supported by reputable organizations such as the Bundesverband Deutscher Stiftungen and Humboldt-Universität zu Berlin, enhancing its credibility and trustworthiness. Technically, the website appears to be built on a Ruby on Rails framework, utilizing libraries such as jCarousel and Turbolinks for user interface enhancements. The site demonstrates moderate performance and basic mobile optimization. Security measures include CSRF token implementation in forms, but lack visible HTTP security headers and cookie consent mechanisms. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site is accessible without WAF or blocking mechanisms, but could improve by implementing standard security headers, enforcing HTTPS, and publishing security policies. Privacy compliance is partially met with a privacy policy page but lacks cookie consent and detailed GDPR indicators. Overall, the site maintains a good level of professionalism and trustworthiness with no detected vulnerabilities or suspicious content. Strategically, the portal should focus on enhancing security posture and privacy compliance to better protect user data and meet regulatory requirements. Improving technical infrastructure and mobile responsiveness would also benefit user experience and accessibility.

Landjugend Rheinland-Nassau is a well-established non-profit youth association representing the interests of young people in rural areas of northern Rhineland-Palatinate, Germany. The organization has a strong regional presence with a 50-year history, offering events, seminars, and projects to engage and support its target audience. The website reflects this mission with relevant content, event calendars, and active social media channels. Technically, the site is built on WordPress using popular plugins for SEO, events management, and accessibility, indicating a moderate to good level of digital maturity. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, demonstrating attention to privacy and legal compliance. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure, though improvements could be made by adding security headers and a vulnerability disclosure policy. Overall, the website is professional, trustworthy, and serves its community effectively.

B

Bund der Deutschen Landjugend e.V. (BDL)

junglandwirte.de

56

The website junglandwirte.de represents the 'Projekt Junglandwirt:innen', a cooperative initiative by the Bund der Deutschen Landjugend (BDL) and the Deutschen Bauernverband, aimed at supporting young farmers and winemakers in Germany. It provides a comprehensive platform for networking, education, and career development, with a strong emphasis on sustainable agriculture, succession planning, and empowerment of women in the agricultural sector. The site is well-positioned as a central hub for young agrarians, backed by reputable organizations and funding bodies.

A

AgrarBündnis

kritischer-agrarbericht.de

55

The Kritischer-Agrarbericht.de website serves as the official online presence for the Kritischer Agrarbericht, a long-standing non-profit publication by the AgrarBündnis focused on critical agricultural policy analysis in Germany. The site provides access to annual reports and special editions, targeting an audience interested in agricultural policy, sustainability, and socio-economic aspects of farming. Technically, the site is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and FontAwesome, hosted on a professional Swiss hosting provider (cyon.ch). The website demonstrates good content quality, clear navigation, and basic mobile optimization. Privacy compliance is well addressed with a cookie consent mechanism and a dedicated privacy policy page in German. However, explicit contact information, terms of service, and security policies are not publicly available, which could be improved for transparency. Security posture is moderate with no visible security headers or advanced protections, but no critical vulnerabilities were detected. Overall, the site is trustworthy and professionally maintained, suitable for its non-profit informational purpose.

The Bundesverband der Regionalbewegung e.V. (BRB) is a German non-profit umbrella organization and competence network dedicated to promoting regionality and strengthening regional economic cycles. With approximately 360 member organizations, it serves as a key voice and network for regional initiatives, small and medium enterprises, municipal initiatives, and agricultural and food sectors. The website reflects a well-established organization celebrating over 20 years of activity, providing information, networking, and advocacy services. Technically, the site is built on the Odoo CMS platform, leveraging modern web technologies such as Bootstrap and FontAwesome, and integrates Google Analytics for visitor insights. The site is mobile-optimized and presents a professional design with clear navigation and relevant content. Security posture is moderate; while HTTPS and CSRF tokens are present, explicit security headers and incident response policies are not published. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, though GDPR-specific details are basic. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

D

Diakoniewerk Martinsberg e.V.

dw-martinsberg.de

47

Diakoniewerk Martinsberg e.V. is a German non-profit organization focused on providing social and diaconal services to the community. The website serves as an informational platform targeting a general audience interested in social support and community assistance. The organization maintains a moderate market position within the regional non-profit sector, emphasizing human-centric services. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a standard but modern CMS infrastructure with good SEO practices. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is weak due to absence of security headers and incident response information, exposing potential risks. Overall, the site is accessible without WAF or blocking mechanisms, but improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

L

Lebenshilfe Hof

lebenshilfe-hof.de

54

Lebenshilfe Hof is a regional non-profit organization based in Germany, providing a range of social support services including early intervention, educational programs, therapeutic centers, workshops, and housing assistance. The website serves as an official information portal for their services and community engagement. The organization targets individuals and families seeking support in the Hof region, emphasizing inclusivity and social welfare. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Google Tag Manager for analytics and Usercentrics for GDPR-compliant consent management. The site demonstrates good mobile optimization and accessibility features, including integration with ReadSpeaker for text-to-speech functionality. Hosting is managed via agenturserver, a professional hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published privacy or terms of service documents. No vulnerability disclosure or incident response information is available, which could be improved to enhance trust and compliance. No suspicious or malicious activity was detected, and the content is safe for general audiences. Overall, Lebenshilfe Hof's website is professional and functional, supporting its mission as a non-profit social service provider. Strategic improvements in privacy documentation, security headers, and contact transparency would strengthen its security posture and compliance standing.

K

Kinder-Herzen-Glücklich machen e.V.

kinderherzen-gluecklich-machen.de

45

Kinder-Herzen-Glücklich machen e.V. is a German non-profit organization dedicated to supporting the healthy and happy development of children, particularly in kindergartens within the Hof and Wunsiedel regions. The organization focuses on aiding children from socially disadvantaged backgrounds, migrants, and those affected by crises such as the Ukraine war and the COVID-19 pandemic. Their efforts include supporting educators, running social and emotional development projects, and fostering community engagement through donations and volunteerism. The website reflects a well-established regional presence with clear communication and donation mechanisms. Technically, the website is built on WordPress with common plugins such as LayerSlider and Contact Form 7. It employs HTTPS and a cookie consent banner, indicating basic privacy compliance. The site is moderately optimized for performance and mobile use, though some security headers are missing. No advanced analytics or tracking scripts were detected, suggesting a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies and incident response information. The absence of security headers and vulnerability disclosures indicates room for improvement. The WHOIS data aligns with the website's legitimacy, showing consistent registration and no privacy protection, appropriate for a non-profit. Overall, the website is professional, trustworthy, and focused on its charitable mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to strengthen compliance and trust.

Pfarrgemeinde St. Franziskus is a small non-profit religious organization serving the local community in Schwarzenbach an der Saale, Germany. The website provides information about church services, community groups, and events, targeting local parishioners and visitors. The site is built on WordPress and uses common plugins to manage content and photo galleries. The technical infrastructure is standard for a small community website, with HTTPS enabled and moderate performance. However, the site lacks visible privacy and cookie policies, contact emails, and phone numbers, which limits user trust and privacy compliance. Security posture is adequate but could be improved by adding security headers and incident response information.

C

Caritas gGmbH St. Heinrich und Kunigunde

wohnen-fuer-erwachsene.de

59

Wohnen für Erwachsene is a German non-profit social care organization providing residential and supportive living services for adults with disabilities. The website is professionally designed, well-structured, and targets adults with disabilities and their families in the Lichtenfels region. It is affiliated with Caritas gGmbH, a recognized social service provider, enhancing its credibility and trustworthiness. The site offers detailed information about its facilities, services, and career opportunities, supported by social media presence on Facebook and Instagram. Technically, the website is built on the Multiscreensite CMS platform, utilizing modern web technologies including service workers for progressive web app capabilities and Usercentrics for GDPR-compliant cookie consent management. The site is hosted on internet1.de nameservers and uses HTTPS, ensuring secure communication. Performance and mobile optimization are moderate to good, with basic accessibility features. From a security perspective, the website enforces HTTPS and uses a consent management platform, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website content and business, indicating legitimacy. Overall, the site demonstrates a solid security posture for a non-profit organization but could improve by adding explicit security headers and incident response information. The overall risk is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and continuous monitoring of third-party scripts to maintain compliance and security.

N

National Biodiversity Network UK Atlas

nbnatlas.org

55

The National Biodiversity Network UK Atlas operates the NBN Atlas website, which is the UK's largest repository of publicly available biodiversity data. The platform serves researchers, conservationists, and environmental stakeholders by providing access to over 300 million species occurrence records and enabling data sharing and analysis. The organization is positioned as a key non-profit entity in the biodiversity data sector within the UK, supported by a broad network of over 180 partners. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Google analytics tools, hosted on AWS infrastructure. The site demonstrates good digital maturity with responsive design and SEO optimization, though some accessibility and security header improvements are possible. Security posture is solid with HTTPS enforced, but lacks DNSSEC and some security headers. Privacy compliance is moderate with a cookie consent mechanism but no explicit privacy or terms pages detected in the provided content. Overall, the website is professional, trustworthy, and well-maintained, with no signs of blocking or adult content.

N

National Biodiversity Network

nbn.org.uk

55

The National Biodiversity Network (NBN) is a UK-based non-profit organization dedicated to the collection, sharing, and dissemination of biodiversity data. It operates a large partnership network with over 200 members including conservation organizations, government bodies, and voluntary groups. The NBN Atlas serves as a comprehensive data portal with over 300 million species occurrence records. The website reflects a mature digital presence with a WordPress CMS, modern SEO practices, and integration of social media channels to engage its target audience of environmental professionals and citizen scientists. Technically, the site uses common frameworks and libraries such as Bootstrap, jQuery, and WooCommerce for e-commerce capabilities, with Google Analytics and Tag Manager for analytics and tracking. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers and policies could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the provided content. Overall, the site is professional, trustworthy, and well-positioned within its niche, though it would benefit from enhanced transparency around privacy and security policies.

E

Eckstein - das Haus der Evang.-Luth. Kirche in Nürnberg

eckstein-evangelisch.de

43

Eckstein is a medium-sized non-profit institution serving as the heart of the Evangelical Lutheran Church in Nuremberg. It offers a broad range of educational, counseling, and community services, hosting events and providing meeting spaces in the city center. The website reflects a well-structured, professionally designed platform that effectively communicates its mission and services to a general audience interested in evangelical church activities. Technically, the site is built on TYPO3 CMS with Bootstrap and incorporates modern web technologies ensuring good performance, mobile optimization, and accessibility. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism. Security posture is solid with HTTPS and privacy-conscious analytics, though additional security headers and incident response information could enhance trust. Overall, the site is trustworthy, safe, and professionally maintained, supporting the institution's community-focused mission.

E

Evangelische Brüder-Unität

herrnhut-entdecken.de

53

The website www.herrnhut-entdecken.de represents the Evangelische Brüder-Unität, a non-profit religious and cultural organization based in Herrnhut, Germany. It provides visitors with information about Herrnhut, exhibitions, guided tours, and related cultural heritage. The site targets a general audience interested in religious history and cultural exploration. The business model is informational and community outreach focused, with a niche market position within religious and cultural tourism. Technically, the website is built on TYPO3 CMS, utilizing standard web technologies such as Bootstrap and FontAwesome. The site is moderately performant, mobile-optimized, and has good SEO practices. Accessibility is basic but present. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS (implied by canonical URLs), but no explicit security headers were detected in the HTML content. Cookie consent is implemented, and privacy policy is available, indicating GDPR compliance. However, there is no visible incident response or security policy documentation. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is consistent and indicates a legitimate domain registration. Overall, the website is professional, trustworthy, and suitable for its intended audience. Strategic improvements could focus on enhancing security headers, adding terms of service and incident response policies, and improving accessibility features to strengthen compliance and user trust.

G

Graf-Zinzendorf-Stiftung

zinzendorf.de

55

The Graf-Zinzendorf-Stiftung is a small non-profit foundation based in Germany focused on promoting the legacy of Nikolaus Ludwig Graf von Zinzendorf, particularly in relation to church, mission, and society. The foundation supports projects primarily connected to the Evangelische Brüder-Unität – Herrnhuter Brüdergemeine and engages donors and supporters through its website. The site is well-structured, professionally designed, and provides clear contact information and privacy compliance features, including a cookie consent mechanism. Technically, the website is built on TYPO3 CMS with modern web technologies and demonstrates good mobile optimization and user experience. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit security policies or incident response information. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. The domain WHOIS data is limited but consistent with the foundation's profile, showing no suspicious patterns. Overall, the website is trustworthy, safe, and serves its target audience effectively.

H

Herrnhuter Missionshilfe e.V.

herrnhuter-missionshilfe.de

55

Herrnhuter Missionshilfe e.V. is a German non-profit mission organization affiliated with the Evangelische Brüder-Unität. It supports over 60 projects across 9 countries, working closely with local church provinces and partners. The website serves as an information hub for their mission work, fundraising, and community engagement, targeting a general audience interested in religious mission and charitable activities. Technically, the site is built on TYPO3 CMS with responsive design and modern web standards, providing a good user experience and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

Norsk Zoologisk Forening is a well-established Norwegian non-profit organization dedicated to zoology and wildlife interests. Founded in 2001, it serves a community of zoology enthusiasts and researchers by providing publications such as the Fauna journal, organizing events, and promoting species mapping and conservation efforts. The website reflects a professional and consistent brand presence with clear calls to action for membership and engagement. Technically, the site is built on WordPress using a modern stack of plugins including Yoast SEO, Google Tag Manager, and GDPR compliance tools. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Performance is moderate, with room for improvement in security headers and explicit incident response policies. Security posture is solid with HTTPS enforced and privacy compliance well addressed through cookie consent mechanisms and a comprehensive privacy policy. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a vulnerability disclosure policy and incident response information suggests areas for enhancement. Overall, the site presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to sustain trust and compliance.

N

Norges sopp- og nyttevekstforbund

soppognyttevekster.no

54

Norges sopp- og nyttevekstforbund is a Norwegian non-profit organization dedicated to promoting the use and knowledge of mushrooms and useful plants. Established in 2004, it operates nationally with local member associations, offering educational courses, organizing events, and publishing related content. The website serves as a hub for members and the public, providing resources, event calendars, and an online store. Technically, the site is built on WordPress with WooCommerce and uses modern web technologies including Bootstrap and FontAwesome. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS and secure login mechanisms, but could benefit from improved security headers and updated libraries. Privacy compliance is evident with a comprehensive privacy policy, though cookie consent mechanisms are lacking. Overall, the site is trustworthy, professional, and well-aligned with its non-profit mission.

N

Norsk Botanisk Forening

botaniskforening.no

43

Norsk Botanisk Forening is a well-established Norwegian non-profit organization dedicated to promoting knowledge and conservation of native flora. The website serves as an educational platform offering resources, activities, and projects aimed at nature enthusiasts and the general public. The organization has a strong community focus with volunteer-driven initiatives and a clear mission to protect plant biodiversity. Technically, the site is built on WordPress with modern plugins and integrations such as LearnDash for educational content and Google Maps for location services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, but lacks some advanced security headers and published policies, which are recommended for compliance and trust. Overall, the site is trustworthy and professional, though it would benefit from adding privacy and cookie policies to enhance GDPR compliance and user transparency.

B

BirdLife Norge

birdlife.no

63

BirdLife Norge is a well-established Norwegian non-profit organization focused on bird conservation and environmental protection. The website reflects a mature digital presence with a clear focus on education, community engagement, and conservation projects. The organization leverages modern web technologies such as Bootstrap and jQuery to deliver a responsive and accessible user experience. Social media integration is evident, enhancing outreach and community interaction. However, the website lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Security posture is moderate with no visible security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website is professional, trustworthy, and serves its target audience effectively.

S

Sabima

sabima.no

51

Sabima is a Norwegian non-profit environmental organization dedicated to halting biodiversity loss and conserving natural habitats such as forests, wetlands, and cultural landscapes. The website serves as a platform for advocacy, public education, and fundraising, featuring campaigns, news, events, and membership information. Sabima holds a strong position in the Norwegian environmental NGO sector, collaborating with multiple member associations and maintaining active social media engagement. Technically, the website is built on WordPress with WooCommerce integration for e-commerce functionality. It employs modern web technologies including Google Analytics for tracking, Google Maps API for geospatial features, and Yoast SEO for search engine optimization. The site is mobile-optimized and demonstrates good performance and accessibility standards, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS with a strong SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response plan. Privacy compliance is generally good, with a comprehensive privacy policy and terms of service, but it lacks a visible cookie consent mechanism. The WHOIS data is unavailable due to Norid's privacy policy for .no domains, which is typical and not suspicious. Overall, Sabima's website is professional, trustworthy, and well-maintained, with minor improvements recommended in security headers and cookie consent to enhance compliance and user trust.

D

Deutsches Liturgisches Institut

liturgie.de

44

The Deutsches Liturgisches Institut is a specialized non-profit organization dedicated to liturgical research, education, and resource provision primarily for German-speaking clergy, church musicians, and laypersons interested in liturgy. The website serves as a portal for accessing publications, courses, events, and practical liturgical materials. The institute maintains a consistent and professional online presence with clear contact information and institutional references. Technically, the site is built on WordPress with common plugins like jQuery and RoyalSlider, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The absence of public WHOIS data is consistent with privacy protection practices common for non-profits. Overall, the site is trustworthy, safe, and well-aligned with its mission.

D

Die evangelische Kirche

kirche-entdecken.de

44

Kirche-entdecken.de is a German non-profit educational website operated by the Evangelische Kirche, targeting children to explore and learn about the Christian faith through interactive content, games, quizzes, videos, and crafts. The platform is well-established and sponsored by major regional church organizations, positioning it as a trusted resource for religious education for children in Germany. Technically, the site is built on the TYPO3 CMS platform, uses modern web technologies, and is hosted on German infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and privacy-respecting analytics via Matomo, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, but no explicit terms of service or security policy pages are found. Overall, the site is safe, professional, and trustworthy with no adult or questionable content.

K

Kirche im Grünen

kircheimgruenen.de

44

Kirche im Grünen is a small non-profit religious organization based in Germany that offers outdoor church services and events across various scenic regions including the Fichtelgebirge, Bayerischer Wald, and the Alpine area. The website serves as an informational portal inviting visitors to participate in these spiritual gatherings in nature. The organization positions itself as a niche provider of religious services emphasizing connection with nature. Technically, the website is built on Drupal 10 CMS with Bootstrap framework, leveraging jQuery and other standard web technologies. It is hosted on a German hosting provider (kunde24.de) and demonstrates moderate performance with good mobile optimization. The site is accessible, well-structured, and provides a good user experience with clear navigation. From a security perspective, the site uses HTTPS and secure form submissions but lacks advanced security headers and published security policies. Privacy compliance is partially addressed with a privacy policy page, but no cookie consent mechanism is present. No incident response or vulnerability disclosure information is available. Overall, the security posture is adequate but could be improved with additional best practices. The website is free from adult or questionable content and maintains a high trustworthiness level. External links are relevant and point to partner church tourism sites. No advertising or tracking scripts are detected, indicating a privacy-conscious approach. The WHOIS data is minimal but consistent with a legitimate small non-profit entity. The overall risk is low, with recommendations focusing on enhancing security headers, cookie consent, and incident response transparency.

B

Bundesverband Kulturloge e.V.

kulturloge.de

63

The Bundesverband Kulturloge e.V. is a German non-profit organization dedicated to promoting cultural access for people with low income by mediating free tickets to cultural events such as theater, cinema, sports, and concerts. The organization supports the founding of regional Kulturlogen and provides a specialized ticket database and print templates free of charge. Their volunteer-based approach emphasizes dignity and respect for the beneficiaries, known as 'Kulturgäste'. The website reflects a well-established national association with clear communication and partnership with LOTTO Hessen. Technically, the website is built on WordPress 6.8.3 using the Avada theme and child theme, incorporating modern web technologies including jQuery and Matomo analytics configured for privacy compliance. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no explicit security policy or incident response contacts are published. From a security perspective, the site uses HTTPS with a good SSL configuration and privacy-conscious analytics. Security headers are not explicitly detected, and there is no public vulnerability disclosure or security.txt file. The absence of incident response contacts and security policy pages represents an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its non-profit mission effectively. Strategic recommendations include publishing security and incident response policies, enhancing security headers, and considering a vulnerability disclosure mechanism to further strengthen trust and security posture.

H

Haus für Demokratie und Vielfalt

hdv-hanau.de

59

Haus für Demokratie und Vielfalt is a civic initiative based in Hanau, Germany, focused on promoting democracy and diversity. The organization operates from a building acquired by the city of Hanau in 2021, located at a historically significant site. The website serves as an informational and community engagement platform, targeting the general public interested in democratic values and social inclusion. The business model is non-profit and educational, with a local market position and active social media presence.

E

E.C.C.O.

ecco-eu.org

53

E.C.C.O. is a European non-profit confederation dedicated to the professional organization, development, and promotion of conservator-restorers. The organization focuses on setting standards, regulating practice at the European level, and enhancing communication and mobility among professionals in the cultural heritage sector. Their website reflects a mature and professional presence with clear mission and vision statements, supported by active social media channels. Technically, the site is built on WordPress using the Astra theme and several plugins, including BuddyPress and Borlabs Cookie, indicating a modern and community-oriented platform. Security posture is adequate with HTTPS enforced and some security plugins in use, but lacks visible security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service documents found. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy transparency and security hardening are recommended.

Ocean Decade is a globally recognized non-profit initiative launched in 2018, focused on generating and disseminating critical ocean knowledge to promote sustainable ocean management. The website serves as an information hub for scientists, policymakers, and stakeholders interested in ocean sustainability. It is positioned as an important international framework under the United Nations, leveraging digital tools to communicate its mission effectively. Technically, the website is built on WordPress with modern SEO and translation plugins, hosted by a reputable registrar, and secured with HTTPS. However, it lacks visible privacy and cookie policies, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and security headers. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve privacy compliance and security transparency.

S

Schönstatt-Zentrum Marienberg

schoenstatt-bamberg.de

63

Schönstatt-Zentrum Marienberg is a small, non-profit religious community center in Germany focused on the Schönstatt movement. It offers guest and youth house accommodations, spiritual events, and community programs targeting religious community members, families, and youth groups. The website is professionally designed with good content quality, clear navigation, and strong accessibility features. Technically, it uses the Alkacon Mercury CMS platform, integrates Matomo analytics for privacy-conscious tracking, and hosts content on servers associated with keymachine.de. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and privacy policies.

E

Evangelische Brüder-Unität Herrnhuter Brüdergemeine

ebu.de

57

The Evangelische Brüder-Unität (Herrnhuter Brüdergemeine) is a Protestant, ecumenically open church community with a presence in several European countries. The website serves as an informational and community portal, providing details about their faith, history, global relations, and current activities. It targets members and interested individuals seeking to learn about or participate in the church's mission, education, and social services. The organization operates as a non-profit entity with a medium-sized footprint in Germany.

B

BUND Landesverband Nordrhein-Westfalen e.V.

bund-nrw.de

58

BUND Landesverband Nordrhein-Westfalen e.V. is a well-established non-profit environmental organization focused on nature and environmental protection in the German state of Nordrhein-Westfalen. The website serves as a comprehensive platform for advocacy, education, membership engagement, and public awareness campaigns. It maintains a strong regional presence with active social media channels and regularly updated content including news, publications, and event information. Technically, the site is built on the TYPO3 CMS platform, employs privacy-conscious analytics via Matomo, and uses tarteaucitron.js for cookie consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response policies are absent. Privacy compliance is robust, with clear privacy and cookie policies in German, aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-suited to its audience of environmentally conscious citizens and activists in NRW.

S

Sozialverband Deutschland e.V.

sovd-rentenlabyrinth.de

51

The Sozialverband Deutschland e.V. (SoVD) is a well-established non-profit organization focused on social welfare and pension advisory services in North Rhine-Westphalia, Germany. The website serves as an informational and service platform, providing guidance on pensions, social law, and related social services. It targets German residents seeking support navigating social security and pension systems. The organization maintains a strong regional presence with multiple advisory centers and active social media engagement. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and integrates analytics and chatbot tools for enhanced user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a professional, trustworthy, and user-friendly platform for social welfare services.