Non-profit security reports

S

Sozialverband Deutschland e.V.

sovd-gemeinsam.de

46

SoVD Gemeinsam gegen Einsam is a campaign website operated by Sozialverband Deutschland e.V., a large non-profit social welfare organization in Germany. The campaign addresses the issue of loneliness affecting various vulnerable groups including seniors, disabled persons, caregivers, and youth. The website offers information on counseling, neighborhood help, and political engagement to combat social isolation. Technically, the site is built on WordPress using the Elementor page builder and employs privacy-conscious tools such as Matomo analytics and Borlabs Cookie for GDPR-compliant cookie consent. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact is primarily via regional volunteer email addresses, with no phone numbers or physical addresses explicitly listed in the content provided. Overall, the site is professional, well-branded, and trustworthy with a clear social mission.

C

COMU Carl Orff Museum

co-mu.de

41

The COMU Carl Orff Museum website represents a well-structured, culturally focused institution dedicated to the life and work of composer Carl Orff. It serves a diverse audience including music enthusiasts, families, educators, and the international Orff community. The museum offers exhibitions, educational workshops, and community engagement programs, positioning itself as a unique cultural and educational hub in the Ammersee region of Germany. Technically, the site uses modern frameworks such as October CMS and Bootstrap, with integrated consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

F

Fédération Internationale Catholique d’Education Physique et sportive

ficep.org

54

FICEP (Fédération Internationale Catholique d’Education Physique et sportive) is an international non-profit sports association promoting Christian ethical ideals in sports and communities. Established in 2003, it serves a niche audience of Christian sports organizations and advocates for the integration of Christian values in physical education and sports activities worldwide. The website reflects this mission with relevant content and a professional design tailored to its audience. Technically, the site is built on WordPress using popular plugins such as Modern Events Calendar Lite and Nextend Smart Slider3 Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS with a valid SSL certificate, ensuring secure communications. However, it lacks some key compliance documents such as a privacy policy and terms of service, which are important for GDPR and general user trust. Security posture is adequate with HTTPS but could be improved by adding security headers and publishing incident response and vulnerability disclosure policies. Overall, the website is functional and professional but would benefit from enhanced privacy and security documentation to improve trust and compliance.

C

CVJM Deutschland

cvjm.de

49

CVJM Deutschland is a well-established non-profit Christian youth organization operating primarily in Germany with a global YMCA affiliation. The website serves as an information hub for youth aged 10 to 30, offering community, spiritual growth, volunteer opportunities, and sports activities. The organization maintains a strong social media presence and provides clear contact information and donation options. Technically, the site uses Ecics CMS with jQuery, Slick Carousel, and Matomo analytics, delivering a moderately performant and mobile-optimized experience. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its mission.

P

Polsko-Niemiecka Współpraca Młodzieży

pnwm.org

53

Polsko-Niemiecka Współpraca Młodzieży (PNWM) is a well-established non-profit organization founded in 1998, dedicated to fostering Polish-German youth cooperation through funding, educational resources, and project support. The website serves as a comprehensive platform offering information on grants, training, publications, and partner search tools, targeting youth organizations, schools, and project organizers in Poland and Germany. The organization maintains a strong market position as a bilateral youth cooperation entity with a medium-sized operational scale and a clear mission to support international youth exchange projects. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and Matomo for privacy-conscious analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs HTTPS with a good SSL configuration and uses a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site follows best practices including HTTPS enforcement, cookie consent, and privacy-respecting analytics. However, there is room for improvement by enabling DNSSEC, implementing additional security headers, and publishing explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, PNWM's website is professional, trustworthy, and compliant with privacy regulations, supporting its mission effectively. The domain's WHOIS data confirms legitimacy with a long registration history consistent with the organization's profile. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party plugins to maintain a strong security posture.

F

Fränkischer Marienweg

fraenkischer-marienweg.de

53

Fränkischer Marienweg is a small non-profit organization dedicated to promoting the cultural and religious heritage of the Franconia region in Germany through the Fränkischer Marienweg pilgrimage route. The website provides comprehensive information about the pilgrimage, including events, downloadable route data, and useful resources for pilgrims. It targets pilgrims, tourists, and cultural enthusiasts interested in Marian devotion and regional heritage. The site is built on WordPress with Elementor and uses reputable plugins for event management and file downloads, reflecting a moderate to good level of digital maturity.

V

vkm Bayern

vkm-bayern.de

76

The vkm-Bayern website represents a regional non-profit union dedicated to church and diaconal employees in Bavaria, Germany. It focuses on advocating for fair wages, employee rights, and fostering a strong service community. The organization positions itself as a strong regional player within its niche, targeting employees in religious and social service sectors. The website content is professionally presented, with clear branding and consistent messaging aligned with its mission. Technically, the website is built on WordPress using Elementor and WooCommerce, indicating a mature digital infrastructure capable of supporting content management and e-commerce functionalities. Hosting is via AWS DNS services, ensuring reliable availability. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting good digital maturity and regulatory adherence. Performance and mobile optimization are adequate, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks publicly available security policies and incident response contacts, which are recommended for transparency and preparedness. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website is trustworthy and professionally managed, with room for improvement in security transparency and accessibility. Strategic recommendations include publishing a security policy, incident response contacts, and enhancing accessibility compliance to strengthen user trust and regulatory adherence.

Z

Zentrum Verkündigung der EKHN

zentrum-verkuendigung.de

59

Zentrum Verkündigung der EKHN is a non-profit religious organization affiliated with the Evangelische Kirche in Hessen und Nassau, providing a broad range of church-related services including publications, events, spiritual resources, and music programs. The website serves as an important regional hub for church members, volunteers, and stakeholders, offering comprehensive content and resources tailored to their needs. The organization maintains a clear and consistent brand presence with good content quality and user experience. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating Matomo for analytics. Hosting is provided by SchlundTech, a reputable provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive digital maturity level. From a security perspective, the site uses HTTPS with a solid SSL configuration and secure form handling. However, it lacks explicit security policies and incident response information publicly available, which could be improved. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms in place. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a trustworthy and professional digital presence for a religious non-profit entity, with recommendations to enhance security headers and publish security-related policies to further strengthen its posture.

D

Deutsches Liturgisches Institut

dli.institute

44

The Deutsches Liturgisches Institut operates as a specialized non-profit institute dedicated to liturgical research, education, and resource provision primarily for German-speaking religious communities. The website serves as a portal for accessing publications, educational courses, event information, and practical liturgical aids. The organization maintains a consistent brand presence and provides clear contact information, reinforcing its credibility within its niche market. Technically, the website is built on WordPress and utilizes common libraries such as jQuery and RoyalSlider. While the site is accessible and functional with moderate performance, some technical improvements are recommended, including enforcing HTTPS on all resources and enhancing security headers. The site lacks a cookie consent mechanism, which is a compliance gap under GDPR regulations. From a security perspective, the site uses HTTPS but does not implement advanced security headers or mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to TLD restrictions, but the domain appears legitimate and actively maintained. Overall, the security posture is moderate but could benefit from improvements in security best practices and privacy compliance. The overall risk is low given the non-profit nature and content focus, but strategic enhancements in technical security and privacy compliance would strengthen trust and reduce potential risks.

M

Mach Kirchenmusik

mach-kirchenmusik.de

57

Mach Kirchenmusik is a specialized non-profit platform focused on promoting church music through education, events, and community engagement in Germany. The website serves musicians, students, and church communities by providing resources, event listings, and opportunities to participate in church music activities. The platform maintains a professional and consistent brand presence with excellent content quality and user experience. Technically, the site is built on Drupal 10, uses Matomo Analytics for privacy-conscious tracking, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

I

Interkulturell Evangelisch in Bayern

interkulturell-evangelisch.de

55

Interkulturell Evangelisch in Bayern is a small non-profit organization focused on promoting intercultural church development, multilingual worship services, and diversity-sensitive pastoral care within Bavaria. The website serves as an informational platform providing resources and links related to anti-discrimination and ecumenical cooperation among international congregations. The organization targets church communities and intercultural groups, positioning itself as a niche regional entity within the non-profit sector. Technically, the website is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard JavaScript libraries. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The presence of a cookie consent banner indicates some level of privacy compliance, although explicit privacy policies and terms of service are absent. From a security perspective, the site enforces HTTPS and includes scripts to harden fetch and XHR requests. However, it lacks explicit security headers and does not provide incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious patterns were detected, and the site is accessible without WAF or security challenges. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance, security best practices, and contact transparency. Strategic enhancements in these areas would strengthen trust and compliance posture.

C

Chorverband in der Evangelischen Kirche in Deutschland e.V. (CEK)

choere-evangelisch.de

54

The Chorverband in der Evangelischen Kirche in Deutschland e.V. (CEK) is a well-established non-profit umbrella organization representing over 15,000 evangelical church choirs and nearly 250,000 singers across Germany, including a significant number of children and youth. The organization focuses on promoting church singing through various activities such as sing weeks, training, publications, and community support initiatives. The website reflects a professional and consistent brand presence, targeting choir members, church musicians, and related stakeholders within Germany. The digital infrastructure is based on a modern WordPress CMS with relevant plugins for GDPR compliance and user engagement, hosted on netcup servers.

E

Evangelischer KITA-Verband Bayern e.V.

evkita-bayern.de

49

The Evangelischer KITA-Verband Bayern e.V. is a regional non-profit association representing childcare providers affiliated with the Evangelical Lutheran Church in Bavaria. The organization offers advisory services, training, information, and advocacy for kindergartens and daycare providers. Their website reflects a professional and consistent brand image, targeting childcare professionals and church organizations in Bavaria. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, providing a responsive and accessible user experience. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, though it lacks published formal security policies or incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and well-aligned with its business purpose.

Wirkstatt evangelisch is a newly established institution within the Evangelical Lutheran Church in Bavaria, formed by merging three church departments to provide consolidated support, training, and consulting services to church employees and communities. The website presents a clear mission focused on collaboration, spirituality, and organizational efficiency within the church context. Technically, the site is built on WordPress with a modern theme, showing good mobile optimization and accessibility, though some SEO and security header improvements are possible. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and a cookie consent mechanism. Overall, the site is trustworthy, compliant with GDPR, and professionally presented, reflecting its non-profit church affiliation.

L

Landesverband für Evangelische Kindergottesdienstarbeit in Bayern

kirche-mit-kindern.de

49

The website www.kirche-mit-kindern.de represents the Landesverband für Evangelische Kindergottesdienstarbeit in Bayern, a non-profit organization dedicated to supporting children's church services in Bavaria, Germany. It offers educational resources, training programs, newsletters, and event information tailored to church workers and families involved in religious education for children. The organization holds a regional leadership position within its niche. Technically, the site is built on TYPO3 CMS, a professional and mature content management system, with responsive design and good accessibility features. The website employs HTTPS with strong SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, no advanced security headers or explicit security policies are published. From a security perspective, the site shows good practices such as encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of a formal security policy or incident response contact is noted as an area for improvement. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic recommendations include enhancing security transparency, publishing incident response details, and adding security headers to further strengthen the security posture.

The website bernhard-lichtenberg-hof.de serves as the official online presence for the Catholic parish Bernhard Lichtenberg in Hof, Germany. It provides comprehensive information about church services, community events, pastoral contacts, and religious education. The site targets local parishioners and visitors interested in the Catholic community activities within the Hof region. The business model is non-profit, focusing on spiritual and community services. The website is well-branded, consistent, and contains trust indicators such as official contact details and legal disclosures.

K

KKV Aktuell

kkv-aktuell.de

54

KKV Aktuell is a German non-profit association website providing current information about the KKV Bundesverband. The site targets members and potential members interested in the organization's activities and membership opportunities. The business model is focused on community engagement and information dissemination within a niche non-profit sector. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and jQuery, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks explicit security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in privacy and security transparency.

F

Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Hof/ BDKJ-Regionalverband Hof-Kulmbach

jugend-im-dekanat-hof.de

57

The website represents a regional Catholic youth pastoral office and youth organization in the Hof and Kulmbach areas of Germany, affiliated with the Erzdiözese Bamberg. It provides information on youth work, events, subsidies, and contact details for local offices. The site targets youth, volunteers, and community members involved in church-related youth activities. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for privacy-respecting analytics, and integrates accessibility features effectively. The site is well-structured, mobile-optimized, and includes GDPR-compliant privacy and cookie policies. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No incident response or vulnerability disclosure policies are found. Overall, the site is trustworthy, professional, and safe for general audiences.

The website www.eucharistinerinnen.de represents the Kongregation der Schwestern Dienerinnen Jesu in der Eucharistie, a small non-profit Catholic religious community based in Germany. The site provides comprehensive information about their spiritual mission, community activities, youth programs, and opportunities for engagement. The organization has a long-standing history, celebrating 100 years, and targets individuals interested in Catholic spirituality and religious life. Technically, the website is built on the Jimdo CMS platform, utilizing standard web technologies such as jQuery and bxSlider for galleries. It is hosted by one.com and employs HTTPS with a good SSL configuration. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. Privacy and cookie policies are present and GDPR compliant, including a functional cookie consent mechanism. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks some advanced security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing no suspicious registration patterns. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. Strategic recommendations include enhancing security headers, adding explicit security policies, and possibly including contact emails for better communication. The site effectively serves its niche audience with clear content and navigation.

The website kirche-bad-steben.de serves as the official online presence for the Catholic parish office in Naila, Germany. It provides parishioners and visitors with comprehensive information about church services, community groups, pastoral care, church history, and contact details. The site targets local community members and those interested in religious activities and events. As a non-profit religious organization, the website focuses on community engagement and information dissemination rather than commercial activities. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery for interactivity, Font Awesome for icons, and integrates multimedia components like JWPlayer and Revolution Slider. It uses Matomo analytics with privacy-conscious configurations and Google reCAPTCHA for bot protection. Hosting is managed via internet1.de, with stable DNS configurations. The site is mobile-optimized and provides a clear navigation structure, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. Privacy policies and cookie management are comprehensive and transparent, enhancing user trust. No incident response or security policy pages are present, which could be considered for future enhancement. Overall, kirche-bad-steben.de is a well-maintained, trustworthy website for a small non-profit religious entity. It balances user privacy with functional analytics and provides clear contact information. Strategic recommendations include adding security headers, publishing incident response contacts, and maintaining up-to-date third-party libraries to further strengthen security posture.

P

Polsko-Niemiecka Współpraca Młodzieży

dpjw.org

53

The Deutsch-Polnisches Jugendwerk (DPJW) is a well-established non-profit organization dedicated to fostering German-Polish youth cooperation through funding, training, and cultural exchange projects. The website serves as a comprehensive portal for project applications, partner searches, publications, and educational resources targeting youth organizations, schools, and project leaders. The organization enjoys a strong market position with a domain age dating back to 1998, reflecting its longstanding presence and credibility in the bilateral youth cooperation sector. Technically, the website is built on a modern WordPress CMS with a robust tech stack including Yoast SEO, Matomo analytics, and accessibility features. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although improvements such as enabling DNSSEC and adding security headers could enhance protection. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Contact information is primarily provided via physical addresses and contact forms, with social media channels actively linked. However, explicit security policies and incident response contacts are not present. Overall, the DPJW website reflects a professional, trustworthy, and user-friendly platform supporting its mission of youth cooperation. Strategic recommendations include enhancing DNS security, publishing security policies, and maintaining up-to-date software to sustain its secure and compliant posture.

Junge Aktion der Ackermann-Gemeinde is a small non-profit Catholic youth organization based in Germany, focused on fostering German-Czech and broader Central European cultural exchange through youth projects and international encounters. The website is built on TYPO3 CMS with Bootstrap, providing a modern and mobile-optimized user experience. The organization maintains an active social media presence and offers newsletter subscriptions to engage its audience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit terms of service and detailed security policies.

G

Gemeinschaft Junges Ermland

junges-ermland.de

46

Gemeinschaft Junges Ermland is a small non-profit organization focused on fostering German-Polish youth relations through cultural exchange, societal and religious education, and youth meetings. The organization targets young people aged 16 to 26 and organizes multiple annual events to promote friendship and understanding between Germany and Poland. The website serves as an information hub for events, photo galleries, and blog posts documenting their activities. Technically, the site is built on WordPress using Elementor and several plugins to manage events and user interactions. The site is well-structured, mobile-optimized, and uses HTTPS, indicating a mature digital presence. However, it lacks key compliance documents such as a privacy policy and terms of service, which are critical for GDPR compliance and user trust. Security posture is good with no visible vulnerabilities or exposed sensitive data. Overall, the site is professional and trustworthy but could improve privacy and compliance documentation.

F

FiZ gGmbH

fiz-hof.de

57

FiZ gGmbH is a social enterprise based in Hof, Germany, providing ambulatory assistance services to families and adults. The organization positions itself as a local non-profit entity focused on social support. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript and CSS. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, it lacks comprehensive privacy and cookie policies, terms of service, and incident response information, which are critical for compliance and trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal policies. Overall, the site is functional and professional but would benefit from enhanced privacy and security measures to strengthen user trust and regulatory compliance.

The website represents the Catholic parish Bernhard Lichtenberg in Hof, Germany, serving as an information hub for parishioners and the local community. It provides details on church services, events, groups, and contact information, positioning itself as a trusted local religious community resource. The site is affiliated with the Bamberg diocese, as indicated by multiple external resources and analytics domains. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and JW Player, hosted on Evanzo nameservers, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and incident response policies. Privacy compliance is strong, with a comprehensive privacy policy and cookie banner. Overall, the site is professional, trustworthy, and well-suited for its non-profit religious mission.

F

Freies Deutsches Hochstift

freies-deutsches-hochstift.de

59

Freies Deutsches Hochstift is a German cultural and educational institution dedicated to German literature and history, operating museums and archives. The website presents a professional and consistent brand image with good content quality targeted at the general public interested in German culture. Technically, the site uses modern tools such as Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and explicit security policies are missing. Privacy compliance is supported by a comprehensive cookie consent mechanism but lacks a visible privacy policy page. Overall, the site is trustworthy and safe with no adult or questionable content detected.

S

Sozialverband Deutschland e.V.

sovd.de

54

Sozialverband Deutschland e.V. (SoVD) is a large, well-established non-profit social association in Germany with approximately 600,000 members. The organization focuses on social law counseling, advocacy, and community support through a network of 2,000 local branches and nationwide counseling centers. Their website provides comprehensive information about their services, campaigns, publications, and membership benefits, targeting individuals seeking social support and legal advice in Germany. The business model centers on membership and social advocacy, positioning SoVD as a key player in the German social non-profit sector. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including jQuery, Klaro for cookie consent, Matomo for privacy-conscious analytics, and eyeAble for accessibility enhancements. The site is mobile-optimized, well-structured, and demonstrates good SEO and accessibility practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, reflecting good privacy compliance aligned with GDPR. However, there is a lack of visible security headers and no published security or incident response policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the organization's online presence, supporting legitimacy. Overall, the website is professional, trustworthy, and well-suited to its audience. Strategic recommendations include enhancing security headers, publishing formal security and incident response policies, and providing clearer contact information for data protection officers. These steps would strengthen the security posture and compliance transparency, further boosting user trust and organizational credibility.

A

Acción Episcopal Adveniat

adveniat.org

48

Acción Episcopal Adveniat is a German Catholic charitable organization dedicated to supporting impoverished communities in Latin America and the Caribbean. The organization operates primarily through donations and campaigns within the Catholic community in Germany, focusing on sustainable development projects initiated by local church counterparts. Their key services include project funding, scholarship programs, and environmental initiatives such as solar energy support. The website is well-branded and consistent with the organization's mission, targeting donors and supporters interested in Latin American aid.

Y

YES Forum

yes-forum.eu

46

YES Forum is a European non-profit network dedicated to empowering young people with fewer opportunities by promoting social inclusion and professional skill development. The organization operates primarily in Germany and targets youth organizations, social workers, and policymakers across Europe. Their services include advocacy, project coordination, publications, and membership networking. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting their legitimacy and trustworthiness. Technically, the website uses standard web technologies (HTML5, CSS3, JavaScript) with no explicit CMS detected. It is mobile-optimized and performs moderately well, though accessibility features are basic. The site uses HTTPS with no visible security vulnerabilities but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. From a security perspective, the site shows a good posture with encrypted connections and no exposed sensitive data. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is unavailable due to privacy protection, which is common for non-profits but slightly reduces trust signals. Overall, YES Forum's website is a credible and professional platform supporting its mission, with moderate technical maturity and a solid security baseline. Strategic improvements in privacy compliance and security transparency would further enhance trust and compliance.

B

Bundesarbeitsgemeinschaft Katholische Jugendsozialarbeit (BAG KJS) e.V.

bagkjs.de

44

The Bundesarbeitsgemeinschaft Katholische Jugendsozialarbeit (BAG KJS) e.V. is a German non-profit organization advocating for youth social work, particularly focusing on young people facing individual impairments or social disadvantages. The organization operates as a national umbrella body, providing advocacy, information resources, and program management to support youth inclusion and social justice. The website reflects a professional and consistent brand presence, targeting youth social workers, policymakers, and church and societal stakeholders. Technically, the site is built on WordPress with Elementor and uses modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. The site is mobile-optimized and includes Google Analytics for visitor insights. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and explicit privacy and terms of service pages are absent. Overall, the site is trustworthy and well-maintained but could improve transparency and compliance by publishing detailed privacy and security policies and providing explicit contact details.

B

Bundesarbeitsgemeinschaft Evangelische Jugendsozialarbeit

bagejsa.de

50

Bundesarbeitsgemeinschaft Evangelische Jugendsozialarbeit is a German non-profit organization dedicated to youth social work, political advocacy, and integration programs for young people, especially those in precarious situations or with migration backgrounds. The organization operates multiple offices in Germany and provides resources, events, and policy advice to stakeholders in the youth social work sector. The website is built on TYPO3 CMS and employs modern web technologies including a GDPR-compliant consent management platform and Matomo analytics for privacy-respecting user tracking. Accessibility is a strong focus, with features supporting color blindness and keyboard navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and audience.

The Deutscher LandFrauenverband e.V. (dlv) is a well-established non-profit organization representing approximately 450,000 women living in rural areas across Germany. The website serves as a comprehensive platform to advocate for rural women's interests, provide information on projects, publications, events, and facilitate membership engagement. The organization maintains a strong market position as a leading association in its sector with a large membership base and active social media presence. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and includes a cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and features good SEO practices. Analytics are conducted via Matomo, ensuring moderate user tracking with privacy considerations. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks some advanced security headers and publicly available security policies or incident response information. The WHOIS data is unavailable due to query failure, which limits domain trust verification, but the professional presentation and transparent contact information support legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.

E

EAF Berlin

eaf-berlin.de

51

EAF Berlin is an established independent non-profit organization based in Germany, specializing in promoting diversity, inclusion, and leadership development. With over 25 years of experience, it offers a range of services including trainings, consulting, research, mentoring, and workshops aimed at fostering equality and empowering individuals and organizations. The organization is well-positioned in its niche, leveraging a strong network across politics, business, and academia. The website reflects a professional and consistent brand image, targeting organizations and individuals interested in diversity and leadership.

BAGSO - Bundesarbeitsgemeinschaft der Seniorenorganisationen e.V. is a reputable German non-profit organization dedicated to representing the interests of senior citizens. The website serves as an information and advocacy platform promoting active, self-determined, and healthy aging. It targets older adults, senior organizations, policymakers, and the general public interested in senior issues. The organization operates multiple projects and provides publications, events, and networking opportunities to support its mission. Technically, the website is built on TYPO3 CMS and uses Matomo analytics configured with privacy-respecting settings. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and disables cookies in analytics but lacks some security headers and explicit incident response information. Privacy compliance is good with a comprehensive privacy policy, though cookie consent mechanisms could be improved. Overall, the website is trustworthy, professional, and aligned with its mission, with minor areas for security and compliance enhancement.

A

Agouti

agouti.eu

60

Agouti.eu is a non-profit initiative developed by Wageningen University and the Research Institute for Nature and Forest (INBO) to provide AI-powered solutions for processing wildlife camera trap data. The platform offers tools for uploading, annotating, and exporting standardized camera trap data, targeting academic, non-profit, and commercial users with a focus on wildlife conservation and research. The website is well-structured, informative, and includes instructional videos to facilitate user onboarding. Technically, the site is built using Ember.js and Video.js, hosted on university data centers, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though it lacks explicit security policies and incident response contacts. Privacy compliance is supported by a clear privacy policy and terms of service, but no cookie consent mechanism is present. Overall, the site is trustworthy, professional, and safe for general audiences.

S

Spirituelles Zentrum St. Martin München

stmartin-muenchen.de

48

Spirituelles Zentrum St. Martin München operates as a small non-profit spiritual center based in Germany, offering a variety of spiritual and community services including events, pilgrimages, meditation groups, and workshops. The website is professionally designed using WordPress and Elementor, with good SEO and accessibility features. It demonstrates compliance with GDPR through a comprehensive privacy policy and cookie consent mechanism. The technical infrastructure includes reputable hosting by Alfahosting and uses modern plugins and analytics tools like Matomo with user consent. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

S

ST. JAKOB

jakobskirche-nuernberg.de

36

ST. JAKOB is a historic Evangelical Lutheran church located in Nuremberg, Germany, with a rich heritage of approximately 950 years. The website serves as a community portal offering information about religious services, cultural events, a kindergarten, and community support initiatives. The target audience includes local residents, church members, pilgrims, and families. The business model is non-profit, focusing on community engagement and religious activities. Technically, the website is built on WordPress 4.7.31 using the Hi-Response theme, with embedded multimedia content and Google Analytics for visitor tracking. While the site is functional and well-structured with good mobile optimization, it uses outdated software components that pose potential security risks. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and professional but would benefit from technical updates and enhanced security measures.

O

Offene Tür Erlangen

offene-tuer-erlangen.de

58

Offene Tür Erlangen is a small non-profit counseling and advisory center affiliated with the Erzdiözese Bamberg, serving the local community in Erlangen, Germany. The organization offers open counseling, adult education, exhibitions, and support for individuals facing difficult life situations or mental health challenges. The website reflects a professional and consistent brand image, providing clear contact information and a comprehensive cookie consent mechanism, demonstrating good privacy compliance. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Matomo analytics, hosted on infrastructure associated with the Diocese of Bamberg. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the site is fully accessible without WAF or blocking mechanisms.

The website for Pfarrei Altenbanz und Pfarrei Banz serves as the official online presence of the Catholic parish in Altenbanz and Banz, Germany. It provides parishioners and visitors with information about religious services, sacraments, community events, and contact details. The site is clearly targeted at local community members and those interested in church activities. The business model is non-profit, focusing on spiritual and community services. The website content is well-structured, professionally presented, and consistent with the parish's mission. Technically, the site employs a modern frontend stack including jQuery, Bootstrap, Font Awesome, and specialized plugins like Revolution Slider and JWPlayer. It uses a CMS likely based on FlexiWeb, hosted on servers associated with internet1.de. The site is mobile responsive and includes accessibility features, though these could be enhanced. Analytics are handled via Matomo with privacy-conscious anonymous tracking fallback, and Google reCAPTCHA is used to protect forms. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and incident response contact information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration is consistent with the website's purpose, though registrant details are minimal. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic improvements include adding security headers, publishing incident response contacts, and enhancing accessibility. These steps would further strengthen trust and security posture.

DPSG SG Nahost is a small non-profit organization focused on fostering connections and cultural exchange among scouts in the Middle East. The website serves as an informational and community hub, providing resources, tips, and updates about scouting adventures and partnerships in the region. The site is built on a WordPress platform with a modern but moderate technical infrastructure, leveraging common libraries such as Bootstrap and jQuery. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-targeted to its audience, though improvements in privacy compliance and security policies are recommended.

B

Bayerisches Rotes Kreuz – Kreisverband Bayreuth

brk-bayreuth.de

47

The Bayerisches Rotes Kreuz – Kreisverband Bayreuth website represents a well-established regional non-profit organization focused on social, health, and emergency services within the Bayreuth area in Germany. The organization provides a broad range of services including emergency rescue, elderly care, social support, childcare, first aid training, and volunteer community groups. The website content is comprehensive, professionally designed, and clearly targeted at residents and stakeholders seeking assistance or engagement with the Red Cross in Bayreuth. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WP Rocket for optimization. It employs standard web technologies including jQuery and FontAwesome, and demonstrates good mobile responsiveness and SEO practices. The site loads quickly and provides a positive user experience with clear navigation and structured content. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and does not provide public information on security policies, incident response, or vulnerability disclosure. No cookie consent mechanism was detected, which may present a GDPR compliance gap. Analytics are implemented via WP Statistics with minimal user tracking. Overall, the website is trustworthy and professional, with strong business credibility and content quality. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing privacy compliance disclosures to further strengthen the security posture and regulatory adherence.

C

Caritas München und Oberbayern

caritas-nah-am-naechsten.de

54

Caritas München und Oberbayern is a well-established non-profit organization providing a broad range of social services including care for the elderly, support for children and families, assistance for people with disabilities, migration and integration services, and volunteer engagement opportunities. The organization maintains a strong regional presence in Munich and Upper Bavaria, supported by a professional website that reflects its mission and services. The website features comprehensive contact information, official branding, and active social media channels, reinforcing its credibility and community engagement. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and Klaro for cookie consent management. The site is mobile-optimized and accessible, with good SEO practices evident. The use of HTTPS and privacy-focused analytics demonstrates a mature approach to user privacy and security. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks publicly available security policies or incident response contacts. No critical vulnerabilities or suspicious domains were detected. The WHOIS data is limited but does not raise significant concerns, aligning with the organization's profile. Overall, the website presents a trustworthy, professional, and privacy-compliant digital presence for a reputable non-profit social service provider. Strategic improvements could include publishing explicit security policies and incident response information to enhance transparency and trust further.

NonProfit-Link.org is a specialized SaaS platform designed to empower non-profit organizations and mission-driven individuals by providing customized link-in-bio pages to centralize their digital presence, fundraising, and supporter engagement. Powered by HeyLink.me, the platform offers tools for easy customization, real-time analytics, and integration with donation and event promotion services. The website demonstrates a professional design and clear messaging targeted at the non-profit sector. Technically, it uses modern frameworks such as Next.js and React, with Google Analytics for user tracking. Security posture is generally good with HTTPS enabled, but lacks visible security headers and privacy compliance documentation. WHOIS data is privacy-protected, which is typical for SaaS providers, and no suspicious patterns were detected. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

F

FARN – Fachstelle Radikalisierungsprävention und Engagement im Naturschutz

nf-farn.de

54

FARN is a specialized non-profit organization founded in 2017 by NaturFreunde Deutschlands and Naturfreundejugend Deutschlands. It focuses on researching and preventing radicalization and extremist influences within the nature and environmental protection sectors. The website provides educational content, consulting, and qualification services targeted at environmental actors and youth. Technically, the site is built on Drupal 7 with a moderate performance profile and good mobile optimization. Privacy-conscious analytics via Matomo is implemented with DoNotTrack and cookie disabling, though no explicit cookie consent mechanism is present. Security posture is solid with HTTPS and privacy-respecting analytics but lacks some security headers and published policies. Overall, the site is professional, trustworthy, and well-branded with clear partner affiliations.

B

Bundesarbeitsgemeinschaft der Seniorenorganisationen

digitalpakt-alter.de

52

The DigitalPakt Alter website represents a well-established non-profit initiative under the Bundesarbeitsgemeinschaft der Seniorenorganisationen (BAGSO) umbrella, aimed at empowering older adults in Germany to enhance their digital skills and social participation. The site offers a variety of services including funding programs, workshops, materials, and events, targeting seniors and volunteers. It enjoys strong institutional backing from BAGSO and the German Federal Ministry for Family Affairs, which enhances its credibility and market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery and slick sliders, with a focus on accessibility and mobile responsiveness. Hosting is provided via rzone.de, and the site implements a comprehensive cookie consent mechanism with Matomo analytics for privacy-conscious user tracking. The site demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses secure forms with validation. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and readiness. No vulnerabilities or suspicious content were detected, and privacy compliance is strong with GDPR-aligned policies and consent mechanisms. Overall, the website is trustworthy, professionally maintained, and aligned with its mission to support digital inclusion for seniors. Strategic recommendations include publishing explicit security and incident response policies, considering a vulnerability disclosure program, and maintaining regular audits of third-party scripts to sustain security posture.

F

Fundacja Centrum im. prof. Bronisława Geremka

geremek.pl

48

Fundacja Centrum im. prof. Bronisława Geremka is a Polish non-profit foundation established in 2008 to preserve and promote the legacy and public values represented by Professor Bronisław Geremek. The foundation engages in educational programs, public debates, monitoring disinformation, and publishing relevant materials. The website reflects a professional and consistent brand image targeting a general audience interested in culture, education, and European values. Technically, the site is built on WordPress with modern frameworks and includes SEO and accessibility features, though some improvements in security headers and DNSSEC could enhance its posture. The security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-maintained, and aligned with the foundation's mission.

B

Bischöfliche Aktion Adveniat e.V.

adveniat.de

54

Adveniat is a German non-profit organization dedicated to supporting people in Latin America and the Caribbean through aid projects, fundraising, and awareness campaigns. The website serves as an information hub for their projects, donation options, events, and news updates. It targets a general audience interested in solidarity and development aid in Latin America. The organization maintains a consistent brand presence and leverages social media channels to extend its reach. Technically, the website is built on WordPress using the Avada theme and several plugins including WooCommerce for e-commerce functionality, Yoast SEO for search optimization, and Borlabs Cookie for cookie consent management. The site is served over HTTPS and includes modern web technologies such as jQuery and Google Fonts. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and detailed security or privacy policies. No vulnerabilities or exposed sensitive data were detected. Tracking technologies include Google Tag Manager, Facebook Pixel, and Google Ads, indicating moderate user tracking. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements could be made in privacy compliance documentation, security header implementation, and incident response readiness to enhance the security posture and regulatory compliance.

Č

Český paralympijský výbor

paralympic.cz

48

The Czech Paralympic Committee operates a professional and comprehensive website serving the Czech parasport community. The site provides news, event information, athlete profiles, and resources related to paralympic sports. It targets athletes, sports fans, media, and partners within the Czech Republic. The organization is well-established, with a domain age dating back to 2000, reflecting a mature presence in the non-profit sports sector. Technically, the website is built on WordPress 6.8.3, utilizing a variety of plugins for social media integration, event management, and user engagement such as Mailchimp for newsletters. The site is hosted by a Czech registrar and uses modern web technologies including Google Fonts and JavaScript libraries. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, security headers are minimal, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected. The site uses tracking and analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, with moderate user tracking levels but good privacy compliance. Overall, the website is trustworthy, professionally maintained, and aligned with its business purpose. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility. These steps would further strengthen the site's security posture and user trust.

B

Bundesverband Katholische Kirche an Hochschulen

kircheanhochschulen.de

52

The Bundesverband Katholische Kirche an Hochschulen is a German non-profit organization dedicated to representing and supporting Catholic university communities across Germany. The website serves as a central hub for news, events, and resources related to the Catholic Church's engagement with students and academic institutions. It maintains a professional and consistent brand presence, targeting students, church members, and affiliated organizations. The organization offers key services such as event organization, advocacy, and community support, positioning itself as a national umbrella body within the non-profit sector. Technically, the website is built on WordPress using modern themes and plugins like GeneratePress and Smart Slider 3. It is hosted likely by NetCologne, indicated by the nameservers. The site demonstrates good mobile optimization, moderate performance, and basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a public incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is mostly met with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a minor gap. Analytics usage is moderate with wp-slimstat, and no advertising or tracking networks were found, aligning with the non-profit nature. Overall, the website is trustworthy, professionally maintained, and serves its community effectively. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response and vulnerability disclosure information to further strengthen security posture and compliance.

A

Amnesty International Hochschulgruppe Bamberg

amnesty-bamberg-hochschulgruppe.de

46

The website represents the Amnesty International Hochschulgruppe Bamberg, a local non-profit student group focused on human rights advocacy and education. It provides information about events, campaigns, and ways to get involved, targeting students and human rights supporters in Bamberg, Germany. The site is built on WordPress and uses common plugins and libraries to deliver content and event information. While the site is functional and provides relevant content, it lacks some advanced privacy and security features such as cookie consent mechanisms and explicit security headers. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Social media presence is established on Facebook and Instagram, enhancing outreach. Overall, the site is consistent with a small non-profit local group and maintains a moderate level of professionalism and trustworthiness.