Non-profit security reports

D

DIAKOVERE

kommunikationswerkstatt-hannover.de

39

Kommunikationswerkstatt Hannover is a communication agency service offered by DIAKOVERE, the largest non-profit social and healthcare organization in Niedersachsen, Germany. The website presents professional agency services targeted at social and healthcare sectors, emphasizing communication expertise within a non-profit framework. The business model focuses on providing specialized communication support to organizations in the social and healthcare domain, leveraging the reputation and scale of DIAKOVERE. Technically, the website is built on Joomla CMS, utilizing modern frontend technologies such as jQuery, Bootstrap, GSAP TweenMax, and LayerSlider. Hosting is managed via kasserver.com, with secure HTTPS connections and cookie consent mechanisms implemented to comply with privacy expectations. The site demonstrates moderate performance and good mobile optimization, although accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent blocking scripts to limit unauthorized data storage. However, it lacks important security headers and does not provide a security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional and trustworthy, with a solid business credibility score. The absence of privacy and terms of service policies, as well as security headers, slightly lowers the privacy compliance and security posture scores. Strategic enhancements in these areas would improve the site's overall security and compliance standing.

U

Unternehmerverbände Niedersachsen e.V.

uvn-online.de

58

Unternehmerverbände Niedersachsen e.V. (UVN) is a prominent regional business association representing over 100 employer and economic associations in Niedersachsen, Germany, encompassing more than 200,000 companies and approximately 2.6 million employees. The organization acts as a key voice for the regional economy, engaging in policy advocacy, networking, and providing information services to its members. The website reflects a professional and well-maintained digital presence, leveraging WordPress CMS with modern plugins for SEO, event management, and privacy compliance. It is optimized for mobile devices and provides clear navigation and relevant content for its target audience of businesses and economic stakeholders in Niedersachsen.

K

Kath. Seelsorgebereich Coburg Stadt und Land

coburg-stadt-und-land.de

58

The website for Kath. Seelsorgebereich Coburg Stadt und Land serves as the digital presence for a Catholic pastoral care area in Coburg, Germany. It provides community-oriented religious services, event information, and support for families and children, including kindergartens. The site targets local community members and churchgoers, positioning itself as a trusted non-profit religious institution with a consistent brand and good content quality. Technically, the site is built on the alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility features, demonstrating a moderate to good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve by adding formal security policies and incident response contacts.

N

Nantesbuch

nantesbuch.de

57

Nantesbuch is a non-profit foundation located in the Bavarian pre-Alps region of Germany, dedicated to nature conservation and cultural programming. The organization manages a large natural area focused on ecological restoration and biodiversity, while also hosting a variety of cultural events such as concerts, literature festivals, lectures, film evenings, and workshops. The website reflects a professional and modern digital presence, built on WordPress with SEO and cookie consent mechanisms implemented, targeting a general audience interested in nature and culture. The site is well-structured, mobile-optimized, and provides clear navigation to various sections including projects, events, and organizational information. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be enhanced. Privacy compliance is strong with clear privacy and cookie policies and consent management in place. Overall, the website demonstrates high professionalism and trustworthiness, supporting the foundation's mission and community engagement.

B

Barbican Centre

barbican.org.uk

70

The Barbican Centre is a leading non-profit arts and learning institution based in London, UK, offering a wide range of cultural events including theatre, music, dance, cinema, and visual arts. The website reflects a mature digital presence with comprehensive event information, membership options, venue hire services, and educational programs. Technically, the site is built on Drupal CMS, integrates modern technologies such as Google Tag Manager and Spektrix ticketing, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be explicitly verified and enhanced. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the site projects high business credibility and trustworthiness, supported by consistent branding and clear contact information. WHOIS data for the 'www' subdomain is unavailable due to domain naming rules but does not detract from the legitimacy of the main domain.

L

LUKi e.V.

kirche.social

60

kirche.social is a niche Mastodon social networking instance operated by the non-profit organization LUKi e.V., focusing on Christian, interdenominational, and ecumenical communities. The platform provides a community-driven social experience within the fediverse, emphasizing privacy and open-source technologies. The website is well-structured, with good content quality and clear navigation, primarily targeting German-speaking users interested in church-related social networking. Technically, the site leverages modern frameworks such as React and Mastodon 4.4.8, ensuring a responsive and accessible user experience. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response information could be improved. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms and terms of service. Overall, the domain WHOIS data is privacy protected, which is justified for this non-profit community platform. The site demonstrates a trustworthy and professional presence within its niche.

B

Behinderten-Sportverband Niedersachsen e.V.

bsn-ev.de

53

The Behinderten-Sportverband Niedersachsen e.V. (BSN e.V.) is a regional non-profit sports association in Germany focused on disability sports and rehabilitation training. Their website provides comprehensive information about their services, including rehabilitation sports and function training, targeting individuals interested in disabled sports within Niedersachsen. The site is built on TYPO3 CMS and incorporates modern web technologies such as Vue.js and jQuery, with integrated Google services for analytics and marketing. The presence of Cookiebot ensures GDPR-compliant cookie consent management. Security measures include HTTPS enforcement, security headers, and reCAPTCHA for form protection. No critical vulnerabilities or security issues were detected, and the site maintains a good privacy posture with a detailed privacy policy and cookie declaration. Overall, the website is professional, accessible, and trustworthy, serving its target audience effectively.

D

Deutscher Museumsbund e.V.

museumsbund.de

63

Deutscher Museumsbund e.V. is a prominent German national association representing museums and their employees. The organization focuses on advocacy, funding programs, publications, networking, and professional development to support sustainable and future-ready museums across Germany. Their website reflects a mature digital presence with comprehensive content tailored to museum professionals and cultural stakeholders. Technically, the site is built on WordPress with modern plugins and privacy-conscious analytics (Matomo), ensuring GDPR compliance and a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, professional, and well-aligned with its non-profit cultural mission.

D

Deutscher Rollstuhl-Sportverband e.V.

drs.org

63

The Deutscher Rollstuhl-Sportverband e.V. is a well-established German non-profit organization dedicated to promoting wheelchair sports. The website serves as an information hub for athletes, clubs, partners, and supporters, providing news, event calendars, membership information, and mobility projects. It targets the German wheelchair sports community and related stakeholders. The organization has a strong market position as the national association for wheelchair sports in Germany. Technically, the website is built on WordPress with a modern theme and several plugins supporting events, polls, maps, and cookie consent. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, DNSSEC is not enabled, and some security headers like CSP are missing, indicating room for improvement in security hardening. Security posture is solid with HTTPS and domain transfer protections, but lacks explicit vulnerability disclosure and incident response information. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. The site maintains a minimal user tracking footprint and respects GDPR requirements to some extent. Overall, the website is professional, trustworthy, and serves its community well. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance its compliance and security posture.

M

Missionsprokur der Don Bosco Schwestern

fmamission.de

59

The Missionsprokur der Don Bosco Schwestern is a small German non-profit organization dedicated to supporting development aid projects worldwide, primarily through the efforts of the Don Bosco Sisters. The website clearly communicates its mission, provides donation options, and highlights key projects in various countries. The organization maintains a consistent brand presence and offers transparent contact and banking information to foster trust with donors. Technically, the site is built on the siteswift CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and implements a cookie consent mechanism compliant with GDPR. Security posture is adequate with HTTPS and CSRF protections, though some security headers are missing and no explicit security policies are published. Overall, the site is professional, accessible, and trustworthy, with moderate analytics tracking via Matomo and no signs of malicious content or blocking mechanisms.

V

VIDES Freiwilligendienst

vides-freiwilligendienst.net

63

VIDES Freiwilligendienst is a non-profit organization affiliated with the Don Bosco Sisters, providing international volunteer opportunities primarily in education and social services for young adults. The organization has a well-structured website offering detailed information about volunteer placements, preparation, and support, targeting socially engaged youth interested in global solidarity. The website is professionally designed, mobile-optimized, and uses modern web technologies including jQuery, Swiper.js, and a proprietary CMS (siteswift). Privacy and cookie consent mechanisms are implemented in compliance with GDPR standards. However, the WHOIS data for the domain is missing or inaccessible, which raises concerns about domain registration transparency despite the professional appearance of the site. Security posture is generally good with HTTPS and CSRF protections, but lacks explicit security policies or incident response contacts. Overall, the website is trustworthy and serves its non-profit mission effectively, though domain registration verification is recommended.

B

buefet e.V.

buefet.de

54

buefet e.V. is a German non-profit organization dedicated to supporting elderly individuals, people with disabilities, and those requiring care to live independently and with social connection in Kirchheim unter Teck. The website presents a clear overview of their services, including assisted living at home, mobility support, recovery assistance, social activities, and counseling. Their market position is that of a local community service provider with a focus on social welfare. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, optimized for mobile devices and SEO-friendly with Yoast SEO integration. The site loads at a moderate speed and offers a good user experience with clear navigation and consistent branding. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the website is trustworthy and professionally maintained, with minor recommendations to improve security headers, cookie consent, and incident response transparency to further enhance compliance and security posture.

Michaelshof-Ziegelhütte e.V. operates the Jugendhilfe Ziegelhütte, a non-profit youth social service organization located in Germany. The organization provides comprehensive educational and social support services for up to 40 youths and young adults annually, including schooling, workshops, residential groups, and family assistance based on anthroposophical principles. The website reflects a regional, community-focused institution with a clear mission and target audience of youth and families in need of social and educational support. Technically, the website is built on TYPO3 CMS, uses HTTPS, and includes basic cookie consent mechanisms, but lacks advanced security headers and incident response information. The site is accessible, professionally designed, and provides clear contact information, including phone and physical address, with a social media presence on Instagram. Security posture is moderate with room for improvement in headers and disclosure policies. Overall, the website is trustworthy and suitable for its audience, with no signs of malicious content or vulnerabilities.

Stiftung Tragwerk is a well-established German non-profit diaconal organization with nearly 200 years of history, providing social services primarily in the Esslingen and Göppingen regions. Their services focus on children, youth, families, adults, and elderly care, supported by approximately 670 employees across 46 locations. The website reflects a professional and consistent brand image, targeting community members, potential volunteers, and donors. Technically, the website is built on TYPO3 CMS with legacy JavaScript libraries such as jQuery 1.11.3 and lightbox components. Hosting is managed via net-server.de. The site performs moderately well with basic mobile optimization and SEO practices. However, some modernization opportunities exist, especially updating JavaScript libraries and enhancing accessibility. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, no security headers were detected, and the use of outdated libraries presents potential vulnerabilities. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, Stiftung Tragwerk's website is trustworthy and professional but would benefit from technical and security improvements to strengthen its posture and compliance.

T

Trägerverein Freies Kinderhaus e.V.

seegrasspinnerei.de

9

The Alte Seegrasspinnerei website represents a small non-profit organization, Trägerverein Freies Kinderhaus e.V., focused on child and youth community services in Nürtingen, Germany. The organization offers free children's house services, event hosting, workshops, and fundraising initiatives. Their market position is local and community-oriented, targeting families, donors, and supporters of youth welfare. The website content is primarily in German and provides clear contact information and donation links integrated with recognized platforms such as betterplace.org and wirwunder.de. Technically, the website is built on WordPress with common plugins for event management and galleries. The infrastructure includes jQuery and FontAwesome, hosted with DNS services from DomainControl (GoDaddy). The site is moderately performant and mobile-optimized, with basic accessibility and SEO features. No advanced security headers were detected, but HTTPS is enforced, and no sensitive data exposure was found. From a security perspective, the site shows a moderate security posture with room for improvement in implementing security headers and visible security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. No incident response or vulnerability disclosure information is available. The domain WHOIS data is minimal but consistent with a legitimate small non-profit entity. Overall, the website is professional, trustworthy, and safe for general audiences, with recommendations to enhance security headers, privacy compliance, and incident response transparency to improve trust and resilience.

Katholische Erwachsenenbildung MittenInFranken e. V. is a small regional non-profit organization dedicated to adult education and community engagement in the Ansbach-Neustadt/Aisch region of Germany. The website provides information about events, courses, seminars, and organizational details, targeting adults interested in Catholic adult education. The organization maintains a professional online presence with clear navigation, event listings, and downloadable program brochures. Contact information and privacy policies are clearly presented, supporting transparency and trust. Technically, the website uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and JW Player, hosted on servers associated with internet1.de. It employs Matomo analytics with privacy-conscious configurations and Google reCAPTCHA for bot protection. The site is mobile-optimized and implements a detailed cookie consent mechanism, reflecting good digital maturity. From a security perspective, the website enforces HTTPS and uses cookie consent to comply with GDPR. However, it lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal and domain status is unusual, but the website content and contact details support legitimacy. Overall, the website is well-structured, secure, and compliant with privacy regulations, suitable for its non-profit educational mission. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen its security posture.

S

Schönstatt-Institut Marienbrüder e.V.

smj-deutschland.de

10

The website www.smj-deutschland.de represents the Schönstatt Mannes Jugend, a German non-profit youth religious organization. It serves as an official information portal about the organization's work, principles, and diocesan branches. The site targets members and interested individuals within Germany, providing community, spiritual education, and event information. The business model is typical for a small non-profit focused on youth and religious community building. Technically, the site is built on the Jimdo Creator CMS platform, hosted by Jimdo, and uses standard web technologies including jQuery and Facebook SDK for social integration. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

Q

Quickborn AK

quickborn-ak.de

10

Quickborn AK is a German non-profit organization dedicated to cultural and educational activities, primarily organizing events such as the Silvestertagung and Augustwoche that focus on social, political, and spiritual themes. The website serves as an information hub for these events and the organization's history and mission. The target audience includes community members interested in cultural dialogue and education. Technically, the website is built on WordPress using a modern theme and plugins, hosted on a reputable German hosting provider. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks advanced security headers and incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professionally maintained, suitable for its non-profit educational purpose.

Pfadfinderinnenschaft St. Georg (PSG) is a well-established German non-profit organization dedicated to empowering girls and young women through scouting activities. Founded in 1947, PSG is affiliated with the global WAGGGS network and serves approximately 9,000 members nationwide. The organization offers membership services, educational programs, international partnerships, and publishes a dedicated magazine. The website reflects a professional and consistent brand image with clear navigation and content relevant to its audience. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as Bootstrap and jQuery. It features responsive design and accessibility tools, including a cookie consent mechanism compliant with GDPR. Performance is moderate with room for optimization, and the site employs HTTPS with a good SSL configuration. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent management. However, it lacks explicit security headers and documented security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through a detailed privacy policy and cookie banner. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Overall, PSG's website presents a trustworthy and professional digital presence suitable for its non-profit mission. Strategic improvements in security headers and enhanced transparency around security policies could further strengthen its posture.

K

Kolpingjugend – Kolpingwerk Deutschland

kolpingjugend.de

10

Kolpingjugend Deutschland is a well-established non-profit Catholic youth organization focused on engaging children, youth, and young adults in social projects, volunteer work, and community activities. The organization is democratically structured and rooted in the values of Adolph Kolping, with a strong presence in Germany and links to national and international Kolping organizations. The website serves as an information and engagement platform for members and interested parties, providing news, events, and resources. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery and Bootstrap. It is hosted on dot-server.de and includes standard web technologies for responsive design and user interaction. The site implements GDPR-compliant cookie consent mechanisms and privacy policies, reflecting a mature approach to data protection and user privacy. From a security perspective, the site uses HTTPS and includes scripts to allow users to opt out of Google Analytics tracking. However, explicit HTTP security headers are not evident in the provided data, and no dedicated security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data, indicating a reasonable security posture for a non-profit organization. Overall, the website is professional, trustworthy, and well-aligned with its mission. It provides clear contact information via email and maintains transparency through privacy and imprint pages. Strategic improvements could focus on enhancing security headers, publishing incident response information, and expanding contact options.

K

Katholische junge Gemeinde

kjg.de

10

Katholische junge Gemeinde (KjG) is a well-established Catholic youth organization in Germany, focusing on youth engagement, social projects, and community activities. The organization maintains a professional and content-rich website that serves as a hub for information, events, and resources for its members and the public. The site targets youth and young adults interested in Catholic community involvement and social advocacy. KjG operates as a non-profit entity with a medium organizational size and a strong presence in Germany, supported by regional branches and partnerships with other youth and social organizations.

J

Jugendverbände der Gemeinschaft Christlichen Lebens

j-gcl.org

10

The website j-gcl.org represents the Jugendverbände der Gemeinschaft Christlichen Lebens (J-GCL), a non-profit Catholic youth organization in Germany. It serves as an informational and engagement platform for youth members, focusing on faith, community, and social responsibility. The organization has a long-standing presence since 2001, reflected in the domain age and content maturity. The site offers resources, regional group information, and opportunities for involvement, targeting students and young adults within the Catholic community in Germany. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO and Gutenberg block extensions, ensuring good SEO and content management capabilities. The site is mobile-optimized and provides a user-friendly navigation experience. Hosting and domain registration are managed by reputable providers, with HTTPS enabled and basic security practices in place. However, DNSSEC is not enabled, and additional security headers could enhance the security posture. From a security perspective, the site shows no signs of blocking or WAF interference, and no critical vulnerabilities are evident in the HTML content. Privacy compliance is addressed with a privacy and cookie policy, including consent mechanisms, aligning with GDPR requirements. Contact information is primarily via contact forms, with no direct emails or phone numbers exposed in the HTML. Overall, the website demonstrates a solid digital presence for a small non-profit organization, with good content quality, technical implementation, and business credibility. Security practices are adequate but could be improved with DNSSEC and enhanced HTTP headers. The site is safe for general audiences and maintains a trustworthy and professional image.

I

Internationaler Bauorden

bauorden.de

10

Internationaler Bauorden is a small non-profit organization based in Germany that facilitates volunteer and cultural exchange programs. Their website is built on WordPress and uses common plugins such as Events Manager and Real Cookie Banner to manage events and ensure GDPR compliance. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a good level of digital maturity. Security posture is strong with HTTPS enforced and standard security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website presents a trustworthy and professional image suitable for its target audience of volunteers and socially engaged individuals.

D

DJK-Sportverband e.V.

djk.de

57

DJK-Sportverband e.V. is a well-established non-profit sports federation in Germany, founded in 1920, that promotes sports activities underpinned by Christian and inclusive values. The organization targets sports clubs, athletes of all ages and abilities, and community members interested in ethical and inclusive sportsmanship. Their key services include diverse sports offerings, inclusion initiatives, prevention of sexualized violence, and organizing major sports events such as the Bundessportfest. The website reflects a strong community focus and a commitment to social responsibility.

C

Christliche Arbeiterjugend Deutschland

caj.de

52

Christliche Arbeiterjugend Deutschland (CAJ) is a well-established non-profit Christian youth organization in Germany, focusing on social justice, education, and community engagement. The website serves as an information hub for news, events, and organizational activities, targeting young people interested in Christian worker youth movements. The organization has a strong national presence with international connections, founded in 1947, and the international CAJ dates back to 1925. The website content is professionally presented in German, with consistent branding and active social media channels.

B

Bund der St. Sebastianus Schützenjugend

bdsj.de

59

Bund der St. Sebastianus Schützenjugend (BdSJ) is a large non-profit youth organization in Germany with approximately 30,000 members. The organization focuses on social, sporting, and religious youth work, emphasizing cultural and political education within the framework of the Schützenjugend tradition. The website serves as an information hub for the federal association, providing news, project details, and resources for members and interested parties. The organization is well-established, founded in 1961, and maintains a strong presence through its six diocesan associations and over 1,200 brotherhoods. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. Accessibility features are implemented via the EyeAble plugin, and the site is mobile-optimized with good SEO practices. The site uses HTTPS with an excellent SSL configuration, ensuring secure communications. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policy or incident response information and does not publish a security.txt file. Contact information is clearly presented, including email, phone, physical address, and a contact form with privacy consent. Social media sharing is integrated but no direct official social media profiles are linked. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to its members. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen the security posture.

The website agvnet.de represents the Arbeitsgemeinschaft katholischer Studentenverbände (AGV) e.V., a small non-profit organization uniting Catholic student corporations in Germany. The site provides information about the association's activities, including dialogue seminars with politicians and church representatives, targeting Catholic students and affiliated groups. The organization maintains a niche position within the German Catholic student community, focusing on advocacy and event organization. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, hosted by webgo.de. The site is moderately performant, mobile-optimized, and SEO-friendly, with a clean and professional design. Privacy and cookie policies are implemented with GDPR compliance, though no explicit terms of service or security policies are present. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and explicit incident response information. No vulnerabilities or suspicious elements were detected. The WHOIS data is minimal but consistent with the organization's profile and domain age. Overall, the website presents a trustworthy and professional front for a small non-profit organization, with room for improvement in security headers and explicit policy disclosures to enhance compliance and trustworthiness.

A

Aktion West-Ost e.V.

aktion-west-ost.de

43

Aktion West-Ost e.V. is a small non-profit umbrella organization representing four Catholic youth associations within the BDKJ framework. The organization focuses on international youth work and political education aimed at fostering encounters and exchanges between Central and Eastern Europe. Their mission centers on overcoming East-West boundaries through personal contacts and shared experiences. The website reflects this mission with content in German and English, highlighting projects, publications, and social media engagement. Technically, the website is built on the ProcessWire CMS and leverages a modern JavaScript and CSS stack including jQuery, SlickNav, Slippry, and others to provide a responsive and user-friendly experience. Hosting is managed via kasserver.com, a known hosting provider. The site demonstrates moderate performance and basic SEO and accessibility features. From a security perspective, the site uses HTTPS (assumed), but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and security hardening. No incident response or vulnerability disclosure information is published. No sensitive data exposure or vulnerable libraries were detected in the provided content. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission. However, improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

Z

Zusage

zusage.global

45

Zusage is a German-language platform dedicated to strengthening civil society, likely operating as a non-profit or advocacy organization. The website is built on WordPress and incorporates modern consent management and analytics tools such as Usercentrics and Matomo, indicating a moderate level of digital maturity. The site is accessible without any WAF or blocking mechanisms, and the content is safe for general audiences with no adult or questionable material detected. However, the absence of publicly available WHOIS data and privacy policy reduces transparency and trustworthiness to some extent. Security posture is moderate, with no detected security headers and unknown SSL configuration, suggesting room for improvement in technical security measures.

A

arbeit für alle e.V.

josefstag.de

47

The website josefstag.de represents a German non-profit initiative focused on youth social work and youth employment assistance under Catholic auspices. It serves as an informational and networking platform for the annual Josefstag event, which raises awareness and promotes youth participation in social and democratic processes. The site is affiliated with reputable Catholic organizations such as the Bundes der Deutschen Katholischen Jugend (BDKJ) and related partners. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and is hosted with INWX, a German registrar. The site demonstrates good design, accessibility, and SEO practices, with a clear cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Contact information is limited on the site, with no direct emails or phone numbers found, which is typical for such non-profit informational sites. Overall, the site is trustworthy, professional, and well-maintained.

B

Bund der Deutschen Katholischen Jugend (BDKJ)

generation-jetzt.de

46

Generation Jetzt! is a German non-profit youth advocacy campaign operated under the umbrella of the Bund der Deutschen Katholischen Jugend (BDKJ). The initiative focuses on promoting democratic participation and generation justice for children, adolescents, and young adults. The website serves as a platform for information dissemination, event promotion, and engagement with the target audience. Technically, the site is built on TYPO3 CMS with Bootstrap for responsive design and uses Matomo analytics configured for privacy-conscious tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting its mission effectively.

K

KKV Landesverband Bayern der Katholiken in Wirtschaft und Verwaltung e.V.

kkv-bayern.de

57

KKV Landesverband Bayern der Katholiken in Wirtschaft und Verwaltung e.V. is a regional non-profit association focused on Catholic professionals in Bavaria, providing educational events, publications, and community engagement centered on social and economic issues from a Catholic perspective. The website serves as an information hub with event listings, news, and resources for members and interested parties. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility tools to ensure inclusivity. The site is well-structured, mobile-optimized, and implements GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. WHOIS data aligns with the organization's identity, supporting legitimacy. Overall, the site presents a professional and trustworthy digital presence for a small non-profit organization.

Caritasverband Stadt- und Landkreis Hof e.V. is a medium-sized non-profit organization focused on providing social services and community support in the Hof region of Germany. Their offerings include social counseling, volunteer coordination, refugee and integration advice, family support, and care services. The organization maintains a strong regional presence and collaborates with partner entities within the Caritas network and local community institutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, cookie consent mechanisms, and use of Google reCAPTCHA for form protection. However, explicit security policies and vulnerability disclosure mechanisms are not present. Overall, the website demonstrates a solid security posture with room for improvement in security headers and incident response transparency. The domain registration data aligns well with the organization's identity, reinforcing trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a security.txt file to improve transparency and compliance.

F

Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Coburg

bdkj-coburg.de

56

The website 'jugend-im-dekanat-coburg.de' serves as the official online presence for the Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Coburg, a regional non-profit youth pastoral organization affiliated with the Erzdiözese Bamberg in Germany. It provides comprehensive information on youth activities, events, organizational news, and support services for youth and volunteers in the Coburg and Lichtenfels regions. The site targets young people, youth workers, and volunteers involved in church-related youth work. The business model is non-commercial, focusing on community and pastoral support within the church framework. Technically, the website is built on the alkacon Mercury CMS platform, utilizing JavaScript, Matomo analytics for privacy-conscious tracking, and accessibility enhancements via the eyeAble plugin. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Hosting appears to be managed by the church's infrastructure, ensuring reliability. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns well with the organizational identity, indicating legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic improvements could include adding security headers, publishing a security policy, and introducing a vulnerability disclosure mechanism to enhance security posture and transparency.

P

Pfarrei Evangelisch unter der Veste

heiligkreuz-coburg.de

44

The website 'heiligkreuz-coburg.de' serves as the official online presence for the Pfarrei 'Evangelisch unter der Veste', a coalition of four evangelical-lutheran congregations in Coburg, Germany. It provides community members and visitors with information about church services, events, groups, and digital communication tools such as the Churchpool app. The site is well-structured, content-rich, and targets local churchgoers and interested individuals. Technically, the site is built on Drupal 10, uses modern JavaScript libraries, and implements a GDPR-compliant cookie consent mechanism via Klaro. The site is mobile-optimized and accessible, with good SEO practices.

K

Kinder- und Jugendkulturzentrum „Alte Spinnerei am Bahnhof“ Kulmbach

alte-spinnerei.info

58

The Kinder- und Jugendkulturzentrum „Alte Spinnerei am Bahnhof“ in Kulmbach is a local non-profit youth cultural center offering a wide range of activities and events for children, teenagers, and young adults aged 6 to 27. Their services include open operation hours, creative workshops, sports activities, holiday programs, and a mobile alcohol-free cocktail bar called SOFTBAR. The center emphasizes community engagement and youth participation. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, providing a good user experience and accessibility. Security posture is moderate with no visible security headers and no explicit cookie consent mechanism, but no critical vulnerabilities were detected. WHOIS data is unavailable, likely due to privacy protection, but the website content and contact details appear legitimate and consistent with a local government or community organization. Overall, the site is professional, trustworthy, and well-targeted to its audience.

B

Benediktinerabtei Maria Laach

maria-laach.de

61

The website maria-laach.de represents the Benedictine Abbey Maria Laach, a religious and cultural institution in Germany. The site primarily serves as an informational platform about the abbey, its history, and visitor services. The business model is non-commercial, targeting general visitors and those interested in religious and cultural heritage. The website uses WordPress with Elementor and WP Rocket, indicating a modern CMS and optimization tools. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is moderate but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WAF or blocking mechanisms were detected, and the site content is accessible and safe for general audiences.

B

Bundesarbeitsgemeinschaft der Freien Wohlfahrtspflege (BAGFW) e. V.

bagfw.de

50

The Bundesarbeitsgemeinschaft der Freien Wohlfahrtspflege (BAGFW) e. V. is a well-established German non-profit umbrella organization representing the leading free welfare associations. The website clearly communicates its mission to secure and develop social work through collaborative initiatives and social policy activities. It targets social welfare organizations, policymakers, and the general public interested in social welfare in Germany. The organization has a strong market position as a key coordinating body in the social welfare sector. Technically, the website is built on TYPO3 CMS with a modern frontend stack including Bootstrap, jQuery, and accessibility features. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, employing Piwik/Matomo for analytics. From a security perspective, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity and history, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security headers and published security policies could further enhance its security posture.

D

Diakonie Katastrophenhilfe

diakonie-katastrophenhilfe.de

65

Diakonie Katastrophenhilfe is a well-established German non-profit humanitarian aid organization with over 70 years of experience supporting people affected by natural disasters, war, and displacement worldwide. The organization operates numerous projects globally, focusing on disaster relief, reconstruction, and preventive measures. Their website reflects a strong commitment to transparency, featuring recognized certifications such as the DZI-Spendensiegel and partnerships with reputable networks like Brot für die Welt and Act Alliance. The target audience includes donors, churches, NGOs, and the general public interested in humanitarian aid. Technically, the website is built on TYPO3 CMS and employs modern web technologies including Google Tag Manager for analytics, Sentry for error monitoring, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Performance is moderate, with good mobile responsiveness and clear navigation. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the organization's identity, showing no privacy protection and reputable name servers, supporting the domain's legitimacy. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable platform for donors and stakeholders. Strategic improvements could include publishing detailed security policies and incident response information to enhance security posture and stakeholder confidence.

B

Brot für die Welt

brot-fuer-die-welt.de

65

Brot für die Welt is a well-established German non-profit organization focused on global development aid, working with local partners in over 80 countries. The website reflects a mature digital presence built on TYPO3 CMS, featuring multilingual support, clear donation pathways, and educational resources. The organization demonstrates strong transparency and trust signals, including the DZI donation seal and detailed project information. Technically, the site uses modern frameworks and consent management tools, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers could be enhanced. Overall, the site is professional, trustworthy, and aligned with the organization's mission and audience.

K

Kompetenznetz Einsamkeit

kompetenznetz-einsamkeit.de

57

Kompetenznetz Einsamkeit is a German non-profit organization focused on addressing the causes and consequences of loneliness, providing information and support offers to affected individuals. The website serves as an informational portal targeting a general audience interested in loneliness-related topics. Technically, the site is built on WordPress using the Brooklyn theme by United Themes, incorporating modern JavaScript libraries and Matomo analytics for user tracking with some privacy considerations. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the website is functional, professionally designed, and trustworthy, but lacks some compliance and security best practices.

D

Deutsches Taubblindenwerk gemeinnützige GmbH

taubblindenwerk.de

57

Deutsches Taubblindenwerk is a leading non-profit organization in Europe dedicated to supporting individuals with dual sensory impairments, specifically Taubblindheit and Hörsehbehinderung. The organization offers a comprehensive range of services including early intervention, special education, residential care, rehabilitation, and vocational training. Their mission focuses on enabling self-determined lives and social participation for children, youth, and adults affected by these disabilities. The website reflects a well-structured and professional digital presence with clear navigation and accessibility features tailored to their audience. Technically, the site is built on WordPress with modern frameworks and includes essential SEO and privacy compliance elements such as GDPR-aligned cookie consent and privacy policies. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain and hosting setup appear legitimate and consistent with the organization's profile, supporting a trustworthy online presence.

R

Reichsbund Stiftung

reichsbund-stiftung.de

39

The Reichsbund Stiftung is a German non-profit foundation dedicated to supporting social projects, particularly those focused on inclusion, support for people with disabilities, and social integration. The website serves as an informational platform showcasing their funded projects and partner organizations. The foundation targets socially conscious individuals, donors, and organizations interested in social welfare initiatives. Technically, the website is built on WordPress with common plugins such as Yoast SEO and uses jQuery and TweenMax for interactive elements. The site is hosted with domaincontrol.com DNS services and employs HTTPS, ensuring secure communication. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance. No incident response or security policies are published, and no contact information is explicitly provided on the site, which could affect user trust. Overall, the website is professional and trustworthy for a small non-profit organization but would benefit from enhanced privacy compliance, security policies, and clearer contact information to improve user confidence and regulatory adherence.

K

Katarina Witt Stiftung gGmbH

katarina-witt-stiftung.de

51

The Katarina Witt Stiftung gGmbH is a German non-profit foundation dedicated to supporting children with disabilities worldwide through projects in sports promotion, medical care, and disaster relief. The foundation leverages donations and partnerships to fund its charitable activities and maintains a professional online presence with clear calls to action for donations and social media engagement. The website is built on TYPO3 CMS and hosted via SchlundTech, reflecting a moderate to good level of technical maturity with responsive design and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Privacy compliance is well addressed with a clear privacy policy and GDPR-aligned cookie consent mechanisms. Overall, the website is trustworthy, professionally maintained, and aligned with the foundation's mission.

H

Heiner-Rust-Stiftung

heiner-rust-stiftung.de

54

The Heiner-Rust-Stiftung website represents a small non-profit foundation focused on promoting and supporting sports activities for people with disabilities in Germany. The foundation collaborates with regional partners such as Lotto Niedersachsen and the Sparkassenverband to fund and facilitate inclusive sports projects. The website content is well-structured, professionally designed, and clearly targeted at sports organizations and individuals interested in disability sports inclusion. Technically, the website is built using the RapidWeaver CMS with the Foundry theme and Stacks plugin, leveraging technologies like jQuery, Bootstrap, and Font Awesome. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and formal security or incident response policies. Privacy compliance is basic, with a privacy policy and cookie consent banner present but no detailed GDPR compliance indicators or data protection officer contact information. Overall, the website is trustworthy and professional for its non-profit purpose but could enhance its security posture and privacy compliance to better protect users and build further trust.

W

WWF Schweiz

wwf.ch

68

WWF Schweiz operates as the largest environmental protection organization in Switzerland, focusing on conservation, sustainability, and community engagement. The website reflects a mature digital presence with multilingual support, clear calls to action for memberships, donations, and events, and strong trust indicators such as the ZEWO certification. Technically, the site is built on Drupal 10 with modern integrations including Usercentrics for consent management and Google Analytics for tracking, ensuring compliance and user experience optimization. Security posture is solid with HTTPS enforcement and privacy-conscious cookie management, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain registration data aligns well with the organization's identity, reinforcing legitimacy and trust.

N

Neuer Kunstverein Aschaffenburg e.V.

kunstlanding.de

65

The website kunstlanding.de represents Neuer Kunstverein Aschaffenburg e.V., a non-profit cultural association focused on contemporary art exhibitions and community engagement in Aschaffenburg, Germany. It offers a platform for artists and art enthusiasts, hosting exhibitions, events, and providing membership opportunities. The site is well-structured, primarily in German, and targets local and regional audiences interested in art and culture. Technically, the website is built on the Jimdo Creator CMS platform, utilizing standard web technologies including jQuery UI and embedded Google Maps. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, additional security headers are missing, and no explicit security policies or incident response information is provided. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns with the hosting and business information, indicating a legitimate domain registration. Overall, kunstlanding.de is a credible, well-maintained cultural website with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency could enhance its security maturity.

W

Weltkulturen Museum

weltkulturenmuseum.de

43

The Weltkulturen Museum website represents a well-established non-profit cultural institution in Germany focused on world cultures, exhibitions, research, and educational programs. The site provides clear navigation and relevant content aimed at a general audience interested in cultural heritage and museum events. The museum leverages modern web technologies including Matomo analytics configured for privacy, and a cookie consent mechanism to comply with GDPR requirements. Hosting is provided by a German provider (1blu), consistent with the museum's location and audience. From a security perspective, the website enforces HTTPS and uses privacy-respecting analytics, but lacks explicit security headers and published security policies or incident response contacts. No critical vulnerabilities or suspicious WHOIS patterns were detected, indicating a trustworthy domain and hosting environment. Privacy and cookie policies are present and implemented with user consent, supporting compliance with European data protection laws. Overall, the website demonstrates good technical maturity and business credibility for a cultural institution, with room for improvement in security header implementation and formal security documentation. The absence of direct contact emails or phone numbers on the homepage suggests contact details may be located deeper in the site or handled via forms. The site is safe for general audiences with no adult or questionable content detected.

F

Frankfurter Bibelgesellschaft e.V.

bibelhaus-frankfurt.de

52

Bibelhaus Frankfurt is a small non-profit cultural and educational institution based in Germany, focused on providing museum exhibitions and educational programs related to the Bible and its history. The website serves as an information portal for visitors, offering details on exhibitions, guided tours, and digital offerings including a virtual tour. The institution targets a general audience including museum visitors and educational groups. Technically, the website employs modern web technologies such as Matomo for analytics and CCM19 for cookie consent management, ensuring privacy-conscious user tracking. The site is well-structured, mobile-optimized, and uses HTTPS with no detected blocking or WAF challenges. Security posture is good, though explicit security headers and incident response policies are not published. The WHOIS data aligns with the website content, showing a legitimate registration without privacy protection, appropriate for a non-profit entity. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

B

basis Frankfurt e.V.

basis-frankfurt.de

48

basis Frankfurt e.V. is a non-profit cultural organization based in Frankfurt, Germany, providing artist studios, residencies, exhibitions, and educational programs. The organization targets artists, cultural institutions, and the local community, positioning itself as an established platform for contemporary art production and presentation. The website reflects this mission with detailed program information, event previews, and public engagement offerings. Technically, the site is built on Drupal 7, hosted by manitu.net, and employs standard web technologies including jQuery and Google Analytics for visitor tracking. While the site is accessible and well-structured with good mobile optimization, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance and security best practices. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of published security policies and incident response contacts limits transparency. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security documentation are recommended.