Non-profit security reports

B

basis Frankfurt e.V.

basis-frankfurt.de

48

basis Frankfurt e.V. is a non-profit cultural organization based in Frankfurt, Germany, providing artist studios, residencies, exhibitions, and educational programs. The organization targets artists, cultural institutions, and the local community, positioning itself as an established platform for contemporary art production and presentation. The website reflects this mission with detailed program information, event previews, and public engagement offerings. Technically, the site is built on Drupal 7, hosted by manitu.net, and employs standard web technologies including jQuery and Google Analytics for visitor tracking. While the site is accessible and well-structured with good mobile optimization, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance and security best practices. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of published security policies and incident response contacts limits transparency. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security documentation are recommended.

B

British Chamber of Commerce in the Czech Republic

powertalks.cz

43

Powertalks.cz is a professionally designed website dedicated to a mentoring program aimed at empowering young women aged 18-29 in Czechia and Slovakia. The program is a partnership between Kérastase, a luxury haircare brand, and the British Chamber of Commerce in the Czech Republic. The website provides detailed information about the mentoring process, topics, timeline, mentors, and related events such as the Power Talks Conference. It also offers a contact form for email collection and mentor applications. The site is built on WordPress using Elementor and Yoast SEO, ensuring good technical infrastructure and SEO optimization. However, the absence of a visible privacy policy and cookie consent mechanism indicates compliance gaps. Security posture is generally good with HTTPS enabled, but lacks security headers and incident response information. WHOIS data is unavailable, limiting domain trust assessment, but the presence of reputable partners and media mentions supports legitimacy.

B

British Chamber of Commerce

bccequilibrium.cz

43

The website bccequilibrium.cz represents the Equilibrium Mentoring Programme operated by the British Chamber of Commerce in the Czech Republic. It focuses on empowering women in business and non-profit sectors through mentorship and community engagement. The programme has a well-established presence since 2011, boasting a large community of mentors and mentees. The website content is professionally presented, with detailed mentor profiles and programme statistics, targeting women seeking career development and leadership growth. Technically, the site is built on WordPress with the Avada theme and uses common plugins for e-commerce and event management. It is hosted via a Czech registrar and uses HTTPS, ensuring secure connections. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security headers are not detected, and no explicit contact emails or phone numbers are found, which could affect user trust and compliance. Overall, the site is functional, professional, and safe for general audiences, but could improve in privacy transparency and security best practices.

KAB Deutschlands e.V. is a well-established German non-profit organization dedicated to promoting social justice, workers' rights, and Catholic social teachings. The website serves as a platform for advocacy, education, and community engagement, targeting workers and social activists. It offers a variety of resources including news, campaigns, educational materials, and legal support services. The organization maintains an active presence on multiple social media platforms and provides clear contact channels including email, phone, and physical address. The website is built on TYPO3 CMS with modern web technologies and demonstrates good content quality and user experience.

S

Seelsorgestiftung Oberfranken

seelsorgestiftung-oberfranken.de

44

Die Seelsorgestiftung Oberfranken is a regional non-profit foundation established in 2010 that supports various seelsorgerische (pastoral care) services in the Oberfranken region of Germany. Its primary focus is on supporting TelefonSeelsorge and other pastoral care initiatives in hospitals, police, prisons, senior homes, and for tourists. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility. It integrates a modern cookie consent manager (Klaro) ensuring GDPR compliance. Contact information and donation details are clearly presented, enhancing trust and transparency. The domain registration data aligns well with the organization's stated mission and regional focus, indicating legitimacy.

F

Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Bayreuth / BDKJ-Regionalverband Bayreuth

bdkj-bayreuth.de

60

The website 'jugend-im-dekanat-bayreuth.de' serves as the official online presence for the Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Bayreuth and the BDKJ-Regionalverband Bayreuth, a non-profit organization affiliated with the Catholic Church in Germany. It provides comprehensive information on youth pastoral activities, events, funding opportunities, and support services targeted at youth and volunteers within the church community. The site is well-structured, accessible, and compliant with GDPR regulations, featuring a cookie consent mechanism and privacy policy. Technically, it is built on the Alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility tools to enhance user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response contacts could be improved. Overall, the site reflects a professional, trustworthy, and community-focused organization with a clear mission to support youth work in the region.

F

Franziskaner

franziskaner.net

54

Franziskaner.de is the official website of the Franziskaner, one of the largest Catholic male religious orders worldwide, active in Germany since 1221. The site provides rich content about their history, spiritual offerings, projects, and community engagement, targeting a general audience interested in spirituality and religious life. The website is built on WordPress with a modern tech stack including jQuery and WP Rocket for performance optimization. It is hosted likely by Mittwald, a German hosting provider, and uses Matomo analytics with privacy-conscious settings. Security posture is solid with HTTPS and security best practices, though explicit security policies and incident response contacts are absent. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, serving as a credible digital presence for the religious organization.

K

Kongregation der St. Franziskusschwestern Vierzehnheiligen

fs-vierzehnheiligen.de

47

The Kongregation der St. Franziskusschwestern Vierzehnheiligen is a small non-profit religious organization based in Germany, focused on spiritual programs, community engagement, and support services. Their website serves as an information portal for their congregation, offering multilingual content and promoting their events, spiritual guidance, and volunteer opportunities. The organization maintains a clear and consistent brand presence with accessible contact information and active social media channels. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Swiper.js for enhanced user experience. The site is hosted on servers associated with kasserver.com and employs HTTPS with Google Tag Manager for analytics. Mobile optimization and SEO practices are good, though accessibility features are basic. Cookie consent mechanisms are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers in the HTML content. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content, indicating a legitimate and trustworthy domain. However, there is no explicit security policy or incident response information available. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its target audience. Strategic improvements in security headers and explicit security policies could further enhance its posture.

B

Büro Coburg / BDKJ-Regionalverband Coburg

bdkj-lichtenfels.de

55

The website represents a regional non-profit youth pastoral organization affiliated with the Erzdiözese Bamberg, serving the Coburg and Lichtenfels areas in Germany. It provides youth support, event organization, volunteer coordination, and educational programs targeting young people and youth workers. The site is well-structured, with clear navigation and relevant content tailored to its audience. Technically, it uses the alkacon Mercury CMS platform, integrates Matomo analytics for privacy-conscious tracking, and includes accessibility features via the eyeAble plugin. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. Contact information is clearly presented with physical addresses, phone numbers, and obfuscated emails. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

DPSG Diözesanverband Bamberg

dpsg-bamberg.de

49

DPSG Diözesanverband Bamberg is a regional non-profit scouting organization in Germany, affiliated with the national Deutsche Pfadfinderschaft St. Georg (DPSG). The website serves as an information hub for members, providing details on events, facilities, and organizational structure. It targets scouts and volunteers within the Bamberg diocese, offering resources such as event calendars, booking inquiries for scout houses, and educational content. The organization maintains a consistent brand presence and clear communication channels, including email, phone, and social media links. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices via Yoast SEO and structured data.

D

Deutsche Pfadfinderschaft Sankt Georg

dpsg.de

51

The Deutsche Pfadfinderschaft Sankt Georg (DPSG) operates a professional and content-rich website focused on youth scouting activities in Germany. The organization is a large non-profit entity providing scouting programs for children and adolescents, emphasizing inclusion, gender equality, and international cooperation. The website is built on Drupal 9 Thunder, uses Matomo for analytics with privacy-conscious settings, and includes a cookie consent mechanism. While the site is well-designed, mobile-optimized, and accessible, it lacks explicit privacy policy and terms of service pages, and does not publish a security policy or incident response contacts. Contact information is primarily via social media and forms, with no direct emails or phone numbers found. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the site demonstrates good technical maturity and business credibility but could improve privacy compliance and security transparency.

E

Evangelisch-Lutherische Kirche in Bayern

pilgern-bayern.de

44

The website www.pilgern-bayern.de is a well-structured, content-rich platform operated by the Evangelical Lutheran Church in Bavaria, focusing on pilgrimage activities and spiritual engagement within Bavaria. It serves a niche audience of pilgrims and religious community members by providing detailed information on pilgrimage routes, events, spiritual literature, and community networking. The site leverages modern web technologies including Drupal 10 and Bootstrap, ensuring good mobile optimization and accessibility. A cookie consent manager (Klaro) is implemented, reflecting strong privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site demonstrates a high level of professionalism and trustworthiness appropriate for a non-profit religious organization.

The Katholischer Seelsorgebereich Gottesgarten website serves as an informational portal for the Catholic pastoral care area Gottesgarten in Germany, providing comprehensive details about sacraments, pastoral services, events, and contact information for the local community. The site is well-positioned as a regional non-profit religious community resource, targeting parishioners and residents in the Gottesgarten region. It offers clear navigation, relevant content, and consistent branding aligned with its mission. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Font Awesome, and integrates Matomo analytics for user tracking with privacy considerations. The site is hosted on kirche-bamberg.de infrastructure, uses HTTPS, and includes a cookie consent mechanism compliant with GDPR. Mobile optimization and accessibility are adequately addressed, though some improvements could be made in security headers and accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of reCAPTCHA, and anonymized analytics tracking. However, explicit security headers are not evident, and no incident response or security policy pages are published. No vulnerabilities or suspicious content were detected. The domain WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with a solid privacy and security posture for a non-profit religious organization. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party libraries to further strengthen the security posture.

Telefonseelsorge Erlangen is a small, non-profit organization providing free, confidential telephone counseling services to individuals facing acute distress, interpersonal difficulties, and emotional crises. The service operates 24/7 with trained volunteers offering anonymous support. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive privacy and cookie policies, reflecting a strong commitment to user privacy and compliance with GDPR. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and Matomo analytics, hosted on infrastructure associated with kirche-bamberg.de, indicating a stable and reputable hosting environment. Security posture is good with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, well-maintained, and aligned with its mission to provide emotional support services in Erlangen, Germany.

K

Kath. Seelsorgebereich Obermain-Jura

ssb-obermain-jura.de

59

The Katholischer Seelsorgebereich Obermain-Jura website serves as the digital presence for a small regional non-profit religious organization in Germany. It provides parishioners and community members with information about religious services, events, and parish contacts. The site is well-structured, accessible, and includes privacy and cookie consent mechanisms, reflecting a commitment to user privacy and compliance with GDPR. The technical infrastructure is based on the alkacon Mercury CMS platform, with integrations such as Matomo analytics and OpenStreetMap for location services. Hosting is stable and consistent with the domain's purpose. From a security perspective, the website uses HTTPS and implements cookie consent but lacks explicit security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. The site demonstrates good accessibility and SEO practices, enhancing user experience and trustworthiness. External links are primarily to related parish websites and church infrastructure, reinforcing the site's community focus. Overall, the website presents a professional and trustworthy digital front for the religious community it serves. Strategic improvements could include adding explicit security policies, incident response contacts, and enhanced security headers to further strengthen its security posture.

Hilfe von Haus zu Haus e.V. is a well-established local non-profit organization based in Germany, focused on providing neighborhood assistance primarily to elderly, sick, and families with young children. Founded in 2003, the organization operates with a community-centric approach, offering services such as companionship, support for daily activities, and social engagement. Their market position is strong within the local community, supported by over 105 volunteers and a structured leadership team. The website reflects a clear mission and transparent communication with the public, including membership and donation options. Technically, the website is built on WordPress using the Divi theme, incorporating standard plugins like Contact Form 7 for communication and Borlabs Cookie for privacy compliance. The site is hosted on kasserver.com, with HTTPS enabled and basic security measures such as hCaptcha for spam prevention. Performance and mobile optimization are adequate, though some improvements in security headers and incident response documentation could enhance the security posture. From a security perspective, the site demonstrates good privacy compliance with visible privacy and cookie policies and consent mechanisms. However, explicit security policies and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or suspicious activities were detected. The domain WHOIS data aligns with the organization's history, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its community purpose effectively. Strategic recommendations include enhancing security headers, publishing a security policy or incident response plan, and considering a security.txt file to improve transparency and trust.

D

Dugnad for havet

dugnadforhavet.no

51

Dugnad for havet is a Norwegian citizen science platform dedicated to monitoring changes in marine life and coastal environments due to climate change. The platform enables public participation in registering observations, with data utilized by the Norwegian Institute of Marine Research and made publicly accessible. The website targets environmentally conscious individuals and citizen scientists interested in marine biodiversity and environmental changes. Technically, the site employs modern JavaScript frameworks such as React and uses Font Awesome for iconography, delivering a moderately performant and mobile-optimized experience. However, the site lacks comprehensive privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. The domain registration is consistent with the business timeline and shows no suspicious indicators, supporting the site's legitimacy. Overall, while the platform serves a valuable environmental purpose, it requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence.

V

Verband der Restauratoren (VDR) e.V.

einsatz-kulturgut.de

53

The website www.einsatz-kulturgut.de is operated by the Verband der Restauratoren (VDR) e.V., a non-profit association focused on providing guidance and resources for the emergency rescue and first aid of cultural heritage assets. The site offers an eBook and detailed instructions aimed at archives, museums, church administrations, owners, restorers, and emergency responders. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and interactive flipbook functionality, and it implements GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is professional, trustworthy, and well-targeted to its niche audience.

L

LandFrauenverband Südbaden im BLHV e.V. mit Bildungs- und Sozialwerk des LFVS e.V.

lfvs.de

47

The LandFrauenverband Südbaden is a well-established non-profit organization founded in 1949, serving approximately 17,500 members across 205 local clubs. It focuses on representing rural women in Südbaden through political advocacy, education, and social work. The website reflects a regional community-oriented business model with a clear target audience and consistent branding. Technically, the site uses classic JavaScript libraries such as Prototype.js and Scriptaculous, with a custom or unknown CMS. The site is moderately optimized for mobile and SEO but lacks advanced technical frameworks or modern CMS indicators. Security posture is moderate; HTTPS is used but no explicit security headers or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

The website 'Tag der Regionen' is a well-established non-profit project managed by the Bundesverband der Regionalbewegung e.V., focused on promoting regional economic cycles and community engagement in Germany. It organizes annual events primarily in September and October, targeting regional actors and the general public interested in sustainability and local economy. The site demonstrates consistent branding and clear communication of its mission and activities. Technically, the website is built on TYPO3 CMS, utilizing modern web technologies such as Bootstrap, jQuery, and Owl Carousel for a responsive and user-friendly experience. While performance is moderate and mobile optimization is good, there is room for improvement in accessibility and SEO. The site lacks visible advanced security headers but uses HTTPS, indicating a basic secure setup. From a security perspective, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are important for compliance and user trust. The WHOIS data indicates a legitimate domain registration consistent with the organization's profile, though some registrant details are not publicly available. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively. Strategic improvements in security headers, privacy compliance, and technical modernization would enhance its posture and user confidence.

A

AgrarBündnis

agrarbuendnis.de

55

AgrarBündnis is a German non-profit alliance comprising 26 independent organizations focused on agriculture, environmental protection, and socio-economic issues in farming. The website serves as an information hub, sharing projects, discussion papers, and press releases relevant to sustainable agriculture and environmental advocacy. The organization positions itself as an established and credible entity within its sector, targeting stakeholders interested in sustainable and socially responsible agriculture. Technically, the website is built on TYPO3 CMS, leveraging modern frontend libraries such as jQuery, Bootstrap, and FontAwesome. Hosting is managed via cyon.ch, a reputable Swiss hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility features could be enhanced. SEO is basic but functional, with proper meta tags and canonical URLs. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no public security or incident response policies are available. Google Analytics is used with IP anonymization, indicating moderate user tracking. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of contact emails and phone numbers on the homepage slightly reduces direct user engagement potential. Strategic improvements in security headers, accessibility, and public security policies would enhance the site's security posture and compliance.

B

Bund der Deutschen Landjugend e.V.

landjugend.de

59

The Bund der Deutschen Landjugend e.V. (BDL) is Germany's largest youth association focused on empowering young people in rural areas through projects, education, and community engagement. The organization has a strong market position with approximately 100,000 members and a clear mission to sustain rural living and youth participation. The website reflects a professional and modern digital presence, leveraging Astro framework and React components, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high trustworthiness and compliance with GDPR, supported by transparent contact information and organizational details.

P

Pfarrei St. Martin weismain

stmartin-weismain.de

10

The website represents the Catholic parish St. Martin in Weismain, Germany, serving as an informational portal for parishioners and visitors. It provides details about church services, staff, committees, sacraments, and upcoming events, positioning itself as a local community and religious resource. The site targets local residents and church members, operating as a non-profit religious organization with a small organizational size. Technically, the website is built on the alkacon Mercury CMS platform, utilizing JavaScript, OpenStreetMap for location services, and Matomo for analytics. The hosting is managed via rzone.de nameservers. The site demonstrates good mobile optimization, accessibility features, and SEO practices, with moderate performance. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. Strategic improvements could focus on enhancing security headers and publishing security policies to further strengthen the security posture.

P

Pfarrei St. Heinrich und Kunigunde Burgkunstadt

pfarrei-burgkunstadt.de

59

Pfarrei St. Heinrich und Kunigunde Burgkunstadt is a local parish church serving the community in Burgkunstadt, Germany. The website provides comprehensive information about religious services, sacraments, community news, and events, targeting local parishioners and visitors. It is part of the Erzbistum Bamberg diocese network and collaborates with nearby parishes. The site is well-structured, accessible, and includes GDPR-compliant privacy and cookie policies. Contact information is clearly presented, supporting community engagement. Technically, the website is built on the Alkacon Mercury CMS platform, using modern web technologies including JavaScript, Bootstrap, and Matomo analytics for privacy-conscious tracking. The site is mobile-optimized and includes accessibility features such as the eyeAble plugin. Hosting is provided by internet1.de, with DNS configured accordingly. Performance is moderate, with good SEO and accessibility practices. From a security perspective, the site uses HTTPS (assumed from canonical URLs and external scripts), employs cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security headers are not visible in the provided data, and no incident response or security policy pages are found. The site does not show signs of vulnerabilities or malicious content. The WHOIS data indicates a consistent and legitimate domain registration appropriate for a local parish. Overall, the website demonstrates a solid digital presence for a small non-profit religious organization, balancing user experience, privacy, and accessibility. Strategic improvements could include enhancing security headers, publishing a security policy, and formalizing incident response contacts to strengthen trust and compliance.

P

Pfarrei St. Michael Mainroth

pfarrei-mainroth.de

10

Pfarrei St. Michael Mainroth is a small, non-profit Catholic parish serving the local community in Germany. The website provides comprehensive information about church services, parish teams, community groups, and events, targeting parish members and local residents. The business model focuses on religious and community services with a long historical background dating back to 1308. Technically, the website is built on the Alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility features and cookie consent mechanisms, reflecting a moderate to good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not explicitly presented. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements, making it a reliable resource for its audience.

Lebensfenster.de is a German non-profit website operated by the Internetseelsorge of the Archdiocese of Bamberg, providing spiritual guidance, counseling, and social support services primarily to the general public seeking pastoral care. The website is well-structured, professionally designed, and offers comprehensive content in German, including spiritual impulses, counseling contacts, and information on social issues. It maintains strong affiliations with official church and social service organizations, enhancing its credibility and trustworthiness. Technically, the site employs modern web technologies such as Bootstrap, jQuery, JWPlayer, and Matomo analytics, hosted on a German hosting provider with secure HTTPS connections. Privacy compliance is well addressed through a detailed cookie consent mechanism and GDPR-aligned privacy policy. Security posture is solid with HTTPS, reCAPTCHA, and privacy-respecting analytics, though some security headers could be improved. Overall, the site presents a low-risk profile with no detected vulnerabilities or suspicious content.

Ö

Ökumenische Kur- und Urlauberseelsorge Bad Staffelstein

kurseelsorge-bad-staffelstein.de

10

The Ökumenische Kur- und Urlauberseelsorge Bad Staffelstein website serves as a digital platform for spiritual care and community engagement in Bad Staffelstein, Germany. It provides detailed event information, pastoral contacts, and resources for visitors and locals interested in ecumenical services and cultural activities. The site is positioned as a small non-profit entity focused on local community support and spiritual well-being. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including JavaScript and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization and excellent accessibility features, ensuring broad usability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and incident response policies are not evident, suggesting areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic enhancements in security policies and technical optimizations could further strengthen its posture and user trust.

D

DPSG Bad Staffelstein Stamm Andechs-Rothenau

dpsg-badstaffelstein.de

52

DPSG Bad Staffelstein is a local non-profit scouting organization in Germany, providing youth scouting activities and community engagement. The website serves as an information hub for members and the local community, featuring news, event calendars, and details about scouting stages and campsites. The site is built on WordPress with a modern tech stack including Bootstrap and jQuery, and it demonstrates good digital maturity with mobile optimization and cookie consent compliance. Security posture is solid with HTTPS and cookie management, though some security headers and incident response details are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

Caritasverband für den Landkreis Lichtenfels e.V. is a regional non-profit organization providing a wide range of social services including child and youth welfare, family support, senior care, and integration assistance. The website reflects a well-structured and professionally maintained digital presence, targeting local communities in Germany. The organization leverages modern web technologies such as Bootstrap, jQuery, and Matomo analytics, ensuring a balance between functionality and privacy compliance. Security measures include HTTPS, cookie consent management, and use of Google reCAPTCHA to protect forms. However, there is room for improvement in implementing security headers and explicit incident response policies. Overall, the website is trustworthy, accessible, and compliant with GDPR requirements, supporting the organization's mission effectively.

R

Regens Wagner Burgkunstadt

regens-wagner-burgkunstadt.de

49

Regens Wagner Burgkunstadt is a medium-sized non-profit organization based in Germany that provides comprehensive social services for people with disabilities. Their offerings include housing, education, employment, open help, leisure activities, day care, accompanying services, care, and pastoral care. The website reflects a well-structured and professionally maintained digital presence, leveraging auctores CMS and common web technologies such as jQuery and Bootstrap. The site is mobile-optimized and accessible, with clear navigation and relevant content for its target audience. From a security perspective, the website employs HTTPS with good SSL configuration and includes CSRF tokens in forms, indicating attention to basic security practices. However, it lacks several important security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is supported by a comprehensive GDPR-aligned privacy policy, though no explicit cookie consent mechanism is observed. Contact information is clearly presented, including phone numbers and a company email address, enhancing business credibility. Overall, the website is trustworthy and safe, with no adult or explicit content detected. The domain registration data aligns well with the website's content and business purpose, supporting legitimacy. Strategic improvements in security headers, incident response transparency, and cookie consent would further enhance the site's security posture and compliance. The organization maintains active social media channels on Facebook, YouTube, and Instagram, supporting community engagement and outreach.

V

Vernetzte Kirche

evangelische-termine.de

51

Evangelische Termine is a specialized event calendar platform serving the Evangelical Lutheran Church community in Bavaria, Germany. It offers a searchable calendar of church-related events, location-based event discovery, and user login functionality for event submissions. The platform is supported by the Vernetzte Kirche organization and promotes mobile applications for iPhone and Android to enhance accessibility. The website content is well-structured, professionally designed, and consistent with its non-profit religious mission. Technically, the site uses a modern tech stack including Bootstrap 5, jQuery, and FontAwesome, hosted on a provider associated with the domain's nameservers. The site is mobile optimized and provides basic accessibility features. However, there is room for improvement in SEO and security headers implementation. The login form uses secure POST methods, but no advanced security policies or vulnerability disclosures are present. From a security perspective, the site shows a moderate security posture with no visible critical vulnerabilities or exposed sensitive data. The absence of security headers and cookie consent mechanisms are notable gaps. Privacy compliance is partially met with a privacy policy page but lacks cookie consent and detailed GDPR indicators. The domain WHOIS data aligns well with the website's purpose and shows no suspicious patterns, supporting a high legitimacy score. Overall, Evangelische Termine is a trustworthy, well-maintained platform with a clear community focus. Strategic improvements in security headers, privacy compliance, and transparency around incident response would enhance its security posture and user trust.

S

Schlosskirchenmusik Bayreuth

schlosskirchenmusik-bayreuth.de

60

Schlosskirchenmusik Bayreuth is a small non-profit organization dedicated to church music at the Schlosskirche in Bayreuth, Germany. It organizes liturgical music, concerts, and provides training for part-time church musicians. The website reflects a well-structured community-focused entity with clear contact information and event listings. Technically, the site uses the Alkacon Mercury CMS, integrates Matomo for privacy-conscious analytics, and includes accessibility features via the EyeAble plugin. The site is hosted on German infrastructure with HTTPS enforced, ensuring secure communications. Security posture is good but could be enhanced with additional HTTP security headers and formal security policies. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the site presents a trustworthy and professional image suitable for its community and non-profit mission.

T

TelefonSeelsorge Ostoberfranken

telefonseelsorge-ostoberfranken.de

47

TelefonSeelsorge Ostoberfranken is a well-established non-profit organization founded in 1969, providing free crisis counseling services primarily via telephone, online, and local in-person support. The website serves as an informational and access portal for these services, targeting individuals in emotional or psychological distress within the Ostoberfranken region of Germany. The organization is supported financially by the Seelsorge-Stiftung Oberfranken, enhancing its credibility and trustworthiness. Technically, the website is built on Drupal 9, leveraging Bootstrap and FontAwesome for responsive and accessible design. Hosting is provided by hosteurope.de, a reputable provider. The site is mobile-optimized and offers a clear navigation structure, although some SEO and accessibility features could be improved. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for compliance with EU regulations. No incident response or security policies are published, and no vulnerability disclosure information is available. The WHOIS data shows a domain age consistent with the organization's founding date, supporting legitimacy, though registrant details are minimal. Overall, the website is professional, trustworthy, and serves its non-profit mission effectively. Strategic improvements in security headers, privacy compliance, and transparency around security policies would enhance its posture and user trust.

F

Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Bayreuth / BDKJ-Regionalverband Bayreuth

jugend-im-dekanat-bayreuth.de

60

The website represents the Fachstelle für katholische Kinder- und Jugendarbeit im Dekanat Bayreuth and the BDKJ-Regionalverband Bayreuth, focusing on youth pastoral work and church-related youth services in the Bayreuth region of Germany. It provides comprehensive information on events, youth programs, prevention of sexual violence, and support for volunteers. The site is affiliated with the Erzbistum Bamberg, indicating a strong institutional backing. Technically, the site is built on the Alkacon Mercury CMS platform, uses Matomo for analytics, and integrates accessibility tools such as Eye-Able, demonstrating a commitment to inclusivity and privacy. The website is well-structured, mobile-optimized, and GDPR compliant with clear cookie consent mechanisms. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professional, and serves its non-profit mission effectively.

Pfarrei St. Franziskus Eckersdorf is a small non-profit Catholic parish serving the local community in Eckersdorf, Germany. The website provides parishioners and visitors with information about church services, events, contact details, and parish groups. It is positioned as a local religious community hub with a focus on spiritual and community services. The site is well-branded, consistent, and offers good content quality tailored to its audience. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted on internet1.de with proper HTTPS configuration. The site is mobile optimized and provides basic accessibility features. Security posture is good with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is strong with a clear cookie banner and privacy policy in German, aligned with GDPR requirements. Contact information is clearly presented with verified email and phone details. Overall, the website is trustworthy, professional, and suitable for its non-profit religious purpose.

The website st-hedwig-bayreuth.de represents the Catholic parish St. Hedwig Bayreuth, providing detailed information about religious services, community events, and pastoral activities. It serves a local audience in Bayreuth, Germany, focusing on parishioners and community members. The site is part of the Diocese of Bamberg's digital presence and offers resources such as event calendars, sacraments information, and kindergarten services. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and JW Player, hosted on servers associated with internet1.de. The site is mobile-optimized and includes accessibility features, though these could be enhanced further. Security-wise, HTTPS is enforced, and cookie consent mechanisms comply with GDPR, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is professional, trustworthy, and well-aligned with its non-profit religious mission.

F

For Future Bündnis

for-future-buendnis.de

59

For Future Bündnis is a German non-profit organization focused on climate protection activism, operating a network of over 50 local groups across Germany. The website serves as a hub for networking, event organization, and knowledge sharing, targeting individuals interested in climate activism. The organization holds a reputable position in the non-profit sector, evidenced by certifications such as the Phineo Wirkt-Siegel and support from the German Environment Agency (UBA). The business model centers on community engagement and empowerment rather than commercial activities. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins for event management, cookie consent, and analytics. The infrastructure is modern and well-maintained, with good mobile optimization and SEO practices. Hosting is managed via UI-DNS, and the site employs HTTPS with strong SSL configuration, ensuring secure communications. Security posture is solid, with appropriate security headers, privacy-respecting analytics via Matomo, and a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response contact, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the organization's mission while maintaining a secure and user-friendly online presence. Strategic recommendations include publishing explicit security policies, enhancing accessibility, and considering a vulnerability disclosure policy to further strengthen security culture.

B

British Chamber of Commerce Czech Republic

britishchamber.cz

46

The British Chamber of Commerce Czech Republic is a well-established non-profit organization dedicated to fostering business growth and trade between British, Czech, and international companies. It offers membership services, networking events, and specialized business programmes to support its members. The website reflects a professional and consistent brand image, targeting business professionals and companies interested in bilateral trade and networking opportunities. Technically, the site is built on WordPress with a modern tech stack including Google Analytics and reCAPTCHA, ensuring a secure and user-friendly experience. Security posture is solid with HTTPS and consent mechanisms, though there is room for improvement in security headers and published policies. The absence of WHOIS data slightly reduces trust but does not detract significantly from the overall legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining plugin security to further strengthen the site's security and compliance stance.

A

AIESEC Česká republika

aiesec.cz

55

AIESEC Česká republika is a well-established non-profit youth organization focused on leadership development through international internships and volunteer programs. The website reflects a mature digital presence with a WordPress CMS, modern tracking and marketing tools, and a clear focus on youth engagement. The organization maintains strong partnerships with reputable companies and has a consistent brand identity. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is due to privacy protection and does not detract from the organization's legitimacy. Overall, the site is professional, trustworthy, and serves its target audience effectively.

D

Diakonie Baden-Württemberg

ran-ans-leben.de

42

Diakonie Baden-Württemberg operates as a large non-profit organization focused on social services, volunteer programs, and career entry support in the Baden-Württemberg region of Germany. The website provides comprehensive information about voluntary social and ecological services (FSJ, BFD, FÖJ), education, and opportunities for engagement. It targets young people and individuals interested in social work and volunteering. The organization maintains a strong regional presence and is affiliated with the parent entity Diakonisches Werk Württemberg. Technically, the website is built on WordPress with modern plugins such as Borlabs Cookie for GDPR compliance and Autoptimize for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be managed via your-server.de, consistent with the domain's nameservers. Security posture is good with HTTPS enforced and cookie consent mechanisms in place. However, some recommended security headers are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies and consent management. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure mechanism to further strengthen security and trust.

F

futurum Diakonie Württemberg

futurum-diakonie.de

63

futurum Diakonie Württemberg operates as a creative future center within the Diakonie Württemberg network, focusing on social innovation, education, and networking. The organization offers workshops, training, and space rental services aimed at inspiring and enabling its members and partners to actively shape future challenges. The website reflects a medium-sized non-profit entity with consistent branding and a clear mission aligned with social welfare and innovation. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and moderate performance. Security posture is strong with HTTPS enforced, HSTS enabled, and use of Google reCAPTCHA to protect forms. However, the absence of explicit privacy policies, terms of service, and incident response information represents compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and formal security documentation.

D

Diakonie Deutschland

diakonie.de

63

Diakonie Deutschland is a leading non-profit organization in Germany focused on social welfare, care, and support services for vulnerable populations. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. The organization leverages TYPO3 CMS, integrates privacy-conscious analytics tools, and employs a consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS and privacy proxies, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for accessibility and mobile use.

F

Fridays for Future

fridaysforfuture.de

10

Fridays for Future Germany is a prominent non-profit climate activism organization dedicated to raising awareness and mobilizing public action against the climate crisis. The website serves as a central hub for information dissemination, event coordination, and community engagement, targeting a broad audience of climate-conscious individuals and supporters. The organization maintains a strong market position within Germany and internationally through its decentralized and independent structure. Technically, the website is built on WordPress, leveraging modern plugins such as Gutenslider for dynamic content and Matomo for privacy-focused analytics. The site is hosted on rzone.de with custom nameservers, employs HTTPS with excellent SSL configuration, and demonstrates good mobile optimization and accessibility standards. SEO practices are well implemented with comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The privacy policy and cookie policy are comprehensive and GDPR compliant, reflecting a strong commitment to user privacy. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security transparency and contact information availability. The risk profile is low, with no indications of malicious activity or content safety concerns.

The Deutsch-Tschechischer Club Bamberg operates as a small non-profit cultural organization dedicated to fostering German-Czech relations through community events and activities. The website serves as an informational portal for members and interested parties, providing event details, club structure, and contact avenues. The technical infrastructure is based on standard web technologies including Bootstrap and jQuery, hosted likely by a German provider, ensuring basic responsiveness and usability. However, the site lacks advanced CMS features and modern security implementations such as HTTPS enforcement and security headers. Privacy compliance is minimal with a basic privacy policy present but no cookie consent mechanisms or GDPR explicit indicators. Overall, the security posture is weak, with recommendations to improve HTTPS usage, security headers, and privacy compliance. The domain WHOIS data is minimal but consistent with the website's regional focus, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

A

Ackermann-Gemeinde

ackermann-gemeinde.cz

10

The Ackermann-Gemeinde website serves as a digital platform for a non-profit organization focused on fostering cultural and social ties between Germans and Czechs. It provides information on events, youth activities, and educational projects, targeting young people and culturally interested audiences. The site is built on the Webnode CMS platform, leveraging modern web technologies and CDN services to deliver content efficiently. The presence of cookie consent and privacy policies indicates a baseline compliance with privacy regulations. Security posture is adequate with HTTPS enforced, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and well-aligned with its mission, though the absence of public contact details may limit direct engagement.

A

Ackermann-Gemeinde e.V.

ackermann-gemeinde.de

10

Ackermann-Gemeinde e.V. is a German non-profit organization focused on fostering German-Czech-Slovak neighborhood relations through cultural, social, and religious initiatives within the Catholic Church. The website serves as a platform to promote events, publications, volunteer opportunities, and community engagement targeting German and Czech-speaking Christian audiences. The organization maintains a medium-sized presence with regional activities and a clear mission to build bridges in Europe. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design and uses Matomo for privacy-conscious analytics. The site is well-structured, bilingual, and provides comprehensive contact and donation information. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. Overall, the website reflects a professional and trustworthy non-profit entity with a solid digital presence.

Caritasverband Bayreuth für die Stadt und den Landkreis Bayreuth e.V. is a medium-sized non-profit organization dedicated to providing social services and support to diverse community groups including elderly, children, families, and migrants in the Bayreuth region of Germany. The website reflects a well-structured and professional digital presence with clear navigation, comprehensive service descriptions, and active community engagement. The organization offers a broad range of services such as social counseling, care services, integration support, and volunteer coordination, positioning itself as a key regional social welfare provider. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, and Matomo analytics, hosted on infrastructure associated with kirche-bamberg.de. It is mobile responsive and implements privacy-conscious features such as cookie consent and anonymous tracking fallback. Security posture is solid with HTTPS enforced and use of Google reCAPTCHA for form protection, although some security headers and explicit incident response policies could be improved. Overall, the website is trustworthy, privacy compliant, and professionally maintained, with no signs of malicious activity or content blocking. The domain registration data aligns well with the organizational identity, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

The Evangelische Studierendengemeinde Bayreuth website serves as a digital hub for a non-profit student community organization focused on providing spiritual, cultural, and social events primarily for students at Bayreuth and Kulmbach campuses. The site offers comprehensive event listings, group information, counseling services, and community engagement tools such as newsletters and an app. The organization emphasizes inclusivity and openness to all backgrounds and religions. Technically, the website is built on Drupal 10, uses modern web technologies including Bootstrap and Klaro for cookie consent, and is hosted by a German hosting provider. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. WHOIS data is minimal but consistent with an active domain. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

The Katholische Hochschulgemeinde Bayreuth (KHG Bayreuth) is a small non-profit religious community organization serving university students and staff in Bayreuth, Germany. The website provides comprehensive information about the community, including events, groups, volunteer opportunities, and cooperation partners. It targets students and the academic community with bilingual content in German and English. The organization maintains an active online presence with social media links and regularly updated event calendars. Technically, the website is built on WordPress using common plugins such as LayerSlider, Events Calendar Pro, Contact Form 7, and GDPR Cookie Compliance. Hosting is provided by RZone, as inferred from the nameservers. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO practices are good with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and implements GDPR-compliant cookie consent mechanisms. However, no advanced security headers were detected, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data is consistent with the website content and hosting, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It serves its community well but could improve security posture by adding security headers and publishing security policies. There are no critical issues detected that would impair trust or functionality.