Non-profit security reports

A

Arbeitskreis für die Inventarisierung und Pflege des kirchlichen Kunstgutes in den deutschen (Erz-)Bistümern

deutsche-bistuemer-kunstinventar.de

39

The website deutsche-bistuemer-kunstinventar.de represents a specialized non-profit working group dedicated to the inventory and care of ecclesiastical art in German (arch)dioceses. It serves as a professional platform for cultural heritage professionals, offering guidelines, publications, and networking opportunities. The site is built on Joomla CMS with a Sparky framework and uses standard web technologies like jQuery and Bootstrap. It is hosted on servers associated with kasserver.com and enforces HTTPS for secure communication. The website demonstrates good content quality, clear navigation, and mobile optimization, though it lacks explicit contact information and detailed security policies. Privacy compliance is addressed via a cookie consent banner and a privacy policy page. No advertising or tracking beyond essential scripts is detected, indicating a privacy-conscious approach. WHOIS data aligns well with the website's mission and origin, supporting legitimacy and trustworthiness.

B

Borromäusverein e.V.

borromaeusverein.de

46

Borromäusverein e.V. is a German non-profit umbrella organization supporting Catholic public libraries (except Bavaria). The website provides extensive literature reviews, event information, and educational resources primarily targeting library professionals and readers interested in Catholic literature. The organization maintains a consistent and professional web presence using TYPO3 CMS, with modern technologies such as Matomo analytics configured for privacy and Usercentrics for cookie consent management. The website is well-structured, mobile-optimized, and content-rich, though it lacks explicit privacy policy and terms of service pages. Security posture is good with HTTPS and privacy-conscious analytics but could be improved by adding security headers and publishing security policies. WHOIS data aligns with the website's legitimacy, showing consistent domain registration and hosting. Overall, the site is trustworthy, safe, and professionally maintained, serving a specialized non-profit sector.

C

Charles Darwin Foundation

darwinfoundation.org

52

The Charles Darwin Foundation website serves as a comprehensive platform for promoting conservation and scientific research efforts focused on the Galapagos Islands. The organization is positioned as a reputable non-profit entity dedicated to safeguarding biodiversity through various marine, land, and community programs. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and integrated analytics and marketing tools. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though improvements can be made by implementing security headers and publishing explicit privacy and cookie policies. The absence of WHOIS registrant data is likely due to privacy protection, which is justified for a non-profit organization. Overall, the website is trustworthy, professional, and well-optimized for its audience.

The Katholische Hochschulgemeinde Nürnberg is a non-profit religious community organization serving students and interested individuals in the Nürnberg region. The website provides comprehensive information about their events, groups, spiritual offerings, and support services. It targets university students and those seeking community and spiritual engagement. The organization holds a stable regional position with clear contact and social media presence. Technically, the website employs a modern tech stack including Bootstrap, jQuery, JWPlayer, and Matomo analytics, hosted on kirche-bamberg.de infrastructure. The site is mobile responsive, moderately performant, and includes accessibility features, though some improvements are possible. Privacy compliance is well addressed with a cookie consent banner and a comprehensive privacy policy. Security posture is good with HTTPS enforced, use of reCAPTCHA, and privacy-respecting analytics. However, some security headers are missing and no explicit incident response or security policies are published. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professionally maintained, and suitable for its audience. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its posture further.

K

KHG Bamberg

khg-bamberg.de

57

KHG Bamberg is a non-profit Catholic student community organization affiliated with the Archdiocese of Bamberg, Germany. It provides spiritual services, social events, counseling, and support primarily targeting university students and the academic community in Bamberg. The website reflects a well-structured, accessible, and content-rich platform that supports its mission with clear navigation and relevant information. The organization maintains partnerships with regional and overregional entities, enhancing its community reach and service offerings. Technically, the website is built on the alkacon Mercury CMS platform, utilizing JavaScript, Matomo analytics for privacy-conscious tracking, and accessibility tools such as the eyeAble plugin. The site is mobile-optimized and demonstrates good SEO and accessibility standards. Hosting is managed via domaincontrol.com DNS services, likely GoDaddy, with HTTPS enforced. From a security perspective, the site shows good practices including cookie consent and privacy policy compliance with GDPR. However, explicit security headers and incident response policies are not evident, suggesting room for improvement. No critical vulnerabilities or suspicious content were detected. The WHOIS data is limited but does not raise immediate concerns, though registrant details are sparse. Overall, the website is trustworthy, professionally maintained, and serves its community effectively. Strategic improvements in security policy transparency and technical security headers would enhance its posture further.

C

CariThek – Bamberger Freiwilligenzentrum

carithek.de

63

CariThek – Bamberger Freiwilligenzentrum is a local non-profit volunteer center based in Bamberg, Germany, affiliated with Caritas Bamberg. The organization focuses on promoting volunteer engagement, providing consulting services, training, and managing various social projects aimed at community support and integration. The website serves as an information hub for volunteers and organizations, offering access to volunteer opportunities, news, events, and educational resources. Technically, the site is built on the alkacon Mercury CMS platform, employs modern web technologies including SVG icons and JavaScript, and integrates Matomo analytics for privacy-conscious user tracking. Accessibility features and cookie consent mechanisms are implemented, reflecting a commitment to inclusivity and compliance with GDPR. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission.

C

Caritasverband für die Erzdiözese Bamberg e.V.

caritas-fobi.de

54

The website www.caritas-fobi.de represents the Caritasverband für die Erzdiözese Bamberg e.V., a non-profit organization focused on providing professional continuing education and training in social work, care, pedagogy, and administration. The site offers a comprehensive catalog of courses, including in-person, online, and inhouse training, targeting professionals in social and care sectors primarily within the Bamberg diocese region. The organization maintains a solid regional presence with clear contact information and active social media channels. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome. It is hosted on servers associated with internet1.de, with a moderate performance profile and good mobile optimization. The site implements GDPR-compliant cookie consent via klaro and provides privacy and terms of service pages, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain registration is consistent with the organization's identity and business claims, supporting a high legitimacy score. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements could include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party libraries to maintain security posture.

L

Love Tours

lovetours-caritas.de

61

Love Tours is a non-profit organization providing value-oriented sexual education workshops primarily targeting youth in Germany. Affiliated with Caritas and the Archdiocese of Bamberg, it offers workshops that emphasize self-respect, identity, and trust, grounded in Christian values. The organization operates regionally with dedicated contact points in Ansbach, Bamberg, and Nürnberg. The website reflects a professional and accessible digital presence, leveraging modern technologies and accessibility tools to serve its audience effectively. Security posture is solid with HTTPS and privacy-conscious analytics, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy and well-aligned with its non-profit educational mission.

C

Caritasverband für die Erzdiözese Bamberg e.V.

kindererholung-caritas.de

56

The website kindererholung-caritas.de represents the Caritasverband für die Erzdiözese Bamberg e.V., a non-profit organization providing recreational and health-promoting holiday programs for children and youth aged 8 to 14. The site offers detailed information about their services, including program dates, participant limits, and recruitment for caregiving staff. The organization positions itself as a regional leader in child and youth welfare within the Caritas network. Technically, the website is built on the alkacon Mercury CMS platform, leveraging modern JavaScript libraries and accessibility tools such as the eyeAble plugin. It uses Matomo for privacy-conscious analytics and is hosted on servers associated with internet1.de. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and policies are not evident, and no incident response or vulnerability disclosure information is published. No critical vulnerabilities or suspicious elements were detected. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding terms of service to further strengthen compliance and user trust.

D

Durchstarter - Freiwilliges Schuljahr

durchstarter-fssj.de

41

Durchstarter - Freiwilliges Schuljahr is a German non-profit initiative focused on enabling students from the 8th grade onwards to engage in voluntary social and active school year programs. The website serves as an informational and engagement platform, facilitating connections between students and local social, cultural, and ecological organizations. The organization positions itself as a niche regional player promoting youth voluntary engagement with a clear target audience of school students. Technically, the website is built on a modern stack including Pimcore CMS, Vue.js, Bootstrap, and privacy-focused Matomo analytics, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting its non-profit mission effectively.

C

Caritasverband der Erzdiözese Bamberg

caritas-karriere.de

56

Caritas-karriere.de serves as the official job portal for the Caritasverband der Erzdiözese Bamberg, the largest social employer in Germany's Ober- und Mittelfranken region. The website provides comprehensive career information, job listings, and training opportunities focused on social care and non-profit employment. It targets job seekers interested in meaningful work within the social sector. Technically, the site is built on the alkacon Mercury CMS platform, hosted on Erzbistum Bamberg infrastructure, and employs Matomo analytics with GDPR-compliant cookie consent mechanisms. Accessibility is a strong focus, with dedicated tools and features implemented. Security posture is solid with HTTPS enforced, though some security headers and policies are missing. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns well with the organization's profile.

S

Salesianer Don Boscos und Don Bosco Schwestern in Deutschland und Österreich

donbosco-magazin.eu

49

Don Bosco Magazin is a German-language online magazine affiliated with the Salesianer Don Boscos and Don Bosco Sisters in Germany and Austria. It provides family-oriented, religious, and educational content targeting parents, children, and youth connected to the Don Bosco mission. The website features articles, podcasts, newsletters, and free issues, positioning itself as a niche non-profit media outlet within the religious and family education sector. Technically, the site is built on a modern stack including Bootstrap and eZ Platform CMS, with good mobile optimization and moderate performance. Security measures include HTTPS and Google reCAPTCHA integration, alongside a GDPR-compliant cookie consent mechanism. However, the absence of WHOIS data and security headers slightly reduces trustworthiness. Overall, the site is professional, content-rich, and trustworthy for its target audience.

D

Deutscher Katholikentag

katholikentag.de

53

The website www.katholikentag.de represents the official platform for the 104th Deutscher Katholikentag, a major biennial religious event in Germany with a long-standing tradition. The site provides comprehensive information about the event scheduled for May 2026 in Würzburg, including registration, program details, volunteer opportunities, and merchandise sales. The target audience includes Catholics, religious communities, and interested individuals primarily in Germany and Europe. The organization operates as a non-profit entity with a medium-sized digital presence and a well-established brand identity. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, Matomo analytics, and third-party integrations like Vimeo and chat widgets. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. From a security and compliance perspective, the site includes a comprehensive privacy policy and cookie consent modal, indicating GDPR compliance. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available. The WHOIS data shows structured domain registration but with DNS servers that do not directly match the organization name, though no suspicious patterns were found. Overall, the website is professional, trustworthy, and well-maintained, serving its purpose effectively. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and maintaining up-to-date third-party components to ensure ongoing security and compliance.

F

Freddy

freddy-datenfresser.de

45

Freddy is a German-based organization focused on the collection and recycling of old mobile phones and smartphones. Their core business revolves around secure data deletion, environmental sustainability, and supporting social projects. The website positions Freddy as a socially responsible entity with certifications such as DEKRA and ISO, and media coverage that enhances its credibility. The target audience includes individuals and organizations interested in sustainable electronic waste management and data security. Technically, the website is built on WordPress with the Avada theme and uses modern plugins like Slider Revolution. Hosting is provided by Innofabrik, a reputable German hosting provider. The site demonstrates good mobile optimization and SEO practices but lacks some accessibility features. Security posture is moderate with HTTPS enabled but missing security headers and explicit privacy and cookie policies. No direct contact emails or phone numbers are found, only a contact form. There is no evidence of tracking or analytics services, indicating a privacy-conscious approach but also a lack of transparency in privacy compliance. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

D

Diakonisches Werk Baden-Württemberg

journalistenpreis-diakonie.de

51

The website www.journalistenpreis-diakonie.de represents a non-profit initiative by the Diakonisches Werk Baden-Württemberg to award the Journalistenpreis, a prestigious journalism prize focused on social issues in Baden-Württemberg. The site provides detailed information about the award, submission deadlines, prize categories, and past winners, targeting journalists and media professionals interested in social and political reporting. The business model centers on promoting quality journalism through monetary awards and public recognition, positioning itself as a key player in the German social journalism landscape. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo analytics with IP anonymization to respect user privacy. The site is hosted on domaincontrol.com name servers, indicating a professional hosting arrangement. Performance and mobile optimization are good, with clear navigation and SEO-friendly metadata. The cookie consent mechanism is implemented with user choice, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics. However, it lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of terms of service is a minor legal gap. Overall, the security posture is solid but could be improved with additional headers and transparency. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing a security policy, and adding terms of service to improve legal completeness and user trust. The site is well-positioned to serve its audience effectively while maintaining good privacy and security standards.

D

Der evangelische Fachverband für Teilhabe (BeB)

mitmenschpreis.de

63

Der evangelische Fachverband für Teilhabe (BeB) betreibt die Website mitmenschpreis.de, die den mitMenschPreis auslobt – einen Preis für Projekte, die Menschen mit Behinderung oder psychischer Erkrankung stärken und Teilhabe fördern. Die Website präsentiert sich als professionell und gut strukturiert, mit klaren Informationen zum Preis, Bewerbungsprozess und Partnern. Die Zielgruppe sind Organisationen und Initiativen im Bereich der Behindertenhilfe und psychischen Gesundheit. Technisch basiert die Website auf WordPress mit dem GeneratePress-Theme und mehreren Plugins zur Funktionalität und Datenschutz. Die Website ist mobil optimiert und barrierefreundlich gestaltet. Die Sicherheitslage ist solide mit HTTPS und Cookie-Consent-Mechanismen, jedoch fehlen explizite Sicherheitsrichtlinien und Incident-Response-Informationen. Insgesamt ist die Website vertrauenswürdig und entspricht den Anforderungen an Datenschutz und Nutzerfreundlichkeit.

D

Diakonie Baden Freiwilligendienste

freuwillig.de

45

Diakonie Baden Freiwilligendienste operates a professional and well-structured website focused on promoting and facilitating voluntary social services such as FSJ and BFD in the Baden region of Germany. The organization targets young people seeking meaningful engagement and career orientation through volunteer programs. The website content is comprehensive, well-branded, and provides clear pathways for application and information. Technically, the site is built on TYPO3 CMS and integrates modern web technologies including Google Tag Manager, Matomo analytics, and accessibility tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and privacy-respecting analytics, though formal security policies and incident response contacts are not published. Overall, the site demonstrates strong GDPR compliance and trustworthy business credibility, making it a reliable resource for its audience.

The Allianz gegen Rechtsextremismus in der Metropolregion Nürnberg is a small non-profit organization dedicated to combating right-wing extremism and promoting democratic values within the Nuremberg metropolitan area. Their website serves as an informational and engagement platform, offering details about their alliance, members, events, and educational initiatives. The organization maintains an active presence on social media platforms such as Facebook and Instagram to reach a broader audience. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap for responsive design and FontAwesome for iconography. The site demonstrates moderate performance and good mobile optimization, with a clear navigation structure and consistent branding. Hosting appears to be managed by agenturserver, as indicated by the nameservers. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No vulnerability disclosure or incident response information is publicly available, suggesting areas for improvement in transparency and security readiness. Overall, the website is trustworthy, professionally presented, and aligned with its mission. The domain registration data supports the legitimacy of the organization. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing privacy compliance to strengthen the site's security posture and user trust.

E

Entenrennen Nürtingen

entenrennen-nuertingen.de

44

Entenrennen Nürtingen is a small-scale, community-focused non-profit organization that organizes an annual charity duck race event in Nürtingen, Germany. The event supports various local social and youth projects, leveraging partnerships with Lions Clubs and Round Table organizations. The website serves as an informational platform for the event, sponsors, and ticket sales locations. Technically, the site is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, hosted by a German provider (webgo.de). The site is well-structured, mobile-optimized, and uses HTTPS with valid SSL certificates, reflecting a moderate level of digital maturity. Security posture is generally good, though improvements can be made by adding security headers and incident response contacts. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professional, supporting a reputable local charity event.

R

Round Table 138 Nürtingen

kreativ-kurs.de

45

Round Table 138 Nürtingen is a local non-profit association of young men under 40 years old focused on social engagement and community projects in Nürtingen, Germany. Their activities include DKMS bone marrow donor registration campaigns, event participation such as a Gin-Bar at local festivals, and collaboration on the Nürtingen Duck Race with Lions Clubs. The website is built on WordPress with modern plugins and themes, providing a good user experience and mobile optimization. Social media presence is maintained on Facebook and Instagram. Privacy policy is present, but cookie consent mechanisms and terms of service are missing. Security posture is adequate with HTTPS enabled but lacks security headers and incident response information.

J

Jugendkreuzweg Online

jugendkreuzweg-online.de

44

Jugendkreuzweg Online is a small non-profit organization focused on providing resources, information, and community engagement for the Ecumenical Youth Crossway 2025 event in Germany. The website offers educational materials, a shop for related products, and digital tools to support prayer and participation. The platform targets youth and religious communities, positioning itself as a niche resource hub within the non-profit religious sector. Technically, the website is built on Joomla CMS with modern UIkit and Yootheme frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and formal policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professionally designed, and safe for general audiences.

L

Landeskomitee der Katholiken in Bayern

gemeinde-creativ.de

43

The website www.gemeinde-creativ.de serves as a platform for engaged Catholics primarily in Bavaria, Germany, operated by the Landeskomitee der Katholiken in Bayern. It offers a digital magazine, resources, and community engagement tools focused on religious education, liturgy, and pastoral work. The platform targets a niche audience of Catholic community members and church workers, positioning itself as a trusted non-profit resource provider. Technically, the site uses a modern front-end stack including Bootstrap, jQuery, and popular JavaScript libraries for UI components and image galleries. Hosting is managed via DomainControl nameservers, likely GoDaddy, with Matomo analytics implemented in a privacy-conscious manner (cookies disabled). The site is mobile-optimized and presents a professional design with clear navigation, though some SEO and accessibility features could be enhanced. From a security perspective, the site uses HTTPS (implied by canonical URLs), but lacks visible security headers and cookie consent mechanisms. No forms are present on the main page, reducing attack surface, but no vulnerability disclosure or incident response policies are published. WHOIS data is minimal but consistent with the organization's profile, showing no suspicious patterns. Overall, the website is a well-maintained, niche non-profit platform with good content quality and business credibility. Security posture is moderate with room for improvement in headers and compliance transparency. Privacy compliance is good given the presence of a privacy policy and minimal tracking. Strategic improvements in security policies and cookie consent would enhance trust and compliance.

F

Fundacja Wspierania Ratownictwa Górskiego, Sportu oraz Działalności Charytatywnej RADAN

fundacjaradan.org

63

Fundacja RADAN is a Polish non-profit foundation established in 2012, dedicated to supporting mountain rescue services (GOPR), promoting sports and healthy lifestyles, and providing charitable aid to those in need. The foundation operates primarily through donations and tax 1.5% contributions, targeting Polish citizens interested in supporting rescue and sports initiatives. The website is professionally designed using WordPress and Elementor, featuring clear navigation and relevant content about the foundation's mission and activities. Technical infrastructure is modern and includes cookie consent mechanisms and HTTPS security. However, some security enhancements such as DNSSEC and security.txt are missing. Contact information is clearly provided, including email, phone, physical address, and bank account details, enhancing trust and transparency.

O

Oesterreichischer Bergrettungsdienst Land Tirol

bergrettung.tirol

60

Bergrettung Tirol is a well-established non-profit organization dedicated to alpine rescue operations in the Tirol region of Austria. With over 4,600 volunteer members, the organization provides professional help in mountain emergencies, relying on voluntary and honorary service. The website reflects a mature digital presence using WordPress with Elementor and Yoast SEO, offering multilingual support and clear navigation for users including donors, volunteers, and the general public. The organization maintains a consistent brand image and provides comprehensive information about its services and structure.

B

Bergwacht Berchtesgaden

bergwacht-berchtesgaden.de

59

Bergwacht Berchtesgaden is a small non-profit volunteer mountain rescue organization operating in the Berchtesgaden region of Germany. The organization provides alpine rescue services with approximately 40 volunteers conducting over 400 rescue operations annually. Their website serves as an informational and engagement platform targeting mountain climbers, hikers, and the local community interested in alpine safety and volunteerism. The business model is focused on community service and relies on donations and volunteer participation. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Adobe Typekit fonts. Hosting is provided via rzone.de, and the site demonstrates good mobile optimization and SEO practices. Cookie consent is implemented with a compliant banner and granular user controls, reflecting a good level of privacy compliance. From a security perspective, the site enforces HTTPS and anonymizes IP addresses in analytics, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or suspicious content were detected. The WHOIS data is minimal but consistent with the hosting and business nature, supporting legitimacy. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic recommendations include enhancing security headers, publishing incident response information, and adding terms of service to improve compliance and trust further.

N

Nicht(s) vergessen - Gut vorbereitet für die letzte Reise

nichtsvergessen.de

52

Nicht(s) vergessen is a German non-profit initiative supported by Evangelical regional churches and their diaconal works, focusing on providing resources and support for end-of-life planning, bereavement, and related topics. The website offers brochures, online seminars, and informational materials to help individuals prepare for their last journey with dignity and peace. The target audience primarily consists of adults interested in advance care planning and grief support. Technically, the site is built on a W-Commerce Edith CMS platform, utilizing jQuery, Bootstrap, and Matomo analytics, reflecting a mature but somewhat traditional technology stack. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses privacy-respecting analytics, but lacks explicit security policies and some advanced security headers. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is trustworthy, professionally maintained, and serves a niche non-profit sector effectively.

E

Evangelische Landeskirchen und ihre Diakonischen Werke

was-bleibt.de

62

The website www.was-bleibt.de represents a non-profit initiative jointly operated by Evangelische Landeskirchen and their Diakonische Werke, focusing on legacy, testament, and end-of-life planning topics. It offers educational content, free brochures, online seminars, and events to support individuals in planning their last will and related matters. The site targets a general German-speaking audience interested in these sensitive topics. Technically, the site is built on Edith CMS with a modern frontend using jQuery, Bootstrap, and Matomo analytics, hosted on w-commerce.de infrastructure. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

R

Round Table 138 Nürtingen

rt138.de

9

Round Table 138 Nürtingen is a local non-profit association of young men under 40 years old based in Germany. The organization focuses on social engagement, community projects, and events such as DKMS bone marrow donor registration campaigns and local festivals. The website is professionally designed using WordPress with modern plugins and is mobile responsive. It provides clear information about the club's mission and projects but lacks explicit contact details and comprehensive privacy or security policies. The site uses HTTPS and has social media presence on Facebook and Instagram, enhancing its credibility. However, the absence of cookie consent mechanisms and security headers indicates room for improvement in privacy compliance and security posture. Overall, the website is trustworthy and serves its community-oriented purpose effectively.

A

Agora Club Tangent Deutschland

agoraclubtangent.de

9

Agora Club Tangent Deutschland is a German non-profit friendship organization for women aged 41 and above, providing a platform for networking, social engagement, and charitable projects. The organization operates through local clubs across Germany and an online E-Club, fostering friendship, tolerance, and active social contribution. The website reflects a well-structured and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on TYPO3 CMS with Bootstrap and FontAwesome, offering good mobile optimization and accessibility. However, the site lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. No direct contact emails or phone numbers are published, with contact presumably via a form. The WHOIS data is minimal but consistent with the hosting location in Germany, supporting legitimacy. Overall, the website is professional and trustworthy but could enhance its security posture and privacy compliance.

The Landeskomitee der Katholiken in Bayern is a non-profit organization representing Catholic laity across Bavarian dioceses. The website serves as an information hub, providing news, publications, event details, and advocacy statements relevant to its community. It holds a stable regional position with a clear focus on religious and social topics. Technically, the site is built on WordPress with WooCommerce integration, employing standard plugins for user management, document embedding, and cookie compliance. The infrastructure is modern and adequately optimized for mobile and SEO, though performance is moderate. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, serving its target audience effectively.

Z

Zentralkomitee der deutschen Katholiken (ZdK)

zdk.de

27

The Zentralkomitee der deutschen Katholiken (ZdK) is a well-established non-profit organization representing the interests of Catholic laity in Germany. The website serves as an information hub providing news, positions, event details, and contact information to its target audience of church members and society stakeholders. The organization maintains a professional online presence with clear branding and consistent messaging. Technically, the site is built on TYPO3 CMS, uses modern responsive design principles, and integrates Matomo analytics for visitor insights while respecting user privacy through a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, accessible, and professionally maintained, supporting the organization's mission effectively.

Woche für das Leben is a well-established ecumenical initiative jointly organized by the Catholic and Evangelical Churches in Germany, focusing on life ethics, inclusion, and social advocacy. The website serves as an information hub for the annual campaign, providing educational materials, event details, and regional contact points. It targets a broad audience including church members, policymakers, and the general public interested in ethical life issues. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses Borlabs Cookie for privacy compliance. The site is mobile-optimized and offers a rich content experience with multimedia integration. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

A

Arbeitsstelle für Jugendseelsorge der Deutschen Bischofskonferenz, afj

ministranten.de

56

ministranten.de is a German non-profit platform operated by the Arbeitsstelle für Jugendseelsorge der Deutschen Bischofskonferenz (afj), dedicated to supporting leaders of church youth groups, specifically altar servers (Ministranten). The website offers a variety of resources including group session materials, internet presence support, archives, event information such as the Romwallfahrt 2024 pilgrimage, and a podcast. The platform targets church youth group leaders and volunteers, providing free and community-focused content. Technically, the site is built on Joomla CMS with modern UIkit and Yootheme frameworks, delivering a responsive and well-structured user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing. Privacy compliance is strong with a comprehensive privacy policy and opt-in cookie mechanism. No advertising or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the site is trustworthy, professional, and well-aligned with its non-profit mission.

M

MFM Deutschland e.V.

mfm-programm.de

42

MFM Deutschland e.V. is a well-established German non-profit organization specializing in value-oriented sexual education and fertility awareness programs. Their website presents a comprehensive portfolio of workshops, seminars, and educational materials targeting children, adolescents, parents, and educators. With over 1 million participants reached and multiple prestigious awards, MFM holds a strong market position in the sexual education non-profit sector. The organization emphasizes scientific accuracy combined with emotional engagement to foster positive body awareness and informed choices. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information.

The website mfm-bamberg.de represents the Erzbischöfliches Ordinariat Bamberg's NFP and MFM programs, offering natural family planning education, workshops, and counseling services primarily targeting women, families, and youth within the Bamberg diocese. The site is well-structured, professionally designed, and provides comprehensive information about their offerings, contact details, and privacy practices. Technically, the site uses a modern stack including jQuery, Bootstrap, Matomo analytics, and Google reCAPTCHA, hosted on internet1.de infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and user consent options. Overall, the site is trustworthy, safe, and serves a non-profit educational mission effectively.

Nadace Albatros is a Czech non-profit foundation established in 2016 by Albatros Media, a well-known publishing house. The foundation focuses on supporting education for socially disadvantaged children and young people, leveraging the power of books and reading. The website reflects a professional and consistent brand presence with good content quality and clear messaging targeted at its audience. Technically, the site is built on WordPress with popular plugins for SEO and donations, hosted with reputable providers and using Cloudflare DNS. Security posture is moderate with HTTPS enabled and cookie consent via Cookiebot, but lacks explicit security policies and incident response information. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the organization.

F

Freelancers Union

freelancersunion.org

65

Freelancers Union is a well-established non-profit organization founded in 2003 that serves as a comprehensive support system for independent workers and freelancers across the United States. The organization provides advocacy, education, insurance options, legal assistance, and community resources to empower freelancers. Their website reflects a professional and user-friendly platform with rich content, including a blog, resource guides, and interactive tools such as contract creators and event listings. The target audience is freelancers, solopreneurs, creatives, and independent workers seeking support and resources. Technically, the site is built on WordPress with modern front-end libraries and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. Hosting is likely on AWS, supported by the DNS configuration.

The Erzbischöfliches Priesterseminar Bamberg operates as a religious educational institution focused on the formation of Catholic priests within the Archdiocese of Bamberg, Germany. The website serves as an informational portal offering news, spiritual content, and detailed guidance on priestly vocation and formation. It targets individuals discerning a religious vocation and members of the Catholic community. The institution maintains a regional presence with partnerships linking to theological faculties and church-related organizations.

The website nfp-bamberg.de represents a regional non-profit organization affiliated with the Archdiocese of Bamberg, Germany, focused on natural family planning (NFP) and related health education programs (MFM). It offers workshops, counseling, and educational materials targeting women, men, youth, and families. The site is well-structured with clear navigation and professional content tailored to its audience. Technically, it employs a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted on servers associated with internet1.de. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Security posture is adequate with HTTPS and reCAPTCHA usage, though security headers could be improved. No blocking or WAF mechanisms interfere with content access.

The Betroffenenbeirat Bamberg is a small non-profit advisory board dedicated to supporting victims of sexual, spiritual, and violent abuse within the Archdiocese of Bamberg. The organization provides information, advocacy, and coordination with abuse studies and commissions, targeting victims and the church community. The website content is informational and supportive but technically outdated, generated from Microsoft Word HTML export, resulting in poor design and accessibility. The technical infrastructure is basic, hosted on German servers with no detected CMS or modern frameworks. Security posture is weak due to lack of HTTPS information and missing security headers, though privacy compliance is adequate with a GDPR-compliant privacy policy. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, with no adult or explicit content, but improvements in technical implementation and security are recommended.

G

Geistliche Gemeinschaften und Bewegungen im Erzbistum Bamberg

geistliche-gemeinschaften-bamberg.de

62

The website geistliche-gemeinschaften-bamberg.de serves as an informational and community engagement platform for spiritual communities and movements within the Archdiocese of Bamberg, Germany. It provides news, event listings, detailed overviews of various spiritual groups, and contact information, targeting members and interested individuals in the religious community. The site is affiliated with the Archdiocese, enhancing its credibility and trustworthiness. Technically, the site is built on the alkacon Mercury CMS platform, hosted on rzone.de infrastructure, and employs modern web technologies including JavaScript, Matomo analytics for privacy-conscious tracking, and an accessibility plugin (eyeAble) to ensure compliance with accessibility standards. The site is mobile-optimized and demonstrates good SEO practices. From a security perspective, the site uses HTTPS with excellent SSL configuration, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks visible security headers and does not publish explicit security or incident response policies, which could be improved. No WAF or blocking mechanisms are detected, and the site is fully accessible. Overall, the website presents a professional, trustworthy, and accessible platform for its niche audience, with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency would enhance its security maturity.

C

Caritasverband für die Erzdiözese Bamberg e.V.

caritas-bamberg.de

61

The Caritasverband für die Erzdiözese Bamberg e.V. is a large non-profit organization serving as the leading Caritas association in Upper Franconia and parts of Middle Franconia, Germany. It represents over 500 social services and employs approximately 12,000 full-time staff and 12,500 volunteers, focusing on supporting disadvantaged and needy individuals. The website reflects a well-structured and professionally maintained digital presence with comprehensive information about their services, current news, and accessibility features. Technically, the website is built on the Alkacon Mercury CMS platform, leveraging modern web technologies including JavaScript, SVG icons, and Matomo analytics for privacy-conscious user tracking. The site is hosted on infrastructure associated with the Archdiocese of Bamberg, ensuring regional relevance and control. Performance and mobile optimization are good, with strong accessibility support via the Eye-Able plugin. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a clear privacy policy and GDPR adherence. Overall, the website is trustworthy, professional, and well-aligned with the organization's mission. Strategic improvements could include adding security headers, publishing a security policy, and providing incident response contact details to enhance security posture and user trust.

O

Old Tablers Deutschland

old-tablers-germany.de

40

Old Tablers Deutschland is a well-established non-profit community organization dedicated to former members of Round Table in Germany. The organization focuses on fostering friendships, social engagement, and supporting Round Table family activities through local and international projects. The website reflects a medium-sized organization with a clear mission and a strong network of partner organizations. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, hosted via resellerinterface.de, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is partially addressed with a privacy policy but no cookie banner. Overall, the website is professional, trustworthy, and serves its target audience effectively.

R

Round Table Deutschland

round-table.de

37

Round Table Deutschland is a well-established non-profit organization focused on social engagement, friendship, and community service primarily targeting men aged 18 to 40. The organization operates through volunteer efforts, fundraising, and social projects, maintaining a strong presence in Germany with international connections. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Plyr for video playback, hosted on Microsoft Azure DNS infrastructure, ensuring reliable performance and security. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is evident through a dedicated Datenschutz page with cookie consent mechanisms, but terms of service and incident response policies are not found. Overall, the website is trustworthy, safe, and well-maintained, supporting the organization's mission effectively.

S

Stiftung Round Table Deutschland

tablerstiftung.de

44

Stiftung Round Table Deutschland is a German non-profit foundation established in 2006, dedicated to supporting social projects such as child and youth promotion, healthcare, aid for needy people, and disaster relief. It operates closely with Round Table Deutschland, leveraging a network of thousands of volunteers to implement service projects efficiently. The website presents a professional and consistent brand image with clear donation information and contact points, targeting donors, members, and partner organizations. Technically, the site uses modern frontend technologies like Bootstrap and jQuery, is mobile-optimized, and employs HTTPS with basic security practices. However, it lacks explicit security headers and incident response documentation. Privacy and cookie policies are present and GDPR compliant, but no terms of service or vulnerability disclosure policies are found. Overall, the site is trustworthy, safe, and well-suited for its non-profit mission.

K

KreBul, o.p.s.

krebul.cz

43

KreBul, o.p.s. is a Czech non-profit organization providing community-oriented social services including a civic advice center, volunteer center, youth information center, and senior support programs. The website serves as an information hub for these services and related community events, targeting local residents, youth, and seniors. The organization appears to be regionally focused with a small operational scale. Technically, the website is built with standard web technologies including HTML5, CSS, JavaScript, and jQuery, and integrates Google Analytics for visitor tracking. The site is accessible over HTTPS, but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security maturity. Mobile optimization and accessibility are basic but functional. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The site does not provide contact emails or phone numbers, nor does it disclose privacy or incident response policies, which limits transparency and user trust. Overall, the website is functional and professionally designed but would benefit from enhanced security practices, formal privacy compliance, and verified domain registration information to improve trust and compliance posture.

ASOCIÁCIA KRAJSKÝCH RÁD MLÁDEŽE (AKRAM) is a Slovak non-profit organization representing regional youth councils. The website serves as a platform to promote youth participation projects, educational activities, and national events targeting youth members of school and regional parliaments. The organization is positioned as a key national youth association with partnerships including IUVENTA, the Ministry of Education of Slovakia, and Erasmus+ programs. The website content is well-structured, professionally designed, and consistent with the organization's mission. Technically, the site is built on WordPress 5.2.23 with common plugins and frameworks such as Bootstrap and jQuery. It enforces HTTPS via a redirect script but lacks advanced security headers. Performance and mobile optimization are moderate to good, with basic accessibility features. SEO is supported by Yoast SEO structured data and meta tags. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal privacy and cookie policies. No incident response or vulnerability disclosure information is present. Contact information is limited to a physical address and Facebook link, with no direct email or phone contacts provided. No forms collecting personal data are detected on the main page. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

R

Rada mládeže Slovenska (RmS)

mladez.sk

43

Rada mládeže Slovenska (RmS) is a well-established Slovak non-profit organization founded in 2003, serving as an umbrella for the largest youth organizations in Slovakia. It focuses on advocacy, research, and project coordination to improve conditions for youth and children. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting youth organizations and young people in Slovakia. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. Security posture is strong with HTTPS and DNSSEC enabled, though it lacks some advanced security headers and explicit cookie consent mechanisms. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate and credible organization.

W

WPK Weihnachtspäckchenkonvoi gGmbH

weihnachtspaeckchenkonvoi.de

39

The Weihnachtspäckchenkonvoi is a German non-profit organization dedicated to delivering Christmas gifts to needy children in remote and rural areas of Eastern Europe. The organization operates under the motto 'Children help Children' and is supported by volunteer groups such as Round Table, Ladies’ Circle, Old Table, and Tangent Club. Their website serves as an information hub for donors, volunteers, and partners, providing details about the campaign, donation options, and collection points. The organization has a solid market position within the charitable sector in Germany, with a medium-sized operational scale and a strong community and sponsor network. Technically, the website is built on WordPress with a modern tech stack including popular plugins like Yoast SEO, WPBakery Page Builder, and Slider Revolution. It is hosted on kasserver.com and uses HTTPS with good SSL configuration. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility could be improved. Security practices are generally good, with HTTPS enforced and spam protection on forms, but additional security headers and a vulnerability disclosure policy would enhance the security posture. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring comprehensive privacy and cookie policies. No critical security issues or suspicious activities were detected. The organization demonstrates transparency and engagement through social media and sponsor displays, reinforcing its credibility and community trust.