Non-profit security reports

I

Instytut Książki

instytutksiazki.pl

50

Instytut Książki is a Polish national cultural institution dedicated to promoting Polish literature domestically and internationally. It supports authors, translators, publishers, and reading culture through various programs, grants, and publications. The organization holds a strong market position as a government-affiliated non-profit entity with a broad cultural impact. Technically, the website is built on WordPress with modern libraries and plugins, optimized for SEO and accessibility, and includes multilingual support. Security posture is solid with HTTPS and security plugins, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site reflects a professional and trustworthy digital presence aligned with its cultural mission.

W

Weltoffenes Thüringen

thueringen-weltoffen.de

62

Weltoffenes Thüringen is a non-profit initiative dedicated to promoting democracy, human dignity, pluralistic democracy, and European unity within the Free State of Thuringia, Germany. The website serves as a platform for organizations and individuals to support and engage with the initiative, offering resources such as logos, banners, and a registration form for supporters. The initiative enjoys broad regional support, with thousands of supporters and numerous partner organizations displayed prominently. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a responsive design and basic accessibility. It uses HTTPS for secure communication but lacks advanced security headers and cookie consent mechanisms. The site does not employ advertising or tracking technologies, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and anti-spam measures in forms but could improve by implementing security headers and publishing security policies. Privacy compliance is basic, with a privacy policy linked externally but no cookie consent banner. Overall, the website is trustworthy, professionally presented, and aligned with its non-profit mission. It is accessible without WAF or blocking mechanisms, and the domain WHOIS data supports legitimacy. Strategic improvements in security and privacy compliance would enhance its posture further.

S

Stiftung DeineWelt

stiftung-deinewelt.de

46

Stiftung DeineWelt is a German non-profit foundation dedicated to supporting children and youth who face disadvantages due to financial, social, physical, or mental conditions. The foundation primarily funds existing projects and occasionally supports individuals with financial aid. The website is built on TYPO3 CMS and employs modern web technologies such as Bootstrap and jQuery, with Matomo used for analytics. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR standards. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. No contact emails or phone numbers are directly available on the homepage, and no terms of service or incident response policies are published. Overall, the website presents a professional and trustworthy image appropriate for a small non-profit organization.

G

Gesellschaft für Naturschutz und Ornithologie Rheinland-Pfalz e.V.

gnor.de

40

The Gesellschaft für Naturschutz und Ornithologie Rheinland-Pfalz e.V. (GNOR) is a well-established non-profit organization founded in 1977, dedicated to nature conservation and ornithology in the German state of Rheinland-Pfalz. The organization conducts ecological research, manages conservation projects, and publishes scientific materials to support biodiversity and environmental protection. Their website reflects a strong regional presence with active community engagement and volunteer opportunities. Technically, the website is built on a modern WordPress platform with commonly used plugins for galleries and sliders, hosted by pixeldiversity GmbH. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, there is room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional, serving its non-profit mission effectively. Strategic improvements in privacy compliance and security policies would enhance user trust and regulatory adherence.

N

NaturFreunde Rheinland-Pfalz

naturfreunde-rlp.de

58

NaturFreunde Rheinland-Pfalz is a regional non-profit organization dedicated to environmental protection, culture, tourism, and sports within the German state of Rheinland-Pfalz. The website serves as an information hub for members and interested parties, offering news, event listings, and project details. The organization maintains an active community presence and promotes sustainable and social activities. Technically, the website is built on Drupal 7 with common JavaScript libraries and is hosted on a stable infrastructure likely provided by 1&1 IONOS. The site is mobile-optimized and includes SEO best practices, though some accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partially met with a privacy policy page but no visible cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission.

B

BUND Landesverband Rheinland-Pfalz e. V.

bund-rlp.de

60

BUND Landesverband Rheinland-Pfalz e. V. is a regional non-profit environmental organization dedicated to protecting nature and promoting sustainability in the German state of Rheinland-Pfalz. The website serves as an information hub for their projects, advocacy efforts, and community engagement, including membership and donation drives. The organization maintains a strong presence with educational resources and active social media channels. Technically, the website is built on TYPO3 CMS, uses Matomo for analytics, and implements a cookie consent mechanism via tarteaucitron.js, reflecting a modern and privacy-conscious infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-optimized for users interested in environmental issues in Rheinland-Pfalz.

B

Bundesvereinigung Kulturelle Kinder- und Jugendbildung e. V. (BKJ)

bkj.de

45

The Bundesvereinigung Kulturelle Kinder- und Jugendbildung e. V. (BKJ) is a German non-profit umbrella organization dedicated to cultural education for children and youth. The website serves as a comprehensive platform offering information about the organization, its projects, events, publications, and advocacy efforts. It targets educators, cultural institutions, and youth organizations, positioning itself as a leading authority in the cultural education sector in Germany. The site is well-branded, professionally designed, and regularly updated with relevant content.

The website freiwilligendienste-kultur-bildung.de serves as an informational and engagement platform for cultural and educational volunteer services in Germany, including FSJ Kultur, FSJ Schule, FSJ Politik, FJ Beteiligung, and BFD Kultur und Bildung. It targets individuals of all ages interested in volunteering within cultural and educational institutions. The platform is supported by the Bundeskonferenz der Kommunalen Jugendbildungsstätten (BKJ) and funded by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth (BMFSFJ), positioning it as a reputable non-profit entity in this sector. Technically, the site is built on TYPO3 CMS, hosted via Schlundtech, and employs modern web technologies including Google Fonts and Matomo analytics for user tracking. The website is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but could be enhanced with additional security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains GDPR compliance with a comprehensive privacy policy and cookie consent mechanism. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. Social media presence on Facebook, Twitter, and Instagram supports community engagement. Overall, the website demonstrates a strong alignment between its domain registration, hosting, and business purpose, reflecting a trustworthy and professional online presence for a non-profit cultural volunteer service. Strategic improvements in security policy transparency and accessibility could further enhance its digital maturity and user trust.

F

Freiwilliges Ökologisches Jahr Rheinland-Pfalz

foej-rlp.de

43

The website www.foej-rlp.de serves as the official portal for the Freiwilliges Ökologisches Jahr (Voluntary Ecological Year) in Rheinland-Pfalz, Germany. It provides comprehensive information and resources for young people interested in ecological and environmental volunteering opportunities within the region and neighboring France. The site features placement listings, news updates, and application guidance, positioning itself as a key regional non-profit platform for ecological volunteer coordination. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Bootstrap, FontAwesome, Leaflet, and TinyMCE. The hosting is managed via kasserver.com, a German hosting provider, ensuring regional alignment. The site demonstrates good mobile optimization, clear navigation, and adequate SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating GDPR compliance awareness. However, it lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected, and no tracking or advertising scripts are present, reflecting a privacy-conscious approach. Overall, the website is trustworthy, professionally maintained, and well-suited for its target audience. Strategic improvements in security headers and incident response transparency could further enhance its security posture and compliance.

slovensko.help is a Slovak community-driven initiative primarily composed of IT sector volunteers aiming to assist Slovakia in managing the COVID-19 pandemic. The website offers several projects including a chatbot for COVID-19 information, an improved official infoline, and downloadable posters to promote responsible behavior. The target audience is the general Slovak public seeking reliable pandemic-related information and support. The initiative operates as a non-profit with a small organizational size and has been active since at least 2016, as indicated by domain registration data. Technically, the website is built using the Jekyll static site generator and incorporates Google Analytics and Google Tag Manager for visitor tracking. Hosting appears to be provided by Websupport.sk, a Slovak hosting provider. The site is mobile optimized with good SEO practices and clear navigation. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, it lacks DNSSEC and security headers such as Content Security Policy or HSTS, which are recommended to enhance security posture. No privacy or cookie policies are present, which is a compliance gap especially given the use of tracking technologies. No forms or input fields are present, reducing attack surface. WHOIS data is consistent with the website's Slovak focus and shows no privacy protection, enhancing transparency. Overall, slovensko.help is a trustworthy, well-intentioned community resource with good content quality and business credibility. Security and privacy compliance can be improved by adding policies, enabling DNSSEC, and implementing security headers. These improvements would enhance user trust and regulatory compliance.

N

Netzwerk für Senior-Internet-Initiativen Baden-Württemberg e.V.

netzwerk-sii-bw.de

39

Netzwerk für Senior-Internet-Initiativen Baden-Württemberg e.V. is a regional non-profit organization dedicated to promoting digital literacy and inclusion among senior citizens in Baden-Württemberg, Germany. The website serves as a platform to provide educational seminars, newsletters, community events, and digital resources tailored to seniors and community initiatives. The organization positions itself as a key regional player in senior digital inclusion with a focus on community engagement and support. Technically, the website is built on WordPress 6.8.3 with a variety of plugins including The Events Calendar and Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, ensuring secure access. However, some modern security headers are not explicitly detected, and there is no cookie consent mechanism, which could be improved for compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-respecting analytics via Matomo. There are no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency in security management. WHOIS data is minimal but does not raise suspicion, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and regulatory adherence.

V

Verbraucherzentrale Baden-Württemberg

verbraucherzentrale-bawue.de

63

The Verbraucherzentrale Baden-Württemberg is a well-established non-profit consumer protection organization serving the Baden-Württemberg region in Germany. It provides comprehensive consumer advice, information, and advocacy services across multiple sectors including energy, health, digital world, and contracts. The website is professionally designed using Drupal 10, featuring rich content, educational resources, and multiple user engagement channels such as newsletters and social media. The organization targets a broad audience including vulnerable groups such as seniors, refugees, and caregivers. Technically, the website employs modern web technologies and analytics tools like Matomo, ensuring good performance and accessibility. The site is mobile-optimized and SEO-friendly, with clear navigation and consistent branding. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit policies could be improved. Overall, the domain and website appear legitimate and trustworthy, with no signs of blocking or malicious content. The organization maintains a moderate level of privacy compliance with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is available primarily via phone and contact forms, with no direct email addresses published. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing cookie consent to improve privacy compliance and user trust.

A

American Chamber of Commerce in the Slovak Republic

amcham.sk

10

AmCham Slovakia is a well-established non-profit organization representing American and international businesses in Slovakia, focusing on policy advocacy, networking, and member services. The website reflects a professional and consistent brand image with clear navigation and relevant business content. Technically, the site is built on the Cyclone3 framework, uses Cookiebot for GDPR-compliant cookie management, and integrates Google Tag Manager and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the site is trustworthy and compliant with privacy regulations, serving its target audience effectively.

Z

Združenie podnikateľov Slovenska

zps.sk

57

Združenie podnikateľov Slovenska is a Slovak non-profit business association focused on improving the business environment for Slovak entrepreneurs and SMEs. Founded in 1989, it represents companies contributing to the Slovak economy and actively participates in legislative consultation and advocacy. The website provides news, legislative updates, and engagement opportunities for members and the public. Technically, the site uses modern web technologies including Google Tag Manager and cookie consent mechanisms, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and secure forms, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its business mission.

D

Domov Sue Ryder, z.ú.

sue-ryder.cz

60

Domov Sue Ryder is a well-established Czech non-profit organization dedicated to providing social services to seniors and their families. Operating since 1998, it offers a range of services including personal assistance, senior homes, charity shops, and volunteer programs. The website reflects a mature digital presence with clear branding, good content quality, and compliance with GDPR and cookie regulations. Technically, the site uses modern web technologies such as Google Analytics, Facebook Pixel, and the Nette Framework, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and serves its target audience effectively.

S

Sanktuarium św. Jana Pawła II

kursjp2.pl

10

The website kursjp2.pl represents the Sanktuarium św. Jana Pawła II, a religious sanctuary in Kraków, Poland, offering pre-marriage courses and catechesis for engaged couples preparing for the sacrament of marriage in the Catholic Church. The site targets engaged couples and provides detailed course schedules, contact information, and team profiles. The business operates as a small non-profit entity with a clear religious and educational mission. Technically, the website is built on WordPress using the Mesmerize theme and several plugins including Yoast SEO, Contact Form 7, and a cookie consent plugin. The site is hosted likely by cyber_Folks S.A., with HTTPS enabled and moderate performance and mobile optimization. SEO practices are good, but accessibility is basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and explicit security headers. No incident response or security policies are published, and no vulnerability disclosure mechanisms are present. Cookie consent is implemented, but no privacy policy or terms of service pages were found, indicating compliance gaps. Overall, the website is legitimate, well-branded, and serves its niche audience effectively. However, improvements in privacy compliance, security headers, and published policies would enhance trust and security posture.

I

Immanuel Albertinen Diakonie gGmbH

kita-schnelsen.de

60

Albertinen Kindertagesstätte Schnelsen is a well-established non-profit childcare provider located in Hamburg-Schnelsen, Germany, operating under the Immanuel Albertinen Diakonie gGmbH umbrella. The organization offers approximately 170 childcare places with a focus on pedagogical development tailored to children's individual needs. The website reflects a professional and modern digital presence, built on TYPO3 CMS, with good mobile optimization and accessibility features. It includes comprehensive information about services, team, and contact details, supported by a cookie consent mechanism and privacy policy compliant with GDPR standards. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its non-profit educational mission.

F

Fazenda

fazenda.de

57

Fazenda is a German-based non-profit organization providing Christian addiction support through community-based self-help therapy known as "Höfe der Hoffnung". The website is built on the Wix platform, leveraging standard Wix technologies and polyfills, and is primarily targeted at men, women, and youth seeking recovery from addiction within a faith-based environment. The site presents a good quality design and content relevant to its mission but lacks critical compliance and security documentation such as privacy and cookie policies. Technically, the site is moderately optimized with good mobile responsiveness but could improve SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and formal policies. Overall, the site is safe for general audiences and does not contain adult or explicit content.

B

Berufe der Kirche Freiburg

berufe-der-kirche-freiburg-shop.de

49

Berufe der Kirche Freiburg operates a specialized e-commerce platform focused on church professions and related educational and devotional materials. The website targets individuals involved in church work, youth education, and religious communities primarily in Germany. The business model combines product sales with informational content, positioning itself as a niche provider in the non-profit and educational sectors. The platform uses Shopware CMS and modern web technologies to deliver a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit cookie consent mechanisms. Contact information is clearly provided, enhancing trust, though no direct email contacts or social media presence are visible. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and security best practices.

SoliNet Rheinland-Pfalz operates as a non-profit advisory service dedicated to supporting individuals affected by digital violence within the Rheinland-Pfalz region of Germany. The website offers confidential, free, and multilingual online counseling services, focusing on emotional support, evidence preservation, content removal, legal guidance, and online safety education. The organization positions itself as a central resource for victims of digital violence, aiming to empower and protect users in digital spaces. Technically, the website is built on WordPress with Elementor, hosted likely by netcup GmbH, and employs modern web technologies such as jQuery. The site is accessible, mobile-optimized, and presents a professional design with consistent branding. Security-wise, HTTPS is enforced, but the absence of security headers and explicit privacy or cookie policies indicates room for improvement. No analytics or tracking scripts were detected, suggesting a privacy-conscious approach. Overall, the site is trustworthy and safe for general audiences, with no adult or questionable content. However, the lack of direct contact details and formal privacy documentation slightly reduces compliance confidence.

W

WOMEN FOR WOMEN

obedyprodeti.cz

66

WOMEN FOR WOMEN is a Czech non-profit organization focused on providing school meals to children from low-income families through its 'Obědy pro děti' project. The website is professionally designed using WordPress and integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, and Facebook Pixel. The technical infrastructure is modern and secure, with HTTPS enforced and appropriate cookie consent mechanisms in place. Security posture is solid with no critical vulnerabilities detected, although explicit security policies and incident response information are not publicly available. Overall, the website presents a trustworthy and compliant digital presence suitable for its charitable mission.

S

Sokol.Cz Team

sokol.cz

41

Sokol.Cz is an independent, non-profit information portal dedicated to the activities of the Czech Sokol community, providing event listings, news articles, and multimedia content related to sports and cultural events. The website serves as a community hub for members and supporters of the Czech Sokol organization, offering a platform for sharing information about local units, events, and educational resources. Technically, the site uses a Bootstrap-based responsive design with jQuery and integrates Google Custom Search and Facebook SDK for enhanced user interaction. While HTTPS is enforced, the site lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data limits domain trust assessment, but the site's long operational history and consistent branding support its legitimacy. Overall, the site is well-positioned as a trusted community resource with good content quality and user experience.

The website www.mladifotografujipamatky.cz is a platform dedicated to a youth photography contest focused on capturing historical monuments, organized by the Czech non-profit association Sdružení historických sídel Čech, Moravy a Slezska, z.s. It serves a niche cultural heritage audience primarily within the Czech Republic, providing contest information, galleries, and event updates. The site is well-branded and consistent with its mission, targeting young photographers and cultural enthusiasts. Technically, the site uses the Public4u CMS platform, jQuery libraries, and integrates Mapy.cz APIs for mapping features. The website is moderately optimized for performance and mobile devices, with a clear navigation structure and good content quality. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating gaps in compliance and security best practices. No analytics or tracking scripts were detected, suggesting minimal user tracking. WHOIS data is unavailable, likely due to registry privacy policies, which limits domain trust analysis but the site’s content and contact information support legitimacy. Overall, the website is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance, and technical improvements to increase trust and user experience.

S

Sokolská župa plukovníka Švece

zupaplksvece.cz

41

Sokolská župa plukovníka Švece is a small regional non-profit organization based in the Czech Republic focused on promoting sports and healthy lifestyles within the local community. The website serves as an information hub for events, contacts, and activities related to the Sokol movement, a traditional Czech sports and cultural organization. The site targets members and the general public interested in sports and health activities, providing event announcements and contact details. Technically, the website is built on WordPress using the Tempera theme, with common JavaScript libraries such as jQuery and tracking tools including Google Analytics and Hotjar. Hosting and domain registration are managed by Wedos, a Czech provider. The site is mobile optimized and has a moderate performance profile but uses an outdated WordPress version, which poses security risks. From a security perspective, the site enforces HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. Tracking scripts are present without visible consent mechanisms, indicating privacy compliance gaps. No incident response or security policy information is provided. The domain registration data is consistent and legitimate, supporting trust in the website's authenticity. Overall, the website is functional and serves its community purpose well but requires improvements in security, privacy compliance, and platform updates to enhance trustworthiness and protect user data effectively.

T

The Common Vision

spolocnavizia.sk

39

The Common Vision is a Slovak non-profit association dedicated to improving occupational safety and health through professional collaboration, educational materials, conferences, and legislative activities. The website reflects a well-established organization with a clear focus on safety professionals and employers. Technically, the site is built on WordPress using Elementor and several plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks some security headers and privacy compliance features. Overall, the site is professional and trustworthy but would benefit from enhanced privacy policies and clearer contact information.

T

The International Pathwork Foundation

pathwork.org

42

The International Pathwork Foundation is a well-established non-profit organization dedicated to providing spiritual teachings and community resources centered around the Pathwork Guide Lectures. The website serves as a comprehensive portal offering access to lectures, events, workshops, books, and audio recordings, targeting individuals seeking personal transformation and spiritual growth. The foundation has a global presence with multilingual lecture offerings and a membership model supported by donations and an online store. Technically, the website is built on WordPress using the Divi theme and integrates tools such as Gravity Forms and Google Tag Manager. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. Hosting details are not explicit but the domain uses stable name servers and is secured with HTTPS. From a security perspective, the site employs HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. There is no visible security or incident response policy published, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance and security posture. Overall, the website is professional, content-rich, and trustworthy with a moderate security posture. Strategic enhancements in security headers, privacy compliance, and incident response transparency would strengthen its risk profile and user trust.

C

cyber_Folks S.A.

mjanpawel2.pl

38

The Muzeum Jana Pawła II Wielkiego w Krakowie is a small, non-profit cultural institution dedicated to preserving and promoting the legacy of Pope John Paul II. Founded in 2020, it offers modern exhibitions, educational programs, and VR cinema experiences targeting a broad audience including tourists, educational groups, and the religious community. The website is professionally designed using WordPress with a modern tech stack and good mobile optimization. Privacy and cookie policies are implemented with consent mechanisms, reflecting GDPR compliance. Security posture is good with HTTPS and security headers, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website is trustworthy and well-maintained, with active social media presence and clear business focus.

C

Centrum Jana Pawła II “Nie lękajcie się”

cjanpawel2.pl

37

Centrum Jana Pawła II “Nie lękajcie się” is a well-established religious and cultural non-profit organization based in Kraków, Poland, dedicated to preserving and promoting the legacy of Pope John Paul II. The website serves as a comprehensive portal for pilgrims, visitors, and the local community, offering information about the sanctuary, museum, pilgrim accommodations, conferences, and educational programs. The organization holds a respected position within the religious and cultural sector in Poland, supported by a consistent brand presence and active social media engagement. Technically, the website is built on WordPress with a modern technology stack including popular plugins such as LayerSlider, Slider Revolution, WooCommerce, and DataTables. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although performance is moderate and could benefit from further optimization. Hosting is provided by cyber_Folks S.A., a reputable provider. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks DNSSEC and some important security headers, which are recommended to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie notice, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and serves its audience effectively. Strategic improvements in security headers and DNSSEC implementation would further strengthen its security posture and trustworthiness.

N

Nadace Tipsport

nadacetipsport.cz

66

Nadace Tipsport is a Czech non-profit foundation established in 2017, focusing on environmental protection and regional development in the Berounsko region. The website serves as an informational platform to promote their initiatives and community support activities. The foundation targets the general public interested in environmental and regional issues. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as Google Tag Manager and reCAPTCHA for analytics and security. The site demonstrates good digital maturity with mobile optimization and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though additional security headers could enhance protection. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit contact and security policy information.

S

Stiftungen der Erzdiözese Freiburg

katholische-stiftungen-freiburg.de

41

The website 'Stiftungen der Erzdiözese Freiburg' represents a regional non-profit foundation network dedicated to supporting church-related and social projects in the Freiburg area of Germany. It offers services including funding projects, managing donations, and maintaining church properties. The site is well-positioned within its niche, targeting donors, church members, and community stakeholders with a transparent and trustworthy approach. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance, hosted on kasserver.com. The security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, accessible, and compliant with GDPR, reflecting a mature digital presence for a non-profit entity.

K

Komunitní nadace Tři Brány

tribrany.cz

56

Komunitní nadace Tři Brány is a Czech non-profit community foundation focused on supporting arts, knowledge, and civilization primarily in the Vyškov region. The foundation operates grant programs and awards such as the Cena Jana Hona to young individuals demonstrating excellence in various fields. The website is built on WordPress and uses modern web technologies, providing a good user experience with clear navigation and relevant content. However, it lacks visible privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response contacts. Overall, the domain is legitimate with a long history and consistent registration data.

K

Komunitní nadace Blanicko – Otavská

konabo.cz

59

Komunitní nadace Blanicko – Otavská is a Czech community foundation dedicated to supporting local projects that benefit residents and foster regional development. The foundation operates primarily in the Blanicko – Otavská region, providing grants and managing donor funds to support social services, environment, culture, education, and local development. The website reflects a small but established non-profit organization with a clear mission and local focus. Technically, the site is built on the Webnode CMS platform, uses HTTPS with Cloudfront CDN for asset delivery, and implements a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS domain registration data and lack of published privacy and terms policies represent gaps in transparency and compliance. Security posture is adequate with HTTPS but could be improved by adding security headers and formal vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy in content but would benefit from enhanced compliance and security practices.

F

Farní minitábory

minitabor.info

45

Farní minitábory operates as a small non-profit organization affiliated with the Fulnek parish, providing organized summer camps primarily targeting families and children within the Czech Republic. The website serves as an official information portal offering camp details, registration forms, photo galleries, and contact avenues. The organization maintains a modest but consistent digital presence, including social media channels on Instagram and YouTube, enhancing community engagement and trust. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO, Contact Form 7, and Google Analytics integration. The site demonstrates good mobile optimization and SEO practices, though performance is moderate and accessibility features are basic. Security posture is solid with HTTPS enforced and Google reCAPTCHA protecting forms, but lacks advanced security headers and formal vulnerability disclosure mechanisms. From a security and compliance perspective, the site shows no signs of malicious activity or vulnerabilities but lacks published privacy and cookie policies, which are critical for GDPR compliance. Contact information is limited to an email address and contact form, with no phone numbers or physical addresses disclosed. WHOIS data is privacy-protected, which is reasonable for this type of non-profit entity. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy compliance, improved security headers, and formal incident response information to strengthen its security posture and regulatory adherence.

Tělocvičná jednota Sokol Černovice is a small, local non-profit organization based in the Czech Republic focused on promoting sports and cultural activities such as football, yoga, jumping, majorettes, table tennis, and hiking. The website serves as an information hub for community members, providing event updates, membership details, and contact information. Technically, the site is built on WordPress using the Twenty Seventeen theme and includes standard web technologies like jQuery and Google Fonts. The site is mobile-optimized and accessible with good navigation and content relevance. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which limits domain legitimacy assessment, but the website content and contact details appear consistent with a legitimate local community organization. Overall, the site is safe for general audiences and does not contain any adult or questionable content.

U

Uměleckoprůmyslové museum v Praze

upm.cz

49

Uměleckoprůmyslové museum v Praze is a well-established cultural institution in the Czech Republic focused on preserving and exhibiting collections of glass, porcelain, ceramics, graphic arts, textiles, fashion, furniture, jewelry, and toys. The museum targets a broad audience including general visitors, students, and researchers, offering exhibitions, educational programs, a museum shop, and publications. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities and uses modern web technologies and SEO best practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response information are absent. The missing WHOIS data is a concern for domain legitimacy verification but does not detract from the overall trustworthiness of the museum's online presence.

Ú

Ústav pro propagaci díla a odkazu Vítězslava Nováka, z. ú.

vitezslavnovak.cz

45

The Ústav pro propagaci díla a odkazu Vítězslava Nováka is a small non-profit cultural institution dedicated to promoting the musical and pedagogical legacy of the Czech composer Vítězslav Novák. The organization focuses on concert activities, organizing annual events such as Novákovské dny, scholarly research, publications, and hosting the International Novák Piano Competition. The website serves as an official portal providing information about these activities and facilitating contact with the institution. Technically, the website is built on the vismo CMS platform, uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google services such as reCAPTCHA and Translate. Hosting is provided by websupport.cz, a reputable Czech hosting provider. Security posture is adequate with HTTPS enforced and reCAPTCHA protecting forms, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the website is professional, trustworthy, and well-suited for its cultural and educational mission.

The website www.ordensjahr.de represents a non-profit initiative by German religious orders offering a voluntary year of community living, prayer, work, and learning. It targets individuals at various life stages seeking spiritual and personal growth through immersion in religious community life. The site is built on TYPO3 CMS, indicating a mature technical infrastructure with moderate performance and good mobile optimization. Security posture is adequate with HTTPS implied, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and well-branded, though improvements in security and privacy transparency are recommended.

G

GC Rieber

gcrieber-fondene.no

52

GC Rieber Fondene is a Norwegian non-profit foundation that owns a significant share of GC Rieber AS and reinvests dividends into socially beneficial projects focused on culture, research, and social welfare primarily in the Bergen region. The website is professionally designed using WordPress with modern SEO and analytics tools, providing a good user experience and accessibility. Privacy and cookie compliance are well implemented with clear consent mechanisms. Security posture is strong with HTTPS and security headers, though the absence of WHOIS data limits domain trust analysis. No direct contact emails or phone numbers are publicly listed, relying on contact forms for communication. Overall, the site reflects a reputable organization with a clear social mission.

D

Dunkelziffer e.V.

dunkelziffer.de

50

Dunkelziffer e.V. is a well-established non-profit organization based in Hamburg, Germany, dedicated to supporting children and adolescents who have experienced sexual abuse. The organization offers a wide range of services including telephone and online counseling, therapy, prevention programs in schools and kindergartens, and professional training seminars. Supported by public figures and a charity webshop, Dunkelziffer maintains a strong market position within its sector. Technically, the website is built on WordPress with modern plugins and frameworks, demonstrating good digital maturity with responsive design, accessibility features, and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, making it a reliable resource for its target audience. No adult or explicit content is present, ensuring content safety for general audiences.

V

VisionConnect GmbH

juuuport.de

56

JUUUPORT is a German nationwide online counseling platform dedicated to supporting young people facing problems on the internet, including cyberbullying, sextortion, and other online risks. The platform is operated by VisionConnect GmbH and offers confidential, free assistance through trained youth scouts. The website is professionally designed with a strong emphasis on accessibility and privacy, featuring multilingual support and tools for users with disabilities. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-focused analytics, and integrates Cookiebot for comprehensive cookie consent management. Security posture is good with HTTPS enforced and privacy best practices observed, though explicit security policies and incident response contacts are not published. Overall, the platform demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR, making it a reliable resource for its target audience.

K

Katholische Arbeitsstelle für missionarische Pastoral

katholisch-werden.de

44

Katholisch-werden.de is a German-language website operated by the Katholische Arbeitsstelle für missionarische Pastoral, providing informational and pastoral support services focused on adult baptism, conversion, and re-entry into the Catholic Church. The site targets adults interested in deepening or renewing their Catholic faith and offers resources such as catechesis texts and literature. The business operates as a small non-profit entity within the religious sector, serving a niche community in Germany. Technically, the website is built on TYPO3 CMS, hosted on securehost.de nameservers, and employs standard web technologies including JavaScript and CSS. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were identified. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Business credibility is supported by clear branding, testimonials, and a professional presentation. Overall, the website is trustworthy, safe, and professionally maintained, though enhancements in security headers, privacy compliance, and mobile accessibility would strengthen its posture. There are no indications of malicious activity or content safety concerns.

K

Katholische Arbeitsstelle für missionarische Pastoral

kamp-erfurt.de

46

The website kamp-erfurt.de represents a small non-profit Catholic organization focused on missionary pastoral work in Germany. The site provides informational content aimed at religious communities and pastoral workers. Technically, the website is built on TYPO3 CMS with Bootstrap 4, offering a responsive and moderately performant user experience. However, the site lacks explicit privacy and terms of service policies, and no contact information is readily available in the analyzed content. Security posture is basic, with no detected security headers or advanced protections, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the domain registration aligns well with the website's purpose, suggesting legitimacy and consistency. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

S

Säkularinstitute in Deutschland

saekularinstitute.de

40

The website www.saekularinstitute.de serves as an informational platform for the Arbeitsgemeinschaft Säkularinstitute Deutschland, focusing on Catholic secular institutes in Germany. It provides detailed content about the institutes' spirituality, history, theology, and current events, targeting individuals interested in religious life and community within Germany. The site is professionally designed with consistent branding and clear navigation, though mobile optimization and accessibility are basic. Technically, it runs on the concrete5 CMS (version 8.5.1) with common libraries like jQuery and Bootstrap, hosted by taenzer.hosting. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and safe, with no adult or explicit content detected.

D

Deutsche Ordensobernkonferenz e.V.

orden.de

41

The website www.orden.de serves as the official internet portal for the Deutsche Ordensobernkonferenz e.V., providing comprehensive information about religious orders in Germany. It targets members of religious communities and the interested public, offering news, educational resources, and organizational information. The site holds a strong position as a leading informational resource in its niche. Technically, the site is built on TYPO3 CMS, employs Matomo for analytics, and is hosted via domaincontrol.com nameservers. The site is moderately optimized for performance and mobile devices, with good SEO practices and clear navigation. Security-wise, HTTPS is enforced and spam-protection for emails is implemented via JavaScript obfuscation, but lacks advanced security headers and explicit cookie consent mechanisms. No direct contact emails or phone numbers are visible, with contact likely managed through forms. Overall, the site is professional, trustworthy, and safe for general audiences.

OBRAZ – Obránci zvířat is a Czech non-profit organization dedicated to the protection and advocacy of animal rights. Established in 2014, the organization runs multiple campaigns aimed at improving animal welfare, educating the public, and pushing for systemic reforms. Their website reflects a mature digital presence with clear calls to action, active social media integration, and comprehensive content about their initiatives. The organization targets a general audience interested in animal protection and ethical treatment of animals. Technically, the website is built on WordPress, leveraging popular plugins for SEO, forms, and GDPR compliance, hosted via WEDOS with Cloudflare DNS services.

Z

Zachraň jídlo

zachranjidlo.cz

48

Zachraň jídlo is a Czech non-profit organization dedicated to reducing food waste through systemic changes in food donation, public awareness campaigns, events, and education. The website reflects a focused mission with clear content and a consistent brand identity. Technically, the site is built on WordPress using modern tools such as Elementor for page building, WP Rocket for performance optimization, and Rank Math for SEO, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is partial, with a cookie consent mechanism present but lacking explicit privacy and terms of service pages. Overall, the site is trustworthy and professionally maintained, serving a niche non-profit audience effectively.

K

KOKOZA, o. p. s.

kokoza.cz

45

KOKOZA, o. p. s. is a Czech non-profit organization dedicated to promoting urban gardening, food cultivation, and composting within city environments. Their website serves as an educational platform inspiring and connecting communities to grow vegetables and fruits even in limited urban spaces such as terraces and window boxes. The organization focuses on community engagement and environmental sustainability. Technically, the website is built on WordPress using Elementor and enhanced with SEO and analytics tools like Rank Math and Google Tag Manager. The site is served securely over HTTPS with a good SSL configuration and uses modern web technologies and CDNs for performance. However, explicit privacy policies and terms of service are not present, which slightly impacts compliance and trust. Security posture is generally good, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional, trustworthy, and well-positioned within its niche, but could enhance transparency and security documentation to improve compliance and user trust.

K

KOŚCIÓŁ REKTORALNY SANKTUARIUM BOŻEGO MIŁOSIERDZIA w Krakowie-Łagiewnikach

misericordia.eu

44

The website www.misericordia.eu represents the official portal of the KOŚCIÓŁ REKTORALNY SANKTUARIUM BOŻEGO MIŁOSIERDZIA in Kraków-Łagiewniki, Poland. It serves as a comprehensive information hub for religious services, pilgrimages, media broadcasts (live TV and radio), and community engagement related to the Divine Mercy Sanctuary. The site targets a general audience including pilgrims, parishioners, and the wider Catholic community, offering multilingual support and rich content including event calendars and religious publications. The business model is non-profit, focused on religious and community services with a medium organizational size and a founding date around 2002.

Římskokatolická farnost sv. Martina v Jámách is a small local Roman Catholic parish serving the community of Jámy in the Czech Republic. The website provides information about religious services, announcements, and contact details for parishioners and visitors. It also references a pilgrimage church in Slavkovice, indicating community and religious outreach. The site is simple, with a focus on clear communication rather than advanced digital features. Technically, the website uses basic HTML and CSS without detectable CMS or advanced frameworks. There is no evidence of analytics, tracking, or advertising technologies. Mobile optimization and accessibility are basic but functional. The site lacks modern security headers and there is no visible HTTPS confirmation in the provided data, which is a concern for security best practices. Security posture is minimal with no privacy or cookie policies present, and no incident response or vulnerability disclosure mechanisms identified. The WHOIS data is unavailable, likely due to privacy protection, which is reasonable for a small non-profit religious entity. Contact information is clearly presented, enhancing trustworthiness despite the lack of formal policies. Overall, the website is functional and trustworthy for its purpose but would benefit from improved security measures, privacy compliance, and technical modernization to enhance user trust and protection.

K

Kongregace sester Matky Božího milosrdeství

kmbm.cz

52

The website www.kmbm.cz represents the Kongregace sester Matky Božího milosrdeství, a small non-profit religious congregation based in the Czech Republic. The organization focuses on spiritual services, promotion of Divine Mercy, and social support such as providing starter apartments for people in need. The site content is well-structured, professionally designed, and targets religious community members and individuals seeking spiritual guidance or social assistance. Technically, the website runs on WordPress with a modern theme and common plugins, including Google Analytics for visitor tracking. The site is mobile-optimized and loads with moderate performance. Security posture is adequate with HTTPS enabled, but lacks security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain legitimacy verification, though the website content and presentation suggest a trustworthy non-profit entity. Overall, the site is safe, free of adult or explicit content, and provides relevant information for its audience.