Non-profit security reports

B

Biskupství brněnské

dekanstvi.cz

42

The website dekanstvi.cz serves as an informational platform for the Brno diocese, focusing on pastoral activities, spiritual events, and community engagement within local parishes. It is clearly affiliated with the Biskupství brněnské, providing targeted content for members of the religious community in the Czech Republic. The site uses modern web technologies such as Bootstrap and Google Fonts, and features an interactive SVG map to enhance user experience. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and ownership details. Technically, the website demonstrates moderate digital maturity with responsive design and good SEO practices. The lack of detected analytics or tracking scripts suggests a privacy-conscious approach, though no explicit privacy or cookie policies were found, indicating compliance gaps with GDPR requirements. Security posture is basic, with no visible security headers or incident response information, which could be improved to enhance trust and protection. Overall, the site is safe and appropriate for general audiences, with no adult or questionable content. The business credibility is supported by consistent branding and clear organizational affiliation, but the lack of contact information and privacy documentation reduces transparency. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would strengthen the website's trustworthiness and compliance standing.

C

Centrum pro komunitní práci střední Čechy

cpkp-stc.cz

48

Centrum pro komunitní práci střední Čechy is a Czech non-profit organization focused on community work and development in the Central Bohemia region. The website presents the organization as a regional community support entity offering educational, consulting, and networking services to local stakeholders. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a professional design and good mobile optimization. However, the absence of WHOIS data and lack of explicit privacy and cookie policies suggest gaps in transparency and compliance. Security posture is basic with no detected security headers or incident response information, which could be improved to enhance trust and protect user data. Overall, the website is functional and safe for general audiences but would benefit from enhanced security and compliance measures.

A

AssoConnect

assoconnect.com

67

AssoConnect is a French SaaS company providing a comprehensive management platform tailored for associations. Their services include membership and donation collection, accounting management, communication tools, payment processing, and website creation. The platform targets associations of all sizes and sectors, boasting over 40,000 users, positioning it as a market leader in France. Technically, the website is built on modern frameworks such as React and Gatsby, hosted on Azure CDN, and optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.

D

Diakonie ČCE - Vsetín

diakonievsetin.cz

60

Diakonie ČCE Vsetín is a well-established non-profit organization providing social services and specialized education in the Czech Republic. The website reflects a mature digital presence with clear information about their services, target audience, and contact details. The organization positions itself as a significant social service provider with a 30-year history, serving children, adults, and seniors in various life situations. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies such as Google Fonts, Google Maps API, and GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. The absence of WHOIS data limits domain legitimacy verification, but the website content and branding strongly indicate a legitimate entity affiliated with the parent organization Diakonie ČCE. Overall, the site is professional, trustworthy, and user-friendly, supporting the organization's mission effectively.

O

Oblastní charita Pardubice

charitapardubice.cz

58

Oblastní charita Pardubice is a regional non-profit organization operating under the national Charita Česká republika network. It provides a wide range of social and healthcare services including home health care, hospice care, personal assistance, social activation for families, and volunteer coordination. The organization targets residents of the Pardubice region, donors, and volunteers, maintaining a strong community presence and partnerships with governmental and private entities. The website reflects a mature digital presence with good content quality and clear navigation, supporting its mission effectively. Technically, the site uses modern JavaScript libraries, integrates donation widgets, and employs Google Analytics and Facebook Pixel for tracking, with a cookie consent mechanism in place. Security posture is solid with HTTPS enforced, though additional security headers and explicit security policies could enhance protection. Overall, the domain registration and WHOIS data align well with the organization's profile, indicating legitimacy and trustworthiness.

C

Charita Česká Kamenice

charita-ceska-kamenice.cz

54

Charita Česká Kamenice is a well-established non-profit organization founded in 2009, operating under the umbrella of Charita Česká republika. The organization provides a broad range of social and humanitarian services including hospice care, social rehabilitation, sheltered housing, and support for vulnerable groups such as seniors, disabled individuals, families, children, youth, and the homeless. Their market position is regional with strong partnerships with government bodies and charitable foundations, enhancing their credibility and funding sources. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, with fonts loaded from Google Fonts and Adobe Typekit. The site appears to be custom-built or uses a proprietary CMS, likely provided by VIZUS.CZ, the web development company credited in the footer. Performance is moderate with good mobile optimization and basic accessibility features. SEO is basic but sufficient for their audience. The site uses HTTPS with a good SSL configuration, and a cookie consent mechanism is implemented to comply with privacy regulations. From a security perspective, the website shows good practices such as HTTPS enforcement and cookie consent management. However, there is no explicit security policy or incident response contact information available, which could be improved. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the organization's claims, showing a domain age appropriate for the business history and no privacy protection masking the registrant. Overall, the website is safe, trustworthy, and compliant with GDPR requirements. It effectively serves its purpose as an informational and engagement platform for a non-profit social service organization. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen their digital maturity and trustworthiness.

YOU(R)SEA is a small non-profit organization based in Slovenia dedicated to marine conservation, education, and community engagement. Their website provides educational content, participatory science initiatives for youth, and promotes environmental awareness through various projects and events. The organization maintains an active presence on multiple social media platforms, enhancing outreach and community involvement. Technically, the website is built on Squarespace, leveraging modern web technologies such as jQuery, Swiper.js, and Weglot for multilingual support. The site is mobile-optimized and uses HTTPS with HSTS enabled, reflecting a good security posture. However, the absence of explicit privacy and terms of service pages and the lack of publicly available WHOIS data slightly reduce trust and compliance confidence. Overall, the website is professional, secure, and serves its educational mission effectively.

R

Renovabis e.V.

renovabis.de

61

Renovabis e.V. is a well-established German non-profit organization dedicated to providing aid and support to people in Eastern Europe, focusing on social and pastoral renewal. Founded in 1993 by the German Bishops' Conference, it operates through donations, project funding, and educational initiatives. The website reflects a professional and trustworthy presence with comprehensive content, clear navigation, and consistent branding. It targets donors, partners, and communities interested in charitable work in Eastern Europe. Technically, the website employs modern web technologies including JavaScript, CSS, and integrates third-party services such as Usercentrics for consent management, Google Tag Manager for analytics, and Algolia for search functionality. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be based in Germany, aligning with the organization's location. From a security perspective, the site enforces HTTPS and uses consent management to comply with GDPR. While explicit security headers are not detected, no vulnerabilities or exposed sensitive data were found. The organization demonstrates good privacy compliance with a clear privacy policy and cookie consent mechanism. Contact information is transparent and includes multiple channels. Overall, Renovabis presents a low-risk profile with strong business credibility and privacy practices. Recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security posture.

Ř

Římskokatolická farnost Radešínská Svratka, Olešná na Moravě

pallotini-pastorace.cz

56

The website represents the Roman Catholic parishes of Radešínská Svratka and Olešná na Moravě, providing parishioners and visitors with comprehensive information about religious services, community events, and spiritual life. It serves as a local community hub with a focus on non-profit religious activities. The site is well-branded and consistent with the church's mission, targeting local Czech-speaking audiences. Technically, it uses a custom CMS platform (IS OMNIA) with modern frontend technologies like Bootstrap and jQuery, hosted under a reputable registrar and using Cloudflare DNS. The site is moderately performant and mobile-optimized but lacks some advanced accessibility features.

Římskokatolická farnost Fulnek is a small non-profit religious organization serving the Fulnek community in the Czech Republic. The website provides parishioners and visitors with information about religious services, announcements, events, and church tours. The site is built on WordPress and uses several plugins to enhance user experience, including sliders and portfolio galleries. The target audience is local parishioners and visitors interested in church activities. The organization has maintained the domain since 2010, reflecting a stable presence in the community. Technically, the website employs a standard WordPress infrastructure with common plugins such as Smart Slider 3 and Visual Portfolio. The site is hosted with a Czech registrar and uses HTTPS, ensuring secure communication. Performance is moderate with good mobile optimization, though accessibility and SEO could be improved. Analytics are implemented via Google Analytics, but no visible cookie consent or privacy policy is present, indicating compliance gaps. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks security headers and a formal privacy or cookie policy, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure mechanisms are evident. The domain registration details are consistent and legitimate, supporting the site's trustworthiness. Overall, the website is functional and professional for its purpose but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

The website 'Kniha milosrdenství' is a small non-profit religious platform focused on Christian mercy and prayer, providing spiritual reflections, downloadable materials, and news updates primarily for the Czech Christian community. The domain is well-established since 2012 and hosted on Czech infrastructure, supporting its legitimacy and stable presence. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for visitor tracking but lacks modern CMS or advanced frameworks. Security posture is moderate with no visible security headers or privacy policies, and no HTTPS confirmation from the provided data, indicating room for improvement. Privacy compliance is low due to missing cookie and privacy policies and no consent mechanisms. Overall, the site is safe with no adult or questionable content, but it would benefit from enhanced security and privacy practices to improve trust and compliance.

S

Slavkovice, Svatyně Božího milosrdenství

slavkovice.cz

49

Slavkovice.cz is the official website of a religious pilgrimage sanctuary dedicated to Divine Mercy located in Slavkovice, Czech Republic. The site provides detailed information about church services, pilgrimage events, religious projects, and community activities, targeting pilgrims and the local Catholic community. The business operates as a non-profit religious entity with a focus on spiritual services and community engagement. Technically, the website employs modern frontend technologies including Bootstrap and jQuery, and is built on the FenomioFlow CMS platform. It is mobile responsive and offers a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and formal privacy or terms of service pages. The absence of WHOIS data for the domain raises some concerns about domain registration legitimacy, although the website content and contact information appear professional and trustworthy. Overall, the site scores well in content quality and business credibility but should improve transparency and security practices.

A

Apoštol Božího milosrdenství

apostol.cz

48

The website www.apostol.cz represents a small non-profit religious organization focused on promoting trust in Divine Mercy through a magazine and pilgrimages. The site content is primarily in Czech and targets a religious audience interested in Catholic spirituality and community events. The organization appears to have a stable presence since 2006, with partnerships to related religious entities. Technically, the website uses modern frontend technologies including Bootstrap 5 and jQuery, and is powered by the FenomioFlow CMS platform. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and a cookie consent mechanism implemented, but lacks visible security headers and a published privacy policy. No WHOIS data was found, which reduces trust signals but may be due to privacy protection. Overall, the site is safe, professional, and trustworthy for its niche audience.

M

Misijný sekretariát – pallotíni

pallotini.sk

44

Pallotíni is a Slovak non-profit mission secretariat focused on charitable projects primarily in Rwanda, Burkina Faso, and Madagascar. Their activities include supporting education, building religious and community centers, and aiding poor students to complete their studies. The organization targets donors, religious communities, and supporters interested in mission work. The website is built on WordPress with Yoast SEO and uses a moderate technical infrastructure hosted by Websupport. While the site is well-structured and content-rich, it lacks some advanced security headers and cookie consent mechanisms. The domain is well-established since 2005 with DNSSEC enabled, indicating a trustworthy presence. Overall, the site demonstrates good professionalism and trustworthiness but could improve in privacy compliance and security posture.

S

Spolek A.K.N.

akncr.cz

48

Spolek A.K.N. is a Czech non-profit organization focused on strengthening the capacity of community foundations through collaborative projects supported by grant programs such as the Active Citizens Fund. The website presents detailed information about a two-year project (2020-2022) involving multiple Czech community foundations aimed at enhancing community leadership and activation roles. The organization operates in a niche non-profit sector with a clear mission to support civil society and community development in the Czech Republic. Technically, the website uses a CMS platform called inPage, with common web technologies including jQuery, Bootstrap, and FontAwesome. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate, with HTTPS enabled and basic consent management via Google Analytics gtag, but lacks explicit privacy and cookie policies and security headers. No WHOIS data is available due to privacy protection, but the website content and external partner links indicate legitimacy. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

A

Art Jameel

hayyjameel.org

56

Hayy Jameel is a prominent arts complex and creative hub located in Jeddah, Saudi Arabia, developed and managed by Art Jameel. The organization focuses on fostering culture-oriented communities by hosting exhibitions, cinema events, learning programs, residencies, and cultural festivals. The website reflects a well-established non-profit entity with a clear mission to promote arts and culture in the region. Technically, the site is built on WordPress with modern frameworks and libraries, ensuring good performance, mobile optimization, and SEO compliance. Security posture is solid with HTTPS enforcement and domain locking, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is basic, with cookie and terms of use policies present but lacking consent mechanisms. Overall, the site is professional, trustworthy, and serves its target audience effectively.

Community Jameel is a well-established global non-profit organization focused on advancing science, education, and community development. Founded in 2003, it continues the philanthropic legacy of the Jameel family of Saudi Arabia. The organization operates various programs in partnership with academic institutions such as MIT and J-PAL, targeting social impact through scholarships, research, arts, health, and climate initiatives. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to a global audience interested in philanthropy and social development. Technically, the website is built on modern frameworks like Next.js and React, ensuring fast performance and excellent mobile optimization. It employs best practices in web development, including the use of security headers and HTTPS, contributing to a strong security posture. Privacy and cookie policies are clearly stated with consent mechanisms, indicating good compliance with GDPR and related regulations. Security-wise, the site demonstrates a mature posture with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policy pages and incident response contacts, which could enhance trust and preparedness. The absence of WHOIS data due to privacy protection is typical for non-profits and does not detract from the site's legitimacy given its affiliations and professional presentation. Overall, Community Jameel's website is a trustworthy, well-maintained platform that effectively communicates its mission and programs while adhering to modern technical and privacy standards. Strategic improvements in security transparency and contact information could further strengthen its credibility and user trust.

Ú

Ústecká komunitní nadace

komunitninadace.cz

58

Ústecká komunitní nadace is a well-established non-profit community foundation based in Ústí nad Labem, Czech Republic, with roots dating back to 1993. The organization focuses on supporting local community projects through grants and donations, aiming to improve the quality of life in the Ústecký region. Their website reflects a professional and consistent brand image, providing clear information about their mission, donors, and supported projects. The foundation maintains active partnerships with reputable organizations and has a visible presence on major social media platforms. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as Google Analytics, Facebook Pixel, and lazy loading for images. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS with a strong SSL configuration but lacks several recommended security headers. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear GDPR and cookie policies, including consent mechanisms. However, the site does not publish explicit security policies, incident response contacts, or vulnerability disclosure information, which could be areas for future enhancement. Overall, the website presents a trustworthy and credible image for a non-profit organization, with a solid technical foundation and good privacy practices. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen their digital maturity and risk posture.

N

Nikodémova noc - Pokyny

nikodemovanoc.sk

41

Nikodémova noc is a Slovak non-profit pastoral project affiliated with the Catholic Church, focused on organizing night adoration events to facilitate spiritual encounters with Jesus Christ. The website serves as an informational and organizational platform for local parishes to participate and promote these events. The project targets church attendees and the broader public interested in spiritual activities, operating primarily within Slovakia and neighboring countries. The domain is well-established since 2012 with consistent registration data and DNSSEC enabled, indicating a legitimate and stable online presence. Technically, the website uses basic web technologies including HTML, CSS, and older versions of JavaScript libraries such as jQuery 1.4.1 and Fancybox 1.3.0. Hosting appears to be provided by Websupport.cz. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS platforms. SEO and accessibility features are minimal but functional. Security posture is moderate with DNSSEC enabled but lacks visible security headers and uses outdated JavaScript libraries that may expose vulnerabilities. The login form for program management lacks visible advanced security features. Privacy and compliance are weak, with no privacy policy, cookie policy, or GDPR compliance indicators present on the site. No contact emails or phone numbers are provided, only a login form for authorized users. No incident response or security policy information is available. The site content is safe, religious in nature, and suitable for general audiences without any adult or questionable content. Overall, the website is functional and serves its niche purpose but requires improvements in security, privacy compliance, and modernization of technical components to enhance trust and resilience against vulnerabilities.

S

Společnost katolického apoštolátu (Pallotini)

pallotini.cz

47

The website represents the Society of the Catholic Apostolate (Pallotini), a religious non-profit organization founded in 1835. It provides information about the organization's mission, global presence, and apostolic activities including parish work, education, healthcare, and social outreach. The site targets Catholic faithful and those interested in religious apostolate work. Technically, the site uses a custom PHP-based CMS with legacy JavaScript libraries such as jQuery 1.4.1 and basic CSS styling. Hosting is likely provided by Active24, consistent with the domain registrar data. Security posture is moderate with no visible HTTPS confirmation or security headers in the provided data, and outdated JavaScript libraries present potential vulnerabilities. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Contact information is clearly provided with physical addresses, phone numbers, and a company email. Overall, the site is functional and informative but would benefit from technical modernization and improved security and privacy compliance.

B

Běhy pro hospice

behyprohospice.cz

54

Běhy pro hospice is a Czech non-profit platform established in 2017 that organizes charity running events and personal challenges to support hospice care across the Czech Republic. The website encourages public participation through runs and donations, aiming to fulfill the wish of many terminally ill people to remain at home at the end of life. The platform is partnered with Nadacni fond Avast, enhancing its credibility and reach. Technically, the website uses AngularJS framework with integration of Google Tag Manager and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and calls to action. Hosting and domain registration are consistent with the Czech market and business focus. From a security perspective, the site uses HTTPS and asynchronous loading of tracking scripts, but lacks visible security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. Privacy policy is present but cookie policy and terms of service are missing or not clearly linked. Overall, the website presents a trustworthy and professional front for a small non-profit organization with moderate technical maturity. Strategic improvements in privacy compliance and security headers would enhance its posture and user trust.

L

Lebendiges Lüneburg

lebendiges-lueneburg.de

54

Lebendiges Lüneburg is a German non-profit community platform dedicated to fostering social and ecological engagement within the Lüneburg region. The website aggregates local events, supports initiative networking, and promotes collaboration through integration with partner platforms such as WECHANGE and Lünepedia. The platform targets local citizens and community groups aiming to drive societal change through collective action. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and user experience enhancements. The infrastructure supports mobile responsiveness and accessibility, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in HTTP security headers and explicit security policies. Overall, the site is trustworthy, well-maintained, and compliant with relevant privacy regulations, making it a reliable resource for its community audience.

I

Internetseelsorge

internetseelsorge.de

42

Internetseelsorge.de is a German non-profit organization providing free Christian pastoral care and spiritual guidance through mail and chat services. The website targets individuals facing life crises, spiritual questions, or feelings of loneliness, offering confidential and anonymous support. The organization collaborates with recognized Catholic partners, enhancing its credibility and reach within the German-speaking community. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and uses Matomo analytics to respect user privacy. Hosting is provided by kasserver.com, a known hosting provider. Security posture is solid with HTTPS enforced, though improvements in security headers and cookie consent mechanisms are recommended. The website is well-structured, mobile-optimized, and provides clear navigation and service descriptions, supporting a positive user experience. No adult or explicit content is present, making it safe for general audiences.

Z

Zentrum für Berufungspastoral

berufung.org

46

Zentrum für Berufungspastoral is a German non-profit organization dedicated to vocation pastoral care within the Catholic Church. The website provides resources, events, and contact information for diocesan vocation pastoral offices primarily targeting young people and church members in Germany and neighboring countries. The organization has an established presence since 2000, reflected by the domain age and consistent content. Technically, the site runs on TYPO3 CMS version 4.7 with common JavaScript libraries and Google Analytics for tracking, though the CMS version is outdated and may pose security risks. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks modern security headers and DNSSEC. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the site is professional, trustworthy, and safe for general audiences.

W

Web Commerce GmbH

digitalpastoral.de

45

Digitalpastoral.de is a German-language digital platform focused on providing resources, networking, and content for Catholic church communities and pastoral workers. The platform serves as a marketplace and knowledge hub for digital church practice, offering articles, event listings, and community engagement tools. It is developed and maintained by Web Commerce GmbH, with affiliations to multiple (Erz-)Bistümer, indicating a trusted position within the church digital ecosystem. The website targets church professionals and digital faith communities, positioning itself as a niche but important resource in the religious digital media space. Technically, the site is built on Edith CMS and leverages modern web technologies including jQuery, Bootstrap, and FontAwesome. It integrates Matomo analytics with privacy-conscious tracking controls and uses HTTPS to secure communications. The site demonstrates good mobile optimization and accessibility features, with a clear navigation structure and professional design. However, some security best practices such as security headers and explicit cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows a moderate maturity level with no visible vulnerabilities or exposed sensitive data. The lack of a published security policy or incident response contacts is a gap in transparency and readiness. Privacy compliance is partial, with a privacy policy present but no cookie consent banner detected. Overall, the domain and hosting infrastructure appear legitimate and consistent with the business claims, with no signs of suspicious WHOIS data or blocking by WAFs. The overall risk assessment is moderate with recommendations to implement explicit cookie consent, add security headers, and publish security and incident response policies to strengthen trust and compliance. The platform is well-positioned as a specialized digital resource for church communities but should address these gaps to maintain and improve its credibility and security posture.

N

Nadace sester Boromejek

nadacesesterboromejek.cz

47

Nadace sester Boromejek is a Czech non-profit foundation dedicated to supporting individuals and organizations committed to helping others, particularly through the activities of the Boromejka sisters. The foundation facilitates financial and material donations, supports social and ecological projects such as the Hangáry Goretti initiative, and provides assistance to various charitable organizations. The website is professionally designed using WordPress with Elementor and Astra theme, featuring clear navigation and calls to action for donations. Social media presence on Facebook, Instagram, and YouTube enhances outreach and trust. Technically, the website employs modern web technologies and includes Google Analytics and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, explicit security headers are not fully implemented, and no detailed security or incident response policies are publicly available. The absence of WHOIS data for the domain reduces trustworthiness from a registration perspective, though the website content and social media presence suggest legitimate operations. Overall, the security posture is moderate with room for improvement in security headers and transparency. Privacy compliance is good with cookie consent mechanisms in place. The lack of explicit contact information and WHOIS data are notable gaps. Strategic recommendations include enhancing security headers, publishing detailed security and privacy policies, and verifying domain registration details to improve trust and compliance.

K

Křižovnická pečovatelská služba

pecovatelska-sluzba.com

50

Křižovnická pečovatelská služba is a small non-profit organization based in Prague, Czech Republic, providing registered social care services primarily to citizens over 40 years old who require assistance due to age or disability. The organization is affiliated with the religious order Křižovníků s červenou hvězdou and operates in cooperation with a Catholic girls' school, offering practical training opportunities for future caregivers. Their key services include personal care assistance, household help, accompaniment to medical and administrative appointments, and pastoral care. They also provide a compensatory aids rental service through a partner domain. Technically, the website is built using a custom CMS by Webmium, hosted partially on Microsoft Azure Blob Storage, and incorporates modern tracking and security tools such as Google Analytics, Google Tag Manager, and invisible Google reCAPTCHA v3. The site is mobile-optimized with a clear navigation structure and professional design. Security posture is good with HTTPS enforced and reCAPTCHA implemented, but lacks security headers and explicit privacy or cookie policies. WHOIS data is missing, which raises concerns about domain registration legitimacy and reduces overall trust. No contact emails or phone numbers are explicitly provided on the site, limiting direct communication channels. Overall, the website is functional and professional but would benefit from improved transparency and security practices.

P

Partos

partos.nl

62

Partos is a Dutch non-profit branch association representing over 100 organizations involved in international cooperation. The website serves as an informational and membership platform, providing resources and advocacy for its members. The organization targets Dutch development organizations and stakeholders interested in international collaboration. Technically, the website is built on WordPress using a child theme of FoundationPress, with integrations such as Gravity Forms for data collection and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking, with appropriate consent mechanisms in place. Security posture is good with HTTPS enforced and some security best practices observed, though there is room for improvement in implementing security headers and publishing security policies. The site is professional, well-branded, and trustworthy, with no signs of malicious or suspicious activity. However, explicit privacy and terms of service pages were not found in the provided content, which could be improved for compliance and transparency.

Ž

žeLIVE

zelive.cz

50

žeLIVE is a small non-profit organization based in the Czech Republic focused on youth development through experiential programs, camps, and volunteer animator engagement. The website presents a professional and consistent brand image with clear contact information and community-oriented content. Technically, the site is built on WordPress with common plugins and frameworks such as Bootstrap and jQuery, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure forms, but lacks important security headers and a configured analytics setup. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not directly impact the legitimacy of the organization based on website content. Overall, the site is trustworthy and serves its community well but should improve compliance and security practices.

Farnost Želiv is a small non-profit Roman Catholic parish located in the historic Želiv monastery complex in the Czech Republic. The organization focuses on evangelization, spiritual programs, care for the sick, and community activities including preparation for sacraments such as baptism and marriage. The website serves as a community portal offering event information, news, video galleries, and donation options. Technically, the site is built on WordPress with common plugins and libraries, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal privacy policies. WHOIS data is unavailable, likely due to privacy protection, but the site content and contact details indicate a legitimate religious entity. Overall, the site is professional, trustworthy, and serves its community well, though improvements in security and privacy transparency are recommended.

A

ARGE Villacher Sozialadvent

villachersozialadvent.at

46

The Villacher Sozialadvent website represents a regional non-profit volunteer organization in Austria that coordinates social and charity events during the Advent season. The organization collaborates with local clubs and businesses to present culinary delights and event highlights aimed at community engagement and fundraising for good causes. The website is well-structured, primarily in German, and provides clear information about the organization, upcoming events, sponsors, and contact details. The presence of social media links, especially Facebook, supports community interaction and outreach. Technically, the website is built on WordPress 5.3.20 with common plugins such as WPBakery Page Builder and Google Calendar Events. It uses modern web technologies including jQuery and integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML source. However, it lacks important security headers like Content-Security-Policy and X-Frame-Options, which could improve protection against common web attacks. No vulnerability disclosures or incident response contacts are provided. Privacy compliance is partial; a GDPR privacy policy page exists, but no cookie consent mechanism is implemented, which is a compliance gap. Overall, the site is trustworthy and professional in appearance and content, but the absence of WHOIS data reduces domain registration transparency and trust. Strategic recommendations include implementing security headers, adding a cookie consent banner, maintaining up-to-date software, and considering a security.txt file for vulnerability reporting. These steps will enhance security posture, compliance, and user trust.

R

Round Table International

round-table.org

60

Round Table International is a well-established global non-profit organization focused on fostering fellowship, personal development, and community service among young men aged 18 to 40/45. With a membership base exceeding 30,000 worldwide, RTI organizes local and international events, educational initiatives, and community projects to empower its members. The website serves as a central hub for information, membership engagement, and access to affiliated initiatives such as RTI University and the RTI Shop. Technically, the site is built on WordPress using Elementor, supported by Cloudflare for DNS and CDN services, and integrates modern tracking and security tools such as Google Analytics and reCAPTCHA. Security posture is generally good with HTTPS enforced and domain transfer protections in place, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with comprehensive legal documents publicly available, though direct contact emails and incident response policies are not published. Overall, the website is professional, trustworthy, and well-suited to its target audience, with moderate user tracking and good content quality.

G

GEMMA

gemma.cc

48

GEMMA is a small non-profit organization based in Austria focused on promoting youth and youth culture through various social, cultural, and sports projects. It also serves as a regional coordinator for EU youth programs such as Erasmus+ and the European Solidarity Corps. The website is built on WordPress using popular plugins for event management, donations, and galleries, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides rich content primarily in German, targeting youth and young adults in Kärnten. Security posture is adequate with HTTPS enabled but lacks some recommended security headers. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy page found. WHOIS data for the domain is unavailable, which limits trust verification of domain registration. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

M

MemberSuite, Inc.

membersuite.com

53

MemberSuite, Inc. is a provider of configurable association management software (AMS) and event technology solutions tailored for non-profit organizations and associations. The company positions itself as a premier software provider focused on streamlining processes, centralizing data, and engaging members through a highly configurable SaaS platform. Their offerings include AMS software, implementation, data migration, customer training, success, support, and advisory services. The website demonstrates a professional and modern digital presence with strong SEO and user experience features. Technically, the website is built on WordPress CMS with a robust tech stack including Google Analytics, Facebook Pixel, HubSpot, and Visual Website Optimizer for marketing and analytics. The site is mobile optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some explicit security headers and published security policies. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism aligned with GDPR. The absence of WHOIS data limits domain trust verification, but the professional website content, business information, and customer testimonials support legitimacy. No critical security vulnerabilities were detected in the visible content. Overall, the site reflects a mature business with a solid digital footprint but could improve transparency in security policies and incident response. Strategic recommendations include implementing comprehensive security headers, publishing a security policy and incident response contacts, adding vulnerability disclosure mechanisms, and continuing to monitor third-party scripts for security risks.

B

Bundesweiter Vorlesetag

vorlesetag.de

57

The Bundesweite Vorlesetag website represents a well-established non-profit initiative focused on promoting literacy and the joy of reading among children and adults in Germany. Founded in 2004 by prominent partners including DIE ZEIT, Stiftung Lesen, and Deutsche Bahn Stiftung, it holds a leading position in the national literacy promotion landscape. The website offers comprehensive resources, event registration, and digital storytelling content, supported by a consistent and professional brand presence. Technically, the site is built on TYPO3 CMS with modern integrations such as Vue.js, Matomo analytics, and social media embeds, reflecting a mature digital infrastructure with good mobile optimization and SEO practices. Security-wise, the site employs HTTPS and a robust cookie consent mechanism, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a high level of trustworthiness and compliance with GDPR, making it a reliable platform for its audience.

ALIPH Foundation is a reputable non-profit organization focused on protecting cultural heritage in conflict-affected regions globally. Their website demonstrates a professional and consistent brand presence, offering detailed information about their mission, projects, and partnerships. The technical infrastructure leverages modern web technologies including Bootstrap, Mapbox, and Google Analytics, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforcement and use of reCAPTCHA, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website reflects a trustworthy and credible organization with minor areas for enhancement in security transparency and WHOIS data availability.

S

Sekce pro mládež České biskupské konference a Asociace křesťanských sdružení mládeže, z. s.

celostatnisetkanimladeze.cz

58

The website celostatnisetkanimladeze.cz represents a non-profit organization focused on organizing the Celostátní setkání mládeže (National Youth Meeting) in the Czech Republic. The event targets young people aged 14 to 30 and is organized by the Youth Section of the Czech Bishops' Conference and the Association of Christian Youth Associations. The site provides event information, news, and multimedia content related to the event and its history. The organization holds a recognized position within the Czech Catholic community and maintains active social media channels to engage its audience. Technically, the website uses a combination of jQuery, Bootstrap 4, and other JavaScript libraries, hosted with Cloudflare DNS and registered via a Czech registrar. The site is mobile-optimized and uses HTTPS with a good SSL configuration. However, it lacks some modern security headers and formal privacy and cookie policies, which are important for compliance and user trust. Analytics are handled via Matomo, indicating a moderate level of user tracking. From a security perspective, the site is well-configured with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security headers and formal privacy documentation are areas for improvement. The WHOIS data is consistent with the website's Czech origin and organizational claims, supporting legitimacy. Overall, the site is professional, trustworthy, and serves its community well but should enhance privacy compliance and security best practices to improve user trust and regulatory adherence.

A

Adalbert Stifter Verein e. V.

stifterverein.de

52

The Adalbert Stifter Verein is a German non-profit cultural institute dedicated to promoting the cultural heritage and history of the Bohemian countries. The organization offers a range of services including exhibitions, events, publications, scholarships, and a library. Their target audience includes cultural enthusiasts, historians, researchers, and the general public interested in Bohemian culture. The website is professionally designed with consistent branding and clear navigation, reflecting a well-established cultural institution. Technically, the website is built on WordPress and uses modern JavaScript libraries such as GSAP for animations. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, and no major technical issues were detected. The site uses HTTPS with excellent SSL configuration, but lacks some security headers and cookie consent mechanisms. From a security perspective, the website demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks published security policies, incident response contacts, and a vulnerability disclosure mechanism. Privacy compliance is basic with a privacy policy present but no cookie consent banner. Overall, the website is trustworthy and professional, with a strong cultural focus and good business credibility. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance the security posture and user trust.

B

Bistum Essen

bistum-essen.de

43

Bistum Essen is a well-established Catholic diocese serving over 2.5 million people in the Ruhrgebiet and Sauerland regions of Germany. The website reflects a comprehensive religious and social service organization with a strong community focus, offering pastoral care, social help, education, and cultural events. The institution is positioned as a key religious entity in its region, with a large workforce and multiple parishes. Technically, the website is built on TYPO3 CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and GDPR compliant with a clear cookie consent mechanism. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain and website content align with a legitimate and trustworthy religious organization.

Ř

Římskokatolická farnost Velešín

farnostvelesin.cz

58

Římskokatolická farnost Velešín operates as a non-profit religious organization serving multiple parishes in the Czech Republic. The website provides comprehensive information about sacraments, religious formation, events, and community activities, targeting local parishioners and visitors. It maintains a consistent brand presence and offers clear contact details, enhancing trust and community engagement. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted with Cloudflare DNS and registered via WEDOS. The site is mobile-optimized with moderate performance and basic accessibility features. Security posture is good with HTTPS and standard security headers, though it lacks a Content Security Policy and vulnerability disclosure mechanisms. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures.

A

Arcibiskupství pražské

modlitba.cz

46

Modlitba.cz is a Czech non-profit website dedicated to Christian prayer, spirituality, and religious education. It provides a variety of articles, prayers, and spiritual resources targeting the Czech-speaking Christian community. The site is affiliated with Arcibiskupství pražské, indicating a credible religious institution backing. The website has been active since at least 2006, demonstrating longevity and stable presence in its niche. Technically, the site uses common web technologies such as jQuery, Google Analytics, and a cookie consent mechanism, ensuring basic compliance with privacy regulations. The content is well-structured, relevant, and professionally presented, with good navigation and mobile optimization.

S

Sekce pro mládež ČBK a Asociace křesťanských spolků mládeže

svetovednymladeze.cz

58

The website svetovednymladeze.cz serves as an informational and community platform for World Youth Days and related Catholic youth events primarily targeting Czech youth and young adults. It is operated by the Sekce pro mládež ČBK and Asociace křesťanských spolků mládeže, providing event details, spiritual preparation materials, news, and media content. The site is relatively new, established in 2022, and maintains a consistent brand aligned with its religious and youth-focused mission. Technically, the site uses a custom PHP-based CMS with modern frontend technologies including jQuery, Bootstrap, FontAwesome, and Owl Carousel. It is hosted with WEDOS and uses Cloudflare nameservers, ensuring reliable DNS and security infrastructure. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses Matomo analytics, which respects user privacy better than many alternatives. However, it lacks explicit privacy and cookie policies, security.txt files, and advanced security headers such as CSP. These gaps represent compliance and security improvement opportunities. Overall, the site is trustworthy and professional, with clear contact information and social media presence. The domain registration data aligns well with the website's mission and geographic focus. Strategic improvements in privacy compliance and security posture would enhance trust and regulatory adherence.

Křesťanské Vánoce is a Czech non-profit project established in 2012 that aims to promote the spiritual message of Christian Christmas through public access to nativity scenes and thematic programs organized by Christian parishes and congregations during Advent and the Christmas season. The website serves as an information hub for visitors and organizers, offering program listings, maps, and contact points. Technically, the site uses a moderately modern stack including Bootstrap 3, jQuery, Select2, Leaflet for maps, and Matomo for privacy-conscious analytics. The site is mobile responsive and well-structured, though some libraries are dated. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal privacy/cookie policies. No direct contact emails or phone numbers are published, relying mainly on contact forms. Overall, the site is trustworthy and legitimate with a consistent domain registration history and clear mission.

N

Nikodémova noc - Slovo biskupa

nikodemovanoc.cz

43

Nikodémova noc is a small-scale religious non-profit initiative based in the Czech Republic, focused on organizing spiritual events that offer unique encounters with Jesus. The website serves as a platform for program registration and dissemination of spiritual messages, supported by the Brno bishopric and the Pallotini order. The target audience is primarily Christian communities and church attendees in the region. Technically, the website uses basic web technologies including HTML, CSS, JavaScript with jQuery and Mapy.cz API for maps. However, it relies on outdated JavaScript libraries which pose security risks. The site lacks modern security headers and visible privacy or cookie policies, indicating compliance gaps. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the website is functional with good content quality but requires improvements in security and privacy compliance to enhance trust and protection.

M

Musica sacra

musicasacra.cz

55

Musica sacra is a Czech non-profit organization dedicated to the promotion and enhancement of church liturgical music. Founded in 2006, it offers educational courses for organists, organizes events, publishes newsletters and music, and supports the community of church musicians. The website serves as a hub for information, resources, and event announcements targeting church musicians, choir members, and liturgical music enthusiasts primarily in the Czech Republic. Technically, the website uses a modern tech stack including jQuery, Bootstrap 4.6, FontAwesome, and Owl Carousel, with Cloudflare DNS and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, it lacks explicit privacy and cookie policies, which is a compliance gap. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS but does not implement key security headers such as Content-Security-Policy or HSTS. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent with the website's Czech origin and long-standing presence, supporting legitimacy. Overall, the site is trustworthy and professional but would benefit from improved privacy compliance and enhanced security headers to strengthen its security posture and regulatory adherence.

A

American Alliance of Museums

aam-us.org

60

The American Alliance of Museums (AAM) is a prominent non-profit organization dedicated to representing and supporting the entire museum field across the United States, including art, history, science centers, and zoos. The organization offers membership programs, resources, advocacy, events, and professional publications to foster museum excellence and community engagement. Their market position is strong as the leading national body for museums, targeting museum professionals and institutions. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, Microsoft Clarity, and various marketing and analytics tools. The site demonstrates good performance, mobile optimization, and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses secure forms with consent mechanisms. However, there is a lack of publicly available security policies or incident response information, which could be improved to enhance transparency and trust. Overall, the website is professional, content-rich, and trustworthy, with strong privacy and cookie policies. The domain WHOIS data is privacy protected, which is typical for organizations of this type. No critical security issues or content safety concerns were identified.

N

National Safety Council

nsc.org

66

The National Safety Council (NSC) is a leading nonprofit organization dedicated to safety advocacy and injury prevention across workplaces and communities in the United States. The website clearly communicates NSC's mission to eliminate preventable injuries and deaths through training, advocacy, and resources. The organization holds a strong market position as a trusted safety advocate with a large audience including employers, employees, and safety professionals. Technically, the website is built on a modern ASP.NET framework, utilizing popular libraries such as FontAwesome and Owl Carousel, and integrates analytics and user feedback tools like Google Tag Manager, Hotjar, and Survicate. The site is well optimized for mobile and accessibility, with good SEO practices and comprehensive privacy and cookie policies that comply with GDPR standards. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and consistent branding support its legitimacy. Overall, NSC's digital presence reflects a mature, secure, and user-focused platform aligned with its nonprofit mission.

C

Commons Zentrum Lüneburg

commonszentrum.de

46

Commons Zentrum Lüneburg is a community-driven non-profit organization focused on creating a shared space for collaborative activities and societal change in Lüneburg, Germany. The website presents a clear mission centered on inclusivity, ecological responsibility, and commons-based resource sharing. It offers various services including workshops, events, and a self-help bicycle repair team, targeting local residents interested in sustainable and communal living. The organization is relatively new, founded around 2023, and maintains an active event calendar and social media presence.

OÖ Landes-Kultur GmbH is the largest cultural institution in the Austrian state of Upper Austria, serving as a museum and cultural hub for the regional population. The organization offers a broad range of exhibitions, events, educational programs, and publications, targeting a general audience interested in art, culture, and regional heritage. The website reflects a professional and well-structured digital presence, supporting the institution's mission to reach beyond central locations into the wider region through diverse cultural offerings. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery, Slick Carousel, and FontAwesome Pro. It integrates Google Tag Manager and Google Analytics with privacy-conscious configurations such as IP anonymization. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. Privacy and cookie policies are present and appear GDPR compliant, supporting user data protection. Overall, the website is trustworthy and professionally maintained, though the absence of WHOIS data reduces domain registration transparency. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and providing incident response contacts to strengthen security posture and user trust.