Non-profit security reports

FOKUS – Opava, z.s. is a Czech non-profit organization established in 2007, dedicated to providing social services primarily for persons with mental illness and disabilities in the Moravian-Silesian region. The organization operates multiple service centers offering social rehabilitation, protected workshops, clinical psychology outpatient services, and community-based support. It is funded through regional and municipal grants, as well as partnerships with local government and social institutions. The website reflects a stable regional presence with detailed project updates and transparent funding acknowledgments. Technically, the website is built on legacy JavaScript libraries such as Prototype.js and Scriptaculous, with a custom HTML structure and no detected CMS. The site is moderately optimized for performance and accessibility but lacks modern features such as cookie consent mechanisms and advanced SEO optimizations. No analytics or tracking scripts are present, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and cookie policies, and there is no evidence of HTTPS enforcement or advanced security frameworks. However, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a long-standing domain registration consistent with the organization's history, supporting legitimacy. Overall, the website is trustworthy and professionally maintained for its non-profit purpose but would benefit from modern security enhancements, privacy compliance improvements, and technical modernization to improve user experience and security posture.

E

Elim Opava, o.p.s.

elimopava.cz

40

Elim Opava, o.p.s. is a well-established non-profit organization based in the Czech Republic, focused on providing social and community services such as low-threshold youth services, family assistance, volunteer coordination, foster family support, and community work. The organization has a strong local presence with a history dating back to 1998 and a dedicated facility since 2002. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeted at children, youth, families, and local community members. Technically, the website is built on WordPress with common plugins and jQuery, offering good mobile responsiveness and moderate performance. While HTTPS is properly implemented, the site lacks some security headers and formal privacy and cookie policies, which are important for compliance and user trust. No forms are present on the homepage, and contact is provided via email and phone, supplemented by social media presence on Facebook. From a security perspective, the site shows a good baseline with no visible vulnerabilities or exposed sensitive data. However, improvements are recommended in implementing security headers, publishing privacy and cookie policies, and establishing incident response and vulnerability disclosure mechanisms. The domain WHOIS data is consistent with the organization's claims, showing a long-standing registration that supports legitimacy. Overall, Elim Opava's website is a trustworthy and professional platform for their non-profit activities, with room for enhancement in privacy compliance and security best practices to further strengthen user trust and regulatory adherence.

C

Charita Opava

charitaopava.cz

53

Charita Opava is a well-established non-profit Catholic organization based in the Czech Republic, providing a broad range of social and health care services including protected housing, social rehabilitation, day care, therapeutic workshops, and senior care. The organization targets residents of the Opava region, donors, volunteers, and partners, positioning itself as a trusted regional social service provider with multiple governmental and community partnerships. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses a custom CMS named HandMade, with standard web technologies including HTML5, CSS3, and JavaScript. It integrates multiple Google Analytics and Tag Manager scripts for user tracking and analytics, and implements a cookie consent mechanism compliant with GDPR. The site is mobile optimized with moderate performance and basic accessibility features. From a security perspective, the website enforces HTTPS and uses cookie consent to manage user privacy preferences. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, Charita Opava's website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security headers, accessibility, and explicit security policies would further enhance trust and resilience.

Jinak o.p.s. is a Czech non-profit organization dedicated to providing social services such as support for independent living, social therapeutic workshops, social rehabilitation, education, and counseling. The website targets individuals seeking social support within the Czech Republic and presents a clear, consistent brand with relevant content for its audience. The organization maintains an active presence with contact information and partner links, indicating a community-focused approach. Technically, the website uses older but functional technologies including jQuery 1.11 and integrates multimedia features like YouTube and text-to-speech services. However, the site lacks modern security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and contact details suggest a legitimate entity. Overall, the site is functional and professional but would benefit from technical and security improvements.

C

CRESS AURA

cress-aura.org

49

CRESS AURA is a regional non-profit organization dedicated to representing, promoting, and supporting social and solidarity economy (ESS) structures in the Auvergne-Rhône-Alpes region of France. The organization offers key services including advocacy, training, accompaniment, and networking to ESS actors such as project initiators, enterprises, and local authorities. The website reflects a professional and consistent brand presence with rich content and clear navigation, targeting stakeholders involved in social economy and regional development. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by OVH sas. It employs Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and explicit security headers, which are recommended for enhancement. No privacy or cookie policies were found, indicating a gap in GDPR compliance. Contact information is available via multiple verified company emails and a contact form. The domain registration is consistent with the organization's profile, showing legitimacy and appropriate domain age. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, the website demonstrates strong business credibility and content quality but should improve privacy compliance and security hardening to enhance trust and regulatory adherence.

B

Belle Main

bellemain.org

54

Belle Main is a French non-profit foundation dedicated to the conservation of movable heritage and the preservation of artisanal craftsmanship. Founded in 2015 and affiliated with the Fondation du patrimoine, it provides financial support for restoration projects and artisan training. The website presents a professional and consistent brand image, targeting proprietors of antique furniture and artisans. Technically, the site is built on WordPress with a moderate performance profile, employing common plugins for SEO, forms, and cookie compliance. Security posture is adequate with HTTPS enforced and reCAPTCHA on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with a clear cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy and well-maintained, with no critical security or content safety issues detected.

L

Les Bricos du Cœur

bricosducoeur.org

49

Les Bricos du Cœur is a French non-profit association founded in 2013 dedicated to supporting social aid organizations by organizing solidarity renovation projects, managing donations of materials, and operating a solidarity hardware store. The website reflects a well-established organization with a clear mission to improve the living and working environments of social structures such as associations, foundations, hospitals, and EHPADs. Their market position is strengthened by over 1200 completed projects and a network of engaged partners. Technically, the site is built on WordPress with modern libraries and performance optimizations, ensuring good user experience and mobile responsiveness. Security posture is strong with HTTPS, security headers, and anti-bot protections, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with visible cookie consent and privacy policy. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

F

Fondation Bettencourt Schueller

fondationbs.org

63

Fondation Bettencourt Schueller is a well-established French philanthropic foundation recognized as a public utility since 1987. It supports talents in life sciences, arts, and solidarity through prizes, donations, personalized support, and communication efforts. The foundation targets French-speaking audiences involved in cultural, scientific, and social projects. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support (French and English). Technically, it is built on Drupal CMS with integrated Matomo analytics and Axeptio for cookie consent management, ensuring GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the foundation demonstrates high business credibility and trustworthiness, with consistent branding and comprehensive content.

F

Fonjep

fonjep.org

59

Fonjep is a well-established French non-profit organization founded in 1964, dedicated to supporting youth and popular education projects. The website clearly communicates its mission, services, and regional presence, targeting associations, public institutions, and youth engaged in educational and solidarity initiatives. The digital infrastructure is built on Drupal 10 with modern front-end technologies, ensuring good mobile optimization, accessibility, and user experience. The site employs a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a mature privacy posture. Security-wise, the site uses HTTPS and cookie management best practices but lacks explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant, with room for improvement in security transparency and direct contact information.

S

Sírius, příspěvková organizace

sirius-opava.cz

56

Sírius, příspěvková organizace, is a Czech non-profit social service provider focused on supporting people with disabilities who cannot live in their natural environment and require assistance. The organization operates primarily in the Moravskoslezský region, offering services such as residential homes for disabled persons, protected housing, respite care, and social-health care. The website reflects a stable regional presence with clear contact information, social media engagement, and partnership with local government entities. Technically, the site is built on ASP.NET WebForms with Kentico CMS, leveraging modern JavaScript libraries and responsive design principles, ensuring good user experience and accessibility. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and a privacy policy page. Overall, the site is professional, trustworthy, and well-suited to its audience.

C

CRESS GRAND EST

cress-grandest.org

51

CRESS GRAND EST is a regional non-profit organization dedicated to supporting and promoting the Social and Solidarity Economy (ESS) in the Grand Est region of France. The website serves as a comprehensive resource hub offering information, events, employment opportunities, and promotional activities related to ESS. It holds a recognized certification (QUALIOPI) indicating quality in training services and maintains partnerships with regional and European institutions. The organization targets ESS actors, entrepreneurs, and stakeholders within the region, positioning itself as a key regional player in the social economy ecosystem. Technically, the website is built on the Flexit CMS platform, utilizing modern web technologies including jQuery and Google Tag Manager for analytics and tracking. The site is mobile-optimized with good navigation and SEO practices. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, alongside a GDPR-compliant cookie consent mechanism. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies. The absence of direct contact emails or phone numbers on the homepage suggests contact is likely handled through dedicated pages or forms. Social media presence is robust, enhancing trust and engagement. Overall, the website reflects a professional, trustworthy, and well-maintained digital presence for a regional non-profit entity. Recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility features to further strengthen compliance and user experience.

B

Bílý kruh bezpečí, z.s.

bkb.cz

46

Bílý kruh bezpečí, z.s. is a well-established Czech non-profit organization dedicated to providing professional, free, and confidential support to victims of crime and domestic violence. With over three decades of experience, it operates multiple regional offices across the Czech Republic and offers helpline services, counseling, and prevention projects. The website reflects a mature organization with a clear mission and target audience including victims, social workers, and law enforcement. Technically, the site uses modern web technologies such as jQuery, Foundation framework, and integrates Google Analytics with IP anonymization to respect user privacy. However, the absence of explicit privacy and terms of service pages and missing WHOIS data slightly reduce trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers. Overall, the site is accessible, professionally designed, and provides comprehensive contact information and social media presence, supporting its credibility.

C

CENTROM z.s.

centrom.cz

51

CENTROM z.s. is a Czech non-profit organization dedicated to providing social support and assistance to families and individuals, particularly those living in socially excluded, predominantly Roma communities. The organization offers key services including low-threshold facilities for children and youth, social activation services for families with children, and outreach programs aimed at improving quality of life and supporting self-sufficient solutions to social challenges. Established in 1999, CENTROM operates primarily in the Ostrava region and maintains a strong local presence with partnerships and funding from municipal and regional authorities. Technically, the website is built on a modern WordPress platform using the Astra theme and Elementor page builder, incorporating structured data for SEO and Google Analytics for visitor tracking. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms, reflecting a good level of digital maturity. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent banners to comply with privacy regulations. However, it lacks explicit published security policies, incident response contacts, and security headers that could enhance its security posture. No vulnerabilities or exposed sensitive data were detected in the content. The domain registration data is consistent with the organization's claims, indicating legitimacy and trustworthiness. Overall, CENTROM z.s. presents a professional and trustworthy online presence suitable for its non-profit social service mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a security.txt file to improve transparency and trust.

C

Centrum pro dětský sluch Tamtam, o. p. s.

tamtam.cz

47

Centrum pro dětský sluch Tamtam, o. p. s. is a Czech non-profit organization dedicated to supporting families with children who have hearing impairments. The website clearly targets this audience, providing resources, information, and community support. The organization maintains a professional online presence with consistent branding and active social media channels on Facebook and Instagram. The business model is focused on advocacy and support rather than commercial activities, positioning it as a trusted entity within its niche in the Czech Republic. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Fonts for typography, and Google Maps API for location services. Google Analytics is used for visitor tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting awareness of privacy regulations such as GDPR. However, explicit security headers are not detected, and no public security policy or incident response information is available. The absence of WHOIS data for the domain is a concern, as it reduces trust in the domain's legitimacy. Despite this, the website content and contact information appear legitimate and professional. Overall, the website scores well in content quality, technical implementation, and privacy compliance, but the lack of WHOIS transparency and some security best practices slightly reduce its security posture. Strategic recommendations include improving security headers, publishing a security policy, and verifying domain registration details to enhance trust and compliance.

C

Centrum pro rodinu a sociální péči z. s.

prorodiny.cz

54

Centrum pro rodinu a sociální péči z. s. is a well-established non-profit organization based in Ostrava, Czech Republic, dedicated to supporting families, relationships, individuals with disabilities, caregivers, and seniors. The organization offers a broad range of services including counseling, education, social support, and community engagement, with a strong focus on inclusivity and social welfare. Their website reflects a mature digital presence with rich content, active event calendars, and social media integration, positioning them as a trusted local entity in the social care sector. Technically, the website employs modern JavaScript libraries and Google Analytics with consent management, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern that slightly impacts trustworthiness, though the website content and social presence strongly indicate legitimacy. Overall, the site is professional, content-rich, and user-friendly, serving its target audience effectively.

Centrum psychologické pomoci (CEPP) is a Czech non-profit organization providing psychological and social support services, including foster care assistance and counseling. The organization is regionally funded and collaborates with various social and educational partners, positioning itself as a trusted regional social service provider. The website reflects a mature digital presence built on WordPress, with modern plugins supporting galleries, testimonials, and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is professional, compliant, and trustworthy, serving a general audience seeking social and psychological assistance.

C

Centrum sociálních služeb Ostrava, o.p.s.

css-ostrava.cz

49

Centrum sociálních služeb Ostrava, o.p.s. is a well-established non-profit organization founded in 2006, providing a broad range of social services primarily in the Czech Republic. Their services focus on supporting families, children, and individuals in difficult social situations through shelters, crisis centers, family counseling, and social activation programs. The organization maintains a professional web presence with clear navigation and multiple physical locations integrated via Google Maps, enhancing accessibility for their target audience. The website encourages donations and donations with tax deduction benefits, indicating a transparent and community-focused business model. Technically, the website uses modern JavaScript libraries such as Swiper.js and Google Maps API, along with Google Tag Manager for analytics, reflecting a moderate level of digital maturity.

C

Centrum sociálních služeb Poruba, příspěvková organizace

cssporuba.cz

40

Centrum sociálních služeb Poruba is a Czech public contributory organization established in 2004 by the municipal district of Ostrava-Poruba. It provides a range of social services including care services, day centers, homes for mothers with children, and asylum facilities. The organization targets residents of Ostrava-Poruba and vulnerable populations requiring social support. The website reflects a government-affiliated entity with clear contact information and service descriptions, positioning it as a local social service provider. Technically, the website employs standard and widely used web technologies such as Bootstrap, jQuery, and Flexslider, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident, and no analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The WHOIS data is missing, which raises concerns about domain registration transparency, although the website content and business information appear legitimate. No forms or input fields are present on the analyzed page, reducing attack surface but also limiting user interaction. Overall, the website is functional and professional but would benefit from improved security practices, privacy compliance, and domain registration transparency to enhance trust and compliance posture.

S

Salesiáni Dona Bosca Ostrava

boscoostrava.cz

48

Salesiáni Dona Bosca Ostrava is a local non-profit organization focused on youth and community engagement in Ostrava, Czech Republic. The website serves as an information portal for their activities including youth clubs, workshops for schools, accommodation, and church services. The organization maintains a consistent brand presence with official contact emails and social media channels, supporting community outreach and engagement. Technically, the website is built on WordPress using modern plugins and frameworks such as Bootstrap and Smart Slider 3, providing a responsive and user-friendly experience. Security measures include HTTPS enforcement and Google reCAPTCHA integration, although some security headers are missing. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy page. The absence of WHOIS data limits domain trust verification, but the overall digital footprint and content quality support the legitimacy of the organization. Strategic recommendations include enhancing security headers, publishing a privacy policy, and improving accessibility features to strengthen compliance and trust.

K

KAFIRA o.p.s.

kafira.cz

41

KAFIRA o.p.s. is a Czech non-profit organization dedicated to assisting people with visual impairments, with a history of over 20 years. The website reflects this mission clearly, targeting individuals with visual disabilities and offering support and community services. The organization appears to be well-established within its niche, focusing on social assistance rather than commercial activities. Technically, the website is built on WordPress, utilizing common web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized and has a good design quality, though accessibility features could be enhanced further to better serve its target audience. Security-wise, the site uses HTTPS and has a basic SSL configuration, but lacks important security headers and visible privacy or cookie policies, which are critical for compliance and user trust. The absence of WHOIS data limits transparency but is not uncommon for non-profit entities using privacy protection services. Overall, the website is functional and professional but would benefit from improved privacy compliance and security hardening.

S

Svépomocná společnost Mlýnek, z. s.

klubmlynek.cz

53

Svépomocná společnost Mlýnek, z. s. is a small non-profit organization based in Ostrava, Czech Republic, dedicated to supporting individuals with mental illness. The organization focuses on enabling these individuals to lead meaningful and active lives within their natural environment through various supportive activities and services. The website reflects this mission with clear, relevant content and a consistent brand presence. Technically, the site is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and uses Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and uses Google Tag Manager but lacks important security headers and explicit privacy and terms of service documentation. The absence of WHOIS data for the domain raises concerns about transparency and legitimacy, although the website content and hosting appear legitimate. Overall, the site scores moderately on content quality, technical implementation, security posture, privacy compliance, and business credibility, with room for improvement in transparency and security best practices.

NOVÁ ŠANCE, z.s. is a Czech non-profit organization established in 1998, dedicated to providing social services primarily to men released from prison and homeless individuals in the Northern Moravia and Silesia region. The organization operates an asylum house, manages a large facility, and participates in various social projects including support for Ukrainian children and collaboration with probation services. The website is built on WordPress with common plugins and offers good mobile optimization and user experience. However, it lacks published privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS enabled and no visible vulnerabilities, but security headers are missing. No WAF or blocking mechanisms were detected, and no advertising or tracking services are present, indicating a privacy-conscious approach. Overall, the website is trustworthy and professional but could improve compliance and security practices.

B

Bez Bariér

ostrava-bezbarier.cz

50

Bez Bariér is a small non-profit organization based in Ostrava, Czech Republic, providing free advisory and mapping services to severely physically disabled citizens, particularly those using wheelchairs. Established in 2000, it focuses on barrier-free access consulting, accessibility mapping, and project documentation review for local authorities. The website reflects a specialized local service with strong ties to municipal partners and accessibility initiatives. Technically, the site is built on WordPress with common libraries like jQuery and Lightbox2, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS data reduces domain trust but the site's content and partnerships support its legitimacy. Overall, the site is professional and trustworthy for its niche audience but should enhance privacy compliance and security best practices.

Salesiánské hnutí mládeže (SHM) is a Czech Christian non-profit organization dedicated to the education and upbringing of children and youth through various cultural, sports, and educational activities. The organization operates nationwide with over three thousand members across multiple clubs. The website serves as an information hub for events, news, and organizational details, targeting youth and their families. Technically, the site is built on the Vizus CMS platform, with a moderate performance profile and basic mobile optimization. Security measures include HTTPS and a comprehensive cookie consent mechanism, though security headers are not evident, suggesting room for improvement. The absence of WHOIS data reduces domain trust slightly, but the website content and structure indicate a legitimate and established organization. Overall, the site scores well in content quality, privacy compliance, and business credibility, making it a trustworthy resource for its audience.

T

Tyfloservis o. p. s.

tyfloservis.cz

44

Tyfloservis o. p. s. is a Czech non-profit organization dedicated to supporting individuals with severe visual impairments by providing information, support, and skills training to promote independent living. The website is professionally designed using WordPress with the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. The content is relevant and targeted specifically at visually impaired persons seeking rehabilitation services. Technically, the site is moderately performant and mobile-optimized, with good accessibility features. Security posture is adequate with HTTPS enabled, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data limits domain trust verification, but the website's professional presentation and clear mission support its legitimacy. Overall, the site is safe for general audiences and serves an important social function.

A

ANIMA VIVA z.s.

animaviva.cz

44

ANIMA VIVA z.s. is a Czech non-profit organization established in 2002, dedicated to providing social services and support to persons with disabilities, particularly those with mental and intellectual disabilities. The organization operates primarily in the Moravian-Silesian region and offers registered social services including social counseling, social rehabilitation, and employment opportunities through sheltered workplaces. Their mission focuses on social inclusion, improving quality of life, and destigmatizing disabilities. The website reflects this mission with relevant content and a clear target audience of disabled persons and their families. Technically, the website uses a modest technology stack including jQuery, bxSlider, lightbox, Google Analytics, and Google Tag Manager. It implements cookie consent mechanisms aligned with GDPR requirements and uses HTTPS for secure communication. However, the site lacks advanced security headers and accessibility features, and the performance and mobile optimization are basic. The absence of WHOIS data and explicit contact emails or phone numbers on the site slightly detracts from the overall trustworthiness. From a security perspective, the site shows good privacy compliance with GDPR statements and cookie consent but could improve by adding security headers and a vulnerability disclosure policy. No critical vulnerabilities or malware indicators were found. The missing WHOIS data is a concern and should be investigated to confirm domain legitimacy. Overall, ANIMA VIVA z.s. presents as a legitimate, mission-driven non-profit with a functional website that meets basic privacy and security standards. Strategic improvements in security posture, contact transparency, and technical modernization would enhance trust and user experience.

K

Kabubu

kabubu.fr

48

Kabubu is a French non-profit association dedicated to promoting the social and professional inclusion of exiled individuals through the power of sport. The organization offers weekly sports activities, training programs, and workshops aimed at fostering friendship and integration. Their market position is niche, focusing on social inclusion within France, supported by partnerships with recognized organizations and media outlets. Technically, the website is built using modern frameworks such as React and Ionic, with good mobile optimization and moderate performance. Security posture is solid with enforced HTTPS and absence of trackers, though it lacks some security headers and formal privacy documentation. Overall, the site is professional and trustworthy, but the absence of WHOIS data and privacy policies slightly reduce credibility. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

C

Communauté Emmaüs de Paris

emmaus-paris.fr

38

Emmaüs Paris is a non-profit community organization focused on social solidarity through donation collection, volunteer engagement, and operation of eight solidarity shops in Paris. The website serves as a portal for donors, buyers, and volunteers, providing information on how to contribute and participate. The organization maintains active social media profiles and provides contact information including a physical address and email. Technically, the website is built on WordPress with common plugins for SEO, forms, and maps, and enforces HTTPS for secure communication. However, the Google Maps integration suffers from API key issues, and no advanced security headers are detected. The WHOIS data is missing, which reduces domain trustworthiness, but the website content and social presence support legitimacy. Privacy compliance is addressed with a cookie consent banner and a privacy policy page. Overall, the site is functional, professional, and serves its community purpose effectively.

R

REFER

reemploi-idf.org

56

REFER is a non-profit regional network based in Île-de-France focused on promoting and coordinating the reuse of objects in a solidarity and ecological framework. The organization supports local actors through accompaniment, events, advocacy, and mapping of reuse resources. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation. It integrates privacy-conscious analytics via Matomo and maintains a consistent brand presence with partner logos and social media channels. However, explicit privacy and cookie policies are not found, representing a compliance gap. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the website demonstrates a good security posture with HTTPS and no visible vulnerabilities but could improve by adding security headers and incident response information.

L

La Venelle

lavenelle-montreuil.org

56

La Venelle is a non-profit community organization based in Montreuil, France, focused on promoting solidarity-based reuse and circular economy practices. It hosts nine associations that operate reuse shops, repair workshops, and social insertion employment programs. The organization also offers a café-cantine and hosts cultural events, positioning itself as a local hub for ecological and social initiatives. The website reflects this mission with clear content, community-oriented messaging, and accessible navigation. Technically, the site uses modern web technologies such as Ionic and React, with a moderate performance profile and good mobile optimization. However, it lacks explicit privacy and security policies, and no security headers or vulnerability disclosures are present. The site does not use tracking or analytics scripts, aligning with its privacy-conscious stance. Overall, the website is professional and trustworthy but could improve in privacy compliance and security posture.

T

The Shift Project

territoiresaufutur.org

64

Territoires au Futur is a French non-profit platform operated by The Shift Project, focused on supporting local territorial resilience and ecological transition. It provides diagnostic tools, mobilization campaigns, and educational resources targeting local elected officials and citizens in France. The website is professionally designed with excellent content quality and clear navigation, optimized for mobile devices. Technically, it uses modern JavaScript frameworks (Vue.js), FontAwesome icons, and Matomo analytics, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and incident response policies. Privacy compliance is adequate with a linked comprehensive privacy policy and cookie policy, but lacks an explicit cookie consent mechanism. Overall, the site is trustworthy, well-branded, and aligned with its parent organization, The Shift Project.

K

KD Mlejn, z. ú.

mlejn.cz

40

KD Mlejn is a well-established non-profit cultural organization based in Prague, Czech Republic, with a history dating back to 1988 through its predecessor Klub Mlejn. The organization offers a variety of cultural services including theater performances, concerts, courses, residencies, and community events, targeting a broad audience interested in arts and culture. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the site runs on WordPress with standard plugins for analytics and cookie compliance, hosted on a Czech hosting provider. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. The domain is long-registered and consistent with the organization's history, indicating legitimacy. Overall, the site is trustworthy and serves its community well, though improvements in privacy and security documentation are recommended.

R

Réseau Entreprendre®

reseau-entreprendre.org

63

Réseau Entreprendre® is a well-established non-profit organization focused on supporting entrepreneurs and business leaders through personalized mentoring and community engagement. The organization operates internationally with a strong presence in France and partners with numerous reputable companies and institutions. The website reflects a professional and comprehensive digital presence, leveraging WordPress and modern web technologies to deliver content effectively. Privacy and cookie policies are in place, indicating GDPR compliance. Security posture is good with HTTPS and recaptcha protections, though some security headers and explicit incident response information are absent. The lack of WHOIS data limits domain registration trust assessment, but the website's content and partner ecosystem support legitimacy. Overall, the site is a credible resource for entrepreneurship support and community building.

I

IRDO – Inštitut za razvoj družbene odgovornosti

irdo.si

38

IRDO – Inštitut za razvoj družbene odgovornosti is a Slovenian non-profit institute dedicated to promoting social responsibility and sustainable development. The organization offers a range of services including conferences, training, consultation, awards, research, and publishing. It holds a national partnership with CSR Europe, positioning itself as a key player in the social responsibility sector within Slovenia and the broader EU region. The website targets managers and professionals interested in integrating social responsibility into their organizations. Technically, the website is built on WordPress with modern plugins and libraries such as WPBakery Page Builder and Ultimate VC Addons, providing a good user experience with mobile optimization and clear navigation. However, there is room for improvement in accessibility and SEO features.

K

Kulturzentrum Merlin

merlinstuttgart.de

63

Kulturzentrum Merlin is a non-profit socio-cultural center located in Stuttgart, Germany, focusing on providing a platform for concerts, literature, children's activities, films, and festivals. The website positions itself as a local cultural hub serving a general audience with family-friendly content. Technically, the site is built on WordPress using the Divi theme and several plugins including Yoast SEO and Contact Form 7, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy and terms of service pages. Security posture is adequate but could be improved with better header implementation and explicit security policies. Overall, the website is trustworthy and professional, though it would benefit from enhanced privacy compliance and clearer contact information.

G

Give For Your Bones

giveforyourbones.org

7

Give For Your Bones appears to be a small non-profit or charitable organization focused on bone health or related causes. The website is built on the Wix platform, using standard Wix scripts and technologies, indicating a moderate level of technical infrastructure suitable for small organizations. The site content is minimal and primarily informational, with no detected forms, contact information, or advanced business features. Security posture is basic, with HTTPS implied but no advanced security headers or policies detected. Privacy compliance is lacking, with no privacy or cookie policies found, and the site is set to noindex, limiting search engine visibility. WHOIS data is unavailable due to a malformed request or privacy protection, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional but lacks many professional and security best practices expected for organizations handling user data or donations.

T

Türkische Gemeinde Deutschland

tgd.de

65

Türkische Gemeinde Deutschland (TGD) is a German non-profit umbrella organization representing the interests of people with Turkish migration backgrounds. The website provides comprehensive information about their projects, member associations, and societal topics such as participation, equality, and diversity. The organization targets migrants and stakeholders interested in integration and social inclusion. Technically, the website is built on WordPress using WPBakery Page Builder and several plugins, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected. Privacy compliance is strong with detailed GDPR-compliant policies and consent management. Overall, the site is professional, trustworthy, and well-structured, supporting the organization's mission effectively.

P

ProjectTogether

projecttogether.org

52

ProjectTogether is a German non-profit organization established in 2012 that aims to bring together society, politics, and economy for collaborative social impact. The website reflects a mature digital presence with a modern WordPress CMS using Elementor and Astra theme, integrated with marketing and analytics tools such as HubSpot, MailerLite, and Usercentrics for cookie consent. The organization maintains active social media channels on Facebook, Twitter (X), and LinkedIn, enhancing its community engagement and trustworthiness. Technically, the site is well-structured with good SEO and mobile optimization, though performance is moderate. Security posture is adequate with HTTPS enforced and domain registration transparency, but could be improved by enabling DNSSEC and adding additional security headers. Privacy compliance is basic, lacking explicit privacy and terms of service pages, which should be addressed to meet GDPR standards fully. Overall, the website is professional and trustworthy, serving its non-profit mission effectively.

R

Robert Bosch Stiftung

bosch-stiftung.de

53

The Robert Bosch Stiftung website represents a large, well-established non-profit foundation linked to the Bosch corporate group. The foundation focuses on funding and supporting projects in health, education, and global issues to promote a just and sustainable future. The website is professionally designed with excellent content quality, clear navigation, and consistent branding. It targets NGOs, educational institutions, policymakers, and the general public interested in social and global topics. Technically, the site uses Drupal 11 CMS with modern web technologies and moderate performance. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly provided. Overall, the site is trustworthy, safe, and professionally maintained.

Z

ZEOK e.V. Leipzig

zeok.de

32

ZEOK e.V. Leipzig is a small non-profit organization focused on promoting open culture, anti-racism, and peaceful coexistence in Leipzig, Saxony, and across Germany. The website presents a professional and well-structured digital presence built on WordPress with the Kadence theme and related plugins, supporting educational and cultural initiatives such as workshops, publications, and festivals. The organization targets educators, activists, and the general public interested in diversity and anti-discrimination efforts. Technically, the site is well implemented with modern technologies, good mobile optimization, and SEO best practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional, reflecting the organization's mission and activities effectively.

K

korientation e.V.

korientation.de

41

korientation e.V. is a small non-profit organization based in Germany, dedicated to serving the Asian-German and Asian diasporic communities with a focus on cultural, political, and social issues. The organization operates as a self-organization and network, providing community events, political education, publications, and collaborative projects against racism. Their market position is niche but well-established within their community, with a history dating back to 2008. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with modern plugins and libraries, hosted likely by a German hosting provider, and implements HTTPS with cookie consent mechanisms. Security posture is good but could be improved by adding explicit security headers and incident response policies. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and well-maintained, with moderate user tracking via analytics and a clear privacy policy compliant with GDPR.

R

RAA Berlin

raa-berlin.de

41

RAA Berlin is a medium-sized non-profit organization based in Germany focused on diversity, inclusion, and community engagement. Their website highlights projects, publications, and educational offerings aimed at promoting social inclusion and addressing marginalization. The organization maintains a consistent brand presence and targets a general audience interested in social issues. Technically, the website is built on TYPO3 CMS, hosted by netcup, and integrates accessibility tools to enhance user experience. The site is well-structured, mobile-optimized, and provides multilingual options. Security posture is moderate with HTTPS assumed but lacking explicit security headers and incident response contacts. Privacy compliance is good with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

E

Each One Teach One (EOTO) e.V.

eoto-archiv.de

44

Each One Teach One (EOTO) e.V. is a small non-profit community organization based in Berlin focused on education, empowerment, and cultural preservation for Black, African, and Afro-diasporic communities. Founded in 2012, it operates a neighborhood library and organizes events, workshops, and advocacy initiatives. The website reflects a well-structured and content-rich platform targeting its community with multilingual support and clear navigation. Technically, the site uses modern web technologies including HTTPS and JavaScript libraries like Swiper.js for interactive content. Security posture is good with HTTPS enabled and no exposed sensitive data, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

V

Verband binationaler Familien und Partnerschaften Leipzig

binational-leipzig.de

55

The Verband binationaler Familien und Partnerschaften Leipzig is a non-profit organization focused on supporting binational families and partnerships, operating primarily in Leipzig with nationwide relevance in Germany. Their services intersect family, migration, and education policy, providing advisory and support functions. The website reflects a professional and consistent brand image with clear contact information and a cookie consent mechanism, indicating attention to privacy compliance. Technically, the site is built on WordPress using modern themes and plugins, including Bootstrap and Google Tag Manager, hosted likely by 1&1 IONOS. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is trustworthy and well-maintained, serving a specialized non-profit audience.

I

IRDO – Institute for the Development of Social Responsibility

horus.si

41

The website www.horus.si represents the Slovenian Award for Social Responsibility HORUS, managed by IRDO, a non-profit institute focused on promoting social responsibility and sustainable development. The site serves as an information hub for award calls, laureates, workshops, and news updates, targeting organizations and individuals interested in social responsibility within Slovenia. The business model is non-profit, centered on recognition and promotion rather than commercial sales. The domain age and content history support a credible and established presence in this niche. Technically, the site is built on WordPress with popular plugins like Slider Revolution and WPBakery Page Builder, ensuring a modern and responsive design. The site loads moderately fast and is mobile-optimized, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS with a good SSL configuration. However, it lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No vulnerabilities or malicious content were detected, and contact information is clearly provided, enhancing credibility. Overall, the site is professional and trustworthy but would benefit from improved privacy compliance and security hardening. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure policy to enhance user trust and regulatory compliance.

T

Toimintakykyinen Suomi

toimintakykyinensuomi.fi

67

Toimintakykyinen Suomi is a Finnish non-profit initiative focused on promoting physical activity and improving functional capacity among the Finnish population. The website serves as a platform for campaigns, partner engagement, and public awareness, coordinated by the Finnish Olympic Committee (Suomen olympiakomitea). It targets a broad audience including individuals, workplaces, educational institutions, and organizations to foster healthier lifestyles and societal resilience. The initiative leverages partnerships with national organizations and integrates social media to amplify its message. Technically, the website is built on WordPress with modern JavaScript libraries and integrates third-party services such as Google Tag Manager, CookieHub for cookie consent, and Juicer for social media feeds. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy linked from the parent organization’s domain. Contact information is limited to email addresses and partner site links, with no direct phone numbers found. Overall, the website presents a trustworthy and professional front for a national health campaign. It demonstrates good digital maturity and compliance with privacy regulations, though it could improve security header implementation and provide clearer direct contact options.

S

Suomalaisen Työn Liitto

avainlippu.fi

52

Suomalaisen Työn Liitto is a well-established non-profit organization dedicated to promoting Finnish work and products through certification marks such as Avainlippu. The website serves as a comprehensive platform to inform consumers and businesses about the certification criteria, benefits, and application processes. The organization enjoys a strong market position in Finland with thousands of companies using its marks, reflecting trust and recognition in the Finnish market. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, hosted on a reliable provider. Security posture is solid with HTTPS, cookie consent, and no evident vulnerabilities, though some security headers could be enhanced. Overall, the site is professional, user-friendly, and compliant with privacy regulations, supporting the organization's mission effectively.

S

Simple Plan Foundation

simpleplanfoundation.org

59

The Simple Plan Foundation website represents a small non-profit organization established in 2005 by the band Simple Plan to support young people in need and victims of life-threatening illnesses. The foundation operates primarily in Canada and targets youth and charitable supporters. The website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good design quality and clear navigation, though it lacks visible privacy and cookie policies, which impacts privacy compliance scores. Security posture is strong with HTTPS and HSTS enabled, but additional security headers could enhance protection. The absence of public WHOIS data suggests privacy protection, which is reasonable for a non-profit entity. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

A

Alzheimer Schweiz

alzheimer-schweiz.ch

53

Alzheimer Schweiz is a well-established Swiss non-profit organization dedicated to supporting people affected by dementia and Alzheimer’s disease. The organization provides comprehensive information, advice, support services, and community engagement platforms tailored to patients, families, healthcare professionals, and interested parties. It operates nationally with regional sections covering all Swiss cantons, demonstrating broad reach and local presence. The website is professionally designed, content-rich, and highly user-friendly, reflecting a mature digital presence. Technically, the website is built on TYPO3 CMS and leverages modern web technologies including jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent implemented, though some advanced security headers and explicit security policies are not publicly disclosed. From a security and compliance perspective, the site shows good GDPR compliance with clear privacy and cookie policies. Contact information is transparent and complete, enhancing trust. No critical vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the organization's identity, supporting legitimacy. Overall, Alzheimer Schweiz presents a trustworthy, professional, and well-managed online presence suitable for its healthcare and non-profit mission. Strategic improvements could include publishing explicit security policies, incident response information, and enhancing HTTP security headers to further strengthen security posture.

St. Niklausgesellschaft Littau is a small non-profit organization dedicated to preserving and promoting the traditional Sankt Nikolaus customs in the Littau region of Luzern, Switzerland. Their website serves as an informational platform for local families and community groups, offering details about Samichlaus visits during Advent and related cultural activities. The organization maintains a modest but consistent online presence with clear navigation and community engagement via Facebook. Technically, the website is built on the Jimdo Creator CMS platform, utilizing standard web technologies including jQuery and Google Analytics for visitor tracking. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR requirements. Hosting and infrastructure are provided by Jimdo GmbH, ensuring reliable HTTPS security. From a security perspective, the site enforces HTTPS and employs cookie consent controls, but lacks some advanced security headers such as Content-Security-Policy and X-Frame-Options. The use of an older jQuery version may pose minor risks. No explicit security policies or incident response contacts are published, which is typical for small non-profits but could be improved. Overall, the website is trustworthy, safe, and well-suited for its community-focused purpose. It demonstrates good privacy compliance and reasonable technical implementation, though there is room for security enhancements and more comprehensive policy disclosures.