Non-profit security reports

B

Bury Society for Blind and Partially Sighted People

buryblindsociety.org

47

Bury Society for Blind and Partially Sighted People is a small, independent local charity focused on supporting blind and partially sighted individuals in Bury and surrounding areas. The organization offers a range of practical services including early intervention, rehabilitation, befriending, daily living skills, and social activities. It operates primarily through grants, donations, and local fundraising efforts, and is commissioned by Bury Metropolitan Borough Council to provide sensory services for the visually impaired. The website reflects a clear mission and provides useful resources and contact points for its audience. Technically, the website is built on Drupal 10 and uses modern JavaScript libraries such as Modernizr and Enquire.js, indicating a moderate level of digital maturity. The site is mobile optimized and accessible, with good SEO practices and clear navigation. However, there is no visible cookie consent mechanism or comprehensive security headers, which are areas for improvement. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. The absence of security headers and cookie policies slightly lowers the security posture. WHOIS data is unavailable or protected, which is common for small charities but reduces transparency. Overall, the site demonstrates a good level of trustworthiness and professionalism appropriate for a non-profit organization. Strategically, the organization should focus on enhancing its security posture by implementing security headers, adding cookie consent mechanisms, and publishing security and incident response policies. Improving WHOIS transparency where possible would also enhance trust. These steps will help maintain compliance and protect the organization and its users better.

L

Link to Change

linktochange.org.uk

61

Link to Change is a UK-based non-profit charity dedicated to combating exploitation and supporting victims and young people at risk. The organization positions itself as a specialized service provider in the anti-exploitation sector, offering support and advocacy. The website is professionally designed using the Wix platform, featuring structured data that enhances search engine visibility and provides clear contact information. However, the domain WHOIS data is unavailable due to a registration error, which raises concerns about domain legitimacy or configuration. The technical infrastructure relies on Wix hosting and includes Google Ads and Tag Manager for marketing and analytics. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance documentation. Overall, the website is safe for general audiences and presents a trustworthy front for the charity, though improvements in compliance and domain registration clarity are recommended.

W

Wigmore Hall

wigmore-hall.org.uk

71

Wigmore Hall is a prestigious non-profit cultural venue located in London, specializing in chamber music and song recitals. It offers a rich program of live concerts, educational initiatives, and membership opportunities, positioning itself as a leading institution in the classical music scene. The website reflects this heritage with professional design, clear navigation, and comprehensive content tailored to classical music enthusiasts and concertgoers. Technically, the website employs modern web technologies including JavaScript ES modules, Matomo analytics for privacy-conscious visitor tracking, and Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized and accessible, with good SEO practices evident in metadata and structured content. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms that respect user privacy. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a low-risk profile with strong privacy compliance and professional business credibility. The absence of WHOIS data is due to a query on the subdomain rather than the registered domain, not indicating any legitimacy concerns. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and improving contact information visibility.

B

Bristol Bay Native Corporation

bbnc.net

52

Bristol Bay Native Corporation (BBNC) is an Indigenous-owned corporation focused on strategic investments that support the Native community and shareholders. The organization balances profit with cultural and social purpose, providing shareholder services, training, youth programs, and stewardship of natural resources. BBNC operates multiple subsidiary companies and partners with financial and community organizations to fulfill its mission. The website reflects a mature digital presence with comprehensive content and clear branding. Technically, the site uses WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. Security posture is generally good with HTTPS enabled, but lacks visible security headers and cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, though the website content and external references support authenticity. Overall, BBNC presents as a credible and professional organization with room for improvement in privacy compliance and security transparency.

N

New Horizons

newhorizonsbroadoakltd.co.uk

55

New Horizons is a small non-profit support agency and resource center based in Margate, England, focused on providing services for adults with learning disabilities. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript libraries including the Facebook SDK. The site presents basic content relevant to its mission but lacks comprehensive privacy and security documentation. The absence of WHOIS registration data and domain registration errors raise concerns about domain legitimacy, although the active website presence on a reputable hosting platform mitigates some risk. Security posture is limited with no detected security headers and no visible incident response or vulnerability disclosure information. Overall, the site serves its target audience but requires improvements in privacy, security, and trust indicators to enhance credibility and compliance.

T

Together Trust

togethertrust.org.uk

72

Together Trust is a well-established UK-based non-profit organization delivering care, support, and education services primarily across the North West of England. Founded in 1870, it serves thousands of children, adults, parents, and carers through a variety of programs including caring homes, fostering, education, community support, therapy, and campaigning. The organization positions itself as a trusted provider with a strong regional presence and a comprehensive service offering tailored to vulnerable populations. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO and Google Analytics. It employs cookie consent mechanisms compliant with GDPR and provides a user-friendly, accessible, and mobile-optimized experience. The technical infrastructure is solid, with HTTPS enforced and integration of Google Tag Manager and YouTube embeds for content delivery and tracking. From a security perspective, the site demonstrates good practices including HTTPS, cookie consent with granular controls, and bot protection via Google reCAPTCHA. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website presents a low risk profile with strong business credibility and compliance posture. The WHOIS data is unavailable due to querying the www subdomain, but the domain and website content align with a legitimate, longstanding non-profit entity. Strategic recommendations include enhancing security headers and maintaining regular audits of third-party scripts to sustain security and compliance.

Hamoaze House is a UK-based non-profit organization providing support and counselling services to individuals and families affected by problematic relationships with alcohol and other substances. The website reflects a community-focused service model with clear calls to action for volunteering and donations, indicating active engagement with its audience. Technically, the site is built on WordPress using Elementor and several plugins for booking and forms, hosted by Hostinger. The infrastructure is modern and includes security measures such as HTTPS and Google reCAPTCHA, alongside a cookie consent mechanism compliant with GDPR. Security posture is solid but could be improved with additional headers and published policies. Overall, the website is professional, accessible, and trustworthy, serving its target audience effectively.

Pegasus Theatre is a well-established non-profit community theatre organization based in East Oxford, UK, with over 60 years of history. The organization focuses on creating theatre for and with young people, offering classes, youth companies, and community engagement initiatives. The website reflects a professional and consistent brand presence, targeting young people and community members interested in the arts. Technically, the site is built on WordPress using the Divi theme and several plugins, hosted likely on WPEngine, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from improved compliance and security practices.

The Silk Museum website represents a small non-profit cultural heritage organization focused on preserving and showcasing the silk industry history in Macclesfield, UK. The site provides visitor information, educational content, and access to guided tours and a gift shop. The museum targets general audiences including tourists and educational groups. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Tag Manager and Google Fonts, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS enabled, but lacks comprehensive security headers and published policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and hosting appear professional and trustworthy. Privacy and cookie policies are missing, indicating compliance gaps. Overall, the site is functional and professional but would benefit from improved compliance documentation and domain registration clarity.

O

Ocean Conservancy

oceanconservancy.org

64

Ocean Conservancy is a well-established U.S.-based non-profit organization dedicated to global ocean protection and environmental advocacy. The website reflects a mature digital presence with a focus on public engagement, education, and conservation efforts. Their market position is strong within the environmental non-profit sector, supported by a long domain history and consistent branding. The organization leverages modern web technologies including WordPress CMS, Google Tag Manager, and Cloudflare DNS services to deliver a performant and secure user experience. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR standards. Security posture is solid with HTTPS enforcement and domain transfer protections, though there is room for improvement in DNSSEC adoption and explicit security policy disclosures. Overall, the website is professional, trustworthy, and well-optimized for SEO and accessibility, serving a broad audience of environmental advocates and the general public.

Y

YMCA England & Wales

ymca.org.uk

54

YMCA England & Wales is a well-established non-profit organization dedicated to supporting young people across England and Wales through a broad spectrum of services including health and wellbeing, family and youth work, housing, training, and support. The organization has a strong market presence and a clear mission to empower youth, supported by a professional and well-structured website that reflects its community-oriented business model. The website is designed to engage multiple audiences including young people, donors, volunteers, and partners. Technically, the website is built on WordPress 7.0, leveraging modern JavaScript libraries such as jQuery, Swiper.js, and AOS for enhanced user experience. It integrates key analytics and marketing tools including Google Analytics, Microsoft Clarity, Facebook Pixel, and Google Tag Manager, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive metadata and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS with a good SSL configuration and employs cookie consent mechanisms compliant with GDPR. It uses Google reCAPTCHA to mitigate bot attacks and integrates a consent management platform (CookieYes) for privacy compliance. However, there is room for improvement in implementing additional security headers and publishing explicit security policies or incident response contacts. Overall, the website presents a low-risk profile with strong business credibility, good privacy compliance, and a secure technical foundation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving incident response transparency to further strengthen trust and security posture.

B

Bethel House of Whitewater

bethelhouseinc.org

53

Bethel House of Whitewater is a small nonprofit organization dedicated to preventing homelessness among local children and families. Founded in 1994, it offers a range of support programs including transitional housing, emergency financial assistance, case management, and a client toiletry pantry. The organization relies heavily on community donations and volunteers to fulfill its mission, positioning itself as a grassroots community pillar with a strong local presence. The website reflects this mission with clear calls to action for support and volunteering, and maintains active social media channels to engage the community. Technically, the website is built on the Duda platform, utilizing modern web technologies such as jQuery, service workers, and CDN hosting via Cloudfront. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Analytics are implemented via Snowplow, indicating some level of user behavior tracking, but privacy compliance is lacking as no privacy or cookie policies are present. From a security perspective, the site enforces HTTPS and uses service workers, but lacks important security headers and formal security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable or privacy protected, which is typical for nonprofits and does not raise immediate concerns. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security compliance. Strategically, Bethel House should prioritize implementing comprehensive privacy and cookie policies, improve security headers, and consider publishing a vulnerability disclosure or security.txt file to enhance trust and compliance. These steps will strengthen their security posture and align with best practices for nonprofit organizations handling sensitive client information.

F

Folkekirkens Nødhjælp

noedhjaelp.dk

59

Folkekirkens Nødhjælp is a well-established Danish non-profit humanitarian organization operating since 1922, focused on disaster relief, fighting inequality, and building resilient communities both in Denmark and internationally. The website reflects a professional and consistent brand presence with comprehensive content in Danish, targeting donors, volunteers, and stakeholders interested in humanitarian aid. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, uses modern JavaScript libraries such as Swiper.js, and integrates privacy-conscious analytics via Matomo. The site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR, demonstrating a mature approach to privacy and user data protection. However, the absence of publicly available WHOIS data due to privacy protection limits domain registration transparency. Security posture is solid with encrypted connections and no visible vulnerabilities, but could be improved by adding explicit security headers and publishing security policies or incident response contacts. Overall, the site is trustworthy, professional, and well-suited for its non-profit mission.

J

Jehovah’s Witnesses

jw.org

72

Jehovah’s Witnesses operate a comprehensive official website (jw.org) that serves as a global platform for religious education, Bible study, and community engagement. The site offers extensive multilingual content, including Bible access, publications, videos, and news, targeting a broad audience interested in their faith. The business model is non-profit, focusing on free distribution of religious materials and information. The website demonstrates a high level of professionalism, consistent branding, and excellent content quality.

C

CDS Co operatives

cds.coop

59

CDS Co-operatives is a charitable community benefit society based in the UK, established in 2001, focused on supporting co-operative and community enterprises. The website uses WordPress with the Divi theme and includes cookie consent mechanisms via CookieYes, indicating a basic level of digital maturity. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website content is safe and targeted at a general audience interested in co-operative development.

A

ADL

adl.org

66

ADL is a well-established non-profit organization focused on fighting antisemitism, extremism, and hate through education, advocacy, research, and legal action. The website reflects a mature digital presence with a modern Drupal 11 CMS, extensive use of analytics and marketing tools, and a professional design optimized for accessibility and mobile devices. Security posture is strong with HTTPS and security headers, though explicit security policies and vulnerability disclosure mechanisms are not publicly found. The domain WHOIS data is privacy protected, which is typical and justified for such organizations. Overall, the site demonstrates high trustworthiness and professionalism with no critical security or content issues detected.

R

RAND Corporation

rand.org

70

RAND Corporation is a large, well-established nonprofit research organization founded in 1948, focused on providing objective research and public policy analysis across a broad range of sectors including health, education, national security, and international affairs. The organization operates multiple research divisions both in the U.S. and internationally, serving government agencies, policymakers, and the public with evidence-based insights and solutions. The website reflects this mission with comprehensive content, expert commentary, and resources such as newsletters and podcasts. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including Adobe DTM for tag management, Google reCAPTCHA for form security, and Chartbeat for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and clear navigation. Privacy and terms of service are well documented, though cookie policy visibility could be improved. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and employs Adobe's tag management system. However, explicit security headers are not clearly visible in the HTML, and there is no published security policy or vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to query failure or privacy protection, but the website's legitimacy is supported by its consistent branding, professional content, and trust signals. Overall, RAND.org presents a trustworthy, professional, and secure online presence appropriate for a major nonprofit research institution. Strategic improvements could include publishing a dedicated security policy, enhancing cookie consent mechanisms, and adding a vulnerability disclosure channel to further strengthen trust and compliance.

U

unikART

unikart.at

46

unikART is a small non-profit association based in Austria dedicated to promoting artists from the Kärnten region by providing platforms for art exhibitions and community projects. Founded in 2014, the organization supports over 50 artists through various initiatives including exhibitions, memberships, and art catalog sales. The website is built on WordPress with WooCommerce integration for e-commerce capabilities, enhanced by modern web technologies such as GSAP and Lottie animations, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. Overall, the site is professional, user-friendly, and GDPR compliant, but the absence of WHOIS data and phone contact slightly reduces business credibility.

S

Stiftung Kinderheim Brugg

kinderheimbrugg.ch

51

Kinderheim Brugg is a Swiss non-profit institution under the Stiftung Kinderheim Brugg umbrella, providing residential, emergency, and educational services for children and youth in need. The organization operates multiple affiliated entities including Stift Olsberg and Familynetwork, offering a comprehensive range of social care and educational programs. The website is professionally designed, well-structured, and targets German-speaking Swiss audiences with clear navigation and relevant content. Technically, the site runs on GravCMS with modern web technologies and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response policies are absent. Overall, the site demonstrates a trustworthy and credible online presence for a medium-sized non-profit social care provider.

E

Ein Hoch auf Sensibilität! – Hochsensibilität Schweiz

sensibelhoch2.ch

50

The website www.hs-schweiz.ch hosts the podcast 'Sensibel hoch 2', focusing on high sensitivity and neurodiversity topics. It is operated by coaches Philippe Hollenstein and Bianca Braun, who provide expert insights and personal experiences. The site targets individuals with high sensitivity, their relatives, and interested young adults primarily in Switzerland. The business operates as a small non-profit educational and coaching entity with a strong digital presence through podcasts and social media. Technically, the site is built on WordPress using the Avada theme and integrates modern podcast players and SEO tools, delivering a good user experience with mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and explicit policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professional, and well-positioned in its niche.

Verein Tagesfamilien Glarnerland is a regional non-profit organization dedicated to providing qualified, individual, and family-supporting childcare services in the canton of Glarus, Switzerland. Their core activities include the mediation and support of childcare placements within family day care settings. The website reflects a focused mission targeting families and childcare providers within the region, supported by partnerships with local financial institutions and membership in relevant childcare associations. The business model is community-oriented and service-driven, emphasizing quality and regional engagement. Technically, the website is built on the TYPO3 CMS platform, utilizing common JavaScript libraries such as jQuery and unslider for interactive elements. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO. The absence of advanced analytics or tracking tools suggests a privacy-conscious approach, though cookie consent mechanisms are missing. From a security perspective, the site benefits from HTTPS encryption but lacks visible security headers and published security policies. No forms or direct contact emails are exposed on the homepage, reducing attack surface but also limiting direct user engagement. The WHOIS data aligns well with the website's regional and organizational identity, supporting legitimacy and trustworthiness. Overall, the website presents a professional and trustworthy front for a small non-profit organization, with recommendations to enhance security headers, privacy compliance, and mobile accessibility to further strengthen its digital maturity and user trust.

S

Schweizerisches Rotes Kreuz Kanton Glarus

srk-glarus.ch

45

The Schweizerisches Rotes Kreuz Kanton Glarus is a regional non-profit organization dedicated to humanitarian and social services within the Glarus canton of Switzerland. Their offerings include medical practice services, educational courses for caregivers, volunteer-driven transport and emergency call services, and various community support programs. The organization maintains a strong local presence and is ZEWO certified, underscoring its commitment to transparency and trust. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, providing a modern and responsive user experience. While the site is functional and well-structured, some technical aspects such as security headers and cookie consent mechanisms are missing or incomplete. The inclusion of Google Analytics is noted but currently uses a placeholder ID, indicating a need for configuration. From a security perspective, the site uses HTTPS (implied by the URL) but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional, serving its community effectively. However, improvements in security best practices and privacy compliance would enhance its posture and user trust.

F

Familienzentrum Region Baden

karussell-baden.ch

51

Familienzentrum Region Baden operates as a regional family center in Baden, Switzerland, providing a community meeting point and various services for families with preschool children. The website is professionally designed with consistent branding and targets local families, positioning itself as a trusted non-profit organization in the region. The business model focuses on community support and family services, with a clear local presence and physical address. Technically, the website uses modern frontend technologies such as Bootstrap and Slick Carousel, is mobile optimized, and employs HTTPS for secure communications. However, there is no evidence of a CMS or advanced hosting details. Security posture is moderate with HTTPS enabled but lacks explicit security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is present. Overall, the website is trustworthy and safe for general audiences, with room for improvement in privacy compliance and security best practices.

Elternverein Merenschwand is a small, non-profit community organization dedicated to supporting parents and children in the Merenschwand area of Switzerland. The website serves as an informational hub for community events, educational talks, and parent resources, emphasizing family engagement and local participation. The organization positions itself as a trusted local entity with a focus on community cohesion and family support services. Technically, the website is built on the ClubDesk CMS platform, utilizing modern JavaScript libraries such as jQuery, Owl Carousel, and Featherlight for interactive features. The site is mobile-optimized and includes accessibility considerations, though these could be enhanced further. Security posture is moderate, with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security policies and contact transparency are recommended.

F

Familynetwork - Institution der Stiftung Kinderheim Brugg

familynetwork.ch

52

Familynetwork is a Swiss non-profit institution under the Stiftung Kinderheim Brugg umbrella, providing social services focused on child and family welfare, including foster care, family support, and legal guardianship. The website is professionally designed using GravCMS, with good mobile optimization and clear navigation. It employs modern web technologies and includes a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and incident response information. Overall, the site is trustworthy and serves its target audience effectively.

B

Beratungsstelle für Unfallverhütung (BFU)

bfu.ch

72

The BFU (Beratungsstelle für Unfallverhütung) is a Swiss non-profit organization dedicated to accident prevention research, consultation, and public safety campaigns. The website serves as a comprehensive resource for accident prevention in various contexts such as road traffic, home, leisure, and sports. It targets the Swiss population, companies, and municipalities with educational content, safety products, and legal advice. The organization holds a strong market position as a leading authority in Swiss accident prevention. Technically, the website is built on ASP.NET Core with modern JavaScript libraries and integrates multiple analytics and marketing tools, all managed with user consent and privacy compliance. The site is well-optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS, security headers, and anti-forgery protections, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR and Swiss data protection standards.

R

Reformierte Kirchgemeinde Oensingen

ref-oensingen.ch

66

The website www.ref-oensingen.ch represents the Evangelical Reformed Church community of Oensingen-Kestenholz, Switzerland. It serves as an informational and event platform for local church members and visitors, providing details on services, religious ceremonies, and community events. The site is built on the kirchenweb.ch CMS platform and uses jQuery for client-side scripting. The content is well-structured, relevant, and family-friendly, targeting local community members. However, the site lacks visible contact details and social media presence, which could limit outreach and engagement. Technically, the website employs standard web technologies with moderate performance and basic mobile optimization. There is no evidence of advanced frameworks or hosting details. Security posture is moderate; HTTPS is used, but no explicit security headers or policies are detected. Privacy compliance is minimal, with a privacy page present but no cookie consent mechanism or GDPR compliance indicators. No terms of service or incident response policies are published. Overall, the site is trustworthy and professional for its purpose but could improve in security and privacy compliance. There are no signs of malicious content or blocking mechanisms. Strategic improvements in security headers, privacy policies, and contact transparency would enhance the site's credibility and user trust.

S

Stiftung Vita Parcours

zurichvitaparcours.ch

64

Stiftung Vita Parcours operates a website promoting outdoor fitness parcours in Switzerland, supported by Zurich Insurance and partners BFU and BASPO. The site targets the general public interested in health and fitness, providing tools such as parcours finders, training tracking, and a mobile app. The business model is non-profit, relying on sponsorship and partnerships. Technically, the website uses a modern but basic tech stack including jQuery, Bootstrap, and Selectize.js, with Google Analytics integrated under GDPR-compliant settings including IP anonymization and cookie consent mechanisms. The site is mobile optimized and presents a professional design with consistent branding. Security posture is moderate with room for improvement, notably in implementing security headers and explicit security policies. No critical vulnerabilities or blocking mechanisms were detected, and WHOIS data aligns well with the website's identity, supporting legitimacy. Overall, the site is trustworthy and professionally maintained, serving its community-focused mission effectively.

V

Verein für Jugend und Freizeit

vjf.ch

48

Verein für Jugend und Freizeit is a Swiss non-profit organization dedicated to supporting youth development, integration, and community work. The website presents clear information about its mission and key services, targeting children, youth, and local communities. The organization appears to be a small-sized entity with a local/regional focus. Technically, the website is built on Drupal 7 with jQuery and integrates Google Analytics and Google Tag Manager for tracking. The site is accessible, mobile-optimized, and has a good design and user experience, although accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enabled and IP anonymization in analytics, but lacks security headers and formal privacy or cookie policies. No contact information or incident response details are provided, which limits user trust and compliance. WHOIS data is consistent with the organization's claims, supporting legitimacy. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices.

P

Prowildtierschutz.ch

prowildtierschutz.ch

51

Prowildtierschutz.ch is a Swiss non-profit organization dedicated to wildlife protection, wild accident prevention, and public education. The website serves as an informational platform targeting the general public and stakeholders interested in wildlife safety and accident prevention. It offers resources such as training, awareness campaigns, and information about wildlife and accident reporting. The organization maintains a moderate market position within the niche of wildlife protection in Switzerland, leveraging social media channels like Facebook, Twitter (X), and YouTube to extend its outreach. Technically, the website is built on WordPress using the Divi theme, enhanced with plugins such as WooCommerce, Yoast SEO, Jetpack, and Complianz GDPR for cookie consent management. The infrastructure is supported by Automattic's CDN and hosting services, ensuring moderate performance and good mobile optimization. SEO practices are well implemented with structured data and meta tags, though accessibility features are basic. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. It uses security plugins to mitigate spam and bot activity. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is safe, professional, and trustworthy, with a clear focus on its mission. The absence of privacy and terms policies, as well as limited visible contact information, slightly reduce its privacy compliance and business credibility scores. Strategic enhancements in these areas would strengthen the site's security posture and user trust.

J

JFB Region Baden

jfbb.ch

60

JFB Region Baden is a regional non-profit organization based in Switzerland providing personal and financial advice and support to residents of the Baden region. The website serves as an informational and contact portal for community members seeking assistance. The organization positions itself as a trusted local service provider with a focus on social support. Technically, the website is built on the Wix platform using Wix Thunderbolt and standard web technologies, offering a moderate performance and good mobile optimization. Security posture is solid with HTTPS and security headers implemented, though privacy and cookie policies are missing, which is a compliance gap. Overall, the website is professional and trustworthy but could improve privacy compliance and incident response transparency.

The International Society for Animal Genetics (ISAG) is a non-profit scientific organization dedicated to advancing research and collaboration in molecular genetics of animals. The society organizes conferences, workshops, comparison tests, and publishes the official journal Animal Genetics. The website serves as a hub for members and researchers to access resources, membership services, and event information. The target audience primarily consists of scientists and researchers in the animal genetics field. Technically, the website uses basic web technologies including JavaScript and CSS with no detected modern frameworks or CMS. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is moderate with HTTPS implied but no visible security headers or advanced protections. Privacy and cookie policies are present but basic, with a consent mechanism implemented. Overall, the security posture is adequate for a non-profit scientific society but could be improved by implementing security headers and enhancing privacy compliance. The absence of WHOIS data is likely due to privacy protection, which is justified for this type of organization. No suspicious or malicious indicators were found. The website is trustworthy and serves its community effectively.

H

HEKS - Hilfswerk der Evangelisch-reformierten Kirche Schweiz

heks.ch

64

HEKS is a well-established Swiss non-profit organization affiliated with the Evangelical Reformed Church of Switzerland. It focuses on humanitarian aid, development projects, and social integration, with key thematic areas including climate justice, land and food rights, migration, and inclusion. The organization targets a broad audience including donors, partners, and beneficiaries, operating both nationally and internationally. The website reflects a mature digital presence with multilingual support and clear calls to action for donations and engagement. Technically, the website is built on Drupal 10 with Commerce 2, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Crazy Egg. The site is mobile-optimized, accessible, and SEO-friendly, demonstrating good digital maturity. Security measures include HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive privacy and cookie policy and consent mechanisms in place. Business credibility is high, supported by transparent contact information, certifications like ZEWO, and trust signals such as a whistleblowing platform and ACT Alliance membership. Overall, HEKS presents a trustworthy, professional, and secure online presence suitable for its non-profit mission. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen stakeholder confidence.

C

Conservative Institute of M. R. Stefanik

institute.sk

40

The Conservative Institute of M. R. Stefanik is a Slovak non-profit think tank dedicated to promoting conservative views on society, economics, law, and ethics. The website serves as a platform for disseminating research papers, lectures, events, and publications primarily targeting academics, policymakers, and conservative audiences in Slovakia and Europe. The organization maintains a modest but consistent online presence with a focus on conservative economic and social policy discourse. Technically, the website is built on the Metafox CMS platform, utilizing legacy JavaScript libraries such as jQuery 1.9.1 and Nivo Slider for UI elements. It integrates advertising through OpenX and Platon ad networks and employs Google Analytics and StatCounter for visitor tracking. The site is served over HTTPS with a moderate performance profile but lacks modern security headers and comprehensive privacy or cookie policies, indicating room for improvement in compliance and security posture. From a security perspective, the site benefits from HTTPS encryption and absence of exposed sensitive data but falls short in implementing security best practices such as security headers and updated libraries. No incident response or vulnerability disclosure information is publicly available. The WHOIS data aligns well with the website's identity, showing consistent registration details without privacy protection, supporting legitimacy. Overall, the website is functional and moderately professional but requires enhancements in privacy compliance, security hardening, and modernization of technical components to improve trust and resilience against emerging threats.

K

Konzervatívny inštitút M. R. Štefánika

konzervativizmus.sk

45

Konzervatívny inštitút M. R. Štefánika is a Slovak non-profit conservative think tank established in 2003. The organization focuses on research, policy analysis, publications, and educational projects aimed at promoting conservative values and ideas within Slovakia. The website serves as a platform for disseminating articles, hosting events, and engaging with the public and supporters. It maintains an active presence on social media platforms such as Facebook, YouTube, and LinkedIn. The organization targets Slovak-speaking audiences interested in conservative political thought and policy discussions. Technically, the website is built on WordPress CMS with a modern tech stack including jQuery, FontAwesome, and various plugins for content management, social media integration, and newsletter subscriptions. The site is hosted on servers associated with the PLAT-0008 registrar and uses HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented. From a security perspective, the site uses HTTPS and has a cookie consent mechanism in place, indicating GDPR compliance. However, advanced security headers are not explicitly detected, and no published security or incident response policies are found. No vulnerabilities or suspicious activities are evident in the provided content. The WHOIS data confirms a consistent and legitimate domain registration matching the organization's profile. Overall, the website presents a professional and trustworthy online presence for a small non-profit think tank. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the site's security posture and compliance.

T

The Frick Collection

frick.org

67

The Frick Collection is a well-established non-profit art museum located in New York City, specializing in Renaissance to 19th-century art. The website serves as a comprehensive digital portal offering information on exhibitions, collections, educational programs, and membership opportunities. It targets art enthusiasts, researchers, students, and donors, positioning itself as a reputable cultural institution with a strong online presence. Technically, the website is built on Drupal 10, leveraging modern front-end technologies such as Tailwind CSS and Swiper.js for responsive design and user experience. It integrates Google Analytics and Tag Manager for visitor tracking and marketing insights. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and includes standard security headers, indicating a solid baseline security posture. However, the absence of a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The WHOIS data is unavailable or malformed, which slightly impacts domain trust assessment but does not detract significantly from the overall credibility given the professional website content. Overall, the Frick Collection website is a professional, secure, and user-friendly platform that effectively supports the institution's mission and audience engagement. Strategic enhancements in security transparency and domain registration clarity would further strengthen trust and compliance.

H

Hrvatsko društvo sudskih vještaka i procjenitelja

sudski-vjestaci.hr

53

Hrvatsko društvo sudskih vještaka i procjenitelja (HDSVIP) is a Croatian non-profit professional association dedicated to the advancement of court experts and appraisers. Established in 2004, it serves as a voluntary, non-governmental, and non-partisan organization focused on improving the role and institution of court experts within the judiciary and related institutions. The association is a recognized member of international bodies such as EuroExpert, HUM, and TEGoVA, enhancing its credibility and network. The website provides information about the association's initiatives, news, events, and resources for members and the public. Technically, the website is built using standard HTML5, CSS, and JavaScript with jQuery 1.8.3. It is hosted behind Cloudflare DNS services, suggesting HTTPS usage, although explicit security headers are not visible in the provided data. The site has a moderate performance profile with basic mobile optimization and accessibility features. Navigation is clear and content is professionally presented, targeting professionals in the judiciary and appraisal sectors primarily in Croatia. From a security perspective, the site shows some good practices such as using Cloudflare and secure form submission for member login. However, the use of an outdated jQuery version and absence of visible security headers indicate potential vulnerabilities. There is no visible privacy or cookie policy, which is a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is trustworthy and professional but would benefit from updates to its security posture and privacy compliance. Strategic improvements in these areas would enhance user trust and regulatory adherence.

A

Association for Progressive Communications (APC)

giswatch.org

57

Global Information Society Watch (GISWatch) is a reputable non-profit initiative supported by the Association for Progressive Communications (APC) and Sida. It focuses on publishing comprehensive reports and fostering civil society advocacy around digital rights, internet governance, and information society issues globally. The website is multilingual and provides extensive resources and author profiles, targeting civil society, researchers, and policy makers. Technically, the website is built on Drupal 10, uses modern JavaScript libraries such as Leaflet.js for mapping, and employs Matomo analytics with privacy-conscious settings (no cookies, Do Not Track respected). The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and domain registration locked against unauthorized changes. However, DNSSEC is not enabled, and there is no published security or incident response policy. Privacy compliance is basic, lacking a cookie consent mechanism. Contact information is limited to a contact form, with no explicit emails or phone numbers. Overall, the website presents a trustworthy and professional platform for its non-profit mission, with recommendations to enhance privacy compliance, security transparency, and contact accessibility.

A

Association for Progressive Communications

apc.org

10

The Association for Progressive Communications (APC) is a well-established global non-profit organization dedicated to advancing human rights, digital inclusion, and internet governance through advocacy, grants, and community support. Their website reflects a mature digital presence with comprehensive content targeting civil society organizations and digital rights advocates worldwide. Technically, the site is built on Drupal 10, employs modern web technologies, and integrates privacy-conscious analytics tools such as Matomo and Plausible. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS registrant data is mitigated by the professional and consistent branding and content, indicating legitimacy. Overall, the site demonstrates a strong commitment to privacy, accessibility, and user experience, positioning APC as a credible and trustworthy entity in the non-profit digital rights sector.

W

Wir helfen Kindern e.V.

whk-online.de

64

Wir helfen Kindern e.V. is a German non-profit organization dedicated to supporting disadvantaged children through various charitable projects focusing on child cancer aid, abuse prevention, poverty alleviation, education, and integration. Established in 1998, the organization has a strong regional presence and a history of supporting over 100 projects with more than one million euros in donations. The website serves as an information and donation platform, targeting donors, volunteers, and supporters interested in child welfare. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, Slider Revolution, and Borlabs Cookie for GDPR-compliant cookie management. It integrates Google Analytics and Google Tag Manager for analytics and marketing purposes. The site is mobile-optimized with a moderate performance profile and good SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing a long-standing domain registration appropriate for the organization's history. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for its charitable mission.

F

Fundacja TV Puls „Pod Dębem”

fundacjapoddebem.pl

61

Fundacja TV Puls „Pod Dębem” is a Polish non-profit organization dedicated to supporting needy seniors in care facilities across Poland. Founded in 2013 by Telewizja Puls Sp. z o.o., the foundation operates through donations, corporate funding, and tax 1.5% contributions. The website presents a professional and consistent brand image, with clear navigation and relevant content targeting donors, partners, and the general public interested in senior welfare. The foundation maintains a strong partnership network and active social media presence, enhancing its outreach and credibility. Technically, the website is built on WordPress, leveraging common plugins such as Cookie Law Info for GDPR compliance and Google Analytics for visitor tracking. The site is hosted by OVH SAS, a reputable provider, and enforces HTTPS with good SSL configuration. Mobile optimization and SEO practices are good, though accessibility could be improved. The cookie consent mechanism is comprehensive, offering granular user control and transparency. From a security perspective, the site benefits from HTTPS and cookie consent but lacks explicit security headers in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows a consistent and legitimate domain registration with a long expiry date, supporting the foundation's credibility. No incident response or security policy pages were found, indicating an area for potential enhancement. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, serving its mission effectively. Strategic improvements in security headers, accessibility, and incident response transparency would further strengthen its posture.

S

Sbírka Bílá pastelka

bilapastelka.cz

57

The website bilapastelka.cz represents a well-established charitable campaign focused on supporting people with visual impairments in the Czech Republic. It operates as a non-profit initiative, encouraging donations and volunteer participation to fund training programs, guide dog services, and employment opportunities for the visually impaired. The site is professionally designed, with clear navigation and integration of donation widgets, social media links, and volunteer statistics, reflecting a mature digital presence. Technically, the website is built on the Webnode CMS platform, leveraging modern web technologies including HTTPS, CDN delivery via Amazon Cloudfront, and analytics tools such as Google Analytics and Google Tag Manager. The site demonstrates good mobile optimization and basic accessibility features, although there is room for improvement in security headers and explicit privacy documentation. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism with granular user options, aligning with GDPR requirements. However, the absence of explicit privacy policies, terms of service, and security.txt files indicates gaps in compliance and vulnerability disclosure practices. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional front for its charitable mission, but the lack of WHOIS data and formal privacy documentation slightly reduces its trust score. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance its security posture and compliance standing.

B

benevol Schweiz

dossier-freiwillig-engagiert.ch

49

The website 'Dossier freiwillig engagiert' is a Swiss non-profit digital platform managed by benevol Schweiz that recognizes and documents voluntary and unpaid engagement. It serves volunteers and organizations by providing a national quality label and a digital dossier to showcase volunteer experience and competencies. The platform is positioned as a recognized resource within Switzerland's voluntary sector, supported by reputable partners such as benevol Schweiz and SAJV. The site is professionally designed, multilingual, and provides clear navigation and relevant content tailored to its audience. Technically, the website employs modern JavaScript libraries including jQuery and Numeral.js, integrates Google Tag Manager and Google Analytics for tracking, and uses HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No CMS or hosting provider details are explicitly detected. The site uses external scripts responsibly and includes a cookie consent mechanism compliant with GDPR. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerability disclosure or security.txt files are present. The WHOIS data aligns well with the website's claims, showing consistent registrant information and domain legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website demonstrates a solid security posture and good privacy compliance, with room for improvement in security policy transparency and technical security headers. The business credibility is high due to clear contact information, partner endorsements, and professional presentation. The risk level is low, and the site is suitable for its intended audience without any adult or questionable content.

benevol-jobs.ch is a well-established Swiss non-profit volunteering platform owned by benevol Switzerland. It serves as the largest Swiss platform connecting volunteers with nonprofit organizations, offering a wide range of volunteer opportunities across various sectors and regions in Switzerland. The platform is self-financed through service sales and partnerships, maintaining a strong market position in the non-profit volunteering domain. Technically, the website is built on Drupal CMS with integrations such as Google Tag Manager, Google Maps API, and LiveChat, reflecting a modern and functional digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security-wise, the site uses HTTPS and secure forms but lacks some advanced security headers and explicit incident response policies, indicating room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and a solid business credibility profile.

B

benevol Winterthur

benevol-winterthur.ch

56

benevol Winterthur is a Swiss non-profit organization serving as the primary regional contact point for volunteer organizations, associations, and individuals interested in volunteering in Winterthur. Their services include consulting, networking, training, volunteer job listings, recognition, standards, informational leaflets, and public relations. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their mission. Technically, the site uses modern technologies including Google Tag Manager, Google Analytics, CookieYes for consent management, and Cloudflare Turnstile for bot protection, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies could be improved. Privacy compliance is well addressed with a detailed cookie consent mechanism and a comprehensive privacy policy in German. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and partner affiliations.

B

benevol Thurgau

benevol-thurgau.ch

56

benevol Thurgau is a regional non-profit organization specializing in volunteer work facilitation within the canton of Thurgau, Switzerland. The organization focuses on promoting volunteerism, providing advisory services, offering training, and supporting local organizations. Their market position is that of a trusted regional specialist with strong community ties and partnerships. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and a cookie consent management system, ensuring compliance with privacy regulations. The use of Cloudflare Turnstile captcha enhances security against automated abuse. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers are missing and no explicit security policy is published. Overall, the site is well-structured, accessible, and trustworthy, with moderate tracking consistent with its service nature.

B

benevol St. Gallen

benevol-sg.ch

58

benevol St.Gallen is a well-established non-profit organization serving as the primary contact point for volunteer organizations, associations, and individuals interested in volunteering in the St.Gallen region of Switzerland. The website effectively communicates its mission, services, and community engagement through a professional and well-structured digital presence. It offers a variety of services including consulting, job boards, training, and rental spaces, supported by a network of over 300 partners. The organization maintains a strong market position as a regional leader in volunteer facilitation. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics, and CookieYes for consent management, alongside Cloudflare's Turnstile captcha for security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through comprehensive cookie consent mechanisms and GDPR-aligned privacy policies. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, making it a reliable resource for its target audience.

B

benevol Schaffhausen

benevol-sh.ch

55

benevol Schaffhausen is a regional non-profit organization specializing in volunteer coordination and support services in the Schaffhausen region of Switzerland. As a member of the national benevol Schweiz network, it provides professional services and acts as a key contact point for volunteers, institutions, churches, associations, authorities, political bodies, and the general public. The website clearly communicates its mission and services, targeting individuals and organizations interested in volunteer engagement. The technical infrastructure of the website is modern and well-maintained, utilizing technologies such as Laravel Livewire, Google Tag Manager, Google Analytics, and CookieYes for consent management. The site is hosted behind Cloudflare, leveraging security features like Turnstile captcha to mitigate bot traffic. The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks publicly available security policies and incident response information, which could enhance trust and preparedness. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, reinforcing the legitimacy of the domain. Overall, benevol Schaffhausen presents a trustworthy and professional online presence suitable for its non-profit mission. Strategic improvements in publishing security policies and incident response contacts would further strengthen its security posture and user trust.

B

benevol Luzern

benevol-luzern.ch

58

benevol Luzern is a specialized non-profit organization dedicated to supporting and promoting volunteer work within the canton of Luzern, Switzerland. The website clearly communicates its mission to provide professional frameworks, recognition, and visibility for volunteer activities. It offers services such as consulting, knowledge transfer, volunteer matching via the benevol-jobs.ch platform, and organizes courses and events. The organization targets local entities including organizations, associations, municipalities, and individual volunteers. The site reflects a strong regional presence and partnership with the national benevol network. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, CookieYes for consent management, and Cloudflare Turnstile for bot protection, indicating a mature digital infrastructure. The site is mobile-optimized, fast-loading, and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policy and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its audience.

B

benevol Graubünden

benevol-gr.ch

56

benevol Graubünden is a Swiss non-profit organization dedicated to promoting and facilitating volunteer work within the canton of Graubünden. The organization provides advisory services, volunteer placement, and training courses for both volunteers and organizations. It holds a strong regional presence and is supported by various local partners. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in German. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics, and a cookie consent management system (CookieYes). Security measures include HTTPS enforcement and bot protection via Cloudflare Turnstile captcha. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. Contact information and social media presence enhance business credibility. No critical security or compliance issues were detected.