Non-profit security reports

Z

Zákulisí, z.s.

venuse-ve-svehlovce.cz

0

Divadlo Venuše ve Švehlovce is a small, independent cultural venue and non-profit organization based in Prague, Czech Republic, focused on contemporary live art and theater with an emphasis on original artistic creation and social responsibility. The organization has been active since 2014 and offers a diverse program of theatrical performances, festivals, and community cultural events. The website is professionally designed using WordPress and modern web technologies, providing good user experience and mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and the site uses Google Analytics for visitor tracking. Security posture is adequate with HTTPS enforced and cookie consent mechanisms, but lacks advanced security headers and explicit incident response information. The absence of WHOIS data reduces domain registration trust, but the website content and contact information support legitimacy. Overall, the site is a credible and well-maintained digital presence for a cultural non-profit.

F

Fundación La Contienda Dehesa Sostenible

fundacionlacontienda.es

0

Fundación La Contienda Dehesa Sostenible is a Spanish non-profit organization dedicated to the preservation of the Iberian pig and its natural habitat, the dehesa. The foundation operates an innovative sustainable farming model and provides educational, research, and promotional services focused on this sector. The website reflects a regional leader position in sustainable agriculture within the Sierra de Aracena and Picos de Aroche natural park. Technically, the site is built on WordPress using the Divi theme, with modern web technologies and GDPR compliance mechanisms in place. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the website is professional, trustworthy, and content-rich, targeting industry members, researchers, and the general public interested in Iberian pig farming and sustainability.

F

Fundación Cajasol

fundacioncajasol.com

0

Fundación Cajasol is a well-established non-profit cultural and social foundation based in Andalucía, Spain, founded in 2006. It offers a broad range of cultural events, educational programs, and social initiatives, positioning itself as a key regional player in these sectors. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to a general audience interested in culture and education. Technically, the site is built on WordPress, hosted on Microsoft Azure DNS infrastructure, and employs common security and compliance plugins such as Wordfence and GDPR Cookie Compliance. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness.

P

Pesticide Action Network UK

pan-uk.org

0

Pesticide Action Network UK (PAN UK) is a non-profit organization dedicated to eliminating hazardous pesticides, reducing pesticide dependence, and promoting ecologically sound alternatives to chemical pest control. The organization targets environmental advocates, policymakers, and the general public interested in sustainable agriculture and environmental health. The website reflects a focused mission with clear messaging and consistent branding, positioning PAN UK as a credible environmental advocacy group within the UK. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, ConvertKit, and Instagram Feed, indicating a moderate level of digital maturity. The site employs HTTPS and includes analytics tools like Google Analytics and Hotjar for user behavior insights. Mobile optimization and SEO practices are good, though accessibility features could be enhanced. From a security perspective, the site uses HTTPS but lacks visible security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages found in the provided data. WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness but does not negate the legitimacy suggested by the website content. Overall, PAN UK presents a professional and trustworthy online presence with room for improvement in privacy transparency, security headers, and WHOIS data clarity. Strategic enhancements in these areas would strengthen their security posture and compliance standing.

P

POP

pop-incub.org

0

POP is a French social incubator focused on supporting socially engaged entrepreneurs and collectives in the Nouvelle Aquitaine region. The organization offers structured accompaniment programs to help project leaders develop skills, structure their initiatives, and build networks to create socially impactful enterprises. The website reflects a strong regional presence with clear mission statements and community engagement. Technically, the site is built on WordPress with modern plugins such as Elementor and Yoast SEO, hosted by OVH sas, a reputable French hosting provider. Security measures include HTTPS and Google reCAPTCHA v3, though additional HTTP security headers and DNSSEC are recommended to enhance protection. Privacy compliance is partially addressed with a privacy policy but lacks visible cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

E

Emergence Périgord

emergence-perigord.fr

0

Emergence Périgord is a regional non-profit incubator focused on supporting social and solidarity economy (ESS) projects and social innovation in the Dordogne region of France. The organization offers structured programs including pre-incubation, incubation, and a 'Fabrique à initiatives' to help entrepreneurs validate ideas, develop solutions to social and environmental challenges, and launch impactful enterprises. The website is professionally designed using WordPress and the Divi theme, with good mobile optimization and clear navigation. However, the absence of a published privacy policy and terms of service, as well as missing WHOIS data, limits the overall trust and compliance posture. The site uses HTTPS and implements a cookie consent mechanism, but lacks advanced security headers and incident response information.

P

Perfas - Performing Artists Association South Tyrol

perfas.org

0

Perfas - Performing Artists Association South Tyrol is a non-profit organization founded in 2021 that represents professional performing artists across all language groups in South Tyrol, Italy. The association advocates for the interests of its members, supports cultural and socio-political development, and offers networking and informational services. The website is well-structured, professionally designed, and optimized for SEO and accessibility, leveraging WordPress with modern plugins such as Elementor and Yoast SEO. Security posture is good with HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though additional security headers and policies could enhance protection. WHOIS data is unavailable or malformed, limiting domain legitimacy verification, but the website content and partner affiliations suggest a trustworthy entity. Overall, the site presents a professional and credible digital presence for a regional cultural association.

C

Cirkuscentrum

manegen.org

0

The website represents Cirkuscentrum, a cultural center focused on circus, variety, and street performance arts in Sweden. It serves a niche audience interested in these art forms and operates likely as a small non-profit or cultural organization. The website is built on WordPress using Elementor and the JupiterX theme, hosted by One.com, and employs modern web technologies such as jQuery and Font Awesome. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation. Security posture is basic with HTTPS enabled but lacks important security headers and DNSSEC, and no privacy or cookie policies are present. No contact information or incident response details are provided, which limits trust and compliance. Overall, the domain registration is consistent and legitimate, matching the organization's profile and history.

A

Asocijacija Kulturanova

kulturanova.org

0

Kulturanova is a Serbian non-profit cultural association established in 2009, focused on promoting intercultural dialogue and youth creativity through artistic education, cultural production, and public policy advocacy. The organization operates multiple cultural programs and events, including the TAKT festival, targeting youth and cultural professionals primarily in Novi Sad. The website is built on WordPress with WooCommerce integration, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain transfer protection, though lacking advanced security headers and formal privacy or cookie policies. Overall, the site presents a professional and trustworthy image consistent with its cultural mission.

F

Független előadó‑művészeti szövetség

fesz.org

0

The Független Előadó-művészeti Szövetség (FESZ) is a Hungarian non-profit organization dedicated to supporting independent performing arts creators and groups. The website serves as a professional platform to communicate their mission, activities, membership, and projects. The site is built on Drupal 11 and integrates modern analytics and tracking tools such as Google Tag Manager and Barion Pixel. While the website is well-structured and content-rich, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. The security posture is adequate with HTTPS enforced, but could be improved by adding security headers and publishing security policies. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection.

B

Bundesverband Freie Darstellende Künste e.V.

darstellende-kuenste.de

0

The Bundesverband Freie Darstellende Künste e.V. (BFDK) is a prominent non-profit umbrella organization representing approximately 27,000 free performing arts professionals in Germany. The website serves as a comprehensive platform offering news, projects, advocacy information, and resources tailored to artists, cultural policymakers, and networks within the free performing arts sector. The organization is well-positioned nationally, supported by the German Federal Government's cultural office, and actively engages its community through multiple projects and social media channels. Technically, the website is built on Drupal 10, leveraging modern web technologies including Alpine.js and Matomo for analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs a robust cookie consent mechanism ensuring GDPR compliance, reflecting a mature approach to privacy and user data protection. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data aligns with the website's claims, showing consistent domain registration and no privacy protection, supporting legitimacy. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for a cultural non-profit organization. Strategic improvements could include enhancing security headers and publishing a formal security policy to further strengthen trust and compliance.

E

Esittävän taiteen vapaat yhteisöt ry

teatterikeskus.fi

0

Esittävän taiteen vapaat yhteisöt ry is a Finnish national non-profit organization representing professional communities in the performing arts sector, including circus, dance, and theatre. The website serves as an information and service portal for its approximately 50 member communities, focusing on advocacy, events, and member services. The organization positions itself as a key actor in the Finnish performing arts landscape, providing support and representation for independent performing arts groups. Technically, the website is built on the Squarespace platform, leveraging standard web technologies such as jQuery and Typekit fonts, with integration of Mailchimp for marketing and communication. The site is well-structured, mobile-optimized, and uses HTTPS with HSTS for secure communications. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance and user trust. Contact information is primarily via social media channels, with no direct email or phone contacts visible. Security posture is strong with no visible vulnerabilities or exposed sensitive data. Overall, the site is professional and trustworthy but could improve compliance and transparency aspects.

I

Interessengemeinschaft Freie Theaterarbeit

freietheater.at

0

Interessengemeinschaft Freie Theaterarbeit is a non-profit organization based in Austria dedicated to supporting independent theater artists and cultural workers. The website serves as a hub for information, advocacy, and community engagement, offering news, newsletters, workshops, and social insurance subsidy programs. It holds a reputable position within the Austrian and European independent performing arts sector, with affiliations such as the European Association of Independent Performing Arts (EAIPA). The target audience includes artists, theater groups, and cultural professionals seeking resources and support in the independent theater domain. Technically, the website is built on WordPress with modern plugins like Elementor, Contact Form 7, and GDPR compliance tools such as Complianz. It uses HTTPS with a good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design that supports user experience and accessibility at a basic level. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's Austrian cultural focus, showing consistent registration details and no privacy protection, which is appropriate for this type of organization. Overall, the website presents a trustworthy, professional, and compliant digital presence for a small non-profit cultural entity. Strategic improvements could include enhancing security headers, publishing a security policy, and formalizing vulnerability disclosure processes to further strengthen security posture and trust.

O

Oriental Bird Club

orientalbirdclub.org

0

The Oriental Bird Club is a small, established non-profit organization dedicated to the conservation of birds in the Oriental region of Asia. It supports conservation projects primarily through grants and publications, targeting birders, ornithologists, and conservationists worldwide. The website is professionally designed using Squarespace, featuring rich content including news, events, and educational resources. The organization maintains an active social media presence and collaborates with reputable partners such as the Natural History Museum in London. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, but could improve security headers and privacy policies. WHOIS data is unavailable or malformed, which slightly impacts domain trust but does not detract from the organization's legitimacy based on content and branding.

A

Arcus Foundation

arcusfoundation.org

0

Arcus Foundation is a well-established non-profit organization focused on advancing LGBT social justice and the conservation of great apes and gibbons. The website reflects a mature digital presence with comprehensive content, including grants, educational resources, and advocacy materials targeting activists, conservationists, and social justice communities. The foundation positions itself as a key player in its niche with a consistent brand and professional presentation. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and integrates third-party services like Google Tag Manager and CookieYes for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the site demonstrates a strong commitment to privacy, accessibility, and user experience, making it a trustworthy platform for its audience.

C

Chances for Nature

chancesfornature.org

0

Chances for Nature is a small non-profit organization established in 2011, dedicated to supporting people and protecting nature through environmental and social initiatives. The website is built on WordPress using the Divi theme, reflecting a moderate level of digital maturity with good design and mobile optimization. The technical infrastructure is standard for a non-profit, with HTTPS enabled and basic cookie consent mechanisms in place. However, there is room for improvement in security practices, such as enabling DNSSEC and implementing security headers. The absence of explicit privacy policies, terms of service, and contact information reduces transparency and may affect user trust. Overall, the website is functional and professional but would benefit from enhanced compliance and security documentation.

I

International Trademark Association

inta.org

0

The International Trademark Association (INTA) operates as a large, well-established global non-profit organization dedicated to supporting trademarks and related intellectual property. It serves a broad audience of brand owners and IP professionals through advocacy, events, resources, and professional development programs. The organization maintains a strong market position as the largest network of trademark professionals worldwide, with a membership-based business model emphasizing community and education. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Algolia Search, and GDPR compliance plugins. The site demonstrates good performance, excellent mobile optimization, and strong SEO practices. The presence of comprehensive privacy and cookie policies with consent mechanisms reflects a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and employs cookie consent management. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. The WHOIS data is unavailable or privacy protected, which is typical for organizations of this nature and does not detract from legitimacy. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the organization's mission and audience. Strategic recommendations include enhancing visible security headers and continuous monitoring of third-party scripts to maintain security and compliance.

C

Citizen Conservation Foundation

citizen-conservation.org

0

Citizen Conservation Foundation operates a German-based non-profit network dedicated to species conservation through coordinated breeding programs involving both institutional and private animal keepers. The organization leverages community engagement, scientific collaboration, and educational outreach to combat species extinction. The website reflects a well-established entity founded in 2017, with a clear mission and active social media presence. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. Privacy compliance is strong, with comprehensive policies and GDPR-aligned consent management. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

S

Stiftung Artenschutz

stiftung-artenschutz.de

0

Stiftung Artenschutz is a German non-profit organization dedicated to the conservation of endangered animal species and their habitats. It operates as a collaborative initiative involving zoological gardens, animal parks, and conservation organizations. The website serves as an information and communication platform to promote its conservation projects, foster public awareness, and facilitate donations. The organization holds memberships in reputable bodies such as the IUCN and adheres to transparency standards, enhancing its credibility in the conservation sector. Technically, the website is built on the SilverStripe CMS platform, utilizing jQuery and Flexslider for interactive elements. It is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR. The site uses HTTPS exclusively, ensuring secure data transmission. However, some modern security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks advanced security headers and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, showing a legitimate domain setup without privacy protection, supporting trustworthiness. Overall, Stiftung Artenschutz presents a professional, trustworthy, and secure online presence suitable for its non-profit conservation mission. Strategic improvements in security headers and transparency around security policies could further enhance its posture and stakeholder confidence.

T

Tierpark Bochum gGmbH

tierpark-bochum.de

0

Tierpark Bochum gGmbH operates a well-established zoological park and environmental education center located in Bochum, Germany. The website provides comprehensive information about the park's animal exhibits, educational programs, events, and conservation efforts. The organization targets families, schools, and tourists, positioning itself as a regional leader in non-profit zoological and educational services. The site is professionally designed with consistent branding and high-quality content in German, emphasizing accessibility and inclusion. Technically, the website is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and includes modern web technologies and accessibility widgets. Security posture is strong with HTTPS, cookie consent, and disabling of tracking cookies in analytics. However, there is no public incident response or vulnerability disclosure information. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact and business information.

I

International Union for Conservation of Nature and Natural Resources (IUCN)

iucn.org

0

IUCN is a globally recognized non-profit organization dedicated to nature conservation and sustainable development. It operates as the world's largest environmental network, providing scientific data, policy guidance, and direct conservation efforts. The website reflects a mature digital presence with comprehensive content, multilingual support, and clear navigation tailored to a diverse audience including governments, NGOs, and the public. Technically, the site is built on Drupal 10, uses modern tracking and consent management tools, and is hosted with reputable providers ensuring good performance and security. Security posture is strong with HTTPS, domain locking, and cookie consent, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

F

FNAB (Fédération Nationale d'Agriculture Biologique)

agribiolien.fr

0

Agribiolien.fr is a French-language online platform dedicated to organic farmers, providing a specialized marketplace for posting and searching bio-certified agricultural announcements such as sales of forage, land, animals, and agricultural equipment. The platform is supported by the FNAB (Fédération Nationale d'Agriculture Biologique) and partners with Agence Bio, positioning itself as a niche service within the organic agriculture sector in France. The website offers a user-friendly interface with search filters by region, department, and product categories, and includes a video presentation to assist users. Technically, the site employs standard web technologies including jQuery and Bootstrap, with moderate performance and good mobile optimization. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and explicit incident response policies. The absence of WHOIS data suggests privacy protection, which is reasonable for this non-profit affiliated site. Overall, Agribiolien.fr demonstrates a solid business and technical foundation with room for security enhancements.

S

Species360

species360.org

0

Species360 is a reputable non-profit organization specializing in providing a global database and information system for zoos, aquariums, and wildlife conservation entities. Their platform supports animal data management and conservation efforts worldwide, positioning them as a leader in zoological data services. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to their specialized audience. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and maintaining good performance and mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, although DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the domain registration details align well with the organization's history and legitimacy, supporting a high trust score.

U

Unie českých a slovenských zoologických zahrad

ucszoo.com

0

The Unie českých a slovenských zoologických zahrad (UCSZOO) website serves as the official online presence for a recently established non-profit organization representing 18 zoological gardens across Czechia and Slovakia. The organization focuses on coordinating conservation efforts, animal exchange programs, educational campaigns, and professional development among member zoos. The website is built on WordPress using the Divi theme and includes several plugins for enhanced functionality, including translation services. The site is well-branded and professionally designed, targeting zoo professionals and the general public interested in nature conservation. However, it lacks explicit privacy and cookie policies, which are important for compliance with data protection regulations.

C

Chráníme mořské želvy z.s.

morskezelvy.cz

0

Chráníme mořské želvy z.s. is a Czech Republic based non-profit organization dedicated to the protection and conservation of marine turtles, primarily in Indonesia and Sri Lanka, with educational outreach in the Czech Republic. The organization focuses on protecting turtle nesting sites, relocating eggs to safety, releasing hatchlings, and educating local communities and children about environmental stewardship. Their market position is niche within marine conservation, supported by partnerships with governments, universities, and volunteers. The website demonstrates a good level of content quality and user engagement through social media and donation transparency. Technically, the site uses common web technologies such as jQuery, Google Analytics, and MailChimp, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled and some privacy consent mechanisms, but lacks advanced security headers and detailed privacy policies. WHOIS data is unavailable, which reduces domain trustworthiness, but the website content and social presence support legitimacy. Overall, the site is professional and trustworthy for its non-profit mission, though improvements in security and compliance documentation are recommended.

NRW Partner Zoo is a consortium of 12 major zoos and animal parks in North Rhine-Westphalia, Germany, focused on conservation, education, and providing visitor benefits such as discounted entry. The website is well-structured, informative, and targets families, zoo visitors, and conservation enthusiasts. Technically, it uses modern front-end frameworks like Bootstrap and jQuery, with responsive design and conditional Google Analytics tracking respecting user consent. Security posture is moderate with cookie consent implemented and anonymized analytics, but lacks explicit security headers and incident response policies. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and strong partner representation.

E

European Association of Zoos and Aquaria (EAZA)

eaza.net

0

The European Association of Zoos and Aquaria (EAZA) operates a professional and comprehensive website serving as a hub for over 400 member zoos and aquariums across Europe and Western Asia. The organization focuses on species conservation, animal welfare, education, research, and advocacy. The website is built on modern technologies including Gatsby and React, with a headless CMS (Strapi) backend, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are present and indicate GDPR compliance, though direct contact emails and phone numbers are not publicly listed, relying instead on contact forms. Security posture is generally good with HTTPS enforced, but lacks some advanced security headers and explicit incident response information. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website content and branding strongly indicate a legitimate and established non-profit entity. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with recommendations to improve security headers and domain registration transparency.

V

VdZ - Verband der Zoologischen Gärten e.V.

vdz-zoos.org

0

The Verband der Zoologischen Gärten (VdZ) is a reputable non-profit association representing 71 scientifically managed zoos across Germany, Austria, Switzerland, and Spain. The organization focuses on species conservation, animal welfare, education, scientific research, and advocacy. The website reflects a professional and consistent brand presence with comprehensive content targeting zoo visitors, conservationists, researchers, and policymakers. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements could be made by enabling DNSSEC and adding security headers. No critical vulnerabilities or suspicious patterns were detected. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

F

FaniMani

fanimani.pl

0

FaniMani.pl is a well-established Polish platform founded in 2014 that enables users to support social organizations through their online shopping activities. The website acts as an affiliate donation platform, partnering with over 1800 online stores and more than 12,500 charitable organizations. It offers browser extensions and mobile applications to facilitate user participation seamlessly. The platform enjoys a strong market position in Poland's charitable e-commerce niche, supported by a professional, well-designed website and extensive partner network. Technically, the site leverages a modern technology stack including Django backend, WordPress CMS, and integrates multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, TikTok Pixel, and Facebook Pixel. Cookie consent is managed via CookieYes, ensuring GDPR compliance with granular user consent options. Hosting is provided by OVH SAS, a reputable provider, and the site uses HTTPS with good SSL configuration. From a security perspective, the platform demonstrates good practices including CSRF protection, secure cookies, and use of reCAPTCHA. However, some security headers are not explicitly detected and DNSSEC is not enabled, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear policies and consent mechanisms. Overall, FaniMani.pl presents a low-risk profile with a high level of professionalism, compliance, and technical maturity. Strategic recommendations include enhancing security headers, enabling DNSSEC, and publishing explicit security and incident response policies to further strengthen trust and resilience.

F

Fundacja FaniMani

fanipay.pl

0

FaniPay.pl is a specialized online payment platform tailored for foundations and associations in Poland, enabling them to collect donations securely and efficiently. Operated by Fundacja FaniMani since 2016, it integrates with the FaniMani platform and offers features such as simple registration, transparent fees, daily payouts, and donor data access. The platform enjoys trust from over 12,500 NGOs and partners with reputable payment processors like Autopay and Tpay. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and secure forms, though improvements are needed in DNSSEC and security headers. Privacy compliance is partial due to the absence of a privacy policy page, but cookie consent is implemented. Overall, the site demonstrates a mature business model with strong credibility in the non-profit sector.

L

Les Enfoirés

enfoires.fr

0

Les Enfoirés is a prominent French non-profit organization focused on social aid and fundraising through charity concerts and merchandise sales. The website serves as the official platform to engage supporters, partners, and the general public with information about events, news, and donation opportunities. The organization leverages a modern WordPress-based infrastructure with integrations such as Google Tag Manager and OneTrust for cookie consent, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. The absence of WHOIS data limits domain trust verification but does not detract from the site's apparent legitimacy and professional presentation.

I

International Animal Rescue

internationalanimalrescue.org

0

International Animal Rescue is a well-established non-profit organization dedicated to saving and protecting animals worldwide. Their website reflects a professional and comprehensive approach to animal rescue, rehabilitation, conservation, and community engagement. The organization targets animal welfare supporters, donors, volunteers, and the general public interested in wildlife protection. Their business model relies on donations, adoptions, fundraising, and merchandise sales, positioning them as a reputable charity in the animal welfare sector. Technically, the website is built on Drupal 10 with Commerce 2, integrating modern analytics and tracking tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security measures include HTTPS enforcement and reCAPTCHA v3 on forms, though some security headers could be improved for enhanced protection. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. However, no explicit security policies or incident response contacts are found, which could be areas for improvement. WHOIS data is privacy protected, common for non-profits, and does not raise immediate concerns. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity, making it a reliable platform for supporters and stakeholders. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency around incident response to further strengthen trust and compliance.

L

Little Fireface Project

nocturama.org

0

The Little Fireface Project is a specialized non-profit organization dedicated to the conservation of loris species, led by the internationally recognized expert Professor Anna Nekaris OBE. The project operates a research station in Java since 2012 and conducts extensive research, education, and community empowerment activities to protect critically endangered lorises and other nocturnal wildlife. The website reflects a well-structured and content-rich platform targeting conservationists, researchers, and supporters worldwide. Technically, the site is built on WordPress with modern plugins and tracking tools like Google Analytics, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is unavailable due to a malformed request, but the website's professional presentation and social media presence support its legitimacy. Overall, the site scores well in business credibility and content quality but should enhance privacy compliance and security best practices.

S

swaraOwa

swaraowa.org

0

swaraOwa is a small non-profit organization dedicated to the conservation of Indonesian gibbons and their habitats. The website serves as an educational and community engagement platform, featuring detailed blog posts, field stories, and conservation updates. It targets conservationists, researchers, local communities, and donors interested in biodiversity preservation. Technically, the site is built on WordPress and hosted via Cloudflare, using standard web technologies and Google Analytics for tracking. While the site is accessible and content-rich, it lacks formal privacy and cookie policies, and runs an outdated WordPress version, which poses security risks. The security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. Overall, the site demonstrates a good level of professionalism and trustworthiness but would benefit from improved privacy compliance and security hardening.

P

Play For Nature

playfornature.org

0

Play For Nature is a French non-profit organization dedicated to biodiversity conservation and environmental education. Founded in 2013, it operates by raising public awareness and collecting funds to support various conservation programs worldwide. The website serves as a platform to showcase supported projects, promote educational activities, and facilitate donations and sponsorships. The organization targets a general audience interested in environmental protection and biodiversity. Technically, the website is built on a modern WordPress CMS infrastructure using Elementor for page building and Yoast SEO for optimization. It employs standard web technologies including jQuery, Swiper.js for sliders, Google reCAPTCHA for form security, and CookieYes for cookie consent management. Hosting is provided by OVH sas, a reputable provider. The site is mobile-optimized and demonstrates good SEO practices. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements Google reCAPTCHA to protect forms. However, it lacks DNSSEC and visible security headers, which are recommended to enhance security posture. No privacy policy or terms of service pages were detected, which may impact compliance with GDPR and other regulations. Incident response and vulnerability disclosure mechanisms are not evident. Overall, the website is professional, trustworthy, and well-positioned within its niche. To improve, it should implement comprehensive privacy and security policies, enable DNSSEC, and add security headers. These steps will enhance user trust and regulatory compliance.

W

Welttierschutzgesellschaft e.V.

welttierschutz.org

0

Welttierschutzgesellschaft e.V. is a German non-profit organization dedicated to animal protection and welfare across multiple continents including Africa, Asia, South America, and Europe. The organization operates various projects such as animal rescue, veterinary aid, educational programs, and wildlife protection. Their website reflects a medium-sized NGO with a professional online presence, targeting donors, volunteers, and animal welfare supporters. Technically, the website is built on WordPress using the Kadence theme and includes modern JavaScript libraries and GDPR-compliant cookie management via Borlabs Cookie. Security posture is good with HTTPS enforced and domain registration protections in place, though DNSSEC is not enabled. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the site is trustworthy and professionally maintained, with room for improvement in formal privacy disclosures and enhanced DNS security.

Zoologická zahrada Ústí nad Labem operates as a regional zoological garden in the Czech Republic, providing animal exhibits, educational programs, and visitor services. The organization is supported by the statutory city of Ústí nad Labem and maintains affiliations with international zoological associations, enhancing its credibility and conservation efforts. The website targets families, schools, and tourists, offering multilingual content and an e-shop for merchandise. Technically, the site is built on ASP.NET WebForms with a custom CMS, integrating modern web technologies such as Google Analytics and social media SDKs. The site is mobile-optimized with good navigation and content quality. Security posture is moderate, with HTTPS usage implied but lacking explicit security headers and privacy policy documentation. The absence of WHOIS data limits domain legitimacy verification, though the website content and affiliations suggest a legitimate non-profit entity. Strategic recommendations include adding explicit privacy and terms policies, enhancing security headers, and verifying domain registration details to improve trust and compliance.

F

Fundacja DODO

fundacjadodo.pl

0

Fundacja DODO is a Polish non-profit foundation dedicated to supporting the Wrocław Zoo and animal welfare initiatives. The website serves as a platform for fundraising and donations, leveraging WooCommerce and payment gateways such as Przelewy24 and Tpay. The organization appears to be small-sized and locally focused, with a domain age consistent with its founding year of 2016. The website is built on WordPress with modern technologies including React and jQuery, and integrates marketing tools like MailerLite for email campaigns. Mobile optimization and user experience are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy and cookie policies are missing, which impacts compliance and trust. Overall, the site is legitimate and trustworthy but would benefit from enhanced security and compliance documentation.

Stolen Wildlife is a Czech Republic based non-profit campaign focused on raising awareness about the illegal trade in wild animals and their body parts. The campaign is supported by the Ostrava Zoo and The Kukang Rescue Program, leveraging expertise from Czech environmental authorities and zoological experts. The website serves as an educational platform highlighting endangered species, trafficking issues, and related news. Technically, the site is built on the WebStarts CMS platform, using legacy jQuery and several JavaScript libraries for UI components. It is hosted on a secure platform with HTTPS enabled, but lacks advanced security headers and privacy policies. The WHOIS data is unavailable, which slightly reduces trust but the website content and affiliations support legitimacy. Overall, the site is well-designed, mobile-optimized, and provides valuable content for a general audience interested in wildlife conservation.

Můj první gól is a Czech grassroots football project focused on supporting young beginner football players and clubs, operated under the Football Association of the Czech Republic (FAČR) and 2Score, s.r.o. The project offers recruitment events, training videos, school physical activity programs, and nutrition education, positioning itself as a recognized leader in youth football development in the Czech Republic, evidenced by its UEFA award. The website is professionally designed with consistent branding and clear navigation, targeting young athletes, their parents, and football clubs. Technically, the site uses modern JavaScript libraries and the Nette framework, hosted by Active24, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and cookie consent mechanisms, though security headers could be improved. No blocking or WAF interference was detected, allowing full content access. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

C

Carrefour Culturel Arnaud-Bernard

declaration-langues-langage.net

0

The website www.declaration-langues-langage.net is a French non-profit cultural platform dedicated to promoting a Declaration on Duties towards Languages and Language. It serves as a hub for linguistic rights advocacy, multilingual translations, and cultural discourse primarily linked to the Carrefour Culturel Arnaud-Bernard and the Forom des Langues du Monde. The site targets linguists, cultural activists, and language communities with academic and ethical-political content. Technically, it is built on WordPress using Elementor and OceanWP theme, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy and cookie policies are absent, indicating compliance gaps. WHOIS data is missing, which raises transparency concerns but the site content and affiliations suggest legitimacy. Overall, the site is content-rich and professionally presented but would benefit from improved privacy compliance and domain registration transparency.

F

Fondation du patrimoine

fondation-patrimoine.org

0

Fondation du patrimoine is a leading French non-profit organization dedicated to the preservation and restoration of cultural heritage across France. The website serves as a platform to engage donors, volunteers, and project owners by providing information about restoration projects and facilitating donations. The organization holds a strong market position as a primary actor in heritage preservation, targeting a broad audience interested in cultural and historical conservation. Technically, the website is built using modern web technologies including React and Next.js, with content likely managed via a headless CMS such as Strapi. The site demonstrates good digital maturity with responsive design, SEO optimization, and integration of Google Tag Manager for analytics and marketing purposes. Performance is moderate, with good mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks a publicly available security policy and incident response information, which are recommended for transparency and trust. The absence of WHOIS data limits domain registration verification, slightly reducing trustworthiness. Overall, the website presents a professional, trustworthy, and user-friendly interface aligned with its non-profit mission. Strategic improvements in security transparency and domain registration disclosure would enhance its credibility and compliance posture.

Ukradená divočina is a Czech Republic based non-profit campaign focused on raising awareness about illegal wildlife trade and its impact on endangered species. The initiative is supported by recognized organizations such as Zoo Ostrava and the Kukang Rescue Program, providing credibility and domain expertise. The website serves as an educational platform with detailed content on endangered species, illegal trade issues, and related exhibitions. Technically, the site is built on the WebStarts platform using older but functional technologies like jQuery 1.12.4 and MasterSlider. It is hosted securely with HTTPS and includes multimedia content such as videos and image galleries. However, the site lacks modern security headers and privacy compliance features such as cookie consent and privacy policies, which are important for GDPR compliance. No forms or sensitive data collection mechanisms are present, reducing immediate security risks. Overall, the website is trustworthy and professional but could improve its privacy and security posture.

T

The Kukang Rescue Program, z.s.

kukang.org

0

The Kukang Rescue Program is a small non-profit organization founded in 2014 focused on the conservation of endangered slow lorises in Sumatra, Indonesia. The organization operates through community engagement, education, anti-poaching efforts, and sustainable farming projects such as the Kukang Coffee initiative. It maintains partnerships with multiple zoos and conservation groups, enhancing its credibility and reach. The website reflects a professional and consistent brand image with clear messaging targeted at conservationists, donors, and local communities. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, incorporating modern libraries like jQuery and Bootstrap. It features multimedia content including embedded YouTube videos and responsive design optimized for mobile devices. While performance is moderate, the site lacks some advanced accessibility features and security headers, which could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, the absence of security headers and privacy/cookie policies indicates room for enhancement in compliance and security posture. The WHOIS data is incomplete, which slightly reduces domain trustworthiness, but the website's content quality and partner ecosystem provide strong trust signals. Overall, the site is a credible and well-maintained platform for wildlife conservation awareness, though it would benefit from improved privacy compliance and security best practices to strengthen its risk profile and user trust.

K

Koalice proti palmovému oleji

stoppalmovemuoleji.cz

0

Koalice proti palmovému oleji is a Czech non-profit coalition established in 2013, dedicated to reducing global palm oil consumption and promoting local fat alternatives. The organization operates as an advocacy and educational platform, providing resources such as petitions, informational materials, event calendars, and community engagement opportunities. Their market position is solid within the Czech environmental NGO sector, supported by a network of 94 organizations and 141 members. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript with jQuery, and integrates analytics tools like Google Analytics and Smartlook. However, the use of multiple jQuery versions and lack of visible security headers indicate areas for improvement. Security posture is moderate with no critical vulnerabilities detected but lacking advanced protections and compliance mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy practices.

D

Dětský domov Korálky

ddsenozaty.cz

0

Dětský domov Korálky is a Czech non-profit organization formed in 2025 by merging two children's homes located in Senožaty and Humpolec. The organization provides care for children in family-like groups, focusing on healthy development and nurturing talents. The website reflects a professional and well-structured digital presence built on WordPress with Oxygen Builder and Yoast SEO, indicating a moderate level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data limits domain trust analysis, but the transparent business information and sponsorship network support legitimacy. Overall, the site is well-positioned to serve its audience and maintain compliance with privacy regulations.

L

Les Restos du Cœur

restosducoeur.org

0

Les Restos du Cœur is a well-established French non-profit organization founded in 1985, dedicated to fighting poverty and social exclusion through a variety of social aid programs including food assistance, housing support, employment help, and cultural access. The organization maintains a strong digital presence with a professionally designed and content-rich website, supported by multiple social media channels and donation platforms. Technically, the website is built on WordPress and leverages modern analytics and marketing tools, ensuring good SEO, accessibility, and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although public security policies and incident response information are not explicitly published. The domain WHOIS data is privacy protected, which is common for non-profits, and no suspicious indicators were found. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

M

Maison du Lac de Grand-Lieu

maisondulacdegrandlieu.com

0

Maison du Lac de Grand-Lieu operates as a non-profit environmental education center focused on the wetlands and lake of Grand-Lieu in Loire-Atlantique, France. The website provides comprehensive information about educational visits, workshops, exhibitions, and sound walks designed to raise awareness about local biodiversity and natural heritage. The organization targets educators, professionals, groups, and the general public interested in environmental conservation and education. Technically, the website is built on WordPress using Elementor and WooCommerce for ticketing, with modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Sendinblue. The site is well-optimized for SEO, accessibility, and mobile devices, reflecting a mature digital presence for a small non-profit entity. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

P

Pesticide Action Network Europe (PAN Europe)

pan-europe.info

0

Pesticide Action Network Europe (PAN Europe) is a well-established non-profit organization dedicated to pesticide regulation advocacy, environmental protection, and public health in Europe. Their website reflects a professional and consistent brand focused on campaigns, legal actions, and policy influence related to pesticides. The organization targets policymakers, NGOs, researchers, and the general public interested in sustainable agriculture and environmental health. The business model is primarily grant and donation funded, with a medium-sized operational scale based in Belgium. Technically, the website is built on Drupal 7 with Bootstrap and jQuery frameworks, integrating Matomo and Google Tag Manager for analytics. The site is mobile optimized and has good SEO and accessibility basics, though some modernization is advisable due to the aging CMS version. Performance is moderate, and the site uses HTTPS with no visible security headers, indicating room for security improvements. Security posture is generally good with HTTPS and secure forms, but the absence of security headers and lack of published security policies or incident response information are gaps. WHOIS data is unavailable or blocked, which reduces domain registration trustworthiness, though the website content and EU funding acknowledgments support legitimacy. Privacy compliance is partial, with a comprehensive privacy policy but no cookie consent mechanism detected. Overall, the website is trustworthy and professional but would benefit from technical updates, enhanced security practices, and improved privacy compliance to strengthen its digital maturity and risk posture.

D

Dans Mon Eau

dansmoneau.fr

0

Dans Mon Eau is a French non-profit transparency platform focused on providing accessible, official data on chemical pollutants in tap water. It is a collaborative project by Générations Futures and Data For Good, aiming to inform the public and mobilize authorities for better water quality. The website offers an interactive map, educational content, and regularly updated official data. Technically, the site is built on WordPress, uses modern JavaScript libraries, and is hosted with Cloudflare CDN, ensuring good performance and security. The security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The domain WHOIS data shows an unusual future creation date, which slightly impacts trust but is mitigated by the association with reputable organizations. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a general audience interested in environmental health.