Non-profit security reports

K

Koalicija "Galiu gyventi"

galiugyventi.lt

53

Koalicija "Galiu gyventi" is a Lithuanian non-profit coalition dedicated to advocacy, education, and research related to addiction and associated social issues. The organization provides legislative monitoring, legal advocacy, networking, training, and publishes informational materials targeting policymakers, vulnerable groups, and professionals. The website is built on WordPress with modern technologies such as Bootstrap and Zion Builder, hosted by Hostinger. It features a professional design, clear navigation, and mobile optimization. Security posture is good with HTTPS enabled and no exposed sensitive data, though security headers and privacy compliance mechanisms are lacking. Contact information is clearly provided, and social media integration is present via Facebook SDK. Overall, the site is trustworthy and serves its non-profit mission effectively.

Europos namai is a Lithuanian non-profit organization dedicated to civic engagement, political monitoring, and educational projects. Their website, Eurohouse.lt, serves as a platform to share news, project updates, and partner information primarily targeting Lithuanian citizens interested in political and civic matters. The organization appears to have a stable market position within the non-profit sector in Lithuania, with ongoing projects and partnerships. Technically, the website is built on WordPress with a moderate technology stack including Bootstrap and various plugins for galleries and social icons. The site is hosted by a Lithuanian hosting provider, Hostex.lt, and uses HTTPS for secure communication. Security posture is moderate with anti-spam measures in place but lacks advanced security headers and explicit privacy or cookie policies. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. WHOIS data confirms domain legitimacy and consistency with the organization's geographic focus. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

Lesoochranárske zoskupenie VLK operates the website 'Všetko pre NIČ' as a non-profit environmental advocacy platform focused on protecting natural forests in Slovakia. The organization promotes non-intervention in forest areas, organizes petitions, legal actions, and educational events to safeguard wildlife and natural reserves. The website serves as a communication and fundraising tool targeting environmentally conscious Slovak citizens and supporters. Technically, the site employs modern JavaScript libraries, Google Analytics, Facebook Pixel, and Google Tag Manager for tracking and user engagement. It integrates YouTube videos and Google Maps for enhanced content delivery. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and a published privacy policy or terms of service, which are areas for improvement. Overall, the website is well-designed, user-friendly, and trustworthy, with moderate tracking practices and a clear call to action for donations.

Duha is a Czech non-profit organization dedicated to providing leisure, nature, and recreational activities for children and youth. The organization operates through local branches across the country, offering camps, outdoor sports, cultural activities, and volunteer opportunities. Their focus on experiential pedagogy and community engagement positions them as a well-established entity in the youth non-profit sector. The website content is rich with event reports, news, and information about their programs, targeting children, youth, and volunteers. Technically, the website uses standard web technologies such as Bootstrap and jQuery, with a moderate level of mobile optimization and accessibility. However, there is no evidence of advanced CMS or hosting details. The site lacks privacy and cookie policies, and no security headers or HTTPS status information was detected from the provided data, indicating room for improvement in security and compliance. From a security perspective, the absence of WHOIS data reduces transparency, though this is likely due to privacy protection common among non-profits. No forms or sensitive data collection mechanisms were found, reducing immediate risk. The site does not display any signs of WAF or blocking mechanisms, and content is fully accessible. Social media presence and partner logos add to the trustworthiness of the organization. Overall, the website is functional and informative but requires enhancements in security posture, privacy compliance, and transparency to improve trust and protect user data. Strategic improvements in these areas will strengthen the organization's digital maturity and stakeholder confidence.

The Yes Men website represents a small, long-established activist collective focused on partnering with other activist groups to employ creative tactics for social campaigns. The organization has a niche market position within the non-profit activism sector, offering services such as workshops, trainings, collaborations, and media productions including movies. The website is built on Drupal 9 CMS and integrates Google Analytics and Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its audience. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. The domain registration is consistent and long-standing, supporting the legitimacy of the organization. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

Jogadores Anônimos is a Brazilian non-profit organization dedicated to supporting individuals struggling with compulsive gambling. The website serves as a hub for information, recovery literature, and access to support groups both online and in-person. It provides contact details including regional offices, WhatsApp helplines, and educational resources. The organization positions itself as a self-sustained community without affiliations to political or religious entities. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, hosted on HostGator Brazil. The site is mobile-optimized and SEO-friendly but lacks published privacy and cookie policies, which are critical for compliance. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers and incident response information are missing. Overall, the site is trustworthy, professional, and safe for general audiences seeking help with gambling addiction.

P

Problem Gambling Foundation of New Zealand

pgf.nz

69

The Problem Gambling Foundation of New Zealand operates a professional, well-structured website providing free, confidential counselling and support services for individuals and families affected by gambling harm. The organization holds a strong market position as a national non-profit entity with subsidiaries focused on cultural support. The website demonstrates a mature digital infrastructure utilizing modern web technologies, including JavaScript modules, HTMX, and integrated chat support via Zoho SalesIQ. Analytics and marketing tools such as Google Tag Manager and Facebook Pixel are employed with evident privacy compliance. Security posture is robust with HTTPS enforcement and CAPTCHA protections, though some security headers could be improved. Overall, the site is trustworthy, accessible, and user-friendly, targeting a broad audience in New Zealand seeking gambling harm support.

I

iDonate

idonate.ie

64

iDonate.ie is an Irish charity fundraising platform that enables charities and non-profit organizations to raise funds online. Positioned as Ireland's largest fundraising platform, it offers services focused on donation processing and campaign hosting for charitable causes. The website is built on a modern WordPress infrastructure using Elementor for page building and Yoast SEO for search engine optimization, indicating a mature digital presence. The platform integrates multiple analytics and marketing tools such as TikTok Pixel, Microsoft Clarity, and LinkedIn Insight Tag, supported by a cookie consent mechanism via Cookiebot to address privacy compliance. Security posture is generally good with HTTPS enforced, though explicit security headers are not clearly detected. The absence of WHOIS data limits domain trust verification, and no explicit privacy policy or contact information was found in the provided content. Overall, the site presents a professional and trustworthy front for its charitable fundraising mission.

Ž

Ženský byznys, z.s.

zensky-byznys.cz

58

Ženský byznys, z.s. is a Czech non-profit organization dedicated to empowering women by providing mentoring, workshops, and professional development programs. The organization positions itself as a leader in fostering female leadership and entrepreneurship in the Czech Republic, with partnerships including Visa and ČSOB. Their website reflects a professional and consistent brand image, targeting women professionals, entrepreneurs, and those seeking career advancement. Technically, the website is built on WordPress with modern plugins and SEO optimizations, delivering a good user experience with mobile responsiveness and accessibility considerations. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, compliant with GDPR, and provides valuable content and community engagement for its audience.

S

Spelberoendes Riksförbund

spelberoende.se

47

Spelberoendes Riksförbund is a Swedish non-profit organization dedicated to supporting individuals affected by gambling addiction and their families. With over 20 years of experience, the organization offers self-help meetings, individual counseling, group sessions, and educational resources both online and through local chapters across Sweden. Their mission focuses on prevention, support, and advocacy in the gambling addiction space. The website reflects a mature digital presence built on WordPress with modern plugins and compliance tools, including GDPR cookie consent mechanisms and live chat support. Social media integration and clear contact information enhance user engagement and trust. Security posture is adequate with HTTPS and basic protections, though improvements such as DNSSEC and enhanced security headers are recommended. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

V

VšĮ „OSFL PROJEKTAI“

osfl.lt

39

OSFL Projektai is a Lithuanian non-profit organization focused on delivering community programs, projects, and professional services such as accounting, consulting, and administrative support. The organization maintains a clear presence in Lithuania with a physical office in Vilnius and actively engages with partners and stakeholders through various projects and initiatives. Their website reflects a professional and consistent brand image targeted at non-profit entities and civic groups within Lithuania. Technically, the website is built on WordPress, leveraging common JavaScript libraries like jQuery and Slick Carousel, providing a moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and secure form inputs; however, the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data transparency slightly reduces trustworthiness, but the visible business information and contact details support credibility. Overall, the website is a reliable digital presence for a small non-profit organization with a focus on community engagement and service provision.

Atviros Lietuvos fondas is a Lithuanian non-profit organization dedicated to strengthening civil society, supporting NGOs, and promoting democracy and human rights. With nearly 30 years of history, it holds a reputable position in Lithuania's civic sector. The website is built on WordPress using the Avada theme and integrates modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and MailerLite. It employs a cookie consent mechanism compliant with GDPR, reflecting a good privacy posture. Security practices include HTTPS and cookie consent, though additional security headers could enhance protection. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature digital presence aligned with its mission and audience.

S

Smajlíček NSK, z.ú.

smajlicek.cz

60

Smajlíček NSK, z.ú. is a Czech non-profit organization established in 2024 by the Nadace Simony Kijonkové foundation. It operates free leisure centers aimed at children and youth, particularly those from socially excluded backgrounds, providing a safe and supportive environment for skill development and healthy growth. The organization is in its early stages with its first center located in Mělník. The website reflects a professional and clear presentation of its mission and services, targeting families and communities in the Czech Republic. Technically, the site is built using Framer, integrates Google Analytics and Microsoft Clarity for user insights, and employs Google Tag Manager for marketing management. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features and security headers. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in security headers and published policies. The absence of WHOIS data limits domain trust assessment, but the association with a known foundation and clear contact information supports legitimacy. Overall, the site is trustworthy, well-designed, and serves its non-profit mission effectively.

Œ

Œuvre Nationale de Secours Grande-Duchesse Charlotte

oeuvre.lu

46

Œuvre Nationale de Secours Grande-Duchesse Charlotte is a well-established Luxembourg non-profit organization dedicated to supporting associations in social, cultural, environmental, sport & health, and heritage projects. Funded primarily by the Luxembourg National Lottery, it has a long history dating back to 1944 and holds a reputable position in the local community. The website reflects a professional and accessible digital presence, leveraging Drupal 10 and modern web technologies, with strong emphasis on accessibility and user experience. Security posture is good with HTTPS and secure embedding practices, though explicit security headers could be improved. The lack of WHOIS data limits domain trust analysis but does not detract from the organization's evident legitimacy. Overall, the site is safe, well-designed, and compliant with privacy regulations.

The website teribear.cz represents Nadace Terezy Maxové dětem, a Czech non-profit foundation focused on children's welfare. The site currently displays a temporary placeholder message indicating maintenance or downtime, with minimal content. The foundation appears to have been established in 2008, consistent with the domain registration date. The website uses WordPress with the Divi theme and includes Google Analytics for visitor tracking. However, it lacks critical compliance documents such as privacy and cookie policies, as well as contact information, which reduces its overall trust and compliance posture. Technically, the website is built on a modern CMS platform with a popular theme and uses HTTPS, ensuring encrypted communications. The site loads moderate resources and is mobile optimized. However, it lacks security headers and formal privacy compliance mechanisms. No forms or data collection fields are present on the homepage, limiting exposure to input-based vulnerabilities. From a security perspective, the site shows no signs of active WAF or blocking mechanisms and no visible vulnerabilities in the HTML content. The absence of security headers and compliance policies are notable gaps. The WHOIS data is consistent and indicates a legitimate, long-standing domain registration with no privacy protection, aligning with the non-profit nature of the organization. Overall, the website is functional but minimal, with room for improvement in privacy compliance, security hardening, and contact transparency. Strategic enhancements in these areas would improve trustworthiness and regulatory adherence.

B

Bundesstiftung Livekultur

bundesstiftung-livekultur.org

45

The Bundesstiftung Livekultur website represents a German non-profit cultural foundation dedicated to preserving and promoting live music culture, including pop, club, and festival scenes. The foundation focuses on securing cultural spaces and developing funding concepts to sustain live culture as a valued part of Germany's cultural landscape. The website content is professionally presented in German, targeting cultural actors, event organizers, and the general public interested in live music culture. The foundation appears to have been established around 2021, consistent with the website's content and publication dates. Technically, the website is built on WordPress 6.8.3 with common plugins such as Yoast SEO and jQuery. The site is accessible, mobile-optimized, and includes structured data for SEO enhancement. However, some technical improvements are recommended, including the implementation of security headers and a cookie consent mechanism to enhance privacy compliance. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit security policies or incident response contacts. The WHOIS data is unavailable or malformed, likely due to privacy protection, which is common for non-profit organizations. No suspicious indicators or vulnerabilities were found in the content or technical setup. Overall, the site demonstrates a solid security posture but could improve transparency and compliance with privacy regulations. The overall risk assessment is low, with the site appearing legitimate and professionally maintained. Strategic recommendations include adding cookie consent, security headers, clear contact information for security incidents, and publishing terms of service and security policies to enhance trust and compliance.

S

Streetwork Liechtenstein

streetwork.li

61

Streetwork Liechtenstein operates as a non-profit social outreach organization focused on providing support and counseling services in public and semi-public spaces within Liechtenstein. The organization emphasizes confidentiality and flexible engagement schedules, targeting youth and community members. The website reflects a professional and consistent brand presence with clear contact points and organizational governance details. Technically, the site is built on Concrete5 CMS, leveraging modern frontend libraries such as jQuery and Foundation, and employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS enforced and email obfuscation implemented, though there is room for improvement in security headers and formal policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and well-positioned within its niche, with a moderate to good technical and security maturity.

A

Arbeitsgemeinschaft der Evangelischen Jugend in Deutschland e. V. (aej)

evangelische-jugend.de

52

The Arbeitsgemeinschaft der Evangelischen Jugend in Deutschland e. V. (aej) operates as a national umbrella organization for Protestant youth work in Germany. Their website serves as a comprehensive portal offering resources, advocacy information, funding guidance, and project details targeted at children, youth, and professionals in youth work. The organization maintains a strong presence with clear contact channels, social media engagement, and a newsletter subscription service. Technically, the site is built on TYPO3 CMS with modern frontend technologies including jQuery and FontAwesome, supported by Matomo analytics for privacy-conscious tracking. The site is well-structured, mobile-optimized, and accessible, reflecting a mature digital infrastructure.

E

Evangelische Freiwilligendienste gGmbH

ev-freiwilligendienste.de

49

Evangelische Freiwilligendienste gGmbH operates as a central coordinating body for evangelical voluntary services in Germany and abroad, offering programs such as the Freiwilliges Soziales Jahr, Diakonisches Jahr, Bundesfreiwilligendienst, and international volunteer programs. The organization serves volunteers and partner organizations, providing consulting and placement services. The website is built on TYPO3 CMS, hosted on securehost.de, and uses Matomo analytics with privacy-respecting opt-in/out features. Security measures include HTTPS and Content Security Policy, though CSP could be improved by removing unsafe directives. Contact information is clearly presented, supporting trust and transparency. However, the site lacks a cookie consent banner and explicit terms of service or security policy pages, which are areas for compliance improvement.

A

American Chamber of Commerce in Croatia

amcham.hr

69

The American Chamber of Commerce in Croatia is a well-established non-profit organization founded in 1999, serving as the leading international business advocacy group in Croatia. The website reflects its role as a membership organization providing advocacy, networking events, business delegations, and public policy representation. The content is professionally presented in Croatian and English, targeting business professionals and international companies. The organization maintains a strong market position as a trusted voice for international businesses in Croatia.

B

Beli Visitor Centre

belivisitorcentre.eu

41

Beli Visitor Centre is a specialized non-profit organization focused on the conservation and rehabilitation of griffon vultures in Cres, Croatia. The center provides educational exhibits, workshops, volunteer programs, and operates a rehabilitation facility for these birds. It serves both local visitors and international nature enthusiasts, positioning itself as a key regional conservation hub. The website is professionally designed using WordPress, with good mobile optimization and accessibility features, reflecting a mature digital presence. Security measures include HTTPS and Google reCAPTCHA, though some improvements in security headers and privacy compliance are recommended. Overall, the site is trustworthy and well-aligned with its mission, with clear contact information and partner affiliations.

S

Stiftung Fledermausschutz

fledermausschutz.ch

57

The Stiftung Fledermausschutz website is a professionally designed and content-rich platform dedicated to the protection and conservation of bats in Switzerland. It serves as an educational and operational hub offering emergency rescue services, public awareness, and conservation projects. The organization is positioned as a leading Swiss non-profit in its niche, with clear communication channels and transparent donation mechanisms. Technically, the site is built on Drupal 9 with modern integrations such as Google Analytics and reCAPTCHA, ensuring a balance between usability and security. Security posture is solid with HTTPS and spam protection, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a trustworthy and credible non-profit entity with a strong digital presence.

Κ

ΚΕΘΕΑ

kethea.gr

46

ΚΕΘΕΑ is the largest network of addiction treatment and social reintegration services in Greece, operating as a non-profit organization. The website reflects a mature digital presence with comprehensive content focused on addiction help, prevention, education, and research. It targets individuals affected by dependencies, their families, and professionals in healthcare and social services. The organization maintains a strong market position in Greece with a large operational scale and a well-established brand identity. Technically, the website is built on WordPress with WooCommerce and uses modern plugins for SEO, multilingual support, and GDPR compliance. The site is mobile-optimized, accessible, and performs moderately well. Security measures include HTTPS enforcement and cookie consent mechanisms, though some HTTP security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid with good privacy compliance, but the absence of a published security policy or incident response contacts is noted. The WHOIS data aligns with the organization's identity, supporting legitimacy and trustworthiness. Overall, the site is professional, trustworthy, and compliant with relevant regulations. Strategic recommendations include enhancing HTTP security headers, publishing a formal security policy and incident response contacts, and considering a vulnerability disclosure program to further strengthen security and trust.

Pol'and'Rock Festival is a prominent free music festival organized in Poland by the Fundacja Wielka Orkiestra Świątecznej Pomocy, a well-established non-profit foundation. The festival targets music enthusiasts, volunteers, and the broader community, offering a rich program of events and volunteer opportunities. The website serves as a comprehensive portal for festival information, news, and engagement, reflecting a strong market position as a leading cultural event in Poland. Technically, the site employs a modern tech stack including Yii framework, Bootstrap, and various analytics and marketing tools, hosted by a reputable Polish provider. Security posture is solid with HTTPS and CSRF protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and user experience, supporting the festival's community-driven mission.

The website 'India MS Map' is a non-profit initiative by the Multiple Sclerosis Society of India aimed at crowd-sourcing data about people living with Multiple Sclerosis in India. It serves as an awareness and data collection platform targeting patients, healthcare professionals, and researchers. The site is built on WordPress and uses common web technologies such as jQuery, Smart Slider 3, and AmCharts for interactive mapping. Hosting appears to be via Bluehost, inferred from the domain structure. The website is accessible without any WAF or security challenge blocking access. However, there is a lack of transparency in domain registration data due to privacy protection or malformed WHOIS responses, which impacts trustworthiness. No privacy or cookie policies are present, and no contact information is explicitly provided, which are gaps in compliance and user trust. Security headers and advanced security configurations are absent, indicating room for improvement in security posture.

A

Aktyvių piliečių fondas

apf.lt

39

Aktyvių piliečių fondas (APF) is a Lithuanian non-profit organization focused on strengthening civil society by providing funding and support to civil society organizations and projects. Supported by the EEA and Norway Grants, APF operates as a grant fund with a clear mission to empower vulnerable groups and promote active citizenship in Lithuania. The website is professionally designed using WordPress, featuring multilingual support and comprehensive content about funding opportunities, project results, and training events. The technical infrastructure includes modern web technologies and analytics tools, ensuring good performance and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, APF presents a trustworthy and credible online presence aligned with its non-profit mission.

Hrvatska udruga za promicanje primaljstva is a Croatian non-profit association dedicated to promoting midwifery. The organization provides educational resources, community engagement, and organizes events such as symposiums to support midwives and related healthcare professionals. The website serves as an information hub for members and the public, featuring news, educational content, and membership services. The association is well-established with a domain registered since 2013 and operates primarily within Croatia.

S

Sünnitusmajade Fond

aitaalustadaelu.ee

40

Sünnitusmajade Fond is a small Estonian non-profit organization dedicated to supporting maternity hospitals through charitable events and exhibitions. Founded in 2000, it has a focused mission to raise awareness and funds for childbirth-related causes. The website is built on WordPress and hosted by Zone Media OÜ, reflecting a moderate level of technical maturity with caching and responsive design. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve in transparency and security documentation.

B

BHM

bhm.is

70

BHM is a prominent Icelandic labor union representing highly educated professionals in the Icelandic labor market. The organization supports its member unions, manages joint funds, and advocates for members' interests with the parliament and government. The website reflects a well-established non-profit entity with a clear focus on education, labor rights, and member services. The digital infrastructure is modern, leveraging Next.js and Prismic CMS, ensuring a responsive and accessible user experience. Privacy and cookie consent mechanisms are robust, indicating compliance with GDPR and Icelandic data protection laws. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response information are absent. Overall, the website projects professionalism and trustworthiness, serving its target audience effectively.

K

Kompostuj

kompostuj.cz

47

Kompostuj.cz is a well-established Czech non-profit organization dedicated to promoting bio-waste sorting and recycling awareness across the Czech Republic. The website reflects a medium-sized organization with a clear focus on environmental education and sustainability. The business model centers on communication and advocacy rather than commercial activities, positioning it as a trusted entity in the non-profit environmental sector. The website's content is relevant and professionally presented, targeting a general audience interested in ecological topics. Technically, the website is built on WordPress using popular themes and plugins such as Astra, Elementor, and Smart Slider 3. It employs modern web technologies including JavaScript libraries and Google Analytics for tracking. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. Accessibility features are basic but present. From a security perspective, the site uses HTTPS with excellent SSL configuration, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given the use of tracking technologies. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security hardening. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

N

Neuroliitto ry

kuntoutukseen.fi

55

Kuntoutukseen.fi is a Finnish non-profit website operated by Neuroliitto ry, focusing on providing rehabilitation services information. The website targets individuals seeking rehabilitation support in Finland, offering relevant courses and service details. The domain is well-established since 2017, with transparent WHOIS data matching the organization's identity and location. Technically, the site is built on WordPress with modern plugins and analytics tools, including Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management. The site is hosted behind Cloudflare nameservers, ensuring reliable performance and security. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. No privacy policy page was explicitly found, which is a minor compliance gap. Overall, the site is professional, trustworthy, and safe for general audiences.

N

Neuroliitto ry

palvelutalo.fi

10

Palvelutalo.fi is a website operated by Neuroliitto ry, a Finnish non-profit organization focused on neurological support and assisted living services. The website serves as an information platform targeting individuals seeking assistance and support related to neurological conditions in Finland. The organization has a long-standing presence since 2003, reflected in the domain registration data and consistent business information. Technically, the site is built on WordPress with a modern plugin ecosystem including Cookiebot for cookie consent and Google Analytics for traffic analysis. The site is hosted behind Cloudflare DNS, ensuring reliable performance and security. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. Privacy compliance is supported by Cookiebot, but no explicit privacy policy or terms of service pages were detected in the provided HTML content. Overall, the website demonstrates a professional and trustworthy presence appropriate for a non-profit organization in the healthcare support sector.

Z

Združenie Sclerosis multiplex Nádej

tatrydunaj.sk

42

The website tatrydunaj.sk represents a Slovak non-profit organization 'Združenie Sclerosis multiplex Nádej' that organizes an annual cycling event to raise awareness and support for multiple sclerosis patients. The event, now in its 12th year, is well-established and targets young adults and the general public to promote early diagnosis and solidarity. The website is professionally designed using WordPress with modern technologies such as Bootstrap and jQuery, and it integrates SEO best practices via Yoast SEO. Social media integration and multimedia content enhance engagement. Security posture is solid with HTTPS and DNSSEC enabled, and Google reCAPTCHA is used to protect forms. However, the site lacks formal privacy and cookie policies, as well as explicit security incident contacts or vulnerability disclosures, which are important for compliance and trust. Overall, the site is trustworthy and effective for its mission but could improve compliance and security transparency.

I

Institut du monde arabe

imarabe.org

63

Institut du monde arabe is a well-established cultural and educational institution based in France, dedicated to promoting the knowledge and understanding of the Arab world through exhibitions, language courses, library services, and cultural events. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support focused on French. Technically, the site is built on Drupal 10, uses modern multimedia elements, and integrates cookie consent and analytics tools responsibly. Security posture is good with HTTPS and cookie consent mechanisms, though some HTTP security headers and incident response contacts are missing. The WHOIS data is unavailable due to malformed query output, which limits domain trust verification but the website content and external links strongly indicate legitimacy. Overall, the site is professional, trustworthy, and serves a broad audience including families, professionals, educators, and researchers.

F

Fondation ManpowerGroup

fondationmanpowergroup.fr

56

Fondation ManpowerGroup is a French non-profit foundation dedicated to supporting organizations that help individuals distant from employment acquire skills for workforce integration. It operates under the aegis of ManpowerGroup France, reflecting a strong market position in social inclusion and employment support. The website is professionally designed using WordPress with modern SEO and accessibility features, indicating a mature digital presence. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain trust analysis, but the consistent branding and social media presence support legitimacy. Overall, the foundation demonstrates a responsible approach to privacy and compliance.

F

Fondation Entreprendre

fondation-entreprendre.org

60

Fondation Entreprendre is a French non-profit foundation recognized as a public utility, dedicated to promoting entrepreneurship as a lever for social emancipation and inclusion. The foundation supports a network of associations and philanthropic partners to foster an entrepreneurial ecosystem focused on equality of opportunity and sustainable societal impact. Key services include research and innovation programs (Le Lab), collective innovation initiatives (La Réponse Collective), and strategic development support (L'Accélérateur). The foundation maintains a strong presence in the French social entrepreneurship sector with reputable partnerships and transparent financial reporting. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and uses privacy-respecting analytics via Matomo. It implements cookie consent management through Tarteaucitron.js and maintains good mobile optimization and accessibility standards. The site is served over HTTPS with no detected blocking or WAF interference, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and published incident response or vulnerability disclosure policies. No exposed sensitive data or vulnerabilities were detected. WHOIS data is unavailable due to privacy protection, which is typical for non-profit organizations and does not detract from the site's legitimacy. Overall, Fondation Entreprendre presents a professional, trustworthy, and privacy-conscious online presence aligned with its mission. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen security posture.

M

Mémorial ACTe

memorial-acte.fr

60

Mémorial ACTe is a French cultural institution dedicated to the history, heritage, and memory of the transatlantic slave trade, slavery, and its abolition. Positioned as a regional cultural center in the Caribbean, it offers permanent and temporary exhibitions, cultural events, and space rentals. The website reflects a professional and well-maintained digital presence with a focus on education and cultural engagement. The institution targets a broad audience including tourists, students, and researchers interested in Caribbean history and culture. Technically, the website uses modern web technologies such as Bootstrap and JavaScript, hosted by OVH, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact and social media channels.

Civilnodruštvo.hr is a Croatian non-profit portal operated by the Nacionalna zaklada za razvoj civilnog društva, focused on civil society, activism, and social initiatives. Established in 2004, it serves as an information hub connecting various actors in civil activism and promoting civil initiatives. The website offers news, event announcements, educational materials, and multimedia content relevant to its audience. Technically, the site is built on WordPress with a mature plugin ecosystem including Yoast SEO, Contact Form 7, and social sharing tools, ensuring good SEO and user engagement. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though some security headers are missing and no explicit security policies are published. Privacy and cookie policies are present and GDPR compliant. Overall, the site is trustworthy, professional, and well-positioned in its niche.

J

Justice for Nature

pralesdetem.cz

50

Justice for Nature is a Czech Republic based non-profit organization dedicated to protecting wild nature and ecosystems through volunteer programs, conservation activities, and education. The organization operates internationally with active projects in Costa Rica, Slovakia, and the Czech Republic, focusing on biodiversity monitoring and environmental sustainability. Their website reflects a well-structured and content-rich platform targeting environmental volunteers and supporters. Technically, the site is built on Webflow with modern web technologies including jQuery and Google Fonts, offering a good user experience and mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. WHOIS data is unavailable due to privacy protection, which is common for non-profits and does not raise immediate concerns. Overall, the website demonstrates legitimacy, good business credibility, and a strong partner ecosystem.

Linhartova nadace is a well-established Czech non-profit foundation dedicated to supporting arts and culture. The website provides information about its projects, archives, foundation details, fundraising efforts, and contact options primarily through a contact form and newsletter subscription. The foundation has a significant history dating back to 1987, supported by a domain registered since 2001, indicating a stable and credible presence in the cultural sector. Technically, the website is built on WordPress 5.6.16, utilizing common web technologies such as jQuery, Bootstrap 4, FontAwesome, and Google Fonts. It integrates marketing and analytics tools like MailerLite and Google Analytics. The site is moderately optimized for performance and mobile devices, with a good user experience and clear navigation structure. From a security perspective, the site uses HTTPS and employs some anti-bot measures on forms. However, it lacks visible security headers such as Content-Security-Policy or HSTS, and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a privacy policy document available, but no cookie consent mechanism is evident. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a moderate risk profile with room for improvement in security best practices and privacy compliance. The foundation's digital presence is credible and professional, serving its target audience effectively.

S

Sucht Schweiz

dipendenzesvizzera.ch

62

Sucht Schweiz is a Swiss non-profit foundation dedicated to preventing and mitigating problems related to the consumption of psychoactive substances and addictive behaviors. The organization operates with a clear mission focused on research, prevention, information dissemination, and advocacy. The website reflects a mature digital presence with multilingual support, professional design, and integrated donation capabilities. Technically, the site is built on WordPress with modern plugins and frameworks, including Yoast SEO and Usercentrics for consent management. Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and policies are not evident. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service pages in the provided content. Business credibility is high, supported by consistent WHOIS data and professional content.

S

Sucht Schweiz

addictionsuisse.ch

62

Sucht Schweiz is a Swiss non-profit foundation dedicated to preventing and mitigating problems related to the consumption of psychoactive substances and addictive behaviors. The organization operates with a strong focus on research, prevention, information dissemination, and advocacy. Their website reflects a mature digital presence with multilingual support, professional design, and clear calls to action such as donations and educational offerings. The foundation targets a broad audience including professionals, affected individuals, and the general public interested in addiction-related topics. Technically, the website is built on WordPress using modern frameworks and libraries such as Flynt, Swiper.js, and Usercentrics for consent management. It integrates analytics tools like Google Analytics and Facebook Pixel with user consent mechanisms, indicating compliance with privacy regulations. The site is mobile optimized and accessible, with good SEO practices implemented via Yoast SEO. From a security perspective, the site enforces HTTPS and uses consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, Sucht Schweiz presents a trustworthy and professional online presence suitable for its non-profit mission. However, improvements can be made in publishing explicit privacy and security policies and enhancing security headers to strengthen compliance and trust.

COPE (Committee on Publication Ethics) is a well-established non-profit membership organization dedicated to promoting integrity in scholarly research and publication. Founded in 2008, it serves the global scholarly publishing community by providing guidance, tools, events, and forums to uphold ethical standards. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and a strong brand identity. Technically, the site is built on Drupal 10, uses Cloudflare DNS, and integrates modern analytics and consent management tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, domain protection statuses, and bot mitigation via Google reCAPTCHA, though enabling DNSSEC and explicit security headers would enhance security further. Privacy compliance is robust, featuring a comprehensive cookie policy and consent mechanism aligned with GDPR requirements. Overall, the site demonstrates high professionalism, trustworthiness, and a commitment to ethical standards in scholarly publishing.

Z

Zavičajni muzej Ogulin

zavicajni-muzej-ogulin.hr

47

Zavičajni muzej Ogulin is a Croatian cultural heritage museum focused on preserving and presenting the history and culture of the Ogulin region. The museum offers diverse collections including archaeological, ethnographic, and artistic exhibits, alongside educational programs and virtual tours. It serves a broad audience including local residents, tourists, and students, positioning itself as a key regional cultural institution. The website reflects a small-sized non-profit organization with a clear mission and consistent branding. Technically, the website is built on WordPress using the Enfold theme, hosted by Hostinger. It employs modern web technologies such as jQuery and integrates Facebook SDK for social media features. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. The presence of cookie consent and privacy policy pages indicates good digital maturity and compliance with GDPR. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers which could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The absence of a security policy or incident response contact suggests room for improvement in security governance. The WHOIS data aligns well with the website's Croatian identity and business type, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, suitable for its cultural and educational purpose. Strategic improvements in security headers and incident response readiness would further strengthen its security posture.

AFS Global operates as a secured portal likely serving members and affiliates of AFS Intercultural Programs, a non-profit organization focused on intercultural exchange and educational programs. The website uses legacy ASP.NET WebForms technology combined with Bootstrap and jQuery, indicating a moderately mature but somewhat dated technical infrastructure. Google Tag Manager is employed for analytics, but no explicit privacy or cookie policies are present in the analyzed content, which may raise compliance concerns. Security posture shows basic HTTPS usage but lacks modern security headers and uses an outdated jQuery version, exposing potential vulnerabilities. Overall, the site is functional but would benefit from modernization and enhanced privacy and security measures.

The website www.freiwilligendienste-niedersachsen.de represents the Diakonisches Werk evangelischer Kirchen in Niedersachsen e.V., a non-profit organization facilitating voluntary social service programs such as FSJ and BFD in the Niedersachsen region of Germany. It targets young people, international volunteers, and adults over 27 interested in social engagement. The site provides information, application support, and placement services in various social sectors. The organization holds a strong regional position with official partnerships and government support. Technically, the website is built on the Synapsis CMS platform, utilizing JavaScript and jQuery libraries. The site is moderately optimized for performance and mobile use, with basic accessibility features. SEO practices are adequately implemented with proper metadata and structured navigation. Cookie consent mechanisms are in place, enhancing privacy compliance. From a security perspective, the site uses HTTPS (assumed from domain and no warnings), but lacks visible advanced security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. Forms use POST methods and no sensitive data exposure was detected. The privacy and cookie policies are present and GDPR compliant, supporting user data protection. Overall, the website is professional, trustworthy, and suitable for its audience. Security posture is moderate with room for improvement in headers and incident response transparency. The site is safe with no adult or questionable content. Recommendations include enhancing security headers, publishing security policies, and improving mobile and accessibility features.

D

Diakonisches Werk evangelischer Kirchen in Niedersachsen e.V.

diakonie-nds.de

52

Diakonie in Niedersachsen is a well-established non-profit welfare association operating as the regional branch of the Diakonie in Lower Saxony, Germany. The organization focuses on providing social support services, advocacy, and assistance to individuals in need, including specialized services such as support for victims of sexualized violence and coordination of various social welfare federations. The website reflects a professional and consistent brand presence, targeting both members and the general public seeking social services or career opportunities within the organization. The content is comprehensive and relevant, with clear navigation and mobile optimization.

H

Haus Neuer Kamp e.V.

haus-neuer-kamp.de

49

Haus Neuer Kamp e.V. is a medium-sized non-profit youth welfare organization based in Osnabrück, Germany, providing decentralized social and therapeutic services for young people with diverse needs. Their offerings include pedagogical-therapeutic residential groups, supported individual living, gender-specific programs, and family outreach. The organization positions itself as a trusted local service provider focused on respect, trust, and care for youth. The website is built on Joomla CMS with Yootheme and UIkit, offering a good user experience with mobile optimization and clear navigation. Privacy and cookie policies are comprehensive and GDPR compliant, including explicit consent mechanisms. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected. No incident response or security policy is published. Overall, the website is professional, trustworthy, and safe for general audiences.

A

AFS Interkultur Sverige

afs.se

60

AFS Interkultur Sverige is a well-established non-profit organization based in Sweden, specializing in intercultural exchange programs including student exchanges, host family recruitment, and volunteer opportunities. The organization has a strong market position within the non-profit education sector, targeting youth and families interested in cultural exchange. Their website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site is built on WordPress with modern SEO and security practices, including HTTPS and Google reCAPTCHA Enterprise integration. While security headers could be improved, the overall security posture is strong with no evident vulnerabilities. Privacy and cookie policies are present and GDPR compliant, supporting good privacy compliance. Contact information is transparent and complete, enhancing business credibility. The domain registration data aligns well with the organization's claims, reinforcing legitimacy and trustworthiness.

A

AFS Low Lands vzw – Stichting AFS Nederland

afs.nl

59

AFS Low Lands is a well-established international non-profit organization focused on intercultural exchange programs, volunteer coordination, and educational initiatives primarily targeting youth, families, and schools in the Netherlands. The website reflects a mature digital presence with a clear business model centered on cultural exchange and volunteerism, supported by a medium-sized organizational structure and a history dating back to 1997. Technically, the site is built on WordPress with modern plugins and integrations such as Google reCAPTCHA Enterprise and Yoast SEO, ensuring good performance, SEO, and user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.