Non-profit security reports

A

AFS Interkultur

afs.dk

63

AFS Interkultur is Denmark's oldest and largest non-profit cultural exchange organization, offering a variety of programs including student exchanges, hosting families, and volunteer opportunities abroad. The organization targets young people and volunteers over 18, fostering intercultural understanding and lifelong friendships. The website is professionally designed, well-branded, and provides comprehensive information about its services and upcoming events. Technically, the site is built on WordPress with modern SEO and accessibility features, integrating Google reCAPTCHA Enterprise for security and using CDN services for performance. Security posture is strong with HTTPS and privacy compliance mechanisms in place, although explicit security headers and incident response policies are not published. Overall, the site is trustworthy and well-positioned in its niche, though WHOIS data is unavailable, which slightly limits domain trust analysis.

A

AFS Low Lands vzw

afsvlaanderen.be

55

AFS Low Lands vzw is a well-established non-profit organization focused on providing intercultural exchange programs for youth, schools, and families in Belgium, particularly in the Flanders region. The organization offers a variety of programs including hosting foreign students, educational programs for schools, and volunteer opportunities, aiming to foster intercultural understanding and global citizenship. The website reflects a professional and consistent brand presence with comprehensive content tailored to its target audience of students, families, and educational institutions. Technically, the website is built on WordPress with modern plugins and integrations such as Yoast SEO, WPML for multilingual support, Google reCAPTCHA Enterprise for form security, and Google Analytics for traffic analysis. The site uses HTTPS and Cloudfront CDN for media delivery, ensuring good performance and security. The design is responsive and accessible, with clear navigation and SEO optimization. From a security perspective, the site employs HTTPS, reCAPTCHA, and privacy consent banners, indicating a good security posture. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. The WHOIS data is restricted due to DNS Belgium policies, but the website's professionalism and transparency in contact information support its legitimacy. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing incident response contacts to further strengthen trust and security.

F

Förderverein Garchinger Geschichte e.V.

fgg-garching.de

46

Förderverein Garchinger Geschichte e.V. is a small non-profit organization dedicated to researching and preserving the historical development of the city of Garching, Germany. The website serves as an information hub for local history enthusiasts, offering publications, event announcements, and archival resources. The association targets local citizens and guests interested in cultural heritage and historical education. The business model is community-focused, relying on membership and donations to support its activities. Technically, the website is built on WordPress 6.8.3 with common plugins such as Slider WD, Contact Form 7, and a cookie notice plugin. It uses Bootstrap 3.3.6 for styling and jQuery 3.7.1 for scripting. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Hosting details are limited but name servers indicate a German hosting provider. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, no advanced security headers or incident response policies are published. The use of an older Bootstrap version may pose some security risks. No analytics or tracking services are detected, which reduces privacy concerns but also limits marketing insights. Overall, the website is trustworthy and professional for its purpose, with good content quality and clear contact information. The main risks relate to potential outdated components and lack of formal security policies. Strategic improvements in security headers, incident response transparency, and technical updates would enhance the site's security posture and compliance.

V

VELUX FONDEN

veluxfonden.dk

11

VELUX FONDEN is a well-established Danish non-profit foundation founded in 1999, dedicated to supporting democratic and sustainable societal development through grants in research, social initiatives, culture, and environmental projects. The website is professionally designed using Drupal 10, featuring comprehensive content, clear navigation, and mobile optimization. Security posture is good with HTTPS enabled and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and security headers. Privacy compliance is strong with a detailed privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the foundation demonstrates high business credibility and trustworthiness with transparent contact information and governance disclosures.

S

Schlaraffia Aquisgranum

aquisgranum.de

56

Schlaraffia Aquisgranum is a small, non-profit cultural fraternity chapter based in Aachen, Germany, affiliated with the worldwide Schlaraffia organization founded in 1859. The website serves as an informational portal for members and interested parties, providing details about the fraternity's history, principles, and membership process. The site is built on WordPress using the OceanWP theme and Elementor page builder, indicating a moderate level of digital maturity with good SEO and mobile optimization. Security posture is solid with HTTPS and security headers in place, though formal security policies and incident response information are absent. Privacy compliance is basic but present, with a cookie notice and privacy policy page. Overall, the site is trustworthy, professionally presented, and focused on cultural and social fraternity activities.

V

Velux Foundations

veluxfoundations.dk

59

Velux Foundations is a Danish non-profit organization associated with VELUX FONDEN and Villum Fonden, focusing on philanthropic foundation activities. The website serves as a portal to these foundations, providing basic information and navigation. The site is built on Drupal 10, uses SVG logos for branding, and employs Plausible Analytics for privacy-conscious visitor tracking. The technical infrastructure is modern and mobile-optimized, though some security best practices such as security headers and DNSSEC are not implemented. No privacy or cookie policies are present, and no contact information is provided on the main page, which limits transparency and user trust. The domain is well-established since 2009, registered with a reputable registrar, and consistent with the website's branding and purpose.

U

UGT Catalunya

ugt.cat

60

UGT Catalunya is a regional labor union organization based in Catalonia, Spain, focused on advocating for workers' rights and social welfare. The website serves as an information portal for union members and the general public, providing updates on labor rights and union activities. The organization maintains a consistent brand presence and active social media channels, reinforcing its position as a key player in the regional labor movement. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, LayerSlider, Yoast SEO, and WP Rocket, indicating a modern and maintainable infrastructure. The site is secured with HTTPS and includes essential security headers, contributing to a good security posture. Performance and mobile optimization are adequate, though accessibility features could be improved. Security-wise, the site demonstrates good practices with HTTPS and security headers but lacks explicit privacy policies, terms of service, and incident response contacts, which are important for compliance and trust. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data is privacy protected, which is typical for non-profit organizations. Overall, the website is professional, trustworthy, and serves its audience well. Strategic improvements in privacy disclosures and incident response transparency would enhance compliance and user trust.

C

CCOO CAT

ccoo.cat

62

CCOO CAT is a leading labor union in Catalonia, Spain, dedicated to protecting and improving workers' rights and conditions. With a large membership base and extensive representation, it offers services including advice, training, collective agreement information, and member discounts. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting workers and union members in Catalonia. Technically, it is built on WordPress with modern plugins and tracking tools, maintaining good SEO and accessibility standards. Security posture is solid with HTTPS and some security plugins, though it lacks explicit security headers and incident response contacts. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. The absence of WHOIS registration data is a transparency concern but does not detract significantly from the site's legitimacy. Overall, the site is trustworthy, professional, and well-maintained.

T

Trans Europe Halles

teh.net

63

Trans Europe Halles is a well-established non-profit network uniting over 170 grassroots arts and culture centres across more than 40 European countries. Founded in 1983, it focuses on reclaiming abandoned spaces and transforming them into vibrant cultural hubs, promoting social and environmental justice. The organization supports its members through events, workshops, and community initiatives, positioning itself as a key player in the European cultural sector. Technically, the website is built on modern web technologies including Wagtail CMS, Bootstrap, and JavaScript frameworks, with good mobile optimization and SEO practices. The presence of Google Analytics and Mailchimp indicates active user engagement and marketing efforts. However, some technical improvements could be made, such as adding explicit security headers and publishing security policies. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance with GDPR. Nonetheless, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No direct contact emails or phone numbers were found, which may impact business credibility. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a cultural non-profit organization, but verification of domain registration and enhanced security disclosures are recommended to strengthen trust and compliance.

E

European Network of Cultural Centres (ENCC)

encc.eu

45

The European Network of Cultural Centres (ENCC) is a well-established non-profit organization uniting 178 socio-cultural organizations across 39 countries in Europe and beyond. Their primary focus is on training, cooperation, and advocacy to transform cultural practices and territories. The website reflects a professional and consistent brand image, targeting cultural centers and networks as its audience. The business model revolves around network collaboration and advocacy services, supported by EU co-funding. Technically, the website uses modern technologies including Alpine.js and Twill CMS, hosted by OVH SAS, with good mobile optimization and accessibility. Security posture is solid with HTTPS and CSRF protection, though some security headers are missing. Privacy compliance is good with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained.

C

CRESS Auvergne-Rhône-Alpes

ambition-ess.org

52

The website 'Ambition ESS Auvergne Rhône Alpes' serves as a comprehensive regional portal dedicated to the Social and Solidarity Economy (ESS) in the Auvergne Rhône-Alpes region of France. It provides a wide range of services including news, job and volunteer offers, event listings, thematic resources, and territorial filtering to support ESS actors. The platform is funded and supported by recognized regional authorities and organizations, notably the CRESS Auvergne-Rhône-Alpes. Technically, the site is built on Drupal 8 with modern front-end technologies and integrates Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security-wise, HTTPS is enforced and cookie consent mechanisms are in place, though some security headers could be improved and explicit security policies are absent. The WHOIS data is incomplete or unavailable, which slightly reduces domain trustworthiness, but the overall content and partner endorsements strongly indicate legitimacy. No adult or questionable content is present, making the site safe for general audiences.

L

Liga lidských práv

llp.cz

51

Liga lidských práv is a Czech non-profit organization dedicated to human rights advocacy and education. The website serves as an informational platform targeting the general public interested in human rights issues. The organization appears established with a domain age dating back to 2002, indicating longstanding presence in the sector. The site uses WordPress with the Divi theme and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, and Mailchimp, reflecting moderate digital maturity. However, explicit privacy and terms of service documents are not found, which may impact compliance and user trust. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal security policies. Overall, the website is professionally designed, mobile-optimized, and content relevant to its mission, but could improve transparency and security documentation.

S

Srdce v domě, p. o.

srdcevdome.cz

58

Srdce v domě, p. o. is a non-profit social service organization established by the Jihomoravský kraj (South Moravian Region) in the Czech Republic. The organization provides protected housing and support services primarily for persons with disabilities, operating facilities in Klentnice, Mikulov, and Lednice. Their website reflects a regional government-affiliated entity focused on social welfare, with clear contact information and service descriptions. The business model is non-profit, supported by regional government funding, targeting individuals seeking social housing and care services. Technically, the website is built on an ASP.NET WebForms framework with modern front-end libraries such as jQuery, Bootstrap, and Slick Carousel. It employs Google Tag Manager for analytics and tracking, and includes cookie consent mechanisms and a privacy policy, indicating a reasonable level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces transparency and trust slightly, but the website's content and affiliations strongly support its legitimacy. Overall, the website presents a trustworthy and professional front for a regional non-profit social service provider. Strategic improvements in security headers and public disclosure of incident response policies would enhance its security posture and compliance standing.

M

Mädchenzentrum Osnabrück

maedchenzentrum-os.de

47

Mädchenzentrum Osnabrück is a German non-profit organization dedicated to supporting girls and young women through various counseling and community programs. Their website reflects a clear focus on youth empowerment and social support, offering services such as open meetings, counseling on sensitive topics, and projects aimed at girls' perspectives. The organization maintains a local presence in Osnabrück and partners with related entities such as Haus Neuer Kamp e.V. and the Diakonisches Werk evangelischer Kirchen in Niedersachsen for data protection and operational support. Technically, the website is built on Joomla CMS with modern UI frameworks like UIkit and Yootheme, ensuring a responsive and user-friendly experience. The site employs standard privacy and cookie consent mechanisms compliant with GDPR, including detailed privacy policies and explicit user consent for cookies. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in implementing security headers and formal incident response disclosures. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission, with no indications of malicious activity or content safety concerns.

D

Dobrovolnické centrum, z.s.

dcul.eu

41

Dobrovolnické centrum, z.s. is a Czech non-profit organization with a 25-year history dedicated to connecting volunteers with those in need across various social sectors. The organization operates volunteer programs supporting children, youth, seniors, and disabled persons, and maintains international partnerships to foster volunteering in Europe. Their key services include mentoring programs, youth clubs, and cultural initiatives, positioning them as a trusted regional non-profit with accreditation in sports and cultural volunteering. Technically, the website is built on WordPress with modern plugins and good mobile optimization, hosted by WEDOS Internet, a.s. Security posture is solid with HTTPS enabled, though lacking security headers and formal privacy/cookie policies, indicating areas for compliance improvement. Overall, the site is professional and trustworthy, with clear contact information and active social media presence.

F

Forum Organizacji Pacjentów

fop25.pl

9

Forum Organizacji Pacjentów is a well-established non-profit organization hosting an annual conference focused on patient organizations and healthcare advocacy in Poland. The 2025 event aligns with significant dates such as the World Day of the Sick and Poland's EU presidency, attracting national and European leaders in healthcare. The website is professionally designed using WordPress and Divi theme, featuring live streaming integration and social media connectivity. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Tracking technologies from Google are used, indicating moderate user tracking. Overall, the site is credible and serves its business purpose effectively but should improve privacy compliance and security best practices.

Kwiat Kobiecości is a Polish non-profit organization dedicated to raising awareness and providing support for women diagnosed with cervical cancer. Founded around 2021, it is driven by the personal experiences of Ida Karpińska and other women who have battled and overcome this disease. The organization focuses on education, support, and advocacy to address the alarming statistics of cervical cancer in Poland. The website serves as a platform for information dissemination and community engagement, leveraging social media channels such as Facebook, Instagram, and YouTube to extend its reach. Technically, the website is built on WordPress using the Divi theme, supplemented by plugins like WooCommerce, Responsive Lightbox, and YOP Poll. It integrates Google Analytics and Facebook Pixel for visitor tracking and marketing insights. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. The absence of visible privacy and cookie policies, as well as security headers, indicates areas for improvement in compliance and security hardening. From a security perspective, the site uses HTTPS with a good SSL configuration, but lacks advanced security headers and explicit privacy compliance mechanisms. No WHOIS data is available, likely due to privacy protection, which is justifiable given the organization's non-profit and health-related nature. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, Kwiat Kobiecości presents as a legitimate and focused non-profit entity with a clear mission. Enhancements in privacy policy visibility, cookie consent, and security headers would strengthen its compliance posture and user trust. The technical infrastructure is sound but could benefit from ongoing updates and security best practices to maintain resilience.

F

Fundacja Onkocafe - Razem Lepiej

onkocafe.pl

58

Fundacja Onkocafe - Razem Lepiej is a Polish non-profit foundation established in 2013, focused on supporting patients with breast and prostate cancer through education, psychological support, and advocacy. The website is professionally designed using WordPress and integrates modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and reCAPTCHA for form security. The foundation maintains an active social media presence across Facebook, Instagram, Twitter, YouTube, and LinkedIn, enhancing its outreach and engagement with its target audience. The domain registration data aligns well with the organization's profile, indicating legitimacy and stability. Technically, the website is well-structured with good mobile optimization and SEO practices. However, there is room for improvement in security posture, as no security headers were detected, and DNSSEC is not enabled for the domain. Privacy compliance is partial; while cookie consent is implemented, a dedicated privacy policy page is missing, which is a compliance gap. Contact information is clearly presented, including a phone number and contact page link, but no verified company email addresses were found in the HTML content. Overall, the security posture is moderate with good HTTPS implementation and use of security tools like reCAPTCHA. The absence of a vulnerability disclosure policy and security.txt file suggests limited incident response transparency. The website content is safe, targeted at a general audience interested in cancer patient support, with no adult or questionable content detected.

F

Fokus Praha

fokus-praha.cz

51

Fokus Praha is a well-established non-profit organization based in the Czech Republic, dedicated to providing social and health support to individuals facing serious mental health challenges. The organization holds a strong market position as the largest NGO in the country focused on mental health. Their website reflects a professional and consistent brand image, with clear descriptions of their mission and services targeted at affected individuals and stakeholders. Technically, the site is built on WordPress using modern themes and plugins, including Astra and Yoast SEO, ensuring good SEO and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA, and a cookie consent mechanism, although explicit privacy and security policies are not present on the homepage. Overall, the site is accessible, trustworthy, and demonstrates a moderate to good security posture.

Síť pro rodinu, z.s. is a Czech non-profit organization established in 2015 that serves as an umbrella for maternity, family, and community centers. It focuses on promoting family-friendly legislation, supporting family centers, and fostering a family-friendly climate in society and the labor market. The organization offers advocacy, networking, educational events, and family-friendly company audits and awards. The website reflects a stable market position with clear communication and trust indicators such as testimonials and social media presence. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and libraries like Modernizr and FastClick. It is hosted by a Czech hosting provider and shows good mobile optimization and SEO practices. However, it lacks some security headers and privacy compliance elements such as privacy and cookie policies. From a security perspective, the site enforces HTTPS and does not expose sensitive data. No vulnerabilities or malicious content were detected. The absence of security headers and privacy policies are notable gaps. There is no evidence of incident response or vulnerability disclosure mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

D

Dobrovolnické centrum, z.s.

dcul.cz

44

Dobrovolnické centrum, z.s. is a Czech non-profit organization with a 25-year history dedicated to connecting volunteers with those in need across various sectors including sports, culture, and community support. The organization operates volunteer programs supporting children, youth, seniors, and persons with disabilities, and maintains international partnerships to promote volunteering in Europe. Their digital presence is built on a WordPress platform hosted by WEDOS Internet, a.s., featuring modern web technologies and responsive design. The website is well-structured, professionally designed, and provides clear contact information and social media links, although it lacks privacy and cookie policies which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the site is trustworthy and serves its community-focused mission effectively.

The website 'Spektrum rozvoje zen' serves as a platform supporting women engaged in socially beneficial activities under the organization SPIRALIS. It targets a niche audience within the Czech Republic and operates as a small non-profit entity. The site content is minimal, primarily providing a promotional message and a link to an external Weebly-hosted site, indicating limited direct engagement on the main domain. Technically, the website is built on an outdated WordPress 4.8.3 platform with the Divi theme and uses older jQuery libraries, which introduces potential security vulnerabilities. Hosting is provided by Wedos, a Czech hosting provider consistent with the website's regional focus. Security posture is moderate with HTTPS enabled but lacking security headers and updated software. Privacy compliance is weak, with no visible privacy or cookie policies and no GDPR compliance indicators. Contact information is absent, reducing business credibility and user trust. Overall, the site is functional but requires significant improvements in security, privacy, and content richness to enhance trust and compliance.

The website mhk.hr serves as the official platform for the annual cultural event 'Mjesec hrvatske knjige' (Month of Croatian Books), organized by Knjižnice grada Zagreba and supported by the Croatian Ministry of Culture and Media. It provides comprehensive information about the event, including program schedules, registration forms, promotional materials, and news updates. The target audience includes Croatian libraries, educators, students, and the general reading public. The site emphasizes cultural promotion and education through reading initiatives and contests.

F

Frank Bold

budfrankbold.cz

10

Frank Bold is a purpose-driven organization based in the Czech Republic, operating for over 12 years with a focus on legal services, consulting, and public benefit projects. The company is structured into multiple divisions including legal advisory, consulting, societal projects, core organizational functions, and student internships. Their market position is solid within the Czech and broader European context, targeting professionals and students interested in impactful legal and consulting careers. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on the Webflow platform, utilizing modern analytics tools such as Google Analytics, Matomo, Microsoft Clarity, and Facebook Pixel, all integrated with user consent mechanisms. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. However, there is room for improvement in security headers and formal security policies. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks explicit security headers and published incident response or vulnerability disclosure policies. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain registration trust insights, but the professional presentation and structured data support legitimacy. Overall, Frank Bold's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Strategic improvements in security policy transparency and technical security headers would enhance their security posture and trustworthiness further.

A

Asociace organizací v oblasti vězeňství

aoov.cz

47

Asociace organizací v oblasti vězeňství (AOOV) is a Czech non-profit association founded in 2019, focused on advocacy, knowledge sharing, and progressive reforms in the prison and criminal justice sector. The organization aims to support the integration of formerly incarcerated individuals into society and restore relationships disrupted by crime. The website reflects a professional and consistent brand presence with clear communication of its mission and activities, targeting organizations and professionals in the criminal justice field. Technically, the site is built on WordPress using Elementor and several plugins for SEO, user management, and event/calendar features, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and explicit privacy and cookie policies, which are areas for improvement. Overall, the site is trustworthy, safe for general audiences, and provides clear contact information and social media links, supporting its credibility and outreach efforts.

Z

Za branou, z. s.

zabranou.cz

49

Za branou, z. s. is a Czech non-profit organization founded in 2010 dedicated to supporting families and children of incarcerated individuals. The organization offers counseling, family support, social rehabilitation, educational training, and literary competitions. Their website reflects a focused mission with clear navigation and relevant content tailored to their target audience. Technically, the site is built on the Ghost CMS platform, uses modern web technologies including jQuery and Google Analytics, and is hosted with DNS services via Cloudflare and registrar WEDOS. The website is mobile-optimized and performs moderately well, though accessibility features are basic. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the organization's claims, supporting legitimacy and trustworthiness.

N

Nadační fond Viki

nfviki.cz

41

Nadační fond Viki is a Czech non-profit foundation dedicated to supporting children and adolescents battling cancer and their families. The foundation provides financial and material aid, emotional support, and initiatives to improve patients' quality of life during and after treatment. The website is professionally designed using WordPress with modern plugins and includes clear contact information and partner references. Technically, the site uses HTTPS, cookie consent mechanisms, and Google Analytics for minimal tracking. However, it lacks a published privacy policy and terms of service, which are important for compliance. WHOIS data is unavailable, likely due to privacy protection, but the site content and partner links indicate legitimacy. Overall, the foundation maintains a good security posture with room for improvement in compliance documentation.

S

Sucht Schweiz

suchtschweiz.ch

62

Sucht Schweiz is a Swiss non-profit foundation dedicated to preventing problems related to the consumption of psychoactive substances and addictive behaviors. The organization operates with a clear mission focused on research, prevention, information dissemination, and advocacy. The website reflects a mature digital presence with multilingual support, professional design, and modern web technologies including WordPress, Yoast SEO, and Usercentrics for cookie consent. It prominently features donation options and provides extensive content on addiction-related topics, targeting both the general public and professionals in the field. Technically, the site is well-implemented with good SEO, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit security policies. Privacy compliance is partially met with a cookie consent mechanism but no visible privacy or terms of service pages. Contact information is not explicitly provided in the HTML content, which could be improved for transparency. Overall, the website is trustworthy and professional, with a strong alignment between WHOIS data and business claims, indicating legitimacy. The content is safe for a mature audience, focusing on health and addiction prevention without any explicit or NSFW material.

Č

Český svaz ledního hokeje & eSports.cz, s.r.o.

pojdhrathokej.cz

45

The website 'Pojď hrát hokej' is a Czech initiative focused on promoting ice hockey among children and their parents. It organizes events such as 'Týden hokeje' and provides resources to find local hockey clubs and information on equipment. The site is supported by reputable partners including Kaufland and Český hokej, indicating a strong market position within the Czech sports non-profit sector. The business model centers on community engagement and sports promotion rather than commercial sales. Technically, the website employs a modern tech stack including Bootstrap for responsive design, jQuery, Google Tag Manager, Facebook Pixel, and Google Analytics for tracking and marketing. Hosting appears to be managed by REG-ZONER, a Czech registrar and hosting provider. The site is mobile-optimized with good navigation and basic accessibility features, though some SEO and security header enhancements could be made. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policies, incident response contacts, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected. Tracking is moderate, using common analytics and marketing tools. Overall, the website is professional, trustworthy, and safe for general audiences, with a strong focus on sports promotion. Recommendations include improving security headers, publishing security policies, and adding incident response information to enhance trust and compliance.

W

Working Chance

workingchance.org

57

Working Chance is a UK-based non-profit charity dedicated to supporting women with convictions to find employment and education opportunities. The organization provides tailored support including CV preparation, interview coaching, confidence building, and employer training. It holds a unique market position as the only UK charity solely focused on this demographic, working closely with employers and policymakers to break down barriers and stigma. The website reflects a professional and consistent brand with excellent content quality and user experience. Technically, the site uses modern analytics tools and is hosted on DigitalOcean with a CDN, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is good with clear cookie and privacy policies. Overall, the domain registration data supports the legitimacy and trustworthiness of the organization.

VEBO is a small non-profit association based in Switzerland focused on the development of probation services in Eastern Europe. Founded approximately 15 years ago by professionals from the Canton of Zürich, it supports penitentiary system development projects in countries including the Czech Republic, Romania, Georgia, and Greece. The organization provides expertise and fundraising assistance to both state and private institutions. The website reflects a professional and consistent brand with clear content targeted at probation service professionals and related NGOs. Technically, the site is built on the Contao CMS platform using common JavaScript libraries for UI enhancements. It is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data is unavailable due to TLD restrictions, but the domain usage aligns with the organization's stated history and purpose. Overall, the website is trustworthy and suitable for its audience, though improvements in security transparency and contact options could enhance credibility.

Y

Yellow Ribbon

yellowribbon.cz

64

Yellow Ribbon is a Czech non-profit organization dedicated to supporting the social reintegration of individuals after serving prison sentences. Through sports and awareness campaigns, they aim to reduce recidivism and provide second chances. The organization has a medium-sized presence in the Czech Republic with a history dating back to 2015 and maintains active partnerships and media visibility. Technically, the website is built on Webflow, uses Cloudflare for security and performance, and integrates Google Analytics and Cookiebot for privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data due to privacy protection is typical for non-profits but reduces transparency. Overall, the website is professional, trustworthy, and compliant with GDPR regulations.

N

Nadace 3WFoundation

3wfoundation.org

49

3WFoundation is a philanthropic foundation established in early 2022 by the Wałach brothers and their families, focusing on supporting Christian, charitable, cultural, and local community projects primarily in the Czech Republic and Central/Eastern Europe. The foundation emphasizes strategic philanthropy grounded in Christian values such as love, solidarity, and forgiveness, aiming for impactful societal change. The website presents clear information about the foundation's mission, supported projects, and founders, with content available in Czech, English, and Polish. Technically, the site uses modern web technologies including jQuery, Google Fonts, and Google Analytics, and implements a cookie consent mechanism compliant with GDPR principles. However, it lacks a dedicated privacy policy and terms of service pages, which are important for full compliance and transparency. Security-wise, the site uses HTTPS but does not show advanced security headers or incident response information.

P

PROJEKT 23

projekt23.cz

39

PROJEKT 23 is a Czech non-profit initiative focused on crime prevention, social issues such as bullying, drugs, domestic violence, and providing support through storytelling, videos, and an assistance helpline. The project operates independently without corporate or institutional funding and collaborates with governmental and non-governmental organizations. Their key services include a YouTube channel, educational lectures, crime prevention projects, and an assistance hotline. The website demonstrates a consistent brand and professional content aimed at a general audience interested in social welfare and prevention. Technically, the site uses modern web technologies including optimized YouTube embeds and FontAwesome icons, with good mobile responsiveness and SEO practices. However, no privacy or cookie policies were found, and WHOIS data for the domain is unavailable, limiting trust assessment. Security headers and SSL configuration details are not provided, but HTTPS usage is implied. Overall, the site is credible and trustworthy based on content and partnerships, though improvements in privacy compliance and security transparency are recommended.

S

Südniedersachsen Stiftung

suedniedersachsenstiftung.de

43

Südniedersachsen Stiftung is a regional non-profit foundation dedicated to fostering a strong and sustainable community in the Südniedersachsen region of Germany. The foundation focuses on key areas such as education, social welfare, environmental sustainability, economic development, and scientific collaboration. Their website reflects a professional and consistent brand image, targeting regional stakeholders and community members. The business model centers on supporting and coordinating regional projects to enhance the quality of life and economic prospects in the area. Technically, the website is built on a modern WordPress platform using Elementor as the page builder, supplemented by various plugins for SEO (Rank Math), event management, and cookie consent (Borlabs Cookie). The infrastructure is hosted on servers associated with kasserver.com, with a moderate performance profile and good mobile optimization. SEO and accessibility features are adequately implemented, though there is room for improvement in accessibility. From a security perspective, the site employs HTTPS and a cookie consent mechanism, but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of a privacy policy and terms of service pages is a notable compliance gap, although cookie consent is present. The WHOIS data indicates a legitimate domain registration with no privacy protection, but lacks detailed registrant information. Overall, the website presents a trustworthy and professional front for the foundation, with good business credibility and technical implementation. However, improvements in privacy compliance documentation and security best practices are recommended to enhance trust and regulatory adherence.

R

RUBIKON Centrum, z. ú.

rubikoncentrum.cz

56

RUBIKON Centrum, z. ú. is a Czech non-profit organization established in 1994 that supports individuals with criminal pasts in reintegrating into society. Their services include employment assistance, debt resolution, social counseling, housing support, and educational programs. The organization has a strong market presence with numerous partnerships across government, private sector, and community organizations. The website is built on WordPress and uses modern web technologies including jQuery, Popper.js, and Tippy.js, with integrated analytics from Google and Facebook. Security measures such as HTTPS and Content Security Policy are implemented, though some additional headers could enhance security further. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact information is available primarily via phone and contact forms, with no direct company emails found in the HTML. WHOIS data is unavailable, which slightly impacts trust but is common for privacy-protected domains. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

Princeton in Africa is a well-established non-profit organization dedicated to developing young leaders through yearlong fellowships with impactful African organizations. The website reflects a mature program with a strong network of fellows, host organizations, and alumni, emphasizing leadership development and contributions across multiple sectors in Africa. The site is professionally designed using WordPress and integrates common web technologies such as jQuery, Google Analytics, and Gravity Forms for user engagement and data collection. Security posture is generally good with HTTPS enforced and secure form handling, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. The WHOIS data is unavailable or malformed, which slightly reduces domain trustworthiness, but the website content and contact information strongly support legitimacy. Overall, the site is accessible, safe, and provides comprehensive information for its target audience.

U

U Františka, z.s.

ufrantiska.cz

39

U Františka, z.s. is a Czech non-profit organization dedicated to the care and rehabilitation of abandoned, stray, or abused dogs, including operating a dog hotel and providing canistherapy services. The organization is officially approved by regional veterinary authorities and the ministry, positioning it as a trusted local animal welfare entity. The website is built on WordPress using the Astra theme and common plugins, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

G

GLAJ-Vaud

glaj-vaud.ch

48

GLAJ-Vaud is a Swiss non-profit umbrella organization coordinating youth activities in the canton of Vaud. It provides services such as training (FORJE), platforms for youth engagement, and project management for youth-related initiatives. The website is built on WordPress with WooCommerce and uses modern SEO and performance tools. The technical infrastructure is solid with HTTPS and security best practices, though some security headers could be improved. Privacy compliance is basic, lacking explicit privacy and cookie policies. Contact is available via a member login and a contact page. Overall, the site is professional and trustworthy but could enhance privacy and security transparency.

E

Evangelisch Luther

luth-kirche.li

58

The website www.luth-kirche.li represents a small, local religious organization affiliated with the Evangelisch Luther church in Liechtenstein. The site is built using the Wix platform and serves primarily as an informational portal for community members and visitors interested in the church's activities. The content is basic and primarily in German, with no advanced business or e-commerce features detected. Technically, the site uses standard Wix scripts and styles, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks important security headers and privacy policies. No contact information or incident response details are provided, limiting transparency and user trust. Overall, the site is legitimate and consistent with its stated purpose but would benefit from enhanced privacy compliance and security best practices.

J

Jugendcafé Camäleon

camaleon.li

50

Jugendcafé Camäleon is a small non-profit youth center based in Vaduz, Liechtenstein, providing a community space for youth engagement, projects, and events. The website serves as an informational and promotional platform targeting local youth and community members, offering details about their services, events, and gallery. The organization appears well-established since 2018 with a clear local focus and active social media presence. Technically, the website is built on WordPress with standard plugins such as Yoast SEO and Contact Form 7, ensuring basic SEO and contact functionalities. The site is mobile-optimized and uses modern libraries like Swiper.js and FontAwesome for UI enhancements. Security posture is adequate with HTTPS enforced and Google reCAPTCHA protecting forms, though it lacks advanced security headers and explicit incident response policies. Privacy and cookie policies are present but lack an explicit consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

T

Toulava o.p.s.

toulava.cz

48

Toulava o.p.s. operates a regional tourism website focused on promoting hiking, cycling, family activities, and accommodation in the southern and central Bohemia regions of the Czech Republic. The platform offers comprehensive tourist information, event calendars, and an e-shop for regional products, supported by local government entities. Technically, the website is built on Angular 7 with modern JavaScript libraries and integrates mapping APIs such as Mapy.cz and Leaflet, providing a rich interactive user experience. The site is mobile-optimized and demonstrates good SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers are missing. Privacy compliance is mostly addressed with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. WHOIS data is unavailable, which slightly reduces trust but the overall business credibility remains high due to transparent contact information and government support. Recommendations include enhancing security headers, adding cookie consent, and publishing explicit security and incident response policies.

E

Engagiert in Flensburg - Ehrenämter und Freiwilligenbörse

engagiert-in-flensburg.de

44

The website engagiert-in-flensburg.de serves as a local platform dedicated to promoting volunteering and community engagement opportunities in Flensburg, Germany. It targets volunteers and organizations interested in Ehrenämter and Freiwilligenbörse activities. The platform operates likely as a non-profit or community service entity, focusing on connecting individuals with local volunteer opportunities. Technically, the site is built on WordPress using Elementor and integrates modern plugins such as Rank Math PRO for SEO and Google reCAPTCHA v3 for form security. Hosting is provided by agenturserver, a German hosting provider, which aligns with the website's regional focus. Security posture is moderate, with basic protections like reCAPTCHA but lacking advanced security headers and published policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a good user experience with clear navigation and mobile optimization but requires improvements in transparency and security documentation to enhance trust and compliance.

L

LILA HILFE e.V.

lilahilfe.org

61

Lila Hilfe e.V. is a German non-profit feminist solidarity organization dedicated to supporting women affected by gender-based violence and structural discrimination. The organization operates primarily within Germany, providing financial aid, resources, and community support to its target audience. The website reflects a clear mission and offers membership and donation options to sustain its activities. Technically, the site is built on a modern React and Next.js framework, ensuring fast performance, excellent mobile optimization, and good accessibility. The content is rich, professionally presented, and highly relevant to its audience. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks explicit security headers and formal security policies. Privacy compliance is moderate, with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection common in non-profits. The site maintains a high trust level with clear branding and social media presence.

K

KZ-Gedenkstätte Husum-Schwesing | Erinnern und Handeln

kz-gedenkstaette-husum-schwesing.de

39

The website kz-gedenkstaette-husum-schwesing.de serves as an informational and memorial platform dedicated to the Husum-Schwesing concentration camp history. It targets a general audience interested in historical remembrance and education. The site operates on WordPress using the Divi theme and integrates OpenStreetMap for location services. The technical infrastructure is standard for small non-profit organizations, with moderate performance and basic mobile optimization. Security posture is limited, with no evident security headers or policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain WHOIS data is limited, showing only name servers from a hosting provider, with no detailed registrant information, which slightly reduces trust but is not uncommon for small organizations. Overall, the site is functional and professional but lacks advanced security and compliance features.

D

Deutsche Stiftung Denkmalschutz

denkmalschutz.de

48

The Deutsche Stiftung Denkmalschutz website represents a well-established non-profit organization dedicated to the preservation of cultural heritage and monuments in Germany. The site provides comprehensive information about their mission, projects, events, and donation opportunities, positioning them as the largest private initiative in their sector. The website is built on TYPO3 CMS, featuring modern design elements and good mobile optimization, reflecting a mature digital presence. Security posture is solid with HTTPS and secure forms, though there is room for improvement in security headers and cookie consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness, supported by recognized donation seals and transparent reporting.

U

Udruga Djeca prva

djeca-prva.hr

57

Udruga Djeca prva is a Croatian non-profit organization dedicated to supporting children, youth, and families, especially those in vulnerable conditions. Established in 1994, it has a long-standing presence with a domain registered since 2002. The organization provides psychosocial counseling, social services, humanitarian aid, and runs various programs involving families and professionals from education and social care sectors. The website reflects a professional and consistent brand image, with clear communication of its mission and services. Technically, the site is built on WordPress with modern plugins and is hosted behind Cloudflare, ensuring good performance and security. The presence of GDPR-compliant cookie consent and privacy policies indicates strong privacy awareness. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

M

MAS Blaník, z. s.

masblanik.cz

44

MAS Blaník is a Czech non-profit organization dedicated to regional development, supporting local agriculture, education, and social services in the Blaník region. The website serves as an official portal providing information about projects, events, and community initiatives, with visible EU co-financing support. Technically, the site is built on WordPress using the Avada theme and Fusion Builder, incorporating modern JavaScript libraries and responsive design. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain trust verification, though the website content and social presence support legitimacy. Overall, the site is well-structured and professional but could improve privacy compliance and security transparency.

G

GlücksSpirale

gluecksspirale.de

60

GlücksSpirale is a well-established German lottery organization offering various lottery ticket options with significant prizes, including immediate and long-term monthly winnings. The business model integrates social responsibility by funding welfare, monument restoration, and sports projects, positioning itself as a socially conscious lottery provider. The website reflects a mature digital presence with modern technologies such as React and Next.js, hosted on reliable infrastructure including Amazon S3 and Deutsche Telekom DNS servers. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident through cookie consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high trustworthiness and professionalism suitable for its regulated gambling industry context.

C

Creatives for Climate

creativesforclimate.co

64

Creatives for Climate is a non-profit global creative ecosystem dedicated to climate justice by uniting over 7,000 professionals across 90+ countries. The organization focuses on reshaping narratives, preserving truth, and driving systemic change through education, business transformation, and creative partnerships. Their market position is that of a leading global network in the climate creative space, leveraging community and campaigns to accelerate a just transition. Technically, the website is built on Squarespace CMS, utilizing modern web technologies including Google Analytics, Tag Manager, reCAPTCHA, and Typekit fonts. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Hosting is managed by Squarespace, ensuring reliable uptime and SSL encryption. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms with opt-in/out capabilities. However, it lacks some advanced security headers and does not publicly disclose security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could improve security posture and privacy transparency. Strategic recommendations include enhancing security headers, publishing incident response policies, and providing clearer contact information.