Non-profit security reports

C

Circular City – Zirkuläre Stadt e.V.

circular.berlin

57

Circular Berlin is a small non-profit organization dedicated to accelerating Berlin's transition towards a circular city. Their core activities include knowledge building, community development, education, and practical programs focused on the circular economy. The organization positions itself as a key local actor fostering sustainable urban metabolism through research and community engagement. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting circular economy practitioners and the broader community in Berlin. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, enhanced by plugins such as Yoast SEO and Matomo for analytics. Hosting and domain registration are transparent and consistent with the organization's profile. The site is moderately performant and well-optimized for mobile devices, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status to prevent unauthorized transfers. However, DNSSEC is not enabled, and some recommended security headers are missing. The cookie consent mechanism is GDPR compliant, using CookieYes for user consent management. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt file is found. Overall, the website presents a trustworthy and professional digital presence for a non-profit organization. Strategic recommendations include enabling DNSSEC, implementing additional security headers, publishing a security policy, and enhancing incident response readiness to further strengthen security posture and trust.

F

Fonds Le Saint

fondslesaint.org

42

Fonds Le Saint is a small non-profit organization based in Bourg-Blanc near Brest, France, focused on promoting nutrition education and making sports accessible to children with disabilities. Established in 2015, the foundation supports local community initiatives and collaborates with sports clubs and educational programs. The website reflects a clear mission and target audience, emphasizing social impact and community engagement. Technically, the website is built on Joomla CMS with UIkit framework and uses common web technologies such as jQuery and Google Analytics for tracking. The site is mobile-optimized and presents a professional design with good navigation and content relevance. However, there is room for improvement in SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks important security headers, which could be enhanced to improve protection against common web threats. Privacy and cookie policies are not present, indicating compliance gaps with GDPR and related regulations. WHOIS data is unavailable due to query restrictions, limiting domain trust verification. Overall, the website is functional and trustworthy for its intended audience but would benefit from improved security practices and privacy compliance to strengthen its digital maturity and user trust.

P

Posilujeme Česko

posilujemecesko.cz

52

Posilujeme Česko is a Czech nationwide non-profit initiative dedicated to supporting NGOs and their supporters by providing objective information, amplifying their voice, and fostering community engagement. The website serves as a platform for sharing stories, news, and resources aligned with sustainable development goals and is affiliated with the European Civic Forum and the United Nations. Technically, the site is built on WordPress with Elementor and uses common plugins for content management and user interaction. It is hosted likely by WEDOS, a Czech provider, and uses HTTPS with moderate performance and mobile optimization. Security posture is adequate but lacks some advanced headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is available via email and contact forms, with active social media presence. Overall, the site is trustworthy, professionally designed, and serves its non-profit mission effectively.

D

Deutsches Rotes Kreuz

drk-guestrow.de

48

The website www.drk-guestrow.de represents the Kreisverband Güstrow e.V. branch of the Deutsches Rotes Kreuz (German Red Cross), a well-established non-profit humanitarian organization. The site provides comprehensive information about their social services, community engagement, courses, and donation opportunities, targeting the general public, volunteers, and donors. The content is professionally presented with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on TYPO3 CMS, employs modern web standards, and shows good mobile optimization and accessibility. Security posture is adequate with HTTPS assumed and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, compliant with GDPR, and serves as an effective digital presence for the local DRK branch.

D

DRK Kreisverband Rostock e.V.

drk-rostock.de

56

DRK Kreisverband Rostock e.V. is a regional branch of the German Red Cross, providing humanitarian aid, social services, and community support in Rostock and surrounding areas. The organization focuses on emergency rescue, care for seniors, support for people with disabilities, and volunteer engagement. The website reflects a mature digital presence with a professional design, clear navigation, and compliance with GDPR and cookie consent regulations. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Analytics via Google Tag Manager. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response information are absent. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

A

Arbeiterwohlfahrt Rostock

awo-rostock.de

49

Arbeiterwohlfahrt Rostock is a well-established non-profit social welfare organization based in Germany, providing a wide range of social services including care for the elderly, child and youth support, social psychiatry, migration assistance, and volunteer opportunities. The organization operates with a clear mission to promote social justice and community support in the Rostock region. Their website reflects a professional and consistent brand presence, with comprehensive information about their services and career opportunities. Technically, the site is built on WordPress with modern plugins for SEO, cookie consent, and interactive content, demonstrating a mature digital infrastructure. Security-wise, the site uses HTTPS and cookie consent management, but lacks a formal published security policy or vulnerability disclosure, which could be improved. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, making it a reliable source for users seeking social services or employment with AWO Rostock.

F

Fundacja NUTRICIA

fundacjanutricia.pl

66

Fundacja NUTRICIA is a Polish non-profit foundation focused on nutrition research, education, and social change. Established in 2010, it operates nationally with multiple scientific partners and organizes educational programs and grant projects. The website reflects a professional and consistent brand presence targeting Polish-speaking audiences interested in nutrition and health. Technically, the site uses modern JavaScript libraries such as jQuery and Slick Carousel, integrates Google Analytics and Tag Manager for user tracking, and is hosted by cyber_Folks S.A. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and CSRF tokens, though additional security headers and policies could enhance protection. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the site is trustworthy and well-maintained, with no signs of suspicious activity or content.

Děti Země is a Czech non-profit environmental organization focused on protecting nature and human living environments, emphasizing regional work and advocacy. The website serves as an informational platform presenting news, campaigns, and organizational programs. The technical infrastructure is basic, relying on traditional HTML, CSS, and JavaScript without modern CMS or frameworks, and lacks mobile optimization. Security posture is weak with no visible HTTPS enforcement or security headers, and privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is limited to an email address and a Facebook page, reflecting a small-sized NGO profile. Overall, the website is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

U

Udruženje građana EmPower

empower.rs

42

Udruženje građana EmPower is a Serbian non-profit organization focused on empowering youth through educational projects and workshops. Their offerings include digital learning tools like eBukvar, internet safety workshops, Erasmus Plus international youth exchanges, and programming workshops. The organization targets young people and children, aiming to improve community life through education and digital literacy. The website is professionally designed using WordPress and common web technologies, providing a good user experience and mobile optimization. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. Contact information and social media presence support business credibility. Overall, the site is safe and trustworthy with room for improvement in privacy and security practices.

R

Repair Café Graz

repaircafe-graz.at

45

Repair Café Graz is a small, community-driven non-profit initiative based in Austria focused on sustainability by promoting repair culture to reduce waste. The website serves as an informational platform for local community members interested in repair events and workshops. Technically, the site is built on WordPress using the Divi theme, incorporating standard web technologies and Google reCAPTCHA for form security. The website is accessible, mobile-optimized, and moderately performant but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS and reCAPTCHA, but missing security headers and formal policies reduce overall security maturity. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, matching the local community focus. Strategic improvements in privacy compliance, security headers, and transparency would enhance trust and security.

F

Forum Urbanes Gärtnern

urbanes-gaertnern.at

54

Forum Urbanes Gärtnern operates the Zentralgartenbüro website as a non-profit organization dedicated to promoting urban gardening, community gardens, and educational gardening initiatives in Graz, Austria. The organization provides workshops, consulting, garden construction, and networking opportunities to foster social-ecological transformation through gardening. Their market position is that of a local leader in community gardening support with a clear focus on education and social impact. The website is professionally designed, mobile-optimized, and provides comprehensive content relevant to their audience.

S

SchloR

schlor.org

42

SchloR is a self-managed non-profit community project based in Vienna-Simmering, Austria, focused on providing solidarity-based housing and creative workspaces. The organization operates under the umbrella of recognized entities such as habiTAT and Mietshäuser-Syndikat, emphasizing collective living and cultural engagement. Their business model includes direct loans from supporters to finance their projects, reflecting a strong community trust and engagement. The website is well-structured, content-rich, and targets local community members interested in alternative housing and cultural activities. Technically, the website is built on WordPress using modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. The presence of Google reCAPTCHA on forms enhances security against automated abuse. However, some security best practices such as DNSSEC and security headers are not implemented, which could be improved to strengthen the security posture. From a security perspective, the site uses HTTPS and has domain transfer protections in place, indicating a legitimate and controlled domain. No WAF or blocking mechanisms are detected, and the site content is fully accessible. Privacy compliance is adequate with a privacy policy present, though cookie consent mechanisms are lacking. No incident response or vulnerability disclosure information is found, which could be areas for future enhancement. Overall, SchloR presents a trustworthy, community-oriented project with a solid web presence and moderate technical maturity. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would enhance their security and compliance posture further.

G

GemSe – Gemeinsam Sein

gemse.org

60

GemSe – Gemeinsam Sein is a small non-profit queer-feminist collective and association based in Kärnten, Austria, providing a community space for events, workshops, and vacation stays. The organization promotes solidarity, antifascism, and radical tenderness, targeting the queer-feminist community and allies. The website is multilingual and offers booking options and event information, supported by EU co-financing and ProEuropean Values initiatives. Technically, the website runs on WordPress 6.8.3 with common plugins such as Essential Blocks and WP Multilang. It uses HTTPS with a good SSL configuration and is hosted under a registrar consistent with the Austrian location. The site is moderately performant, mobile-optimized, and has good SEO and accessibility basics, though some accessibility features could be improved. From a security perspective, the site uses HTTPS and has domain transfer protection but lacks DNSSEC and security headers. There is no visible security policy or incident response information, and no cookie consent mechanism is implemented, which may affect GDPR compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional for its niche community purpose but could improve privacy compliance and security posture by adding cookie consent, security headers, and published security policies.

D

Deutsche Postcode Lotterie GmbH & Co. KG

postcode-lotterie.de

70

The Deutsche Postcode Lotterie GmbH & Co. KG operates a socially responsible lottery platform in Germany, allowing participants to win prizes based on their postal codes while supporting charitable projects. The website is professionally designed, highly accessible, and optimized for mobile devices, reflecting a mature digital presence. Key services include monthly and daily lottery draws, with a significant portion of proceeds dedicated to social causes. The platform holds reputable certifications such as TÜV Saarland and Trusted Shops, enhancing its credibility. Technically, the website leverages modern frameworks including Next.js and Storyblok CMS, hosted on Vercel and AWS infrastructure. It employs best practices in security, including HTTPS enforcement, security headers, and content security policies. Analytics and marketing tools like Google Tag Manager and Usercentrics CMP are used with GDPR-compliant consent mechanisms. Security posture is strong with no evident vulnerabilities or exposed sensitive data. However, explicit security policy and incident response contact details could be more visible. Privacy compliance is robust, with comprehensive privacy and cookie policies in place. The domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security policy transparency and incident response visibility to further strengthen user trust and compliance.

C

Cesta z krize, z. ú.

cestazkrize.net

10

Cesta z krize, z. ú. is a Czech non-profit organization specializing in crisis intervention and support services, particularly focusing on endangered children and psychological first aid for adults. The organization operates recognized crisis helplines 116 000 and 116 123, with official government authorizations and memberships in European federations. Their website reflects a professional and consistent brand presence, targeting families, educators, and the general public in crisis situations within the Czech Republic. Technically, the website uses modern web technologies including Cookiebot for cookie consent, Google Tag Manager, and Facebook Pixel for analytics and marketing. Hosting is provided by Active24, and the site is mobile optimized with good SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is moderate; a cookie policy and consent mechanism exist, but no explicit privacy policy or terms of service pages were found in the provided content. No incident response or vulnerability disclosure information is available. Overall, the domain registration is consistent with the organization's history and shows no suspicious patterns. The website is safe for general audiences and does not contain adult or explicit content.

G

Gymnathlon Foundation

kidslovesport.org

46

Gymnathlon Foundation is a Czech non-profit organization dedicated to providing sports scholarships and organizing sports activities for disadvantaged children, particularly those from single-parent and low-income families. The website is professionally designed using the Framer platform and incorporates modern analytics and cookie consent mechanisms, indicating a moderate level of digital maturity. However, the absence of explicit privacy and terms of service policies, as well as the lack of contact information, limits transparency and user trust. The security posture is adequate with HTTPS enabled but lacks advanced security headers and vulnerability disclosure policies. The WHOIS data shows an unusual future domain creation date, which may be a data error but slightly reduces trustworthiness. Overall, the website is functional and serves its non-profit mission but would benefit from enhanced compliance and security documentation.

D

DĚLEJ CO TĚ BAVÍ z.ú.

delejcotebavi.com

10

DĚLEJ CO TĚ BAVÍ z.ú. is a Czech non-profit organization dedicated to providing meaningful leisure activities for children and youth through courses, workshops, festivals, and conferences. The organization focuses on promoting physical activity, creativity, and personal development while fostering social equality and environmental responsibility. Their market position is that of a small, locally focused non-profit with a network of recognized partners and a clear mission to support youth development. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Analytics and Tag Manager for analytics, and reCAPTCHA for bot protection. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. However, some security enhancements such as enabling DNSSEC and adding security headers could improve the overall security posture. From a security perspective, the site demonstrates good privacy compliance with a cookie consent mechanism and a privacy policy in place. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the organization's claims, supporting legitimacy. The site does not currently provide explicit security policies or incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its target audience effectively. Strategic improvements in security headers and DNS security would further strengthen its posture.

#

#to chce odvahu

tochceodvahu.cz

10

The website tochceodvahu.cz represents a recently launched non-profit mental health awareness campaign named '#to chce odvahu', initiated in 2025. It is a collaborative effort involving the Office of the President of the Czech Republic, Nadační fond Flaminia, and Nevypusť duši. The campaign provides resources such as crisis helpline information, ambassador stories, and a help directory aimed at supporting mental health, particularly targeting youth and adults. The site is professionally designed with consistent branding and clear navigation, reflecting a high level of digital maturity for a small non-profit initiative. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Font Awesome icons and Google/Fontshare fonts. It embeds YouTube videos for richer content delivery and uses the Umami analytics platform for minimal user tracking. Hosting is provided by WEDOS, a reputable Czech hosting provider. The site is mobile-optimized and SEO-friendly, though accessibility features could be enhanced. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks visible security headers and formal privacy or cookie policies, which are important for GDPR compliance and user trust. No forms collecting personal data are present on the main page, reducing immediate data protection risks. The WHOIS data shows a consistent and transparent domain registration aligned with the campaign's launch timeline, supporting legitimacy. Overall, the website is a trustworthy and well-executed campaign platform with excellent content quality and business credibility. However, it should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

B

Blumenfabrik Coworking & Eventspace GmbH

blumenfabrik.at

11

Blumenfabrik Coworking & Eventspace GmbH operates a sustainable coworking and event space located in Vienna, Austria. The company targets individuals and organizations interested in sustainability, climate protection, and community engagement. Their business model focuses on providing flexible workspaces and event venues with a strong emphasis on environmental friendliness and social inclusivity. The website reflects a niche market position with a clear community and sustainability focus, supported by professional content and branding.

S

Spektral

spektral.at

10

Spektral is a small non-profit community and cultural space based in Graz, Austria, providing an open space for social and cultural activities. The organization is currently engaged in a crowdfunding and crowdlending campaign to purchase their premises to secure long-term operation and independence. The website reflects a community-driven approach with active engagement through events, media, and social channels. Technically, the site is built on WordPress using a responsive theme and common plugins for media playback and event calendars, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and basic protections like Akismet for spam, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the site is trustworthy and professional, with clear contact information and partner affiliations, but could improve in security and privacy transparency.

N

Nadační fond Flaminia

nfflaminia.cz

55

Nadační fond Flaminia is a Czech non-profit foundation established in 2007, dedicated to supporting mental health and psychological wellbeing projects for children and youth. The organization collaborates with various partner projects and runs awareness campaigns to promote mental health care as equally important as physical health. Their website reflects a professional and consistent brand image, providing clear contact information and detailed descriptions of their initiatives and supported projects. Technically, the website uses modern web technologies including Bootstrap, jQuery, FontAwesome, and Google Fonts, with good mobile optimization and SEO practices. The site is accessible and well-structured, though it uses multiple versions of Bootstrap and jQuery which could be streamlined. No CMS or hosting provider details were detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks important security headers and privacy/cookie policies, which are compliance gaps. No WHOIS data was found for the domain, which reduces trustworthiness and raises questions about domain registration legitimacy. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is trustworthy and professional in content and presentation but would benefit from improved privacy compliance and security hardening. The lack of WHOIS data is a notable concern that should be investigated further.

C

Cesta z krize, z.ú.

linkapsychickepomoci.cz

48

The website linkapsychickepomoci.cz represents a non-profit organization named Cesta z krize, z.ú., providing free, anonymous, and 24/7 psychological crisis support services primarily to adults in the Czech Republic. The service offers telephone and chat support to individuals facing acute psychological distress or crisis situations. The organization is government co-financed and partners with other NGOs, positioning itself as a trusted social service provider in the mental health support sector. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for cookie consent management, and Smartsupp for live chat functionality. The site is hosted by Active24 and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO and metadata are present but could be enhanced for better discoverability. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a privacy policy and terms of service pages, as well as no security.txt file, indicates areas for compliance and security improvement. Overall, the website is safe, professional, and trustworthy, with a clear focus on mental health crisis support. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and improving accessibility compliance to strengthen user trust and regulatory adherence.

C

Cesta z krize, z.ú.

linkaztracenedite.cz

49

The website 'Linka pro rodinu a školu' is a Czech non-profit social service platform operated by 'Cesta z krize, z.ú.' focused on supporting families, children, and adults in crisis situations, particularly related to missing children and school or family problems. It offers telephone crisis intervention, online chat support, and professional counseling, positioning itself as a trusted and officially recognized service with backing from national and European institutions. The site targets a broad audience including families, educators, and the general public. Technically, the website employs modern web technologies such as Google Tag Manager and Cookiebot for consent management, with a moderate performance profile and good mobile optimization. Hosting is provided by Active24, consistent with the domain registration data. The site implements a comprehensive cookie consent mechanism with granular user controls, reflecting a good level of privacy compliance, although explicit privacy policy and terms of service pages are not clearly found in the provided content. From a security perspective, the site uses HTTPS (implied by external scripts loaded via HTTPS), but no explicit security headers or advanced security policies are evident in the HTML content. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the organization's profile, indicating a legitimate and stable domain registration. Overall, the website demonstrates a solid risk posture with good privacy compliance and business credibility. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility features to further strengthen the site's security and compliance posture.

G

gobridge

golangbridge.org

61

The website is a GitHub repository page for the organization 'gobridge', which focuses on building bridges to educate and empower underrepresented communities. The content is community-driven and educational, hosted securely on GitHub's platform. The technical infrastructure leverages modern web technologies including React and GitHub's hosting services, ensuring good performance and accessibility. Security posture benefits from GitHub's HTTPS enforcement and domain registration protections, though the site lacks explicit security policies and privacy compliance documentation. Overall, the site is trustworthy for its intended purpose but would benefit from enhanced privacy and security disclosures.

P

Praskoleská společnost sv. Prokopa

svprokop.cz

37

The website www.svprokop.cz represents the Praskoleská společnost sv. Prokopa, a small local cultural society in the Czech Republic focused on organizing cultural events and preserving local heritage sites such as chapels and churches. The site content is primarily in Czech and includes announcements for cultural events, indicating an active community engagement. Technically, the website is built on WordPress 4.9.28 with plugins such as Yoast SEO and Contact Form 7, and uses Bootstrap 3.3.7 for styling. While the site is served over HTTPS with valid SSL, it uses outdated software versions and lacks modern security headers, which could expose it to vulnerabilities. No privacy, cookie, or terms of service policies are present, and no contact emails or phone numbers are explicitly provided, limiting user trust and compliance with privacy regulations. WHOIS data is unavailable, which reduces domain trustworthiness and raises concerns about domain legitimacy. Overall, the site is functional but requires updates and improvements in security, privacy compliance, and transparency to enhance trust and protect users.

STŘELA Žebrák, z.s. is a Czech non-profit association founded in 2019, dedicated to educational and leisure activities for children and youth, focusing on athletics, tourism, and summer camps. The organization maintains a strong local community presence with multiple social media channels and partnerships with regional entities. The website serves as an information hub for their activities, events, and registration forms, reflecting a clear mission to engage youth in meaningful activities. Technically, the website employs modern front-end technologies including Tailwind CSS and jQuery, hosted likely by WEDOS, a Czech hosting provider. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. SEO practices are adequately implemented with proper meta tags and descriptive content. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No forms on the main page reduce attack surface, but cookie consent mechanisms are missing, which is a GDPR compliance gap. WHOIS data is transparent and consistent with the organization's profile, supporting legitimacy. Overall, the website is trustworthy and professionally maintained, with room for improvement in security hardening and privacy compliance. The risk level is low given the non-commercial nature and limited data collection, but enhancing security policies and cookie management would strengthen compliance and user trust.

Leťánek.cz is the website of Spolek RC Leťánek z.s., a small non-profit family center based in the Czech Republic, founded in 2009. The organization focuses on providing community and recreational activities for families, parents, and children, including events like the Pohádkový les. The website serves as an informational portal with basic content about upcoming events and organizational details. Technically, the site uses legacy technologies such as jQuery 1.3.2 and Google Analytics for tracking, but lacks modern CMS or frameworks. The site is accessible over HTTPS but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. The website is not mobile optimized and has basic SEO and accessibility features. No contact emails or phone numbers are directly visible on the main page, which limits direct communication channels. The domain registration data is consistent with the organization's profile and shows a long-standing presence since 2009, supporting legitimacy.

E

Ekoregion Úhlava

ekoregion-uhlava.cz

51

Ekoregion Úhlava is a small non-profit organization focused on regional development and community support in the Úhlava region of the Czech Republic. The website serves as a platform to disseminate information about grant programs, local initiatives, and educational events. It targets local residents, non-profit organizations, and small businesses. The organization appears to be well-established with a domain registered since 2004 and supported by EU funds. Technically, the website is built on Drupal 8 with standard web technologies and uses Google Analytics for visitor tracking. However, it lacks visible privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS usage but no detected security headers or vulnerability disclosures. Overall, the site is functional, content-rich, and safe for general audiences but could improve in privacy compliance and security best practices.

C

Centrum LOCIKA, z. ú.

detstvibeznasili.cz

57

Centrum LOCIKA operates the website detstvibeznasili.cz, a Czech non-profit platform dedicated to providing direct support to children and families affected by domestic violence. The site offers chat support, educational resources, and awareness campaigns targeting children, teenagers, parents, and school professionals. It holds a strong market position within the Czech Republic's child protection sector, leveraging professional content and consistent branding to build trust. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as jQuery, Google Fonts, and slick carousel for UI components. It integrates Google Analytics and TikTok Pixel for analytics and marketing purposes, with a cookie consent mechanism ensuring user privacy compliance. The site is mobile-optimized, fast-loading, and accessible, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent banners, but lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with GDPR-aligned policies accessible. The absence of WHOIS data due to privacy protection is justified given the sensitive nature of the organization's work. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, privacy practices, and vulnerability disclosure would further enhance its security posture and user trust.

E

EDUin, o. p. s.

podporujuvzdelavani.cz

43

EDUin is a Czech non-profit organization dedicated to supporting and informing about education through various projects including audits, newsletters, podcasts, and networking for school founders. The website serves as a donation and information portal, targeting parents, educators, and stakeholders in the education sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses SEO best practices. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is adequate with a privacy policy and cookie consent mechanism in place. Overall, the site is professional, trustworthy, and well-aligned with its mission.

P

PAQ Research, z. ú.

paqresearch.cz

44

PAQ Research is a Czech non-profit research organization focused on providing data-driven insights into social issues, education, and policy reforms in the Czech Republic. The organization offers a variety of services including research studies, policy briefs, data visualization tools, and newsletters aimed at improving public services and social mobility. Their market position is that of a specialized, trusted entity within the Czech social research sector. Technically, the website is built on the Ghost CMS platform and employs modern JavaScript modules and Matomo analytics for privacy-conscious user tracking. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS and does not expose sensitive data. The use of Matomo analytics indicates a focus on privacy. The absence of WHOIS data for the domain reduces the overall trust score, but the website content and business information appear legitimate and professional. No critical vulnerabilities or compliance gaps were detected, though improvements in security policy transparency and incident response information are recommended. Overall, PAQ Research presents a trustworthy and professional online presence with a strong focus on social research and education in the Czech Republic. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security and incident response policies, and clarifying data protection officer contact details.

N

Nevypusť duši, z. s.

nevypustdusi.cz

53

Nevypusť duši is a Czech non-profit organization dedicated to mental health education, prevention, and support primarily targeting children, youth, parents, educators, and social workers. The organization offers a range of preventive programs, support groups, and educational resources to foster open conversations about mental health and provide practical help. It has a strong partnership ecosystem and a clear mission to integrate mental health awareness into everyday life in Czech society. The website reflects a professional and well-established presence with comprehensive content and multiple communication channels.

C

Centrum LOCIKA

centrumlocika.cz

10

Centrum LOCIKA is a Czech non-profit organization dedicated to helping children and families live free from domestic violence. The organization provides a range of services including crisis support, legal information, preventive education, and operates a children's advocacy center. It collaborates with government ministries and foundations, positioning itself as a trusted entity in child protection and family support within the Czech Republic. The website reflects a professional and well-structured digital presence, utilizing modern web technologies and offering multilingual support (Czech and English). Privacy and cookie compliance are well implemented, enhancing user trust. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, though the website content and partnerships strongly support its authenticity. Security posture is generally good with HTTPS and cookie consent mechanisms, but could be improved by adding explicit HTTP security headers and incident response information. Overall, the site is safe, accessible, and provides valuable resources to its target audience.

P

Project Childsafe

projectchildsafe.org

11

Project Childsafe is a well-established non-profit program under the National Shooting Sports Foundation focused on promoting firearm safety and education. The organization targets gun owners, law enforcement, safety instructors, and the general public with educational resources, free gun locks, and community outreach initiatives. The website reflects a strong market position as the nation’s most comprehensive firearm safety program, supported by consistent branding and trust indicators such as testimonials and social media presence. Technically, the site is built on WordPress with modern frameworks and tools, including Yoast SEO, Google Analytics, and accessibility enhancements via Monsido. The site is mobile-optimized and performs moderately well, with good SEO and accessibility scores. Security posture is solid with HTTPS enforced and anti-enumeration plugins, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but lacking explicit cookie consent mechanisms. Overall, the domain registration is consistent with the organization's history and legitimacy, supporting a high trust score.

D

DRK-Kreisverband Ludwigsburg e. V.

drk-ludwigsburg.de

58

DRK-Kreisverband Ludwigsburg e. V. is a local branch of the German Red Cross, providing a broad range of humanitarian, social, and emergency services to the community in Ludwigsburg, Germany. The organization focuses on emergency call services, first aid training, rescue operations, social support, and voluntary engagement. The website reflects a professional and consistent brand presence aligned with the national DRK identity. The target audience includes the general public and local residents seeking social and emergency assistance. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system, with additional JavaScript libraries for UI elements such as sliders. The site employs Matomo analytics with a clear cookie consent mechanism, demonstrating a commitment to privacy and GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent banner with opt-in for analytics and preference cookies. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional digital presence for a non-profit humanitarian organization. Strategic improvements could include enhancing HTTP security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen security posture and trust.

The website 'netzwerk-familie-wirtschaft.de' represents a regional non-profit network focused on promoting family-friendly business practices and supporting women's integration into the workforce in the German regions of Landkreis Harburg, Lüneburg, and Uelzen. It offers networking events, workshops, and coordination services to its members, targeting companies and individuals interested in family-friendly policies. The site is well-structured, with clear navigation and relevant content tailored to its audience. Technically, the website is built on Joomla CMS with Bootstrap framework, hosted by Cloudpit. It demonstrates moderate performance and good mobile optimization. The site uses HTTPS and implements a cookie consent mechanism, reflecting a privacy-conscious approach. However, it lacks advanced security headers and explicit incident response or vulnerability disclosure information. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent but could improve by adding security headers and publishing security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a clear privacy policy and cookie banner. Overall, the website is trustworthy, professional, and safe for general audiences. It effectively serves its niche community with relevant content and events. Strategic improvements in security policies and technical headers would enhance its security posture and compliance.

N

NSSF Real Solutions®

nssfrealsolutions.org

63

NSSF Real Solutions® is a non-profit organization focused on firearm safety and community partnerships. The website highlights their collaboration with law enforcement, elected officials, and other organizations to promote safer communities through various programs such as Project ChildSafe and suicide prevention initiatives. The organization appears well-established with a clear mission and multiple partnerships, positioning itself as a trusted advocate in the firearm safety sector. Technically, the website is built on WordPress using modern technologies including jQuery, Bootstrap, and Gravity Forms. It employs multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Twitter tracking, indicating a mature digital presence. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain protections like clientTransferProhibited status. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. There is no published security policy or incident response contact, and no cookie consent mechanism despite tracking scripts, which are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively. The security posture is solid but could be enhanced with additional measures. Privacy compliance is basic and should be improved to meet GDPR standards fully.

D

Dachverband Offene Kinder- und Jugendarbeit Schweiz (DOJ)

doj.ch

57

The Dachverband Offene Kinder- und Jugendarbeit Schweiz (DOJ) is a Swiss non-profit umbrella organization dedicated to supporting, representing, and networking open child and youth work institutions across Switzerland and Liechtenstein. The website clearly targets professionals and institutions involved in youth work, offering information on projects, events, and specialized groups. The organization positions itself as a key player in the national youth work sector with a focus on inclusion, health promotion, and youth culture. Technically, the site is built on the Contao CMS platform, uses modern JavaScript libraries such as Swiper for UI components, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's Swiss non-profit identity. Overall, the site is trustworthy, professional, and well-suited for its audience.

I

infoklick.ch, Kinder- und Jugendförderung Schweiz

infoklick.ch

46

infoklick.ch is a Swiss non-profit organization dedicated to promoting youth participation and improving information dissemination in the children and youth sector. With over 25 years of history, it holds a respected position in the Swiss youth promotion landscape. The website provides resources, partner networks, and community engagement opportunities targeting children and young people in Switzerland. Technically, the site is built on TYPO3 CMS, uses standard web technologies, and integrates both Google Analytics and Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and privacy-respecting analytics, but lacks advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy, professional, and content-rich, though improvements in privacy compliance and security policies are recommended.

The website represents a small non-profit cultural association named 'kleinkunst und Kulturverein Werne a.d. Lippe e. V.', focused on promoting local arts and cultural events in Werne, Germany. The site offers information about events, concerts, cinema, and community activities, targeting local culture enthusiasts. The business model is community-oriented, relying on event hosting and cultural promotion without commercial sales. Technically, the website is built using older technology (iWeb 3.0.4) with basic HTML, CSS, and JavaScript, lacking modern responsive design and accessibility features. The site does not demonstrate advanced SEO or performance optimization and appears to have moderate loading performance. Security posture is weak, with no evidence of HTTPS enforcement or security headers, and no visible incident response or security policies. Privacy compliance is minimal, with a basic privacy and terms page but no cookie consent mechanism. Overall, the site is functional for its purpose but requires modernization and security improvements.

G

Glashaus e.V.

glashaus.org

54

Glashaus e.V. is a small non-profit cultural organization based in Bayreuth, Germany, focused on hosting a variety of cultural events including concerts, art programs, and community gatherings primarily on the University of Bayreuth campus. The organization engages local students and the wider community, offering a café service and volunteer opportunities, positioning itself as a key cultural hub in the region. The website reflects this mission with event listings, membership information, and active social media channels. Technically, the site is built on an older WordPress platform with common JavaScript libraries like jQuery, bxSlider, and Slicknav, providing a moderate level of performance and mobile optimization. However, the use of outdated software versions and lack of modern security headers indicate technical debt and potential security risks. Security posture is basic with HTTPS enabled but missing advanced headers and no visible incident response or security policy documentation. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite Google Analytics usage. WHOIS data is unavailable, limiting domain trust verification, but the website content and social presence support legitimacy. Overall, the site is functional and trustworthy for its community audience but would benefit from technical and security modernization.

JUZ Eckental is a community youth center based in Germany that serves as a cultural and event hub for local residents, particularly targeting both young and older audiences. The website primarily provides information about upcoming events such as parties, concerts, and cultural activities, fostering community engagement. The organization appears to operate as a small non-profit entity focused on local community services. Technically, the website is built on WordPress using the Twenty Seventeen theme, leveraging common web technologies like jQuery and Google Fonts. The site is hosted on a server associated with nevsware.de and uses HTTPS to secure communications. Security posture is moderate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Overall, the website is functional, well-structured, and provides relevant content for its audience but could improve in security and privacy transparency.

K

Kulturelle Landpartie

kulturelle-landpartie.de

51

Kulturelle Landpartie operates as a non-profit cultural festival organizer in Northern Germany, focusing on self-organized cultural events in the Wendland region. The website serves as an information portal for visitors, providing event details, travel guidance, and accommodation options. The organization holds a strong regional presence as the largest cultural festival of its kind in Northern Germany. Technically, the website is built on a custom CMS (Wendnet KLP-CMS) and uses standard web technologies including HTML5, CSS, and jQuery 3.6.0. Hosting is provided by Schlund Technologies, a professional hosting provider. The site demonstrates moderate performance and basic mobile optimization, with good SEO practices and clear navigation. From a security perspective, the website lacks advanced security headers and explicit HTTPS confirmation in the provided data, though no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present but basic, with no explicit consent mechanism. No incident response or security policy information is available, indicating room for improvement in security maturity. Overall, the website is functional, trustworthy, and serves its cultural community well, but could benefit from enhanced security measures, improved privacy compliance mechanisms, and more transparent contact information to strengthen user trust and regulatory adherence.

Naturefund e. V. operates the Blue Planet Certificate website, providing a unique climate certificate focused on ecosystem protection and CO2 compensation. The organization targets individuals and businesses seeking transparent and effective climate protection solutions. The website is built on TYPO3 CMS and integrates modern web technologies such as Google Tag Manager and Bootstrap, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and policies could enhance protection. The domain registration is consistent and trustworthy, supporting the legitimacy of the business. Overall, the site presents a professional and credible front for a non-profit environmental organization.

E

Ehrenamtsstiftung MV

ehrenamtsstiftung-mv.de

59

Ehrenamtsstiftung MV is a regional non-profit foundation dedicated to supporting volunteer engagement in Mecklenburg-Vorpommern, Germany. The organization focuses on recognizing, advising, funding, qualifying, and networking volunteers and related entities. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience of volunteers, NGOs, and civic organizations. Technically, the site employs modern JavaScript libraries, Cookiebot for consent management, and Google Analytics for visitor insights, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent dialog. Overall, the site is trustworthy and well-positioned within its niche, with no critical vulnerabilities or blocking mechanisms detected.

UN-Habitats operates as a small non-profit organization dedicated to the conservation of wildlife and natural habitats globally. Their website serves as an educational platform providing information, articles, and galleries about diverse natural environments and species. The organization targets nature enthusiasts and the general public interested in environmental conservation. The website is built on WordPress using popular plugins and themes, indicating a moderate level of technical maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy and security transparency.

V

Vereniging Afvalbedrijven

trashtalks.nl

9

TrashTalks is a social media campaign operated by the Vereniging Afvalbedrijven, aimed at raising awareness among Dutch consumers about waste management, recycling, and sustainable product choices. The campaign leverages social media influencers and educational content to engage the public and promote environmentally responsible behavior. The website serves as a hub for campaign information, social media links, and a toolkit for partners. Technically, the website uses modern JavaScript libraries such as jQuery and Swiper.js for interactive content and responsive design. The site is mobile-optimized and includes SEO-friendly meta tags and Open Graph data. Google Analytics is implemented with IP anonymization to track user engagement while respecting privacy. However, no explicit privacy or cookie policies are present, which is a compliance gap. From a security perspective, the site uses HTTPS and includes Google Tag Manager scripts but lacks visible security headers and formal security policies. There are no forms collecting user data on the homepage, reducing immediate risk exposure. WHOIS data confirms the domain is registered consistently with the Vereniging Afvalbedrijven organization, supporting legitimacy. Overall, the website is professionally designed and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

B

Bertelsmann Stiftung

transforming-economies.de

54

Transforming-economies.de is a professionally maintained blog platform operated by the Bertelsmann Stiftung, a large non-profit foundation based in Germany. The website focuses on the transformation towards a sustainable social market economy, providing research insights, policy analysis, and public engagement content primarily targeted at academics, policymakers, and the interested public. The platform leverages modern web technologies including WordPress, Vue.js, Bootstrap, and Yoast SEO to deliver a high-quality user experience with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in implementing security headers and cookie consent mechanisms. The website demonstrates strong business credibility with consistent branding and professional content, though lacks explicit terms of service and incident response policies. Overall, the site is safe, trustworthy, and well-positioned as a knowledge dissemination platform in the sustainability and economic transformation sector.

B

Bertelsmann Stiftung

bertelsmann-stiftung.de

50

Bertelsmann Stiftung is a well-established non-profit foundation based in Germany, focusing on societal change through projects, studies, and events. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content aimed at a broad audience including policymakers, researchers, and the general public. Technically, the site is built on TYPO3 CMS with modern web technologies and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and basic security headers, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professionally managed, with no signs of malicious activity or vulnerabilities.

S

Sustainable Economy gGmbH

sustainable-economy-summit.org

45

The Sustainable Economy Summit is a non-profit organization established in 2022 that organizes biennial conferences in Berlin focused on sustainable economic transformation. It brings together leaders from business, politics, science, and civil society to discuss innovative strategies and solutions aligned with planetary boundaries. The summit serves as a platform for networking, knowledge exchange, and promoting sustainable business practices. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Google Analytics. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is good with HTTPS enabled, though some security headers could be improved. The domain registration is consistent with the organization's founding date and business claims, enhancing trustworthiness. Overall, the site presents a credible and professional image suitable for its target audience.