Non-profit security reports

Z

Za bezpečný a svobodný internet, z. s.

sdilejbezpecne.cz

52

The website www.sdilejbezpecne.cz is a Czech non-profit initiative focused on educating the general public about safe and secure sharing practices on the internet, particularly on social media platforms. It provides guides, videos, and partner collaborations to promote privacy awareness. The site is positioned as a niche educational resource with a small organizational size and a clear mission to improve internet safety. Technically, the site is built on WordPress and uses common JavaScript libraries such as jQuery and media players, with Google Analytics for visitor tracking. The site is served over HTTPS with no visible security vulnerabilities, but lacks important compliance elements such as privacy and cookie policies. WHOIS data is unavailable, which limits domain legitimacy verification but the presence of reputable partners and professional design supports trust. Overall, the site demonstrates a good security posture but needs improvements in privacy compliance and transparency.

Big Brother Awards CZ is a privacy advocacy non-profit organization based in the Czech Republic, operating since 2004. The website serves as a platform to highlight and award entities that intrude on privacy, raising public awareness and fostering discussion on digital rights. The organization is well-established with a clear mission and a network of partners and supporters. Technically, the website is built on modern frameworks such as Astro and Tailwind CSS, delivering fast performance and excellent mobile optimization. However, it lacks explicit privacy and cookie policies, and security headers are not detected, indicating room for improvement in security posture. Overall, the site is professional, trustworthy, and content-rich, targeting a general audience interested in privacy and digital freedoms.

D

Digitální svobody

digitalnisvobody.cz

44

Digitální svobody is a Czech non-profit organization dedicated to advocating for digital rights, privacy, and freedoms. The website serves as a platform for news, campaigns, educational seminars, and community engagement focused on digital privacy and data protection. The organization targets Czech-speaking individuals interested in digital rights and operates primarily through donations and support. The website is well-branded and consistent with its mission, featuring recent content and active social media channels. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Ultimate Blocks. It uses modern frontend technologies including jQuery, Bootstrap grid, and FontAwesome icons. The site is mobile-optimized and performs moderately well, with good SEO practices and basic accessibility features. Hosting and domain registration are consistent with the organization's founding date and location. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not implement a cookie consent mechanism, which is a compliance gap given EU regulations. Analytics usage is minimal and privacy-conscious, using Koko Analytics without extensive user tracking. No vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy and professional, with a strong focus on digital rights advocacy. Strategic improvements include adding cookie consent, enhancing security headers, and providing more explicit contact information to improve compliance and user trust.

Vrijschrift.org is a small non-profit foundation based in the Netherlands focused on advocating for free information and privacy protection. The website serves as a blog publishing detailed analyses and commentary on EU digital policy, data protection, trade agreements, and open source software. The content is primarily in Dutch with some English posts, targeting privacy advocates, policy makers, and the open source community. Technically, the site runs on Serendipity CMS, an older but stable blogging platform, with basic mobile and accessibility features. Security posture is moderate with HTTPS enforced but lacking advanced security headers and DNSSEC. No privacy or cookie policies are published, and no direct contact information is provided publicly, which limits privacy compliance and user trust. WHOIS data is consistent and supports the legitimacy of the organization with a long domain history since 2001. Overall, the site is content-rich and trustworthy but could improve in privacy compliance and security best practices.

H

hemmer.ch SA

theodia.org

61

Theodia.org is a specialized online platform providing free tools for managing and displaying Roman Catholic mass schedules worldwide. The website is operated by hemmer.ch SA, a Swiss organization with a domain registration dating back to 2008, indicating a stable and established presence. The platform targets the Roman Catholic community and users interested in service schedules, offering a niche but valuable service. Technically, the website is built using modern Angular framework and integrates Google Maps API for location-based features, reflecting a moderate level of digital maturity. The design is professional and mobile-optimized, providing a good user experience. However, the site lacks critical privacy and cookie policies, contact information, and security policies, which are essential for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by enabling DNSSEC and implementing security headers. Overall, the website is legitimate and functional but would benefit from enhanced privacy compliance and security best practices.

R

Runder Tisch Reparatur e.V.

runder-tisch-reparatur.de

40

Runder Tisch Reparatur e.V. is a German non-profit organization dedicated to promoting the right to repair and fostering a culture of repair in Germany. The website serves as a hub for advocacy, networking, event information, and educational resources related to repair initiatives. It targets consumers, repair professionals, and policy makers interested in sustainability and repair rights. The organization positions itself as a key player in the repair advocacy space within Germany, leveraging partnerships and community engagement to advance its mission. Technically, the website is built on WordPress with common plugins for forms, events, and forums, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and includes cookie consent mechanisms, reflecting good privacy compliance. Security posture is adequate with HTTPS enforced, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and aligned with its non-profit mission, with no signs of malicious activity or content blocking.

R

Right to Repair Europe

repair.eu

57

Right to Repair Europe is a non-profit coalition advocating for the right to repair products across Europe, emphasizing sustainability and longer product lifespans. The organization targets consumers, repairers, and policymakers to promote legislative and systemic changes. Their website serves as an information hub and campaign platform, featuring news updates, resources, and a newsletter signup to engage supporters. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted by domainfactory GmbH. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and Google Tag Manager but lacks explicit security headers and public security policies. Privacy compliance is strong with GDPR-aligned privacy and cookie policies and a consent mechanism. Overall, the website is trustworthy, professional, and aligned with its advocacy mission.

I

Iuridicum Remedium, z. s.

iure.org

45

Iuridicum Remedium (IuRe) is a Czech non-governmental non-profit organization dedicated to protecting human rights, particularly focusing on digital freedoms and legal aid related to debt and executions. With over 20 years of experience, it holds a strong position in the Czech human rights advocacy sector, organizing notable events such as the Big Brother Awards. The organization provides free legal advice and promotes privacy rights, targeting Czech-speaking citizens concerned with civil liberties and digital privacy. Technically, the website employs a moderate technology stack including jQuery and Slick Carousel, likely built on Drupal CMS. The site is mobile responsive with good design and navigation, though some SEO and accessibility features are basic. Hosting details are not explicit but DNS servers indicate Czech hosting providers. No advanced analytics or tracking scripts are detected, reflecting a privacy-conscious approach. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are published, representing compliance gaps. Incident response and vulnerability disclosure mechanisms are not evident. WHOIS data aligns well with the organization's claims, showing a long-established domain registered in the Czech Republic. Overall, the website is professional and trustworthy but would benefit from enhanced security headers, published privacy and cookie policies, and incident response information to improve compliance and security maturity.

D

Digitale Gesellschaft e.V.

digitalegesellschaft.de

50

Digitale Gesellschaft e.V. is a German non-profit organization founded in 2010 dedicated to advocating for digital fundamental rights and consumer protection in the digital space. The organization engages its target audience of netpolitically interested individuals and activists through monthly events, campaigns, and educational content. Their business model relies on donations, memberships, and grants, positioning them as a recognized entity within the digital rights advocacy sector in Germany. Technically, the website is built on WordPress with a modern theme and plugins, hosted by OVH, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements are recommended in security headers and formal security policies. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

C

Computertruhe e. V.

computertruhe.de

43

Computertruhe e. V. is a German non-profit association dedicated to refurbishing donated computers and hardware to provide free devices to financially disadvantaged individuals and other non-profit organizations. Founded as a project in 2015 and established as a registered non-profit in 2016, it operates across multiple German regions with a volunteer membership base. The website reflects a clear mission focused on social inclusion, environmental sustainability, and community support. Technically, the site is built on WordPress with modern plugins and uses privacy-conscious analytics (Matomo). It is hosted by a green energy provider, indicating environmental awareness. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Contact is primarily via web forms, with no direct emails or phone numbers published. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

B

Bits & Bäume

bits-und-baeume.org

62

Bits & Bäume is a German non-profit coalition advocating for sustainable and socially just digitalization. Founded in 2018, it unites 13 organizations from environmental, climate, digital, development policy, and scientific sectors, alongside a growing community. The website serves as a hub for community engagement, events, publications, and political advocacy focused on digital sustainability and social justice. The organization targets activists, academics, and policy stakeholders interested in shaping digital transformation for the common good. Technically, the website is built using the Eleventy static site generator with modern CSS frameworks (likely Tailwind CSS), delivering fast performance and good mobile optimization. The site is well-structured with clear navigation and professional design, though accessibility features are basic. No analytics or tracking scripts were detected, reflecting a privacy-conscious approach. Security posture is solid with HTTPS enforced and domain transfer protections in place; however, DNSSEC is not enabled and no explicit security headers or policies are published. Privacy compliance is partially met with a privacy policy present but lacking a cookie consent mechanism. Contact information is limited to email addresses without phone numbers or physical addresses. Overall, the website is trustworthy, professional, and aligned with its non-profit advocacy mission. Recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and implementing a cookie consent mechanism to enhance GDPR compliance.

A

Aspiration

aspirationtech.org

59

Aspiration is a well-established nonprofit technology organization founded in 2001, focused on empowering nonprofits, open source projects, and social justice initiatives through technology capacity building, strategic advising, and community events. The website reflects a mature digital presence with a professional design, clear navigation, and rich content tailored to its target audience. Technically, the site runs on Backdrop CMS with modern libraries and includes Matomo analytics for privacy-conscious tracking. Security posture is good with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the organization's claims, supporting high legitimacy and trustworthiness.

D

Direct Affect, Inc.

directaffect.net

57

Direct Affect, Inc. operates a non-profit community engagement platform designed to connect non-profit organizations with their supporters through personalized and targeted communication. The platform emphasizes supporter-centric engagement to motivate volunteering, donations, and advocacy. The business operates on an invitation-only model for organizations, indicating a controlled and curated user base. The website is modern, built with React and Material-UI, hosted likely via GoDaddy infrastructure, and presents a professional and consistent brand image. However, contact information and privacy compliance mechanisms are minimal or absent, which may impact user trust and regulatory compliance. Technically, the website uses modern front-end technologies and is mobile optimized with good SEO practices. Performance is moderate, and accessibility is basic. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and security headers. No analytics or tracking scripts were detected, suggesting minimal user tracking. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data but would benefit from enhanced security headers and explicit privacy and incident response policies. The absence of cookie consent mechanisms and detailed privacy compliance features indicates room for improvement in regulatory adherence. Overall, the website is functional, professional, and secure enough for its purpose but should enhance privacy compliance and security best practices to improve trust and regulatory standing.

S

START International, Inc.

start.org

59

START International, Inc. is a well-established US-based non-profit organization founded in 1995, focused on providing training, research, education, and networking opportunities to strengthen scientific skills and leadership in sustainability and climate change solutions. The organization maintains a professional web presence with detailed program information, partnerships, and news updates, targeting researchers, educators, and sustainability professionals globally. The website leverages a modern WordPress CMS with common plugins and frameworks such as Bootstrap and jQuery, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and domain registration protections, though improvements are recommended in DNSSEC deployment, cookie consent mechanisms, and publishing explicit security policies. Privacy compliance is basic with a privacy policy present but lacking cookie consent. Overall, the site demonstrates high business credibility and trustworthiness with strong partner affiliations and consistent branding.

F

First aid and health and safety training courses

redcrossfirstaidtraining.co.uk

74

The website represents the British Red Cross's first aid training services, offering a wide range of courses including first aid, mental health, and health & safety training across the UK. It targets businesses and individuals seeking professional training with a trusted brand. The site features clear navigation, professional design, and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and OneTrust for cookie consent. The technical infrastructure is solid with HTTPS enforced and moderate performance, though some security headers are missing. The WHOIS data is unavailable and indicates the domain is not properly registered, which is a concern from a domain legitimacy perspective but the website content and branding strongly support authenticity. Overall, the site is professional, trustworthy, and compliant with privacy consent requirements, but would benefit from explicit privacy and terms of service pages and improved security headers.

I

Independence Hall Association

independencehallassociation.org

57

The Independence Hall Association (IHA) is a longstanding non-profit organization dedicated to educating the public about American history. Founded in 1942, it operates the website USHistory.org, which serves as a major online resource for US history education, attracting millions of visitors globally. The organization is governed by a volunteer board and holds 501(c)(3) tax-exempt status, emphasizing its educational mission and non-commercial nature. The website content is well-structured, professionally designed, and targets educators, students, and history enthusiasts. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts and SVG icons. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security measures include HTTPS with HSTS enabled, but additional security headers could enhance protection. Privacy and cookie policies are notably absent, which is a compliance gap. Overall, the security posture is solid with no evident vulnerabilities or exposed sensitive data. The lack of WHOIS transparency is common for privacy reasons but slightly impacts trust. The site does not employ tracking or analytics scripts in the provided content, indicating a minimal user tracking approach. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and improving accessibility features to strengthen compliance and user trust.

B

British Red Cross

redcross.org.uk

74

The British Red Cross website represents a well-established humanitarian charity providing emergency aid, health and social care, first aid training, and refugee support across the UK and globally. The organization is a large non-profit entity founded in 1870, with a strong market position as part of the global Red Cross network. The website features rich multimedia content, clear navigation, and consistent branding aligned with its mission. Technically, the site employs modern tracking and marketing technologies such as Google Tag Manager, Salesforce Marketing Cloud, and OneTrust for cookie consent, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and safe for general audiences.

U

Unlock Congress

unlockcongress.com

56

Unlock Congress is a small-scale, non-partisan advocacy and publishing initiative focused on reforming the U.S. Congress. The website promotes a book by Michael Golden that analyzes congressional dysfunction and proposes solutions. The site targets American citizens interested in political reform and provides book sales links, testimonials, and a newsletter subscription. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, New Relic, and the Foundation CSS framework, delivering a mobile-optimized and well-structured user experience. However, the absence of WHOIS registration data raises some concerns about domain legitimacy. Security posture is moderate with HTTPS implied but lacking explicit security headers and formal privacy or cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

G

Giva Sverige

givasverige.se

62

Giva Sverige is a Swedish non-profit industry association focused on promoting ethical, transparent, and professional governance of charitable organizations funded by donations, grants, and collaborations. Established around 2016, it serves as a standard-setting and educational body for the charitable giving sector in Sweden. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of non-profit organizations and donors. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for privacy compliance, and integrates Google Tag Manager and various analytics services. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data for the exact domain queried suggests the domain may be a subdomain or alias, which slightly reduces domain registration trustworthiness. Overall, the site is well-structured, privacy-conscious, and trustworthy from a content and business perspective.

Data Science Alliance is a small nonprofit organization founded in 2019, focused on promoting Responsible Data Science through community projects, educational events, and resources primarily in San Diego. Their mission centers on leveraging data science to foster positive social impact. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting data professionals, students, and community members interested in ethical AI and data science. Technically, the site uses modern frontend technologies including Bootstrap, Font Awesome, Google Fonts, and integrates secure payment processing via Stripe. Analytics tools such as Google Tag Manager and Hotjar are employed for user insights, though no cookie consent mechanism is present. Security posture is adequate with HTTPS and secure payment integration, but lacks explicit security headers and published privacy or cookie policies. Overall, the domain registration is privacy protected but consistent with nonprofit norms, and the site demonstrates a trustworthy and professional online presence.

Scouterna is the Swedish national scouting organization operating a professional and comprehensive website for the upcoming Jamboree26 event. The organization targets youth scouts and volunteers, providing detailed event information, volunteer recruitment, and educational content. The website is built on modern web technologies including Next.js and React, hosted with reputable providers and secured with HTTPS and Cloudflare DNS. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Security posture is strong with room for improvement in DNSSEC and explicit security headers. Overall, the site reflects a mature digital presence for a large non-profit organization with high trustworthiness and user experience standards.

Y

Y Camps

ycamps.nl

57

Y Camps is a non-profit organization operating specialized summer camps for children who require extra attention and care, including those with developmental disorders, diabetes, and refugee children. The organization is part of YMCA Nederland, indicating a strong parent company relationship and established market presence in the Netherlands. Their services focus on providing inclusive and supportive vacation experiences for children with special needs, supported by a volunteer program and community engagement. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, indicating a mature and maintainable infrastructure. The site is mobile-optimized and uses HTTPS with a cookie consent mechanism compliant with GDPR. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the site uses HTTPS and privacy plugins but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business history, showing legitimacy and trustworthiness. Overall, Y Camps presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency would enhance their security posture further.

C

ChickTech

chicktech.org

58

ChickTech is a US-based non-profit organization dedicated to empowering women and girls in technology through educational programs, mentorship, and community engagement. The website indicates a closure notice, suggesting the organization may be ceasing operations or undergoing significant changes. The site is built on the Wix platform, leveraging standard Wix scripts and polyfills, and is accessible via HTTPS with no detected blocking mechanisms. However, the absence of privacy and cookie policies, terms of service, and WHOIS data limits the overall trust and compliance posture. Contact information is limited but includes a phone number and physical address in Portland, OR. The site lacks advanced security headers and analytics tools, indicating a basic technical implementation.

K

Start | Kirche Tut Gut

kirche-tut-gut.ch

58

The website kirche-tut-gut.ch serves as an informational platform for church-related community projects and services in Switzerland. It targets a general audience interested in religious and community activities, presenting projects from local church communities and the cantonal church. The site is built on the Wix platform, utilizing Wix's Thunderbolt framework and standard web technologies, indicating a moderate level of digital maturity. The website design is professional and mobile-optimized, though accessibility and SEO features are basic. Security posture is moderate with HTTPS implied and some JavaScript security measures, but lacks explicit security headers and incident response contacts. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is safe with no adult or questionable content detected, but improvements in privacy, security, and contact transparency are recommended.

W

World YWCA

shespeaksworldywca.org

53

World YWCA operates a well-established non-profit digital platform focused on empowering women and girls globally through advocacy, storytelling, and community engagement. The website 'She Speaks' serves as a hub for sharing stories, resources, and opportunities, positioning itself as a key voice in women's leadership and rights. The organization is registered in Switzerland and maintains a consistent brand presence across multiple social media channels. Technically, the site is built on WordPress with a modern plugin ecosystem, including analytics and social integrations, hosted on Infomaniak servers. Security measures include HTTPS and reCAPTCHA, though there is room for improvement in DNS security and HTTP headers. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy policy found in the provided content. Overall, the site demonstrates a solid business credibility and technical foundation with moderate security posture.

Y

YWCA

ywca.org

64

YWCA is a well-established nonprofit organization dedicated to eliminating racism, empowering women, and promoting peace, justice, freedom, and dignity for all. The website reflects a professional and consistent brand presence with a clear mission targeting a general audience interested in social justice and empowerment. The organization maintains an active social media presence across major platforms, enhancing its outreach and engagement. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including jQuery, Google Tag Manager, and various analytics and marketing pixels. The site is secured with HTTPS and HSTS, indicating a strong baseline security posture. Performance and mobile optimization are good, though accessibility features could be improved. Security-wise, the site implements essential protections such as HTTPS and reCAPTCHA v3, but lacks some advanced security headers and does not publicly disclose a security policy or incident response plan. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is partially addressed with a cookie consent banner, but explicit privacy and terms of service documents were not found in the provided content. Overall, the website presents a low-risk profile with strong business credibility and a good security baseline. Strategic improvements in privacy documentation, security headers, and accessibility would further enhance trust and compliance.

E

Eric Frank Trust

ericfranktrust.org.uk

58

The Eric Frank Trust is a small UK-based non-profit organization dedicated to supporting the development of young people, particularly through leadership development within Scouting and related projects. The organization provides grants to support leadership initiatives and occasionally supports research in this domain. The website is built on WordPress using the Enfold theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is well-structured, mobile-optimized, and uses HTTPS with basic security measures such as anti-clickjacking scripts. However, it lacks visible privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The WHOIS data is unavailable due to domain naming rules, but the website content and contact details appear legitimate and consistent with a small non-profit entity.

Y

YMCA Nederland

ymca.nl

58

YMCA Nederland is a well-established non-profit organization focused on youth development through summer camps, youth work, training, and community engagement. The organization has a strong historical presence dating back to 1853 and operates multiple related sites and accommodations. The website is professionally designed, primarily in Dutch with English alternatives, and targets youth and volunteers. Technically, the site is built on WordPress with common plugins and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, including email, phone, and physical address. Social media presence is active across major platforms. Overall, the site is trustworthy and credible with room for security and privacy improvements.

S

Scouting Ireland

scouts.ie

63

Scouting Ireland is a well-established non-profit youth organization dedicated to the development of life skills for young people across Ireland. With over 26,500 youth members and 10,000 volunteers, it offers a wide range of scouting programs, volunteer opportunities, and community engagement activities. The organization has a strong market position as one of the largest national youth organizations in Ireland, focusing on personal development through the Scout Method. The website reflects this mission with comprehensive content, clear navigation, and strong branding consistency. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and Mailchimp for marketing. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. However, there is room for improvement in security headers and incident response transparency. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the website's professional presentation and detailed business information support its credibility. Overall, Scouting Ireland's website demonstrates a mature digital presence with strong content quality and privacy compliance. Strategic improvements in security headers, incident response documentation, and WHOIS transparency would further enhance trust and security posture.

S

Scouterna

scouterna.se

62

Scouterna is the largest scouting organization in Sweden, providing youth from all parts of society the opportunity to experience adventure and personal growth through scouting activities. The organization operates as a non-profit entity focused on youth development, community engagement, and outdoor education. Their website is professionally designed, multilingual, and offers comprehensive information about scouting programs, events, and ways to support the organization. Technically, the site uses modern frameworks such as Next.js and React, with integrations for analytics and cookie consent, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policy and incident response information are not publicly detailed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

A

ACLU of Oregon

aclu-or.org

69

The ACLU of Oregon is a well-established non-profit organization dedicated to protecting civil rights and liberties within the state of Oregon. As an affiliate of the national ACLU, it focuses on legal advocacy, policy reform, public education, and community engagement. The website reflects a professional and consistent brand image, targeting residents, activists, and donors interested in social justice and civil liberties. Technically, the site is built on Drupal 7 with modern JavaScript libraries and analytics tools, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and anti-spam measures, though some security headers and explicit policies could be improved. The absence of WHOIS data limits domain registration transparency but does not detract significantly from the site's legitimacy given its affiliation and content quality. Overall, the site is trustworthy, safe, and well-positioned to serve its audience.

M

Missio Schweiz

missio.ch

55

Missio Schweiz is a Swiss non-profit organization affiliated with the Pontifical Mission Societies, dedicated to supporting missionary and social projects in the global south. Their website serves as a digital platform to promote their mission, facilitate donations, and engage supporters through newsletters and an online shop. The organization maintains a professional and consistent brand presence, targeting a general audience interested in charitable and missionary work. Technically, the website is built on the Soulclick CMS platform, utilizing modern web technologies such as jQuery, Selectize.js, and Google Fonts. The site is hosted on a cloud provider with good performance and mobile optimization. SEO and accessibility considerations are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF protection. However, some security headers are missing, and no explicit security or incident response policies are published. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and suitable for its non-profit mission. There are no indications of malicious activity or content safety concerns. Strategic improvements in security headers and incident response transparency could further enhance the security posture.

Y

YMCA 175

ymca175.com

50

YMCA175 is a global youth leadership event organized by YMCA Europe and hosted by YMCA England & Wales, targeting young leaders aged 16-35 worldwide. The event focuses on workshops, seminars, and leadership training to empower youth and foster global change. The website is built on WordPress with modern plugins and SEO tools, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving a non-profit sector audience effectively.

M

Measuring Impact of Youth Organisations

impactofyouth.org

46

The Measuring Impact of Youth Organisations (MIYO) project is a collaborative non-profit initiative involving major European youth organisations such as the World Organisation of Scout Movement (WOSM), YMCA Europe, and Maynooth University. The project focuses on bridging policy-making, academic research, and practical applications to empower youth organisations across Europe. The website serves as an information hub providing resources, news, and toolkits to support this mission. Technically, the site is built on WordPress using Elementor and related plugins, hosted by Hosting Concepts B.V. The site is well-structured, mobile-optimized, and uses HTTPS, but lacks some security headers and privacy compliance documentation. No direct contact information or privacy policies are present on the homepage, which is a notable gap for compliance and user trust. Overall, the site presents a professional and trustworthy image consistent with a small non-profit consortium.

F

fadegrad Podcast

fadegrad-podcast.ch

56

Fadegrad Podcast is a small, regionally focused podcast initiative presented by the Roman Catholic and Evangelical Reformed churches of the St.Gallen and Appenzell cantons in Switzerland. The website serves as a platform for sharing inspiring life stories and faith-related content, targeting a general audience interested in personal narratives and religious topics. The business model centers on content creation and distribution through podcasts, videos, and social media engagement. Technically, the site is built on WordPress with modern web technologies and integrates multimedia content effectively. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, supporting its credibility and trustworthiness.

W

World YWCA

worldywca.org

58

World YWCA is a globally recognized non-profit organization dedicated to empowering women, young women, and girls through grassroots leadership and advocacy. It holds a strong market position as the largest organization of its kind, engaging millions annually. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple engagement channels including donations, membership, and events. Technically, the site is built on WordPress with modern frameworks and integrates analytics and translation services, indicating a well-maintained infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates high professionalism and trustworthiness, supported by certifications and clear contact information.

Y

YMCA Europe

ymcaeurope.com

52

YMCA Europe is a well-established non-profit umbrella organization serving 36 national YMCA movements across Europe, impacting millions of beneficiaries through youth empowerment, community development, and advocacy programs. The website reflects a mature digital presence built on WordPress with modern plugins and SEO optimizations. Security posture is good with HTTPS and secure forms, though some security headers and explicit incident response policies are absent. The WHOIS data is missing or privacy protected, which slightly reduces trust but is mitigated by the organization's transparency and social media presence. Overall, the site is professional, content-rich, and trustworthy with room for security enhancements.

W

World YMCA

ymca.int

55

World YMCA is a globally recognized non-profit organization dedicated to empowering young people and communities to lead positive change. The website reflects a mature digital presence with a focus on youth-led initiatives, community wellbeing, and global partnerships. The organization leverages modern web technologies including WordPress, Yoast SEO, and GiveWP for donations, indicating a well-maintained infrastructure. Social media integration and multilingual support enhance its outreach capabilities. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security policies and headers could be improved. Privacy compliance is limited due to absence of visible privacy and cookie policies. Overall, the site is professional, trustworthy, and aligned with the organization's mission.

Cevi Schweiz is a Swiss non-profit organization dedicated to youth community engagement, education, and social projects. The website serves as an informational and resource platform for members and interested parties, offering details on events, courses, and donation opportunities. The organization holds a reputable position in the Swiss non-profit sector, supported by trust indicators such as ZEWO certification and active social media channels. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries for enhanced user experience. It is secured with HTTPS and employs a cookie consent mechanism compliant with GDPR standards. However, some security headers and detailed security policies are absent, representing areas for improvement. Overall, the site is professional, trustworthy, and well-structured, targeting youth and community members in Switzerland.

C

Cevi Region Basel

cevibasel.ch

49

Cevi Region Basel is a well-established Christian non-profit organization focused on children, youth, and adult community work in the Basel region of Switzerland. Founded in 1889, it offers a wide range of programs including youth camps, sports activities, educational courses, and community events. The organization maintains a strong regional presence with a professional website that effectively communicates its mission and services. The site is supported by certifications such as ZEWO, enhancing its trustworthiness. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Slider Revolution, and Google Analytics. It demonstrates good digital maturity with responsive design, SEO optimization, and integration of security features like HTTPS and Google reCAPTCHA. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and provides cookie consent mechanisms aligned with GDPR. However, it lacks explicit security policies and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a non-profit organization. Overall, Cevi Region Basel presents a low-risk profile with strong business credibility and compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen its digital presence and trust.

S

Schweizerische Gesellschaft für Ernährung SGE

sge-ssn.ch

80

The Schweizerische Gesellschaft für Ernährung SGE is a well-established Swiss non-profit organization focused on nutrition education, advocacy, and public health promotion. With a history spanning over 60 years, the organization provides comprehensive nutrition information, educational resources, events, and membership services targeting the general public and professionals interested in healthy eating. The website reflects a mature digital presence with multilingual support and a clear focus on user engagement through newsletters, publications, and an online shop. Technically, the website is built on WordPress with WooCommerce for e-commerce capabilities, leveraging modern frameworks like Bootstrap and jQuery. It integrates Mapbox for mapping and Matomo (Piwik) alongside Facebook Pixel for analytics and marketing tracking. The site is well-optimized for mobile devices and SEO, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements essential security headers. It employs a cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not present, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It serves its non-profit mission effectively while maintaining a secure and user-friendly online environment.

The website jungschar-gelterkinden.ch represents a small, community-focused non-profit youth organization named Cevi Gelterkinden, affiliated with the local church and regional Cevi Basel association. It offers regular youth activities for children from kindergarten through 7th grade, including games, crafts, and camps. The site content is well-structured and relevant to its target audience of children and their parents, with consistent branding and clear program information. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS, resulting in moderate performance and basic mobile optimization. Security posture is average, with no HTTPS or security headers explicitly detected in the provided data, and no forms or sensitive data collection present. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration aligns well with the website's community focus, indicating legitimacy and trustworthiness.

Q

Quickpage

quickpage.ch

44

Quickpage is a Swiss-based software provider offering subscription-based website solutions tailored for church communities and parishes. The platform enables event management, contact person administration, and content publishing with a focus on responsive design and ease of use for church staff. It holds a solid market position with over 100 church clients and partnerships with established church communication organizations. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA integration, though the absence of published privacy and cookie policies and security headers indicates room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and well-aligned with its target audience, but should enhance privacy compliance and security best practices to strengthen its risk profile.

L

liebesexundsoweiter

liebesexundsoweiter.ch

69

liebesexundsoweiter.ch is a Swiss non-profit organization website dedicated to sexual education and related social topics. The site provides educational content, workshops, and resources aimed at a general audience in Switzerland. The organization positions itself as a niche educational provider with a focus on youth and adult education in sexual health and social awareness. The website is built on the Umbraco CMS platform and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Hosting and development appear to be managed by Swiss-based OPTEN AG, ensuring regional compliance and performance. Security posture is strong with HTTPS enforced, appropriate security headers, and a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with detailed policies and user consent management. However, the site lacks explicit terms of service and a dedicated security or incident response policy. Overall, the website is professional, trustworthy, and suitable for its educational mission, with moderate technical maturity and good security hygiene.

I

Infodrog - Schweizerische Koordinations- und Fachstelle Sucht

suchtindex.ch

59

Infodrog is a Swiss non-profit organization serving as the national coordination and specialist office for addiction. The website provides comprehensive resources including a directory of addiction help facilities, information on addiction types and policies, publications, and links to online counseling. It targets individuals seeking addiction support and professionals in the addiction field, positioning itself as an authoritative source within Switzerland. Technically, the site is built on the Contao CMS platform, uses Matomo analytics configured for privacy, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and privacy-conscious analytics, though it lacks explicit security headers and a formal security policy. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and cookie consent mechanisms are recommended.

Take off is a Swiss non-profit organization operating a day structure and work integration program for youth who have dropped out of the education system. It is part of the Jugendsozialwerk Blaues Kreuz BL umbrella and has been active for approximately 25 years, serving the Pratteln region. The website presents a professional and consistent brand image, with clear contact details and certifications from recognized Swiss bodies, indicating a trustworthy and established social service provider. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Bootstrap, and is built on the webIQ 5.0 framework. It employs HTTPS with a good SSL configuration and integrates Google Analytics via Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile optimized and has a clear navigation structure, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit, but limits direct verification of domain ownership. Overall, the website is safe, professional, and credible with a moderate security posture. Strategic improvements in security headers, privacy disclosures, and accessibility would enhance trust and compliance.

AIP plus is a Swiss non-profit organization operating since 1996, focused on providing employment opportunities and integration support for job seekers, particularly those assigned by social insurance and employment agencies. The organization collaborates with local businesses to offer training and internships, aiming to facilitate entry into the first labor market. The website is professionally designed, content-rich, and provides clear contact information and partner links, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a cookie consent mechanism ensuring privacy compliance. Security posture is adequate with HTTPS enforced, though security headers are missing and could be improved. WHOIS data is privacy protected, typical for Swiss domains, but the website's content and certifications strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional platform.

Wohn- und Arbeitsintegration Bernhardsberg is a Swiss non-profit organization focused on providing housing and work integration services for adults with psychological impairments. It operates under the parent organization Jugendsozialwerk Blaues Kreuz BL and offers a range of social services including residential care, supported employment, and a bio-product manufactory. The website is professionally designed, content-rich, and targets a regional audience in Switzerland. It demonstrates strong trust signals such as certifications (ZEWO, SQS, dot.swiss), clear contact information, and a cookie consent mechanism. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, ensuring a good user experience and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response policies could enhance protection. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned in its social service niche.

Wohngemeinschaft Falkennest is a Swiss non-profit organization providing protected living spaces and social rehabilitation services for young adults aged 18 to 30 facing social difficulties. It operates under the oversight of the Basel-Landschaft canton government and is part of the Stiftung Jugendsozialwerk Blaues Kreuz BL. The website is professionally designed, content-rich, and targets clients, volunteers, and stakeholders in social services. Technically, the site uses a modern JavaScript stack with frameworks such as webIQ and Bootstrap, ensuring good mobile optimization and user experience. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the domain and website present a trustworthy and legitimate entity with strong Swiss social service credentials.